Hallo,
vielen Dank für die Antwort. Es hat leider sehr lange gedauert, bist ich eine Antwort und die beiden Dateien bekommen habe. Jetzt habe ich mir den Rechner besorgt und kümmere mich selber darum.
Hier die beiden Dateien:
FRST
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-02-2014 04
Ran by Sandra (administrator) on HP on 02-02-2014 17:15:37
Running from C:\Users\Sandra\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(DigitalPersona, Inc.) C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Dropbox, Inc.) C:\Users\Sandra\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
( Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
() C:\ProgramData\DatacardService\DCService.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP DayStarter\32-bit\HPDayStarterService.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Realtek) C:\Program Files (x86)\Hewlett-Packard\HP Internet Sharing Manager\HP_UI\RtlService.exe
(Realtek) C:\Program Files (x86)\Hewlett-Packard\HP Internet Sharing Manager\HP_UI\RtWlan.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(ArcSoft, Inc.) C:\Windows\SysWOW64\ArcVCapRender\uArcCapture.exe
( Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\VolCtrl.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpAgent.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Main.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe
(Portrait Displays, Inc) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\SDKCOMServer.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Health Check\HPHC_Service.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
() C:\Program Files (x86)\Hewlett-Packard\Shared\HpqToaster.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\Shared\hpCaslNotification.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Tracker Software Products (Canada) Ltd.) C:\Program Files\Tracker Software\PDF Viewer\PDFXCview.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\OFFICE11\WINWORD.EXE
(Thomson Reuters) C:\Program Files (x86)\EndNote X5\EndNote.exe
() C:\Program Files\Mendeley Desktop\MendeleyWordPlugin.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2710824 2011-04-18] (Synaptics Incorporated)
HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [627360 2011-05-10] (Atheros Communications)
HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [379552 2011-05-10] (Atheros Commnucations)
HKLM\...\Run: [HPPowerAssistant] - C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Main.exe [2941496 2011-03-18] (Hewlett-Packard Company)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642728 2012-09-28] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [HPQuickWebProxy] - c:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe [169528 2011-11-21] (Hewlett-Packard Company)
HKLM-x32\...\Run: [QlbCtrl.exe] - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [287800 2009-11-11] ( Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-05-11] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe,
Winlogon\Notify\DeviceNP-x32: DeviceNP.dll [X]
HKU\S-1-5-21-4186912876-1959749925-3150442549-1001\...\Run: [GoogleDriveSync] - C:\Program Files (x86)\Google\Drive\googledrivesync.exe [20203904 2013-12-06] (Google)
HKU\S-1-5-21-4186912876-1959749925-3150442549-1001\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKU\S-1-5-21-4186912876-1959749925-3150442549-1001\...\RunOnce: [FlashPlayerUpdate] - C:\windows\SysWOW64\Macromed\Flash\FlashUtil32_11_9_900_170_Plugin.exe [839560 2013-12-11] (Adobe Systems Incorporated)
HKU\S-1-5-21-4186912876-1959749925-3150442549-1001\...\MountPoints2: {29aca5ce-94ee-11e1-953c-e4115b307b66} - H:\LaunchU3.exe -a
HKU\S-1-5-21-4186912876-1959749925-3150442549-1001\...\MountPoints2: {827855d5-c2c1-11e1-a3a0-e4115b307b66} - D:\AutoRun.exe
HKU\S-1-5-21-4186912876-1959749925-3150442549-1001\...\MountPoints2: {827855ec-c2c1-11e1-a3a0-e4115b307b66} - D:\AutoRun.exe
HKU\S-1-5-21-4186912876-1959749925-3150442549-1001\...\MountPoints2: {82785653-c2c1-11e1-a3a0-e4115b307b66} - D:\AutoRun.exe
Lsa: [Notification Packages] EpePcNp64 DPPassFilter scecli
Startup: C:\Users\Sandra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Sandra\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://isearch.avg.com/?cid={9A8A2F63-8C06-40CE-A9B4-56273B318B1E}&mid=09c363d62bd247d0a86635581dd49295-452389e58caa7c07ed54f26fdb1833e7d7593e4d&lang=de&ds=pd011&pr=sa&d=2012-09-03 16:01:57&v=12.2.0.5&sap=hp
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPCOM/10
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=CMNTDF
SearchScopes: HKLM - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=CMNTDF
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=CMNTDF
SearchScopes: HKLM-x32 - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=CMNTDF
SearchScopes: HKCU - DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL =
SearchScopes: HKCU - {2fa28606-de77-4029-af96-b231e3b8f827} URL =
SearchScopes: HKCU - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL =
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: File Sanitizer for HP ProtectTools - {3134413B-49B4-425C-98A5-893C1F195601} - C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\IEBHO.dll (Hewlett-Packard)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - No File
Tcpip\Parameters: [DhcpNameServer] 62.241.198.245 62.241.198.246
Tcpip\..\Interfaces\{BEFE973F-6443-4427-8713-2D7A42CDC9A4}: [NameServer]192.168.190.3 192.168.190.4
Tcpip\..\Interfaces\{FB65D52B-66F6-4797-81F9-E0CF9A4E80C8}: [NameServer]192.168.190.3 192.168.190.4
FireFox:
========
FF ProfilePath: C:\Users\Sandra\AppData\Roaming\Mozilla\Firefox\Profiles\7qbjuamp.default
FF Homepage: hxxp://www.timeoftheaquarius.com/search?updated-max=2010-09-07T08:08:00%2B03:00&max-results=3&start=444&by-date=false|hxxp://www.rollingstone.com/politics/news/global-warmings-terrifying-new-math-20120719|hxxp://frisurclothingshop.com/girls.html|hxxp://robotiliebt.blogspot.co.at/2012/01/roboti-liebt-die-superschokoladenbrowni.html|hxxp://www.myfonts.com/fonts/linotype/trade-gothic/|hxxp://www.around.ch/weltreise/reiseberichte/14-vietnam/#?pp_fID_1549=2390&img_num=1|hxxp://www.dict.cc/|hxxp://www.smiletravelvietnam.com/secure/status/V5587|hxxp://jboli.c.u-tokyo.ac.jp/fujiwara/2010nianno_ying_mu.html|hxxp://www.julieannart.com/2011/10/how-to-add-pinterest-button-to-all-blog.html|hxxp://www.hostelworld.com/hosteldetails.php/Casablanca-Hotel-Sapa/Sapa/41162|hxxp://modilingua.com/preise/|hxxp://www.buerosieber.de/startseite-1/dipl-biologin-biologe.aspx|hxxp://www.blogger.com/home|hxxp://www.doorsixteen.com/2012/10/30/sandy-during/|hxxp://www.hm.com/de/customer-service/shipping-and-delivery|hxxp://reiseauskunft.bahn.de/bin/query2.exe/dn?ld=9641&seqnr=3&ident=52.02225141.1348431131&rt=1&rememberSortType=minDeparture&REQ0HafasScrollDir=1|https://www.facebook.com/|hxxp://www.kochbar.de/cms/videos/perfekte-dinner-online-sehen.html
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFFICE.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\avg-secure-search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: FoxyProxy Standard - C:\Users\Sandra\AppData\Roaming\Mozilla\Firefox\Profiles\7qbjuamp.default\Extensions\foxyproxy@eric.h.jung [2013-11-16]
FF Extension: ProxTube - Unblock YouTube - C:\Users\Sandra\AppData\Roaming\Mozilla\Firefox\Profiles\7qbjuamp.default\Extensions\ich@maltegoetz.de [2013-12-11]
FF Extension: Adblock Plus - C:\Users\Sandra\AppData\Roaming\Mozilla\Firefox\Profiles\7qbjuamp.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-03-02]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2013-12-20]
FF HKLM-x32\...\Firefox\Extensions: [otis@digitalpersona.com] - c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt\
FF Extension: DigitalPersona Extension - c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt\ []
==================== Services (Whitelisted) =================
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-09-28] (Advanced Micro Devices, Inc.)
R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [146592 2011-05-10] (Atheros)
R2 DCService.exe; C:\ProgramData\DatacardService\DCService.exe [249856 2010-09-29] ()
R2 DpHost; c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe [485712 2011-05-19] (DigitalPersona, Inc.)
S4 FLCDLOCK; c:\Windows\SysWOW64\flcdlock.exe [464440 2011-05-10] (Hewlett-Packard Company)
R2 HPDayStarterService; c:\Program Files\Hewlett-Packard\HP DayStarter\32-bit\HPDayStarterService.exe [133688 2011-03-23] (Hewlett-Packard Company)
R2 hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HpHotkeyMonitor.exe [317496 2011-05-14] (Hewlett-Packard Company)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S4 McAfee Endpoint Encryption Agent; C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeHost.exe [1318912 2011-05-24] ()
R2 RtlISMServ; C:\Program Files (x86)\Hewlett-Packard\HP Internet Sharing Manager\HP_UI\RtlService.exe [40960 2011-05-30] (Realtek)
R2 uArcCapture; C:\windows\SysWow64\ArcVCapRender\uArcCapture.exe [498352 2012-04-05] (ArcSoft, Inc.)
==================== Drivers (Whitelisted) ====================
R3 ARCVCAM; C:\Windows\System32\DRIVERS\ArcSoftVCapture.sys [42816 2012-02-03] (ArcSoft, Inc.)
S3 DAMDrv; C:\Windows\System32\DRIVERS\DAMDrv64.sys [64312 2011-05-10] (Hewlett-Packard Company)
S3 ewusbnet; C:\Windows\System32\DRIVERS\ewusbnet.sys [256000 2010-08-31] (Huawei Technologies Co., Ltd.)
R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R0 MfeEpePc; C:\Windows\System32\Drivers\MfeEpePc.sys [158280 2011-05-25] (McAfee, Inc.)
R3 SPUVCbv; C:\Windows\System32\Drivers\SPUVCbv_x64.sys [1064184 2012-09-23] (Sunplus)
U5 GEARAspiWDM; C:\Windows\System32\Drivers\GEARAspiWDM.sys [33240 2012-08-21] (GEAR Software Inc.)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-02-02 17:15 - 2014-02-02 17:16 - 00022553 _____ () C:\Users\Sandra\Desktop\FRST.txt
2014-02-02 17:15 - 2014-02-02 17:15 - 02080256 _____ (Farbar) C:\Users\Sandra\Desktop\FRST64.exe
2014-02-02 17:15 - 2014-02-02 17:15 - 00000000 ____D () C:\FRST
2014-01-27 17:42 - 2014-01-27 17:59 - 00000000 ____D () C:\Users\Sandra\Desktop\ALTE DATEIEN
2014-01-27 17:07 - 2014-01-27 17:22 - 00045056 ____H () C:\Users\Sandra\Desktop\~WRL3153.tmp
2014-01-27 17:07 - 2014-01-27 17:22 - 00045056 ____H () C:\Users\Sandra\Desktop\~WRL0510.tmp
2014-01-27 17:07 - 2014-01-27 17:21 - 00046080 ____H () C:\Users\Sandra\Desktop\~WRL3187.tmp
2014-01-27 17:07 - 2014-01-27 17:17 - 00044032 ____H () C:\Users\Sandra\Desktop\~WRL0725.tmp
2014-01-27 17:07 - 2014-01-27 17:15 - 00043520 ____H () C:\Users\Sandra\Desktop\~WRL0339.tmp
2014-01-27 17:07 - 2014-01-27 17:07 - 00044032 ____H () C:\Users\Sandra\Desktop\~WRL1441.tmp
2014-01-22 11:35 - 2014-01-22 11:35 - 00008837 _____ () C:\Users\Sandra\Downloads\packfor_0.0-8.tar.gz
2014-01-21 22:58 - 2014-01-21 22:58 - 00000000 ____D () C:\Users\Sandra\AppData\Roaming\Malwarebytes
2014-01-21 22:57 - 2014-01-21 22:57 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-01-21 22:57 - 2014-01-21 22:57 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-21 22:57 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2014-01-21 22:48 - 2014-01-21 22:48 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Sandra\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-16 06:26 - 2013-11-27 03:41 - 00343040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbhub.sys
2014-01-16 06:26 - 2013-11-27 03:41 - 00325120 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbport.sys
2014-01-16 06:26 - 2013-11-27 03:41 - 00099840 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbccgp.sys
2014-01-16 06:26 - 2013-11-27 03:41 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbehci.sys
2014-01-16 06:26 - 2013-11-27 03:41 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbuhci.sys
2014-01-16 06:26 - 2013-11-27 03:41 - 00025600 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbohci.sys
2014-01-16 06:26 - 2013-11-27 03:41 - 00007808 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbd.sys
2014-01-16 06:26 - 2013-11-26 13:40 - 00376768 _____ (Microsoft Corporation) C:\windows\system32\Drivers\netio.sys
2014-01-16 06:26 - 2013-11-26 12:32 - 03156480 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2014-01-15 12:20 - 2014-01-17 11:03 - 00023040 _____ () C:\Users\Sandra\Desktop\Phytoplankton samples Norway.xls
2014-01-15 07:46 - 2014-01-15 07:46 - 01113296 _____ () C:\windows\Minidump\011514-22791-01.dmp
2014-01-08 20:52 - 2014-01-08 20:52 - 00003584 _____ () C:\Users\Sandra\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-01-08 20:52 - 2014-01-08 20:52 - 00000000 ____D () C:\Users\Sandra\Desktop\filme
2014-01-08 20:51 - 2014-01-08 20:52 - 00000000 ____D () C:\Users\Sandra\Desktop\hörbücher
2014-01-07 09:25 - 2014-01-07 09:25 - 01301560 _____ () C:\windows\Minidump\010714-24913-01.dmp
2014-01-05 01:02 - 2013-12-31 14:36 - 11140285 _____ () C:\Users\Sandra\Desktop\Free Printable 2014 Calendar.zip
==================== One Month Modified Files and Folders =======
2014-02-02 17:16 - 2014-02-02 17:15 - 00022553 _____ () C:\Users\Sandra\Desktop\FRST.txt
2014-02-02 17:15 - 2014-02-02 17:15 - 02080256 _____ (Farbar) C:\Users\Sandra\Desktop\FRST64.exe
2014-02-02 17:15 - 2014-02-02 17:15 - 00000000 ____D () C:\FRST
2014-02-02 17:14 - 2012-03-02 21:29 - 00000000 ____D () C:\Users\Sandra\AppData\Roaming\Skype
2014-02-02 17:14 - 2012-01-07 11:17 - 01734114 _____ () C:\windows\WindowsUpdate.log
2014-02-02 17:12 - 2012-05-20 15:27 - 00001110 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-02 17:11 - 2013-01-11 08:25 - 00000884 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-02-02 17:11 - 2012-05-20 15:27 - 00001106 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-01 17:57 - 2012-03-02 11:09 - 00003910 _____ () C:\windows\System32\Tasks\User_Feed_Synchronization-{81F2B5DE-6D2B-4D63-B340-751D7B76DB37}
2014-01-31 17:03 - 2012-03-03 14:27 - 00000000 ____D () C:\Users\Sandra\AppData\Roaming\Dropbox
2014-01-31 14:37 - 2012-03-05 19:34 - 00000000 ____D () C:\Users\Sandra\Desktop\gorgeous
2014-01-31 10:45 - 2012-03-19 21:10 - 00000000 ____D () C:\PAPER
2014-01-30 14:44 - 2009-07-14 06:45 - 00028576 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-30 14:44 - 2009-07-14 06:45 - 00028576 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-29 06:15 - 2011-12-09 06:11 - 00696870 _____ () C:\windows\system32\perfh007.dat
2014-01-29 06:15 - 2011-12-09 06:11 - 00148134 _____ () C:\windows\system32\perfc007.dat
2014-01-29 06:15 - 2009-07-14 07:13 - 01612484 _____ () C:\windows\system32\PerfStringBackup.INI
2014-01-29 06:10 - 2012-11-26 11:36 - 00000000 ___RD () C:\Users\Sandra\Google Drive
2014-01-29 06:10 - 2012-03-03 14:28 - 00000000 ___RD () C:\Users\Sandra\Dropbox
2014-01-29 06:09 - 2012-03-02 21:02 - 00000328 _____ () C:\windows\Tasks\GlaryInitialize.job
2014-01-29 06:09 - 2009-07-14 07:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-01-29 06:09 - 2009-07-14 06:51 - 00077598 _____ () C:\windows\setupact.log
2014-01-27 17:59 - 2014-01-27 17:42 - 00000000 ____D () C:\Users\Sandra\Desktop\ALTE DATEIEN
2014-01-27 17:22 - 2014-01-27 17:07 - 00045056 ____H () C:\Users\Sandra\Desktop\~WRL3153.tmp
2014-01-27 17:22 - 2014-01-27 17:07 - 00045056 ____H () C:\Users\Sandra\Desktop\~WRL0510.tmp
2014-01-27 17:21 - 2014-01-27 17:07 - 00046080 ____H () C:\Users\Sandra\Desktop\~WRL3187.tmp
2014-01-27 17:17 - 2014-01-27 17:07 - 00044032 ____H () C:\Users\Sandra\Desktop\~WRL0725.tmp
2014-01-27 17:15 - 2014-01-27 17:07 - 00043520 ____H () C:\Users\Sandra\Desktop\~WRL0339.tmp
2014-01-27 17:07 - 2014-01-27 17:07 - 00044032 ____H () C:\Users\Sandra\Desktop\~WRL1441.tmp
2014-01-22 18:15 - 2012-03-17 14:17 - 00000000 ____D () C:\Users\Sandra\AppData\Local\CrashDumps
2014-01-22 11:35 - 2014-01-22 11:35 - 00008837 _____ () C:\Users\Sandra\Downloads\packfor_0.0-8.tar.gz
2014-01-21 22:58 - 2014-01-21 22:58 - 00000000 ____D () C:\Users\Sandra\AppData\Roaming\Malwarebytes
2014-01-21 22:57 - 2014-01-21 22:57 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-01-21 22:57 - 2014-01-21 22:57 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-21 22:48 - 2014-01-21 22:48 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Sandra\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-18 00:46 - 2009-07-14 06:45 - 00321768 _____ () C:\windows\system32\FNTCACHE.DAT
2014-01-17 11:03 - 2014-01-15 12:20 - 00023040 _____ () C:\Users\Sandra\Desktop\Phytoplankton samples Norway.xls
2014-01-17 07:13 - 2013-07-23 07:03 - 00000000 ____D () C:\windows\system32\MRT
2014-01-17 07:10 - 2013-07-12 11:03 - 86054176 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-01-15 10:21 - 2012-03-12 12:56 - 00000000 ____D () C:\Users\Sandra\Desktop\gedaddeltes
2014-01-15 07:49 - 2012-03-04 19:51 - 00000000 ____D () C:\Fotos
2014-01-15 07:48 - 2013-01-24 14:03 - 00000000 ____D () C:\Users\Sandra\Desktop\janne
2014-01-15 07:46 - 2014-01-15 07:46 - 01113296 _____ () C:\windows\Minidump\011514-22791-01.dmp
2014-01-15 07:46 - 2013-08-18 20:02 - 00000000 ____D () C:\windows\Minidump
2014-01-15 07:46 - 2013-06-14 18:22 - 688492505 _____ () C:\windows\MEMORY.DMP
2014-01-09 23:02 - 2009-07-14 07:09 - 00000000 ____D () C:\windows\System32\Tasks\WPD
2014-01-09 09:33 - 2012-03-03 14:28 - 00001026 _____ () C:\Users\Sandra\Desktop\Dropbox.lnk
2014-01-09 09:33 - 2012-03-03 14:27 - 00000000 ____D () C:\Users\Sandra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-01-09 09:33 - 2012-03-02 11:09 - 00000000 ___RD () C:\Users\Sandra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-08 21:14 - 2012-03-07 14:31 - 00000000 ____D () C:\Users\Sandra\AppData\Roaming\vlc
2014-01-08 20:52 - 2014-01-08 20:52 - 00003584 _____ () C:\Users\Sandra\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-01-08 20:52 - 2014-01-08 20:52 - 00000000 ____D () C:\Users\Sandra\Desktop\filme
2014-01-08 20:52 - 2014-01-08 20:51 - 00000000 ____D () C:\Users\Sandra\Desktop\hörbücher
2014-01-07 09:25 - 2014-01-07 09:25 - 01301560 _____ () C:\windows\Minidump\010714-24913-01.dmp
2014-01-05 18:44 - 2013-03-12 16:31 - 00000000 ____D () C:\Users\Sandra\Desktop\STEUER
2014-01-03 01:15 - 2012-12-18 14:47 - 00000000 ____D () C:\Users\Sandra\Desktop\KAPITEL 1
Files to move or delete:
====================
C:\Users\Sandra\iview436g_setup.exe
Some content of TEMP:
====================
C:\Users\Sandra\AppData\Local\Temp\AskSLib.dll
C:\Users\Sandra\AppData\Local\Temp\avguidx.dll
C:\Users\Sandra\AppData\Local\Temp\CommonInstaller.exe
C:\Users\Sandra\AppData\Local\Temp\jna2101369201613147889.dll
C:\Users\Sandra\AppData\Local\Temp\jna3227982869372496493.dll
C:\Users\Sandra\AppData\Local\Temp\jna5202837550348601804.dll
C:\Users\Sandra\AppData\Local\Temp\jna7564371192299136181.dll
C:\Users\Sandra\AppData\Local\Temp\jre-7u11-windows-i586-iftw.exe
C:\Users\Sandra\AppData\Local\Temp\jre-7u15-windows-i586-iftw.exe
C:\Users\Sandra\AppData\Local\Temp\jre-7u17-windows-i586-iftw.exe
C:\Users\Sandra\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe
C:\Users\Sandra\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\Sandra\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Sandra\AppData\Local\Temp\MachineIdCreator.exe
C:\Users\Sandra\AppData\Local\Temp\oi_{976F3A84-2A04-4748-812C-312BDFD544C3}.exe
C:\Users\Sandra\AppData\Local\Temp\Risweb32.exe
C:\Users\Sandra\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Sandra\AppData\Local\Temp\sfextra.dll
C:\Users\Sandra\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Sandra\AppData\Local\Temp\ToolbarInstaller.exe
C:\Users\Sandra\AppData\Local\Temp\uninstall.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-01-29 11:41
==================== End Of Log ============================ --- --- ---
Addition Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-02-2014 04
Ran by Sandra at 2014-02-02 17:16:38
Running from C:\Users\Sandra\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
7-PDF Split & Merge Version 2.0.4 (Build 112) (x32 Version: 7-PDF Split & Merge - Version 2.0.4 (Build 112) - 7-PDF, Germany - Thorsten Hodes)
ActiveCheck component for HP Active Support Library (x32 Version: 3.0.0.3 - Hewlett-Packard) Hidden
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.03) - Deutsch (x32 Version: 11.0.03 - Adobe Systems Incorporated)
AFPL Ghostscript 8.54 (x32 Version: - )
AFPL Ghostscript Fonts (x32 Version: - )
AMD Accelerated Video Transcoding (Version: 12.5.100.20928 - Advanced Micro Devices, Inc.) Hidden
AMD APP SDK Runtime (Version: 10.0.1016.4 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Install Manager (Version: 8.0.891.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Fuel (Version: 2012.0928.1532.26058 - Ihr Firmenname) Hidden
AMD Media Foundation Decoders (Version: 1.0.70928.1539 - Advanced Micro Devices, Inc.) Hidden
AMD VISION Engine Control Center (x32 Version: 2012.0928.1532.26058 - Ihr Firmenname) Hidden
Apple Application Support (x32 Version: 2.3.6 - Apple Inc.)
Apple Mobile Device Support (Version: 7.0.0.117 - Apple Inc.)
Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.)
ArcSoft Webcam Sharing Manager (x32 Version: 2.0.0.39 - ArcSoft)
Atheros Driver Installation Program (x32 Version: 9.2 - Atheros)
Bluetooth Win7 Suite (64) (Version: 7.2.0.80 - Atheros Communications)
Bonjour (Version: 3.0.0.10 - Apple Inc.)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2012.0928.1532.26058 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2012.0928.1532.26058 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2012.0928.1532.26058 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2012.0928.1531.26058 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2012.0928.1531.26058 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2012.0928.1531.26058 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2012.0928.1531.26058 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2012.0928.1531.26058 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2012.0928.1531.26058 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2012.0928.1531.26058 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2012.0928.1531.26058 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2012.0928.1531.26058 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2012.0928.1531.26058 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2012.0928.1531.26058 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2012.0928.1531.26058 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2012.0928.1531.26058 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2012.0928.1531.26058 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2012.0928.1531.26058 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2012.0928.1531.26058 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2012.0928.1531.26058 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2012.0928.1531.26058 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2012.0928.1531.26058 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2012.0928.1531.26058 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2012.0928.1531.26058 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2012.0928.1531.26058 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2012.0928.1532.26058 - Advanced Micro Devices, Inc.) Hidden
Cisco EAP-FAST Module (x32 Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (x32 Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (x32 Version: 1.1.6 - Cisco Systems, Inc.)
Compatibility Pack für 2007 Office System (x32 Version: 12.0.6612.1000 - Microsoft Corporation)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Device Access Manager for HP ProtectTools (Version: 6.0.0.12 - Hewlett-Packard Company)
Drive Encryption For HP ProtectTools (Version: 6.0.64.25592 - Hewlett-Packard Company)
Dropbox (HKCU Version: 2.4.11 - Dropbox, Inc.)
EndNote X5 (x32 Version: 15.0.0.5478 - Thomson Reuters)
Energy Star Digital Logo (x32 Version: 1.0.1 - Hewlett-Packard)
f4 2012 (x32 Version: - audiotranskription.de)
Face Recognition for HP ProtectTools (Version: 6.00.4345 - Hewlett-Packard Company)
File Sanitizer For HP ProtectTools (x32 Version: 6.0.0.13 - Hewlett-Packard Company)
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Glary Utilities 2.29.0.1032 (x32 Version: 2.29.0.1032 - Glarysoft Ltd)
Google Drive (x32 Version: 1.13.5782.599 - Google, Inc.)
Google Earth (x32 Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
HP 3D DriveGuard (Version: 4.1.8.1 - Hewlett-Packard Company)
HP Auto (Version: 1.0.12935.3667 - Hewlett-Packard Company) Hidden
HP Connection Manager (x32 Version: 4.1.22.1 - Hewlett-Packard Company)
HP Customer Experience Enhancements (x32 Version: 6.0.1.7 - Hewlett-Packard) Hidden
HP DayStarter (Version: 2.0.1.0 - Hewlett-Packard Company)
HP Documentation (x32 Version: 1.3.0.0 - Hewlett-Packard)
HP ESU for Microsoft Windows 7 (x32 Version: 1.1.13.2 - Hewlett-Packard Company)
HP HD Webcam Driver (x32 Version: 3.4.8.16 - SunplusIT)
HP HotKey Support (Version: 4.0.18.1 - Hewlett-Packard Company)
HP Internet Sharing Manager (x32 Version: 1.0.0.10 - Realtek)
HP Power Assistant (Version: 2.0.3.1 - Hewlett-Packard Company)
HP ProtectTools Security Manager (Version: 6.03.959 - Hewlett-Packard Company)
HP ProtectTools Security Manager (Version: 6.03.959 - Hewlett-Packard Company) Hidden
HP Quick Launch Buttons (x32 Version: 6.50.12.1 - Hewlett-Packard)
HP QuickWeb (x32 Version: 3.1.2.10231 - Hewlett-Packard Company)
HP Setup (x32 Version: 8.5.4526.3645 - Hewlett-Packard Company)
HP SoftPaq Download Manager (x32 Version: 3.2.0.0 - Hewlett-Packard Company)
HP Software Framework (x32 Version: 4.1.6.1 - Hewlett-Packard Company)
HP Software Setup (x32 Version: 8.2.1.1 - Hewlett-Packard Company)
HP Support Assistant (x32 Version: 5.2.9.2 - Hewlett-Packard Company)
HP System Default Settings (x32 Version: 2.2.3 - Hewlett-Packard Company)
HP Wallpaper (x32 Version: 2.00 - Hewlett-Packard Company)
HPAsset component for HP Active Support Library (x32 Version: 3.0.0.3 - Hewlett-Packard) Hidden
IDT Audio (x32 Version: 1.0.6336.0 - IDT)
IrfanView (remove only) (x32 Version: 4.36 - Irfan Skiljan)
iTunes (Version: 11.1.3.8 - Apple Inc.)
Java 7 Update 45 (x32 Version: 7.0.450 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
JMicron Flash Media Controller Driver (x32 Version: 1.0.58.0 - JMicron Technology Corp.)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
Mendeley Desktop 1.3.2 (x32 Version: 1.3.2 - Mendeley Ltd.)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (x32 Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Microsoft_VC90_CRT_x86 (x32 Version: 1.0.0 - Microsoft Corporation)
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla)
Mozilla Thunderbird 24.2.0 (x86 de) (x32 Version: 24.2.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
NOVA INTERNET (x32 Version: 16.001.06.00.136 - Huawei Technologies Co.,Ltd)
PDFCreator (x32 Version: 1.5.0 - Frank Heindörfer, Philip Chinery)
PDF-XChange Viewer (Version: 2.5.201.0 - Tracker Software Products Ltd.)
Privacy Manager for HP ProtectTools (Version: 6.01.842 - Hewlett-Packard Company)
QLBCASL (x32 Version: 6.40.17.2 - Hewlett-Packard) Hidden
R for Windows 2.14.2 (Version: 2.14.2 - R Development Core Team)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Realtek Ethernet Controller All-In-One Windows Driver (x32 Version: 1.12.0016 - Realtek)
ResearchSoft Direct Export Helper (x32 Version: - )
RStudio (x32 Version: 0.97.449 - RStudio)
SDK (x32 Version: 2.26.012 - Portrait Displays, Inc.) Hidden
SigmaPlot 10.0 (x32 Version: 10.0.0 - Systat Software, Inc.)
Skype Click to Call (x32 Version: 6.3.11079 - Skype Technologies S.A.)
Skype™ 6.11 (x32 Version: 6.11.102 - Skype Technologies S.A.)
Steam (x32 Version: 1.0.0.0 - Valve Corporation)
Synaptics Pointing Device Driver (Version: 15.2.16.6 - Synaptics Incorporated)
Team Fortress 2 (x32 Version: - Valve)
Theft Recovery for HP ProtectTools (x32 Version: 6.0.0.33 - Hewlett-Packard Company)
Theft Recovery for HP ProtectTools (x32 Version: 6.0.0.33 - Hewlett-Packard Company) Hidden
Tutorial2 (HKCU Version: - )
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)
Validity Fingerprint Sensor Driver (Version: 4.3.126.0 - Validity Sensors, Inc.)
VLC media player 2.0.0 (x32 Version: 2.0.0 - VideoLAN)
Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
WinRAR 4.11 (32-Bit) (x32 Version: 4.11.0 - win.rar GmbH)
WinZip 15.0 (x32 Version: 15.0.9411 - WinZip Computing, S.L. )
Xobni Core (x32 Version: 1.0.0 - Xobni, Inc.) Hidden
==================== Restore Points =========================
10-01-2014 10:31:10 Windows Update
14-01-2014 06:46:37 Windows Update
17-01-2014 05:10:22 Windows Update
21-01-2014 09:54:23 Windows Update
24-01-2014 10:10:28 Windows Update
28-01-2014 07:51:09 Windows Update
==================== Hosts content: ==========================
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {1B6531FA-37A5-4456-BF1F-6A4DC55FA8CC} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11] (Adobe Systems Incorporated)
Task: {56D65840-63D0-438F-BA24-0041F00BCF13} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-05-20] (Google Inc.)
Task: {71335EB6-E325-4090-9562-EC1DA3DAF51D} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Tuneup => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2011-02-23] (Hewlett-Packard Company)
Task: {7F0DB311-2BD1-4408-9A42-DF720F916EFE} - System32\Tasks\{9FC4F3B2-6547-442C-A05D-4ED6A87CAFCA} => C:\Program Files (x86)\PDFCreator\PDFCreator.exe [2012-09-03] (pdfforge hxxp://www.pdfforge.org/)
Task: {B9738015-449C-44EA-AF7D-726902E62160} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2011-02-23] (Hewlett-Packard Company)
Task: {CFEDB7EC-B32A-4C97-8BD5-FF75ADC59A58} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-05-20] (Google Inc.)
Task: {F1086258-B308-44A9-B325-353FB0A42635} - System32\Tasks\AdobeAAMUpdater-1.0-HP-Sandra => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe
Task: {F6E85F66-58AA-4E34-A381-312CBB727588} - System32\Tasks\GlaryInitialize => C:\Program Files (x86)\Glary Utilities\initialize.exe [2010-10-14] (Glarysoft Ltd)
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GlaryInitialize.job => C:\Program Files (x86)\Glary Utilities\initialize.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2011-03-18 01:08 - 2011-03-18 01:08 - 00097336 _____ () C:\Program Files\Hewlett-Packard\HP Power Assistant\HardwareAccess.dll
2011-03-18 01:09 - 2011-03-18 01:09 - 00036408 _____ () C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Remote.dll
2011-03-18 01:08 - 2011-03-18 01:08 - 00046136 _____ () C:\Program Files\Hewlett-Packard\HP Power Assistant\Graphs.dll
2011-12-09 07:59 - 2010-12-13 23:49 - 01083392 _____ () C:\Program Files\Hewlett-Packard\HP Power Assistant\System.Data.SQLite.dll
2012-09-28 16:43 - 2012-09-28 16:43 - 00103424 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2010-09-06 23:18 - 2010-09-06 23:18 - 01412608 _____ () C:\windows\system32\LIBEAY32.dll
2013-10-19 01:55 - 2013-10-19 01:55 - 25100288 _____ () C:\Users\Sandra\AppData\Roaming\Dropbox\bin\libcef.dll
2014-01-29 06:09 - 2014-01-29 06:09 - 00098816 _____ () C:\Users\Sandra\AppData\Local\Temp\_MEI13442\win32api.pyd
2014-01-29 06:09 - 2014-01-29 06:09 - 00110080 _____ () C:\Users\Sandra\AppData\Local\Temp\_MEI13442\pywintypes27.dll
2014-01-29 06:09 - 2014-01-29 06:09 - 00364544 _____ () C:\Users\Sandra\AppData\Local\Temp\_MEI13442\pythoncom27.dll
2014-01-29 06:09 - 2014-01-29 06:09 - 00044032 _____ () C:\Users\Sandra\AppData\Local\Temp\_MEI13442\_socket.pyd
2014-01-29 06:09 - 2014-01-29 06:09 - 01153024 _____ () C:\Users\Sandra\AppData\Local\Temp\_MEI13442\_ssl.pyd
2014-01-29 06:09 - 2014-01-29 06:09 - 00320512 _____ () C:\Users\Sandra\AppData\Local\Temp\_MEI13442\win32com.shell.shell.pyd
2014-01-29 06:09 - 2014-01-29 06:09 - 00711680 _____ () C:\Users\Sandra\AppData\Local\Temp\_MEI13442\_hashlib.pyd
2014-01-29 06:09 - 2014-01-29 06:09 - 01175040 _____ () C:\Users\Sandra\AppData\Local\Temp\_MEI13442\wx._core_.pyd
2014-01-29 06:09 - 2014-01-29 06:09 - 00805888 _____ () C:\Users\Sandra\AppData\Local\Temp\_MEI13442\wx._gdi_.pyd
2014-01-29 06:09 - 2014-01-29 06:09 - 00811008 _____ () C:\Users\Sandra\AppData\Local\Temp\_MEI13442\wx._windows_.pyd
2014-01-29 06:09 - 2014-01-29 06:09 - 01062400 _____ () C:\Users\Sandra\AppData\Local\Temp\_MEI13442\wx._controls_.pyd
2014-01-29 06:09 - 2014-01-29 06:09 - 00735232 _____ () C:\Users\Sandra\AppData\Local\Temp\_MEI13442\wx._misc_.pyd
2014-01-29 06:09 - 2014-01-29 06:09 - 00128512 _____ () C:\Users\Sandra\AppData\Local\Temp\_MEI13442\_elementtree.pyd
2014-01-29 06:09 - 2014-01-29 06:09 - 00127488 _____ () C:\Users\Sandra\AppData\Local\Temp\_MEI13442\pyexpat.pyd
2014-01-29 06:09 - 2014-01-29 06:09 - 00557056 _____ () C:\Users\Sandra\AppData\Local\Temp\_MEI13442\pysqlite2._sqlite.pyd
2014-01-29 06:09 - 2014-01-29 06:09 - 00087040 _____ () C:\Users\Sandra\AppData\Local\Temp\_MEI13442\_ctypes.pyd
2014-01-29 06:09 - 2014-01-29 06:09 - 00119808 _____ () C:\Users\Sandra\AppData\Local\Temp\_MEI13442\win32file.pyd
2014-01-29 06:09 - 2014-01-29 06:09 - 00108544 _____ () C:\Users\Sandra\AppData\Local\Temp\_MEI13442\win32security.pyd
2014-01-29 06:09 - 2014-01-29 06:09 - 00018432 _____ () C:\Users\Sandra\AppData\Local\Temp\_MEI13442\win32event.pyd
2014-01-29 06:09 - 2014-01-29 06:09 - 00038912 _____ () C:\Users\Sandra\AppData\Local\Temp\_MEI13442\win32inet.pyd
2014-01-29 06:09 - 2014-01-29 06:09 - 00122368 _____ () C:\Users\Sandra\AppData\Local\Temp\_MEI13442\wx._wizard.pyd
2014-01-29 06:09 - 2014-01-29 06:09 - 00026624 _____ () C:\Users\Sandra\AppData\Local\Temp\_MEI13442\_multiprocessing.pyd
2014-01-29 06:09 - 2014-01-29 06:09 - 00070656 _____ () C:\Users\Sandra\AppData\Local\Temp\_MEI13442\wx._html2.pyd
2014-01-29 06:09 - 2014-01-29 06:09 - 00010240 _____ () C:\Users\Sandra\AppData\Local\Temp\_MEI13442\select.pyd
2014-01-29 06:09 - 2014-01-29 06:09 - 00686080 _____ () C:\Users\Sandra\AppData\Local\Temp\_MEI13442\unicodedata.pyd
2014-01-29 06:09 - 2014-01-29 06:09 - 00025600 _____ () C:\Users\Sandra\AppData\Local\Temp\_MEI13442\win32pdh.pyd
2014-01-29 06:09 - 2014-01-29 06:09 - 00521680 _____ () C:\Users\Sandra\AppData\Local\Temp\_MEI13442\windows._lib_cacheinvalidation.pyd
2014-01-29 06:09 - 2014-01-29 06:09 - 00011264 _____ () C:\Users\Sandra\AppData\Local\Temp\_MEI13442\win32crypt.pyd
2014-01-29 06:09 - 2014-01-29 06:09 - 00024064 _____ () C:\Users\Sandra\AppData\Local\Temp\_MEI13442\win32pipe.pyd
2014-01-29 06:09 - 2014-01-29 06:09 - 00035840 _____ () C:\Users\Sandra\AppData\Local\Temp\_MEI13442\win32process.pyd
2014-01-29 06:09 - 2014-01-29 06:09 - 00017408 _____ () C:\Users\Sandra\AppData\Local\Temp\_MEI13442\win32profile.pyd
2014-01-29 06:09 - 2014-01-29 06:09 - 00022528 _____ () C:\Users\Sandra\AppData\Local\Temp\_MEI13442\win32ts.pyd
2012-02-20 21:29 - 2012-02-20 21:29 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2012-02-20 21:28 - 2012-02-20 21:28 - 01242472 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2013-04-22 14:39 - 2013-12-16 00:12 - 03017840 _____ () C:\Program Files (x86)\Mozilla Thunderbird\mozjs.dll
2013-04-22 14:39 - 2013-12-16 00:12 - 00158832 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll
2013-04-22 14:39 - 2013-12-16 00:12 - 00023152 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll
2009-02-26 10:45 - 2009-02-26 10:45 - 00024912 _____ () C:\Program Files (x86)\Microsoft Office\Office12\Wordcnvpxy.cnv
2010-03-03 09:49 - 2010-03-03 09:49 - 02908160 _____ () C:\Program Files (x86)\EndNote X5\xqilla22.dll
2007-10-30 18:24 - 2007-10-30 18:24 - 03002368 _____ () C:\Program Files (x86)\EndNote X5\libmysqld.dll
2011-07-26 17:06 - 2011-07-26 17:06 - 09078784 _____ () C:\Program Files\Mendeley Desktop\QtGui4.dll
2011-07-26 16:53 - 2011-07-26 16:53 - 02569216 _____ () C:\Program Files\Mendeley Desktop\QtCore4.dll
2013-12-20 11:49 - 2013-12-20 11:50 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2013-12-11 16:04 - 2013-12-11 16:04 - 16242056 _____ () C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"
==================== Faulty Device Manager Devices =============
Name: Atheros AR3011 Bluetooth 3.0 + HS Adapter
Description: Atheros AR3011 Bluetooth 3.0 + HS Adapter
Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
Manufacturer: Atheros Communications
Service: BTHUSB
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: hp DVDRAM GT31N SATA CdRom Device
Description: CD-ROM-Laufwerk
Class Guid: {4d36e965-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standard-CD-ROM-Laufwerke)
Service: cdrom
Problem: : Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19)
Resolution: A registry problem was detected.
This can occur when more than one service is defined for a device, if there is a failure opening the service subkey, or if the driver name cannot be obtained from the service subkey. Try these options:
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Click "Uninstall", and then click "Scan for hardware changes" to load a usable driver.
==================== Event log errors: =========================
Application errors:
==================
Error: (02/01/2014 09:49:24 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "x64" des "processorArchitecture"-Attributs im assemblyIdentity-Element ist ungültig.
Error: (01/31/2014 09:30:31 PM) (Source: MsiInstaller) (User: NT-AUTORITÄT)
Description: Product: Skype Click to Call -- Error 1609. An error occurred while applying security settings. Users is not a valid user or group. This could be a problem with the package, or a problem connecting to a domain controller on the network. Check your network connection and click Retry, or Cancel to end the install. Unable to locate the user's SID, system error 1332(NULL)(NULL)(NULL)(NULL)(NULL)
Error: (01/30/2014 11:52:42 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "x64" des "processorArchitecture"-Attributs im assemblyIdentity-Element ist ungültig.
Error: (01/29/2014 11:44:48 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "x64" des "processorArchitecture"-Attributs im assemblyIdentity-Element ist ungültig.
Error: (01/29/2014 06:11:13 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/27/2014 00:20:48 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "x64" des "processorArchitecture"-Attributs im assemblyIdentity-Element ist ungültig.
Error: (01/25/2014 09:08:35 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/22/2014 06:15:00 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Photoshop.exe, Version: 0.0.0.0, Zeitstempel: 0x4bbc56b6
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002e3be
ID des fehlerhaften Prozesses: 0x1718
Startzeit der fehlerhaften Anwendung: 0xPhotoshop.exe0
Pfad der fehlerhaften Anwendung: Photoshop.exe1
Pfad des fehlerhaften Moduls: Photoshop.exe2
Berichtskennung: Photoshop.exe3
Error: (01/22/2014 06:14:26 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Photoshop.exe, Version: 0.0.0.0, Zeitstempel: 0x4bbc56b6
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002e3be
ID des fehlerhaften Prozesses: 0x21f4
Startzeit der fehlerhaften Anwendung: 0xPhotoshop.exe0
Pfad der fehlerhaften Anwendung: Photoshop.exe1
Pfad des fehlerhaften Moduls: Photoshop.exe2
Berichtskennung: Photoshop.exe3
Error: (01/22/2014 06:09:59 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: WINWORD.EXE, Version: 11.0.8409.0, Zeitstempel: 0x52a8dbe1
Name des fehlerhaften Moduls: WINWORD.EXE, Version: 11.0.8409.0, Zeitstempel: 0x52a8dbe1
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000069af
ID des fehlerhaften Prozesses: 0x29a0
Startzeit der fehlerhaften Anwendung: 0xWINWORD.EXE0
Pfad der fehlerhaften Anwendung: WINWORD.EXE1
Pfad des fehlerhaften Moduls: WINWORD.EXE2
Berichtskennung: WINWORD.EXE3
System errors:
=============
Error: (01/29/2014 06:10:55 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "HP Software Framework Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (01/29/2014 06:10:55 AM) (Source: DCOM) (User: )
Description: 1053hpqwmiex{F5539356-2F02-40D4-999E-FA61F45FE12E}
Error: (01/29/2014 06:10:50 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst HP Software Framework Service erreicht.
Error: (01/29/2014 06:10:20 AM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
cdrom
Error: (01/29/2014 06:09:32 AM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am 29.01.2014 um 06:06:59 unerwartet heruntergefahren.
Error: (01/26/2014 02:50:35 PM) (Source: DCOM) (User: )
Description: {1F87137D-0E7C-44D5-8C73-4EFFB68962F2}
Error: (01/26/2014 02:50:36 PM) (Source: Disk) (User: )
Description: Das Gerät \Device\Harddisk1\DR1 ist für den Zugriff noch nicht bereit.
Error: (01/25/2014 09:08:16 PM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
cdrom
Error: (01/25/2014 09:07:31 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am 25.01.2014 um 20:28:09 unerwartet heruntergefahren.
Error: (01/25/2014 08:28:53 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst AudioEndpointBuilder erreicht.
Microsoft Office Sessions:
=========================
Error: (02/01/2014 09:49:24 AM) (Source: SideBySide)(User: )
Description: assemblyIdentityprocessorArchitecturex64c:\program files\R\r-2.14.2 neu\Tcl\bin64\tk85.dllc:\program files\R\r-2.14.2 neu\Tcl\bin64\tk85.dll9
Error: (01/31/2014 09:30:31 PM) (Source: MsiInstaller)(User: NT-AUTORITÄT)
Description: Product: Skype Click to Call -- Error 1609. An error occurred while applying security settings. Users is not a valid user or group. This could be a problem with the package, or a problem connecting to a domain controller on the network. Check your network connection and click Retry, or Cancel to end the install. Unable to locate the user's SID, system error 1332(NULL)(NULL)(NULL)(NULL)(NULL)
Error: (01/30/2014 11:52:42 AM) (Source: SideBySide)(User: )
Description: assemblyIdentityprocessorArchitecturex64c:\program files\R\r-2.14.2 neu\Tcl\bin64\tk85.dllc:\program files\R\r-2.14.2 neu\Tcl\bin64\tk85.dll9
Error: (01/29/2014 11:44:48 AM) (Source: SideBySide)(User: )
Description: assemblyIdentityprocessorArchitecturex64c:\program files\R\r-2.14.2 neu\Tcl\bin64\tk85.dllc:\program files\R\r-2.14.2 neu\Tcl\bin64\tk85.dll9
Error: (01/29/2014 06:11:13 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/27/2014 00:20:48 PM) (Source: SideBySide)(User: )
Description: assemblyIdentityprocessorArchitecturex64c:\program files\R\r-2.14.2 neu\Tcl\bin64\tk85.dllc:\program files\R\r-2.14.2 neu\Tcl\bin64\tk85.dll9
Error: (01/25/2014 09:08:35 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/22/2014 06:15:00 PM) (Source: Application Error)(User: )
Description: Photoshop.exe0.0.0.04bbc56b6ntdll.dll6.1.7601.18247521ea8e7c00000050002e3be171801cf178d0c32bed9C:\Program Files\Adobe Photoshop CS5\Photoshop.exeC:\windows\SysWOW64\ntdll.dll577cc5b4-8380-11e3-943e-e4115b307b66
Error: (01/22/2014 06:14:26 PM) (Source: Application Error)(User: )
Description: Photoshop.exe0.0.0.04bbc56b6ntdll.dll6.1.7601.18247521ea8e7c00000050002e3be21f401cf178c5d2f3448C:\Program Files\Adobe Photoshop CS5\Photoshop.exeC:\windows\SysWOW64\ntdll.dll4346cf0a-8380-11e3-943e-e4115b307b66
Error: (01/22/2014 06:09:59 PM) (Source: Application Error)(User: )
Description: WINWORD.EXE11.0.8409.052a8dbe1WINWORD.EXE11.0.8409.052a8dbe1c0000005000069af29a001cf175feb680831C:\Program Files (x86)\Microsoft Office\OFFICE11\WINWORD.EXEC:\Program Files (x86)\Microsoft Office\OFFICE11\WINWORD.EXEa3da0ebc-837f-11e3-943e-e4115b307b66
==================== Memory info ===========================
Percentage of memory in use: 46%
Total physical RAM: 7648.17 MB
Available physical RAM: 4098.17 MB
Total Pagefile: 15294.52 MB
Available Pagefile: 11242.11 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB
==================== Drives ================================
Drive c: (Festplatte) (Fixed) (Total:573.37 GB) (Free:358.93 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive e: (HP_RECOVERY) (Fixed) (Total:17.51 GB) (Free:2.65 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive f: (HP_TOOLS) (Fixed) (Total:4.98 GB) (Free:2.1 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596 GB) (Disk ID: EAD61326)
Partition 1: (Active) - (Size=300 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=573 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=18 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=5 GB) - (Type=0C)
==================== End Of Log ============================ |