Eigentlich wollte ich hier posten:

http://www.trojaner-board.de/143532-...entfernen.html

Aber das Board sagt, ich darf nicht?



Hier mein ESET File

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=d396caee0ddc394fb5a717215a6ed836
# engine=16316
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-12-18 05:25:35
# local_time=2013-12-18 06:25:35 (+0100, Mitteleuropäische Zeit)
# country="Switzerland"
# lang=1033
# osver=6.2.9200 NT 
# compatibility_mode=5893 16776573 100 94 28533 10221237 0 0
# scanned=195651
# found=0
# cleaned=0
# scan_time=5298
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=d396caee0ddc394fb5a717215a6ed836
# engine=16544
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2014-01-07 01:38:52
# local_time=2014-01-07 02:38:52 (+0100, Mitteleuropäische Zeit)
# country="Switzerland"
# lang=1033
# osver=6.2.9200 NT 
# compatibility_mode=5893 16776573 100 94 25729 11935634 0 0
# scanned=267218
# found=1
# cleaned=0
# scan_time=12633
sh=87D0C5FD58DB8B74BB056F161A891498E56E8DD5 ft=1 fh=63a456f7817a8f4f vn="Win32/InstallMonetizer.AN application" ac=I fn="D:\TEMP\PicPick 3.2.9.exe"
         

WAS MACH ICH NUN?

Hi,

klar darfst Du nicht, ist ja auch nicht dein Thema

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

FRST.txt


FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-01-2014 01
Ran by iliria (administrator) on T430IR on 09-01-2014 10:13:04
Running from D:\TEMP
Windows 8.1 Enterprise (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(Lenovo.) C:\Windows\System32\ibmpmsvc.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\SettingsDependency\SettingsService.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\110\DTS\Binn\MsDtsSrvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\sqlservr.exe
(The OpenVPN Project) C:\Program Files (x86)\Sophos\Sophos SSL VPN Client\bin\openvpnserv.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tphkload.exe
(Microsoft Corporation) C:\Windows\System32\vmms.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\micmute.exe
(Microsoft Corporation) C:\Program Files\Microsoft Dynamics NAV\71\Service\Microsoft.Dynamics.Nav.Server.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\AVControlCenter32.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\CamMute.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Authentec Inc.) C:\Program Files\ThinkVantage Fingerprint Software\upeksvr.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tposd.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\shtctky.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\extapsup.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe
(NTeWORKS) C:\Program Files (x86)\PicPick\picpick.exe
(Ricoh co.,Ltd.) C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\vcamsvchlpr.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Dynamics NAV\71\RoleTailored Client\Microsoft.Dynamics.Nav.Client.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2963184 2013-04-24] (Synaptics Incorporated)
HKLM\...\Run: [PSQLLauncher] - C:\Program Files\ThinkVantage Fingerprint Software\launcher.exe [86376 2013-09-12] (Authentec Inc.)
HKLM\...\Run: [LenovoOptMouseUpdate] - C:\Program Files\Lenovo\HOTKEY\extapsup.exe [255480 2013-06-20] (Lenovo Group Limited)
HKLM\...\Run: [LENOVO.TPKNRRES] - C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe [601080 2013-09-19] (Lenovo Corporation)
HKLM\...\Run: [nwiz] - C:\Program Files\NVIDIA Corporation\nview\nwiz.exe [2747168 2013-11-14] ()
HKLM-x32\...\Run: [RotateImage] - C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe [66560 2013-06-17] (Ricoh co.,Ltd.)
HKLM-x32\...\Run: [PWMTRV] - C:\Program Files (x86)\ThinkPad\Utilities\PWMTR64V.DLL [6620456 2013-09-13] (Lenovo Group Limited)
HKLM-x32\...\Run: [openvpn-gui] - C:\Program Files (x86)\Sophos\Sophos SSL VPN Client\bin\openvpn-gui.exe [436776 2013-02-25] ()
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\psfus: C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll (Authentec Inc.)
HKCU\...\Run: [PicPick Start] - C:\Program Files (x86)\PicPick\picpick.exe [13255512 2013-12-07] (NTeWORKS)
HKCU\...\Policies\Explorer\Run: [1] - C:\Program Files\Internet Explorer\iexplore.exe [804464 2013-08-22] ( (Microsoft Corporation))
HKCU\...\Policies\Explorer\Run: [2] - c:\Program Files (x86)\iFacto ReVision\iFacto ReVision.exe No File
HKCU\...\Policies\Explorer: [NoStartMenuMyGames] 1
AppInit_DLLs: C:\Windows\System32\nvinitx.dll [168616 2013-11-14] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll  [141336 2013-11-14] (NVIDIA Corporation)
Lsa: [Notification Packages] scecli C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://companyweb/default.aspx
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.ch.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x1E0C2460C8D3CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-CH
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
DPF: HKLM-x32 {82774781-8F4E-11D1-AB1C-0000F8773BF0} https://transfers.ds.microsoft.com/FTM/TransferSource/grTransferCtrl.cab
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 62.2.24.158 62.2.17.60 62.2.24.162 62.2.17.61

FireFox:
========
FF ProfilePath: C:\Users\iliria.DANECO\AppData\Roaming\Mozilla\Firefox\Profiles\93bclqtl.default
FF user.js: detected! => C:\Users\iliria.DANECO\AppData\Roaming\Mozilla\Firefox\Profiles\93bclqtl.default\user.js
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~4\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @videolan.org/vlc,version=2.1.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~3\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: NoScript - C:\Users\iliria.DANECO\AppData\Roaming\Mozilla\Firefox\Profiles\93bclqtl.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi

==================== Services (Whitelisted) =================

R3 AVControlCenter; C:\Program Files\Lenovo\Communications Utility\AVControlCenter32.exe [573432 2013-09-19] (Lenovo Corporation)
S3 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2252504 2013-09-04] (Broadcom Corporation.)
R2 Lenovo Settings Service; C:\Program Files\Lenovo\SettingsDependency\SettingsService.exe [2045432 2013-09-09] (Lenovo Group Limited)
R3 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [694776 2013-09-19] (Lenovo Corporation)
S3 LocationTaskManager; C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe [465912 2013-06-21] ()
R2 MicrosoftDynamicsNavServer$DynamicsNAV71; C:\Program Files\Microsoft Dynamics NAV\71\Service\Microsoft.Dynamics.Nav.Server.exe [111296 2013-09-23] (Microsoft Corporation)
S3 MicrosoftDynamicsNavVSS; C:\Program Files\Microsoft Dynamics NAV\71\Service\Microsoft.Dynamics.Nav.Server.VSSWriterService.exe [16616 2013-09-23] (Microsoft Corporation)
R2 MsDtsServer110; C:\Program Files\Microsoft SQL Server\110\DTS\Binn\MsDtsSrvr.exe [218600 2012-12-29] (Microsoft Corporation)
R2 MSSQLSERVER; C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\sqlservr.exe [192000 2012-12-29] (Microsoft Corporation)
S3 OpenVPNService; C:\Program Files (x86)\Sophos\Sophos SSL VPN Client\bin\openvpnserv.exe [59432 2013-02-25] (The OpenVPN Project)
R2 OpenVPNServiceInteractive; C:\Program Files (x86)\Sophos\Sophos SSL VPN Client\bin\openvpnserv.exe [59432 2013-02-25] (The OpenVPN Project)
S3 SQLSERVERAGENT; C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\SQLAGENT.EXE [612864 2012-12-29] (Microsoft Corporation)
S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [22888 2013-09-17] ()
R2 vmms; C:\Windows\system32\vmms.exe [13368832 2013-09-14] (Microsoft Corporation)
S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [76800 2013-10-28] (Microsoft Corporation)
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [546304 2013-10-28] (Microsoft Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
R3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [170712 2013-09-04] (Broadcom Corporation.)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)
R1 hvservice; C:\Windows\System32\drivers\hvservice.sys [68960 2013-10-27] (Microsoft Corporation)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-10-08] (Microsoft Corporation)
S3 kbldfltr; C:\Windows\System32\drivers\kbldfltr.sys [22272 2013-08-23] (Microsoft Corporation)
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
S3 lunparser; C:\Windows\System32\drivers\lunparser.sys [19456 2013-10-27] (Microsoft Corporation)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [3345376 2013-09-04] (Intel Corporation)
R1 nvkflt; C:\Windows\system32\DRIVERS\nvkflt.sys [300320 2013-11-14] (NVIDIA Corporation)
S3 passthruparser; C:\Windows\System32\drivers\passthruparser.sys [22016 2013-10-27] (Microsoft Corporation)
S3 pvhdparser; C:\Windows\System32\drivers\pvhdparser.sys [27136 2013-09-07] (Microsoft Corporation)
R3 RCUVCAVS; C:\Windows\system32\DRIVERS\RCUVCAVS.sys [177920 2013-07-05] (Ricoh co.,Ltd.)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
S4 RsFx0201; C:\Windows\System32\DRIVERS\RsFx0201.sys [336880 2012-10-20] (Microsoft Corporation)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146272 2013-08-22] (Microsoft Corporation)
R2 smihlp; C:\Program Files\ThinkVantage Fingerprint Software\smihlp.sys [13128 2011-05-30] (Authentec Inc.)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S3 vhdparser; C:\Windows\System32\drivers\vhdparser.sys [19456 2013-10-27] (Microsoft Corporation)
R3 VMSMP; C:\Windows\system32\DRIVERS\vmswitch.sys [686080 2013-10-08] (Microsoft Corporation)
S3 VMSP; C:\Windows\system32\DRIVERS\vmswitch.sys [686080 2013-10-08] (Microsoft Corporation)
S3 VMSVSF; C:\Windows\system32\DRIVERS\vmswitch.sys [686080 2013-10-08] (Microsoft Corporation)
S3 VMSVSP; C:\Windows\system32\DRIVERS\vmswitch.sys [686080 2013-10-08] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
R0 mfehidk; system32\drivers\mfehidk.sys [x]
S0 mferkdet; \SystemRoot\system32\drivers\mferkdet.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-09 10:12 - 2014-01-09 10:12 - 00000000 ____D C:\FRST
2014-01-08 17:30 - 2014-01-08 17:30 - 00000126 ___RH C:\Users\iliria.DANECO\Desktop\Stinger.opt
2014-01-08 16:55 - 2014-01-08 17:30 - 00000857 _____ C:\Users\iliria.DANECO\Desktop\Stinger_08012014_165519.html
2014-01-08 16:55 - 2014-01-08 16:55 - 00177680 _____ (McAfee, Inc.) C:\Windows\system32\mfevtps.exe.b0f3.deleteme
2014-01-08 16:18 - 2014-01-08 16:29 - 00000856 _____ C:\Users\iliria.DANECO\Desktop\Stinger_08012014_161805.html
2014-01-08 16:18 - 2014-01-08 16:18 - 00177680 _____ (McAfee, Inc.) C:\Windows\system32\mfevtps.exe.418c.deleteme
2014-01-08 16:17 - 2014-01-08 17:30 - 00000000 ____D C:\Program Files\stinger
2014-01-08 12:30 - 2014-01-08 12:30 - 00000000 ____D C:\Users\iliria.DANECO\Documents\Optimizer Pro
2014-01-08 12:26 - 2014-01-08 12:26 - 00000889 _____ C:\Users\Public\Desktop\VLC media player.lnk
2014-01-08 12:26 - 2014-01-08 12:26 - 00000000 ____D C:\Users\iliria.DANECO\AppData\Roaming\vlc
2014-01-08 12:26 - 2014-01-08 12:26 - 00000000 ____D C:\Program Files\VideoLAN
2014-01-08 12:25 - 2014-01-08 12:25 - 00000000 ____D C:\Users\iliria.DANECO\Documents\Mobogenie
2014-01-08 12:25 - 2014-01-08 12:25 - 00000000 ____D C:\Users\iliria.DANECO\AppData\Local\Mobogenie
2014-01-08 12:25 - 2014-01-08 12:25 - 00000000 ____D C:\Users\iliria.DANECO\AppData\Local\cache
2014-01-08 12:25 - 2014-01-08 12:25 - 00000000 _____ C:\Users\iliria.DANECO\daemonprocess.txt
2014-01-08 12:24 - 2014-01-08 12:25 - 00000000 ____D C:\Program Files (x86)\Mobogenie
2014-01-08 12:24 - 2014-01-08 12:24 - 00000000 ____D C:\Users\iliria.DANECO\AppData\Roaming\Shark007
2014-01-08 12:24 - 2014-01-08 12:24 - 00000000 ____D C:\ProgramData\Shark007
2014-01-08 12:24 - 2014-01-08 12:24 - 00000000 ____D C:\Program Files\Shark007
2014-01-08 12:24 - 2014-01-05 15:10 - 01600832 _____ (MPC-HC Team) C:\Windows\system32\VSFilter.dll
2014-01-08 12:24 - 2013-04-05 20:27 - 02231296 _____ C:\Windows\system32\ac3filter.acm.new
2014-01-08 12:24 - 2013-04-05 20:27 - 02231296 _____ C:\Windows\system32\ac3filter.acm
2014-01-08 12:24 - 2013-03-17 09:22 - 03554304 _____ (x264vfw project) C:\Windows\system32\x264vfw.dll
2014-01-08 12:24 - 2012-07-21 11:55 - 00180736 _____ (fccHandler) C:\Windows\system32\ac3acm.acm
2014-01-08 12:24 - 2012-07-21 11:54 - 00361472 _____ (fccHandler) C:\Windows\system32\aacacm.acm
2014-01-08 12:24 - 2012-07-17 14:21 - 00206336 _____ C:\Windows\system32\unrar64.dll
2014-01-08 12:24 - 2011-12-07 19:37 - 00148992 _____ ( ) C:\Windows\system32\lagarith.dll
2014-01-08 12:24 - 2009-08-11 17:22 - 00580096 _____ C:\Windows\system32\ac3filter.acm.old
2014-01-08 12:24 - 2009-01-22 21:51 - 00124909 _____ (Open Source Software community project) C:\Windows\system32\pthreadGC2.dll
2014-01-08 12:24 - 2007-02-05 16:05 - 00000038 _____ C:\Windows\AviSplitter.INI
2014-01-08 10:16 - 2014-01-08 10:16 - 00163955 _____ C:\Users\iliria.DANECO\Desktop\Kosten Kalkulation NAV 2013 Starter.xlsx
2014-01-07 15:01 - 2014-01-07 15:01 - 11533160 _____ (McAfee Inc) C:\Users\iliria.DANECO\Desktop\McAfee Labs Stinger 12.1.0.735.exe
2014-01-07 14:59 - 2014-01-07 14:59 - 81540952 _____ (COMODO) C:\Users\iliria.DANECO\Desktop\Comodo_633_x86.exe
2014-01-06 16:39 - 2014-01-09 09:21 - 00000000 ____D C:\Program Files (x86)\PDFCreator
2014-01-06 16:39 - 2014-01-06 16:39 - 00000000 ____D C:\Users\iliria.DANECO\AppData\Roaming\pdfforge
2014-01-06 16:39 - 2012-05-05 10:54 - 00137000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMAPI32.OCX
2014-01-06 16:39 - 2012-05-05 10:54 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPIDE.DLL
2014-01-06 16:39 - 1998-07-06 17:55 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCC2DE.DLL
2013-12-24 13:38 - 2013-12-24 13:57 - 00000000 ____D C:\Users\iliria.DANECO\AppData\Local\Adobe
2013-12-24 10:11 - 2013-12-24 10:11 - 00000125 _____ C:\Users\iliria.DANECO\Documents\Ueberhitzung am Immomarkt.txt
2013-12-24 09:05 - 2013-12-24 09:05 - 00000842 _____ C:\Users\iliria.DANECO\Documents\ItemLedgerEntry - Korrektur Artikelposten Typ Verkauf.txt
2013-12-23 16:07 - 2013-12-23 16:07 - 00000000 ____D C:\Users\iliria.DANECO\AppData\Roaming\MPC-HC
2013-12-23 16:06 - 2013-12-23 16:06 - 00000000 ____D C:\Program Files\MPC-HC
2013-12-23 09:13 - 2013-12-23 09:13 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-12-23 09:13 - 2013-12-23 09:13 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen
2013-12-23 09:13 - 2013-12-23 09:13 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü
2013-12-23 09:13 - 2013-12-23 09:13 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung
2013-12-23 09:13 - 2013-12-23 09:13 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen
2013-12-23 09:13 - 2013-12-23 09:13 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien
2013-12-23 09:13 - 2013-12-23 09:13 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung
2013-12-23 09:13 - 2013-12-23 09:13 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik
2013-12-23 09:13 - 2013-12-23 09:13 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder
2013-12-23 09:13 - 2013-12-23 09:13 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-23 09:13 - 2013-12-23 09:13 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf
2013-12-23 09:13 - 2013-12-23 09:13 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2013-12-23 09:13 - 2013-12-23 09:13 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten
2013-12-23 09:13 - 2013-10-27 21:59 - 00000000 ____D C:\Users\UpdatusUser\Documents\Visual Studio 2010
2013-12-23 09:13 - 2013-10-27 21:56 - 00000000 ____D C:\Users\UpdatusUser\AppData\Local\Microsoft Help
2013-12-23 09:13 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-12-23 09:13 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-12-23 09:13 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2013-12-23 09:13 - 2013-08-22 16:36 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-12-23 09:13 - 2013-07-16 16:38 - 00002149 _____ C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DesktopToastsForCriticalUpdates.lnk
2013-12-23 09:12 - 2013-12-24 13:58 - 00000000 ____D C:\Windows\SysWOW64\NV
2013-12-23 09:12 - 2013-12-24 13:58 - 00000000 ____D C:\Windows\system32\NV
2013-12-23 09:11 - 2013-12-23 09:13 - 00000000 ____D C:\Windows\LastGood
2013-12-23 09:10 - 2013-11-14 12:58 - 30361888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-12-23 09:10 - 2013-11-14 12:58 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-12-23 09:10 - 2013-11-14 12:58 - 22951200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-12-23 09:10 - 2013-11-14 12:58 - 18208624 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-12-23 09:10 - 2013-11-14 12:58 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-12-23 09:10 - 2013-11-14 12:58 - 15862272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-12-23 09:10 - 2013-11-14 12:58 - 15218504 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2013-12-23 09:10 - 2013-11-14 12:58 - 12613408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-12-23 09:10 - 2013-11-14 12:58 - 11600432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-12-23 09:10 - 2013-11-14 12:58 - 11514624 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-12-23 09:10 - 2013-11-14 12:58 - 09691888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-12-23 09:10 - 2013-11-14 12:58 - 09619872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-12-23 09:10 - 2013-11-14 12:58 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-12-23 09:10 - 2013-11-14 12:58 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-12-23 09:10 - 2013-11-14 12:58 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-12-23 09:10 - 2013-11-14 12:58 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-12-23 09:10 - 2013-11-14 12:58 - 02697248 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2013-12-23 09:10 - 2013-11-14 12:58 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll
2013-12-23 09:10 - 2013-11-14 12:58 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll
2013-12-23 09:10 - 2013-11-14 12:58 - 01510176 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco64.dll
2013-12-23 09:10 - 2013-11-14 12:58 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2013-12-23 09:10 - 2013-11-14 12:58 - 00707360 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-12-23 09:10 - 2013-11-14 12:58 - 00657184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-12-23 09:10 - 2013-11-14 12:58 - 00609568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-12-23 09:10 - 2013-11-14 12:58 - 00562464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-12-23 09:10 - 2013-11-14 12:58 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2013-12-23 09:10 - 2013-11-14 12:58 - 00300320 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvkflt.sys
2013-12-23 09:10 - 2013-11-14 12:58 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2013-12-23 09:10 - 2013-11-14 12:58 - 00196384 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2013-12-23 09:10 - 2013-11-14 12:58 - 00032544 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys
2013-12-23 09:10 - 2013-11-14 12:58 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2013-12-19 09:36 - 2013-11-11 16:02 - 06674208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2013-12-19 09:36 - 2013-11-11 16:02 - 03490080 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2013-12-19 09:36 - 2013-11-11 16:01 - 03467927 _____ C:\Windows\system32\nvcoproc.bin
2013-12-19 09:36 - 2013-11-11 16:01 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2013-12-19 09:36 - 2013-11-11 16:01 - 01065248 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2013-12-19 09:36 - 2013-11-11 16:01 - 00922912 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2013-12-19 09:36 - 2013-11-11 16:01 - 00598304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\oemdspif.dll
2013-12-19 09:36 - 2013-11-11 16:01 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2013-12-19 09:36 - 2013-11-11 16:01 - 00067072 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2013-12-19 09:36 - 2013-11-11 16:01 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2013-12-19 09:35 - 2013-12-23 09:12 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-12-18 16:53 - 2013-12-18 16:53 - 00000000 ____D C:\Program Files (x86)\ESET
2013-12-17 11:46 - 2013-12-17 11:46 - 00000000 ____D C:\Users\iliria.DANECO\AppData\Local\Microsoft_Corporation
2013-12-17 10:45 - 2013-12-17 10:45 - 00002575 _____ C:\Users\Public\Desktop\Microsoft Dynamics Sure Step 2010.lnk
2013-12-17 10:45 - 2013-12-17 10:45 - 00000000 ____D C:\Users\Public\Documents\Microsoft Dynamics
2013-12-17 10:45 - 2013-12-17 10:45 - 00000000 ____D C:\Program Files (x86)\Microsoft Dynamics
2013-12-17 09:06 - 2013-12-17 09:06 - 00000000 ____D C:\Windows\SysWOW64\SearchProtect
2013-12-16 15:52 - 2013-12-16 15:52 - 00000000 ____D C:\ProgramData\Mozilla
2013-12-16 11:58 - 2013-12-16 11:59 - 00002348 _____ C:\Users\iliria.DANECO\Desktop\SRVPN01.RDP
2013-12-13 19:59 - 2013-12-13 19:59 - 00000000 ____D C:\Users\iliria.DANECO\AppData\Local\Macromedia
2013-12-11 09:19 - 2013-12-23 13:49 - 00020084 _____ C:\Users\iliria.DANECO\Desktop\Bekleidung + Möbel Hersteller Schweiz.xlsx
2013-12-11 08:39 - 2013-12-23 09:02 - 00000000 ____D C:\Program Files (x86)\Video-Saver

==================== One Month Modified Files and Folders =======

2014-01-09 10:12 - 2014-01-09 10:12 - 00000000 ____D C:\FRST
2014-01-09 10:10 - 2013-10-27 12:49 - 02067781 _____ C:\Windows\WindowsUpdate.log
2014-01-09 10:00 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\system32\sru
2014-01-09 09:41 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\system32\FxsTmp
2014-01-09 09:38 - 2013-10-28 11:32 - 00003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3163005233-1909910608-1590814569-1170
2014-01-09 09:21 - 2014-01-06 16:39 - 00000000 ____D C:\Program Files (x86)\PDFCreator
2014-01-09 09:20 - 2013-10-28 11:29 - 00000000 ____D C:\Users\iliria.DANECO\AppData\Roaming\ClassicShell
2014-01-09 08:14 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\AppReadiness
2014-01-08 17:30 - 2014-01-08 17:30 - 00000126 ___RH C:\Users\iliria.DANECO\Desktop\Stinger.opt
2014-01-08 17:30 - 2014-01-08 16:55 - 00000857 _____ C:\Users\iliria.DANECO\Desktop\Stinger_08012014_165519.html
2014-01-08 17:30 - 2014-01-08 16:17 - 00000000 ____D C:\Program Files\stinger
2014-01-08 16:55 - 2014-01-08 16:55 - 00177680 _____ (McAfee, Inc.) C:\Windows\system32\mfevtps.exe.b0f3.deleteme
2014-01-08 16:29 - 2014-01-08 16:18 - 00000856 _____ C:\Users\iliria.DANECO\Desktop\Stinger_08012014_161805.html
2014-01-08 16:26 - 2013-10-28 11:23 - 00000120 _____ C:\Windows\system32\config\netlogon.ftl
2014-01-08 16:18 - 2014-01-08 16:18 - 00177680 _____ (McAfee, Inc.) C:\Windows\system32\mfevtps.exe.418c.deleteme
2014-01-08 15:41 - 2013-11-04 11:53 - 00147456 _____ C:\Users\iliria.DANECO\AppData\Roaming\fin.zup
2014-01-08 15:40 - 2013-11-08 14:40 - 00013970 _____ C:\Users\iliria.DANECO\Desktop\Zeiten.xlsx
2014-01-08 15:40 - 2013-11-04 14:51 - 00000000 ____D C:\Users\iliria.DANECO\AppData\Local\Deployment
2014-01-08 15:19 - 2013-10-28 11:27 - 00000000 ____D C:\Users\iliria.DANECO\AppData\Local\Packages
2014-01-08 12:30 - 2014-01-08 12:30 - 00000000 ____D C:\Users\iliria.DANECO\Documents\Optimizer Pro
2014-01-08 12:26 - 2014-01-08 12:26 - 00000889 _____ C:\Users\Public\Desktop\VLC media player.lnk
2014-01-08 12:26 - 2014-01-08 12:26 - 00000000 ____D C:\Users\iliria.DANECO\AppData\Roaming\vlc
2014-01-08 12:26 - 2014-01-08 12:26 - 00000000 ____D C:\Program Files\VideoLAN
2014-01-08 12:25 - 2014-01-08 12:25 - 00000000 ____D C:\Users\iliria.DANECO\Documents\Mobogenie
2014-01-08 12:25 - 2014-01-08 12:25 - 00000000 ____D C:\Users\iliria.DANECO\AppData\Local\Mobogenie
2014-01-08 12:25 - 2014-01-08 12:25 - 00000000 ____D C:\Users\iliria.DANECO\AppData\Local\cache
2014-01-08 12:25 - 2014-01-08 12:25 - 00000000 _____ C:\Users\iliria.DANECO\daemonprocess.txt
2014-01-08 12:25 - 2014-01-08 12:24 - 00000000 ____D C:\Program Files (x86)\Mobogenie
2014-01-08 12:25 - 2013-10-28 11:26 - 00000000 ____D C:\Users\iliria.DANECO
2014-01-08 12:24 - 2014-01-08 12:24 - 00000000 ____D C:\Users\iliria.DANECO\AppData\Roaming\Shark007
2014-01-08 12:24 - 2014-01-08 12:24 - 00000000 ____D C:\ProgramData\Shark007
2014-01-08 12:24 - 2014-01-08 12:24 - 00000000 ____D C:\Program Files\Shark007
2014-01-08 10:16 - 2014-01-08 10:16 - 00163955 _____ C:\Users\iliria.DANECO\Desktop\Kosten Kalkulation NAV 2013 Starter.xlsx
2014-01-07 15:01 - 2014-01-07 15:01 - 11533160 _____ (McAfee Inc) C:\Users\iliria.DANECO\Desktop\McAfee Labs Stinger 12.1.0.735.exe
2014-01-07 14:59 - 2014-01-07 14:59 - 81540952 _____ (COMODO) C:\Users\iliria.DANECO\Desktop\Comodo_633_x86.exe
2014-01-06 16:39 - 2014-01-06 16:39 - 00000000 ____D C:\Users\iliria.DANECO\AppData\Roaming\pdfforge
2014-01-05 15:10 - 2014-01-08 12:24 - 01600832 _____ (MPC-HC Team) C:\Windows\system32\VSFilter.dll
2013-12-30 07:41 - 2013-12-03 15:45 - 00000000 ____D C:\Users\iliria.DANECO\AppData\Roaming\AvaTrade
2013-12-24 13:58 - 2013-12-23 09:12 - 00000000 ____D C:\Windows\SysWOW64\NV
2013-12-24 13:58 - 2013-12-23 09:12 - 00000000 ____D C:\Windows\system32\NV
2013-12-24 13:57 - 2013-12-24 13:38 - 00000000 ____D C:\Users\iliria.DANECO\AppData\Local\Adobe
2013-12-24 10:11 - 2013-12-24 10:11 - 00000125 _____ C:\Users\iliria.DANECO\Documents\Ueberhitzung am Immomarkt.txt
2013-12-24 09:05 - 2013-12-24 09:05 - 00000842 _____ C:\Users\iliria.DANECO\Documents\ItemLedgerEntry - Korrektur Artikelposten Typ Verkauf.txt
2013-12-23 16:16 - 2013-10-27 12:48 - 02247824 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-23 16:16 - 2013-08-23 00:26 - 00952766 _____ C:\Windows\system32\perfh007.dat
2013-12-23 16:16 - 2013-08-23 00:26 - 00222668 _____ C:\Windows\system32\perfc007.dat
2013-12-23 16:07 - 2013-12-23 16:07 - 00000000 ____D C:\Users\iliria.DANECO\AppData\Roaming\MPC-HC
2013-12-23 16:06 - 2013-12-23 16:06 - 00000000 ____D C:\Program Files\MPC-HC
2013-12-23 14:29 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\system32\NDF
2013-12-23 13:49 - 2013-12-11 09:19 - 00020084 _____ C:\Users\iliria.DANECO\Desktop\Bekleidung + Möbel Hersteller Schweiz.xlsx
2013-12-23 09:19 - 2013-10-27 21:15 - 27590656 _____ C:\Windows\system32\vmguest.iso
2013-12-23 09:13 - 2013-12-23 09:13 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-12-23 09:13 - 2013-12-23 09:13 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen
2013-12-23 09:13 - 2013-12-23 09:13 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü
2013-12-23 09:13 - 2013-12-23 09:13 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung
2013-12-23 09:13 - 2013-12-23 09:13 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen
2013-12-23 09:13 - 2013-12-23 09:13 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien
2013-12-23 09:13 - 2013-12-23 09:13 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung
2013-12-23 09:13 - 2013-12-23 09:13 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik
2013-12-23 09:13 - 2013-12-23 09:13 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder
2013-12-23 09:13 - 2013-12-23 09:13 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-23 09:13 - 2013-12-23 09:13 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf
2013-12-23 09:13 - 2013-12-23 09:13 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2013-12-23 09:13 - 2013-12-23 09:13 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten
2013-12-23 09:13 - 2013-12-23 09:11 - 00000000 ____D C:\Windows\LastGood
2013-12-23 09:13 - 2013-10-27 14:26 - 00000000 ____D C:\ProgramData\NVIDIA
2013-12-23 09:13 - 2013-10-27 14:25 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-12-23 09:13 - 2013-10-27 14:25 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-12-23 09:12 - 2013-12-19 09:35 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-12-23 09:12 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\Help
2013-12-23 09:02 - 2013-12-11 08:39 - 00000000 ____D C:\Program Files (x86)\Video-Saver
2013-12-23 09:02 - 2013-08-22 15:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-23 09:01 - 2013-08-22 14:25 - 00262144 ___SH C:\Windows\system32\config\BBI
2013-12-23 09:00 - 2013-11-07 14:01 - 00000000 ____D C:\Users\iliria.DANECO\AppData\Local\CrashDumps
2013-12-22 22:20 - 2013-12-02 18:28 - 00000000 ____D C:\Users\iliria.DANECO\AppData\Roaming\Skype
2013-12-19 13:54 - 2013-10-28 11:27 - 00000000 ___RD C:\Users\iliria.DANECO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-18 16:53 - 2013-12-18 16:53 - 00000000 ____D C:\Program Files (x86)\ESET
2013-12-17 14:11 - 2013-10-28 13:34 - 00000000 ____D C:\Users\iliria.DANECO\Documents\SQL Server Management Studio
2013-12-17 11:46 - 2013-12-17 11:46 - 00000000 ____D C:\Users\iliria.DANECO\AppData\Local\Microsoft_Corporation
2013-12-17 10:45 - 2013-12-17 10:45 - 00002575 _____ C:\Users\Public\Desktop\Microsoft Dynamics Sure Step 2010.lnk
2013-12-17 10:45 - 2013-12-17 10:45 - 00000000 ____D C:\Users\Public\Documents\Microsoft Dynamics
2013-12-17 10:45 - 2013-12-17 10:45 - 00000000 ____D C:\Program Files (x86)\Microsoft Dynamics
2013-12-17 09:06 - 2013-12-17 09:06 - 00000000 ____D C:\Windows\SysWOW64\SearchProtect
2013-12-16 15:52 - 2013-12-16 15:52 - 00000000 ____D C:\ProgramData\Mozilla
2013-12-16 15:52 - 2013-10-27 21:56 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-16 12:20 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\rescache
2013-12-16 11:59 - 2013-12-16 11:58 - 00002348 _____ C:\Users\iliria.DANECO\Desktop\SRVPN01.RDP
2013-12-13 19:59 - 2013-12-13 19:59 - 00000000 ____D C:\Users\iliria.DANECO\AppData\Local\Macromedia
2013-12-11 09:23 - 2013-12-03 12:38 - 00000000 ____D C:\Users\iliria.DANECO\AppData\Local\Mozilla
2013-12-11 08:40 - 2013-11-05 18:03 - 00000969 _____ C:\Users\iliria.DANECO\Desktop\PicPick.lnk
2013-12-11 08:39 - 2013-11-05 18:01 - 00000000 ____D C:\Program Files (x86)\PicPick

Some content of TEMP:
====================
C:\Users\iliria\AppData\Local\Temp\ose00000.exe
C:\Users\iliria.DANECO\AppData\Local\Temp\bitool.dll
C:\Users\iliria.DANECO\AppData\Local\Temp\Mobogenie_Setup_2.1.23_515.exe
C:\Users\iliria.DANECO\AppData\Local\Temp\OptimizerPro.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-09 08:56

==================== End Of Log ============================
         

--- --- ---


Addition.txt

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 08-01-2014 01
Ran by iliria at 2014-01-09 10:13:37
Running from D:\TEMP
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

64 Bit HP BiDi Channel Components Installer (Version: 1.2.0.2 - Hewlett-Packard) Hidden
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Anzeige am Bildschirm (Version: 7.12.23 - )
AvaTrade (remove only) (x32 Version:  - )
CCleaner (Version: 4.07 - Piriform)
CDBurnerXP (x32 Version: 4.5.2.4291 - CDBurnerXP)
Classic Shell (Version: 4.0.2 - IvoSoft)
Consolidate (x32 Version: 4.6 - Consolidate Software GmbH & Co)
Consolidate PDF-Drucker 9.10.0.1626 (Version: 9.10.0.1626 - Consolidate)
Definition Update for Microsoft Office 2010 (KB982726) 64-Bit Edition (Version:  - Microsoft)
Definition Update for Microsoft Office 2013 (KB2760587) 64-Bit Edition (Version:  - Microsoft)
ESET Online Scanner v3 (x32 Version:  - )
GDR 3128 für SQL Server 2012 (KB2793634) (64-bit) (Version: 11.1.3128.0 - Microsoft Corporation)
Integrated Camera Driver Installer Package Ver.1.0.0.30 (x32 Version: 1.0.0.30 - RICOH)
Intel(R) Processor Graphics (x32 Version: 10.18.10.3316 - Intel Corporation)
Lenovo Patch Utility (x32 Version: 1.4.0.4 - Lenovo Group Limited) Hidden
Lenovo Patch Utility 64 bit (Version: 1.4.0.4 - Lenovo Group Limited) Hidden
Lenovo Power Management Driver (Version: 1.67.04.04 - )
Lenovo Settings - Camera Audio (Version: 4.1.7.100 - Lenovo Corporation)
Lenovo Settings Dependency Package (Version: 1.3.0.22 - Lenovo Group Limited)
Lenovo System Update (x32 Version: 5.03.0005 - Lenovo)
Microsoft .NET Framework 4 Multi-Targeting Pack (x32 Version: 4.0.30319 - Microsoft Corporation)
Microsoft Access MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft DCF MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Dynamics NAV 2013 R2 (x32 Version: 7.1.35473.0 - Microsoft Corporation)
Microsoft Dynamics NAV 2013 R2 Help (Version: 7.1.35473.0 - Microsoft Corporation) Hidden
Microsoft Dynamics NAV 2013 R2 Server (Version: 7.1.35473.0 - Microsoft Corporation) Hidden
Microsoft Dynamics NAV 7.1 Demo Database for SQL Server (Version: 7.1.35473.0 - Microsoft Corporation) Hidden
Microsoft Dynamics NAV RoleTailored Client (x32 Version: 7.1.35473.0 - Microsoft Corporation) Hidden
Microsoft Dynamics NAV Setup (x32 Version: 7.1.35473.0 - Microsoft Corporation) Hidden
Microsoft Dynamics Sure Step 2010 (x32 Version: 3.3.4 - Microsoft Corporation)
Microsoft Dynamics Sure Step 2012 Language Pack (English) (x32 Version: 4.0.0 - Microsoft Corporation)
Microsoft Dynamics Sure Step 2012 Language Pack (German) (x32 Version: 4.0.0 - Microsoft Corporation)
Microsoft Excel MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Exchange Web Services Managed API 2.0 (Version: 15.0.516.14 - Microsoft Corporation)
Microsoft Groove MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Help Viewer 1.1 (Version: 1.1.40219 - Microsoft Corporation)
Microsoft Help Viewer 1.1 (Version: 1.1.40219 - Microsoft Corporation) Hidden
Microsoft Help Viewer 1.1 Language Pack - DEU (Version: 1.1.40219 - Microsoft Corporation)
Microsoft Help Viewer 1.1 Language Pack - DEU (Version: 1.1.40219 - Microsoft Corporation) Hidden
Microsoft InfoPath MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Lync MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office 32-bit Components 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Korrekturhilfen 2013 - Deutsch (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Office 32-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OSM MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office OSM UX MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2013 (Version: 15.0.4420.1017 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - Italiano (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Shared 32-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 32-bit MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office SharePoint Designer 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office SharePoint Designer MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft OneNote MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Outlook MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft PowerPoint MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Publisher MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Report Viewer 2012 Runtime (x32 Version: 11.1.3010.3 - Microsoft Corporation)
Microsoft SharePoint Designer 2010 (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2008 R2 Management Objects (x32 Version: 10.51.2500.0 - Microsoft Corporation)
Microsoft SQL Server 2008 R2 Native Client (Version: 10.51.2500.0 - Microsoft Corporation)
Microsoft SQL Server 2012 (64-bit) (Version:  - ) Hidden
Microsoft SQL Server 2012 (64-bit) (Version:  - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects  (x64) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client  (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 RsFx Driver (Version: 11.1.3000.0 - Microsoft Corporation) Hidden
Microsoft SQL Server 2012 Setup (English) (Version: 11.1.3128.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Transact-SQL Compiler Service  (Version: 11.1.3128.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Transact-SQL ScriptDom  (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012-Richtlinien  (x32 Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (x32 Version: 10.51.2500.0 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (x32 Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 (x32 Version: 9.0.30729.4974 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Runtime - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (x32 Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (x32 Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Shell (Isolated) - DEU (x32 Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.40303 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.40308 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU (Version: 10.0.40303 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (Version: 10.0.40303 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications x64 Runtime 3.0 - DEU Language Pack (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications x64 Runtime 3.0 (Version: 10.0.40220 - Microsoft Corporation)
Microsoft VSS Writer für SQL Server 2012 (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft Word MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft-System-CLR-Typen für SQL Server 2012 (x64) (Version: 11.1.3000.0 - Microsoft Corporation)
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
MPC-HC 1.7.1 (64-bit) (Version: 1.7.1.0 - MPC-HC Team)
MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0 - Microsoft Corporation)
NVIDIA Grafiktreiber 331.82 (Version: 331.82 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.26.4 (Version: 1.3.26.4 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.140.952 - NVIDIA Corporation) Hidden
NVIDIA nView 140.84 (Version: 140.84 - NVIDIA Corporation)
NVIDIA Optimus 9.3.21 (Version: 9.3.21 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 331.82 (Version: 331.82 - NVIDIA Corporation) Hidden
NVIDIA Update Components (Version: 9.3.21 - NVIDIA Corporation) Hidden
Open XML SDK 2.5 for Microsoft Office (x32 Version: 2.5.5631 - Microsoft Corporation)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
PDFCreator (x32 Version: 1.7.2 - pdfforge)
PDF-Viewer (Version: 2.5.213.1 - Tracker Software Products Ltd)
PicPick (x32 Version: 3.2.9 - NTeWORKS)
Service Pack 1 für SQL Server 2012 (KB2674319) (64-bit) (Version: 11.1.3000.0 - Microsoft Corporation)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version:  - Microsoft) Hidden
SharePoint Client Components (Version: 15.0.4481.1505 - Microsoft Corporation)
Skype™ 6.11 (x32 Version: 6.11.102 - Skype Technologies S.A.)
Snagit 11 (x32 Version: 11.2.1 - TechSmith Corporation)
Sophos SSL VPN Client 2.1 (x32 Version: 2.1 - )
SQL Server 2012 Client Tools (Version: 11.1.3000.0 - Microsoft Corporation) Hidden
SQL Server 2012 Common Files (Version: 11.1.3000.0 - Microsoft Corporation) Hidden
SQL Server 2012 Database Engine Services (Version: 11.1.3000.0 - Microsoft Corporation) Hidden
SQL Server 2012 Database Engine Shared (Version: 11.1.3000.0 - Microsoft Corporation) Hidden
SQL Server 2012 Integration Services (Version: 11.1.3000.0 - Microsoft Corporation) Hidden
SQL Server 2012 Management Studio (Version: 11.1.3000.0 - Microsoft Corporation) Hidden
SQL Server 2012 SQL Data Quality Common (Version: 11.1.3000.0 - Microsoft Corporation) Hidden
Sql Server Customer Experience Improvement Program (Version: 11.1.3000.0 - Microsoft Corporation) Hidden
SQL Server Report Builder 3 for SQL Server 2012  (x32 Version: 11.0.2100.60 - Microsoft Corporation)
SQL Server-Browser für SQL Server 2012 (x32 Version: 11.1.3000.0 - Microsoft Corporation)
Swiss (French) Module for Microsoft Dynamics NAV 2013 R2 Help (Version: 7.1.35473.0 - Microsoft Corporation) Hidden
Swiss (French) Module for Microsoft Dynamics NAV Role Tailored Client (x32 Version: 7.1.35473.0 - Microsoft Corporation) Hidden
Swiss (French) Module for Microsoft Dynamics NAV Server (Version: 7.1.35473.0 - Microsoft Corporation) Hidden
Swiss (German) Module for Microsoft Dynamics NAV 2013 R2 Help (Version: 7.1.35473.0 - Microsoft Corporation) Hidden
Swiss (German) Module for Microsoft Dynamics NAV Role Tailored Client (x32 Version: 7.1.35473.0 - Microsoft Corporation) Hidden
Swiss (German) Module for Microsoft Dynamics NAV Server (Version: 7.1.35473.0 - Microsoft Corporation) Hidden
Swiss (Italian) Module for Microsoft Dynamics NAV 2013 R2 Help (Version: 7.1.35473.0 - Microsoft Corporation) Hidden
Swiss (Italian) Module for Microsoft Dynamics NAV Role Tailored Client (x32 Version: 7.1.35473.0 - Microsoft Corporation) Hidden
Swiss (Italian) Module for Microsoft Dynamics NAV Server (Version: 7.1.35473.0 - Microsoft Corporation) Hidden
TeamViewer 8 (x32 Version: 8.0.22298 - TeamViewer)
ThinkPad UltraNav Driver (Version: 16.2.19.7 - )
ThinkVantage Fingerprint Software (Version: 6.0.0.8102 - Authentec Inc.)
Total Commander 64-bit (Remove or Repair) (Version: 8.01 - Ghisler Software GmbH)
Unterstützungsdateien für Microsoft SQL Server 2008-Setup  (Version: 10.1.2731.0 - Microsoft Corporation)
Update for Microsoft Access 2013 (KB2768008) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft InfoPath 2013 (KB2752078) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Lync 2013 (KB2817678) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Lync 2013 (KB2825630) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2726954) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2726996) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2738038) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760224) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760242) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760257) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760267) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760539) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760553) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760610) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2767845) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2768016) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817309) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817311) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817314) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817316) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817490) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817626) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817640) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2827225) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2827230) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2827239) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2837643) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2837649) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft OneNote 2013 (KB2837642) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft PowerPoint 2013 (KB2726947) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft PowerPoint 2013 (KB2817625) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Project 2013 (KB2767859) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Publisher 2013 (KB2752097) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft SkyDrive Pro (KB2837652) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Visio 2013 (KB2752018) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2013 (KB2768338) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2817631) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2837630) 64-Bit Edition (Version:  - Microsoft)
VLC media player 2.1.2 (Version: 2.1.2 - VideoLAN)
WinRAR 5.01 beta 1 (64-bit) (Version: 5.01.1 - win.rar GmbH)
x64 Components v4.4.3 (Version: 4.4.3 - Shark007)

==================== Restore Points  =========================

30-12-2013 06:58:23 Geplanter Prüfpunkt
06-01-2014 08:29:26 Geplanter Prüfpunkt

==================== Hosts content: ==========================

2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {3033C285-1E64-4EB6-AD71-49199B13F209} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-10-22] (Piriform Ltd)
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\System32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {4A7A0FD7-8795-4E23-B322-F39093462A25} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {55FA1ED2-383F-4406-A8E6-83F3285C91C9} - System32\Tasks\Microsoft\Windows\GroupPolicy\{A7719E0F-10DB-4640-AD8C-490CC6AD5202}
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {99B35395-329E-462B-A8D9-3609CD1E29E9} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [2013-09-17] ()
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D54D28B3-2DF8-41D3-9741-D52AB01D67BC} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: {EEFF9301-5307-4FC4-BBF9-4B9D0B6EBEAC} - System32\Tasks\Microsoft\Windows\GroupPolicy\{3E0A038B-D834-4930-9981-E89C9BFF83AA}
Task: {F5890A6D-2BB8-4390-A159-8B1EAA3759C8} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\microsoft shared\OFFICE15\OLicenseHeartbeat.exe [2012-10-01] (Microsoft Corporation)
Task: {FA921C5C-8EED-4BD3-8A78-ADC4FB14A097} - System32\Tasks\Microsoft Office 15 Sync Maintenance for {007fc456-3004-4a2e-9887-3e1617f10b8a} T430IR.daneco.local => C:\Program Files\Microsoft Office\Office15\MSOSYNC.EXE [2012-10-01] (Microsoft Corporation)

==================== Loaded Modules (whitelisted) =============

2013-09-05 02:36 - 2013-11-14 12:58 - 00013088 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll
2013-10-03 23:42 - 2013-10-03 23:42 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2013-10-27 21:21 - 2013-07-25 16:58 - 02201088 _____ () C:\Program Files\Lenovo\Communications Utility\cxcore210.dll
2013-10-27 21:21 - 2013-07-25 16:58 - 02085888 _____ () C:\Program Files\Lenovo\Communications Utility\cv210.dll
2013-12-23 09:10 - 2013-11-14 12:58 - 00013088 _____ () C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (01/09/2014 09:21:44 AM) (Source: ESENT) (User: )
Description: taskhostex (6196) WebCacheLocal: Das Datenbankmodul hat die Instanz (0) mit einem Fehler (-510) beendet.



Interne Zeitsteuerungsabfolge: [1] 0.000, [2] 0.000, [3] 0.000, [4] 0.000, [5] 0.343, [6] 0.000, [7] 0.000, [8] 0.000, [9] 0.000, [10] 0.000, [11] 0.000, [12] 0.000, [13] 0.000, [14] 0.000, [15] 0.000.

Error: (01/09/2014 09:21:42 AM) (Source: ESENT) (User: )
Description: taskhostex (6196) WebCacheLocal: Die Protokolldatei-Reihenfolge in "C:\Users\iliria.DANECO\AppData\Local\Microsoft\Windows\WebCache\" wurde durch einen schwerwiegenden Fehler angehalten. Für die Datenbank, die diese Protokolldatei-Reihenfolge verwendet, sind keine weiteren Aktualisierungen möglich. Bitte korrigieren Sie das Problem, und starten Sie erneut, oder führen Sie eine Wiederherstellung aus einer Sicherung durch.

Error: (01/09/2014 09:21:42 AM) (Source: ESENT) (User: )
Description: taskhostex (6196) WebCacheLocal: Neue Protokolldatei konnte nicht erstellt werden, weil die Datenbank nicht auf das Protokolllaufwerk schreiben kann. Das Laufwerk ist möglicherweise schreibgeschützt, falsch konfiguriert, beschädigt oder hat zu wenig freien Speicherplatz. Fehler -1811.

Error: (01/09/2014 09:21:42 AM) (Source: ESENT) (User: )
Description: taskhostex (6196) WebCacheLocal: Versuch, Datei "C:\Users\iliria.DANECO\AppData\Local\Microsoft\Windows\WebCache\V01.log" nach "C:\Users\iliria.DANECO\AppData\Local\Microsoft\Windows\WebCache\V0100473.log" zu verschieben, ist mit Systemfehler 2 (0x00000002): "Das System kann die angegebene Datei nicht finden. " fehlgeschlagen. Fehler -1811 (0xfffff8ed) beim Verschieben von Dateien.

Error: (01/08/2014 09:21:59 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_a9f4965301334e09.manifest.

Error: (01/08/2014 09:20:48 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_a9f4965301334e09.manifest.

Error: (01/07/2014 05:45:15 PM) (Source: .NET Runtime) (User: )
Description: Anwendung: C5.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: Ausnahmecode c0000005, Ausnahmeadresse 6605F71D
Stapel:

Error: (01/07/2014 02:41:23 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_a9f4965301334e09.manifest.

Error: (01/07/2014 11:07:12 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_a9f4965301334e09.manifest.

Error: (01/07/2014 11:07:11 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_a9f4965301334e09.manifest.


System errors:
=============
Error: (01/09/2014 09:20:10 AM) (Source: Microsoft-Windows-GroupPolicy) (User: NT-AUTORITÄT)
Description: Bei der Verarbeitung der Gruppenrichtlinie ist aufgrund fehlender Netzwerkkonnektivität mit einem Domänencontroller ein Fehler aufgetreten. Dies kann eine vorübergehende Bedingung sein. Es wird eine Erfolgsmeldung generiert, wenn die Verbindung des Computers mit dem Domänencontroller wiederhergestellt wurde und wenn die Gruppenrichtlinie erfolgreich verarbeitet wurde. Falls für mehrere Stunden keine Erfolgsmeldung angezeigt wird, wenden Sie sich an den Administrator.

Error: (01/09/2014 08:57:22 AM) (Source: DCOM) (User: DANECO)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (01/09/2014 08:56:52 AM) (Source: DCOM) (User: DANECO)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (01/09/2014 08:52:31 AM) (Source: Microsoft-Windows-GroupPolicy) (User: DANECO)
Description: Bei der Verarbeitung der Gruppenrichtlinie ist aufgrund fehlender Netzwerkkonnektivität mit einem Domänencontroller ein Fehler aufgetreten. Dies kann eine vorübergehende Bedingung sein. Es wird eine Erfolgsmeldung generiert, wenn die Verbindung des Computers mit dem Domänencontroller wiederhergestellt wurde und wenn die Gruppenrichtlinie erfolgreich verarbeitet wurde. Falls für mehrere Stunden keine Erfolgsmeldung angezeigt wird, wenden Sie sich an den Administrator.

Error: (01/09/2014 07:22:41 AM) (Source: Microsoft-Windows-GroupPolicy) (User: NT-AUTORITÄT)
Description: Bei der Verarbeitung der Gruppenrichtlinie ist aufgrund fehlender Netzwerkkonnektivität mit einem Domänencontroller ein Fehler aufgetreten. Dies kann eine vorübergehende Bedingung sein. Es wird eine Erfolgsmeldung generiert, wenn die Verbindung des Computers mit dem Domänencontroller wiederhergestellt wurde und wenn die Gruppenrichtlinie erfolgreich verarbeitet wurde. Falls für mehrere Stunden keine Erfolgsmeldung angezeigt wird, wenden Sie sich an den Administrator.

Error: (01/09/2014 06:58:30 AM) (Source: Microsoft-Windows-GroupPolicy) (User: NT-AUTORITÄT)
Description: Bei der Verarbeitung der Gruppenrichtlinie ist aufgrund fehlender Netzwerkkonnektivität mit einem Domänencontroller ein Fehler aufgetreten. Dies kann eine vorübergehende Bedingung sein. Es wird eine Erfolgsmeldung generiert, wenn die Verbindung des Computers mit dem Domänencontroller wiederhergestellt wurde und wenn die Gruppenrichtlinie erfolgreich verarbeitet wurde. Falls für mehrere Stunden keine Erfolgsmeldung angezeigt wird, wenden Sie sich an den Administrator.

Error: (01/09/2014 06:57:31 AM) (Source: NETLOGON) (User: )
Description: Der Computer konnte eine sichere Sitzung mit einem
Domänencontroller in der Domäne DANECO aufgrund der folgenden
Ursache nicht einrichten: 
%%1311

Dies kann zu Authentifizierungsproblemen führen. Stellen
Sie sicher, dass der Computer mit dem Netzwerk verbunden ist.
Wenden Sie sich an den Domänenadministrator, wenn das Problem
weiterhin besteht.



ZUSÄTZLICHE INFORMATIONEN

Wenn dieser Computer ein Domänencontroller der bestimmten
Domäne ist, wird eine sichere Sitzung zum primären
Domänencontrolleremulator in der bestimmten Domäne eingerichtet.
Andernfalls richtet dieser Computer eine sichere Sitzung zu
einem beliebigen Domänencontroller in der bestimmten Domäne ein.

Error: (01/09/2014 06:56:31 AM) (Source: Microsoft-Windows-GroupPolicy) (User: DANECO)
Description: Bei der Verarbeitung der Gruppenrichtlinie ist aufgrund fehlender Netzwerkkonnektivität mit einem Domänencontroller ein Fehler aufgetreten. Dies kann eine vorübergehende Bedingung sein. Es wird eine Erfolgsmeldung generiert, wenn die Verbindung des Computers mit dem Domänencontroller wiederhergestellt wurde und wenn die Gruppenrichtlinie erfolgreich verarbeitet wurde. Falls für mehrere Stunden keine Erfolgsmeldung angezeigt wird, wenden Sie sich an den Administrator.

Error: (01/08/2014 05:19:42 PM) (Source: Kerberos) (User: )
Description: Eine Kerberos-Fehlermeldung wurde empfangen:
 Anmeldesitzung:  
 Clientzeit: 
 Serverzeit: 16:19:42.0000 1/8/2014 Z
 Fehlercode: 0x7  KDC_ERR_S_PRINCIPAL_UNKNOWN
 Erweiterter Fehler: 0xc0000035 KLIN(0)
 Clientbereich: 
 Clientname: 
 Serverbereich: DANECO.LOCAL
 Servername: 0
 Zielname: 1
 Fehlertext: 2
 Datei: 3
 Zeile: 4
 Die Fehlerdaten sind in den Eintragsdaten enthalten.

Error: (01/08/2014 05:04:41 PM) (Source: Kerberos) (User: )
Description: Eine Kerberos-Fehlermeldung wurde empfangen:
 Anmeldesitzung:  
 Clientzeit: 
 Serverzeit: 16:4:41.0000 1/8/2014 Z
 Fehlercode: 0x7  KDC_ERR_S_PRINCIPAL_UNKNOWN
 Erweiterter Fehler: 0xc0000035 KLIN(0)
 Clientbereich: 
 Clientname: 
 Serverbereich: DANECO.LOCAL
 Servername: 0
 Zielname: 1
 Fehlertext: 2
 Datei: 3
 Zeile: 4
 Die Fehlerdaten sind in den Eintragsdaten enthalten.


Microsoft Office Sessions:
=========================
Error: (01/09/2014 09:21:44 AM) (Source: ESENT)(User: )
Description: taskhostex6196WebCacheLocal: 0-510[1] 0.000, [2] 0.000, [3] 0.000, [4] 0.000, [5] 0.343, [6] 0.000, [7] 0.000, [8] 0.000, [9] 0.000, [10] 0.000, [11] 0.000, [12] 0.000, [13] 0.000, [14] 0.000, [15] 0.000.

Error: (01/09/2014 09:21:42 AM) (Source: ESENT)(User: )
Description: taskhostex6196WebCacheLocal: C:\Users\iliria.DANECO\AppData\Local\Microsoft\Windows\WebCache\

Error: (01/09/2014 09:21:42 AM) (Source: ESENT)(User: )
Description: taskhostex6196WebCacheLocal: -1811

Error: (01/09/2014 09:21:42 AM) (Source: ESENT)(User: )
Description: taskhostex6196WebCacheLocal: C:\Users\iliria.DANECO\AppData\Local\Microsoft\Windows\WebCache\V01.logC:\Users\iliria.DANECO\AppData\Local\Microsoft\Windows\WebCache\V0100473.log-1811 (0xfffff8ed)2 (0x00000002)Das System kann die angegebene Datei nicht finden.

Error: (01/08/2014 09:21:59 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_a9f4965301334e09.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe

Error: (01/08/2014 09:20:48 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_a9f4965301334e09.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe

Error: (01/07/2014 05:45:15 PM) (Source: .NET Runtime)(User: )
Description: Anwendung: C5.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: Ausnahmecode c0000005, Ausnahmeadresse 6605F71D
Stapel:

Error: (01/07/2014 02:41:23 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_a9f4965301334e09.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe

Error: (01/07/2014 11:07:12 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_a9f4965301334e09.manifestC:\Users\iliria.DANECO\Desktop\esetsmartinstaller_enu.exe

Error: (01/07/2014 11:07:11 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_a9f4965301334e09.manifestC:\Users\iliria.DANECO\Desktop\esetsmartinstaller_enu.exe


CodeIntegrity Errors:
===================================
  Date: 2013-12-16 12:19:24.095
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-16 12:18:42.779
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-16 12:17:52.451
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-16 12:17:52.451
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-16 12:17:52.420
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-16 12:17:52.373
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-16 12:17:52.341
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-16 12:17:52.326
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-16 12:17:52.295
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-16 12:17:19.326
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Memory info =========================== 

Percentage of memory in use: 35%
Total physical RAM: 7889.63 MB
Available physical RAM: 5126.82 MB
Total Pagefile: 9169.63 MB
Available Pagefile: 5297.09 MB
Total Virtual: 131072 MB
Available Virtual: 131071.77 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:124.66 GB) (Free:72.73 GB) NTFS
Drive d: (Daten) (Fixed) (Total:340.76 GB) (Free:331.33 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 0002412B)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=125 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=341 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.