Froh das ich helfen konnte
Du kannst FRST nun von deinem desktop löschen.

Hallihallo,
hier bin ich auch schon wieder, da das altbekannte öffnen des Windows Explorers wieder aufgetaucht ist.
Ich habe es gestern, nach einigem hin und her, endlich geschafft eine ältere Version der Adobe Creative Suite zu installieren und habe während des Installation Lösung 2 und 3 für den mir angezeigten Fehlercode angewendet
"hxxp://helpx.adobe.com/de/creative-suite/kb/error-1603-install-cs5-products.html"
allerdings hat sich beim nächsten hochfahren der Explorer wieder geöffnet.

ich habe die beim letzten mal gepostete Lösung des Problems bereits durchgegangen, welche allerdings diesmal nicht geholfen hat.
Im fixlog wurde "Value not detected" angegeben

ich werde gleich einen scan durchführen und die logfile posten.

lg sulamith

hier ist die logfile

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-05-2014
Ran by Amelie_2 (administrator) on XXX on 04-05-2014 10:20:30
Running from C:\Users\Amelie_2\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Windows\SysWOW64\irstrtsv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics) C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(CyberLink) C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
() C:\Program Files\Lenovo\Intelligent Touchpad\TouchZone.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe
(LENOVO) C:\Program Files (x86)\Lenovo\Lenovo CAPOSD\CAPOSD.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Vimicro) C:\Program Files (x86)\USB Camera2\VM332_STI.EXE
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
() C:\Program Files\CONEXANT\ForteConfig\fmapp.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Logitech Inc.) C:\Program Files (x86)\Squeezebox\SqueezeTray.exe
(Logitech Inc.) C:\Program Files (x86)\Squeezebox\server\SqueezeSvr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
() C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [UpdatePRCShortCut] => C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [222504 2009-05-13] (CyberLink Corp.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2847016 2011-11-10] (Synaptics Incorporated)
HKLM\...\Run: [SynLenovoGestureMgr] => C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe [408872 2011-11-10] (Synaptics)
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1654400 2012-02-21] (Conexant Systems, Inc.)
HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] ()
HKLM\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [6202416 2012-08-07] (Lenovo(beijing) Limited)
HKLM\...\Run: [Energy Management] => C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [8079408 2012-08-07] (Lenovo (Beijing) Limited)
HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [883840 2012-03-29] (Conexant Systems, Inc.)
HKLM\...\Run: [AtherosBtStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [792224 2011-12-13] (Atheros Communications)
HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [657568 2011-12-13] (Atheros Commnucations)
HKLM\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [378968 2012-01-05] (Alcor Micro Corp.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-25] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [AdobeCS4ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [611712 2008-08-14] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] => C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe [37232 2008-06-12] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe [640376 2008-06-11] (Adobe Systems Inc.)
HKLM-x32\...\Run: [Adobe_ID0ENQBO] => C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4Tray.exe [378224 2008-08-15] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [YouCam Tray] => C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe [228448 2011-01-28] (CyberLink Corp.)
HKLM-x32\...\Run: [YouCam Mirage] => C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [136488 2011-01-28] (CyberLink)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-27] (Intel Corporation)
HKLM-x32\...\Run: [Lenovo Registration] => C:\Program Files (x86)\Lenovo Registration\LenovoReg.exe [4351712 2012-01-26] (Lenovo, Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKLM-x32\...\Run: [Intelligent Touchpad] => C:\Program Files\Lenovo\Intelligent Touchpad\TouchZone.exe [291272 2011-12-08] ()
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-03-24] (Hewlett-Packard)
HKLM-x32\...\Run: [Dolby Home Theater v4] => C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe [506712 2011-06-01] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [CAPOSD] => C:\Program Files (x86)\Lenovo\Lenovo CAPOSD\CAPOSD.exe [1876992 2012-02-17] (LENOVO)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [332BigDog] => C:\Program Files (x86)\USB Camera2\VM332_STI.EXE [548864 2011-12-09] (Vimicro)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2015557645-2765522812-600638866-1004\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-2015557645-2765522812-600638866-1004\...\MountPoints2: {20c4899e-650d-11e3-909a-089e01044532} - Autoplay.exe -auto
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [168616 2013-11-14] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [141336 2013-11-14] (NVIDIA Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Logitech Media Server-Taskleisten-Tool.lnk
ShortcutTarget: Logitech Media Server-Taskleisten-Tool.lnk -> C:\Program Files (x86)\Squeezebox\SqueezeTray.exe (Logitech Inc.)
Startup: C:\Users\Amelie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk
ShortcutTarget: OneNote 2007 Screen Clipper and Launcher.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=KMOH&bmod=KMOH
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/ig/redirectdomain?brand=KMOH&bmod=KMOH
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.google.com/ig/redirectdomain?brand=KMOH&bmod=KMOH
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = 
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7KMOH
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7KMOH
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: intel.com/AppUp - C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp.dll No File

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/ig/redirectdomain?brand=KMOH&bmod=KMOH
CHR StartupUrls: "hxxp://www.google.com/ig/redirectdomain?brand=KMOH&bmod=KMOH"
CHR Extension: (Google Docs) - C:\Users\Amelie_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-12-22]
CHR Extension: (Google Drive) - C:\Users\Amelie_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-12-22]
CHR Extension: (YouTube) - C:\Users\Amelie_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-12-22]
CHR Extension: (Google-Suche) - C:\Users\Amelie_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-12-22]
CHR Extension: (AdBlock) - C:\Users\Amelie_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-05-02]
CHR Extension: (Google Wallet) - C:\Users\Amelie_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-22]
CHR Extension: (Google Mail) - C:\Users\Amelie_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-12-22]

==================== Services (Whitelisted) =================

S3 Adobe Version Cue CS4; C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe [284016 2008-08-15] (Adobe Systems Incorporated)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-25] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-25] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1017424 2014-02-25] (Avira Operations GmbH & Co. KG)
S2 BootShieldSvc; C:\Windows\System32\BootShieldSvc.exe [123952 2012-02-06] (Lenovo)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [127320 2012-04-16] ()
R2 irstrtsv; C:\Windows\SysWOW64\irstrtsv.exe [193536 2012-02-05] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [164184 2012-04-16] (Intel Corporation)
R2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [158880 2011-12-13] (Atheros)
S2 McAfee SiteAdvisor Service; c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe [X]

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2014-02-25] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2014-02-25] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-02-25] (Avira Operations GmbH & Co. KG)
R0 BootShield; C:\Windows\System32\drivers\BootShield.sys [31536 2012-04-16] (Lenovo Corporation")
R1 BootShieldfltr; C:\Windows\System32\drivers\BootShieldfltr.sys [61744 2012-02-16] (Lenovo Corporation)
R3 irstrtdv; C:\Windows\System32\DRIVERS\irstrtdv.sys [26504 2012-02-06] (Intel Corporation)
R3 LAD; C:\Windows\System32\DRIVERS\LAD.sys [8192 2012-01-13] (TODO: <Company name>)
U3 BcmSqlStartupSvc; 
U2 CLKMSVC10_3A60B698; 
U2 CLKMSVC10_C3B3B687; 
U2 DriverService; 
U2 iATAgentService; 
U2 idealife Update Service; 
U3 IGRS; 
U2 IviRegMgr; 
U2 Oasis2Service; 
U2 PCCarerService; 
U2 ReadyComm.DirectRouter; 
U2 RichVideo; 
U2 RtLedService; 
U2 SeaPort; 
U2 SoftwareService; 
U3 SQLWriter; 

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-04 10:19 - 2014-05-04 10:20 - 02062336 _____ (Farbar) C:\Users\Amelie_2\Desktop\FRST64.exe
2014-05-04 10:19 - 2014-05-04 10:20 - 00017949 _____ () C:\Users\Amelie_2\Desktop\FRST.txt
2014-05-04 09:53 - 2014-05-04 09:53 - 00000000 ____D () C:\Users\Amelie_2\Library
2014-05-04 09:53 - 2014-05-04 09:53 - 00000000 ____D () C:\Users\Amelie_2\AppData\Roaming\com.adobe.ExMan
2014-05-04 00:10 - 2014-04-29 16:01 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-04 00:10 - 2014-04-29 15:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-04 00:10 - 2014-04-29 14:48 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-04 00:10 - 2014-04-29 14:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-03 21:02 - 2008-04-07 05:38 - 00024416 ____R (Adobe Systems Inc.) C:\Windows\system32\AdobePDFUI.dll
2014-05-03 20:55 - 2014-05-03 20:55 - 00001020 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat.com.lnk
2014-05-03 20:52 - 2014-05-03 20:52 - 00000000 ____D () C:\Windows\SysWOW64\spool
2014-05-03 20:50 - 2014-05-03 21:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Design Standard CS4
2014-05-03 20:49 - 2014-05-03 20:49 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-05-03 20:40 - 2014-05-03 20:40 - 00034258 _____ () C:\Users\Amelie_2\Adobe Creative Suite Cleaner Tool.log
2014-05-03 14:36 - 2014-05-03 14:37 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{39E71734-2511-4D2B-A3FD-4D5A11EC5FE5}
2014-05-02 15:10 - 2014-05-03 21:40 - 00000000 ____D () C:\ProgramData\FLEXnet
2014-05-02 14:51 - 2014-05-02 14:51 - 00000000 ____D () C:\Program Files\Adobe
2014-05-02 14:44 - 2014-05-02 14:44 - 00000000 ____D () C:\ProgramData\ALM
2014-05-02 14:19 - 2014-05-02 14:19 - 00000000 ____D () C:\Users\Amelie_2\Documents\Adobe Scripts
2014-05-02 14:14 - 2014-05-04 00:20 - 00000000 ____D () C:\Program Files (x86)\Adobe Media Player
2014-05-02 14:11 - 2014-05-02 14:11 - 00000000 ____D () C:\Program Files\Common Files\Macrovision Shared
2014-05-02 14:10 - 2014-05-04 09:53 - 00000000 ____D () C:\Users\Amelie_2\AppData\Local\Adobe
2014-05-02 13:18 - 2014-05-02 13:18 - 00000000 __SHD () C:\Users\Amelie_2\AppData\Local\EmieUserList
2014-05-02 13:18 - 2014-05-02 13:18 - 00000000 __SHD () C:\Users\Amelie_2\AppData\Local\EmieSiteList
2014-05-02 13:04 - 2014-05-02 13:04 - 00000000 ____D () C:\Users\Amelie_2\AppData\Local\CrashDumps
2014-05-02 13:03 - 2014-05-02 13:03 - 00002912 _____ () C:\Windows\System32\Tasks\{A861F25C-4FB8-4EC7-89AB-8B6431681B2C}
2014-05-02 12:57 - 2014-05-02 12:57 - 00000000 ____D () C:\Users\Amelie_2\AppData\Roaming\Macromedia
2014-05-02 12:55 - 2014-05-03 20:56 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-05-02 09:15 - 2014-05-02 09:16 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{CDD32B8F-F032-4833-A19A-267024D88A85}
2014-05-01 11:37 - 2014-05-01 11:37 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{37A922D8-B982-4635-A2FB-CEA48C39880D}
2014-04-30 17:21 - 2014-04-30 17:25 - 00515584 _____ () C:\Users\Amelie\Downloads\gleitzonenrechner.xls
2014-04-30 17:06 - 2014-04-30 17:06 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{E4C3B3FB-C57A-4D64-991E-C5CBC15B010D}
2014-04-29 12:32 - 2014-04-29 12:32 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{5EF785FB-5CE9-40B1-8FC7-EBC2FB1DB8CF}
2014-04-28 13:13 - 2014-04-28 13:13 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{7872830F-A239-4E54-AC40-CAE0DF926601}
2014-04-28 12:49 - 2014-04-28 12:49 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{E4F35CC6-88E2-468C-BEDD-0F480F601EF7}
2014-04-27 13:35 - 2014-04-27 13:36 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{30483FC3-3A58-4214-BA99-D370A104C6EA}
2014-04-26 08:22 - 2014-04-26 08:23 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{E6E10EAB-9203-454D-BA3F-C816917ECBB7}
2014-04-25 10:37 - 2014-04-25 10:38 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{B03F31AE-6152-4E0C-A5ED-09DC0D22254D}
2014-04-24 19:46 - 2014-04-24 19:46 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{D7403A20-306A-4FED-A2EA-308A7E96ADC4}
2014-04-24 07:24 - 2014-04-24 07:24 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{B235A8FA-9C3F-4C45-B052-4111E57A5B1B}
2014-04-23 15:11 - 2014-04-23 15:11 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{D58C24C7-B02F-4FB8-87D5-7EFBF7009BB5}
2014-04-22 22:05 - 2014-04-22 22:05 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{4D981211-6F5F-4DDF-89A6-83374D28ACBE}
2014-04-22 10:01 - 2014-04-22 10:04 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{4A785540-55F2-4AF6-AD06-23BE7140375D}
2014-04-21 12:11 - 2014-04-21 12:11 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{69A0257C-0FE8-4475-B83C-71BFFD4E0F61}
2014-04-20 10:56 - 2014-04-20 10:56 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{2DAD0CBD-ABCE-4083-8CD0-7E75CAD339E2}
2014-04-19 17:40 - 2014-04-19 17:40 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{278BBB20-51D4-4779-8BF9-836F4A75D9B4}
2014-04-18 17:15 - 2014-04-18 17:15 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{4BDEC6E9-97EF-4278-960B-30652D12D2D8}
2014-04-18 16:48 - 2014-04-18 16:48 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{EB078D93-9016-409D-9836-1BE2CC24AF5E}
2014-04-18 14:45 - 2014-04-18 14:45 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{196E4CD1-81A3-43AE-B703-64E7B416AADF}
2014-04-17 17:37 - 2014-04-17 17:37 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{A7855153-FCD5-4583-8578-FAC395FA001E}
2014-04-17 15:52 - 2014-04-17 15:52 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{7CCD621F-FBE3-4EB7-9B39-5C309710583F}
2014-04-16 23:47 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-04-16 23:47 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-04-16 23:47 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-04-16 23:47 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-04-16 23:47 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-16 23:47 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-16 23:47 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-04-16 23:47 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-16 23:47 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-04-16 23:47 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-04-16 23:47 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-04-16 23:47 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-16 23:47 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-16 23:47 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-04-16 23:47 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-04-16 23:47 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-04-16 23:47 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-04-16 23:47 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-04-16 23:47 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-16 23:47 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-04-16 23:47 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-04-16 23:47 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-04-16 23:47 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-04-16 23:47 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-04-16 23:47 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-04-16 23:47 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-04-16 23:47 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-04-16 23:47 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-04-16 23:47 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-04-16 23:47 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-16 23:47 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-04-16 23:47 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-04-16 23:47 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-04-16 23:47 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-04-16 23:47 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-16 23:47 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-04-16 23:47 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-04-16 23:47 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-04-16 23:47 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-16 23:47 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-16 23:47 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-04-16 23:47 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-04-16 23:47 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-04-16 23:47 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-04-16 22:29 - 2014-04-16 22:29 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{C42DC806-2C98-41B8-8A6E-C733970BA681}
2014-04-16 21:21 - 2014-04-16 21:21 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{981878C4-A328-4FEA-97AE-5C495515FA2D}
2014-04-16 08:16 - 2014-04-16 08:16 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{AAAE1EFB-BCD8-4299-8676-AADE2B6A17D7}
2014-04-15 13:26 - 2014-04-15 13:26 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{AB007F5D-C96C-43AA-BE11-1A24D5983151}
2014-04-14 17:12 - 2014-04-14 17:12 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{E399BE6B-6924-4D9A-AD94-571B193F87D5}
2014-04-13 18:44 - 2014-04-20 13:03 - 00000000 ____D () C:\Users\Amelie\Desktop\SS14
2014-04-13 13:09 - 2014-04-13 13:09 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{928BE1B7-F0D5-4594-893C-F282F19BD2B0}
2014-04-12 16:08 - 2014-04-12 16:09 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\Amelie\Downloads\mbam-setup-2.0.1.1004.exe
2014-04-12 13:19 - 2014-05-04 09:50 - 00001680 _____ () C:\Windows\setupact.log
2014-04-12 13:19 - 2014-04-12 13:19 - 00000000 _____ () C:\Windows\setuperr.log
2014-04-12 13:02 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-12 13:02 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-04-12 13:02 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-04-12 13:02 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-04-12 13:02 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-04-12 13:02 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-04-12 13:02 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-04-12 13:02 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-04-12 13:02 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-04-12 13:02 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-04-12 13:02 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-04-12 13:02 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-12 13:02 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-12 13:02 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-12 13:02 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-12 13:02 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-04-12 13:02 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-04-12 13:01 - 2014-04-12 13:01 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{2A1ACBB9-B816-4AED-9D93-420744A4371F}
2014-04-12 11:03 - 2014-04-12 11:03 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{A8003195-B1E9-4B5A-B6D6-A372936D5434}
2014-04-11 10:27 - 2014-04-11 10:27 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{B53B2199-A74D-45BC-BB42-67D0F8E35C6C}
2014-04-10 18:31 - 2014-04-10 18:31 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{811D9CD4-B4B7-4BCA-A405-D1BF5FFDCD00}
2014-04-09 21:54 - 2014-04-09 21:55 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{7067C7FD-6654-4F55-AC39-97A117DB6A78}
2014-04-09 01:09 - 2014-04-09 01:09 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{6E1B48A0-B206-4FDB-9E16-9DE206FB5A83}
2014-04-08 22:09 - 2014-04-08 22:09 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{15EB1C53-4903-48CA-B9F8-E8032D7C66B9}
2014-04-07 21:51 - 2014-04-07 21:51 - 00044373 _____ () C:\Users\Amelie\Downloads\personal_20140407_215136.ics
2014-04-07 16:47 - 2014-04-07 16:47 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{81CCF3B0-2087-419A-9057-0717B7343E50}
2014-04-06 22:12 - 2014-04-06 22:12 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{A1E8C07E-CE00-4A24-B84E-C4D0753A99FF}
2014-04-06 10:11 - 2014-04-06 10:12 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{668FA351-096C-4024-B64F-6F1E58F8CD31}
2014-04-05 10:12 - 2014-04-05 10:12 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{65CB6180-E9F7-47DE-93D4-8F8819767603}
2014-04-04 11:40 - 2014-04-04 11:40 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{BC4135C4-587B-4A68-AC48-E12FFF54EFD2}

==================== One Month Modified Files and Folders =======

2014-05-04 10:20 - 2014-05-04 10:19 - 02062336 _____ (Farbar) C:\Users\Amelie_2\Desktop\FRST64.exe
2014-05-04 10:20 - 2014-05-04 10:19 - 00017949 _____ () C:\Users\Amelie_2\Desktop\FRST.txt
2014-05-04 10:20 - 2014-02-08 21:00 - 00000000 ____D () C:\FRST
2014-05-04 10:17 - 2013-12-14 22:21 - 00014266 _____ () C:\Users\Public\CAFADEBUG.log
2014-05-04 09:58 - 2012-08-07 23:03 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-04 09:58 - 2009-07-14 06:45 - 00032064 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-04 09:58 - 2009-07-14 06:45 - 00032064 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-04 09:55 - 2012-08-08 08:12 - 00699666 _____ () C:\Windows\system32\perfh007.dat
2014-05-04 09:55 - 2012-08-08 08:12 - 00149774 _____ () C:\Windows\system32\perfc007.dat
2014-05-04 09:55 - 2009-07-14 07:13 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-04 09:54 - 2012-08-07 22:25 - 01926294 _____ () C:\Windows\WindowsUpdate.log
2014-05-04 09:53 - 2014-05-04 09:53 - 00000000 ____D () C:\Users\Amelie_2\Library
2014-05-04 09:53 - 2014-05-04 09:53 - 00000000 ____D () C:\Users\Amelie_2\AppData\Roaming\com.adobe.ExMan
2014-05-04 09:53 - 2014-05-02 14:10 - 00000000 ____D () C:\Users\Amelie_2\AppData\Local\Adobe
2014-05-04 09:53 - 2013-12-22 16:24 - 00000000 ____D () C:\Users\Amelie_2\AppData\Roaming\Adobe
2014-05-04 09:53 - 2013-12-17 22:02 - 00000000 ____D () C:\Users\Amelie_2
2014-05-04 09:52 - 2014-02-06 18:48 - 00074496 _____ () C:\Users\Amelie_2\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-04 09:51 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-04 09:50 - 2014-04-12 13:19 - 00001680 _____ () C:\Windows\setupact.log
2014-05-04 09:50 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-04 09:47 - 2012-08-07 23:03 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-04 09:44 - 2013-12-14 20:27 - 00000000 ___RD () C:\Users\Amelie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-04 00:21 - 2013-12-14 20:24 - 00000000 ____D () C:\Users\Amelie
2014-05-04 00:20 - 2014-05-02 14:14 - 00000000 ____D () C:\Program Files (x86)\Adobe Media Player
2014-05-04 00:20 - 2013-12-17 22:02 - 00000000 ____D () C:\Users\Amelie_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-05-04 00:20 - 2013-12-14 20:24 - 00000000 ____D () C:\Users\Amelie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-05-04 00:20 - 2012-08-07 22:40 - 00000000 ____D () C:\ProgramData\Atheros
2014-05-04 00:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\schemas
2014-05-04 00:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2014-05-03 21:40 - 2014-05-02 15:10 - 00000000 ____D () C:\ProgramData\FLEXnet
2014-05-03 21:40 - 2013-12-15 00:42 - 00000000 ____D () C:\Users\Amelie\AppData\Local\Adobe
2014-05-03 21:40 - 2013-12-14 20:38 - 00000000 ____D () C:\Users\Amelie\AppData\Roaming\Adobe
2014-05-03 21:40 - 2012-08-07 22:50 - 00000000 ____D () C:\ProgramData\Adobe
2014-05-03 21:37 - 2013-12-14 20:27 - 00074496 _____ () C:\Users\Amelie\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-03 21:36 - 2009-07-14 06:45 - 02932216 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-05-03 21:35 - 2014-02-08 13:38 - 00000000 ____D () C:\Windows\pss
2014-05-03 21:25 - 2014-05-03 20:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Design Standard CS4
2014-05-03 21:09 - 2013-12-15 13:06 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-05-03 20:56 - 2014-05-02 12:55 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-05-03 20:55 - 2014-05-03 20:55 - 00001020 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat.com.lnk
2014-05-03 20:52 - 2014-05-03 20:52 - 00000000 ____D () C:\Windows\SysWOW64\spool
2014-05-03 20:49 - 2014-05-03 20:49 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-05-03 20:40 - 2014-05-03 20:40 - 00034258 _____ () C:\Users\Amelie_2\Adobe Creative Suite Cleaner Tool.log
2014-05-03 15:14 - 2013-12-14 20:58 - 00193552 _____ () C:\Users\Amelie\Desktop\notes.one
2014-05-03 15:13 - 2013-12-14 20:58 - 00000000 ____D () C:\Users\Amelie\Desktop\Notes
2014-05-03 14:37 - 2014-05-03 14:36 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{39E71734-2511-4D2B-A3FD-4D5A11EC5FE5}
2014-05-02 14:51 - 2014-05-02 14:51 - 00000000 ____D () C:\Program Files\Adobe
2014-05-02 14:44 - 2014-05-02 14:44 - 00000000 ____D () C:\ProgramData\ALM
2014-05-02 14:19 - 2014-05-02 14:19 - 00000000 ____D () C:\Users\Amelie_2\Documents\Adobe Scripts
2014-05-02 14:11 - 2014-05-02 14:11 - 00000000 ____D () C:\Program Files\Common Files\Macrovision Shared
2014-05-02 13:18 - 2014-05-02 13:18 - 00000000 __SHD () C:\Users\Amelie_2\AppData\Local\EmieUserList
2014-05-02 13:18 - 2014-05-02 13:18 - 00000000 __SHD () C:\Users\Amelie_2\AppData\Local\EmieSiteList
2014-05-02 13:04 - 2014-05-02 13:04 - 00000000 ____D () C:\Users\Amelie_2\AppData\Local\CrashDumps
2014-05-02 13:03 - 2014-05-02 13:03 - 00002912 _____ () C:\Windows\System32\Tasks\{A861F25C-4FB8-4EC7-89AB-8B6431681B2C}
2014-05-02 12:57 - 2014-05-02 12:57 - 00000000 ____D () C:\Users\Amelie_2\AppData\Roaming\Macromedia
2014-05-02 09:16 - 2014-05-02 09:15 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{CDD32B8F-F032-4833-A19A-267024D88A85}
2014-05-01 11:37 - 2014-05-01 11:37 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{37A922D8-B982-4635-A2FB-CEA48C39880D}
2014-04-30 17:25 - 2014-04-30 17:21 - 00515584 _____ () C:\Users\Amelie\Downloads\gleitzonenrechner.xls
2014-04-30 17:06 - 2014-04-30 17:06 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{E4C3B3FB-C57A-4D64-991E-C5CBC15B010D}
2014-04-29 16:01 - 2014-05-04 00:10 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-29 15:40 - 2014-05-04 00:10 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-29 14:48 - 2014-05-04 00:10 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-29 14:34 - 2014-05-04 00:10 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-29 12:32 - 2014-04-29 12:32 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{5EF785FB-5CE9-40B1-8FC7-EBC2FB1DB8CF}
2014-04-28 18:21 - 2013-12-14 20:58 - 00000000 ____D () C:\Users\Amelie\Desktop\Muenchen
2014-04-28 13:13 - 2014-04-28 13:13 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{7872830F-A239-4E54-AC40-CAE0DF926601}
2014-04-28 12:49 - 2014-04-28 12:49 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{E4F35CC6-88E2-468C-BEDD-0F480F601EF7}
2014-04-27 13:36 - 2014-04-27 13:35 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{30483FC3-3A58-4214-BA99-D370A104C6EA}
2014-04-26 08:23 - 2014-04-26 08:22 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{E6E10EAB-9203-454D-BA3F-C816917ECBB7}
2014-04-25 10:38 - 2014-04-25 10:37 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{B03F31AE-6152-4E0C-A5ED-09DC0D22254D}
2014-04-24 19:46 - 2014-04-24 19:46 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{D7403A20-306A-4FED-A2EA-308A7E96ADC4}
2014-04-24 07:24 - 2014-04-24 07:24 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{B235A8FA-9C3F-4C45-B052-4111E57A5B1B}
2014-04-23 19:01 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-04-23 15:11 - 2014-04-23 15:11 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{D58C24C7-B02F-4FB8-87D5-7EFBF7009BB5}
2014-04-22 22:05 - 2014-04-22 22:05 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{4D981211-6F5F-4DDF-89A6-83374D28ACBE}
2014-04-22 10:04 - 2014-04-22 10:01 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{4A785540-55F2-4AF6-AD06-23BE7140375D}
2014-04-21 12:11 - 2014-04-21 12:11 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{69A0257C-0FE8-4475-B83C-71BFFD4E0F61}
2014-04-20 13:03 - 2014-04-13 18:44 - 00000000 ____D () C:\Users\Amelie\Desktop\SS14
2014-04-20 10:56 - 2014-04-20 10:56 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{2DAD0CBD-ABCE-4083-8CD0-7E75CAD339E2}
2014-04-19 17:40 - 2014-04-19 17:40 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{278BBB20-51D4-4779-8BF9-836F4A75D9B4}
2014-04-18 17:15 - 2014-04-18 17:15 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{4BDEC6E9-97EF-4278-960B-30652D12D2D8}
2014-04-18 16:48 - 2014-04-18 16:48 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{EB078D93-9016-409D-9836-1BE2CC24AF5E}
2014-04-18 14:45 - 2014-04-18 14:45 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{196E4CD1-81A3-43AE-B703-64E7B416AADF}
2014-04-17 17:37 - 2014-04-17 17:37 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{A7855153-FCD5-4583-8578-FAC395FA001E}
2014-04-17 15:52 - 2014-04-17 15:52 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{7CCD621F-FBE3-4EB7-9B39-5C309710583F}
2014-04-17 15:42 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-04-16 22:29 - 2014-04-16 22:29 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{C42DC806-2C98-41B8-8A6E-C733970BA681}
2014-04-16 21:21 - 2014-04-16 21:21 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{981878C4-A328-4FEA-97AE-5C495515FA2D}
2014-04-16 08:16 - 2014-04-16 08:16 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{AAAE1EFB-BCD8-4299-8676-AADE2B6A17D7}
2014-04-15 13:26 - 2014-04-15 13:26 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{AB007F5D-C96C-43AA-BE11-1A24D5983151}
2014-04-14 17:12 - 2014-04-14 17:12 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{E399BE6B-6924-4D9A-AD94-571B193F87D5}
2014-04-13 19:00 - 2013-12-14 20:58 - 00000000 ____D () C:\Users\Amelie\Desktop\TUM
2014-04-13 13:09 - 2014-04-13 13:09 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{928BE1B7-F0D5-4594-893C-F282F19BD2B0}
2014-04-12 16:09 - 2014-04-12 16:08 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\Amelie\Downloads\mbam-setup-2.0.1.1004.exe
2014-04-12 15:13 - 2014-02-22 11:20 - 00000000 ____D () C:\Users\Amelie\AppData\Local\Windows Live
2014-04-12 14:09 - 2013-12-15 00:38 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-04-12 14:09 - 2013-12-14 21:02 - 00000000 ____D () C:\Windows\system32\MRT
2014-04-12 14:08 - 2013-12-14 21:02 - 90655440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-04-12 13:42 - 2012-08-07 23:03 - 00004120 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-04-12 13:42 - 2012-08-07 23:03 - 00003868 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-04-12 13:19 - 2014-04-12 13:19 - 00000000 _____ () C:\Windows\setuperr.log
2014-04-12 13:18 - 2014-03-06 23:09 - 00000000 ____D () C:\Windows\Minidump
2014-04-12 13:01 - 2014-04-12 13:01 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{2A1ACBB9-B816-4AED-9D93-420744A4371F}
2014-04-12 12:56 - 2012-08-07 23:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-04-12 12:56 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat
2014-04-12 11:03 - 2014-04-12 11:03 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{A8003195-B1E9-4B5A-B6D6-A372936D5434}
2014-04-11 10:27 - 2014-04-11 10:27 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{B53B2199-A74D-45BC-BB42-67D0F8E35C6C}
2014-04-10 18:31 - 2014-04-10 18:31 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{811D9CD4-B4B7-4BCA-A405-D1BF5FFDCD00}
2014-04-09 21:55 - 2014-04-09 21:54 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{7067C7FD-6654-4F55-AC39-97A117DB6A78}
2014-04-09 01:09 - 2014-04-09 01:09 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{6E1B48A0-B206-4FDB-9E16-9DE206FB5A83}
2014-04-08 22:09 - 2014-04-08 22:09 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{15EB1C53-4903-48CA-B9F8-E8032D7C66B9}
2014-04-07 21:51 - 2014-04-07 21:51 - 00044373 _____ () C:\Users\Amelie\Downloads\personal_20140407_215136.ics
2014-04-07 16:47 - 2014-04-07 16:47 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{81CCF3B0-2087-419A-9057-0717B7343E50}
2014-04-06 22:12 - 2014-04-06 22:12 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{A1E8C07E-CE00-4A24-B84E-C4D0753A99FF}
2014-04-06 10:12 - 2014-04-06 10:11 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{668FA351-096C-4024-B64F-6F1E58F8CD31}
2014-04-05 10:12 - 2014-04-05 10:12 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{65CB6180-E9F7-47DE-93D4-8F8819767603}
2014-04-04 11:40 - 2014-04-04 11:40 - 00000000 ____D () C:\Users\Amelie\AppData\Local\{BC4135C4-587B-4A68-AC48-E12FFF54EFD2}

Some content of TEMP:
====================
C:\Users\Amelie\AppData\Local\Temp\avgnt.exe
C:\Users\Amelie\AppData\Local\Temp\ose00000.exe
C:\Users\Amelie\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Amelie_2\AppData\Local\Temp\avgnt.exe
C:\Users\Amelie_2\AppData\Local\Temp\FP_AX_MSI_INSTALLER.exe
C:\Users\Amelie_2\AppData\Local\Temp\FP_PL_MSI_INSTALLER.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-04-19 18:04

==================== End Of Log ============================
         

--- --- ---

--- --- ---

--- --- ---

--- --- ---

--- --- ---