Windows 8: Malware/Adware Probleme, Aufruf von unerwünschten Seiten im Internet

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-08-2014
Ran by ***** (administrator) on WOLKENSCHIEBER on 06-08-2014 20:56:15
Running from C:\Users\*****\Desktop
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer Portal\CCDMonitorService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe
(Acer Incorporate) C:\Program Files\Packard Bell\Packard Bell Launch Manager\LMSvc.exe
(Acer Incorporate) C:\Program Files\Packard Bell\Packard Bell Quick Access\QASvc.exe
(Acer Incorporate) C:\Program Files\Packard Bell\Packard Bell Quick Access\RMSvc.exe
(Acer Incorporate) C:\Program Files\Packard Bell\Packard Bell Quick Access\QAEvent.exe
(Acer Incorporate) C:\Program Files\Packard Bell\Packard Bell Launch Manager\LMEvent.exe
(Acer Incorporate) C:\Program Files\Packard Bell\Packard Bell Quick Access\QAMsg.exe
(Acer Incorporate) C:\Program Files\Packard Bell\Packard Bell Launch Manager\LMTray.exe
(Acer Incorporate) C:\Program Files\Packard Bell\Packard Bell Quick Access\QuickAccess.exe
(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerEvent.exe
(Glarysoft Ltd) C:\Program Files (x86)\Glary Utilities 5\Integrator.exe
(IObit) C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.17200_none_fa7026dd9b04586e\TiWorker.exe
(Farbar) C:\Users\*****\Desktop\1 FRST64.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet Pro 8600\Bin\HPNetworkCommunicator.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13657304 2013-10-18] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2778352 2013-08-28] (Synaptics Incorporated)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-05-26] (Apple Inc.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [132736 2013-09-07] ( (Atheros Communications))
HKU\S-1-5-21-3687772733-1280818029-1885610514-1001\...\Run: [HP Officejet Pro 8600 (NET)] => C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
HKU\S-1-5-21-3687772733-1280818029-1885610514-1001\...\Run: [GUDelayStartup] => C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe [37152 2014-07-21] (Glarysoft Ltd)
HKU\S-1-5-21-3687772733-1280818029-1885610514-1001\...\RunOnce: [Application Restart #0] => C:\Users\*****\AppData\Local\Pokki\Engine\pokki.exe  --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-client-side (the data entry has 542 more characters).
Startup: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Officejet Pro 8600 (Netzwerk).lnk
ShortcutTarget: Tintenwarnungen überwachen - HP Officejet Pro 8600 (Netzwerk).lnk -> C:\Program Files\HP\HP Officejet Pro 8600\Bin\HPStatusBL.dll (Hewlett-Packard Co.)
BootExecute: autocheck autochk *  BootDefrag.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyServer: http=127.0.0.1:13957;https=127.0.0.1:13957
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.safefinder.com/?p=mKO_AwFzXIpYRak5VLd2-qQdkN5729vVFWxou9hoxUv82Ac0l78Z5H_kB2nyVAeFt06rY3fBxEVkKm-F6Jf2jJ_z8fge22GbjNRorzRlewR6c8Mo6xfLlgXXNHg8cVakohuIgrnWdhfMdMJbKZdPIGogaHGMk5kHLaap48bFKe8vYh4GC6t02Z3xNQSUuT0bBGgtMpKuHg,,&q={searchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xE6EF937F15A4CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM - {62D98EA6-05E3-4196-8CD4-3F9DAE6FCD4E} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=APJB
SearchScopes: HKLM-x32 - {62D98EA6-05E3-4196-8CD4-3F9DAE6FCD4E} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=APJB
SearchScopes: HKCU - {62D98EA6-05E3-4196-8CD4-3F9DAE6FCD4E} URL = 
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.179.1

FireFox:
========
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [312448 2013-09-07] (Windows (R) Win 7 DDK provider)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Portal\CCDMonitorService.exe [2650696 2013-07-26] (Acer Incorporated)
R3 ePowerSvc; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [663592 2013-07-05] (Acer Incorporated)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [733696 2013-07-01] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [822232 2013-07-01] (Intel(R) Corporation)
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2175264 2014-08-05] (IObit)
R2 LMSvc; C:\Program Files\Packard Bell\Packard Bell Launch Manager\LMSvc.exe [457768 2013-08-03] (Acer Incorporate)
R3 QASvc; C:\Program Files\Packard Bell\Packard Bell Quick Access\QASvc.exe [457768 2013-08-02] (Acer Incorporate)
R3 RMSvc; C:\Program Files\Packard Bell\Packard Bell Quick Access\RMSvc.exe [448040 2013-08-02] (Acer Incorporate)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3859968 2013-08-15] (Qualcomm Atheros Communications, Inc.)
R0 BootDefragDriver; C:\Windows\System32\drivers\BootDefragDriver.sys [17600 2014-07-18] (Glarysoft Ltd)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-09-07] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
R1 GUBootStartup; C:\Windows\System32\drivers\GUBootStartup.sys [20160 2014-08-05] (Glarysoft Ltd)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)
R3 TXEIx64; C:\Windows\System32\drivers\TXEIx64.sys [87568 2013-07-01] (Intel Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-06 20:56 - 2014-08-06 20:57 - 00010491 _____ () C:\Users\*****\Desktop\FRST.txt
2014-08-06 20:54 - 2014-08-06 20:54 - 335727669 _____ () C:\Windows\MEMORY.DMP
2014-08-06 20:54 - 2014-08-06 20:54 - 00284304 _____ () C:\Windows\Minidump\080614-18656-01.dmp
2014-08-06 18:29 - 2014-08-06 20:56 - 00000000 ____D () C:\Sicherheit
2014-08-05 18:13 - 2014-08-05 18:13 - 00000000 ____D () C:\Users\*****\AppData\Roaming\ProductData
2014-08-05 18:10 - 2014-08-06 20:50 - 00033102 _____ () C:\Windows\PFRO.log
2014-08-05 17:56 - 2014-08-05 17:56 - 00000000 ____D () C:\Users\*****\AppData\Roaming\IObit
2014-08-05 17:53 - 2014-08-05 17:53 - 00000000 ____D () C:\Users\*****\AppData\Roaming\GlarySoft
2014-08-05 17:51 - 2014-08-05 17:51 - 00000000 ____D () C:\Users\*****\AppData\Roaming\WildTangent
2014-08-05 17:15 - 2014-08-05 17:17 - 00000000 ____D () C:\ProgramData\ProductData
2014-08-05 17:15 - 2014-08-05 17:16 - 00000000 ____D () C:\ProgramData\IObit
2014-08-05 17:15 - 2014-08-05 17:15 - 00002412 _____ () C:\Windows\System32\Tasks\Uninstaller_SkipUac_Administrator
2014-08-05 17:15 - 2014-08-05 17:15 - 00001284 _____ () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk
2014-08-05 17:15 - 2014-08-05 17:15 - 00001260 _____ () C:\Users\Public\Desktop\IObit Uninstaller.lnk
2014-08-05 17:15 - 2014-08-05 17:15 - 00000310 _____ () C:\Windows\Tasks\Uninstaller_SkipUac_Administrator.job
2014-08-05 17:15 - 2014-08-05 17:15 - 00000000 ____D () C:\Users\*****\AppData\Roaming\IObit
2014-08-05 17:15 - 2014-08-05 17:15 - 00000000 ____D () C:\Program Files (x86)\IObit
2014-08-05 17:14 - 2014-08-06 20:55 - 00000364 _____ () C:\Windows\Tasks\GlaryInitialize 5.job
2014-08-05 17:14 - 2014-08-05 18:10 - 00000000 ____D () C:\Users\*****\AppData\Roaming\DiskDefrag
2014-08-05 17:14 - 2014-08-05 17:15 - 00000000 ____D () C:\Program Files (x86)\Glary Utilities 5
2014-08-05 17:14 - 2014-08-05 17:14 - 00020160 _____ (Glarysoft Ltd) C:\Windows\system32\Drivers\GUBootStartup.sys
2014-08-05 17:14 - 2014-08-05 17:14 - 00002986 _____ () C:\Windows\System32\Tasks\GU5SkipUAC
2014-08-05 17:14 - 2014-08-05 17:14 - 00002654 _____ () C:\Windows\System32\Tasks\GlaryInitialize 5
2014-08-05 17:14 - 2014-08-05 17:14 - 00001120 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5.lnk
2014-08-05 17:14 - 2014-08-05 17:14 - 00001108 _____ () C:\Users\Public\Desktop\Glary Utilities 5.lnk
2014-08-05 17:14 - 2014-08-05 17:14 - 00000000 ____D () C:\Users\*****\AppData\Roaming\GlarySoft
2014-08-05 17:14 - 2014-08-05 17:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5
2014-08-05 17:14 - 2014-07-21 05:01 - 00118048 _____ (Glarysoft Ltd) C:\Windows\system32\BootDefrag.exe
2014-08-05 17:14 - 2014-07-18 09:11 - 00017600 _____ (Glarysoft Ltd) C:\Windows\system32\Drivers\BootDefragDriver.sys
2014-08-05 16:58 - 2014-08-05 16:58 - 00000000 ____D () C:\Windows\ERUNT
2014-08-04 17:26 - 2014-08-04 17:26 - 00002183 _____ () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk
2014-08-04 17:20 - 2014-08-05 18:13 - 00000000 ____D () C:\AdwCleaner
2014-08-04 16:54 - 2014-08-04 16:55 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-04 16:54 - 2014-08-04 16:54 - 00001130 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-08-04 16:54 - 2014-08-04 16:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-08-04 16:54 - 2014-08-04 16:54 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-04 16:54 - 2014-08-04 16:54 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-08-04 16:54 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-08-04 16:54 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-08-04 16:54 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-08-04 16:44 - 2014-08-06 20:56 - 00000000 ____D () C:\FRST
2014-08-04 16:43 - 2014-08-04 16:43 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Apple Computer
2014-08-04 16:43 - 2014-08-03 17:58 - 02094080 _____ (Farbar) C:\Users\*****\Desktop\1 FRST64.exe
2014-08-03 15:55 - 2014-08-03 15:55 - 00000000 ___RD () C:\Users\*****\Documents\Notes
2014-08-02 17:38 - 2014-08-02 17:38 - 00001099 _____ () C:\Users\*****\Desktop\HP Officejet Pro 8600.lnk
2014-08-02 11:51 - 2014-08-02 11:51 - 00000046 _____ () C:\Users\*****\AppData\Roaming\WB.CFG
2014-07-22 20:57 - 2014-08-06 20:54 - 00000000 ____D () C:\Windows\Minidump
2014-07-22 20:04 - 2014-07-29 18:54 - 00000000 ____D () C:\Users\*****\AppData\Roaming\RapidLoadClient
2014-07-20 16:32 - 2014-08-02 11:33 - 00003536 _____ () C:\Windows\SysWOW64\AccProxy.ini
2014-07-20 16:32 - 2014-08-02 11:33 - 00001928 _____ () C:\Windows\SysWOW64\AccProxyOff.ini
2014-07-20 16:32 - 2014-08-02 11:33 - 00001928 _____ () C:\Windows\system32\AccProxyOff.ini
2014-07-20 16:32 - 2013-09-24 16:31 - 00345664 _____ (OR Interactive Ltd) C:\Windows\SysWOW64\AccProxy.dll
2014-07-20 16:31 - 2014-08-04 17:20 - 00000000 ____D () C:\Users\*****\AppData\Roaming\RapidLoad
2014-07-20 15:34 - 2014-07-20 15:34 - 00003342 _____ () C:\Windows\System32\Tasks\SpyHunter4Startup
2014-07-20 15:34 - 2014-07-20 15:34 - 00000000 ____D () C:\Program Files\Enigma Software Group
2014-07-20 15:34 - 2014-07-20 15:34 - 00000000 _____ () C:\autoexec.bat
2014-07-20 15:33 - 2014-07-20 16:24 - 00000000 ____D () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-07-20 15:21 - 2014-07-20 15:21 - 00000000 ____D () C:\MININT
2014-07-20 15:20 - 2014-08-04 17:20 - 00000000 ____D () C:\Users\*****\AppData\Roaming\IDM2
2014-07-20 15:19 - 2014-07-20 18:18 - 00000000 ____D () C:\Users\*****\AppData\Local\Deployment
2014-07-20 15:19 - 2014-07-20 15:19 - 00000000 ____D () C:\Users\*****\AppData\Local\Apps\2.0
2014-07-19 13:25 - 2014-07-19 13:25 - 00000000 ____H () C:\Users\*****\Documents\Default.rdp
2014-07-18 15:03 - 2014-01-19 09:38 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-07-16 23:19 - 2014-08-05 17:55 - 00000000 ____D () C:\Users\*****\AppData\Local\CrashDumps
2014-07-16 21:56 - 2014-07-16 21:56 - 00000000 ____D () C:\Users\*****\AppData\Local\Doc
2014-07-16 21:05 - 2014-08-04 17:23 - 00000000 ____D () C:\Program Files (x86)\19A6D51C-2D35-44DB-B412-0B01BF8D2D62
2014-07-16 21:05 - 2014-07-16 21:05 - 00000000 ____D () C:\Program Files\19A6D51C-2D35-44DB-B412-0B01BF8D2D62
2014-07-16 21:03 - 2014-07-20 13:58 - 00000000 ____D () C:\Users\*****\AppData\Local\Genesis_07161903
2014-07-16 20:56 - 2014-07-16 20:58 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-07-16 20:45 - 2014-07-16 20:45 - 00000000 ____D () C:\Users\*****\AppData\Local\ClearfiPhoto
2014-07-16 20:01 - 2014-07-16 20:01 - 00000000 ____D () C:\ProgramData\PCSettings
2014-07-16 10:00 - 2014-07-16 10:00 - 00000017 _____ () C:\Users\*****\AppData\Local\resmon.resmoncfg
2014-07-15 21:43 - 2014-07-15 21:43 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-07-15 21:43 - 2014-04-14 05:29 - 01018880 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-07-15 21:03 - 2014-07-01 00:45 - 00688128 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-07-15 21:03 - 2014-06-28 09:48 - 00527360 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-07-15 21:03 - 2014-06-28 09:07 - 00385536 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2014-07-11 18:05 - 2014-07-11 18:05 - 00000000 ____D () C:\Users\*****\AppData\Local\MediaShow
2014-07-11 18:04 - 2014-07-11 18:04 - 00000000 ____D () C:\Users\*****\Documents\CyberLink
2014-07-11 18:04 - 2014-07-11 18:04 - 00000000 ____D () C:\Users\*****\AppData\Roaming\CyberLink
2014-07-11 18:04 - 2014-07-11 18:04 - 00000000 ____D () C:\Users\*****\AppData\Local\CyberLink
2014-07-10 11:07 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-10 11:07 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-07-10 11:07 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-10 11:07 - 2014-06-19 01:46 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-07-10 11:07 - 2014-06-19 00:57 - 00225280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-07-10 11:06 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-10 11:06 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-10 11:06 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-10 11:06 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-07-10 11:06 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-10 11:06 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-07-10 11:06 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-10 11:06 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-07-10 11:06 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-07-10 11:06 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-10 11:06 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-07-10 11:06 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-10 11:06 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-07-10 11:06 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-07-10 11:05 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-10 11:05 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-10 11:05 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-10 11:05 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-07-10 11:05 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-07-10 11:05 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-07-10 11:05 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-10 11:05 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-07-10 11:05 - 2014-06-17 00:26 - 00779264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2014-07-10 11:05 - 2014-06-17 00:24 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-07-10 11:05 - 2014-06-06 16:20 - 04190720 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-07-10 11:05 - 2014-05-30 05:03 - 00563200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-07-10 11:05 - 2014-05-29 14:02 - 00565576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2014-07-10 11:05 - 2014-05-29 09:55 - 00735232 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-07-10 11:05 - 2014-05-29 08:40 - 00735232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2014-07-10 11:05 - 2014-05-29 08:37 - 00436224 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2014-07-10 11:05 - 2014-05-29 07:34 - 00318976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2014-07-10 11:05 - 2014-05-29 07:27 - 01417216 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-07-10 10:28 - 2014-06-06 15:04 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-07-10 10:28 - 2014-06-06 14:18 - 00488960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-07-10 10:28 - 2014-05-31 12:07 - 00054776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-07-10 10:28 - 2014-05-31 12:06 - 00555736 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2014-07-10 10:28 - 2014-05-31 05:40 - 13287936 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2014-07-10 10:28 - 2014-05-31 05:30 - 11792384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2014-07-10 10:28 - 2014-05-31 05:12 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-10 10:28 - 2014-05-31 05:06 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-07-10 10:28 - 2014-05-31 05:03 - 00827392 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-07-10 10:28 - 2014-05-31 05:01 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-10 10:28 - 2014-05-31 04:56 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2014-07-10 10:28 - 2014-05-31 04:54 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2014-07-10 10:28 - 2014-05-31 04:48 - 03463680 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-07-10 10:28 - 2014-05-31 04:37 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2014-07-10 10:28 - 2014-05-31 04:36 - 00923136 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2014-07-10 10:28 - 2014-05-31 04:35 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2014-07-10 10:28 - 2014-05-31 04:32 - 00756224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2014-07-10 10:23 - 2014-07-10 10:23 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\WSReset.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2021-10-21 15:36 - 2014-03-31 13:59 - 00000852 _____ () C:\Windows\system32\Drivers\RTKHDRC.dat
2021-10-04 09:34 - 2014-03-31 13:59 - 00000712 _____ () C:\Windows\system32\Drivers\RTMICEQ0.dat
2014-08-06 20:57 - 2014-08-06 20:56 - 00010491 _____ () C:\Users\*****\Desktop\FRST.txt
2014-08-06 20:56 - 2014-08-06 18:29 - 00000000 ____D () C:\Sicherheit
2014-08-06 20:56 - 2014-08-04 16:44 - 00000000 ____D () C:\FRST
2014-08-06 20:55 - 2014-08-05 17:14 - 00000364 _____ () C:\Windows\Tasks\GlaryInitialize 5.job
2014-08-06 20:55 - 2014-03-31 13:36 - 01339267 _____ () C:\Windows\WindowsUpdate.log
2014-08-06 20:54 - 2014-08-06 20:54 - 335727669 _____ () C:\Windows\MEMORY.DMP
2014-08-06 20:54 - 2014-08-06 20:54 - 00284304 _____ () C:\Windows\Minidump\080614-18656-01.dmp
2014-08-06 20:54 - 2014-07-22 20:57 - 00000000 ____D () C:\Windows\Minidump
2014-08-06 20:54 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-06 20:50 - 2014-08-05 18:10 - 00033102 _____ () C:\Windows\PFRO.log
2014-08-05 18:28 - 2014-03-31 23:19 - 00765582 _____ () C:\Windows\system32\perfh007.dat
2014-08-05 18:28 - 2014-03-31 23:19 - 00159366 _____ () C:\Windows\system32\perfc007.dat
2014-08-05 18:28 - 2013-11-06 13:44 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-08-05 18:20 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru
2014-08-05 18:17 - 2014-04-01 18:00 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3687772733-1280818029-1885610514-1004
2014-08-05 18:13 - 2014-08-05 18:13 - 00000000 ____D () C:\Users\*****\AppData\Roaming\ProductData
2014-08-05 18:13 - 2014-08-04 17:20 - 00000000 ____D () C:\AdwCleaner
2014-08-05 18:13 - 2014-04-01 21:03 - 00003962 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{575AFD71-3890-4D9E-9C0D-93EC9BF7AB45}
2014-08-05 18:10 - 2014-08-05 17:14 - 00000000 ____D () C:\Users\*****\AppData\Roaming\DiskDefrag
2014-08-05 18:10 - 2013-11-07 03:47 - 00000000 ____D () C:\ProgramData\Norton
2014-08-05 17:56 - 2014-08-05 17:56 - 00000000 ____D () C:\Users\*****\AppData\Roaming\IObit
2014-08-05 17:55 - 2014-07-16 23:19 - 00000000 ____D () C:\Users\*****\AppData\Local\CrashDumps
2014-08-05 17:55 - 2013-11-07 03:37 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-08-05 17:55 - 2013-11-06 13:32 - 00000000 ____D () C:\Windows\Panther
2014-08-05 17:53 - 2014-08-05 17:53 - 00000000 ____D () C:\Users\*****\AppData\Roaming\GlarySoft
2014-08-05 17:52 - 2013-11-07 03:36 - 00000000 ____D () C:\Program Files (x86)\WildTangent Games
2014-08-05 17:51 - 2014-08-05 17:51 - 00000000 ____D () C:\Users\*****\AppData\Roaming\WildTangent
2014-08-05 17:51 - 2013-11-07 03:36 - 00000000 ____D () C:\ProgramData\WildTangent
2014-08-05 17:50 - 2014-06-25 21:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2014-08-05 17:23 - 2014-03-31 14:26 - 00000000 ____D () C:\Program Files (x86)\Acer
2014-08-05 17:19 - 2014-04-01 17:53 - 00000000 ____D () C:\Users\*****\AppData\Local\Pokki
2014-08-05 17:17 - 2014-08-05 17:15 - 00000000 ____D () C:\ProgramData\ProductData
2014-08-05 17:16 - 2014-08-05 17:15 - 00000000 ____D () C:\ProgramData\IObit
2014-08-05 17:15 - 2014-08-05 17:15 - 00002412 _____ () C:\Windows\System32\Tasks\Uninstaller_SkipUac_Administrator
2014-08-05 17:15 - 2014-08-05 17:15 - 00001284 _____ () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk
2014-08-05 17:15 - 2014-08-05 17:15 - 00001260 _____ () C:\Users\Public\Desktop\IObit Uninstaller.lnk
2014-08-05 17:15 - 2014-08-05 17:15 - 00000310 _____ () C:\Windows\Tasks\Uninstaller_SkipUac_Administrator.job
2014-08-05 17:15 - 2014-08-05 17:15 - 00000000 ____D () C:\Users\*****\AppData\Roaming\IObit
2014-08-05 17:15 - 2014-08-05 17:15 - 00000000 ____D () C:\Program Files (x86)\IObit
2014-08-05 17:15 - 2014-08-05 17:14 - 00000000 ____D () C:\Program Files (x86)\Glary Utilities 5
2014-08-05 17:14 - 2014-08-05 17:14 - 00020160 _____ (Glarysoft Ltd) C:\Windows\system32\Drivers\GUBootStartup.sys
2014-08-05 17:14 - 2014-08-05 17:14 - 00002986 _____ () C:\Windows\System32\Tasks\GU5SkipUAC
2014-08-05 17:14 - 2014-08-05 17:14 - 00002654 _____ () C:\Windows\System32\Tasks\GlaryInitialize 5
2014-08-05 17:14 - 2014-08-05 17:14 - 00001120 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5.lnk
2014-08-05 17:14 - 2014-08-05 17:14 - 00001108 _____ () C:\Users\Public\Desktop\Glary Utilities 5.lnk
2014-08-05 17:14 - 2014-08-05 17:14 - 00000000 ____D () C:\Users\*****\AppData\Roaming\GlarySoft
2014-08-05 17:14 - 2014-08-05 17:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5
2014-08-05 17:11 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-08-05 17:07 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness
2014-08-05 16:58 - 2014-08-05 16:58 - 00000000 ____D () C:\Windows\ERUNT
2014-08-04 17:26 - 2014-08-04 17:26 - 00002183 _____ () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk
2014-08-04 17:23 - 2014-07-16 21:05 - 00000000 ____D () C:\Program Files (x86)\19A6D51C-2D35-44DB-B412-0B01BF8D2D62
2014-08-04 17:23 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\Resources
2014-08-04 17:20 - 2014-07-20 16:31 - 00000000 ____D () C:\Users\*****\AppData\Roaming\RapidLoad
2014-08-04 17:20 - 2014-07-20 15:20 - 00000000 ____D () C:\Users\*****\AppData\Roaming\IDM2
2014-08-04 16:55 - 2014-08-04 16:54 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-04 16:54 - 2014-08-04 16:54 - 00001130 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-08-04 16:54 - 2014-08-04 16:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-08-04 16:54 - 2014-08-04 16:54 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-04 16:54 - 2014-08-04 16:54 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-08-04 16:43 - 2014-08-04 16:43 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Apple Computer
2014-08-03 17:58 - 2014-08-04 16:43 - 02094080 _____ (Farbar) C:\Users\*****\Desktop\1 FRST64.exe
2014-08-03 15:55 - 2014-08-03 15:55 - 00000000 ___RD () C:\Users\*****\Documents\Notes
2014-08-03 15:28 - 2014-06-25 21:07 - 00000000 ____D () C:\Users\*****\AppData\Roaming\HpUpdate
2014-08-03 15:26 - 2014-03-31 15:08 - 00003958 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{2F4C7450-B809-4D65-B2DF-3F39D39125DA}
2014-08-02 17:44 - 2014-03-31 15:12 - 00003600 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3687772733-1280818029-1885610514-1001
2014-08-02 17:38 - 2014-08-02 17:38 - 00001099 _____ () C:\Users\*****\Desktop\HP Officejet Pro 8600.lnk
2014-08-02 11:51 - 2014-08-02 11:51 - 00000046 _____ () C:\Users\*****\AppData\Roaming\WB.CFG
2014-08-02 11:51 - 2013-08-22 17:20 - 00000000 ____D () C:\Windows\CbsTemp
2014-08-02 11:33 - 2014-07-20 16:32 - 00003536 _____ () C:\Windows\SysWOW64\AccProxy.ini
2014-08-02 11:33 - 2014-07-20 16:32 - 00001928 _____ () C:\Windows\SysWOW64\AccProxyOff.ini
2014-08-02 11:33 - 2014-07-20 16:32 - 00001928 _____ () C:\Windows\system32\AccProxyOff.ini
2014-07-29 18:54 - 2014-07-22 20:04 - 00000000 ____D () C:\Users\*****\AppData\Roaming\RapidLoadClient
2014-07-27 13:58 - 2014-03-31 17:26 - 00000000 ____D () C:\Users\*****\Desktop\Musik (1)
2014-07-24 10:14 - 2014-03-31 15:05 - 00000000 ____D () C:\Users\*****
2014-07-22 20:56 - 2013-08-22 16:44 - 00344704 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-07-21 09:59 - 2014-03-31 16:31 - 00000000 ____D () C:\Users\*****\Documents\clear.fi
2014-07-21 05:01 - 2014-08-05 17:14 - 00118048 _____ (Glarysoft Ltd) C:\Windows\system32\BootDefrag.exe
2014-07-20 18:18 - 2014-07-20 15:19 - 00000000 ____D () C:\Users\*****\AppData\Local\Deployment
2014-07-20 17:38 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\rescache
2014-07-20 16:24 - 2014-07-20 15:33 - 00000000 ____D () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-07-20 15:34 - 2014-07-20 15:34 - 00003342 _____ () C:\Windows\System32\Tasks\SpyHunter4Startup
2014-07-20 15:34 - 2014-07-20 15:34 - 00000000 ____D () C:\Program Files\Enigma Software Group
2014-07-20 15:34 - 2014-07-20 15:34 - 00000000 _____ () C:\autoexec.bat
2014-07-20 15:21 - 2014-07-20 15:21 - 00000000 ____D () C:\MININT
2014-07-20 15:19 - 2014-07-20 15:19 - 00000000 ____D () C:\Users\*****\AppData\Local\Apps\2.0
2014-07-20 13:58 - 2014-07-16 21:03 - 00000000 ____D () C:\Users\*****\AppData\Local\Genesis_07161903
2014-07-19 16:00 - 2014-03-31 14:23 - 00000000 ____D () C:\ProgramData\Temp
2014-07-19 15:51 - 2013-08-22 15:25 - 00000194 _____ () C:\Windows\win.ini
2014-07-19 14:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\NDF
2014-07-19 13:25 - 2014-07-19 13:25 - 00000000 ____H () C:\Users\*****\Documents\Default.rdp
2014-07-18 15:04 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2014-07-18 09:11 - 2014-08-05 17:14 - 00017600 _____ (Glarysoft Ltd) C:\Windows\system32\Drivers\BootDefragDriver.sys
2014-07-16 21:56 - 2014-07-16 21:56 - 00000000 ____D () C:\Users\*****\AppData\Local\Doc
2014-07-16 21:05 - 2014-07-16 21:05 - 00000000 ____D () C:\Program Files\19A6D51C-2D35-44DB-B412-0B01BF8D2D62
2014-07-16 20:59 - 2013-08-22 17:36 - 00000000 ___HD () C:\Windows\ELAMBKUP
2014-07-16 20:58 - 2014-07-16 20:56 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-07-16 20:45 - 2014-07-16 20:45 - 00000000 ____D () C:\Users\*****\AppData\Local\ClearfiPhoto
2014-07-16 20:01 - 2014-07-16 20:01 - 00000000 ____D () C:\ProgramData\PCSettings
2014-07-16 10:00 - 2014-07-16 10:00 - 00000017 _____ () C:\Users\*****\AppData\Local\resmon.resmoncfg
2014-07-16 09:48 - 2014-03-31 15:07 - 00000000 ____D () C:\Users\*****\AppData\Local\clear.fi
2014-07-15 21:46 - 2014-06-05 12:58 - 00000000 ____D () C:\Windows\system32\MRT
2014-07-15 21:43 - 2014-07-15 21:43 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-07-11 18:05 - 2014-07-11 18:05 - 00000000 ____D () C:\Users\*****\AppData\Local\MediaShow
2014-07-11 18:05 - 2014-03-31 14:25 - 00000000 ____D () C:\ProgramData\CyberLink
2014-07-11 18:04 - 2014-07-11 18:04 - 00000000 ____D () C:\Users\*****\Documents\CyberLink
2014-07-11 18:04 - 2014-07-11 18:04 - 00000000 ____D () C:\Users\*****\AppData\Roaming\CyberLink
2014-07-11 18:04 - 2014-07-11 18:04 - 00000000 ____D () C:\Users\*****\AppData\Local\CyberLink
2014-07-10 12:29 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ToastData
2014-07-10 12:29 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-10 12:29 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-10 12:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\WinStore
2014-07-10 11:15 - 2013-08-22 21:11 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-10 10:23 - 2014-07-10 10:23 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\WSReset.exe

Some content of TEMP:
====================
C:\Users\*****\AppData\Local\Temp\oct3096.tmp.exe
C:\Users\*****\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-08-02 17:44

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-08-2014
Ran by ***** at 2014-08-06 20:58:02
Running from C:\Users\*****\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Acer Docs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.01.3006 - Acer Incorporated)
Acer Media (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.04.3002.6 - Acer Incorporated)
Acer Photo (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 2.04.3004.0 - Acer Incorporated)
Acer Portal (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 2.02.3104 - Acer Incorporated)
Acer Remote Files (HKLM\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 1.00.3007 - Acer Incorporated)
Apple Application Support (HKLM-x32\...\{D9DAD0FF-495A-472B-9F10-BAE430A26682}) (Version: 3.0.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.3323.57 - CyberLink Corp.)
CyberLink PowerDVD 12 (x32 Version: 12.0.3323.57 - CyberLink Corp.) Hidden
Glary Utilities 5.4 (HKLM-x32\...\Glary Utilities 5) (Version: 5.4.0.11 - Glarysoft Ltd)
HP FWUpdateEDO2 (HKLM-x32\...\{415FA9AD-DA10-4ABE-97B6-5051D4795C90}) (Version: 1.2.0.0 - Hewlett-Packard)
HP Officejet Pro 8600 - Grundlegende Software für das Gerät (HKLM\...\{D2D05FDB-4EDA-462D-8DB6-E0B9AD4FA25F}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Officejet Pro 8600 Hilfe (HKLM-x32\...\{FDE820DD-CC88-4395-AD5C-801365B8F316}) (Version: 28.0.0 - Hewlett Packard)
HP Update (HKLM-x32\...\{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}) (Version: 5.003.003.001 - Hewlett-Packard)
I.R.I.S. OCR (HKLM-x32\...\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4.0 - HP)
Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.8100 - Packard Bell)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3349 - Intel Corporation)
Intel(R) Trusted Execution Engine (HKLM\...\{176E2755-0A17-42C6-88E2-192AB2131278}) (Version: 1.0.0.1050 - Intel Corporation)
Intel(R) Trusted Execution Engine (Version: 1.1.1.1 - Intel Corporation) Hidden
Intel(R) Trusted Execution Engine Driver (Version: 1.0.0.1050 - Intel Corporation) Hidden
IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Version: 3.3.8.2663 - IObit)
iTunes (HKLM\...\{5A68A656-979F-4168-8795-E2E368AA4DC2}) (Version: 11.2.2.3 - Apple Inc.)
Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.8100 - Packard Bell)
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2005 Tools for Office Runtime (x32 Version: 8.0.60940.0 - Microsoft Corporation) Hidden
Nero BackItUp (x32 Version: 12.5.11000 - Nero AG) Hidden
Nero BackItUp 12 Essentials OEM.a01 (HKLM-x32\...\{551AC8F2-FEA2-4B45-ACF7-C98681233CC9}) (Version: 12.5.01200 - Nero AG)
Nero BackItUp Help (CHM) (x32 Version: 12.0.13000 - Nero AG) Hidden
Nero ControlCenter (x32 Version: 11.0.15900 - Nero AG) Hidden
Nero ControlCenter Help (CHM) (x32 Version: 12.0.12000 - Nero AG) Hidden
Nero Core Components (x32 Version: 11.0.20900 - Nero AG) Hidden
Nero Launcher (x32 Version: 12.2.7000 - Nero AG) Hidden
Nero RescueAgent (x32 Version: 12.0.3001 - Nero AG) Hidden
Nero RescueAgent Help (CHM) (x32 Version: 12.0.7000 - Nero AG) Hidden
Nero Update (x32 Version: 11.0.11800.31.0 - Nero AG) Hidden
Packard Bell Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.8101 - Packard Bell)
Packard Bell Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.8100 - Packard Bell)
Packard Bell Quick Access (HKLM\...\{C1FA525F-D701-4B31-9D32-504FC0CF0B98}) (Version: 1.00.3000 - Packard Bell)
Packard Bell Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.8100 - Packard Bell)
Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.305 - Qualcomm Atheros Communications)
Qualcomm Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 12.07 - Qualcomm Atheros)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9600.27041 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.20.815.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7071 - Realtek Semiconductor Corp.)
Spotify (HKLM-x32\...\Spotify) (Version: 0.9.1.57.ge7405149 - Spotify AB)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 17.0.6.13 - Synaptics Incorporated)
Visual Studio 2005 Tools for Office Second Edition Runtime (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Office Runtime) (Version:  - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version:  - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime (x32 Version: 9.0.30729 - Microsoft Corporation) Hidden
Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

15-07-2014 19:42:35 Windows Update
20-07-2014 11:59:09 Removed LPT System Updater Service
02-08-2014 09:51:21 Windows Modules Installer
05-08-2014 15:16:45 eBay Worldwide wird entfernt

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2014-07-20 18:19 - 00000910 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1			d3oxij66pru1i3.cloudfront.net
127.0.0.1			d3oxij66pru1i3.cloudfront.net


==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {1D978FDA-6F16-4DA2-8F2E-CF454592659F} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network => Sc.exe start wuauserv
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {300FB53A-9749-41D0-B9D0-D79A9A4B2B35} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\Windows\system32\cleanmgr.exe [2014-02-22] (Microsoft Corporation)
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {3E27AA1D-9B71-481C-A46C-4C54EB751716} - System32\Tasks\Launch Manager => C:\Program Files\Packard Bell\Packard Bell Launch Manager\LMLauncher.exe [2013-08-03] (Acer Incorporate)
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {5AF6266D-3165-4977-8DF8-7AFAF0588B20} - System32\Tasks\ALU => C:\Program Files (x86)\Packard Bell\Live Updater\updater.exe [2013-07-09] ()
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6CE2621E-6198-4654-B504-B8B428A44A9E} - System32\Tasks\Recovery Management\Notification => C:\Program Files\Packard Bell\Packard Bell Recovery Management\Notification\Notification.exe [2013-07-10] (Acer Incorporated)
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {835C9B38-C929-469E-BD52-C6558046D047} - System32\Tasks\Quick Access => C:\Program Files\Packard Bell\Packard Bell Quick Access\QALauncher.exe [2013-08-02] (Acer Incorporate)
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {A18E097D-7146-450C-AAD6-BD6394F2D85D} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2014-06-26] (Microsoft Corporation)
Task: {A4AB8D18-F728-4C51-9B8C-FDAD63D95E96} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {A6423BB6-FE12-4F8C-93E1-105219168CDA} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Packard Bell\Live Updater\liveupdater_agent.exe [2013-01-22] ()
Task: {AB527634-8F66-42B5-B316-3F3C533555E1} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Validation
Task: {BCBBD6D0-899C-452F-B8A4-8C158DCEF62B} - System32\Tasks\GU5SkipUAC => C:\Program Files (x86)\Glary Utilities 5\Integrator.exe [2014-07-21] (Glarysoft Ltd)
Task: {BE70727A-3591-4F1B-9CA5-A4B77B531A9B} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics
Task: {C22ACCD4-7A3B-4194-A678-8BEEEEBB6BC7} - System32\Tasks\SpyHunter4Startup => C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe
Task: {CAB1A41D-2787-4973-91AB-0077CFAE9BB2} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: {EF6C110A-2370-4C7A-81FA-E9326C816887} - System32\Tasks\Power Management => C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe [2013-07-05] (Acer Incorporated)
Task: {F02D371A-3CCC-48AF-A7EC-046272CBDB3F} - System32\Tasks\GlaryInitialize 5 => C:\Program Files (x86)\Glary Utilities 5\Initialize.exe [2014-07-21] (Glarysoft Ltd)
Task: {F3417912-760C-4444-9F6D-38C6F5ED0686} - System32\Tasks\AcerCloud => C:\Program Files (x86)\Acer\Acer Portal\acpanel_win.exe [2013-07-26] (Acer Incorporated)
Task: {F8196ED2-3901-46DA-AE43-4E837060360B} - System32\Tasks\Uninstaller_SkipUac_Administrator => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [2014-08-03] (IObit)
Task: {FE87C2F5-5AA3-43C3-BE9A-4461FEF96970} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Management
Task: C:\Windows\Tasks\GlaryInitialize 5.job => C:\Program Files (x86)\Glary Utilities 5\Initialize.exe
Task: C:\Windows\Tasks\Uninstaller_SkipUac_Administrator.job => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe

==================== Loaded Modules (whitelisted) =============

2013-09-07 01:48 - 2013-09-07 01:48 - 00011264 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2013-09-07 01:45 - 2013-09-07 01:45 - 00086016 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\Map\MAP.dll
2013-09-07 01:52 - 2013-09-07 01:52 - 00012928 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
2014-04-23 16:05 - 2014-04-23 16:05 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-04-23 16:04 - 2014-04-23 16:04 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-07-21 05:01 - 2014-07-21 05:01 - 00080160 _____ () C:\Program Files (x86)\Glary Utilities 5\zlib1.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\Temp:373E1720

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (08/06/2014 08:56:09 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.

Error: (08/06/2014 06:30:22 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.


System errors:
=============
Error: (08/06/2014 08:54:14 PM) (Source: BugCheck) (EventID: 1001) (User: )
Description: 0x00000005 (0xffffe0008029a900, 0xffffe00083a0f900, 0x0000000000000000, 0x0000000000000001)C:\Windows\MEMORY.DMP080614-18656-01

Error: (08/06/2014 08:54:10 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎06.‎08.‎2014 um 20:51:03 unerwartet heruntergefahren.


Microsoft Office Sessions:
=========================
Error: (08/06/2014 08:56:09 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Sicherheit\8 esetsmartinstaller_deu.exe

Error: (08/06/2014 06:30:22 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Sicherheit\8 esetsmartinstaller_deu.exe


CodeIntegrity Errors:
===================================
  Date: 2014-07-20 15:30:47.623
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2014-07-20 15:30:47.232
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Memory info =========================== 

Percentage of memory in use: 25%
Total physical RAM: 3979.34 MB
Available physical RAM: 2948.87 MB
Total Pagefile: 8075.34 MB
Available Pagefile: 7019.12 MB
Total Virtual: 131072 MB
Available Virtual: 131071.84 MB

==================== Drives ================================

Drive c: (Packard Bell) (Fixed) (Total:448 GB) (Free:418.87 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: CED9F62B)

Partition: GPT Partition Type.

==================== End Of Log ============================