Auf Link in angeblicher Telekom-Rechnung geklickt -> Postfach vom Provider gesperrt

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 08-01-2014 01
Ran by utermoehlen (administrator) on IGS-PC-02 on 09-01-2014 11:33:41
Running from C:\Users\Utermoehlen\Downloads
Microsoft Windows 7 Professional  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
() C:\Program Files\Danis\Server\bin\mysqld-nt.exe
(pdfforge GbR) C:\Program Files\PDF Architect\HelperService.exe
(pdfforge GbR) C:\Program Files\PDF Architect\ConversionService.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(NEC Electronics Corporation) C:\Program Files\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(McAfee Inc) C:\Users\Administrator\Downloads\stinger32.exe
(HP) C:\Windows\System32\HPSIsvc.exe
(Microsoft Corporation) C:\Windows\System32\mobsync.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(NEC Electronics Corporation) C:\Program Files\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Google Inc.) C:\Users\Utermoehlen\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Utermoehlen\AppData\Local\Google\Update\GoogleUpdate.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Dropbox, Inc.) C:\Users\Utermoehlen\AppData\Roaming\Dropbox\bin\Dropbox.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files\Evernote\Evernote\EvernoteClipper.exe
(Google Inc.) C:\Users\Utermoehlen\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Utermoehlen\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Utermoehlen\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Utermoehlen\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Utermoehlen\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Utermoehlen\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\mobsync.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil32_11_9_900_170_ActiveX.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [102400 2010-04-06] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [8555040 2010-04-06] (Realtek Semiconductor)
HKLM\...\Run: [NUSB3MON] - C:\Program Files\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [106496 2009-11-20] (NEC Electronics Corporation)
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [948440 2013-10-23] (Microsoft Corporation)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKCU\...\Run: [GoogleChromeAutoLaunch_7BCC12B6294271AF913849F7077B70F8] - C:\Users\Utermoehlen\AppData\Local\Google\Chrome\Application\chrome.exe [863184 2013-12-04] (Google Inc.)
HKCU\...\Run: [Google Update] - C:\Users\Utermoehlen\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-09-20] (Google Inc.)
HKCU\...\Run: [KB00469820.exe] - "C:\Users\Utermoehlen\AppData\Roaming\KB00469820.exe"
HKU\igs\...\Run: [Google Update] - C:\Users\igs\AppData\Local\Google\Update\GoogleUpdate.exe [ 2012-08-29] (Google Inc.)
Startup: C:\Users\Utermoehlen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Utermoehlen\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Utermoehlen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x03BEE7A84D96CD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
SearchScopes: HKLM - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snap.do/?publisher=SnapdoOpenCandy&dpid=SnapdoOpenCandy&co=DE&userid=3ce21fac-681e-4036-a905-ae23c66572e9&searchtype=ds&q={searchTerms}
SearchScopes: HKLM - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snap.do/?publisher=SnapdoOpenCandy&dpid=SnapdoOpenCandy&co=DE&userid=3ce21fac-681e-4036-a905-ae23c66572e9&searchtype=ds&q={searchTerms}
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snap.do/?publisher=SnapdoOpenCandy&dpid=SnapdoOpenCandy&co=DE&userid=3ce21fac-681e-4036-a905-ae23c66572e9&searchtype=ds&q={searchTerms}
SearchScopes: HKCU - {9B287FBE-8A86-4400-8D69-7AFCA46D774D} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=kw&q={searchTerms}&locale=&apn_ptnrs=U3&apn_dtid=OSJ000YYDE&apn_uid=595CF9E0-3125-4A4A-8650-D341406036B9&apn_sauid=5B186755-B1F2-452C-BE5D-775231AEA6D9
BHO: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files\PDF Architect\PDFIEHelper.dll (pdfforge GbR)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - PDF Architect Toolbar - {25A3A431-30BB-47C8-AD6A-E1063801134F} - C:\Program Files\PDF Architect\PDFIEPlugin.dll (pdfforge GbR)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Tcpip\Parameters: [DhcpNameServer] 127.0.0.1 192.168.10.1

Chrome: 
=======
CHR HomePage: 
CHR RestoreOnStartup: "hxxp://www.google.de/"
CHR Plugin: (Shockwave Flash) - C:\Users\Utermoehlen\AppData\Local\Google\Chrome\Application\21.0.1180.89\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Shockwave Flash) - C:\Users\Utermoehlen\AppData\Local\Google\Chrome\Application\31.0.1650.63\gcswf32.dll No File
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Utermoehlen\AppData\Local\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Utermoehlen\AppData\Local\Google\Chrome\Application\31.0.1650.63\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Java(TM) Platform SE 7 U7) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Java Deployment Toolkit 7.0.70.10) - C:\Windows\system32\npDeployJava1.dll No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File
CHR Plugin: (Google Update) - C:\Users\Utermoehlen\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Extension: (Google Translate) - C:\Users\Utermoehlen\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb\1.2.5_0
CHR Extension: (Google Drive) - C:\Users\Utermoehlen\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (Weather (extension)) - C:\Users\Utermoehlen\AppData\Local\Google\Chrome\User Data\Default\Extensions\beapnbfmjmjhhfpaoajfhjbbfnnlfpnc\0.9.0.7_0
CHR Extension: (Kontaktkarte) - C:\Users\Utermoehlen\AppData\Local\Google\Chrome\User Data\Default\Extensions\bialhhdohbeamjgokicedgcpanocohkf\1.7.0_0
CHR Extension: (YouTube) - C:\Users\Utermoehlen\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Notepad) - C:\Users\Utermoehlen\AppData\Local\Google\Chrome\User Data\Default\Extensions\efgpgbcidmnhkoeceikdacelidndbfgl\1.3_0
CHR Extension: (Black Menu for Google\u2122) - C:\Users\Utermoehlen\AppData\Local\Google\Chrome\User Data\Default\Extensions\eignhdfgaldabilaaegmdfbajngjmoke\6.0.1_0
CHR Extension: (Gmail Offline) - C:\Users\Utermoehlen\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejidjjhkpiempkbhmpbfngldlkglhimk\1.20_0
CHR Extension: (AdBlock) - C:\Users\Utermoehlen\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.16_0
CHR Extension: (Chrome to Mobile) - C:\Users\Utermoehlen\AppData\Local\Google\Chrome\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd\3.1_0
CHR Extension: (H\u00E4kchen) - C:\Users\Utermoehlen\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhbeaddffkfobkdfokddkicdgbikgjld\1.0_0
CHR Extension: (Yulia Brodskaya) - C:\Users\Utermoehlen\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlgdloilieclkegafohackmhffbmdpko\2_0
CHR Extension: (Google Maps) - C:\Users\Utermoehlen\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh\5.2.7_0
CHR Extension: (Rain Alarm) - C:\Users\Utermoehlen\AppData\Local\Google\Chrome\User Data\Default\Extensions\meaikaglpfemjncbioflellmppndgmok\1.1.10_0
CHR Extension: (Quick Note) - C:\Users\Utermoehlen\AppData\Local\Google\Chrome\User Data\Default\Extensions\mijlebbfndhelmdpmllgcfadlkankhok\1.6.3_0
CHR Extension: (amazon) - C:\Users\Utermoehlen\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpmhgogeadkcmcncckhhdjhcgocdjgcg\1.10_0
CHR Extension: (Download) - C:\Users\Utermoehlen\AppData\Local\Google\Chrome\User Data\Default\Extensions\nccjoeeljedbmkidebclpoabijggpbdp\0.1.7_0
CHR Extension: (RSS Subscription Extension (by Google)) - C:\Users\Utermoehlen\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlbjncdgjeocebhnmkbbbdekmmmcbfjd\2.2.3_0
CHR Extension: (Google Wallet) - C:\Users\Utermoehlen\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0
CHR Extension: (Picasa) - C:\Users\Utermoehlen\AppData\Local\Google\Chrome\User Data\Default\Extensions\onlgmecjpnejhfeofkgbfgnmdlipdejb\6.2.2_0
CHR Extension: (Google Calendar Checker (by Google)) - C:\Users\Utermoehlen\AppData\Local\Google\Chrome\User Data\Default\Extensions\ookhcbgokankfmjafalglpofmolfopek\1.4.0_0
CHR Extension: (Learn Spanish - Qu\u00E9 Onda) - C:\Users\Utermoehlen\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmcdjmebmeoobmdghjbjhbifoocbcmaj\1.77.1_0
CHR Extension: (Wikipedia\u2122 Search) - C:\Users\Utermoehlen\AppData\Local\Google\Chrome\User Data\Default\Extensions\poeiglkpkccbeadepajmmphgkeogjdmj\1.0.13_0
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

========================== Services (Whitelisted) =================

R2 Danis; C:\Program Files\Danis\Server\danis.ini [5259 2011-08-30] ()
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22208 2013-10-23] (Microsoft Corporation)
S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [280288 2013-10-23] (Microsoft Corporation)
R2 PDF Architect Helper Service; C:\Program Files\PDF Architect\HelperService.exe [1522312 2012-11-22] (pdfforge GbR)
R2 PDF Architect Service; C:\Program Files\PDF Architect\ConversionService.exe [905864 2012-11-22] (pdfforge GbR)
S2 mfevtp; "C:\Windows\system32\mfevtps.exe" [x]

==================== Drivers (Whitelisted) ====================

R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [214696 2013-09-27] (Microsoft Corporation)
R1 MpKslc552c4fe; C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{D3914B1B-0A44-4B3A-BB38-40CEC157D049}\MpKslc552c4fe.sys [40392 2014-01-09] (Microsoft Corporation)
R3 RTHDMIAzAudService; C:\Windows\System32\drivers\RtHDMIV.sys [183584 2010-01-27] (Realtek Semiconductor Corp.)
S3 ALSysIO; \??\C:\Users\ufos\AppData\Local\Temp\ALSysIO.sys [x]
S3 gdrv; \??\C:\Windows\gdrv.sys [x]
R0 mfehidk; system32\drivers\mfehidk.sys [x]
S0 mferkdet; system32\drivers\mferkdet.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-09 11:06 - 2014-01-09 11:33 - 00014524 _____ C:\Users\Utermoehlen\Downloads\FRST.txt
2014-01-09 11:06 - 2014-01-09 11:07 - 00024334 _____ C:\Users\Utermoehlen\Downloads\Addition.txt
2014-01-09 11:06 - 2014-01-09 11:06 - 00000000 ____D C:\FRST
2014-01-09 11:04 - 2014-01-09 11:06 - 01065947 _____ (Farbar) C:\Users\Utermoehlen\Downloads\FRST.exe
2014-01-09 10:07 - 2014-01-09 10:07 - 00167344 _____ (McAfee, Inc.) C:\Windows\system32\mfevtps.exe.f14b.deleteme
2014-01-09 10:06 - 2014-01-09 10:16 - 00000858 _____ C:\Users\Administrator\Downloads\Stinger_09012014_100645.html
2014-01-09 10:06 - 2014-01-09 10:06 - 00527348 _____ C:\Users\Administrator\Downloads\runtime.dat
2014-01-09 10:05 - 2014-01-09 10:13 - 00000000 ____D C:\Program Files\stinger
2014-01-09 10:05 - 2014-01-09 10:06 - 10581352 _____ (McAfee Inc) C:\Users\Administrator\Downloads\stinger32.exe
2014-01-09 10:05 - 2014-01-09 10:05 - 00000130 ___RH C:\Users\Administrator\Downloads\Stinger.opt
2014-01-09 10:04 - 2014-01-09 10:05 - 10580328 _____ (McAfee Inc) C:\Users\Administrator\Downloads\stinger32_734.exe
2014-01-09 09:40 - 2014-01-09 09:40 - 00001073 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-09 09:40 - 2014-01-09 09:40 - 00000000 ____D C:\Users\Utermoehlen\AppData\Roaming\Malwarebytes
2014-01-09 09:40 - 2014-01-09 09:40 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-09 09:40 - 2014-01-09 09:40 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2014-01-09 09:40 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-07 16:52 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-01-07 16:52 - 2013-11-26 10:22 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-01-07 16:52 - 2013-11-26 09:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-01-07 16:52 - 2013-11-26 09:52 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-01-07 16:52 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-01-07 16:52 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-01-07 16:52 - 2013-11-26 09:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-01-07 16:52 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-01-07 16:52 - 2013-11-26 09:29 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-01-07 16:52 - 2013-11-26 09:29 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-01-07 16:52 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-01-07 16:52 - 2013-11-26 09:13 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-01-07 16:52 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-01-07 16:52 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-01-07 16:52 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-01-07 16:52 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-01-07 16:51 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-01-07 16:51 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-01-07 16:51 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-01-07 16:44 - 2014-01-07 16:44 - 00018634 _____ C:\Users\Utermoehlen\Downloads\Kopie von Kopie von Schuljahresplaner 1. Hj.xlsx
2014-01-07 13:24 - 2014-01-07 13:24 - 00000890 _____ C:\Users\Utermoehlen\Desktop\Evernote.lnk
2014-01-07 13:24 - 2014-01-07 13:24 - 00000000 ____D C:\Users\Utermoehlen\AppData\Local\Evernote
2014-01-07 13:24 - 2014-01-07 13:24 - 00000000 ____D C:\Program Files\Evernote
2014-01-07 13:20 - 2014-01-07 13:23 - 59192160 _____ (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Users\Utermoehlen\Downloads\Evernote_5.1.0.2217.exe
2014-01-07 13:08 - 2014-01-07 13:08 - 00000000 ____D C:\Program Files\7-Zip
2014-01-06 15:44 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2014-01-06 15:44 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 03969472 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2014-01-06 15:41 - 2014-01-06 15:41 - 03914176 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-01-06 15:41 - 2014-01-06 15:41 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-01-06 15:41 - 2014-01-06 15:41 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-01-06 15:41 - 2014-01-06 15:41 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00640512 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-01-06 15:41 - 2014-01-06 15:41 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-01-06 15:41 - 2014-01-06 15:41 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-01-06 15:41 - 2014-01-06 15:41 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-01-06 15:41 - 2014-01-06 15:41 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-01-06 15:41 - 2014-01-06 15:41 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-01-06 15:41 - 2014-01-06 15:41 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-01-06 15:41 - 2014-01-06 15:41 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-01-06 15:41 - 2014-01-06 15:41 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-01-06 15:41 - 2014-01-06 15:41 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-01-06 15:40 - 2014-01-06 15:43 - 00011323 _____ C:\Windows\IE11_main.log
2014-01-06 14:23 - 2014-01-09 09:36 - 00000000 ___HD C:\Users\Utermoehlen\AppData\Roaming\36E8AFB1
2014-01-06 08:24 - 2014-01-06 08:24 - 00000000 ____D C:\ProgramData\Oracle
2014-01-06 08:23 - 2014-01-06 08:23 - 00000000 ____D C:\Program Files\Common Files\Java
2014-01-06 08:23 - 2013-10-08 07:50 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-01-06 08:23 - 2013-10-08 07:46 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-01-06 08:23 - 2013-10-08 07:46 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-01-06 08:23 - 2013-10-08 07:46 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-01-06 08:22 - 2014-01-06 08:23 - 00005671 _____ C:\Windows\system32\jupdate-1.7.0_45-b18.log
2014-01-06 07:59 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2014-01-06 07:59 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2014-01-06 07:59 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2014-01-06 07:59 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2014-01-06 07:59 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2014-01-06 07:59 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2014-01-06 07:59 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2014-01-06 07:59 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2014-01-06 07:59 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-01-06 07:59 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2014-01-06 07:59 - 2013-09-25 03:01 - 00136640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-01-06 07:59 - 2013-09-25 03:01 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-01-06 07:59 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-01-06 07:59 - 2013-09-25 02:57 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-01-06 07:59 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-01-06 07:59 - 2013-09-25 02:56 - 01038848 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-01-06 07:59 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-01-06 07:59 - 2013-09-25 01:49 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-01-06 07:59 - 2013-09-25 01:49 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-01-06 07:59 - 2013-07-04 13:16 - 00369848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2014-01-06 07:58 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-01-06 07:58 - 2013-10-30 02:27 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-06 07:58 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2014-01-06 07:58 - 2013-10-12 03:01 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2014-01-06 07:58 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2014-01-06 07:58 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-01-06 07:58 - 2013-10-04 02:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2014-01-06 07:58 - 2013-10-04 02:17 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2014-01-06 07:58 - 2013-10-03 02:58 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-01-06 07:57 - 2013-08-28 01:57 - 00434688 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2014-01-06 07:57 - 2013-08-01 12:03 - 00729024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-01-06 07:57 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-01-06 07:57 - 2013-07-12 11:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2014-01-06 07:57 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2014-01-06 07:57 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2014-01-06 07:57 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2014-01-06 07:57 - 2013-07-04 10:48 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2014-01-06 07:57 - 2013-07-03 04:36 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2014-01-06 07:57 - 2013-07-03 04:36 - 00025728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2014-01-06 07:57 - 2013-06-25 23:56 - 00527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2014-01-06 07:57 - 2013-06-06 05:52 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2014-01-06 07:57 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2014-01-06 07:57 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2014-01-06 07:57 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2014-01-06 07:57 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

==================== One Month Modified Files and Folders =======

2014-01-09 11:33 - 2014-01-09 11:06 - 00014524 _____ C:\Users\Utermoehlen\Downloads\FRST.txt
2014-01-09 11:24 - 2011-08-02 14:57 - 01832347 _____ C:\Windows\WindowsUpdate.log
2014-01-09 11:23 - 2012-09-20 11:46 - 00001144 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-649109484-2108759988-3969684281-1128UA.job
2014-01-09 11:09 - 2009-07-14 05:34 - 00022912 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-09 11:09 - 2009-07-14 05:34 - 00022912 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-09 11:07 - 2014-01-09 11:06 - 00024334 _____ C:\Users\Utermoehlen\Downloads\Addition.txt
2014-01-09 11:06 - 2014-01-09 11:06 - 00000000 ____D C:\FRST
2014-01-09 11:06 - 2014-01-09 11:04 - 01065947 _____ (Farbar) C:\Users\Utermoehlen\Downloads\FRST.exe
2014-01-09 10:56 - 2012-12-03 07:58 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-09 10:49 - 2013-04-03 10:31 - 00000000 ____D C:\Users\Utermoehlen\AppData\Roaming\Dropbox
2014-01-09 10:48 - 2013-04-03 10:34 - 00000000 ___RD C:\Users\Utermoehlen\Dropbox
2014-01-09 10:48 - 2013-02-21 07:55 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-09 10:48 - 2011-09-05 12:30 - 00000120 _____ C:\Windows\system32\config\netlogon.ftl
2014-01-09 10:38 - 2013-02-21 07:56 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-09 10:16 - 2014-01-09 10:06 - 00000858 _____ C:\Users\Administrator\Downloads\Stinger_09012014_100645.html
2014-01-09 10:13 - 2014-01-09 10:05 - 00000000 ____D C:\Program Files\stinger
2014-01-09 10:10 - 2010-11-20 22:01 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-09 10:07 - 2014-01-09 10:07 - 00167344 _____ (McAfee, Inc.) C:\Windows\system32\mfevtps.exe.f14b.deleteme
2014-01-09 10:06 - 2014-01-09 10:06 - 00527348 _____ C:\Users\Administrator\Downloads\runtime.dat
2014-01-09 10:06 - 2014-01-09 10:05 - 10581352 _____ (McAfee Inc) C:\Users\Administrator\Downloads\stinger32.exe
2014-01-09 10:05 - 2014-01-09 10:05 - 00000130 ___RH C:\Users\Administrator\Downloads\Stinger.opt
2014-01-09 10:05 - 2014-01-09 10:04 - 10580328 _____ (McAfee Inc) C:\Users\Administrator\Downloads\stinger32_734.exe
2014-01-09 10:02 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-09 10:02 - 2009-07-14 05:39 - 00075424 _____ C:\Windows\setupact.log
2014-01-09 10:01 - 2010-11-20 22:48 - 00022026 _____ C:\Windows\PFRO.log
2014-01-09 09:40 - 2014-01-09 09:40 - 00001073 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-09 09:40 - 2014-01-09 09:40 - 00000000 ____D C:\Users\Utermoehlen\AppData\Roaming\Malwarebytes
2014-01-09 09:40 - 2014-01-09 09:40 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-09 09:40 - 2014-01-09 09:40 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2014-01-09 09:36 - 2014-01-06 14:23 - 00000000 ___HD C:\Users\Utermoehlen\AppData\Roaming\36E8AFB1
2014-01-09 08:23 - 2012-09-20 11:46 - 00001092 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-649109484-2108759988-3969684281-1128Core.job
2014-01-08 07:48 - 2013-04-03 10:34 - 00001003 _____ C:\Users\Utermoehlen\Desktop\Dropbox.lnk
2014-01-08 07:48 - 2013-04-03 10:32 - 00000000 ____D C:\Users\Utermoehlen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-01-07 16:44 - 2014-01-07 16:44 - 00018634 _____ C:\Users\Utermoehlen\Downloads\Kopie von Kopie von Schuljahresplaner 1. Hj.xlsx
2014-01-07 13:24 - 2014-01-07 13:24 - 00000890 _____ C:\Users\Utermoehlen\Desktop\Evernote.lnk
2014-01-07 13:24 - 2014-01-07 13:24 - 00000000 ____D C:\Users\Utermoehlen\AppData\Local\Evernote
2014-01-07 13:24 - 2014-01-07 13:24 - 00000000 ____D C:\Program Files\Evernote
2014-01-07 13:23 - 2014-01-07 13:20 - 59192160 _____ (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Users\Utermoehlen\Downloads\Evernote_5.1.0.2217.exe
2014-01-07 13:08 - 2014-01-07 13:08 - 00000000 ____D C:\Program Files\7-Zip
2014-01-07 09:04 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache
2014-01-07 07:46 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Microsoft.NET
2014-01-07 07:39 - 2009-07-14 05:33 - 00408696 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-07 07:37 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\de-DE
2014-01-07 07:36 - 2011-08-10 13:42 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2014-01-06 15:56 - 2011-08-04 13:47 - 00000000 ____D C:\ProgramData\Microsoft Help
2014-01-06 15:52 - 2011-08-02 15:54 - 00001912 _____ C:\Windows\epplauncher.mif
2014-01-06 15:51 - 2011-08-02 15:53 - 00000000 ____D C:\Program Files\Microsoft Security Client
2014-01-06 15:49 - 2013-08-21 14:58 - 00000000 ____D C:\Windows\system32\MRT
2014-01-06 15:43 - 2014-01-06 15:40 - 00011323 _____ C:\Windows\IE11_main.log
2014-01-06 15:41 - 2014-01-06 15:41 - 03969472 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2014-01-06 15:41 - 2014-01-06 15:41 - 03914176 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-01-06 15:41 - 2014-01-06 15:41 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-01-06 15:41 - 2014-01-06 15:41 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-01-06 15:41 - 2014-01-06 15:41 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00640512 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-01-06 15:41 - 2014-01-06 15:41 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-01-06 15:41 - 2014-01-06 15:41 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-01-06 15:41 - 2014-01-06 15:41 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-01-06 15:41 - 2014-01-06 15:41 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-01-06 15:41 - 2014-01-06 15:41 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-01-06 15:41 - 2014-01-06 15:41 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-01-06 15:41 - 2014-01-06 15:41 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-01-06 15:41 - 2014-01-06 15:41 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-01-06 15:41 - 2014-01-06 15:41 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-01-06 15:41 - 2014-01-06 15:41 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-01-06 14:25 - 2012-08-28 07:41 - 00000000 ____D C:\IGS Buxtehude
2014-01-06 12:14 - 2012-09-19 10:56 - 00000000 ____D C:\Users\Utermoehlen\AppData\Local\Microsoft Help
2014-01-06 08:26 - 2012-09-20 11:48 - 00002354 _____ C:\Users\Utermoehlen\Desktop\Google Chrome.lnk
2014-01-06 08:24 - 2014-01-06 08:24 - 00000000 ____D C:\ProgramData\Oracle
2014-01-06 08:23 - 2014-01-06 08:23 - 00000000 ____D C:\Program Files\Common Files\Java
2014-01-06 08:23 - 2014-01-06 08:22 - 00005671 _____ C:\Windows\system32\jupdate-1.7.0_45-b18.log
2014-01-06 08:23 - 2013-04-02 13:57 - 00000000 ____D C:\Program Files\Java
2014-01-06 07:57 - 2012-12-03 07:58 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-01-06 07:57 - 2011-08-09 11:46 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

Some content of TEMP:
====================
C:\Users\Administrator\AppData\Local\Temp\danisBerichte.exe
C:\Users\Administrator\AppData\Local\Temp\danisSetup.exe
C:\Users\Administrator\AppData\Local\Temp\jre-7u3-windows-i586-iftw.exe
C:\Users\igs\AppData\Local\Temp\danisBerichte.exe
C:\Users\igs\AppData\Local\Temp\jre-7u5-windows-i586-iftw.exe
C:\Users\igs\AppData\Local\Temp\jre-7u6-windows-i586-iftw.exe
C:\Users\igs\AppData\Local\Temp\jre-7u7-windows-i586-iftw.exe
C:\Users\ufos\AppData\Local\Temp\ose00000.exe
C:\Users\Utermoehlen\AppData\Local\Temp\APNStub.exe
C:\Users\Utermoehlen\AppData\Local\Temp\danisBerichte.exe
C:\Users\Utermoehlen\AppData\Local\Temp\DLMobile.413.dll
C:\Users\Utermoehlen\AppData\Local\Temp\jre-7u15-windows-i586-iftw.exe
C:\Users\Utermoehlen\AppData\Local\Temp\jre-7u17-windows-i586-iftw.exe
C:\Users\Utermoehlen\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe
C:\Users\Utermoehlen\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-09 07:50

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 08-01-2014 01
Ran by utermoehlen at 2014-01-09 11:34:06
Running from C:\Users\Utermoehlen\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Microsoft Security Essentials (Disabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Microsoft Security Essentials (Disabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}

==================== Installed Programs ======================

32 Bit HP CIO Components Installer (Version: 2.1.6 - Hewlett-Packard) Hidden
7-Zip 9.20 (Version:  - )
Adobe Flash Player 11 ActiveX (Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Reader X (10.1.8) - Deutsch (Version: 10.1.8 - Adobe Systems Incorporated)
Allway Sync version 12.0.0 (Version:  - Botkind Inc)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - ATI Technologies Inc.) Hidden
Catalyst Control Center - Branding (Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center Core Implementation (Version: 2010.0406.2133.36843 - ATI) Hidden
Catalyst Control Center Graphics Full Existing (Version: 2010.0406.2133.36843 - ATI) Hidden
Catalyst Control Center Graphics Full New (Version: 2010.0406.2133.36843 - ATI) Hidden
Catalyst Control Center Graphics Light (Version: 2010.0406.2133.36843 - ATI) Hidden
Catalyst Control Center Graphics Previews Common (Version: 2010.0406.2133.36843 - ATI) Hidden
Catalyst Control Center Graphics Previews Vista (Version: 2010.0406.2133.36843 - ATI) Hidden
Catalyst Control Center HydraVision Full (Version: 2010.0406.2133.36843 - ATI) Hidden
CCC Help English (Version: 2010.0406.2132.36843 - ATI) Hidden
ccc-core-static (Version: 2010.0406.2133.36843 - Ihr Firmenname) Hidden
ccc-utility (Version: 2010.0406.2133.36843 - ATI) Hidden
DaNiS (Version: 2.3.4 - NLQ)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (Version:  - Microsoft)
Dropbox (Version: 2.4.11 - Dropbox, Inc.)
Evernote v. 5.1 (Version: 5.1.0.2217 - Evernote Corp.)
Google Chrome (Version: 31.0.1650.63 - Google Inc.)
Google Toolbar for Internet Explorer (Version: 1.0.0 - Google Inc.) Hidden
Google Toolbar for Internet Explorer (Version: 7.5.4805.320 - Google Inc.)
Google Update Helper (Version: 1.3.22.3 - Google Inc.) Hidden
HP LaserJet P3010 Series Benutzerhandbuch (Version: 1.0.0.0 - Hewlett Packard, Co.)
HP LaserJet P3010 Series Bildschirmschriften (Version: 2.0.0.0 - Hewlett Packard, Co.)
HP LaserJet P3010 Series PCL 6 [HP LaserJet P3010 Series PCL 6] (Version: 10/09/2008 61.083.41.03 - HP)
HP LaserJet Professional P1100-P1560-P1600 Series (Version:  - )
HP Officejet Pro 8600 - Grundlegende Software für das Gerät (Version: 25.0.619.0 - Hewlett-Packard Co.)
izn-Stabil - Update (Version:  - )
izn-Stabil (Version:  - )
izn-Stabil-Schulungsversion (Version:  - )
Java 7 Update 45 (Version: 7.0.450 - Oracle)
Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
JavaFX 2.0.3 (Version: 2.0.3 - Oracle Corporation)
Kalender-Excel-8.8.1 (Version: 8.8.1 - MSDatec)
Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8402.2 - Microsoft Corporation) Hidden
Microsoft Office 2010 Service Pack 1 (SP1) (Version:  - Microsoft) Hidden
Microsoft Office Access MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook Connector (Version: 14.0.6123.5001 - Microsoft Corporation)
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional 2010 (Version: 14.0.6029.1000 - Microsoft Corporation)
Microsoft Office Proof (English) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Security Client (Version: 4.4.0304.0 - Microsoft Corporation) Hidden
Microsoft Security Client DE-DE Language Pack (Version: 2.1.1116.0 - Microsoft Corporation) Hidden
Microsoft Security Essentials (Version: 4.4.304.0 - Microsoft Corporation)
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0 - Microsoft Corporation)
NEC Electronics USB 3.0 Host Controller Driver (Version: 1.0.18.0 - NEC Electronics Corporation)
NEC Electronics USB 3.0 Host Controller Driver (Version: 1.0.18.0 - NEC Electronics Corporation) Hidden
Nero BurnLite 10 (Version: 10.0.10500.5.100 - Nero AG)
Nero BurnLite 10 (Version: 10.0.10600 - Nero AG)
Nero Control Center 10 (Version: 10.0.13100.3.1 - Nero AG) Hidden
Nero Core Components 10 (Version: 2.0.15100.0.1 - Nero AG) Hidden
PDF Architect (Version: 1.0.41.8362 - pdfforge)
PDFCreator (Version: 1.6.0 - Frank Heindörfer, Philip Chinery)
pdfforge Toolbar v6.5 (Version: 6.5 - Spigot, Inc.) <==== ATTENTION
Realtek Ethernet Controller Driver For Windows 7 (Version: 7.18.322.2010 - Realtek)
Realtek HDMI Audio Driver for ATI (Version: 6.0.1.6034 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (Version: 6.0.1.6083 - Realtek Semiconductor Corp.)
The Lord of the Rings FREE Trial  (Version: 1.00.0000 - ATI Technologies Inc.) Hidden
Untis 2012 (Version:  - Gruber & Petters)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (Version: 3 - Microsoft Corporation)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553065) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2566458) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (Version:  - Microsoft)
VLC media player 1.1.11 (Version: 1.1.11 - VideoLAN)

==================== Restore Points  =========================

05-07-2013 09:06:02 Windows Update
21-08-2013 13:08:30 Microsoft Office Outlook Connector wurde installiert.
21-08-2013 13:08:44 Windows Update
21-08-2013 13:49:46 Windows Update
30-09-2013 06:31:39 Windows Update
30-09-2013 06:55:22 Windows Update
07-10-2013 22:00:00 Geplanter Prüfpunkt
06-01-2014 06:58:38 Windows Update
06-01-2014 07:22:35 Installed Java 7 Update 45
06-01-2014 14:38:27 Windows Update
07-01-2014 12:24:12 Installed Evernote v. 5.1
07-01-2014 15:51:49 Windows Update

==================== Hosts content: ==========================

2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {2AFAF10F-F58A-4B4B-982E-F9AF55C3240A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-02-21] (Google Inc.)
Task: {35C6D9BE-8634-4017-A45A-9859A1C5971E} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated)
Task: {7B9411D9-17FB-4227-A942-DC8E9E982C2D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-02-21] (Google Inc.)
Task: {94EABDE1-60C6-4F9B-ACD3-8432254C1CCF} - System32\Tasks\{0D3147C0-9BAB-4C77-8B29-2B8083FA8D47} => Chrome.exe 
Task: {B19CB662-6577-4FBD-B0BA-5D34A3B64419} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)
Task: {B8E4E183-0E26-4CF7-9CB5-2CA35ABB5F4B} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-649109484-2108759988-3969684281-1128UA => C:\Users\Utermoehlen\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-20] (Google Inc.)
Task: {C3AB857E-868E-470B-92D2-92BBFC2DAA57} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-01-06] (Adobe Systems Incorporated)
Task: {D6D40F4A-5284-43C5-892E-D11EF49E7CE6} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {D847A65E-C74B-46FC-A31B-5C3DFB598F66} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-649109484-2108759988-3969684281-1128Core => C:\Users\Utermoehlen\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-20] (Google Inc.)
Task: {FA334B9F-445D-456C-B3BE-460A33D53F24} - System32\Tasks\Google Updater and Installer => C:\Users\Utermoehlen\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-20] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-649109484-2108759988-3969684281-1126Core1cd94ebc007192b.job => C:\Users\igs\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-649109484-2108759988-3969684281-1128Core.job => C:\Users\Utermoehlen\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-649109484-2108759988-3969684281-1128UA.job => C:\Users\Utermoehlen\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-10-19 00:55 - 2013-10-19 00:55 - 25100288 _____ () C:\Users\Utermoehlen\AppData\Roaming\Dropbox\bin\libcef.dll
2009-11-24 12:36 - 2009-11-24 12:36 - 00016384 ____R () C:\Program Files\ATI Technologies\ATI.ACE\Branding\Branding.dll
2011-08-02 15:09 - 2011-08-02 15:09 - 00270336 _____ () C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2013-11-25 10:00 - 2013-11-25 10:00 - 00433664 _____ () C:\Program Files\Evernote\Evernote\libxml2.dll
2013-11-25 10:00 - 2013-11-25 10:00 - 00315392 _____ () C:\Program Files\Evernote\Evernote\libtidy.dll
2014-01-06 08:26 - 2013-12-04 03:47 - 00702416 _____ () C:\Users\Utermoehlen\AppData\Local\Google\Chrome\Application\31.0.1650.63\libglesv2.dll
2014-01-06 08:26 - 2013-12-04 03:47 - 00099792 _____ () C:\Users\Utermoehlen\AppData\Local\Google\Chrome\Application\31.0.1650.63\libegl.dll
2014-01-06 08:26 - 2013-12-04 03:48 - 04055504 _____ () C:\Users\Utermoehlen\AppData\Local\Google\Chrome\Application\31.0.1650.63\pdf.dll
2014-01-06 08:26 - 2013-12-04 03:48 - 00399312 _____ () C:\Users\Utermoehlen\AppData\Local\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll
2014-01-06 08:26 - 2013-12-04 03:47 - 01619408 _____ () C:\Users\Utermoehlen\AppData\Local\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Users\igs\Downloads\Kollegium der IGS Buxtehude.xls.eml:OECustomProperty

==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (01/09/2014 10:03:35 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/09/2014 08:07:13 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/09/2014 07:50:58 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "urn:schemas-microsoft-com:asm.v1^requestedPrivileges1". Fehler in Manifest- oder Richtliniendatei "urn:schemas-microsoft-com:asm.v1^requestedPrivileges2" in Zeile urn:schemas-microsoft-com:asm.v1^requestedPrivileges3.
Der Wert "asAdministrator" des "level"-Attributs im urn:schemas-microsoft-com:asm.v1^requestedPrivileges-Element ist ungültig.

Error: (01/09/2014 07:33:55 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/09/2014 07:33:36 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: explorer.exe, Version: 6.1.7601.17567, Zeitstempel: 0x4d6727a7
Name des fehlerhaften Moduls: dbghelp.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b7bc
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0004c60e
ID des fehlerhaften Prozesses: 0x12a4
Startzeit der fehlerhaften Anwendung: 0xexplorer.exe0
Pfad der fehlerhaften Anwendung: explorer.exe1
Pfad des fehlerhaften Moduls: explorer.exe2
Berichtskennung: explorer.exe3

Error: (01/08/2014 09:11:43 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "urn:schemas-microsoft-com:asm.v1^requestedPrivileges1". Fehler in Manifest- oder Richtliniendatei "urn:schemas-microsoft-com:asm.v1^requestedPrivileges2" in Zeile urn:schemas-microsoft-com:asm.v1^requestedPrivileges3.
Der Wert "asAdministrator" des "level"-Attributs im urn:schemas-microsoft-com:asm.v1^requestedPrivileges-Element ist ungültig.

Error: (01/08/2014 07:32:59 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/07/2014 08:21:10 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "urn:schemas-microsoft-com:asm.v1^requestedPrivileges1". Fehler in Manifest- oder Richtliniendatei "urn:schemas-microsoft-com:asm.v1^requestedPrivileges2" in Zeile urn:schemas-microsoft-com:asm.v1^requestedPrivileges3.
Der Wert "asAdministrator" des "level"-Attributs im urn:schemas-microsoft-com:asm.v1^requestedPrivileges-Element ist ungültig.

Error: (01/07/2014 07:40:26 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/06/2014 08:50:48 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "urn:schemas-microsoft-com:asm.v1^requestedPrivileges1". Fehler in Manifest- oder Richtliniendatei "urn:schemas-microsoft-com:asm.v1^requestedPrivileges2" in Zeile urn:schemas-microsoft-com:asm.v1^requestedPrivileges3.
Der Wert "asAdministrator" des "level"-Attributs im urn:schemas-microsoft-com:asm.v1^requestedPrivileges-Element ist ungültig.


System errors:
=============
Error: (01/09/2014 10:07:01 AM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR2 gefunden.

Error: (01/09/2014 10:07:01 AM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR2 gefunden.

Error: (01/09/2014 10:07:00 AM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR2 gefunden.

Error: (01/09/2014 10:06:59 AM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR2 gefunden.

Error: (01/09/2014 10:06:45 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Software Protection" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (01/09/2014 10:06:45 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "HP SI Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 1000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (01/09/2014 10:06:45 AM) (Source: Service Control Manager) (User: )
Description: Dienst "Adobe Acrobat Update Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (01/09/2014 10:04:15 AM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.

Error: (01/09/2014 10:04:15 AM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.

Error: (01/09/2014 10:04:13 AM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.


Microsoft Office Sessions:
=========================
Error: (01/09/2014 10:03:35 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/09/2014 08:07:13 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/09/2014 07:50:58 AM) (Source: SideBySide)(User: )
Description: urn:schemas-microsoft-com:asm.v1^requestedPrivilegeslevelasAdministratorc:\program files\Danis\Server\bin\MySQLInstanceConfig.exec:\program files\Danis\Server\bin\MySQLInstanceConfig.exe6

Error: (01/09/2014 07:33:55 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/09/2014 07:33:36 AM) (Source: Application Error)(User: )
Description: explorer.exe6.1.7601.175674d6727a7dbghelp.dll6.1.7601.175144ce7b7bcc00000050004c60e12a401cf0d04b8e67e59C:\Windows\explorer.exeC:\Windows\system32\dbghelp.dllf74d2d71-78f7-11e3-b343-1c6f658b93ca

Error: (01/08/2014 09:11:43 AM) (Source: SideBySide)(User: )
Description: urn:schemas-microsoft-com:asm.v1^requestedPrivilegeslevelasAdministratorc:\program files\Danis\Server\bin\MySQLInstanceConfig.exec:\program files\Danis\Server\bin\MySQLInstanceConfig.exe6

Error: (01/08/2014 07:32:59 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/07/2014 08:21:10 AM) (Source: SideBySide)(User: )
Description: urn:schemas-microsoft-com:asm.v1^requestedPrivilegeslevelasAdministratorc:\program files\Danis\Server\bin\MySQLInstanceConfig.exec:\program files\Danis\Server\bin\MySQLInstanceConfig.exe6

Error: (01/07/2014 07:40:26 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/06/2014 08:50:48 AM) (Source: SideBySide)(User: )
Description: urn:schemas-microsoft-com:asm.v1^requestedPrivilegeslevelasAdministratorc:\program files\Danis\Server\bin\MySQLInstanceConfig.exec:\program files\Danis\Server\bin\MySQLInstanceConfig.exe6


==================== Memory info =========================== 

Percentage of memory in use: 51%
Total physical RAM: 3325.55 MB
Available physical RAM: 1597.23 MB
Total Pagefile: 6649.4 MB
Available Pagefile: 4702.84 MB
Total Virtual: 2047.88 MB
Available Virtual: 1902.45 MB

==================== Drives ================================

Drive c: (System) (Fixed) (Total:232.32 GB) (Free:191.9 GB) NTFS
Drive d: (Daten) (Fixed) (Total:233.34 GB) (Free:233.21 GB) NTFS

==================== MBR & Partition Table ==================

==================== End Of Log ============================