Hallo!

Ich habe heute unter meinen Programmen zufällig "Snap.do" (und damit auch "Snap.Do Engine") entdeckt und mein böser Verdacht hat sich bestätigt. Der Trojaner hat bisher noch keinen Einfluss auf meinen PC/Browser gehabt, jedenfalls konnte ich nichts bemerken; auch AVG meldete nichts. Dennoch soll er natürlich runter.

Unter Programme deinstallieren erhalte ich folgende Fehlermeldung:

The feature you are trying to use is on a network resource that is unavailable.
Click OK or enter an alternate path [...]

Bin natürlich den vorgegebenen Schritten gefolgt und habe folgende Logs ausgespuckt bekommen:

Defogger meldete sich nicht, aber ein Ergebnis von FRST habe ich.

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by Admin (administrator) on YVONNE_1 on 31-03-2014 23:19:38
Running from C:\Users\Yvonne\Desktop
Windows 8.1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\WINDOWS\system32\dashost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
(Microsoft Corporation) c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation) c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\skydrive.exe
(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDTouch.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\WINDOWS\system32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Spotify Ltd) C:\Users\Yvonne\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Intel Corporation) C:\WINDOWS\system32\igfxext.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) c:\Program Files (x86)\Nero\Update\NASvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\OFFICE11\WINWORD.EXE
(Microsoft Corporation) C:\WINDOWS\splwow64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2890640 2013-04-22] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13550152 2013-05-30] (Realtek Semiconductor)
HKLM-x32\...\Run: [BrMfcWnd] - C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe [1163264 2012-09-25] ()
HKLM-x32\...\Run: [ControlCenter3] - C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4971024 2014-03-19] (AVG Technologies CZ, s.r.o.)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] - C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [133248 2013-05-31] ( (Atheros Communications))
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-2226565400-3139004338-4228191873-1001\...\RunOnce: [WAB Migrate] - C:\Program Files\Windows Mail\wab.exe [516608 2013-08-22] (Microsoft Corporation)
HKU\S-1-5-21-2226565400-3139004338-4228191873-1002\...\Run: [Spotify Web Helper] - C:\Users\Yvonne\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1140736 2013-11-03] (Spotify Ltd)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [168616 2013-09-05] (NVIDIA Corporation)
AppInit_DLLs: ,C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [168616 2013-09-05] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [141336 2013-09-05] (NVIDIA Corporation)
Startup: C:\Users\Yvonne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\yvonn_000\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKLM - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKLM - {B71E0977-279D-4CC1-817F-56E17DF226C9} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
SearchScopes: HKCU - {B71E0977-279D-4CC1-817F-56E17DF226C9} URL = 
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} -  No File
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Chrome: 
=======
CHR Extension: (Google Docs) - C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-31]
CHR Extension: (Google Drive) - C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-31]
CHR Extension: (YouTube) - C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-03-31]
CHR Extension: (Google-Suche) - C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-31]
CHR Extension: (Google Wallet) - C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-03-31]
CHR Extension: (Google Mail) - C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-31]

==================== Services (Whitelisted) =================

R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [310912 2013-05-31] (Windows (R) Win 7 DDK provider)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3782672 2014-02-23] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe [2615368 2013-02-27] (Acer Incorporated)
S3 DeviceFastLaneService; C:\Program Files\Acer\Acer Device Fast-lane\DeviceFastLaneSvc.exe [470056 2013-04-30] (Acer Incorporated)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [662088 2013-03-15] (Acer Incorporated)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [803872 2012-12-10] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165336 2013-01-14] (Intel Corporation)
R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [431656 2013-06-17] (Acer Incorporate)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [348392 2013-10-31] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2013-10-31] (Microsoft Corporation)
S2 vToolbarUpdater18.0.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.0.0\ToolbarUpdater.exe [X]

==================== Drivers (Whitelisted) ====================

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
S0 Avgboota; C:\Windows\System32\DRIVERS\avgboota.sys [20496 2013-09-04] (AVG Technologies CZ, s.r.o.)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [150808 2013-11-25] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [243480 2013-11-25] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [196376 2013-11-25] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-11-01] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-10-01] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31544 2013-09-10] (AVG Technologies CZ, s.r.o.)
R1 avgtp; C:\WINDOWS\system32\drivers\avgtpx64.sys [50976 2014-03-02] (AVG Technologies)
R1 Avgwfpa; C:\Windows\system32\DRIVERS\avgwfpa.sys [252728 2013-10-21] (AVG Technologies CZ, s.r.o.)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-05-31] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-01-10] (Acer Incorporated)
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [15704 2013-01-10] (Acer Incorporated)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation)
S3 ssudserd; C:\Windows\system32\DRIVERS\ssudserd.sys [204568 2013-10-28] (DEVGURU Co., LTD.(www.devguru.co.kr))
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124760 2013-10-31] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-31 23:19 - 2014-03-31 23:19 - 00013839 _____ () C:\Users\Yvonne\Desktop\FRST.txt
2014-03-31 23:19 - 2014-03-31 23:19 - 00000000 ____D () C:\FRST
2014-03-31 23:18 - 2014-03-31 23:18 - 02157056 _____ (Farbar) C:\Users\Yvonne\Desktop\FRST64.exe
2014-03-31 23:17 - 2014-03-31 23:17 - 00000472 _____ () C:\Users\Yvonne\Downloads\defogger_disable.log
2014-03-31 23:17 - 2014-03-31 23:17 - 00000000 _____ () C:\Users\Yvonne\defogger_reenable
2014-03-31 23:16 - 2014-03-31 23:16 - 00050477 _____ () C:\Users\Yvonne\Downloads\Defogger.exe
2014-03-31 22:20 - 2014-03-31 23:08 - 00388325 _____ () C:\WINDOWS\WindowsUpdate.log
2014-03-31 22:12 - 2014-03-31 22:12 - 01950720 _____ () C:\Users\Yvonne\Downloads\adwcleaner.exe
2014-03-31 22:04 - 2014-03-31 22:04 - 04787368 _____ (Piriform Ltd) C:\Users\Yvonne\Downloads\ccsetup412.exe
2014-03-31 21:30 - 2014-03-31 21:30 - 00002039 _____ () C:\Users\Public\Desktop\Brother Utilities.lnk
2014-03-31 21:26 - 2014-03-31 21:26 - 00000000 ____D () C:\Users\Yvonne\Downloads\mflpro
2014-03-31 21:19 - 2014-03-31 21:22 - 44735552 _____ (A.I.SOFT,INC.) C:\Users\Yvonne\Downloads\DCP-7030-inst-win8-A1.EXE
2014-03-31 21:16 - 2014-03-31 21:16 - 00000000 ____D () C:\Users\yvonn_000\Downloads\mflpro
2014-03-31 21:12 - 2014-03-31 21:15 - 44735552 _____ (A.I.SOFT,INC.) C:\Users\yvonn_000\Downloads\DCP-7030-inst-win8-A1.EXE
2014-03-30 15:16 - 2014-03-30 15:18 - 34763504 _____ (DVDVideoSoft Ltd. ) C:\Users\yvonn_000\Downloads\FreeYouTubeToMP3Converter.exe
2014-03-29 18:21 - 2014-03-29 18:21 - 00000000 ____D () C:\Users\yvonn_000\AppData\Roaming\OpenOffice
2014-03-29 18:19 - 2014-03-29 18:19 - 00001132 _____ () C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk
2014-03-29 18:19 - 2014-03-29 18:19 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-03-29 18:18 - 2014-03-29 18:18 - 00000000 ____D () C:\Users\Yvonne\Desktop\OpenOffice 4.0.1 (de) Installation Files
2014-03-29 17:57 - 2014-03-29 18:09 - 163606685 _____ () C:\Users\yvonn_000\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de.exe
2014-03-28 00:51 - 2014-03-28 00:51 - 00139773 _____ () C:\Users\yvonn_000\Downloads\9B4A.tmp
2014-03-17 20:45 - 2014-03-17 20:45 - 00847832 _____ (Google Inc.) C:\Users\yvonn_000\Downloads\GoogleEarthPluginSetup.exe
2014-03-17 01:45 - 2014-03-17 01:45 - 00000618 _____ () C:\Users\yvonn_000\Desktop\JRT.txt
2014-03-17 00:57 - 2014-03-17 00:57 - 00000000 ____D () C:\Users\yvonn_000\AppData\Roaming\Malwarebytes
2014-03-15 18:24 - 2014-03-15 18:24 - 00001925 _____ () C:\Users\Public\Desktop\HitmanPro.lnk
2014-03-15 18:24 - 2014-03-15 18:24 - 00000000 ____D () C:\Program Files\HitmanPro
2014-03-15 18:22 - 2014-03-15 18:35 - 00000000 ____D () C:\ProgramData\HitmanPro
2014-03-15 18:21 - 2014-03-15 18:22 - 09988304 _____ (SurfRight B.V.) C:\Users\yvonn_000\Downloads\HitmanPro.exe
2014-03-15 18:12 - 2014-03-15 18:12 - 00000000 ____D () C:\Users\Yvonne\AppData\Roaming\Malwarebytes
2014-03-15 18:12 - 2014-03-15 18:12 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-15 18:10 - 2014-03-15 18:11 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\yvonn_000\Downloads\mbam-setup-1.75.0.1300.exe
2014-03-15 17:58 - 2014-03-15 17:58 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-03-15 17:57 - 2014-03-15 17:57 - 01037734 _____ (Thisisu) C:\Users\yvonn_000\Downloads\JRT.exe
2014-03-15 17:41 - 2014-03-31 22:19 - 00000000 ____D () C:\AdwCleaner
2014-03-15 17:41 - 2014-03-15 17:41 - 01950720 _____ () C:\Users\yvonn_000\Downloads\adwcleaner.exe
2014-03-15 17:27 - 2014-03-31 22:23 - 00002159 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-03-15 17:24 - 2014-03-31 22:34 - 00001126 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-15 17:24 - 2014-03-31 22:21 - 00001122 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-15 17:24 - 2014-03-30 23:29 - 00004098 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2014-03-15 17:24 - 2014-03-30 23:29 - 00003862 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2014-03-15 17:24 - 2014-03-15 17:24 - 00000000 ____D () C:\Users\yvonn_000\AppData\Local\Deployment
2014-03-12 17:23 - 2014-03-12 17:23 - 00000000 ____D () C:\Users\Default\AppData\Roaming\TuneUp Software
2014-03-12 17:23 - 2014-03-12 17:23 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\TuneUp Software
2014-03-11 23:52 - 2014-03-11 23:52 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-11 23:52 - 2014-03-11 23:52 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-11 23:51 - 2014-01-31 18:15 - 00311640 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2014-03-11 23:51 - 2014-01-31 18:07 - 00233920 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2014-03-11 23:51 - 2014-01-31 18:06 - 02133208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-03-11 23:51 - 2014-01-31 15:47 - 02143960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-03-11 23:51 - 2014-01-31 11:06 - 00716288 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll
2014-03-11 23:51 - 2014-01-29 11:55 - 01287064 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2014-03-11 23:51 - 2014-01-29 10:53 - 00458616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2014-03-11 23:51 - 2014-01-29 10:53 - 00407024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2014-03-11 23:51 - 2014-01-29 10:49 - 01928144 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2014-03-11 23:51 - 2014-01-29 10:47 - 02543960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-03-11 23:51 - 2014-01-29 09:44 - 01371824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2014-03-11 23:51 - 2014-01-29 09:44 - 00408480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2014-03-11 23:51 - 2014-01-29 09:44 - 00369280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2014-03-11 23:51 - 2014-01-29 08:41 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2014-03-11 23:51 - 2014-01-29 02:36 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2014-03-11 23:51 - 2014-01-27 21:07 - 04175360 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2014-03-11 23:51 - 2014-01-27 21:06 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2014-03-11 23:51 - 2014-01-27 21:04 - 00160256 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2014-03-11 23:51 - 2014-01-27 20:52 - 01036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2014-03-11 23:51 - 2014-01-27 20:23 - 02873344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2014-03-11 23:51 - 2014-01-27 20:21 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2014-03-11 23:51 - 2014-01-27 20:20 - 00138752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE
2014-03-11 23:51 - 2014-01-27 20:15 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-03-11 23:51 - 2014-01-27 19:43 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll
2014-03-11 23:51 - 2014-01-27 19:18 - 01486848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbghelp.dll
2014-03-11 23:51 - 2014-01-27 19:00 - 01238016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbghelp.dll
2014-03-11 23:51 - 2014-01-27 17:58 - 05770752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-03-11 23:51 - 2014-01-27 17:50 - 06640640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-03-11 23:51 - 2014-01-27 13:45 - 00386722 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-03-11 23:51 - 2014-01-18 01:04 - 00764864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-03-11 23:51 - 2014-01-17 23:54 - 00669352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2014-03-11 23:51 - 2013-12-21 16:51 - 06353960 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2014-03-11 23:51 - 2013-12-21 10:54 - 00447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcomapi.dll
2014-03-11 23:42 - 2014-02-11 05:04 - 04189184 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-03-11 23:36 - 2014-03-01 08:05 - 23133696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-03-11 23:36 - 2014-03-01 06:58 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-03-11 23:36 - 2014-03-01 06:30 - 17074688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-03-11 23:36 - 2014-03-01 06:17 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-03-11 23:36 - 2014-03-01 05:54 - 05768704 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-03-11 23:36 - 2014-03-01 05:47 - 02168320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-03-11 23:36 - 2014-03-01 05:42 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-03-11 23:36 - 2014-03-01 05:18 - 13051904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-03-11 23:36 - 2014-03-01 05:14 - 04244480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-03-11 23:36 - 2014-03-01 05:10 - 02334208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-03-11 23:36 - 2014-03-01 05:03 - 00524288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-03-11 23:36 - 2014-03-01 04:57 - 11266048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-03-11 23:36 - 2014-03-01 04:38 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-03-11 23:36 - 2014-03-01 04:32 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-03-11 23:36 - 2014-03-01 04:27 - 01156096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-03-11 23:36 - 2014-03-01 04:25 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-03-11 23:36 - 2014-03-01 04:25 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-03-11 23:34 - 2014-02-22 14:16 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2014-03-11 23:34 - 2014-02-22 13:24 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2014-03-11 23:34 - 2014-02-11 04:43 - 00488448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2014-03-11 23:34 - 2014-02-11 04:04 - 00586240 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2014-03-11 23:34 - 2013-12-20 12:18 - 01643584 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2014-03-11 23:34 - 2013-12-20 12:18 - 01507704 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2014-03-11 23:34 - 2013-10-31 02:29 - 00236888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2014-03-11 23:34 - 2013-10-31 02:29 - 00124760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2014-03-11 23:34 - 2013-10-31 02:28 - 00035856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2014-03-11 00:02 - 2014-03-11 00:02 - 00000244 _____ () C:\Users\yvonn_000\medcd.ini
2014-03-11 00:02 - 2004-11-11 10:54 - 00008682 ____N () C:\Users\yvonn_000\overlay.ini
2014-03-11 00:02 - 2004-11-03 11:34 - 00000000 ____N () C:\Users\yvonn_000\vorlagen.ini
2014-03-08 15:48 - 2014-01-08 03:46 - 00325464 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2014-03-08 15:48 - 2014-01-08 03:41 - 01530712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-03-08 15:48 - 2014-01-08 03:41 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2014-03-08 15:48 - 2014-01-04 17:54 - 00138240 _____ () C:\WINDOWS\system32\OEMLicense.dll
2014-03-08 15:48 - 2014-01-04 17:08 - 00103936 _____ () C:\WINDOWS\SysWOW64\OEMLicense.dll
2014-03-08 15:48 - 2014-01-04 16:08 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll
2014-03-08 15:48 - 2014-01-04 15:53 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll
2014-03-08 15:48 - 2014-01-03 01:54 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2014-03-08 15:48 - 2014-01-03 01:48 - 00336896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2014-03-08 15:48 - 2014-01-01 03:55 - 01720560 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2014-03-08 15:48 - 2014-01-01 03:52 - 00481944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-03-08 15:48 - 2014-01-01 02:56 - 01472048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2014-03-08 15:48 - 2014-01-01 02:55 - 00381168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2014-03-08 15:48 - 2014-01-01 01:59 - 00802816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-03-08 15:48 - 2014-01-01 01:57 - 01214976 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2014-03-08 15:48 - 2014-01-01 01:56 - 00960512 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-03-08 15:48 - 2013-12-31 01:34 - 00218112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sti.dll
2014-03-08 15:48 - 2013-12-31 01:33 - 00770560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2014-03-08 15:48 - 2013-12-31 01:32 - 00303616 _____ (Microsoft Corporation) C:\WINDOWS\system32\sti.dll
2014-03-08 15:48 - 2013-12-31 01:31 - 00947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2014-03-08 15:48 - 2013-12-31 01:31 - 00914944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2014-03-08 15:48 - 2013-12-27 17:09 - 00419160 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2014-03-08 15:48 - 2013-12-27 10:57 - 00842752 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingFacility.dll
2014-03-08 15:48 - 2013-12-27 10:57 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2014-03-08 15:48 - 2013-12-27 10:23 - 00749056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2014-03-08 15:48 - 2013-12-27 09:03 - 00630272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsSpellCheckingFacility.dll
2014-03-08 15:48 - 2013-12-27 09:03 - 00478208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2014-03-08 15:48 - 2013-12-27 08:37 - 00588800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2014-03-08 15:48 - 2013-12-21 09:21 - 00376320 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnrpsvc.dll
2014-03-08 15:48 - 2013-12-17 09:21 - 00408576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2014-03-08 15:48 - 2013-12-14 08:31 - 13949440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-03-08 15:48 - 2013-12-14 08:19 - 18576384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-03-08 15:48 - 2013-12-13 12:54 - 00131160 _____ (Microsoft Corporation) C:\WINDOWS\system32\easinvoker.exe
2014-03-08 15:48 - 2013-12-13 08:36 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll
2014-03-08 15:48 - 2013-12-13 07:32 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\easwrt.dll
2014-03-08 15:48 - 2013-12-09 10:05 - 21199256 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-03-08 15:48 - 2013-12-09 06:51 - 18643560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-03-04 03:27 - 2014-03-04 03:49 - 289003621 _____ () C:\Users\yvonn_000\Downloads\wetransfer-74de4e.zip

==================== One Month Modified Files and Folders =======

2014-03-31 23:19 - 2014-03-31 23:19 - 00013839 _____ () C:\Users\Yvonne\Desktop\FRST.txt
2014-03-31 23:19 - 2014-03-31 23:19 - 00000000 ____D () C:\FRST
2014-03-31 23:18 - 2014-03-31 23:18 - 02157056 _____ (Farbar) C:\Users\Yvonne\Desktop\FRST64.exe
2014-03-31 23:17 - 2014-03-31 23:17 - 00000472 _____ () C:\Users\Yvonne\Downloads\defogger_disable.log
2014-03-31 23:17 - 2014-03-31 23:17 - 00000000 _____ () C:\Users\Yvonne\defogger_reenable
2014-03-31 23:17 - 2013-11-04 04:24 - 00000000 ____D () C:\Users\Yvonne
2014-03-31 23:16 - 2014-03-31 23:16 - 00050477 _____ () C:\Users\Yvonne\Downloads\Defogger.exe
2014-03-31 23:08 - 2014-03-31 22:20 - 00388325 _____ () C:\WINDOWS\WindowsUpdate.log
2014-03-31 23:03 - 2013-11-02 20:03 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2226565400-3139004338-4228191873-1002
2014-03-31 23:02 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-03-31 22:58 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-03-31 22:48 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\LiveKernelReports
2014-03-31 22:34 - 2014-03-15 17:24 - 00001126 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-31 22:25 - 2013-09-30 06:14 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-03-31 22:25 - 2013-09-30 05:56 - 00765582 _____ () C:\WINDOWS\system32\perfh007.dat
2014-03-31 22:25 - 2013-09-30 05:56 - 00159366 _____ () C:\WINDOWS\system32\perfc007.dat
2014-03-31 22:23 - 2014-03-15 17:27 - 00002159 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-03-31 22:23 - 2013-11-02 23:43 - 00000000 ____D () C:\Program Files (x86)\Google
2014-03-31 22:21 - 2014-03-15 17:24 - 00001122 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-31 22:21 - 2013-11-04 14:35 - 00000000 __RDO () C:\Users\Yvonne\SkyDrive
2014-03-31 22:20 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-03-31 22:19 - 2014-03-15 17:41 - 00000000 ____D () C:\AdwCleaner
2014-03-31 22:19 - 2013-08-22 15:25 - 01048576 ___SH () C:\WINDOWS\system32\config\BBI
2014-03-31 22:12 - 2014-03-31 22:12 - 01950720 _____ () C:\Users\Yvonne\Downloads\adwcleaner.exe
2014-03-31 22:05 - 2014-01-13 00:14 - 00000000 ____D () C:\WINDOWS\Minidump
2014-03-31 22:04 - 2014-03-31 22:04 - 04787368 _____ (Piriform Ltd) C:\Users\Yvonne\Downloads\ccsetup412.exe
2014-03-31 22:04 - 2013-11-03 17:09 - 00000838 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-03-31 22:04 - 2013-11-03 17:09 - 00000000 ____D () C:\Program Files\CCleaner
2014-03-31 21:36 - 2013-11-11 00:37 - 00003930 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{7309CF47-AB66-47C1-9245-9B49FCF00E1C}
2014-03-31 21:30 - 2014-03-31 21:30 - 00002039 _____ () C:\Users\Public\Desktop\Brother Utilities.lnk
2014-03-31 21:30 - 2013-11-11 00:27 - 00000050 _____ () C:\WINDOWS\system32\bd7030.dat
2014-03-31 21:29 - 2013-11-11 00:23 - 00000000 ____D () C:\Program Files (x86)\Brother
2014-03-31 21:26 - 2014-03-31 21:26 - 00000000 ____D () C:\Users\Yvonne\Downloads\mflpro
2014-03-31 21:23 - 2013-11-02 23:44 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2226565400-3139004338-4228191873-1006
2014-03-31 21:22 - 2014-03-31 21:19 - 44735552 _____ (A.I.SOFT,INC.) C:\Users\Yvonne\Downloads\DCP-7030-inst-win8-A1.EXE
2014-03-31 21:18 - 2013-11-02 23:43 - 00000000 ____D () C:\Users\Yvonne\AppData\Local\Google
2014-03-31 21:17 - 2013-11-02 19:57 - 00000000 ___RD () C:\Users\Yvonne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-31 21:17 - 2013-11-02 19:57 - 00000000 ___RD () C:\Users\Yvonne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-03-31 21:16 - 2014-03-31 21:16 - 00000000 ____D () C:\Users\yvonn_000\Downloads\mflpro
2014-03-31 21:15 - 2014-03-31 21:12 - 44735552 _____ (A.I.SOFT,INC.) C:\Users\yvonn_000\Downloads\DCP-7030-inst-win8-A1.EXE
2014-03-31 20:55 - 2014-01-05 23:20 - 00000000 ____D () C:\ProgramData\MFAData
2014-03-31 16:39 - 2014-01-05 23:30 - 00000961 _____ () C:\Users\Public\Desktop\AVG 2014.lnk
2014-03-31 16:38 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-03-31 16:36 - 2013-11-05 18:01 - 00003946 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{D90E8785-4B32-4992-B33B-F2E9767E07D0}
2014-03-31 16:35 - 2013-11-04 14:40 - 00000000 __RDO () C:\Users\yvonn_000\SkyDrive
2014-03-30 23:29 - 2014-03-15 17:24 - 00004098 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2014-03-30 23:29 - 2014-03-15 17:24 - 00003862 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2014-03-30 22:29 - 2013-11-18 17:51 - 00083128 _____ () C:\Users\yvonn_000\AppData\Local\GDIPFONTCACHEV1.DAT
2014-03-30 15:18 - 2014-03-30 15:16 - 34763504 _____ (DVDVideoSoft Ltd. ) C:\Users\yvonn_000\Downloads\FreeYouTubeToMP3Converter.exe
2014-03-30 02:31 - 2013-08-22 16:44 - 00383448 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-03-29 18:21 - 2014-03-29 18:21 - 00000000 ____D () C:\Users\yvonn_000\AppData\Roaming\OpenOffice
2014-03-29 18:19 - 2014-03-29 18:19 - 00001132 _____ () C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk
2014-03-29 18:19 - 2014-03-29 18:19 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-03-29 18:18 - 2014-03-29 18:18 - 00000000 ____D () C:\Users\Yvonne\Desktop\OpenOffice 4.0.1 (de) Installation Files
2014-03-29 18:09 - 2014-03-29 17:57 - 163606685 _____ () C:\Users\yvonn_000\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de.exe
2014-03-28 00:51 - 2014-03-28 00:51 - 00139773 _____ () C:\Users\yvonn_000\Downloads\9B4A.tmp
2014-03-25 22:33 - 2013-11-02 23:45 - 00000000 ____D () C:\Users\yvonn_000\AppData\Roaming\Spotify
2014-03-24 22:05 - 2013-11-02 23:45 - 00000000 ____D () C:\Users\yvonn_000\AppData\Local\Spotify
2014-03-17 20:45 - 2014-03-17 20:45 - 00847832 _____ (Google Inc.) C:\Users\yvonn_000\Downloads\GoogleEarthPluginSetup.exe
2014-03-17 01:45 - 2014-03-17 01:45 - 00000618 _____ () C:\Users\yvonn_000\Desktop\JRT.txt
2014-03-17 00:59 - 2014-02-17 01:39 - 00060928 ___SH () C:\Users\yvonn_000\Downloads\Thumbs.db
2014-03-17 00:57 - 2014-03-17 00:57 - 00000000 ____D () C:\Users\yvonn_000\AppData\Roaming\Malwarebytes
2014-03-15 22:19 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-03-15 18:35 - 2014-03-15 18:22 - 00000000 ____D () C:\ProgramData\HitmanPro
2014-03-15 18:24 - 2014-03-15 18:24 - 00001925 _____ () C:\Users\Public\Desktop\HitmanPro.lnk
2014-03-15 18:24 - 2014-03-15 18:24 - 00000000 ____D () C:\Program Files\HitmanPro
2014-03-15 18:22 - 2014-03-15 18:21 - 09988304 _____ (SurfRight B.V.) C:\Users\yvonn_000\Downloads\HitmanPro.exe
2014-03-15 18:12 - 2014-03-15 18:12 - 00000000 ____D () C:\Users\Yvonne\AppData\Roaming\Malwarebytes
2014-03-15 18:12 - 2014-03-15 18:12 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-15 18:11 - 2014-03-15 18:10 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\yvonn_000\Downloads\mbam-setup-1.75.0.1300.exe
2014-03-15 18:00 - 2013-11-02 23:35 - 00000000 ____D () C:\Users\yvonn_000\AppData\Local\Packages
2014-03-15 17:58 - 2014-03-15 17:58 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-03-15 17:57 - 2014-03-15 17:57 - 01037734 _____ (Thisisu) C:\Users\yvonn_000\Downloads\JRT.exe
2014-03-15 17:50 - 2013-11-04 14:32 - 00001025 _____ () C:\Users\Yvonne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-03-15 17:41 - 2014-03-15 17:41 - 01950720 _____ () C:\Users\yvonn_000\Downloads\adwcleaner.exe
2014-03-15 17:24 - 2014-03-15 17:24 - 00000000 ____D () C:\Users\yvonn_000\AppData\Local\Deployment
2014-03-15 17:15 - 2013-06-04 06:26 - 00000000 ____D () C:\Program Files (x86)\WildTangent Games
2014-03-15 17:14 - 2013-06-04 06:26 - 00000000 ____D () C:\ProgramData\WildTangent
2014-03-13 20:36 - 2013-11-11 00:54 - 00000432 _____ () C:\WINDOWS\BRWMARK.INI
2014-03-13 20:35 - 2013-11-11 00:54 - 00000034 _____ () C:\WINDOWS\SysWOW64\BD7030.DAT
2014-03-12 17:23 - 2014-03-12 17:23 - 00000000 ____D () C:\Users\Default\AppData\Roaming\TuneUp Software
2014-03-12 17:23 - 2014-03-12 17:23 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\TuneUp Software
2014-03-12 17:14 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-03-12 17:14 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-03-12 17:14 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-03-12 17:14 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-03-11 23:56 - 2013-11-02 21:51 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-03-11 23:54 - 2013-11-02 21:51 - 90015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-03-11 23:52 - 2014-03-11 23:52 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-11 23:52 - 2014-03-11 23:52 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-11 00:02 - 2014-03-11 00:02 - 00000244 _____ () C:\Users\yvonn_000\medcd.ini
2014-03-11 00:02 - 2013-11-04 04:24 - 00000000 ____D () C:\Users\yvonn_000
2014-03-08 20:04 - 2013-11-02 23:36 - 00000000 ___RD () C:\Users\yvonn_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-08 20:04 - 2013-11-02 23:36 - 00000000 ___RD () C:\Users\yvonn_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-03-08 20:01 - 2014-01-12 23:11 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV
2014-03-08 20:01 - 2014-01-12 23:11 - 00000000 ____D () C:\WINDOWS\system32\NV
2014-03-08 19:59 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-03-05 00:53 - 2013-08-22 17:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-03-05 00:53 - 2013-08-22 17:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-04 03:49 - 2014-03-04 03:27 - 289003621 _____ () C:\Users\yvonn_000\Downloads\wetransfer-74de4e.zip
2014-03-02 20:22 - 2014-01-09 20:27 - 00050976 _____ (AVG Technologies) C:\WINDOWS\system32\Drivers\avgtpx64.sys
2014-03-01 08:05 - 2014-03-11 23:36 - 23133696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-03-01 06:58 - 2014-03-11 23:36 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-03-01 06:30 - 2014-03-11 23:36 - 17074688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-03-01 06:17 - 2014-03-11 23:36 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-03-01 05:54 - 2014-03-11 23:36 - 05768704 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-03-01 05:47 - 2014-03-11 23:36 - 02168320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-03-01 05:42 - 2014-03-11 23:36 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-03-01 05:18 - 2014-03-11 23:36 - 13051904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-03-01 05:14 - 2014-03-11 23:36 - 04244480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-03-01 05:10 - 2014-03-11 23:36 - 02334208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-03-01 05:03 - 2014-03-11 23:36 - 00524288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-03-01 04:57 - 2014-03-11 23:36 - 11266048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-03-01 04:38 - 2014-03-11 23:36 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-03-01 04:32 - 2014-03-11 23:36 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-03-01 04:27 - 2014-03-11 23:36 - 01156096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-03-01 04:25 - 2014-03-11 23:36 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-03-01 04:25 - 2014-03-11 23:36 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll

Some content of TEMP:
====================
C:\Users\Yvonne\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys
[2014-03-11 23:51] - [2014-01-31 18:15] - 0311640 ___AC (Microsoft Corporation) C85C075DE5B6D0FE116043054DE8EE02



LastRegBack: 2014-03-28 20:20

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by Admin at 2014-03-31 23:20:13
Running from C:\Users\Yvonne\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}

==================== Installed Programs ======================

 clear.fi SDK - Video 2 (x32 Version: 2.1.2606 - CyberLink Corp.) Hidden
 clear.fi SDK- Movie 2 (x32 Version: 2.1.2606 - CyberLink Corp.) Hidden
 DCP-7030 (HKLM-x32\...\{46E1B1F2-A279-4356-9B17-029F9CC72EAE}) (Version: 2.0.0.0 - Brother Industries, Ltd.)
Acer Device Fast-lane (HKLM\...\{3F62D2FD-13C1-49A2-8B5D-47623D9460D7}) (Version: 1.00.3013 - Acer Incorporated)
Acer Games (HKCU\...\Pokki_03d432a7e610c3e908213e7689d4342ce2111caf) (Version: 1.1.7.42206 - Pokki)
Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.3005 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.3013 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.3016 - Acer Incorporated)
AcerCloud Docs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.01.2008 - Acer Incorporated)
AcerCloud Portal (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 2.02.2022 - Acer Incorporated)
AVG 2014 (HKLM\...\AVG) (Version: 2014.0.4355 - AVG Technologies)
AVG 2014 (Version: 14.0.3722 - AVG Technologies) Hidden
AVG 2014 (Version: 14.0.4355 - AVG Technologies) Hidden
Broadcom Card Reader Driver Installer (HKLM\...\{67AA948F-8D83-4566-B84A-7CAABCF64E3F}) (Version: 16.0.2.6 - Broadcom Corporation)
Broadcom NetLink Controller (HKLM\...\{D1D7ED66-5C08-40A0-AEC0-B6DF977697BB}) (Version: 16.0.2.4 - Broadcom Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 4.12 - Piriform)
clear.fi Media (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.02.2012 - Acer Incorporated)
clear.fi Photo (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 2.02.2016 - Acer Incorporated)
Compatibility Pack für 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Dropbox (HKCU\...\Dropbox) (Version: 2.6.7 - Dropbox, Inc.)
ETDWare PS/2-X64 11.6.23.203_WHQL (HKLM\...\Elantech) (Version: 11.6.23.203 - ELAN Microelectronic Corp.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 33.0.1750.154 - Google Inc.)
Google Update Helper (x32 Version: 1.3.23.9 - Google Inc.) Hidden
HitmanPro 3.7 (HKLM\...\HitmanPro37) (Version: 3.7.9.216 - SurfRight B.V.)
Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.3006 - Acer Incorporated)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.30.1349 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3412 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.4.1001 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.27.757.1 - Intel Corporation) Hidden
Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.3010 - Acer Incorporated)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Standard Edition 2003 (HKLM-x32\...\{91120407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2005 Tools for Office Runtime (x32 Version: 8.0.60940.0 - Microsoft Corporation) Hidden
Microsoft-Maus- und Tastatur-Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.2.173.0 - Microsoft Corporation)
Microsoft-Maus- und Tastatur-Center (Version: 2.2.173.0 - Microsoft Corporation) Hidden
Nero BackItUp (x32 Version: 12.5.5000 - Nero AG) Hidden
Nero BackItUp 12 Essentials OEM.a01 (HKLM-x32\...\{4CA8F973-6377-4ABF-9ED5-CC2323B3C000}) (Version: 12.5.00500 - Nero AG)
Nero BackItUp Help (CHM) (x32 Version: 12.0.10000 - Nero AG) Hidden
Nero ControlCenter (x32 Version: 11.0.15600 - Nero AG) Hidden
Nero ControlCenter Help (CHM) (x32 Version: 12.0.7000 - Nero AG) Hidden
Nero Core Components (x32 Version: 11.0.20200 - Nero AG) Hidden
Nero Launcher (x32 Version: 12.2.7000 - Nero AG) Hidden
Nero RescueAgent (x32 Version: 12.0.3001 - Nero AG) Hidden
Nero RescueAgent Help (CHM) (x32 Version: 12.0.7000 - Nero AG) Hidden
Nero Update (x32 Version: 11.0.11800.31.0 - Nero AG) Hidden
NVIDIA Grafiktreiber 327.02 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.02 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.133.889 - NVIDIA Corporation) Hidden
NVIDIA Optimus 1.14.17 (Version: 1.14.17 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.12.1031 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.12.1031 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.1031 - NVIDIA Corporation)
NVIDIA Systemsteuerung 327.02 (Version: 327.02 - NVIDIA Corporation) Hidden
NVIDIA Update 1.14.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.14.17 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.14.17 - NVIDIA Corporation) Hidden
Office Addin (HKLM-x32\...\{6D2BBE1D-E600-4695-BA37-0B0E605542CC}) (Version: 2.02.2008 - Acer)
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.228 - Qualcomm Atheros Communications)
Qualcomm Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 11.57 - Qualcomm Atheros)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6927 - Realtek Semiconductor Corp.)
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Snap.Do (HKLM-x32\...\{92109C97-2662-4353-9386-B64309F595C9}) (Version: 11.8.1.13233 - ReSoft Ltd.) <==== ATTENTION
Snap.Do Engine (HKCU\...\{63f52852-583d-43e7-93fe-56819f60e7fc}) (Version: 11.8.1.13233 - ReSoft Ltd.) <==== ATTENTION
Spotify (HKLM-x32\...\Spotify) (Version: 0.8.4.99.ga249b5f1 - Spotify AB)
Visual Studio 2005 Tools for Office Second Edition Runtime (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Office Runtime) (Version:  - Microsoft Corporation)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
Visual Studio Tools for the Office system 3.0 Runtime (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version:  - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime (x32 Version: 9.0.30729 - Microsoft Corporation) Hidden
Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation)

==================== Restore Points  =========================

11-03-2014 21:51:26 Windows Update
21-03-2014 19:02:39 Geplanter Prüfpunkt
28-03-2014 19:16:26 Geplanter Prüfpunkt
31-03-2014 19:28:04 Installiert MFL-Pro Suite

==================== Hosts content: ==========================

2013-08-22 15:25 - 2014-03-17 01:17 - 00001070 ____A C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1 hxxp://myvideo.ivwbox.de
127.0.0.1 hxxp://yahoo.ivwbox.de
127.0.0.1 hxxp://facebook.ivwbox.de
127.0.0.1 hxxp://youtube.ivwbox.de
127.0.0.1 hxxp://chefkoch.ivwbox.de
127.0.0.1 hxxp://pro7.ivwbox.de
127.0.0.1 hxxp://sat1.ivwbox.de


==================== Scheduled Tasks (whitelisted) =============

Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {07BD461F-A862-4EE8-BE99-8B8DEBBBE136} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {39BA9889-2FD7-46AA-92A2-1C02FDC229DC} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-03-15] (Google Inc.)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {7102717A-B900-4271-8C2C-AF3A11DA13B1} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2013-01-22] ()
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {A6E8DC38-71C5-4C86-B40D-F18BA2520CB3} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)
Task: {AC48D7AF-AA09-4D13-B0CB-A439FBCA2FC1} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation)
Task: {AEEE6356-E35F-46D3-87C4-BF1E604E3C34} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2013-05-13] (Microsoft)
Task: {BFE0E547-583B-4E77-A26A-1EC996113790} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-03-15] (Google Inc.)
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {E0D5FC77-44D3-491F-8A61-08E95D37D34C} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTray.exe [2013-03-15] (Acer Incorporated)
Task: {E656C6B7-EB7A-409E-B852-23EE06A5C659} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-03-18] (Piriform Ltd)
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: {E70FFE47-7B19-44B4-848D-A6C018C4192C} - \RegClean Pro No Task File
Task: {F0886613-882E-4F7A-8602-504F882EEBAA} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation)
Task: {F0F63771-0306-4BB1-8D34-78878EEAD8AF} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2013-06-17] (Acer Incorporate)
Task: {F1A11905-6598-43BD-A89C-E8CF4CF5F986} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2013-03-13] ()
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-09-05 03:36 - 2013-09-05 03:36 - 00013088 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll
2013-05-31 01:23 - 2013-05-31 01:23 - 00011264 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2013-05-31 01:19 - 2013-05-31 01:19 - 00086016 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\Map\MAP.dll
2013-05-31 01:53 - 2013-05-31 01:53 - 00012928 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
2013-10-04 00:42 - 2013-10-04 00:42 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2013-09-06 05:51 - 2013-01-14 20:25 - 01200088 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2014-03-15 17:27 - 2014-03-15 02:50 - 00051016 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\chrome_elf.dll
2013-09-06 06:25 - 2013-02-20 22:58 - 00089672 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\Clearfishellext.dll
2014-03-15 17:27 - 2014-03-15 02:50 - 00716616 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\libglesv2.dll
2014-03-15 17:27 - 2014-03-15 02:50 - 00100168 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\libegl.dll
2014-03-15 17:27 - 2014-03-15 02:50 - 04061000 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\pdf.dll
2014-03-15 17:27 - 2014-03-15 02:50 - 00394568 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\ppGoogleNaClPluginChrome.dll
2014-03-15 17:27 - 2014-03-15 02:50 - 01647432 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Users\Yvonne\SkyDrive:ms-properties
AlternateDataStreams: C:\Users\yvonn_000\SkyDrive:ms-properties

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""

==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (03/28/2014 00:41:48 AM) (Source: Microsoft-Windows-Immersive-Shell) (User: Yvonne_1)
Description: Bei der Aktivierung der App „FileManager_cw5n1h2txyewy!Microsoft.Windows.PhotoManager“ ist folgender Fehler aufgetreten: -2144927142. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (03/28/2014 00:41:34 AM) (Source: Microsoft-Windows-Immersive-Shell) (User: Yvonne_1)
Description: Die App „FileManager_6.3.9600.16384_neutral_neutral_cw5n1h2txyewy+Microsoft.Windows.PhotoManager“ wurde nicht innerhalb der vorgesehenen Zeit gestartet.

Error: (03/25/2014 11:51:07 PM) (Source: Application Hang) (User: )
Description: Programm PhotosApp.exe, Version 6.3.9600.16507 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 2eec

Startzeit: 01cf487443c4a2f1

Endzeit: 4294967295

Anwendungspfad: C:\WINDOWS\FileManager\PhotosApp.exe

Berichts-ID: 90184cf3-b467-11e3-be8c-201a06162ef8

Vollständiger Name des fehlerhaften Pakets: FileManager_6.3.9600.16384_neutral_neutral_cw5n1h2txyewy

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Microsoft.Windows.PhotoManager

Error: (03/25/2014 11:51:05 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: Yvonne_1)
Description: Bei der Aktivierung der App „FileManager_cw5n1h2txyewy!Microsoft.Windows.PhotoManager“ ist folgender Fehler aufgetreten: -2144927142. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (03/25/2014 11:51:03 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: Yvonne_1)
Description: Die App „FileManager_6.3.9600.16384_neutral_neutral_cw5n1h2txyewy+Microsoft.Windows.PhotoManager“ wurde nicht innerhalb der vorgesehenen Zeit gestartet.

Error: (03/23/2014 02:33:30 PM) (Source: Application Hang) (User: )
Description: Programm backgroundTaskHost.exe, Version 6.3.9600.16384 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1f08

Startzeit: 01cf45a047f588b7

Endzeit: 4294967295

Anwendungspfad: C:\WINDOWS\system32\backgroundTaskHost.exe

Berichts-ID: 4bb75645-b287-11e3-be8c-201a06162ef8

Vollständiger Name des fehlerhaften Pakets: Facebook.Facebook_1.3.0.9_x64__8xx8rvfyw5nnt

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: App

Error: (03/17/2014 11:43:38 PM) (Source: Application Hang) (User: )
Description: Programm backgroundTaskHost.exe, Version 6.3.9600.16384 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1594

Startzeit: 01cf42147a0345c9

Endzeit: 4294967295

Anwendungspfad: C:\WINDOWS\system32\backgroundTaskHost.exe

Berichts-ID: 244b3cd8-ae1d-11e3-be8c-201a06162ef8

Vollständiger Name des fehlerhaften Pakets: Facebook.Facebook_1.3.0.9_x64__8xx8rvfyw5nnt

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: App

Error: (03/17/2014 00:59:10 AM) (Source: Application Hang) (User: )
Description: Programm PhotosApp.exe, Version 6.3.9600.16507 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 8b8

Startzeit: 01cf416b48abb2e8

Endzeit: 4294967295

Anwendungspfad: C:\WINDOWS\FileManager\PhotosApp.exe

Berichts-ID: 922a8591-ad5e-11e3-be8c-201a06162ef8

Vollständiger Name des fehlerhaften Pakets: FileManager_6.3.9600.16384_neutral_neutral_cw5n1h2txyewy

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Microsoft.Windows.PhotoManager

Error: (03/17/2014 00:59:05 AM) (Source: Microsoft-Windows-Immersive-Shell) (User: Yvonne_1)
Description: Bei der Aktivierung der App „FileManager_cw5n1h2txyewy!Microsoft.Windows.PhotoManager“ ist folgender Fehler aufgetreten: -2144927142. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (03/17/2014 00:59:01 AM) (Source: Microsoft-Windows-Immersive-Shell) (User: Yvonne_1)
Description: Die App „FileManager_6.3.9600.16384_neutral_neutral_cw5n1h2txyewy+Microsoft.Windows.PhotoManager“ wurde nicht innerhalb der vorgesehenen Zeit gestartet.


System errors:
=============
Error: (03/31/2014 10:20:44 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "vToolbarUpdater18.0.0" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (03/31/2014 10:19:36 PM) (Source: Service Control Manager) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (03/31/2014 10:19:33 PM) (Source: DCOM) (User: YVONNE_1)
Description: {9BA05972-F6A8-11CF-A442-00A0C90A8F39}

Error: (03/31/2014 09:33:21 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "vToolbarUpdater18.0.0" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (03/31/2014 09:30:16 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80246007 fehlgeschlagen: Microsoft.BingHealthAndFitness

Error: (03/31/2014 09:30:16 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80246007 fehlgeschlagen: ZinioLLC.Zinio

Error: (03/31/2014 09:30:11 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80246007 fehlgeschlagen: Microsoft.BingTravel

Error: (03/31/2014 09:30:11 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80246007 fehlgeschlagen: Microsoft.BingNews

Error: (03/31/2014 09:30:11 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80246007 fehlgeschlagen: Microsoft.BingWeather

Error: (03/31/2014 09:30:03 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80246007 fehlgeschlagen: Microsoft.BingMaps


Microsoft Office Sessions:
=========================
Error: (03/28/2014 00:41:48 AM) (Source: Microsoft-Windows-Immersive-Shell)(User: Yvonne_1)
Description: FileManager_cw5n1h2txyewy!Microsoft.Windows.PhotoManager-2144927142

Error: (03/28/2014 00:41:34 AM) (Source: Microsoft-Windows-Immersive-Shell)(User: Yvonne_1)
Description: FileManager_6.3.9600.16384_neutral_neutral_cw5n1h2txyewy+Microsoft.Windows.PhotoManager

Error: (03/25/2014 11:51:07 PM) (Source: Application Hang)(User: )
Description: PhotosApp.exe6.3.9600.165072eec01cf487443c4a2f14294967295C:\WINDOWS\FileManager\PhotosApp.exe90184cf3-b467-11e3-be8c-201a06162ef8FileManager_6.3.9600.16384_neutral_neutral_cw5n1h2txyewyMicrosoft.Windows.PhotoManager

Error: (03/25/2014 11:51:05 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: Yvonne_1)
Description: FileManager_cw5n1h2txyewy!Microsoft.Windows.PhotoManager-2144927142

Error: (03/25/2014 11:51:03 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: Yvonne_1)
Description: FileManager_6.3.9600.16384_neutral_neutral_cw5n1h2txyewy+Microsoft.Windows.PhotoManager

Error: (03/23/2014 02:33:30 PM) (Source: Application Hang)(User: )
Description: backgroundTaskHost.exe6.3.9600.163841f0801cf45a047f588b74294967295C:\WINDOWS\system32\backgroundTaskHost.exe4bb75645-b287-11e3-be8c-201a06162ef8Facebook.Facebook_1.3.0.9_x64__8xx8rvfyw5nntApp

Error: (03/17/2014 11:43:38 PM) (Source: Application Hang)(User: )
Description: backgroundTaskHost.exe6.3.9600.16384159401cf42147a0345c94294967295C:\WINDOWS\system32\backgroundTaskHost.exe244b3cd8-ae1d-11e3-be8c-201a06162ef8Facebook.Facebook_1.3.0.9_x64__8xx8rvfyw5nntApp

Error: (03/17/2014 00:59:10 AM) (Source: Application Hang)(User: )
Description: PhotosApp.exe6.3.9600.165078b801cf416b48abb2e84294967295C:\WINDOWS\FileManager\PhotosApp.exe922a8591-ad5e-11e3-be8c-201a06162ef8FileManager_6.3.9600.16384_neutral_neutral_cw5n1h2txyewyMicrosoft.Windows.PhotoManager

Error: (03/17/2014 00:59:05 AM) (Source: Microsoft-Windows-Immersive-Shell)(User: Yvonne_1)
Description: FileManager_cw5n1h2txyewy!Microsoft.Windows.PhotoManager-2144927142

Error: (03/17/2014 00:59:01 AM) (Source: Microsoft-Windows-Immersive-Shell)(User: Yvonne_1)
Description: FileManager_6.3.9600.16384_neutral_neutral_cw5n1h2txyewy+Microsoft.Windows.PhotoManager


==================== Memory info =========================== 

Percentage of memory in use: 22%
Total physical RAM: 8007.27 MB
Available physical RAM: 6239.95 MB
Total Pagefile: 9287.27 MB
Available Pagefile: 7333.08 MB
Total Virtual: 131072 MB
Available Virtual: 131071.79 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:267.35 GB) (Free:220.73 GB) NTFS
Drive y: (Volume) (Fixed) (Total:179.5 GB) (Free:178.73 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 2FEFB89D)

Partition: GPT Partition Type.

==================== End Of Log ============================
         

Leider kam es bei GMER trotz Beachtung aller Hinweise (AVG aus, WLAN aus, alle Programme zu) zu Komplikationen.

C:\WINDOWS\system32\config\system: Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.

Anschließend kam (auch beim erneuten Versuch) die Meldung, das Programm reagiere nicht mehr und müsse beendet werden.

Was soll ich tun, um GMER doch noch zum laufen bringen zu können?


Vielen vielen lieben Dank schonmal!
Grünorange

Hallo und

Adware/Junkware/Toolbars entfernen


1. Schritt: adwCleaner

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

3. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Danke schonmal für die schnelle Antwort!

AdwCleaner Logfile:

# AdwCleaner v3.022 - Bericht erstellt am 01/04/2014 um 00:56:51
# Aktualisiert 13/03/2014 von Xplode
# Betriebssystem : Windows 8.1  (64 bits)
# Benutzername : Admin - YVONNE_1
# Gestartet von : C:\Users\Yvonne\Desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16518

-\\ Google Chrome v33.0.1750.154

[ Datei : C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\preferences ]


[ Datei : C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [17862 octets] - [15/03/2014 17:42:03]
AdwCleaner[R1].txt - [17923 octets] - [15/03/2014 17:46:12]
AdwCleaner[R2].txt - [15291 octets] - [15/03/2014 17:48:18]
AdwCleaner[R3].txt - [953 octets] - [15/03/2014 17:54:12]
AdwCleaner[R4].txt - [1443 octets] - [31/03/2014 22:13:41]
AdwCleaner[R5].txt - [1440 octets] - [01/04/2014 00:55:45]
AdwCleaner[S0].txt - [1600 octets] - [15/03/2014 17:47:40]
AdwCleaner[S1].txt - [12477 octets] - [15/03/2014 17:50:35]
AdwCleaner[S2].txt - [1413 octets] - [31/03/2014 22:18:28]
AdwCleaner[S3].txt - [1270 octets] - [01/04/2014 00:56:51]

########## EOF - C:\AdwCleaner\AdwCleaner[S3].txt - [1330 octets] ##########
         

--- --- ---

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.3 (03.23.2014:1)
OS: Windows 8.1 x64
Ran by Admin on 01.04.2014 at  1:01:22,61
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Users\Yvonne\appdata\local\software"



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 01.04.2014 at  1:06:24,29
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\WINDOWS\system32\dashost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
(Microsoft Corporation) c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation) c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\skydrive.exe
(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\WINDOWS\system32\igfxsrvc.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDTouch.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Spotify Ltd) C:\Users\Yvonne\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Intel Corporation) C:\WINDOWS\system32\igfxext.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) c:\Program Files (x86)\Nero\Update\NASvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\WINDOWS\SysWOW64\notepad.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2890640 2013-04-22] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13550152 2013-05-30] (Realtek Semiconductor)
HKLM-x32\...\Run: [BrMfcWnd] - C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe [1163264 2012-09-25] ()
HKLM-x32\...\Run: [ControlCenter3] - C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4971024 2014-03-19] (AVG Technologies CZ, s.r.o.)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] - C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [133248 2013-05-31] ( (Atheros Communications))
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-2226565400-3139004338-4228191873-1002\...\Run: [Spotify Web Helper] - C:\Users\Yvonne\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1140736 2013-11-03] (Spotify Ltd)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [168616 2013-09-05] (NVIDIA Corporation)
AppInit_DLLs: ,C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [168616 2013-09-05] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [141336 2013-09-05] (NVIDIA Corporation)
Startup: C:\Users\Yvonne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\yvonn_000\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKLM - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKLM - {B71E0977-279D-4CC1-817F-56E17DF226C9} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
SearchScopes: HKCU - {B71E0977-279D-4CC1-817F-56E17DF226C9} URL = 
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} -  No File
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Chrome: 
=======
CHR Extension: (Google Docs) - C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-31]
CHR Extension: (Google Drive) - C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-31]
CHR Extension: (YouTube) - C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-03-31]
CHR Extension: (Google-Suche) - C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-31]
CHR Extension: (Google Wallet) - C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-03-31]
CHR Extension: (Google Mail) - C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-31]

==================== Services (Whitelisted) =================

R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [310912 2013-05-31] (Windows (R) Win 7 DDK provider)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3782672 2014-02-23] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe [2615368 2013-02-27] (Acer Incorporated)
S3 DeviceFastLaneService; C:\Program Files\Acer\Acer Device Fast-lane\DeviceFastLaneSvc.exe [470056 2013-04-30] (Acer Incorporated)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [662088 2013-03-15] (Acer Incorporated)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [803872 2012-12-10] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165336 2013-01-14] (Intel Corporation)
R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [431656 2013-06-17] (Acer Incorporate)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [348392 2013-10-31] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2013-10-31] (Microsoft Corporation)
S2 vToolbarUpdater18.0.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.0.0\ToolbarUpdater.exe [X]

==================== Drivers (Whitelisted) ====================

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
S0 Avgboota; C:\Windows\System32\DRIVERS\avgboota.sys [20496 2013-09-04] (AVG Technologies CZ, s.r.o.)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [150808 2013-11-25] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [243480 2013-11-25] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [196376 2013-11-25] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-11-01] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-10-01] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31544 2013-09-10] (AVG Technologies CZ, s.r.o.)
R1 avgtp; C:\WINDOWS\system32\drivers\avgtpx64.sys [50976 2014-03-02] (AVG Technologies)
R1 Avgwfpa; C:\Windows\system32\DRIVERS\avgwfpa.sys [252728 2013-10-21] (AVG Technologies CZ, s.r.o.)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-05-31] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-01-10] (Acer Incorporated)
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [15704 2013-01-10] (Acer Incorporated)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation)
S3 ssudserd; C:\Windows\system32\DRIVERS\ssudserd.sys [204568 2013-10-28] (DEVGURU Co., LTD.(www.devguru.co.kr))
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124760 2013-10-31] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-01 01:06 - 2014-04-01 01:06 - 00000689 _____ () C:\Users\Yvonne\Desktop\JRT.txt
2014-04-01 01:00 - 2014-04-01 01:00 - 01038974 _____ (Thisisu) C:\Users\Yvonne\Desktop\JRT.exe
2014-04-01 01:00 - 2014-04-01 01:00 - 00000020 ___SH () C:\Users\TEMP\ntuser.ini
2014-04-01 01:00 - 2014-04-01 01:00 - 00000000 _SHDL () C:\Users\TEMP\Vorlagen
2014-04-01 01:00 - 2014-04-01 01:00 - 00000000 _SHDL () C:\Users\TEMP\Startmenü
2014-04-01 01:00 - 2014-04-01 01:00 - 00000000 _SHDL () C:\Users\TEMP\Netzwerkumgebung
2014-04-01 01:00 - 2014-04-01 01:00 - 00000000 _SHDL () C:\Users\TEMP\Lokale Einstellungen
2014-04-01 01:00 - 2014-04-01 01:00 - 00000000 _SHDL () C:\Users\TEMP\Eigene Dateien
2014-04-01 01:00 - 2014-04-01 01:00 - 00000000 _SHDL () C:\Users\TEMP\Druckumgebung
2014-04-01 01:00 - 2014-04-01 01:00 - 00000000 _SHDL () C:\Users\TEMP\Documents\Eigene Musik
2014-04-01 01:00 - 2014-04-01 01:00 - 00000000 _SHDL () C:\Users\TEMP\Documents\Eigene Bilder
2014-04-01 01:00 - 2014-04-01 01:00 - 00000000 _SHDL () C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-01 01:00 - 2014-04-01 01:00 - 00000000 _SHDL () C:\Users\TEMP\AppData\Local\Verlauf
2014-04-01 01:00 - 2014-04-01 01:00 - 00000000 _SHDL () C:\Users\TEMP\AppData\Local\Anwendungsdaten
2014-04-01 01:00 - 2014-04-01 01:00 - 00000000 _SHDL () C:\Users\TEMP\Anwendungsdaten
2014-04-01 01:00 - 2014-03-12 17:23 - 00000000 ____D () C:\Users\TEMP\AppData\Roaming\TuneUp Software
2014-04-01 01:00 - 2014-03-12 17:14 - 00000000 ___RD () C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-04-01 01:00 - 2013-11-04 04:28 - 00000000 ____D () C:\Users\TEMP\AppData\Local\Pokki
2014-04-01 01:00 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-04-01 01:00 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-04-01 01:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-04-01 00:54 - 2014-04-01 00:54 - 01950720 _____ () C:\Users\Yvonne\Desktop\adwcleaner.exe
2014-03-31 23:22 - 2014-03-31 23:22 - 00380416 _____ () C:\Users\Yvonne\Downloads\Gmer-19357.exe
2014-03-31 23:20 - 2014-03-31 23:20 - 00027623 _____ () C:\Users\Yvonne\Desktop\Addition.txt
2014-03-31 23:19 - 2014-04-01 01:07 - 00013523 _____ () C:\Users\Yvonne\Desktop\FRST.txt
2014-03-31 23:19 - 2014-04-01 01:07 - 00000000 ____D () C:\FRST
2014-03-31 23:18 - 2014-03-31 23:18 - 02157056 _____ (Farbar) C:\Users\Yvonne\Desktop\FRST64.exe
2014-03-31 23:17 - 2014-03-31 23:17 - 00000472 _____ () C:\Users\Yvonne\Downloads\defogger_disable.log
2014-03-31 23:17 - 2014-03-31 23:17 - 00000000 _____ () C:\Users\Yvonne\defogger_reenable
2014-03-31 23:16 - 2014-03-31 23:16 - 00050477 _____ () C:\Users\Yvonne\Downloads\Defogger.exe
2014-03-31 22:20 - 2014-04-01 00:58 - 00447529 _____ () C:\WINDOWS\WindowsUpdate.log
2014-03-31 22:04 - 2014-03-31 22:04 - 04787368 _____ (Piriform Ltd) C:\Users\Yvonne\Downloads\ccsetup412.exe
2014-03-31 21:30 - 2014-03-31 21:30 - 00002039 _____ () C:\Users\Public\Desktop\Brother Utilities.lnk
2014-03-31 21:26 - 2014-03-31 21:26 - 00000000 ____D () C:\Users\Yvonne\Downloads\mflpro
2014-03-31 21:19 - 2014-03-31 21:22 - 44735552 _____ (A.I.SOFT,INC.) C:\Users\Yvonne\Downloads\DCP-7030-inst-win8-A1.EXE
2014-03-31 21:16 - 2014-03-31 21:16 - 00000000 ____D () C:\Users\yvonn_000\Downloads\mflpro
2014-03-31 21:12 - 2014-03-31 21:15 - 44735552 _____ (A.I.SOFT,INC.) C:\Users\yvonn_000\Downloads\DCP-7030-inst-win8-A1.EXE
2014-03-30 15:16 - 2014-03-30 15:18 - 34763504 _____ (DVDVideoSoft Ltd. ) C:\Users\yvonn_000\Downloads\FreeYouTubeToMP3Converter.exe
2014-03-29 18:21 - 2014-03-29 18:21 - 00000000 ____D () C:\Users\yvonn_000\AppData\Roaming\OpenOffice
2014-03-29 18:19 - 2014-03-29 18:19 - 00001132 _____ () C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk
2014-03-29 18:19 - 2014-03-29 18:19 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-03-29 18:18 - 2014-03-29 18:18 - 00000000 ____D () C:\Users\Yvonne\Desktop\OpenOffice 4.0.1 (de) Installation Files
2014-03-29 17:57 - 2014-03-29 18:09 - 163606685 _____ () C:\Users\yvonn_000\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de.exe
2014-03-28 00:51 - 2014-03-28 00:51 - 00139773 _____ () C:\Users\yvonn_000\Downloads\9B4A.tmp
2014-03-17 20:45 - 2014-03-17 20:45 - 00847832 _____ (Google Inc.) C:\Users\yvonn_000\Downloads\GoogleEarthPluginSetup.exe
2014-03-17 01:45 - 2014-03-17 01:45 - 00000618 _____ () C:\Users\yvonn_000\Desktop\JRT.txt
2014-03-17 00:57 - 2014-03-17 00:57 - 00000000 ____D () C:\Users\yvonn_000\AppData\Roaming\Malwarebytes
2014-03-15 18:24 - 2014-03-15 18:24 - 00001925 _____ () C:\Users\Public\Desktop\HitmanPro.lnk
2014-03-15 18:24 - 2014-03-15 18:24 - 00000000 ____D () C:\Program Files\HitmanPro
2014-03-15 18:22 - 2014-03-15 18:35 - 00000000 ____D () C:\ProgramData\HitmanPro
2014-03-15 18:21 - 2014-03-15 18:22 - 09988304 _____ (SurfRight B.V.) C:\Users\yvonn_000\Downloads\HitmanPro.exe
2014-03-15 18:12 - 2014-03-15 18:12 - 00000000 ____D () C:\Users\Yvonne\AppData\Roaming\Malwarebytes
2014-03-15 18:12 - 2014-03-15 18:12 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-15 18:10 - 2014-03-15 18:11 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\yvonn_000\Downloads\mbam-setup-1.75.0.1300.exe
2014-03-15 17:58 - 2014-03-15 17:58 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-03-15 17:57 - 2014-03-15 17:57 - 01037734 _____ (Thisisu) C:\Users\yvonn_000\Downloads\JRT.exe
2014-03-15 17:41 - 2014-04-01 00:57 - 00000000 ____D () C:\AdwCleaner
2014-03-15 17:41 - 2014-03-15 17:41 - 01950720 _____ () C:\Users\yvonn_000\Downloads\adwcleaner.exe
2014-03-15 17:27 - 2014-04-01 01:00 - 00002159 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-03-15 17:24 - 2014-04-01 00:58 - 00001122 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-15 17:24 - 2014-04-01 00:34 - 00001126 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-15 17:24 - 2014-03-30 23:29 - 00004098 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2014-03-15 17:24 - 2014-03-30 23:29 - 00003862 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2014-03-15 17:24 - 2014-03-15 17:24 - 00000000 ____D () C:\Users\yvonn_000\AppData\Local\Deployment
2014-03-12 17:23 - 2014-03-12 17:23 - 00000000 ____D () C:\Users\Default\AppData\Roaming\TuneUp Software
2014-03-12 17:23 - 2014-03-12 17:23 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\TuneUp Software
2014-03-11 23:52 - 2014-03-11 23:52 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-11 23:52 - 2014-03-11 23:52 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-11 23:51 - 2014-01-31 18:15 - 00311640 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2014-03-11 23:51 - 2014-01-31 18:07 - 00233920 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2014-03-11 23:51 - 2014-01-31 18:06 - 02133208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-03-11 23:51 - 2014-01-31 15:47 - 02143960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-03-11 23:51 - 2014-01-31 11:06 - 00716288 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll
2014-03-11 23:51 - 2014-01-29 11:55 - 01287064 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2014-03-11 23:51 - 2014-01-29 10:53 - 00458616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2014-03-11 23:51 - 2014-01-29 10:53 - 00407024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2014-03-11 23:51 - 2014-01-29 10:49 - 01928144 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2014-03-11 23:51 - 2014-01-29 10:47 - 02543960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-03-11 23:51 - 2014-01-29 09:44 - 01371824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2014-03-11 23:51 - 2014-01-29 09:44 - 00408480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2014-03-11 23:51 - 2014-01-29 09:44 - 00369280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2014-03-11 23:51 - 2014-01-29 08:41 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2014-03-11 23:51 - 2014-01-29 02:36 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2014-03-11 23:51 - 2014-01-27 21:07 - 04175360 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2014-03-11 23:51 - 2014-01-27 21:06 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2014-03-11 23:51 - 2014-01-27 21:04 - 00160256 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2014-03-11 23:51 - 2014-01-27 20:52 - 01036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2014-03-11 23:51 - 2014-01-27 20:23 - 02873344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2014-03-11 23:51 - 2014-01-27 20:21 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2014-03-11 23:51 - 2014-01-27 20:20 - 00138752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE
2014-03-11 23:51 - 2014-01-27 20:15 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-03-11 23:51 - 2014-01-27 19:43 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll
2014-03-11 23:51 - 2014-01-27 19:18 - 01486848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbghelp.dll
2014-03-11 23:51 - 2014-01-27 19:00 - 01238016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbghelp.dll
2014-03-11 23:51 - 2014-01-27 17:58 - 05770752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-03-11 23:51 - 2014-01-27 17:50 - 06640640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-03-11 23:51 - 2014-01-27 13:45 - 00386722 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-03-11 23:51 - 2014-01-18 01:04 - 00764864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-03-11 23:51 - 2014-01-17 23:54 - 00669352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2014-03-11 23:51 - 2013-12-21 16:51 - 06353960 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2014-03-11 23:51 - 2013-12-21 10:54 - 00447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcomapi.dll
2014-03-11 23:42 - 2014-02-11 05:04 - 04189184 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-03-11 23:36 - 2014-03-01 08:05 - 23133696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-03-11 23:36 - 2014-03-01 06:58 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-03-11 23:36 - 2014-03-01 06:30 - 17074688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-03-11 23:36 - 2014-03-01 06:17 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-03-11 23:36 - 2014-03-01 05:54 - 05768704 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-03-11 23:36 - 2014-03-01 05:47 - 02168320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-03-11 23:36 - 2014-03-01 05:42 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-03-11 23:36 - 2014-03-01 05:18 - 13051904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-03-11 23:36 - 2014-03-01 05:14 - 04244480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-03-11 23:36 - 2014-03-01 05:10 - 02334208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-03-11 23:36 - 2014-03-01 05:03 - 00524288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-03-11 23:36 - 2014-03-01 04:57 - 11266048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-03-11 23:36 - 2014-03-01 04:38 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-03-11 23:36 - 2014-03-01 04:32 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-03-11 23:36 - 2014-03-01 04:27 - 01156096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-03-11 23:36 - 2014-03-01 04:25 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-03-11 23:36 - 2014-03-01 04:25 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-03-11 23:34 - 2014-02-22 14:16 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2014-03-11 23:34 - 2014-02-22 13:24 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2014-03-11 23:34 - 2014-02-11 04:43 - 00488448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2014-03-11 23:34 - 2014-02-11 04:04 - 00586240 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2014-03-11 23:34 - 2013-12-20 12:18 - 01643584 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2014-03-11 23:34 - 2013-12-20 12:18 - 01507704 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2014-03-11 23:34 - 2013-10-31 02:29 - 00236888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2014-03-11 23:34 - 2013-10-31 02:29 - 00124760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2014-03-11 23:34 - 2013-10-31 02:28 - 00035856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2014-03-11 00:02 - 2014-03-11 00:02 - 00000244 _____ () C:\Users\yvonn_000\medcd.ini
2014-03-11 00:02 - 2004-11-11 10:54 - 00008682 ____N () C:\Users\yvonn_000\overlay.ini
2014-03-11 00:02 - 2004-11-03 11:34 - 00000000 ____N () C:\Users\yvonn_000\vorlagen.ini
2014-03-08 15:48 - 2014-01-08 03:46 - 00325464 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2014-03-08 15:48 - 2014-01-08 03:41 - 01530712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-03-08 15:48 - 2014-01-08 03:41 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2014-03-08 15:48 - 2014-01-04 17:54 - 00138240 _____ () C:\WINDOWS\system32\OEMLicense.dll
2014-03-08 15:48 - 2014-01-04 17:08 - 00103936 _____ () C:\WINDOWS\SysWOW64\OEMLicense.dll
2014-03-08 15:48 - 2014-01-04 16:08 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll
2014-03-08 15:48 - 2014-01-04 15:53 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll
2014-03-08 15:48 - 2014-01-03 01:54 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2014-03-08 15:48 - 2014-01-03 01:48 - 00336896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2014-03-08 15:48 - 2014-01-01 03:55 - 01720560 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2014-03-08 15:48 - 2014-01-01 03:52 - 00481944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-03-08 15:48 - 2014-01-01 02:56 - 01472048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2014-03-08 15:48 - 2014-01-01 02:55 - 00381168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2014-03-08 15:48 - 2014-01-01 01:59 - 00802816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-03-08 15:48 - 2014-01-01 01:57 - 01214976 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2014-03-08 15:48 - 2014-01-01 01:56 - 00960512 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-03-08 15:48 - 2013-12-31 01:34 - 00218112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sti.dll
2014-03-08 15:48 - 2013-12-31 01:33 - 00770560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2014-03-08 15:48 - 2013-12-31 01:32 - 00303616 _____ (Microsoft Corporation) C:\WINDOWS\system32\sti.dll
2014-03-08 15:48 - 2013-12-31 01:31 - 00947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2014-03-08 15:48 - 2013-12-31 01:31 - 00914944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2014-03-08 15:48 - 2013-12-27 17:09 - 00419160 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2014-03-08 15:48 - 2013-12-27 10:57 - 00842752 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingFacility.dll
2014-03-08 15:48 - 2013-12-27 10:57 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2014-03-08 15:48 - 2013-12-27 10:23 - 00749056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2014-03-08 15:48 - 2013-12-27 09:03 - 00630272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsSpellCheckingFacility.dll
2014-03-08 15:48 - 2013-12-27 09:03 - 00478208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2014-03-08 15:48 - 2013-12-27 08:37 - 00588800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2014-03-08 15:48 - 2013-12-21 09:21 - 00376320 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnrpsvc.dll
2014-03-08 15:48 - 2013-12-17 09:21 - 00408576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2014-03-08 15:48 - 2013-12-14 08:31 - 13949440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-03-08 15:48 - 2013-12-14 08:19 - 18576384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-03-08 15:48 - 2013-12-13 12:54 - 00131160 _____ (Microsoft Corporation) C:\WINDOWS\system32\easinvoker.exe
2014-03-08 15:48 - 2013-12-13 08:36 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll
2014-03-08 15:48 - 2013-12-13 07:32 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\easwrt.dll
2014-03-08 15:48 - 2013-12-09 10:05 - 21199256 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-03-08 15:48 - 2013-12-09 06:51 - 18643560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-03-04 03:27 - 2014-03-04 03:49 - 289003621 _____ () C:\Users\yvonn_000\Downloads\wetransfer-74de4e.zip

==================== One Month Modified Files and Folders =======

2014-04-01 01:07 - 2014-03-31 23:19 - 00013523 _____ () C:\Users\Yvonne\Desktop\FRST.txt
2014-04-01 01:07 - 2014-03-31 23:19 - 00000000 ____D () C:\FRST
2014-04-01 01:06 - 2014-04-01 01:06 - 00000689 _____ () C:\Users\Yvonne\Desktop\JRT.txt
2014-04-01 01:03 - 2013-09-30 06:14 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-04-01 01:03 - 2013-09-30 05:56 - 00765582 _____ () C:\WINDOWS\system32\perfh007.dat
2014-04-01 01:03 - 2013-09-30 05:56 - 00159366 _____ () C:\WINDOWS\system32\perfc007.dat
2014-04-01 01:02 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-04-01 01:00 - 2014-04-01 01:00 - 01038974 _____ (Thisisu) C:\Users\Yvonne\Desktop\JRT.exe
2014-04-01 01:00 - 2014-04-01 01:00 - 00000020 ___SH () C:\Users\TEMP\ntuser.ini
2014-04-01 01:00 - 2014-04-01 01:00 - 00000000 _SHDL () C:\Users\TEMP\Vorlagen
2014-04-01 01:00 - 2014-04-01 01:00 - 00000000 _SHDL () C:\Users\TEMP\Startmenü
2014-04-01 01:00 - 2014-04-01 01:00 - 00000000 _SHDL () C:\Users\TEMP\Netzwerkumgebung
2014-04-01 01:00 - 2014-04-01 01:00 - 00000000 _SHDL () C:\Users\TEMP\Lokale Einstellungen
2014-04-01 01:00 - 2014-04-01 01:00 - 00000000 _SHDL () C:\Users\TEMP\Eigene Dateien
2014-04-01 01:00 - 2014-04-01 01:00 - 00000000 _SHDL () C:\Users\TEMP\Druckumgebung
2014-04-01 01:00 - 2014-04-01 01:00 - 00000000 _SHDL () C:\Users\TEMP\Documents\Eigene Musik
2014-04-01 01:00 - 2014-04-01 01:00 - 00000000 _SHDL () C:\Users\TEMP\Documents\Eigene Bilder
2014-04-01 01:00 - 2014-04-01 01:00 - 00000000 _SHDL () C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-01 01:00 - 2014-04-01 01:00 - 00000000 _SHDL () C:\Users\TEMP\AppData\Local\Verlauf
2014-04-01 01:00 - 2014-04-01 01:00 - 00000000 _SHDL () C:\Users\TEMP\AppData\Local\Anwendungsdaten
2014-04-01 01:00 - 2014-04-01 01:00 - 00000000 _SHDL () C:\Users\TEMP\Anwendungsdaten
2014-04-01 01:00 - 2014-03-15 17:27 - 00002159 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-04-01 00:58 - 2014-03-31 22:20 - 00447529 _____ () C:\WINDOWS\WindowsUpdate.log
2014-04-01 00:58 - 2014-03-15 17:24 - 00001122 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-01 00:58 - 2013-11-04 14:35 - 00000000 __RDO () C:\Users\Yvonne\SkyDrive
2014-04-01 00:58 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-04-01 00:57 - 2014-03-15 17:41 - 00000000 ____D () C:\AdwCleaner
2014-04-01 00:57 - 2013-08-22 15:25 - 01048576 ___SH () C:\WINDOWS\system32\config\BBI
2014-04-01 00:54 - 2014-04-01 00:54 - 01950720 _____ () C:\Users\Yvonne\Desktop\adwcleaner.exe
2014-04-01 00:34 - 2014-03-15 17:24 - 00001126 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-01 00:15 - 2013-11-02 20:03 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2226565400-3139004338-4228191873-1002
2014-04-01 00:10 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-03-31 23:22 - 2014-03-31 23:22 - 00380416 _____ () C:\Users\Yvonne\Downloads\Gmer-19357.exe
2014-03-31 23:20 - 2014-03-31 23:20 - 00027623 _____ () C:\Users\Yvonne\Desktop\Addition.txt
2014-03-31 23:18 - 2014-03-31 23:18 - 02157056 _____ (Farbar) C:\Users\Yvonne\Desktop\FRST64.exe
2014-03-31 23:17 - 2014-03-31 23:17 - 00000472 _____ () C:\Users\Yvonne\Downloads\defogger_disable.log
2014-03-31 23:17 - 2014-03-31 23:17 - 00000000 _____ () C:\Users\Yvonne\defogger_reenable
2014-03-31 23:17 - 2013-11-04 04:24 - 00000000 ____D () C:\Users\Yvonne
2014-03-31 23:16 - 2014-03-31 23:16 - 00050477 _____ () C:\Users\Yvonne\Downloads\Defogger.exe
2014-03-31 22:48 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\LiveKernelReports
2014-03-31 22:23 - 2013-11-02 23:43 - 00000000 ____D () C:\Program Files (x86)\Google
2014-03-31 22:05 - 2014-01-13 00:14 - 00000000 ____D () C:\WINDOWS\Minidump
2014-03-31 22:04 - 2014-03-31 22:04 - 04787368 _____ (Piriform Ltd) C:\Users\Yvonne\Downloads\ccsetup412.exe
2014-03-31 22:04 - 2013-11-03 17:09 - 00000838 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-03-31 22:04 - 2013-11-03 17:09 - 00000000 ____D () C:\Program Files\CCleaner
2014-03-31 21:36 - 2013-11-11 00:37 - 00003930 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{7309CF47-AB66-47C1-9245-9B49FCF00E1C}
2014-03-31 21:30 - 2014-03-31 21:30 - 00002039 _____ () C:\Users\Public\Desktop\Brother Utilities.lnk
2014-03-31 21:30 - 2013-11-11 00:27 - 00000050 _____ () C:\WINDOWS\system32\bd7030.dat
2014-03-31 21:29 - 2013-11-11 00:23 - 00000000 ____D () C:\Program Files (x86)\Brother
2014-03-31 21:26 - 2014-03-31 21:26 - 00000000 ____D () C:\Users\Yvonne\Downloads\mflpro
2014-03-31 21:23 - 2013-11-02 23:44 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2226565400-3139004338-4228191873-1006
2014-03-31 21:22 - 2014-03-31 21:19 - 44735552 _____ (A.I.SOFT,INC.) C:\Users\Yvonne\Downloads\DCP-7030-inst-win8-A1.EXE
2014-03-31 21:18 - 2013-11-02 23:43 - 00000000 ____D () C:\Users\Yvonne\AppData\Local\Google
2014-03-31 21:17 - 2013-11-02 19:57 - 00000000 ___RD () C:\Users\Yvonne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-31 21:17 - 2013-11-02 19:57 - 00000000 ___RD () C:\Users\Yvonne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-03-31 21:16 - 2014-03-31 21:16 - 00000000 ____D () C:\Users\yvonn_000\Downloads\mflpro
2014-03-31 21:15 - 2014-03-31 21:12 - 44735552 _____ (A.I.SOFT,INC.) C:\Users\yvonn_000\Downloads\DCP-7030-inst-win8-A1.EXE
2014-03-31 20:55 - 2014-01-05 23:20 - 00000000 ____D () C:\ProgramData\MFAData
2014-03-31 16:39 - 2014-01-05 23:30 - 00000961 _____ () C:\Users\Public\Desktop\AVG 2014.lnk
2014-03-31 16:38 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-03-31 16:36 - 2013-11-05 18:01 - 00003946 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{D90E8785-4B32-4992-B33B-F2E9767E07D0}
2014-03-31 16:35 - 2013-11-04 14:40 - 00000000 __RDO () C:\Users\yvonn_000\SkyDrive
2014-03-30 23:29 - 2014-03-15 17:24 - 00004098 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2014-03-30 23:29 - 2014-03-15 17:24 - 00003862 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2014-03-30 22:29 - 2013-11-18 17:51 - 00083128 _____ () C:\Users\yvonn_000\AppData\Local\GDIPFONTCACHEV1.DAT
2014-03-30 15:18 - 2014-03-30 15:16 - 34763504 _____ (DVDVideoSoft Ltd. ) C:\Users\yvonn_000\Downloads\FreeYouTubeToMP3Converter.exe
2014-03-30 02:31 - 2013-08-22 16:44 - 00383448 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-03-29 18:21 - 2014-03-29 18:21 - 00000000 ____D () C:\Users\yvonn_000\AppData\Roaming\OpenOffice
2014-03-29 18:19 - 2014-03-29 18:19 - 00001132 _____ () C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk
2014-03-29 18:19 - 2014-03-29 18:19 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-03-29 18:18 - 2014-03-29 18:18 - 00000000 ____D () C:\Users\Yvonne\Desktop\OpenOffice 4.0.1 (de) Installation Files
2014-03-29 18:09 - 2014-03-29 17:57 - 163606685 _____ () C:\Users\yvonn_000\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de.exe
2014-03-28 00:51 - 2014-03-28 00:51 - 00139773 _____ () C:\Users\yvonn_000\Downloads\9B4A.tmp
2014-03-25 22:33 - 2013-11-02 23:45 - 00000000 ____D () C:\Users\yvonn_000\AppData\Roaming\Spotify
2014-03-24 22:05 - 2013-11-02 23:45 - 00000000 ____D () C:\Users\yvonn_000\AppData\Local\Spotify
2014-03-17 20:45 - 2014-03-17 20:45 - 00847832 _____ (Google Inc.) C:\Users\yvonn_000\Downloads\GoogleEarthPluginSetup.exe
2014-03-17 01:45 - 2014-03-17 01:45 - 00000618 _____ () C:\Users\yvonn_000\Desktop\JRT.txt
2014-03-17 00:59 - 2014-02-17 01:39 - 00060928 ___SH () C:\Users\yvonn_000\Downloads\Thumbs.db
2014-03-17 00:57 - 2014-03-17 00:57 - 00000000 ____D () C:\Users\yvonn_000\AppData\Roaming\Malwarebytes
2014-03-15 22:19 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-03-15 18:35 - 2014-03-15 18:22 - 00000000 ____D () C:\ProgramData\HitmanPro
2014-03-15 18:24 - 2014-03-15 18:24 - 00001925 _____ () C:\Users\Public\Desktop\HitmanPro.lnk
2014-03-15 18:24 - 2014-03-15 18:24 - 00000000 ____D () C:\Program Files\HitmanPro
2014-03-15 18:22 - 2014-03-15 18:21 - 09988304 _____ (SurfRight B.V.) C:\Users\yvonn_000\Downloads\HitmanPro.exe
2014-03-15 18:12 - 2014-03-15 18:12 - 00000000 ____D () C:\Users\Yvonne\AppData\Roaming\Malwarebytes
2014-03-15 18:12 - 2014-03-15 18:12 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-15 18:11 - 2014-03-15 18:10 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\yvonn_000\Downloads\mbam-setup-1.75.0.1300.exe
2014-03-15 18:00 - 2013-11-02 23:35 - 00000000 ____D () C:\Users\yvonn_000\AppData\Local\Packages
2014-03-15 17:58 - 2014-03-15 17:58 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-03-15 17:57 - 2014-03-15 17:57 - 01037734 _____ (Thisisu) C:\Users\yvonn_000\Downloads\JRT.exe
2014-03-15 17:50 - 2013-11-04 14:32 - 00001025 _____ () C:\Users\Yvonne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-03-15 17:41 - 2014-03-15 17:41 - 01950720 _____ () C:\Users\yvonn_000\Downloads\adwcleaner.exe
2014-03-15 17:24 - 2014-03-15 17:24 - 00000000 ____D () C:\Users\yvonn_000\AppData\Local\Deployment
2014-03-15 17:15 - 2013-06-04 06:26 - 00000000 ____D () C:\Program Files (x86)\WildTangent Games
2014-03-15 17:14 - 2013-06-04 06:26 - 00000000 ____D () C:\ProgramData\WildTangent
2014-03-13 20:36 - 2013-11-11 00:54 - 00000432 _____ () C:\WINDOWS\BRWMARK.INI
2014-03-13 20:35 - 2013-11-11 00:54 - 00000034 _____ () C:\WINDOWS\SysWOW64\BD7030.DAT
2014-03-12 17:23 - 2014-04-01 01:00 - 00000000 ____D () C:\Users\TEMP\AppData\Roaming\TuneUp Software
2014-03-12 17:23 - 2014-03-12 17:23 - 00000000 ____D () C:\Users\Default\AppData\Roaming\TuneUp Software
2014-03-12 17:23 - 2014-03-12 17:23 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\TuneUp Software
2014-03-12 17:14 - 2014-04-01 01:00 - 00000000 ___RD () C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-03-12 17:14 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-03-12 17:14 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-03-12 17:14 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-03-12 17:14 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-03-11 23:56 - 2013-11-02 21:51 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-03-11 23:54 - 2013-11-02 21:51 - 90015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-03-11 23:52 - 2014-03-11 23:52 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-11 23:52 - 2014-03-11 23:52 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-11 00:02 - 2014-03-11 00:02 - 00000244 _____ () C:\Users\yvonn_000\medcd.ini
2014-03-11 00:02 - 2013-11-04 04:24 - 00000000 ____D () C:\Users\yvonn_000
2014-03-08 20:04 - 2013-11-02 23:36 - 00000000 ___RD () C:\Users\yvonn_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-08 20:04 - 2013-11-02 23:36 - 00000000 ___RD () C:\Users\yvonn_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-03-08 20:01 - 2014-01-12 23:11 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV
2014-03-08 20:01 - 2014-01-12 23:11 - 00000000 ____D () C:\WINDOWS\system32\NV
2014-03-08 19:59 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-03-05 00:53 - 2013-08-22 17:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-03-05 00:53 - 2013-08-22 17:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-04 03:49 - 2014-03-04 03:27 - 289003621 _____ () C:\Users\yvonn_000\Downloads\wetransfer-74de4e.zip
2014-03-02 20:22 - 2014-01-09 20:27 - 00050976 _____ (AVG Technologies) C:\WINDOWS\system32\Drivers\avgtpx64.sys

Some content of TEMP:
====================
C:\Users\Yvonne\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys
[2014-03-11 23:51] - [2014-01-31 18:15] - 0311640 ___AC (Microsoft Corporation) C85C075DE5B6D0FE116043054DE8EE02



LastRegBack: 2014-03-28 20:20

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by Admin at 2014-03-31 23:20:13
Running from C:\Users\Yvonne\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}

==================== Installed Programs ======================

 clear.fi SDK - Video 2 (x32 Version: 2.1.2606 - CyberLink Corp.) Hidden
 clear.fi SDK- Movie 2 (x32 Version: 2.1.2606 - CyberLink Corp.) Hidden
 DCP-7030 (HKLM-x32\...\{46E1B1F2-A279-4356-9B17-029F9CC72EAE}) (Version: 2.0.0.0 - Brother Industries, Ltd.)
Acer Device Fast-lane (HKLM\...\{3F62D2FD-13C1-49A2-8B5D-47623D9460D7}) (Version: 1.00.3013 - Acer Incorporated)
Acer Games (HKCU\...\Pokki_03d432a7e610c3e908213e7689d4342ce2111caf) (Version: 1.1.7.42206 - Pokki)
Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.3005 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.3013 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.3016 - Acer Incorporated)
AcerCloud Docs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.01.2008 - Acer Incorporated)
AcerCloud Portal (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 2.02.2022 - Acer Incorporated)
AVG 2014 (HKLM\...\AVG) (Version: 2014.0.4355 - AVG Technologies)
AVG 2014 (Version: 14.0.3722 - AVG Technologies) Hidden
AVG 2014 (Version: 14.0.4355 - AVG Technologies) Hidden
Broadcom Card Reader Driver Installer (HKLM\...\{67AA948F-8D83-4566-B84A-7CAABCF64E3F}) (Version: 16.0.2.6 - Broadcom Corporation)
Broadcom NetLink Controller (HKLM\...\{D1D7ED66-5C08-40A0-AEC0-B6DF977697BB}) (Version: 16.0.2.4 - Broadcom Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 4.12 - Piriform)
clear.fi Media (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.02.2012 - Acer Incorporated)
clear.fi Photo (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 2.02.2016 - Acer Incorporated)
Compatibility Pack für 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Dropbox (HKCU\...\Dropbox) (Version: 2.6.7 - Dropbox, Inc.)
ETDWare PS/2-X64 11.6.23.203_WHQL (HKLM\...\Elantech) (Version: 11.6.23.203 - ELAN Microelectronic Corp.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 33.0.1750.154 - Google Inc.)
Google Update Helper (x32 Version: 1.3.23.9 - Google Inc.) Hidden
HitmanPro 3.7 (HKLM\...\HitmanPro37) (Version: 3.7.9.216 - SurfRight B.V.)
Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.3006 - Acer Incorporated)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.30.1349 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3412 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.4.1001 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.27.757.1 - Intel Corporation) Hidden
Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.3010 - Acer Incorporated)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Standard Edition 2003 (HKLM-x32\...\{91120407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2005 Tools for Office Runtime (x32 Version: 8.0.60940.0 - Microsoft Corporation) Hidden
Microsoft-Maus- und Tastatur-Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.2.173.0 - Microsoft Corporation)
Microsoft-Maus- und Tastatur-Center (Version: 2.2.173.0 - Microsoft Corporation) Hidden
Nero BackItUp (x32 Version: 12.5.5000 - Nero AG) Hidden
Nero BackItUp 12 Essentials OEM.a01 (HKLM-x32\...\{4CA8F973-6377-4ABF-9ED5-CC2323B3C000}) (Version: 12.5.00500 - Nero AG)
Nero BackItUp Help (CHM) (x32 Version: 12.0.10000 - Nero AG) Hidden
Nero ControlCenter (x32 Version: 11.0.15600 - Nero AG) Hidden
Nero ControlCenter Help (CHM) (x32 Version: 12.0.7000 - Nero AG) Hidden
Nero Core Components (x32 Version: 11.0.20200 - Nero AG) Hidden
Nero Launcher (x32 Version: 12.2.7000 - Nero AG) Hidden
Nero RescueAgent (x32 Version: 12.0.3001 - Nero AG) Hidden
Nero RescueAgent Help (CHM) (x32 Version: 12.0.7000 - Nero AG) Hidden
Nero Update (x32 Version: 11.0.11800.31.0 - Nero AG) Hidden
NVIDIA Grafiktreiber 327.02 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.02 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.133.889 - NVIDIA Corporation) Hidden
NVIDIA Optimus 1.14.17 (Version: 1.14.17 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.12.1031 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.12.1031 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.1031 - NVIDIA Corporation)
NVIDIA Systemsteuerung 327.02 (Version: 327.02 - NVIDIA Corporation) Hidden
NVIDIA Update 1.14.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.14.17 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.14.17 - NVIDIA Corporation) Hidden
Office Addin (HKLM-x32\...\{6D2BBE1D-E600-4695-BA37-0B0E605542CC}) (Version: 2.02.2008 - Acer)
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.228 - Qualcomm Atheros Communications)
Qualcomm Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 11.57 - Qualcomm Atheros)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6927 - Realtek Semiconductor Corp.)
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Snap.Do (HKLM-x32\...\{92109C97-2662-4353-9386-B64309F595C9}) (Version: 11.8.1.13233 - ReSoft Ltd.) <==== ATTENTION
Snap.Do Engine (HKCU\...\{63f52852-583d-43e7-93fe-56819f60e7fc}) (Version: 11.8.1.13233 - ReSoft Ltd.) <==== ATTENTION
Spotify (HKLM-x32\...\Spotify) (Version: 0.8.4.99.ga249b5f1 - Spotify AB)
Visual Studio 2005 Tools for Office Second Edition Runtime (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Office Runtime) (Version:  - Microsoft Corporation)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
Visual Studio Tools for the Office system 3.0 Runtime (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version:  - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime (x32 Version: 9.0.30729 - Microsoft Corporation) Hidden
Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation)

==================== Restore Points  =========================

11-03-2014 21:51:26 Windows Update
21-03-2014 19:02:39 Geplanter Prüfpunkt
28-03-2014 19:16:26 Geplanter Prüfpunkt
31-03-2014 19:28:04 Installiert MFL-Pro Suite

==================== Hosts content: ==========================

2013-08-22 15:25 - 2014-03-17 01:17 - 00001070 ____A C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1 hxxp://myvideo.ivwbox.de
127.0.0.1 hxxp://yahoo.ivwbox.de
127.0.0.1 hxxp://facebook.ivwbox.de
127.0.0.1 hxxp://youtube.ivwbox.de
127.0.0.1 hxxp://chefkoch.ivwbox.de
127.0.0.1 hxxp://pro7.ivwbox.de
127.0.0.1 hxxp://sat1.ivwbox.de


==================== Scheduled Tasks (whitelisted) =============

Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {07BD461F-A862-4EE8-BE99-8B8DEBBBE136} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {39BA9889-2FD7-46AA-92A2-1C02FDC229DC} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-03-15] (Google Inc.)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {7102717A-B900-4271-8C2C-AF3A11DA13B1} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2013-01-22] ()
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {A6E8DC38-71C5-4C86-B40D-F18BA2520CB3} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)
Task: {AC48D7AF-AA09-4D13-B0CB-A439FBCA2FC1} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation)
Task: {AEEE6356-E35F-46D3-87C4-BF1E604E3C34} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2013-05-13] (Microsoft)
Task: {BFE0E547-583B-4E77-A26A-1EC996113790} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-03-15] (Google Inc.)
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {E0D5FC77-44D3-491F-8A61-08E95D37D34C} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTray.exe [2013-03-15] (Acer Incorporated)
Task: {E656C6B7-EB7A-409E-B852-23EE06A5C659} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-03-18] (Piriform Ltd)
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: {E70FFE47-7B19-44B4-848D-A6C018C4192C} - \RegClean Pro No Task File
Task: {F0886613-882E-4F7A-8602-504F882EEBAA} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation)
Task: {F0F63771-0306-4BB1-8D34-78878EEAD8AF} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2013-06-17] (Acer Incorporate)
Task: {F1A11905-6598-43BD-A89C-E8CF4CF5F986} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2013-03-13] ()
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-09-05 03:36 - 2013-09-05 03:36 - 00013088 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll
2013-05-31 01:23 - 2013-05-31 01:23 - 00011264 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2013-05-31 01:19 - 2013-05-31 01:19 - 00086016 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\Map\MAP.dll
2013-05-31 01:53 - 2013-05-31 01:53 - 00012928 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
2013-10-04 00:42 - 2013-10-04 00:42 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2013-09-06 05:51 - 2013-01-14 20:25 - 01200088 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2014-03-15 17:27 - 2014-03-15 02:50 - 00051016 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\chrome_elf.dll
2013-09-06 06:25 - 2013-02-20 22:58 - 00089672 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\Clearfishellext.dll
2014-03-15 17:27 - 2014-03-15 02:50 - 00716616 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\libglesv2.dll
2014-03-15 17:27 - 2014-03-15 02:50 - 00100168 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\libegl.dll
2014-03-15 17:27 - 2014-03-15 02:50 - 04061000 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\pdf.dll
2014-03-15 17:27 - 2014-03-15 02:50 - 00394568 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\ppGoogleNaClPluginChrome.dll
2014-03-15 17:27 - 2014-03-15 02:50 - 01647432 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Users\Yvonne\SkyDrive:ms-properties
AlternateDataStreams: C:\Users\yvonn_000\SkyDrive:ms-properties

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""

==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (03/28/2014 00:41:48 AM) (Source: Microsoft-Windows-Immersive-Shell) (User: Yvonne_1)
Description: Bei der Aktivierung der App „FileManager_cw5n1h2txyewy!Microsoft.Windows.PhotoManager“ ist folgender Fehler aufgetreten: -2144927142. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (03/28/2014 00:41:34 AM) (Source: Microsoft-Windows-Immersive-Shell) (User: Yvonne_1)
Description: Die App „FileManager_6.3.9600.16384_neutral_neutral_cw5n1h2txyewy+Microsoft.Windows.PhotoManager“ wurde nicht innerhalb der vorgesehenen Zeit gestartet.

Error: (03/25/2014 11:51:07 PM) (Source: Application Hang) (User: )
Description: Programm PhotosApp.exe, Version 6.3.9600.16507 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 2eec

Startzeit: 01cf487443c4a2f1

Endzeit: 4294967295

Anwendungspfad: C:\WINDOWS\FileManager\PhotosApp.exe

Berichts-ID: 90184cf3-b467-11e3-be8c-201a06162ef8

Vollständiger Name des fehlerhaften Pakets: FileManager_6.3.9600.16384_neutral_neutral_cw5n1h2txyewy

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Microsoft.Windows.PhotoManager

Error: (03/25/2014 11:51:05 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: Yvonne_1)
Description: Bei der Aktivierung der App „FileManager_cw5n1h2txyewy!Microsoft.Windows.PhotoManager“ ist folgender Fehler aufgetreten: -2144927142. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (03/25/2014 11:51:03 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: Yvonne_1)
Description: Die App „FileManager_6.3.9600.16384_neutral_neutral_cw5n1h2txyewy+Microsoft.Windows.PhotoManager“ wurde nicht innerhalb der vorgesehenen Zeit gestartet.

Error: (03/23/2014 02:33:30 PM) (Source: Application Hang) (User: )
Description: Programm backgroundTaskHost.exe, Version 6.3.9600.16384 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1f08

Startzeit: 01cf45a047f588b7

Endzeit: 4294967295

Anwendungspfad: C:\WINDOWS\system32\backgroundTaskHost.exe

Berichts-ID: 4bb75645-b287-11e3-be8c-201a06162ef8

Vollständiger Name des fehlerhaften Pakets: Facebook.Facebook_1.3.0.9_x64__8xx8rvfyw5nnt

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: App

Error: (03/17/2014 11:43:38 PM) (Source: Application Hang) (User: )
Description: Programm backgroundTaskHost.exe, Version 6.3.9600.16384 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1594

Startzeit: 01cf42147a0345c9

Endzeit: 4294967295

Anwendungspfad: C:\WINDOWS\system32\backgroundTaskHost.exe

Berichts-ID: 244b3cd8-ae1d-11e3-be8c-201a06162ef8

Vollständiger Name des fehlerhaften Pakets: Facebook.Facebook_1.3.0.9_x64__8xx8rvfyw5nnt

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: App

Error: (03/17/2014 00:59:10 AM) (Source: Application Hang) (User: )
Description: Programm PhotosApp.exe, Version 6.3.9600.16507 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 8b8

Startzeit: 01cf416b48abb2e8

Endzeit: 4294967295

Anwendungspfad: C:\WINDOWS\FileManager\PhotosApp.exe

Berichts-ID: 922a8591-ad5e-11e3-be8c-201a06162ef8

Vollständiger Name des fehlerhaften Pakets: FileManager_6.3.9600.16384_neutral_neutral_cw5n1h2txyewy

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Microsoft.Windows.PhotoManager

Error: (03/17/2014 00:59:05 AM) (Source: Microsoft-Windows-Immersive-Shell) (User: Yvonne_1)
Description: Bei der Aktivierung der App „FileManager_cw5n1h2txyewy!Microsoft.Windows.PhotoManager“ ist folgender Fehler aufgetreten: -2144927142. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (03/17/2014 00:59:01 AM) (Source: Microsoft-Windows-Immersive-Shell) (User: Yvonne_1)
Description: Die App „FileManager_6.3.9600.16384_neutral_neutral_cw5n1h2txyewy+Microsoft.Windows.PhotoManager“ wurde nicht innerhalb der vorgesehenen Zeit gestartet.


System errors:
=============
Error: (03/31/2014 10:20:44 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "vToolbarUpdater18.0.0" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (03/31/2014 10:19:36 PM) (Source: Service Control Manager) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (03/31/2014 10:19:33 PM) (Source: DCOM) (User: YVONNE_1)
Description: {9BA05972-F6A8-11CF-A442-00A0C90A8F39}

Error: (03/31/2014 09:33:21 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "vToolbarUpdater18.0.0" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (03/31/2014 09:30:16 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80246007 fehlgeschlagen: Microsoft.BingHealthAndFitness

Error: (03/31/2014 09:30:16 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80246007 fehlgeschlagen: ZinioLLC.Zinio

Error: (03/31/2014 09:30:11 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80246007 fehlgeschlagen: Microsoft.BingTravel

Error: (03/31/2014 09:30:11 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80246007 fehlgeschlagen: Microsoft.BingNews

Error: (03/31/2014 09:30:11 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80246007 fehlgeschlagen: Microsoft.BingWeather

Error: (03/31/2014 09:30:03 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80246007 fehlgeschlagen: Microsoft.BingMaps


Microsoft Office Sessions:
=========================
Error: (03/28/2014 00:41:48 AM) (Source: Microsoft-Windows-Immersive-Shell)(User: Yvonne_1)
Description: FileManager_cw5n1h2txyewy!Microsoft.Windows.PhotoManager-2144927142

Error: (03/28/2014 00:41:34 AM) (Source: Microsoft-Windows-Immersive-Shell)(User: Yvonne_1)
Description: FileManager_6.3.9600.16384_neutral_neutral_cw5n1h2txyewy+Microsoft.Windows.PhotoManager

Error: (03/25/2014 11:51:07 PM) (Source: Application Hang)(User: )
Description: PhotosApp.exe6.3.9600.165072eec01cf487443c4a2f14294967295C:\WINDOWS\FileManager\PhotosApp.exe90184cf3-b467-11e3-be8c-201a06162ef8FileManager_6.3.9600.16384_neutral_neutral_cw5n1h2txyewyMicrosoft.Windows.PhotoManager

Error: (03/25/2014 11:51:05 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: Yvonne_1)
Description: FileManager_cw5n1h2txyewy!Microsoft.Windows.PhotoManager-2144927142

Error: (03/25/2014 11:51:03 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: Yvonne_1)
Description: FileManager_6.3.9600.16384_neutral_neutral_cw5n1h2txyewy+Microsoft.Windows.PhotoManager

Error: (03/23/2014 02:33:30 PM) (Source: Application Hang)(User: )
Description: backgroundTaskHost.exe6.3.9600.163841f0801cf45a047f588b74294967295C:\WINDOWS\system32\backgroundTaskHost.exe4bb75645-b287-11e3-be8c-201a06162ef8Facebook.Facebook_1.3.0.9_x64__8xx8rvfyw5nntApp

Error: (03/17/2014 11:43:38 PM) (Source: Application Hang)(User: )
Description: backgroundTaskHost.exe6.3.9600.16384159401cf42147a0345c94294967295C:\WINDOWS\system32\backgroundTaskHost.exe244b3cd8-ae1d-11e3-be8c-201a06162ef8Facebook.Facebook_1.3.0.9_x64__8xx8rvfyw5nntApp

Error: (03/17/2014 00:59:10 AM) (Source: Application Hang)(User: )
Description: PhotosApp.exe6.3.9600.165078b801cf416b48abb2e84294967295C:\WINDOWS\FileManager\PhotosApp.exe922a8591-ad5e-11e3-be8c-201a06162ef8FileManager_6.3.9600.16384_neutral_neutral_cw5n1h2txyewyMicrosoft.Windows.PhotoManager

Error: (03/17/2014 00:59:05 AM) (Source: Microsoft-Windows-Immersive-Shell)(User: Yvonne_1)
Description: FileManager_cw5n1h2txyewy!Microsoft.Windows.PhotoManager-2144927142

Error: (03/17/2014 00:59:01 AM) (Source: Microsoft-Windows-Immersive-Shell)(User: Yvonne_1)
Description: FileManager_6.3.9600.16384_neutral_neutral_cw5n1h2txyewy+Microsoft.Windows.PhotoManager


==================== Memory info =========================== 

Percentage of memory in use: 22%
Total physical RAM: 8007.27 MB
Available physical RAM: 6239.95 MB
Total Pagefile: 9287.27 MB
Available Pagefile: 7333.08 MB
Total Virtual: 131072 MB
Available Virtual: 131071.79 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:267.35 GB) (Free:220.73 GB) NTFS
Drive y: (Volume) (Fixed) (Total:179.5 GB) (Free:178.73 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 2FEFB89D)

Partition: GPT Partition Type.

==================== End Of Log ============================
         

Von der 'Addition' war ich etwas verwundert. Im Gegensatz zu den anderen Dateien hat sich da kein neuen Editor-Fenster geöffnet, auf dem Desktop war nur diese Version zu finden, die mir aber veraltet zu sein scheint. Ich hoffe, die wolltest du auch haben?

Hast du JRT in der Vergangenheit schonmal ausgeführt?
FRST erstellt ab dem 2. Ausführen nur eine addtions.txt wenn man selbst einen Haken entsprechend setzt

Das kann gut sein, hatte schon einmal einen ähnlichen Fall, für den ich das Programm ebenfalls benutzte. Hatte es aber in der Zwischenzeit wieder gelöscht, soweit ich weiß.

Habe FRST nochmal laufen lassen, dieses Mal mit Haken:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by Admin (administrator) on YVONNE_1 on 01-04-2014 15:21:43
Running from C:\Users\Yvonne\Desktop
Windows 8.1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\WINDOWS\system32\dashost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
(Microsoft Corporation) c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation) c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\skydrive.exe
(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\WINDOWS\system32\igfxsrvc.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDTouch.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Spotify Ltd) C:\Users\Yvonne\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Intel Corporation) C:\WINDOWS\system32\igfxext.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) c:\Program Files (x86)\Nero\Update\NASvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20413_x64__8wekyb3d8bbwe\LiveComm.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\WINDOWS\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.17031_none_fa50b3979b1bcb4a\TiWorker.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\WINDOWS\WinStore\WSHost.exe
(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\IELowutil.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2890640 2013-04-22] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13550152 2013-05-30] (Realtek Semiconductor)
HKLM-x32\...\Run: [BrMfcWnd] - C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe [1163264 2012-09-25] ()
HKLM-x32\...\Run: [ControlCenter3] - C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4971024 2014-03-19] (AVG Technologies CZ, s.r.o.)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] - C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [133248 2013-05-31] ( (Atheros Communications))
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-2226565400-3139004338-4228191873-1002\...\Run: [Spotify Web Helper] - C:\Users\Yvonne\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1140736 2013-11-03] (Spotify Ltd)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [168616 2013-09-05] (NVIDIA Corporation)
AppInit_DLLs: ,C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [168616 2013-09-05] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [141336 2013-09-05] (NVIDIA Corporation)
Startup: C:\Users\Yvonne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\yvonn_000\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKLM - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKLM - {B71E0977-279D-4CC1-817F-56E17DF226C9} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
SearchScopes: HKCU - {B71E0977-279D-4CC1-817F-56E17DF226C9} URL = 
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} -  No File
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Chrome: 
=======
CHR Extension: (Google Docs) - C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-31]
CHR Extension: (Google Drive) - C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-31]
CHR Extension: (YouTube) - C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-03-31]
CHR Extension: (Google-Suche) - C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-31]
CHR Extension: (Google Wallet) - C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-03-31]
CHR Extension: (Google Mail) - C:\Users\Yvonne\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-31]

==================== Services (Whitelisted) =================

R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [310912 2013-05-31] (Windows (R) Win 7 DDK provider)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3782672 2014-02-23] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe [2615368 2013-02-27] (Acer Incorporated)
S3 DeviceFastLaneService; C:\Program Files\Acer\Acer Device Fast-lane\DeviceFastLaneSvc.exe [470056 2013-04-30] (Acer Incorporated)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [662088 2013-03-15] (Acer Incorporated)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [803872 2012-12-10] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165336 2013-01-14] (Intel Corporation)
R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [431656 2013-06-17] (Acer Incorporate)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [348392 2013-10-31] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2013-10-31] (Microsoft Corporation)
S2 vToolbarUpdater18.0.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.0.0\ToolbarUpdater.exe [X]

==================== Drivers (Whitelisted) ====================

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
S0 Avgboota; C:\Windows\System32\DRIVERS\avgboota.sys [20496 2013-09-04] (AVG Technologies CZ, s.r.o.)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [150808 2013-11-25] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [243480 2013-11-25] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [196376 2013-11-25] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-11-01] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-10-01] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31544 2013-09-10] (AVG Technologies CZ, s.r.o.)
R1 avgtp; C:\WINDOWS\system32\drivers\avgtpx64.sys [50976 2014-03-02] (AVG Technologies)
R1 Avgwfpa; C:\Windows\system32\DRIVERS\avgwfpa.sys [252728 2013-10-21] (AVG Technologies CZ, s.r.o.)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-05-31] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-01-10] (Acer Incorporated)
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [15704 2013-01-10] (Acer Incorporated)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation)
S3 ssudserd; C:\Windows\system32\DRIVERS\ssudserd.sys [204568 2013-10-28] (DEVGURU Co., LTD.(www.devguru.co.kr))
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124760 2013-10-31] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-01 01:06 - 2014-04-01 01:06 - 00000689 _____ () C:\Users\Yvonne\Desktop\JRT.txt
2014-04-01 01:00 - 2014-04-01 01:00 - 01038974 _____ (Thisisu) C:\Users\Yvonne\Desktop\JRT.exe
2014-04-01 01:00 - 2014-04-01 01:00 - 00000020 ___SH () C:\Users\TEMP\ntuser.ini
2014-04-01 01:00 - 2014-04-01 01:00 - 00000000 _SHDL () C:\Users\TEMP\Vorlagen
2014-04-01 01:00 - 2014-04-01 01:00 - 00000000 _SHDL () C:\Users\TEMP\Startmenü
2014-04-01 01:00 - 2014-04-01 01:00 - 00000000 _SHDL () C:\Users\TEMP\Netzwerkumgebung
2014-04-01 01:00 - 2014-04-01 01:00 - 00000000 _SHDL () C:\Users\TEMP\Lokale Einstellungen
2014-04-01 01:00 - 2014-04-01 01:00 - 00000000 _SHDL () C:\Users\TEMP\Eigene Dateien
2014-04-01 01:00 - 2014-04-01 01:00 - 00000000 _SHDL () C:\Users\TEMP\Druckumgebung
2014-04-01 01:00 - 2014-04-01 01:00 - 00000000 _SHDL () C:\Users\TEMP\Documents\Eigene Musik
2014-04-01 01:00 - 2014-04-01 01:00 - 00000000 _SHDL () C:\Users\TEMP\Documents\Eigene Bilder
2014-04-01 01:00 - 2014-04-01 01:00 - 00000000 _SHDL () C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-01 01:00 - 2014-04-01 01:00 - 00000000 _SHDL () C:\Users\TEMP\AppData\Local\Verlauf
2014-04-01 01:00 - 2014-04-01 01:00 - 00000000 _SHDL () C:\Users\TEMP\AppData\Local\Anwendungsdaten
2014-04-01 01:00 - 2014-04-01 01:00 - 00000000 _SHDL () C:\Users\TEMP\Anwendungsdaten
2014-04-01 01:00 - 2014-03-12 17:23 - 00000000 ____D () C:\Users\TEMP\AppData\Roaming\TuneUp Software
2014-04-01 01:00 - 2014-03-12 17:14 - 00000000 ___RD () C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-04-01 01:00 - 2013-11-04 04:28 - 00000000 ____D () C:\Users\TEMP\AppData\Local\Pokki
2014-04-01 01:00 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-04-01 01:00 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-04-01 01:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-04-01 00:54 - 2014-04-01 00:54 - 01950720 _____ () C:\Users\Yvonne\Desktop\adwcleaner.exe
2014-03-31 23:22 - 2014-03-31 23:22 - 00380416 _____ () C:\Users\Yvonne\Downloads\Gmer-19357.exe
2014-03-31 23:20 - 2014-03-31 23:20 - 00027623 _____ () C:\Users\Yvonne\Desktop\Addition.txt
2014-03-31 23:19 - 2014-04-01 15:21 - 00013814 _____ () C:\Users\Yvonne\Desktop\FRST.txt
2014-03-31 23:19 - 2014-04-01 15:21 - 00000000 ____D () C:\FRST
2014-03-31 23:18 - 2014-03-31 23:18 - 02157056 _____ (Farbar) C:\Users\Yvonne\Desktop\FRST64.exe
2014-03-31 23:17 - 2014-03-31 23:17 - 00000472 _____ () C:\Users\Yvonne\Downloads\defogger_disable.log
2014-03-31 23:17 - 2014-03-31 23:17 - 00000000 _____ () C:\Users\Yvonne\defogger_reenable
2014-03-31 23:16 - 2014-03-31 23:16 - 00050477 _____ () C:\Users\Yvonne\Downloads\Defogger.exe
2014-03-31 22:20 - 2014-04-01 15:21 - 00565798 _____ () C:\WINDOWS\WindowsUpdate.log
2014-03-31 22:04 - 2014-03-31 22:04 - 04787368 _____ (Piriform Ltd) C:\Users\Yvonne\Downloads\ccsetup412.exe
2014-03-31 21:30 - 2014-03-31 21:30 - 00002039 _____ () C:\Users\Public\Desktop\Brother Utilities.lnk
2014-03-31 21:26 - 2014-03-31 21:26 - 00000000 ____D () C:\Users\Yvonne\Downloads\mflpro
2014-03-31 21:19 - 2014-03-31 21:22 - 44735552 _____ (A.I.SOFT,INC.) C:\Users\Yvonne\Downloads\DCP-7030-inst-win8-A1.EXE
2014-03-31 21:16 - 2014-03-31 21:16 - 00000000 ____D () C:\Users\yvonn_000\Downloads\mflpro
2014-03-31 21:12 - 2014-03-31 21:15 - 44735552 _____ (A.I.SOFT,INC.) C:\Users\yvonn_000\Downloads\DCP-7030-inst-win8-A1.EXE
2014-03-30 15:16 - 2014-03-30 15:18 - 34763504 _____ (DVDVideoSoft Ltd. ) C:\Users\yvonn_000\Downloads\FreeYouTubeToMP3Converter.exe
2014-03-29 18:21 - 2014-03-29 18:21 - 00000000 ____D () C:\Users\yvonn_000\AppData\Roaming\OpenOffice
2014-03-29 18:19 - 2014-03-29 18:19 - 00001132 _____ () C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk
2014-03-29 18:19 - 2014-03-29 18:19 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-03-29 18:18 - 2014-03-29 18:18 - 00000000 ____D () C:\Users\Yvonne\Desktop\OpenOffice 4.0.1 (de) Installation Files
2014-03-29 17:57 - 2014-03-29 18:09 - 163606685 _____ () C:\Users\yvonn_000\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de.exe
2014-03-28 00:51 - 2014-03-28 00:51 - 00139773 _____ () C:\Users\yvonn_000\Downloads\9B4A.tmp
2014-03-17 20:45 - 2014-03-17 20:45 - 00847832 _____ (Google Inc.) C:\Users\yvonn_000\Downloads\GoogleEarthPluginSetup.exe
2014-03-17 01:45 - 2014-03-17 01:45 - 00000618 _____ () C:\Users\yvonn_000\Desktop\JRT.txt
2014-03-17 00:57 - 2014-03-17 00:57 - 00000000 ____D () C:\Users\yvonn_000\AppData\Roaming\Malwarebytes
2014-03-15 18:24 - 2014-03-15 18:24 - 00001925 _____ () C:\Users\Public\Desktop\HitmanPro.lnk
2014-03-15 18:24 - 2014-03-15 18:24 - 00000000 ____D () C:\Program Files\HitmanPro
2014-03-15 18:22 - 2014-03-15 18:35 - 00000000 ____D () C:\ProgramData\HitmanPro
2014-03-15 18:21 - 2014-03-15 18:22 - 09988304 _____ (SurfRight B.V.) C:\Users\yvonn_000\Downloads\HitmanPro.exe
2014-03-15 18:12 - 2014-03-15 18:12 - 00000000 ____D () C:\Users\Yvonne\AppData\Roaming\Malwarebytes
2014-03-15 18:12 - 2014-03-15 18:12 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-15 18:10 - 2014-03-15 18:11 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\yvonn_000\Downloads\mbam-setup-1.75.0.1300.exe
2014-03-15 17:58 - 2014-03-15 17:58 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-03-15 17:57 - 2014-03-15 17:57 - 01037734 _____ (Thisisu) C:\Users\yvonn_000\Downloads\JRT.exe
2014-03-15 17:41 - 2014-04-01 00:57 - 00000000 ____D () C:\AdwCleaner
2014-03-15 17:41 - 2014-03-15 17:41 - 01950720 _____ () C:\Users\yvonn_000\Downloads\adwcleaner.exe
2014-03-15 17:27 - 2014-04-01 01:00 - 00002159 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-03-15 17:24 - 2014-04-01 01:34 - 00001126 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-15 17:24 - 2014-04-01 00:58 - 00001122 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-15 17:24 - 2014-03-30 23:29 - 00004098 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2014-03-15 17:24 - 2014-03-30 23:29 - 00003862 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2014-03-15 17:24 - 2014-03-15 17:24 - 00000000 ____D () C:\Users\yvonn_000\AppData\Local\Deployment
2014-03-12 17:23 - 2014-03-12 17:23 - 00000000 ____D () C:\Users\Default\AppData\Roaming\TuneUp Software
2014-03-12 17:23 - 2014-03-12 17:23 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\TuneUp Software
2014-03-11 23:52 - 2014-03-11 23:52 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-11 23:52 - 2014-03-11 23:52 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-11 23:51 - 2014-01-31 18:15 - 00311640 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2014-03-11 23:51 - 2014-01-31 18:07 - 00233920 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2014-03-11 23:51 - 2014-01-31 18:06 - 02133208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-03-11 23:51 - 2014-01-31 15:47 - 02143960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-03-11 23:51 - 2014-01-31 11:06 - 00716288 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll
2014-03-11 23:51 - 2014-01-29 11:55 - 01287064 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2014-03-11 23:51 - 2014-01-29 10:53 - 00458616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2014-03-11 23:51 - 2014-01-29 10:53 - 00407024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2014-03-11 23:51 - 2014-01-29 10:49 - 01928144 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2014-03-11 23:51 - 2014-01-29 10:47 - 02543960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-03-11 23:51 - 2014-01-29 09:44 - 01371824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2014-03-11 23:51 - 2014-01-29 09:44 - 00408480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2014-03-11 23:51 - 2014-01-29 09:44 - 00369280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2014-03-11 23:51 - 2014-01-29 08:41 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2014-03-11 23:51 - 2014-01-29 02:36 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2014-03-11 23:51 - 2014-01-27 21:07 - 04175360 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2014-03-11 23:51 - 2014-01-27 21:06 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2014-03-11 23:51 - 2014-01-27 21:04 - 00160256 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2014-03-11 23:51 - 2014-01-27 20:52 - 01036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2014-03-11 23:51 - 2014-01-27 20:23 - 02873344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2014-03-11 23:51 - 2014-01-27 20:21 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2014-03-11 23:51 - 2014-01-27 20:20 - 00138752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE
2014-03-11 23:51 - 2014-01-27 20:15 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-03-11 23:51 - 2014-01-27 19:43 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll
2014-03-11 23:51 - 2014-01-27 19:18 - 01486848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbghelp.dll
2014-03-11 23:51 - 2014-01-27 19:00 - 01238016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbghelp.dll
2014-03-11 23:51 - 2014-01-27 17:58 - 05770752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-03-11 23:51 - 2014-01-27 17:50 - 06640640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-03-11 23:51 - 2014-01-27 13:45 - 00386722 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-03-11 23:51 - 2014-01-18 01:04 - 00764864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-03-11 23:51 - 2014-01-17 23:54 - 00669352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2014-03-11 23:51 - 2013-12-21 16:51 - 06353960 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2014-03-11 23:51 - 2013-12-21 10:54 - 00447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcomapi.dll
2014-03-11 23:42 - 2014-02-11 05:04 - 04189184 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-03-11 23:36 - 2014-03-01 08:05 - 23133696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-03-11 23:36 - 2014-03-01 06:58 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-03-11 23:36 - 2014-03-01 06:30 - 17074688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-03-11 23:36 - 2014-03-01 06:17 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-03-11 23:36 - 2014-03-01 05:54 - 05768704 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-03-11 23:36 - 2014-03-01 05:47 - 02168320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-03-11 23:36 - 2014-03-01 05:42 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-03-11 23:36 - 2014-03-01 05:18 - 13051904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-03-11 23:36 - 2014-03-01 05:14 - 04244480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-03-11 23:36 - 2014-03-01 05:10 - 02334208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-03-11 23:36 - 2014-03-01 05:03 - 00524288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-03-11 23:36 - 2014-03-01 04:57 - 11266048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-03-11 23:36 - 2014-03-01 04:38 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-03-11 23:36 - 2014-03-01 04:32 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-03-11 23:36 - 2014-03-01 04:27 - 01156096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-03-11 23:36 - 2014-03-01 04:25 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-03-11 23:36 - 2014-03-01 04:25 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-03-11 23:34 - 2014-02-22 14:16 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2014-03-11 23:34 - 2014-02-22 13:24 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2014-03-11 23:34 - 2014-02-11 04:43 - 00488448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2014-03-11 23:34 - 2014-02-11 04:04 - 00586240 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2014-03-11 23:34 - 2013-12-20 12:18 - 01643584 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2014-03-11 23:34 - 2013-12-20 12:18 - 01507704 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2014-03-11 23:34 - 2013-10-31 02:29 - 00236888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2014-03-11 23:34 - 2013-10-31 02:29 - 00124760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2014-03-11 23:34 - 2013-10-31 02:28 - 00035856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2014-03-11 00:02 - 2014-03-11 00:02 - 00000244 _____ () C:\Users\yvonn_000\medcd.ini
2014-03-11 00:02 - 2004-11-11 10:54 - 00008682 ____N () C:\Users\yvonn_000\overlay.ini
2014-03-11 00:02 - 2004-11-03 11:34 - 00000000 ____N () C:\Users\yvonn_000\vorlagen.ini
2014-03-08 15:48 - 2014-01-08 03:46 - 00325464 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2014-03-08 15:48 - 2014-01-08 03:41 - 01530712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-03-08 15:48 - 2014-01-08 03:41 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2014-03-08 15:48 - 2014-01-04 17:54 - 00138240 _____ () C:\WINDOWS\system32\OEMLicense.dll
2014-03-08 15:48 - 2014-01-04 17:08 - 00103936 _____ () C:\WINDOWS\SysWOW64\OEMLicense.dll
2014-03-08 15:48 - 2014-01-04 16:08 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll
2014-03-08 15:48 - 2014-01-04 15:53 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll
2014-03-08 15:48 - 2014-01-03 01:54 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2014-03-08 15:48 - 2014-01-03 01:48 - 00336896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2014-03-08 15:48 - 2014-01-01 03:55 - 01720560 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2014-03-08 15:48 - 2014-01-01 03:52 - 00481944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-03-08 15:48 - 2014-01-01 02:56 - 01472048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2014-03-08 15:48 - 2014-01-01 02:55 - 00381168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2014-03-08 15:48 - 2014-01-01 01:59 - 00802816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-03-08 15:48 - 2014-01-01 01:57 - 01214976 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2014-03-08 15:48 - 2014-01-01 01:56 - 00960512 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-03-08 15:48 - 2013-12-31 01:34 - 00218112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sti.dll
2014-03-08 15:48 - 2013-12-31 01:33 - 00770560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2014-03-08 15:48 - 2013-12-31 01:32 - 00303616 _____ (Microsoft Corporation) C:\WINDOWS\system32\sti.dll
2014-03-08 15:48 - 2013-12-31 01:31 - 00947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2014-03-08 15:48 - 2013-12-31 01:31 - 00914944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2014-03-08 15:48 - 2013-12-27 17:09 - 00419160 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2014-03-08 15:48 - 2013-12-27 10:57 - 00842752 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingFacility.dll
2014-03-08 15:48 - 2013-12-27 10:57 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2014-03-08 15:48 - 2013-12-27 10:23 - 00749056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2014-03-08 15:48 - 2013-12-27 09:03 - 00630272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsSpellCheckingFacility.dll
2014-03-08 15:48 - 2013-12-27 09:03 - 00478208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2014-03-08 15:48 - 2013-12-27 08:37 - 00588800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2014-03-08 15:48 - 2013-12-21 09:21 - 00376320 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnrpsvc.dll
2014-03-08 15:48 - 2013-12-17 09:21 - 00408576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2014-03-08 15:48 - 2013-12-14 08:31 - 13949440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-03-08 15:48 - 2013-12-14 08:19 - 18576384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-03-08 15:48 - 2013-12-13 12:54 - 00131160 _____ (Microsoft Corporation) C:\WINDOWS\system32\easinvoker.exe
2014-03-08 15:48 - 2013-12-13 08:36 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll
2014-03-08 15:48 - 2013-12-13 07:32 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\easwrt.dll
2014-03-08 15:48 - 2013-12-09 10:05 - 21199256 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-03-08 15:48 - 2013-12-09 06:51 - 18643560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-03-04 03:27 - 2014-03-04 03:49 - 289003621 _____ () C:\Users\yvonn_000\Downloads\wetransfer-74de4e.zip

==================== One Month Modified Files and Folders =======

2014-04-01 15:21 - 2014-03-31 23:19 - 00013814 _____ () C:\Users\Yvonne\Desktop\FRST.txt
2014-04-01 15:21 - 2014-03-31 23:19 - 00000000 ____D () C:\FRST
2014-04-01 15:21 - 2014-03-31 22:20 - 00565798 _____ () C:\WINDOWS\WindowsUpdate.log
2014-04-01 15:21 - 2013-11-11 00:37 - 00003930 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{7309CF47-AB66-47C1-9245-9B49FCF00E1C}
2014-04-01 15:20 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-04-01 01:34 - 2014-03-15 17:24 - 00001126 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-01 01:29 - 2013-11-02 20:03 - 00003600 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2226565400-3139004338-4228191873-1002
2014-04-01 01:06 - 2014-04-01 01:06 - 00000689 _____ () C:\Users\Yvonne\Desktop\JRT.txt
2014-04-01 01:03 - 2013-09-30 06:14 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-04-01 01:03 - 2013-09-30 05:56 - 00765582 _____ () C:\WINDOWS\system32\perfh007.dat
2014-04-01 01:03 - 2013-09-30 05:56 - 00159366 _____ () C:\WINDOWS\system32\perfc007.dat
2014-04-01 01:00 - 2014-04-01 01:00 - 01038974 _____ (Thisisu) C:\Users\Yvonne\Desktop\JRT.exe
2014-04-01 01:00 - 2014-04-01 01:00 - 00000020 ___SH () C:\Users\TEMP\ntuser.ini
2014-04-01 01:00 - 2014-04-01 01:00 - 00000000 _SHDL () C:\Users\TEMP\Vorlagen
2014-04-01 01:00 - 2014-04-01 01:00 - 00000000 _SHDL () C:\Users\TEMP\Startmenü
2014-04-01 01:00 - 2014-04-01 01:00 - 00000000 _SHDL () C:\Users\TEMP\Netzwerkumgebung
2014-04-01 01:00 - 2014-04-01 01:00 - 00000000 _SHDL () C:\Users\TEMP\Lokale Einstellungen
2014-04-01 01:00 - 2014-04-01 01:00 - 00000000 _SHDL () C:\Users\TEMP\Eigene Dateien
2014-04-01 01:00 - 2014-04-01 01:00 - 00000000 _SHDL () C:\Users\TEMP\Druckumgebung
2014-04-01 01:00 - 2014-04-01 01:00 - 00000000 _SHDL () C:\Users\TEMP\Documents\Eigene Musik
2014-04-01 01:00 - 2014-04-01 01:00 - 00000000 _SHDL () C:\Users\TEMP\Documents\Eigene Bilder
2014-04-01 01:00 - 2014-04-01 01:00 - 00000000 _SHDL () C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-01 01:00 - 2014-04-01 01:00 - 00000000 _SHDL () C:\Users\TEMP\AppData\Local\Verlauf
2014-04-01 01:00 - 2014-04-01 01:00 - 00000000 _SHDL () C:\Users\TEMP\AppData\Local\Anwendungsdaten
2014-04-01 01:00 - 2014-04-01 01:00 - 00000000 _SHDL () C:\Users\TEMP\Anwendungsdaten
2014-04-01 01:00 - 2014-03-15 17:27 - 00002159 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-04-01 00:58 - 2014-03-15 17:24 - 00001122 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-01 00:58 - 2013-11-04 14:35 - 00000000 __RDO () C:\Users\Yvonne\SkyDrive
2014-04-01 00:58 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-04-01 00:57 - 2014-03-15 17:41 - 00000000 ____D () C:\AdwCleaner
2014-04-01 00:57 - 2013-08-22 15:25 - 01048576 ___SH () C:\WINDOWS\system32\config\BBI
2014-04-01 00:54 - 2014-04-01 00:54 - 01950720 _____ () C:\Users\Yvonne\Desktop\adwcleaner.exe
2014-04-01 00:10 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-03-31 23:22 - 2014-03-31 23:22 - 00380416 _____ () C:\Users\Yvonne\Downloads\Gmer-19357.exe
2014-03-31 23:20 - 2014-03-31 23:20 - 00027623 _____ () C:\Users\Yvonne\Desktop\Addition.txt
2014-03-31 23:18 - 2014-03-31 23:18 - 02157056 _____ (Farbar) C:\Users\Yvonne\Desktop\FRST64.exe
2014-03-31 23:17 - 2014-03-31 23:17 - 00000472 _____ () C:\Users\Yvonne\Downloads\defogger_disable.log
2014-03-31 23:17 - 2014-03-31 23:17 - 00000000 _____ () C:\Users\Yvonne\defogger_reenable
2014-03-31 23:17 - 2013-11-04 04:24 - 00000000 ____D () C:\Users\Yvonne
2014-03-31 23:16 - 2014-03-31 23:16 - 00050477 _____ () C:\Users\Yvonne\Downloads\Defogger.exe
2014-03-31 22:48 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\LiveKernelReports
2014-03-31 22:23 - 2013-11-02 23:43 - 00000000 ____D () C:\Program Files (x86)\Google
2014-03-31 22:05 - 2014-01-13 00:14 - 00000000 ____D () C:\WINDOWS\Minidump
2014-03-31 22:04 - 2014-03-31 22:04 - 04787368 _____ (Piriform Ltd) C:\Users\Yvonne\Downloads\ccsetup412.exe
2014-03-31 22:04 - 2013-11-03 17:09 - 00000838 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-03-31 22:04 - 2013-11-03 17:09 - 00000000 ____D () C:\Program Files\CCleaner
2014-03-31 21:30 - 2014-03-31 21:30 - 00002039 _____ () C:\Users\Public\Desktop\Brother Utilities.lnk
2014-03-31 21:30 - 2013-11-11 00:27 - 00000050 _____ () C:\WINDOWS\system32\bd7030.dat
2014-03-31 21:29 - 2013-11-11 00:23 - 00000000 ____D () C:\Program Files (x86)\Brother
2014-03-31 21:26 - 2014-03-31 21:26 - 00000000 ____D () C:\Users\Yvonne\Downloads\mflpro
2014-03-31 21:23 - 2013-11-02 23:44 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2226565400-3139004338-4228191873-1006
2014-03-31 21:22 - 2014-03-31 21:19 - 44735552 _____ (A.I.SOFT,INC.) C:\Users\Yvonne\Downloads\DCP-7030-inst-win8-A1.EXE
2014-03-31 21:18 - 2013-11-02 23:43 - 00000000 ____D () C:\Users\Yvonne\AppData\Local\Google
2014-03-31 21:17 - 2013-11-02 19:57 - 00000000 ___RD () C:\Users\Yvonne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-31 21:17 - 2013-11-02 19:57 - 00000000 ___RD () C:\Users\Yvonne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-03-31 21:16 - 2014-03-31 21:16 - 00000000 ____D () C:\Users\yvonn_000\Downloads\mflpro
2014-03-31 21:15 - 2014-03-31 21:12 - 44735552 _____ (A.I.SOFT,INC.) C:\Users\yvonn_000\Downloads\DCP-7030-inst-win8-A1.EXE
2014-03-31 20:55 - 2014-01-05 23:20 - 00000000 ____D () C:\ProgramData\MFAData
2014-03-31 16:39 - 2014-01-05 23:30 - 00000961 _____ () C:\Users\Public\Desktop\AVG 2014.lnk
2014-03-31 16:38 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-03-31 16:36 - 2013-11-05 18:01 - 00003946 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{D90E8785-4B32-4992-B33B-F2E9767E07D0}
2014-03-31 16:35 - 2013-11-04 14:40 - 00000000 __RDO () C:\Users\yvonn_000\SkyDrive
2014-03-30 23:29 - 2014-03-15 17:24 - 00004098 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2014-03-30 23:29 - 2014-03-15 17:24 - 00003862 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2014-03-30 22:29 - 2013-11-18 17:51 - 00083128 _____ () C:\Users\yvonn_000\AppData\Local\GDIPFONTCACHEV1.DAT
2014-03-30 15:18 - 2014-03-30 15:16 - 34763504 _____ (DVDVideoSoft Ltd. ) C:\Users\yvonn_000\Downloads\FreeYouTubeToMP3Converter.exe
2014-03-30 02:31 - 2013-08-22 16:44 - 00383448 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-03-29 18:21 - 2014-03-29 18:21 - 00000000 ____D () C:\Users\yvonn_000\AppData\Roaming\OpenOffice
2014-03-29 18:19 - 2014-03-29 18:19 - 00001132 _____ () C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk
2014-03-29 18:19 - 2014-03-29 18:19 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-03-29 18:18 - 2014-03-29 18:18 - 00000000 ____D () C:\Users\Yvonne\Desktop\OpenOffice 4.0.1 (de) Installation Files
2014-03-29 18:09 - 2014-03-29 17:57 - 163606685 _____ () C:\Users\yvonn_000\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de.exe
2014-03-28 00:51 - 2014-03-28 00:51 - 00139773 _____ () C:\Users\yvonn_000\Downloads\9B4A.tmp
2014-03-25 22:33 - 2013-11-02 23:45 - 00000000 ____D () C:\Users\yvonn_000\AppData\Roaming\Spotify
2014-03-24 22:05 - 2013-11-02 23:45 - 00000000 ____D () C:\Users\yvonn_000\AppData\Local\Spotify
2014-03-17 20:45 - 2014-03-17 20:45 - 00847832 _____ (Google Inc.) C:\Users\yvonn_000\Downloads\GoogleEarthPluginSetup.exe
2014-03-17 01:45 - 2014-03-17 01:45 - 00000618 _____ () C:\Users\yvonn_000\Desktop\JRT.txt
2014-03-17 00:59 - 2014-02-17 01:39 - 00060928 ___SH () C:\Users\yvonn_000\Downloads\Thumbs.db
2014-03-17 00:57 - 2014-03-17 00:57 - 00000000 ____D () C:\Users\yvonn_000\AppData\Roaming\Malwarebytes
2014-03-15 22:19 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-03-15 18:35 - 2014-03-15 18:22 - 00000000 ____D () C:\ProgramData\HitmanPro
2014-03-15 18:24 - 2014-03-15 18:24 - 00001925 _____ () C:\Users\Public\Desktop\HitmanPro.lnk
2014-03-15 18:24 - 2014-03-15 18:24 - 00000000 ____D () C:\Program Files\HitmanPro
2014-03-15 18:22 - 2014-03-15 18:21 - 09988304 _____ (SurfRight B.V.) C:\Users\yvonn_000\Downloads\HitmanPro.exe
2014-03-15 18:12 - 2014-03-15 18:12 - 00000000 ____D () C:\Users\Yvonne\AppData\Roaming\Malwarebytes
2014-03-15 18:12 - 2014-03-15 18:12 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-15 18:11 - 2014-03-15 18:10 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\yvonn_000\Downloads\mbam-setup-1.75.0.1300.exe
2014-03-15 18:00 - 2013-11-02 23:35 - 00000000 ____D () C:\Users\yvonn_000\AppData\Local\Packages
2014-03-15 17:58 - 2014-03-15 17:58 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-03-15 17:57 - 2014-03-15 17:57 - 01037734 _____ (Thisisu) C:\Users\yvonn_000\Downloads\JRT.exe
2014-03-15 17:50 - 2013-11-04 14:32 - 00001025 _____ () C:\Users\Yvonne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-03-15 17:41 - 2014-03-15 17:41 - 01950720 _____ () C:\Users\yvonn_000\Downloads\adwcleaner.exe
2014-03-15 17:24 - 2014-03-15 17:24 - 00000000 ____D () C:\Users\yvonn_000\AppData\Local\Deployment
2014-03-15 17:15 - 2013-06-04 06:26 - 00000000 ____D () C:\Program Files (x86)\WildTangent Games
2014-03-15 17:14 - 2013-06-04 06:26 - 00000000 ____D () C:\ProgramData\WildTangent
2014-03-13 20:36 - 2013-11-11 00:54 - 00000432 _____ () C:\WINDOWS\BRWMARK.INI
2014-03-13 20:35 - 2013-11-11 00:54 - 00000034 _____ () C:\WINDOWS\SysWOW64\BD7030.DAT
2014-03-12 17:23 - 2014-04-01 01:00 - 00000000 ____D () C:\Users\TEMP\AppData\Roaming\TuneUp Software
2014-03-12 17:23 - 2014-03-12 17:23 - 00000000 ____D () C:\Users\Default\AppData\Roaming\TuneUp Software
2014-03-12 17:23 - 2014-03-12 17:23 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\TuneUp Software
2014-03-12 17:14 - 2014-04-01 01:00 - 00000000 ___RD () C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-03-12 17:14 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-03-12 17:14 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-03-12 17:14 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-03-12 17:14 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-03-11 23:56 - 2013-11-02 21:51 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-03-11 23:54 - 2013-11-02 21:51 - 90015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-03-11 23:52 - 2014-03-11 23:52 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-11 23:52 - 2014-03-11 23:52 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-11 00:02 - 2014-03-11 00:02 - 00000244 _____ () C:\Users\yvonn_000\medcd.ini
2014-03-11 00:02 - 2013-11-04 04:24 - 00000000 ____D () C:\Users\yvonn_000
2014-03-08 20:04 - 2013-11-02 23:36 - 00000000 ___RD () C:\Users\yvonn_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-08 20:04 - 2013-11-02 23:36 - 00000000 ___RD () C:\Users\yvonn_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-03-08 20:01 - 2014-01-12 23:11 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV
2014-03-08 20:01 - 2014-01-12 23:11 - 00000000 ____D () C:\WINDOWS\system32\NV
2014-03-08 19:59 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-03-05 00:53 - 2013-08-22 17:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-03-05 00:53 - 2013-08-22 17:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-04 03:49 - 2014-03-04 03:27 - 289003621 _____ () C:\Users\yvonn_000\Downloads\wetransfer-74de4e.zip
2014-03-02 20:22 - 2014-01-09 20:27 - 00050976 _____ (AVG Technologies) C:\WINDOWS\system32\Drivers\avgtpx64.sys

Some content of TEMP:
====================
C:\Users\Yvonne\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys
[2014-03-11 23:51] - [2014-01-31 18:15] - 0311640 ___AC (Microsoft Corporation) C85C075DE5B6D0FE116043054DE8EE02



LastRegBack: 2014-03-28 20:20

==================== End Of Log ============================
         

--- --- ---

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by Admin at 2014-04-01 15:22:23
Running from C:\Users\Yvonne\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}

==================== Installed Programs ======================

 clear.fi SDK - Video 2 (x32 Version: 2.1.2606 - CyberLink Corp.) Hidden
 clear.fi SDK- Movie 2 (x32 Version: 2.1.2606 - CyberLink Corp.) Hidden
 DCP-7030 (HKLM-x32\...\{46E1B1F2-A279-4356-9B17-029F9CC72EAE}) (Version: 2.0.0.0 - Brother Industries, Ltd.)
Acer Device Fast-lane (HKLM\...\{3F62D2FD-13C1-49A2-8B5D-47623D9460D7}) (Version: 1.00.3013 - Acer Incorporated)
Acer Games (HKCU\...\Pokki_03d432a7e610c3e908213e7689d4342ce2111caf) (Version: 1.1.7.42206 - Pokki)
Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.3005 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.3013 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.3016 - Acer Incorporated)
AcerCloud Docs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.01.2008 - Acer Incorporated)
AcerCloud Portal (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 2.02.2022 - Acer Incorporated)
AVG 2014 (HKLM\...\AVG) (Version: 2014.0.4355 - AVG Technologies)
AVG 2014 (Version: 14.0.3722 - AVG Technologies) Hidden
AVG 2014 (Version: 14.0.4355 - AVG Technologies) Hidden
Broadcom Card Reader Driver Installer (HKLM\...\{67AA948F-8D83-4566-B84A-7CAABCF64E3F}) (Version: 16.0.2.6 - Broadcom Corporation)
Broadcom NetLink Controller (HKLM\...\{D1D7ED66-5C08-40A0-AEC0-B6DF977697BB}) (Version: 16.0.2.4 - Broadcom Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 4.12 - Piriform)
clear.fi Media (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.02.2012 - Acer Incorporated)
clear.fi Photo (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 2.02.2016 - Acer Incorporated)
Compatibility Pack für 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Dropbox (HKCU\...\Dropbox) (Version: 2.6.7 - Dropbox, Inc.)
ETDWare PS/2-X64 11.6.23.203_WHQL (HKLM\...\Elantech) (Version: 11.6.23.203 - ELAN Microelectronic Corp.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 33.0.1750.154 - Google Inc.)
Google Update Helper (x32 Version: 1.3.23.9 - Google Inc.) Hidden
HitmanPro 3.7 (HKLM\...\HitmanPro37) (Version: 3.7.9.216 - SurfRight B.V.)
Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.3006 - Acer Incorporated)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.30.1349 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3412 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.4.1001 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.27.757.1 - Intel Corporation) Hidden
Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.3010 - Acer Incorporated)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Standard Edition 2003 (HKLM-x32\...\{91120407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2005 Tools for Office Runtime (x32 Version: 8.0.60940.0 - Microsoft Corporation) Hidden
Microsoft-Maus- und Tastatur-Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.2.173.0 - Microsoft Corporation)
Microsoft-Maus- und Tastatur-Center (Version: 2.2.173.0 - Microsoft Corporation) Hidden
Nero BackItUp (x32 Version: 12.5.5000 - Nero AG) Hidden
Nero BackItUp 12 Essentials OEM.a01 (HKLM-x32\...\{4CA8F973-6377-4ABF-9ED5-CC2323B3C000}) (Version: 12.5.00500 - Nero AG)
Nero BackItUp Help (CHM) (x32 Version: 12.0.10000 - Nero AG) Hidden
Nero ControlCenter (x32 Version: 11.0.15600 - Nero AG) Hidden
Nero ControlCenter Help (CHM) (x32 Version: 12.0.7000 - Nero AG) Hidden
Nero Core Components (x32 Version: 11.0.20200 - Nero AG) Hidden
Nero Launcher (x32 Version: 12.2.7000 - Nero AG) Hidden
Nero RescueAgent (x32 Version: 12.0.3001 - Nero AG) Hidden
Nero RescueAgent Help (CHM) (x32 Version: 12.0.7000 - Nero AG) Hidden
Nero Update (x32 Version: 11.0.11800.31.0 - Nero AG) Hidden
NVIDIA Grafiktreiber 327.02 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.02 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.133.889 - NVIDIA Corporation) Hidden
NVIDIA Optimus 1.14.17 (Version: 1.14.17 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.12.1031 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.12.1031 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.1031 - NVIDIA Corporation)
NVIDIA Systemsteuerung 327.02 (Version: 327.02 - NVIDIA Corporation) Hidden
NVIDIA Update 1.14.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.14.17 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.14.17 - NVIDIA Corporation) Hidden
Office Addin (HKLM-x32\...\{6D2BBE1D-E600-4695-BA37-0B0E605542CC}) (Version: 2.02.2008 - Acer)
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.228 - Qualcomm Atheros Communications)
Qualcomm Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 11.57 - Qualcomm Atheros)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6927 - Realtek Semiconductor Corp.)
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Snap.Do (HKLM-x32\...\{92109C97-2662-4353-9386-B64309F595C9}) (Version: 11.8.1.13233 - ReSoft Ltd.) <==== ATTENTION
Snap.Do Engine (HKCU\...\{63f52852-583d-43e7-93fe-56819f60e7fc}) (Version: 11.8.1.13233 - ReSoft Ltd.) <==== ATTENTION
Spotify (HKLM-x32\...\Spotify) (Version: 0.8.4.99.ga249b5f1 - Spotify AB)
Visual Studio 2005 Tools for Office Second Edition Runtime (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Office Runtime) (Version:  - Microsoft Corporation)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
Visual Studio Tools for the Office system 3.0 Runtime (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version:  - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime (x32 Version: 9.0.30729 - Microsoft Corporation) Hidden
Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation)

==================== Restore Points  =========================

11-03-2014 21:51:26 Windows Update
21-03-2014 19:02:39 Geplanter Prüfpunkt
28-03-2014 19:16:26 Geplanter Prüfpunkt
31-03-2014 19:28:04 Installiert MFL-Pro Suite

==================== Hosts content: ==========================

2013-08-22 15:25 - 2014-03-17 01:17 - 00001070 ____A C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1 hxxp://myvideo.ivwbox.de
127.0.0.1 hxxp://yahoo.ivwbox.de
127.0.0.1 hxxp://facebook.ivwbox.de
127.0.0.1 hxxp://youtube.ivwbox.de
127.0.0.1 hxxp://chefkoch.ivwbox.de
127.0.0.1 hxxp://pro7.ivwbox.de
127.0.0.1 hxxp://sat1.ivwbox.de


==================== Scheduled Tasks (whitelisted) =============

Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {07BD461F-A862-4EE8-BE99-8B8DEBBBE136} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {39BA9889-2FD7-46AA-92A2-1C02FDC229DC} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-03-15] (Google Inc.)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {7102717A-B900-4271-8C2C-AF3A11DA13B1} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2013-01-22] ()
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {A6E8DC38-71C5-4C86-B40D-F18BA2520CB3} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)
Task: {AC48D7AF-AA09-4D13-B0CB-A439FBCA2FC1} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation)
Task: {AEEE6356-E35F-46D3-87C4-BF1E604E3C34} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2013-05-13] (Microsoft)
Task: {BFE0E547-583B-4E77-A26A-1EC996113790} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-03-15] (Google Inc.)
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {E0D5FC77-44D3-491F-8A61-08E95D37D34C} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTray.exe [2013-03-15] (Acer Incorporated)
Task: {E656C6B7-EB7A-409E-B852-23EE06A5C659} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-03-18] (Piriform Ltd)
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: {E70FFE47-7B19-44B4-848D-A6C018C4192C} - \RegClean Pro No Task File
Task: {F0886613-882E-4F7A-8602-504F882EEBAA} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation)
Task: {F0F63771-0306-4BB1-8D34-78878EEAD8AF} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2013-06-17] (Acer Incorporate)
Task: {F1A11905-6598-43BD-A89C-E8CF4CF5F986} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2013-03-13] ()
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-09-05 03:36 - 2013-09-05 03:36 - 00013088 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll
2013-05-31 01:23 - 2013-05-31 01:23 - 00011264 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2013-05-31 01:19 - 2013-05-31 01:19 - 00086016 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\Map\MAP.dll
2013-05-31 01:53 - 2013-05-31 01:53 - 00012928 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
2013-10-04 00:42 - 2013-10-04 00:42 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2014-02-27 19:24 - 2014-02-27 19:24 - 00183296 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20413_x64__8wekyb3d8bbwe\ErrorReporting.dll
2013-09-06 05:51 - 2013-01-14 20:25 - 01200088 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2014-03-15 17:27 - 2014-03-15 02:50 - 00051016 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\chrome_elf.dll
2013-09-06 06:25 - 2013-02-20 22:58 - 00089672 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\Clearfishellext.dll
2014-03-15 17:27 - 2014-03-15 02:50 - 00716616 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\libglesv2.dll
2014-03-15 17:27 - 2014-03-15 02:50 - 00100168 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\libegl.dll
2014-03-15 17:27 - 2014-03-15 02:50 - 04061000 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\pdf.dll
2014-03-15 17:27 - 2014-03-15 02:50 - 00394568 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\ppGoogleNaClPluginChrome.dll
2014-03-15 17:27 - 2014-03-15 02:50 - 01647432 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\ffmpegsumo.dll
2014-03-15 17:27 - 2014-03-15 02:50 - 13637448 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Users\Yvonne\SkyDrive:ms-properties
AlternateDataStreams: C:\Users\yvonn_000\SkyDrive:ms-properties

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""

==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (04/01/2014 01:00:14 AM) (Source: Microsoft-Windows-User Profiles Service) (User: Yvonne_1)
Description: Das lokale Benutzerprofil wurde nicht gefunden. Sie werden mit einem temporären Benutzerprofil angemeldet. Änderungen, die Sie am Benutzerprofil vornehmen, gehen bei der Abmeldung verloren.

Error: (04/01/2014 01:00:14 AM) (Source: Microsoft-Windows-User Profiles Service) (User: Yvonne_1)
Description: Dieses Benutzerprofil wurde gesichert. Bei der nächsten Anmeldung dieses Benutzers wird automatisch versucht, dieses gesicherte Profil zu verwenden.

Error: (04/01/2014 01:00:14 AM) (Source: Microsoft-Windows-User Profiles Service) (User: Yvonne_1)
Description: Das lokal gespeicherte Profil kann nicht geladen werden. Mögliche Fehlerursachen sind nicht ausreichende Sicherheitsrechte oder ein beschädigtes lokales Profil. 

 Details - Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.

Error: (04/01/2014 01:00:14 AM) (Source: Microsoft-Windows-User Profiles Service) (User: NT-AUTORITÄT)
Description: Die Registrierung konnte nicht geladen werden. Dieses Problem wird oft durch zuwenig Arbeitsspeicher oder nicht ausreichende Sicherheitsberechtigungen verursacht. 

 Details - Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.
 for C:\Users\UpdatusUser\ntuser.dat

Error: (03/31/2014 11:46:14 PM) (Source: Application Hang) (User: )
Description: Programm PhotosApp.exe, Version 6.3.9600.16507 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 938

Startzeit: 01cf4d2a96b650c3

Endzeit: 4294967295

Anwendungspfad: C:\WINDOWS\FileManager\PhotosApp.exe

Berichts-ID: dffd41d3-b91d-11e3-be8f-201a06162ef8

Vollständiger Name des fehlerhaften Pakets: FileManager_6.3.9600.16384_neutral_neutral_cw5n1h2txyewy

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Microsoft.Windows.PhotoManager

Error: (03/31/2014 11:46:12 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: YVONNE_1)
Description: Bei der Aktivierung der App „FileManager_cw5n1h2txyewy!Microsoft.Windows.PhotoManager“ ist folgender Fehler aufgetreten: -2144927142. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (03/31/2014 11:46:08 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: YVONNE_1)
Description: Die App „FileManager_6.3.9600.16384_neutral_neutral_cw5n1h2txyewy+Microsoft.Windows.PhotoManager“ wurde nicht innerhalb der vorgesehenen Zeit gestartet.

Error: (03/31/2014 11:30:30 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Gmer-19357.exe, Version: 2.1.19357.0, Zeitstempel: 0x52e7ea83
Name des fehlerhaften Moduls: Gmer-19357.exe, Version: 2.1.19357.0, Zeitstempel: 0x52e7ea83
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000011aa
ID des fehlerhaften Prozesses: 0x500
Startzeit der fehlerhaften Anwendung: 0xGmer-19357.exe0
Pfad der fehlerhaften Anwendung: Gmer-19357.exe1
Pfad des fehlerhaften Moduls: Gmer-19357.exe2
Berichtskennung: Gmer-19357.exe3
Vollständiger Name des fehlerhaften Pakets: Gmer-19357.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Gmer-19357.exe5

Error: (03/31/2014 11:27:58 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Gmer-19357.exe, Version: 2.1.19357.0, Zeitstempel: 0x52e7ea83
Name des fehlerhaften Moduls: Gmer-19357.exe, Version: 2.1.19357.0, Zeitstempel: 0x52e7ea83
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000011aa
ID des fehlerhaften Prozesses: 0xfec
Startzeit der fehlerhaften Anwendung: 0xGmer-19357.exe0
Pfad der fehlerhaften Anwendung: Gmer-19357.exe1
Pfad des fehlerhaften Moduls: Gmer-19357.exe2
Berichtskennung: Gmer-19357.exe3
Vollständiger Name des fehlerhaften Pakets: Gmer-19357.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Gmer-19357.exe5

Error: (03/31/2014 11:27:21 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Gmer-19357.exe, Version: 2.1.19357.0, Zeitstempel: 0x52e7ea83
Name des fehlerhaften Moduls: Gmer-19357.exe, Version: 2.1.19357.0, Zeitstempel: 0x52e7ea83
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000011aa
ID des fehlerhaften Prozesses: 0x1b30
Startzeit der fehlerhaften Anwendung: 0xGmer-19357.exe0
Pfad der fehlerhaften Anwendung: Gmer-19357.exe1
Pfad des fehlerhaften Moduls: Gmer-19357.exe2
Berichtskennung: Gmer-19357.exe3
Vollständiger Name des fehlerhaften Pakets: Gmer-19357.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Gmer-19357.exe5


System errors:
=============
Error: (04/01/2014 03:20:54 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (04/01/2014 00:58:09 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "vToolbarUpdater18.0.0" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (03/31/2014 11:46:12 PM) (Source: DCOM) (User: YVONNE_1)
Description: Microsoft.Windows.PhotoManager

Error: (03/31/2014 10:20:44 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "vToolbarUpdater18.0.0" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (03/31/2014 10:19:36 PM) (Source: Service Control Manager) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (03/31/2014 10:19:33 PM) (Source: DCOM) (User: YVONNE_1)
Description: {9BA05972-F6A8-11CF-A442-00A0C90A8F39}

Error: (03/31/2014 09:33:21 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "vToolbarUpdater18.0.0" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (03/31/2014 09:30:16 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80246007 fehlgeschlagen: Microsoft.BingHealthAndFitness

Error: (03/31/2014 09:30:16 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80246007 fehlgeschlagen: ZinioLLC.Zinio

Error: (03/31/2014 09:30:11 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80246007 fehlgeschlagen: Microsoft.BingTravel


Microsoft Office Sessions:
=========================
Error: (04/01/2014 01:00:14 AM) (Source: Microsoft-Windows-User Profiles Service)(User: Yvonne_1)
Description: 

Error: (04/01/2014 01:00:14 AM) (Source: Microsoft-Windows-User Profiles Service)(User: Yvonne_1)
Description: 

Error: (04/01/2014 01:00:14 AM) (Source: Microsoft-Windows-User Profiles Service)(User: Yvonne_1)
Description: Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.

Error: (04/01/2014 01:00:14 AM) (Source: Microsoft-Windows-User Profiles Service)(User: NT-AUTORITÄT)
Description: Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.
C:\Users\UpdatusUser\ntuser.dat

Error: (03/31/2014 11:46:14 PM) (Source: Application Hang)(User: )
Description: PhotosApp.exe6.3.9600.1650793801cf4d2a96b650c34294967295C:\WINDOWS\FileManager\PhotosApp.exedffd41d3-b91d-11e3-be8f-201a06162ef8FileManager_6.3.9600.16384_neutral_neutral_cw5n1h2txyewyMicrosoft.Windows.PhotoManager

Error: (03/31/2014 11:46:12 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: YVONNE_1)
Description: FileManager_cw5n1h2txyewy!Microsoft.Windows.PhotoManager-2144927142

Error: (03/31/2014 11:46:08 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: YVONNE_1)
Description: FileManager_6.3.9600.16384_neutral_neutral_cw5n1h2txyewy+Microsoft.Windows.PhotoManager

Error: (03/31/2014 11:30:30 PM) (Source: Application Error)(User: )
Description: Gmer-19357.exe2.1.19357.052e7ea83Gmer-19357.exe2.1.19357.052e7ea83c0000005000011aa50001cf4d286de4b80bC:\Users\Yvonne\Downloads\Gmer-19357.exeC:\Users\Yvonne\Downloads\Gmer-19357.exeae6532b0-b91b-11e3-be8f-201a06162ef8

Error: (03/31/2014 11:27:58 PM) (Source: Application Error)(User: )
Description: Gmer-19357.exe2.1.19357.052e7ea83Gmer-19357.exe2.1.19357.052e7ea83c0000005000011aafec01cf4d2812643d68C:\Users\Yvonne\Downloads\Gmer-19357.exeC:\Users\Yvonne\Downloads\Gmer-19357.exe53c9f610-b91b-11e3-be8f-201a06162ef8

Error: (03/31/2014 11:27:21 PM) (Source: Application Error)(User: )
Description: Gmer-19357.exe2.1.19357.052e7ea83Gmer-19357.exe2.1.19357.052e7ea83c0000005000011aa1b3001cf4d27dadb8767C:\Users\Yvonne\Downloads\Gmer-19357.exeC:\Users\Yvonne\Downloads\Gmer-19357.exe3de55f11-b91b-11e3-be8f-201a06162ef8


==================== Memory info =========================== 

Percentage of memory in use: 21%
Total physical RAM: 8007.27 MB
Available physical RAM: 6262.15 MB
Total Pagefile: 9287.27 MB
Available Pagefile: 7385.2 MB
Total Virtual: 131072 MB
Available Virtual: 131071.83 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:267.35 GB) (Free:218.09 GB) NTFS
Drive y: (Volume) (Fixed) (Total:179.5 GB) (Free:178.73 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 2FEFB89D)

Partition: GPT Partition Type.

==================== End Of Log ============================
         

Edit

Kontrollscans mit MBAM und ESET bitte

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Und es geht weiter..

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 02.04.2014
Suchlauf-Zeit: 20:59:36
Logdatei: MBAM.txt
Administrator: Ja

Version: 2.00.0.1000
Malware Datenbank: v2014.04.02.07
Rootkit Datenbank: v2014.03.27.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Chameleon: Deaktiviert

Betriebssystem: Windows 8.1
CPU: x64
Dateisystem: NTFS
Benutzer: Admin

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 315923
Verstrichene Zeit: 18 Min, 16 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Shuriken: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 1
PUP.Optional.PlusHD.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Plus-HD-1.3, In Quarantäne, [3ac650b0b0505ea218d76bf21ee4a759], 

Registrierungswerte: 0
(No malicious items detected)

Registrierungsdaten: 2
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[bc44f60aa35d6f91e678838ee222a25e]
PUP.Optional.SnapDo.A, HKU\S-1-5-21-2226565400-3139004338-4228191873-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, hxxp://feed.snapdo.com/?publisher=Tuguu&dpid=Tuguu&co=DE&userid=1893ba43-fd51-51f6-5d88-dc567d5d5f38&searchtype=ds&q={searchTerms}&installDate=19/12/2013, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?publisher=Tuguu&dpid=Tuguu&co=DE&userid=1893ba43-fd51-51f6-5d88-dc567d5d5f38&searchtype=ds&q={searchTerms}&installDate=19/12/2013),Ersetzt,[a759a55b44bc6e9225418b7cf2122dd3]

Ordner: 0
(No malicious items detected)

Dateien: 0
(No malicious items detected)

Physische Sektoren: 0
(No malicious items detected)


(end)
         

ESET:

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=11b6632d6d294949bebf998954a58414
# engine=17730
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-04-02 08:40:43
# local_time=2014-04-02 10:40:43 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.2.9200 NT 
# compatibility_mode=5893 16776574 100 94 1833985 21352536 0 0
# scanned=168925
# found=0
# cleaned=0
# scan_time=4595
         

Nur Reste.

TFC - Temp File Cleaner

Lade dir TFC (TempFileCleaner von Oldtimer) herunter und speichere es auf den Desktop.

• Öffne die TFC.exe.
  Vista und Win 7 User mit Rechtsklick "als Administrator starten".
• Schließe alle anderen Programme.
• Drücke auf den Button Start.
• Falls du zu einem Neustart aufgefordert wirst, bestätige diesen.

Sieht soweit ok aus

Wegen Cookies und anderer Dinge im Web: Um die Pest von vornherein zu blocken (also TrackingCookies, Werbebanner etc.) müsstest du dir mal sowas wie MVPS Hosts File anschauen => Blocking Unwanted Parasites with a Hosts File - sinnvollerweise solltest du alle 4 Wochen mal bei MVPS nachsehen, ob er eine neue Hosts Datei herausgebracht hat. Ist aber nur optional. Um Usertracking zu verhindern kann man gut die Firefox-Erweiterung Ghostery verwenden.

Info: Cookies sind keine Schädlinge direkt, aber es besteht die Gefahr der missbräuchlichen Verwendung (eindeutige Wiedererkennung zB für gezielte Werbung o.ä. => HTTP-Cookie )

Ansonsten gibt es noch gute Cookiemanager, Erweiterungen für den Firefox zB wäre da CookieCuller
Wenn du aber damit leben kannst, dich bei jeder Browsersession überall neu einzuloggen (zB Facebook, Ebay, GMX, oder auch Trojaner-Board) dann stell den Browser einfach so ein, dass einfach alles beim Beenden des Browser inkl. Cookies gelöscht wird.

Ist dein System nun wieder in Ordnung oder gibt's noch andere Funde oder Probleme?

Danke für den Tipp! Habe nur das Problem, dass ich ein Passwort vergessen habe und sonst nicht mehr an meine Mails komme. Lösche deswegen manuell im Browser bzw. lasse täglich mal den CCleaner laufen. Ist das denn gleichwertig?

Hmm, bin gerade etwas verzweifelt. Das Phonemen vom Anfang ist immer noch vorhanden, Snap.Do lässt sich immer noch nicht löschen. Was soll ich tun?

Erstell dir mal ein neues Profil und teste => http://support.mozilla.com/de/kb/Profile%20verwalten

Tut mir leid - dummer User ohne große PC-Kenntnisse und so -, aber ich frag mal lieber, bevor ich das jetzt tue...

Da ich ja Firefox gar nicht installiert habe, wäre dann eine entsprechende Anleitung für Chrome die, die ich benutzen sollte?

Mich verwundert das nur gerade, weil mir ja im Browser gar nichts aufgefallen ist, sondern Snap.Do einfach nur als Programm in der Systemsteuerung aufgelistet ist.

https://support.google.com/chrome/answer/3296214?hl=de

Das hat tatsächlich geklappt! Ganz ganz großes !!

Dann wären wir durch!


Falls du noch Lob oder Kritik loswerden möchtest => Lob, Kritik und Wünsche - Trojaner-Board

Die Programme, die hier zum Einsatz kamen, können alle deinstalliert werden.

Helfen kann dir dabei delfix:


Die Reihenfolge ist hier entscheidend.

1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
   • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
   • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
   • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
3. Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
   • Schließe alle offenen Programme.
   • Starte die delfix.exe mit einem Doppelklick.
   • Setze vor jede Funktion ein Häkchen.
   • Klicke auf Start.
   • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
   • Starte deinen Rechner abschließend neu.
4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Bitte abschließend noch die Updates prüfen, unten mein Leitfaden dazu. Um in Zukunft die Aktualität der installierten Programme besser im Überblick zu halten, kannst du zB Secunia PSI verwenden.
Für noch mehr Sicherheit solltest Du nach der beseitigten Infektion auch möglichst alle Passwörter ändern.


Microsoftupdate
Windows XP:Besuch mit dem IE die MS-Updateseite und lass Dir alle wichtigen Updates installieren.
Windows Vista/7: Start, Systemsteuerung, Windows-Update


PDF-Reader aktualisieren
Ein veralteter AdobeReader stellt ein großes Sicherheitsrisiko dar. Du solltest daher besser alte Versionen vom AdobeReader über Systemsteuerung => Software bzw. Programme und Funktionen deinstallieren, indem Du dort auf "Adobe Reader x.0" klickst und das Programm entfernst. (falls du AdobeReader installiert hast)

Ich empfehle einen alternativen PDF-Reader wie PDF Xchange Viewer, SumatraPDF oder Foxit PDF Reader, die sind sehr viel schlanker und flotter als der AdobeReader.

Bitte überprüf bei der Gelegenheit auch die Aktualität des Flashplayers:
Prüfen => Adobe - Flash Player
Downloadlinks findest du hier => Browsers and Plugins - FilePony.de

Alle Plugins im Firefox-Browser kannst du auch ganz einfach hier auf Aktualität prüfen => https://www.mozilla.org/de/plugincheck

Natürlich auch darauf achten, dass andere installierte Browser wie zB Firefox, Opera oder Chrome aktuell sind.


Java-Update
Veraltete Java-Installationen sind ein großes Sicherheitsrisiko, daher solltest Du die alten Versionen deinstallieren. Beende dazu alle Programme (v.a. die Browser), klick danach auf Start, Systemsteuerung, Software (bzw. Programme und Funktionen) und deinstalliere darüber alle aufgelisteten Java-Versionen. Lad Dir danach von hier das aktuelle Java SE Runtime Environment (JRE) herunter und installiere es.