FRST   
FRST Logfile:   Code:  
 Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2014 
Ran by User (administrator) on USER-HP on 11-03-2014 16:34:38 
Running from C:\Users\User\Desktop 
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard 
Internet Explorer Version 11 
Boot Mode: Normal     
==================== Processes (Whitelisted) =================   
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MsMpEng.exe 
(AMD) C:\Windows\system32\atiesrxx.exe 
(IDT, Inc.) C:\Program Files\IDT\WDM\STacSV64.exe 
(AMD) C:\Windows\system32\atieclxx.exe 
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe 
(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe 
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe 
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe 
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe 
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe 
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe 
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe 
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe 
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE 
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe 
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe 
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe 
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE 
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe 
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe 
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe 
() C:\Program Files\Hewlett-Packard\HP LaunchBox\HPTaskBar1.exe 
(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP LaunchBox\HPTaskBar2.exe 
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe 
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe 
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE 
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe 
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe 
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe 
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe 
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe 
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe 
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe 
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe 
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe 
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe 
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe 
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe 
(Microsoft Corporation) C:\Windows\system32\AUDIODG.EXE     
==================== Registry (Whitelisted) ==================   
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2837288 2011-10-14] (Synaptics Incorporated) 
HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [1128448 2011-05-27] (IDT, Inc.) 
HKLM\...\Run: [SetDefault] - C:\Program Files\Hewlett-Packard\HP LaunchBox\SetDefault.exe [43320 2011-09-30] (Hewlett-Packard Development Company, L.P.) 
HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation) 
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [343168 2011-09-28] (Advanced Micro Devices, Inc.) 
HKLM-x32\...\Run: [HPQuickWebProxy] - C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe [169528 2011-10-08] (Hewlett-Packard Company) 
HKLM-x32\...\Run: [HPOSD] - C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [379960 2011-08-19] (Hewlett-Packard Development Company, L.P.) 
HKLM-x32\...\Run: [HP Quick Launch] - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [578944 2012-03-05] (Hewlett-Packard Development Company, L.P.) 
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [54576 2009-11-18] (Hewlett-Packard) 
HKLM-x32\...\Run: [] - [X] 
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) 
HKLM\...\RunOnce: [NCPluginUpdater] - "C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" Update [21720 2014-02-25] (Hewlett-Packard) 
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1 
HKU\S-1-5-21-2832047680-3819933246-3488317097-1001\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1822400 2014-02-20] (Valve Corporation) 
HKU\S-1-5-21-2832047680-3819933246-3488317097-1001\...\Policies\system: [DisableLockWorkstation] 0 
HKU\S-1-5-21-2832047680-3819933246-3488317097-1001\...\Policies\system: [DisableChangePassword] 0   
==================== Internet (Whitelisted) ====================   
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch 
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe 
SearchScopes: HKLM - DefaultScope value is missing. 
SearchScopes: HKLM - {6C91B17E-AC61-4699-B3F2-76696F767409} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} 
SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://www.ebay.de/sch/i.html?_nkw={searchTerms} 
SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://www.ebay.de/sch/i.html?_nkw={searchTerms} 
SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://www.ebay.de/sch/i.html?_nkw={searchTerms} 
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) 
BHO: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices) 
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) 
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) 
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) 
BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard) 
BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.) 
BHO-x32: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices) 
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) 
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) 
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation) 
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) 
BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard) 
BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.) 
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation) 
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) 
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) 
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) 
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) 
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) 
Tcpip\Parameters: [DhcpNameServer] 82.212.62.62 78.42.43.62   
FireFox: 
======== 
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\gn3q4175.default-1376846484606 
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll () 
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) 
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll () 
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll No File 
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) 
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) 
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) 
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation) 
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) 
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) 
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) 
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll () 
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) 
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml 
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml 
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml 
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml 
FF Extension: NoScript - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\gn3q4175.default-1376846484606\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2013-08-18] 
FF Extension: Adblock Edge - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\gn3q4175.default-1376846484606\Extensions\{fe272bd1-5f76-4ea4-8501-a05d35d823fc}.xpi [2013-08-18] 
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2013-09-15] 
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2013-09-15]   
==================== Services (Whitelisted) =================   
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2011-09-28] (Advanced Micro Devices, Inc.) 
R2 HPAuto; C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe [682040 2011-02-16] (Hewlett-Packard) 
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation) 
S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation) 
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [4797064 2013-11-05] (INCA Internet Co., Ltd.) 
R2 OfficeSvc; C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [1907896 2013-10-31] (Microsoft Corporation) 
S2 ezSharedSvc; C:\Windows\System32\ezSharedSvcHost.exe [X]   
==================== Drivers (Whitelisted) ====================   
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) 
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation) 
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation) 
S3 clwvd; system32\DRIVERS\clwvd.sys [X]   
==================== NetSvcs (Whitelisted) ===================     
==================== One Month Created Files and Folders ========   
2014-03-11 16:34 - 2014-03-11 16:34 - 00015146 _____ () C:\Users\User\Desktop\FRST.txt 
2014-03-11 16:33 - 2014-03-11 16:34 - 00000000 ____D () C:\FRST 
2014-03-11 16:32 - 2014-03-11 16:32 - 02157056 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe 
2014-03-07 12:10 - 2014-03-07 12:10 - 00118685 _____ () C:\Users\User\Downloads\anime-%D0%9A%D1%91%D0%BA%D0%BE-%D0%B4%D0%B5%D0%B2%D0%BE%D1%87%D0%BA%D0%B0-%D0%B2%D0%BE%D0%BB%D1%88%D0%B5%D0%B1%D0%BD%D0%B8%D1%86%D0%B0-%D0%9C%D0%B0%D0%B4%D0%BE%D0%BA%D0%B0-%D0%BD%D1%8F%D1%88%D0%BA%D0%B0-280317.jpeg 
2014-02-28 22:03 - 2014-02-28 22:03 - 00000000 ___RD () C:\Program Files (x86)\Skype 
2014-02-28 22:03 - 2014-02-28 22:03 - 00000000 ____D () C:\Users\User\AppData\Local\Skype 
2014-02-24 23:09 - 2014-02-24 23:09 - 00000000 ____D () C:\Users\User\AppData\Local\{4E2FC234-3583-4D7B-85A6-B2AF5FDDB854} 
2014-02-20 17:25 - 2014-03-10 12:58 - 00000328 _____ () C:\Windows\Tasks\HPCeeScheduleForUser.job 
2014-02-17 22:34 - 2014-02-17 22:34 - 00000000 ____D () C:\Users\User\AppData\Local\{425571EE-D3C0-49DF-9C47-39441F84D998} 
2014-02-13 23:12 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 
2014-02-13 23:12 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 
2014-02-13 23:11 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 
2014-02-13 23:11 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 
2014-02-13 23:11 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 
2014-02-13 23:11 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 
2014-02-13 23:11 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 
2014-02-13 23:11 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 
2014-02-13 23:11 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 
2014-02-13 23:11 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 
2014-02-13 23:11 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 
2014-02-13 23:11 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 
2014-02-13 23:11 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 
2014-02-13 23:11 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 
2014-02-13 23:11 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 
2014-02-13 23:11 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 
2014-02-13 23:11 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 
2014-02-13 23:11 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 
2014-02-13 23:11 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 
2014-02-13 23:11 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 
2014-02-13 23:11 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 
2014-02-13 23:11 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 
2014-02-13 23:11 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 
2014-02-13 23:11 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 
2014-02-13 23:11 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 
2014-02-13 23:11 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 
2014-02-13 23:11 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 
2014-02-13 23:11 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 
2014-02-13 23:11 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 
2014-02-13 23:11 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 
2014-02-13 23:11 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 
2014-02-13 23:11 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 
2014-02-13 23:11 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 
2014-02-13 23:11 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 
2014-02-13 23:11 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 
2014-02-13 23:11 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 
2014-02-13 23:11 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 
2014-02-13 23:11 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 
2014-02-13 23:11 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 
2014-02-13 23:11 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 
2014-02-13 23:11 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 
2014-02-13 21:54 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls 
2014-02-13 21:54 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls 
2014-02-13 21:54 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 
2014-02-13 21:54 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 
2014-02-13 21:54 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 
2014-02-13 21:54 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll 
2014-02-13 21:53 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 
2014-02-13 21:53 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 
2014-02-13 21:53 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll 
2014-02-13 21:53 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll 
2014-02-13 21:53 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll 
2014-02-13 21:53 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll 
2014-02-13 21:53 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll 
2014-02-13 21:53 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe 
2014-02-13 21:53 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe 
2014-02-13 21:53 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe 
2014-02-13 21:53 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe 
2014-02-13 21:53 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll 
2014-02-13 21:53 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll 
2014-02-13 21:53 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll 
2014-02-13 21:53 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll 
2014-02-13 21:53 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll 
2014-02-13 21:53 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe 
2014-02-13 21:53 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe 
2014-02-13 21:53 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe 
2014-02-13 21:53 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe 
2014-02-13 21:53 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 
2014-02-13 21:53 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll   
==================== One Month Modified Files and Folders =======   
2014-03-11 16:34 - 2014-03-11 16:34 - 00015146 _____ () C:\Users\User\Desktop\FRST.txt 
2014-03-11 16:34 - 2014-03-11 16:33 - 00000000 ____D () C:\FRST 
2014-03-11 16:32 - 2014-03-11 16:32 - 02157056 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe 
2014-03-11 16:27 - 2013-10-09 14:29 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 
2014-03-11 16:24 - 2009-07-14 05:45 - 00031856 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 
2014-03-11 16:24 - 2009-07-14 05:45 - 00031856 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 
2014-03-11 16:22 - 2011-12-25 00:50 - 01981046 _____ () C:\Windows\WindowsUpdate.log 
2014-03-11 16:18 - 2014-01-07 21:09 - 00000000 ____D () C:\Program Files (x86)\Steam 
2014-03-11 16:17 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 
2014-03-11 16:17 - 2009-07-14 05:51 - 00086424 _____ () C:\Windows\setupact.log 
2014-03-10 23:03 - 2012-09-28 16:04 - 00000000 ____D () C:\Users\User\AppData\Roaming\Skype 
2014-03-10 17:25 - 2012-09-28 11:19 - 00003922 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{E0AEB7FD-8237-4390-AE58-8FF228E66C39} 
2014-03-10 16:43 - 2012-10-23 17:46 - 00000000 ____D () C:\Users\User\Desktop\Bilder Wanderung 23.09.2012 
2014-03-10 16:29 - 2011-10-23 00:15 - 00700118 _____ () C:\Windows\system32\perfh007.dat 
2014-03-10 16:29 - 2011-10-23 00:15 - 00149968 _____ () C:\Windows\system32\perfc007.dat 
2014-03-10 16:29 - 2009-07-14 06:13 - 01622164 _____ () C:\Windows\system32\PerfStringBackup.INI 
2014-03-10 12:58 - 2014-02-20 17:25 - 00000328 _____ () C:\Windows\Tasks\HPCeeScheduleForUser.job 
2014-03-10 00:13 - 2013-11-14 16:11 - 00000000 ____D () C:\Users\User\AppData\Local\PMB Files 
2014-03-10 00:13 - 2013-11-14 16:11 - 00000000 ____D () C:\ProgramData\PMB Files 
2014-03-09 10:50 - 2013-07-27 15:37 - 00000000 _____ () C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt 
2014-03-09 10:50 - 2012-10-01 07:52 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log 
2014-03-07 12:10 - 2014-03-07 12:10 - 00118685 _____ () C:\Users\User\Downloads\anime-%D0%9A%D1%91%D0%BA%D0%BE-%D0%B4%D0%B5%D0%B2%D0%BE%D1%87%D0%BA%D0%B0-%D0%B2%D0%BE%D0%BB%D1%88%D0%B5%D0%B1%D0%BD%D0%B8%D1%86%D0%B0-%D0%9C%D0%B0%D0%B4%D0%BE%D0%BA%D0%B0-%D0%BD%D1%8F%D1%88%D0%BA%D0%B0-280317.jpeg 
2014-03-06 22:39 - 2011-12-25 10:42 - 00000000 ___RD () C:\Users\Public\Recorded TV 
2014-03-06 00:59 - 2013-03-31 11:52 - 00003216 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForUSER-HP$ 
2014-03-06 00:59 - 2013-03-31 11:52 - 00000340 _____ () C:\Windows\Tasks\HPCeeScheduleForUSER-HP$.job 
2014-03-04 21:24 - 2012-09-28 11:49 - 00000000 ____D () C:\Users\User\AppData\Local\CrashDumps 
2014-02-28 22:03 - 2014-02-28 22:03 - 00000000 ___RD () C:\Program Files (x86)\Skype 
2014-02-28 22:03 - 2014-02-28 22:03 - 00000000 ____D () C:\Users\User\AppData\Local\Skype 
2014-02-28 22:03 - 2011-10-22 15:10 - 00000000 ____D () C:\ProgramData\Skype 
2014-02-27 13:01 - 2011-12-25 00:59 - 01596444 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 
2014-02-27 09:17 - 2010-11-21 04:47 - 00652170 _____ () C:\Windows\PFRO.log 
2014-02-26 15:47 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 
2014-02-24 23:09 - 2014-02-24 23:09 - 00000000 ____D () C:\Users\User\AppData\Local\{4E2FC234-3583-4D7B-85A6-B2AF5FDDB854} 
2014-02-21 19:28 - 2013-10-09 14:29 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 
2014-02-21 19:28 - 2013-10-09 14:29 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 
2014-02-21 19:28 - 2013-10-09 14:29 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 
2014-02-17 22:34 - 2014-02-17 22:34 - 00000000 ____D () C:\Users\User\AppData\Local\{425571EE-D3C0-49DF-9C47-39441F84D998} 
2014-02-17 00:51 - 2013-07-15 06:49 - 00000000 ____D () C:\Windows\system32\MRT 
2014-02-17 00:49 - 2012-09-28 16:04 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 
2014-02-16 19:00 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache 
2014-02-16 09:16 - 2013-07-10 15:07 - 00000910 _____ () C:\DelFix.txt 
2014-02-15 10:54 - 2013-07-10 14:36 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 
2014-02-11 20:07 - 2013-10-28 22:00 - 00000003 _____ () C:\Windows\system32\HRUPPROG.TXT   
==================== Bamital & volsnap Check =================   
C:\Windows\System32\winlogon.exe => MD5 is legit 
C:\Windows\System32\wininit.exe => MD5 is legit 
C:\Windows\SysWOW64\wininit.exe => MD5 is legit 
C:\Windows\explorer.exe => MD5 is legit 
C:\Windows\SysWOW64\explorer.exe => MD5 is legit 
C:\Windows\System32\svchost.exe => MD5 is legit 
C:\Windows\SysWOW64\svchost.exe => MD5 is legit 
C:\Windows\System32\services.exe => MD5 is legit 
C:\Windows\System32\User32.dll => MD5 is legit 
C:\Windows\SysWOW64\User32.dll => MD5 is legit 
C:\Windows\System32\userinit.exe => MD5 is legit 
C:\Windows\SysWOW64\userinit.exe => MD5 is legit 
C:\Windows\System32\rpcss.dll => MD5 is legit 
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit     
LastRegBack: 2014-03-10 13:48   
==================== End Of Log ============================   --- --- ---   
Addition    Code:  
 Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-03-2014 
Ran by User at 2014-03-11 16:35:37 
Running from C:\Users\User\Desktop 
Boot Mode: Normal 
==========================================================     
==================== Security Center ========================   
AV: Microsoft Security Essentials (Disabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F} 
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} 
AS: Microsoft Security Essentials (Disabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}   
==================== Installed Programs ======================   
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden 
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.70 - Adobe Systems Incorporated) 
Adobe Shockwave Player 11.6 (HKLM-x32\...\Adobe Shockwave Player) (Version: 11.6.1.629 - Adobe Systems, Inc.) 
AMD APP SDK Runtime (Version: 2.5.775.2 - Advanced Micro Devices Inc.) Hidden 
AMD Catalyst Install Manager (HKLM\...\{ACD449FA-9DF3-779D-DA68-11D486963225}) (Version: 3.0.847.0 - Advanced Micro Devices, Inc.) 
AMD Fuel (Version: 2011.0928.607.9079 - Ihr Firmenname) Hidden 
AMD Media Foundation Decoders (Version: 1.0.60928.0618 - Advanced Micro Devices, Inc.) Hidden 
AMD Steady Video Plug-In  (Version: 1.00.0000 - AMD) Hidden 
AMD System Monitor (HKLM-x32\...\{6EFD0C42-4CC1-4716-A0CA-21C1A062CF34}) (Version: 1.0.9 - Advanced Micro Devices, Inc.) 
AMD VISION Engine Control Center (x32 Version: 2011.0928.607.9079 - Ihr Firmenname) Hidden 
B110 (x32 Version: 140.0.283.000 - Hewlett-Packard) Hidden 
Bejeweled 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden 
BufferChm (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden 
Cake Mania (x32 Version: 2.2.0.98 - WildTangent) Hidden 
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden 
Catalyst Control Center Graphics Previews Common (x32 Version: 2011.0928.607.9079 - Advanced Micro Devices, Inc.) Hidden 
Catalyst Control Center InstallProxy (x32 Version: 2011.0928.607.9079 - Advanced Micro Devices, Inc.) Hidden 
Catalyst Control Center Localization All (x32 Version: 2011.0928.607.9079 - Advanced Micro Devices, Inc.) Hidden 
CCC Help Chinese Standard (x32 Version: 2011.0928.0606.9079 - Advanced Micro Devices, Inc.) Hidden 
CCC Help Chinese Traditional (x32 Version: 2011.0928.0606.9079 - Advanced Micro Devices, Inc.) Hidden 
CCC Help Czech (x32 Version: 2011.0928.0606.9079 - Advanced Micro Devices, Inc.) Hidden 
CCC Help Danish (x32 Version: 2011.0928.0606.9079 - Advanced Micro Devices, Inc.) Hidden 
CCC Help Dutch (x32 Version: 2011.0928.0606.9079 - Advanced Micro Devices, Inc.) Hidden 
CCC Help English (x32 Version: 2011.0928.0606.9079 - Advanced Micro Devices, Inc.) Hidden 
CCC Help Finnish (x32 Version: 2011.0928.0606.9079 - Advanced Micro Devices, Inc.) Hidden 
CCC Help French (x32 Version: 2011.0928.0606.9079 - Advanced Micro Devices, Inc.) Hidden 
CCC Help German (x32 Version: 2011.0928.0606.9079 - Advanced Micro Devices, Inc.) Hidden 
CCC Help Greek (x32 Version: 2011.0928.0606.9079 - Advanced Micro Devices, Inc.) Hidden 
CCC Help Hungarian (x32 Version: 2011.0928.0606.9079 - Advanced Micro Devices, Inc.) Hidden 
CCC Help Italian (x32 Version: 2011.0928.0606.9079 - Advanced Micro Devices, Inc.) Hidden 
CCC Help Japanese (x32 Version: 2011.0928.0606.9079 - Advanced Micro Devices, Inc.) Hidden 
CCC Help Korean (x32 Version: 2011.0928.0606.9079 - Advanced Micro Devices, Inc.) Hidden 
CCC Help Norwegian (x32 Version: 2011.0928.0606.9079 - Advanced Micro Devices, Inc.) Hidden 
CCC Help Polish (x32 Version: 2011.0928.0606.9079 - Advanced Micro Devices, Inc.) Hidden 
CCC Help Portuguese (x32 Version: 2011.0928.0606.9079 - Advanced Micro Devices, Inc.) Hidden 
CCC Help Russian (x32 Version: 2011.0928.0606.9079 - Advanced Micro Devices, Inc.) Hidden 
CCC Help Spanish (x32 Version: 2011.0928.0606.9079 - Advanced Micro Devices, Inc.) Hidden 
CCC Help Swedish (x32 Version: 2011.0928.0606.9079 - Advanced Micro Devices, Inc.) Hidden 
CCC Help Thai (x32 Version: 2011.0928.0606.9079 - Advanced Micro Devices, Inc.) Hidden 
CCC Help Turkish (x32 Version: 2011.0928.0606.9079 - Advanced Micro Devices, Inc.) Hidden 
ccc-utility64 (Version: 2011.0928.607.9079 - Advanced Micro Devices, Inc.) Hidden 
Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden 
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.) 
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.) 
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.) 
Cradle of Rome 2 (x32 Version: 2.2.0.98 - WildTangent) Hidden 
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden 
Destinations (x32 Version: 140.0.77.000 - Hewlett-Packard) Hidden 
DeviceDiscovery (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden 
ESU for Microsoft Windows 7 SP1 (HKLM-x32\...\{E96CAA2A-0244-4A2A-8403-0C3C9534778B}) (Version: 2.1.1 - Hewlett-Packard) 
Evernote v. 4.2.3 (HKLM-x32\...\{F761359C-9CED-45AE-9A51-9D6605CD55C4}) (Version: 4.2.3.22 - Evernote Corp.) 
Farm Frenzy (x32 Version: 2.2.0.98 - WildTangent) Hidden 
Farmscapes (x32 Version: 2.2.0.98 - WildTangent) Hidden 
FATE (x32 Version: 2.2.0.97 - WildTangent) Hidden 
Final Drive Fury (x32 Version: 2.2.0.95 - WildTangent) Hidden 
Fishdom (TM) 2 (x32 Version: 2.2.0.98 - WildTangent) Hidden 
GPBaseService2 (x32 Version: 140.0.211.000 - Hewlett-Packard) Hidden 
Hewlett-Packard ACLM.NET v1.2.2.3 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden 
Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios) 
HP Auto (Version: 1.0.12935.3667 - Hewlett-Packard Company) Hidden 
HP Client Services (Version: 1.1.12938.3539 - Hewlett-Packard) Hidden 
HP Customer Experience Enhancements (x32 Version: 6.0.1.8 - Hewlett-Packard) Hidden 
HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP) 
HP Documentation (HKLM-x32\...\{3D5C7E0E-AEC0-40EB-99D3-C40469738040}) (Version: 1.1.0.0 - Hewlett-Packard) 
HP Games (HKLM-x32\...\WildTangent hp Master Uninstall) (Version: 1.0.2.5 - WildTangent) 
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP) 
HP Launch Box (HKLM\...\{BF1E75D0-E7AF-4BEA-9FBC-567F0C54BDF9}) (Version: 1.0.12 - Hewlett-Packard Company) 
HP On Screen Display (HKLM-x32\...\{ED1BD69A-07E3-418C-91F1-D856582581BF}) (Version: 1.3.5 - Hewlett-Packard Company) 
HP Photosmart Wireless B110 All-In-One Driver Software 14.0 Rel. 7 (HKLM\...\{59C83C08-63F4-4AEC-81D6-392C5E23B843}) (Version: 14.0 - HP) 
HP Power Manager (HKLM-x32\...\{D8BCE5B9-67CF-4F3F-93AE-3ACC754C72EB}) (Version: 1.4.7 - Hewlett-Packard Company) 
HP Quick Launch (HKLM-x32\...\{53B17A98-5BF0-40BC-AAFF-850A357975AC}) (Version: 2.7.2 - Hewlett-Packard Company) 
HP QuickWeb (HKLM-x32\...\{BB4FC2AD-DF12-4EE1-8AA7-2C0A26B5E2FB}) (Version: 3.1.1.10197 - Hewlett-Packard Company) 
HP Recovery Manager (x32 Version: 2.0.0 - Hewlett-Packard) Hidden 
HP Security Assistant (HKLM\...\{ED6CD3AC-616B-4B20-BCF3-6E637B92A5AD}) (Version: 3.0.4 - Hewlett-Packard Company) 
HP Setup (HKLM-x32\...\{F5E7D9AF-60F6-4A30-87E3-4EA94D322CE1}) (Version: 9.0.15076.3891 - Hewlett-Packard Company) 
HP Setup Manager (HKLM-x32\...\{AE856388-AFAD-4753-81DF-D96B19D0A17C}) (Version: 1.2.14901.3869 - Hewlett-Packard Company) 
HP Smart Web Printing 4.60 (HKLM\...\HP Smart Web Printing) (Version: 4.60 - HP) 
HP Software Framework (HKLM-x32\...\{483539DB-FA71-4C45-8438-55D3DCFDECC8}) (Version: 4.5.10.1 - Hewlett-Packard Company) 
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP) 
HP Support Assistant (HKLM-x32\...\{E35A3B13-78CD-4967-8AC8-AA9FDA693EDE}) (Version: 7.4.45.4 - Hewlett-Packard Company) 
HP Update (HKLM-x32\...\{74DC0593-6BC6-4001-AD5F-D810AFB68D86}) (Version: 5.002.002.002 - Hewlett-Packard) 
HPAppStudio (x32 Version: 140.0.95.000 - Hewlett-Packard) Hidden 
HPPhotoGadget (x32 Version: 140.0.524.000 - Hewlett-Packard) Hidden 
HPProductAssistant (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden 
HPSSupply (x32 Version: 140.0.211.000 - Hewlett-Packard) Hidden 
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6341.0 - IDT) 
Insaniquarium Deluxe (x32 Version: 2.2.0.97 - WildTangent) Hidden 
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.510 - Oracle) 
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden 
Jewel Match 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden 
Jewel Quest II (x32 Version: 2.2.0.97 - WildTangent) Hidden 
Jewel Quest Solitaire 2 (x32 Version: 2.2.0.98 - WildTangent) Hidden 
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden 
League of Legends (HKLM-x32\...\League of Legends 3.0.0) (Version: 3.0.0 - Riot Games) 
League of Legends (x32 Version: 3.0.0 - Riot Games) Hidden 
Mahjongg Artifacts (x32 Version: 2.2.0.95 - WildTangent) Hidden 
Malwarebytes Anti-Malware Version 1.75.0.1300 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation) 
MarketResearch (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden 
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden 
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) 
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden 
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden 
Microsoft Office Home and Student 2013 - de-de (HKLM\...\HomeStudentRetail - de-de) (Version: 15.0.4551.1512 - Microsoft Corporation) 
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation) 
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden 
Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.5139.5005 - Microsoft Corporation) 
Microsoft Security Client (Version: 4.4.0304.0 - Microsoft Corporation) Hidden 
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.4.304.0 - Microsoft Corporation) 
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20913.0 - Microsoft Corporation) 
Microsoft SkyDrive (HKCU\...\SkyDriveSetup.exe) (Version: 17.0.2015.0811 - Microsoft Corporation) 
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) 
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) 
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) 
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) 
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) 
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) 
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) 
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) 
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) 
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) 
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation) 
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) 
Mozilla Firefox 27.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 27.0.1 (x86 de)) (Version: 27.0.1 - Mozilla) 
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden 
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden 
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) 
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) 
Mystery of Mortlake Mansion (x32 Version: 2.2.0.98 - WildTangent) Hidden 
Network64 (Version: 140.0.215.000 - Hewlett-Packard) Hidden 
Network64 (Version: 140.0.221.000 - Hewlett-Packard) Hidden 
NVIDIA PhysX (HKLM-x32\...\{64467D47-FFE4-4FBC-ABBA-A0DB829A17EB}) (Version: 9.12.0613 - NVIDIA Corporation) 
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4551.1512 - Microsoft Corporation) Hidden 
Office 15 Click-to-Run Licensing Component (Version: 15.0.4551.1512 - Microsoft Corporation) Hidden 
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4551.1512 - Microsoft Corporation) Hidden 
opensource (x32 Version: 1.0.14960.3876 - Your Company Name) Hidden 
Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.7 - Pando Networks Inc.) 
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden 
Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden 
PS_AIO_07_B110_SW_Min (x32 Version: 140.0.142.000 - Hewlett-Packard) Hidden 
QuickTransfer (x32 Version: 140.0.98.000 - Hewlett-Packard) Hidden 
RaiderZ (HKLM-x32\...\RaiderZ) (Version:  - Perfect World Entertainment) 
Ranch Rush 2 - Premium Edition (x32 Version: 2.2.0.98 - WildTangent) Hidden 
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.40.126.2011 - Realtek) 
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.7601.83 - Realtek Semiconductor Corp.) 
REALTEK Wireless LAN Driver (HKLM-x32\...\{9D3D8C60-A55F-4123-B2B9-173F09590E16}) (Version: 1.00.11.0706 - REALTEK Semiconductor Corp.) 
Scan (x32 Version: 140.0.80.000 - Hewlett-Packard) Hidden 
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP) 
Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.) 
SmartWebPrinting (x32 Version: 140.0.186.000 - Hewlett-Packard) Hidden 
Smite (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF017}) (Version: 0.1.1989.3 - Hi-Rez Studios) 
SolutionCenter (x32 Version: 140.0.214.000 - Hewlett-Packard) Hidden 
Status (x32 Version: 140.0.256.000 - Hewlett-Packard) Hidden 
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation) 
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden 
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.3.29.0 - Synaptics Incorporated) 
TeamSpeak 3 Client (HKCU\...\TeamSpeak 3 Client) (Version: 3.0.13 - TeamSpeak Systems GmbH) 
Toolbox (x32 Version: 140.0.428.000 - Hewlett-Packard) Hidden 
Torchlight (x32 Version: 2.2.0.98 - WildTangent) Hidden 
TrayApp (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden 
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden 
Virtual Families (x32 Version: 2.2.0.98 - WildTangent) Hidden 
Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.98 - WildTangent) Hidden 
WebReg (x32 Version: 140.0.212.017 - Hewlett-Packard) Hidden 
Wedding Dash (x32 Version: 2.2.0.95 - WildTangent) Hidden 
WildTangent Games App (HP Games) (x32 Version: 4.0.5.32 - WildTangent) Hidden 
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden 
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation) 
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden 
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden 
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden 
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden 
Windows Live Language Selector (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden 
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden 
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden 
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation) 
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation) 
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden 
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden 
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden 
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden 
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden 
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden 
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden 
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden 
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden 
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden 
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden 
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden 
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden 
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden 
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden 
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden 
Zuma's Revenge (x32 Version: 2.2.0.98 - WildTangent) Hidden   
==================== Restore Points  =========================   
25-02-2014 15:11:00 Windows Update 
26-02-2014 22:18:00 Windows Update 
27-02-2014 12:00:12 Windows Update 
03-03-2014 07:11:50 Windows Update 
06-03-2014 15:09:57 Windows Update 
10-03-2014 12:47:27 Windows Update   
==================== Hosts content: ==========================   
2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts   
==================== Scheduled Tasks (whitelisted) =============   
Task: {09693D7C-59EF-4D52-91EF-BF33EC4BC708} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [2013-10-31] (Microsoft Corporation) 
Task: {0BB69D92-D20B-49F3-A8DA-C6FE516773AD} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-11-04] (Hewlett-Packard Company) 
Task: {1DDE52D0-0331-43AC-A3C3-BC6CF74EC2B4} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Warranty Opt-In(Yes) => c:\program files (x86)\hewlett-packard\hp health check\activecheck\product_line\Detection_PostWarrantyAlert.exe [2014-01-14] (Hewlett-Packard) 
Task: {1FB507A4-62A5-4FC8-A6DD-871BA3FFC6E5} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Warranty Opt-In(No) => c:\program files (x86)\hewlett-packard\hp health check\activecheck\product_line\Detection_PostWarrantyAlert.exe [2014-01-14] (Hewlett-Packard) 
Task: {5C916B34-BFCB-4EF6-939E-AC655304D4D1} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-11-04] (Hewlett-Packard Company) 
Task: {9EC4BC0F-7D9D-40B7-AC28-8CC09DD5E067} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2013-12-12] (Hewlett-Packard Company) 
Task: {9EE9FD04-AA7B-462A-86F9-098B53BD1ACF} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2014-02-10] (Hewlett-Packard) 
Task: {A5BF2F0E-2405-4841-A1AB-DDA631843549} - System32\Tasks\HPCeeScheduleForUser => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15] (Hewlett-Packard) 
Task: {A6E93F32-6405-4ED3-A81C-72BB4ED89083} - System32\Tasks\HPCeeScheduleForUSER-HP$ => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15] (Hewlett-Packard) 
Task: {BF9A3A95-EAF5-4776-A65C-A3E46A7407E2} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-21] (Adobe Systems Incorporated) 
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe 
Task: C:\Windows\Tasks\HPCeeScheduleForUSER-HP$.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe 
Task: C:\Windows\Tasks\HPCeeScheduleForUser.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe   
==================== Loaded Modules (whitelisted) =============   
2013-10-30 09:31 - 2013-08-23 14:45 - 00386216 _____ () C:\Program Files\Microsoft Office 15\ClientX64\c2rui.dll 
2013-10-30 09:31 - 2013-10-31 09:08 - 00520872 _____ () C:\Program Files\Microsoft Office 15\ClientX64\c2r64.dll 
2013-10-30 09:31 - 2013-10-31 09:07 - 00618152 _____ () C:\Program Files\Microsoft Office 15\ClientX64\StreamServer.dll 
2011-09-30 09:40 - 2011-09-30 09:40 - 00107320 _____ () C:\Program Files\Hewlett-Packard\HP LaunchBox\HPTaskBar1.exe 
2011-09-28 06:19 - 2011-09-28 06:19 - 00103424 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll 
2011-09-28 06:06 - 2011-09-28 06:06 - 00369152 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll 
2011-06-17 13:42 - 2011-06-17 13:42 - 00016384 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll   
==================== Alternate Data Streams (whitelisted) =========     
==================== Safe Mode (whitelisted) ===================     
==================== Disabled items from MSCONFIG ==============     
==================== Faulty Device Manager Devices =============   
Name: Realtek RTL8188CE 802.11b/g/n WiFi Adapter 
Description: Realtek RTL8188CE 802.11b/g/n WiFi Adapter 
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} 
Manufacturer: Realtek Semiconductor Corp. 
Service: RTL8192Ce 
Problem: : This device is disabled. (Code 22) 
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.     
==================== Event log errors: =========================   
Application errors: 
================== 
Error: (03/11/2014 04:18:05 PM) (Source: Steam Client Service) (User: ) 
Description: Error: Failed to poke open firewall   
Error: (03/11/2014 04:17:58 PM) (Source: WinMgmt) (User: ) 
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003   
Error: (03/10/2014 09:20:30 PM) (Source: Steam Client Service) (User: ) 
Description: Error: Failed to poke open firewall   
Error: (03/10/2014 09:20:23 PM) (Source: WinMgmt) (User: ) 
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003   
Error: (03/10/2014 09:16:59 PM) (Source: Application Error) (User: ) 
Description: Name der fehlerhaften Anwendung: SearchIndexer.exe, Version: 7.0.7601.17610, Zeitstempel: 0x4dc0d019 
Name des fehlerhaften Moduls: kernel32.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1676 
Ausnahmecode: 0xc0000005 
Fehleroffset: 0x000000000002b157 
ID des fehlerhaften Prozesses: 0xde0 
Startzeit der fehlerhaften Anwendung: 0xSearchIndexer.exe0 
Pfad der fehlerhaften Anwendung: SearchIndexer.exe1 
Pfad des fehlerhaften Moduls: SearchIndexer.exe2 
Berichtskennung: SearchIndexer.exe3   
Error: (03/10/2014 09:15:37 PM) (Source: Application Error) (User: ) 
Description: Name der fehlerhaften Anwendung: svchost.exe_netprofm, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc3c1 
Name des fehlerhaften Moduls: IPHLPAPI.DLL, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7c6da 
Ausnahmecode: 0xc0000005 
Fehleroffset: 0x0000000000001741 
ID des fehlerhaften Prozesses: 0x188 
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe_netprofm0 
Pfad der fehlerhaften Anwendung: svchost.exe_netprofm1 
Pfad des fehlerhaften Moduls: svchost.exe_netprofm2 
Berichtskennung: svchost.exe_netprofm3   
Error: (03/10/2014 00:58:51 PM) (Source: Steam Client Service) (User: ) 
Description: Error: Failed to poke open firewall   
Error: (03/10/2014 00:58:45 PM) (Source: WinMgmt) (User: ) 
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003   
Error: (03/09/2014 10:39:06 AM) (Source: Steam Client Service) (User: ) 
Description: Error: Failed to poke open firewall   
Error: (03/09/2014 10:38:58 AM) (Source: WinMgmt) (User: ) 
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003     
System errors: 
============= 
Error: (03/11/2014 04:17:40 PM) (Source: Service Control Manager) (User: ) 
Description: Der Dienst "Easybits Services for Windows" wurde aufgrund folgenden Fehlers nicht gestartet:  
%%2   
Error: (03/10/2014 09:19:54 PM) (Source: Service Control Manager) (User: ) 
Description: Der Dienst "Easybits Services for Windows" wurde aufgrund folgenden Fehlers nicht gestartet:  
%%2   
Error: (03/10/2014 09:19:33 PM) (Source: EventLog) (User: ) 
Description: Das System wurde zuvor am 10.03.2014 um 21:16:27 unerwartet heruntergefahren.   
Error: (03/10/2014 09:17:44 PM) (Source: Service Control Manager) (User: ) 
Description: Der Dienst "SSTP-Dienst" wurde aufgrund folgenden Fehlers nicht gestartet:  
%%1069   
Error: (03/10/2014 09:17:44 PM) (Source: Service Control Manager) (User: ) 
Description: Der Dienst "SstpSvc" konnte sich nicht als "NT Authority\LocalService" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:  
%%1722   
Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).   
Error: (03/10/2014 09:17:44 PM) (Source: Service Control Manager) (User: ) 
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Netzwerkspeicher-Schnittstellendienst" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler:  
%%1056   
Error: (03/10/2014 09:17:33 PM) (Source: Service Control Manager) (User: ) 
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet:  
%%1069   
Error: (03/10/2014 09:17:33 PM) (Source: Service Control Manager) (User: ) 
Description: Der Dienst "WSearch" konnte sich nicht als "NT AUTHORITY\SYSTEM" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:  
%%1722   
Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).   
Error: (03/10/2014 09:17:24 PM) (Source: Service Control Manager) (User: ) 
Description: Der Dienst "TCP/IP-NetBIOS-Hilfsdienst" wurde aufgrund folgenden Fehlers nicht gestartet:  
%%1069   
Error: (03/10/2014 09:17:24 PM) (Source: Service Control Manager) (User: ) 
Description: Der Dienst "lmhosts" konnte sich nicht als "NT AUTHORITY\LocalService" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:  
%%1722   
Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).     
Microsoft Office Sessions: 
========================= 
Error: (03/11/2014 04:18:05 PM) (Source: Steam Client Service)(User: ) 
Description: Failed to poke open firewall   
Error: (03/11/2014 04:17:58 PM) (Source: WinMgmt)(User: ) 
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003   
Error: (03/10/2014 09:20:30 PM) (Source: Steam Client Service)(User: ) 
Description: Failed to poke open firewall   
Error: (03/10/2014 09:20:23 PM) (Source: WinMgmt)(User: ) 
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003   
Error: (03/10/2014 09:16:59 PM) (Source: Application Error)(User: ) 
Description: SearchIndexer.exe7.0.7601.176104dc0d019kernel32.dll6.1.7601.1822951fb1676c0000005000000000002b157de001cf3c5811fa34dbC:\Windows\system32\SearchIndexer.exeC:\Windows\system32\kernel32.dllef01fc7b-a890-11e3-9550-80c16e3d2d04   
Error: (03/10/2014 09:15:37 PM) (Source: Application Error)(User: ) 
Description: svchost.exe_netprofm6.1.7600.163854a5bc3c1IPHLPAPI.DLL6.1.7601.175144ce7c6dac0000005000000000000174118801cf3c580956885dC:\Windows\system32\svchost.exec:\windows\system32\IPHLPAPI.DLLbdeae448-a890-11e3-9550-80c16e3d2d04   
Error: (03/10/2014 00:58:51 PM) (Source: Steam Client Service)(User: ) 
Description: Failed to poke open firewall   
Error: (03/10/2014 00:58:45 PM) (Source: WinMgmt)(User: ) 
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003   
Error: (03/09/2014 10:39:06 AM) (Source: Steam Client Service)(User: ) 
Description: Failed to poke open firewall   
Error: (03/09/2014 10:38:58 AM) (Source: WinMgmt)(User: ) 
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003     
==================== Memory info ===========================    
Percentage of memory in use: 25% 
Total physical RAM: 5609.41 MB 
Available physical RAM: 4163.9 MB 
Total Pagefile: 11216.99 MB 
Available Pagefile: 9548.4 MB 
Total Virtual: 8192 MB 
Available Virtual: 8191.81 MB   
==================== Drives ================================   
Drive c: () (Fixed) (Total:441.08 GB) (Free:375.78 GB) NTFS ==>[System with boot components (obtained from reading drive)] 
Drive d: (Recovery) (Fixed) (Total:20.52 GB) (Free:2.19 GB) NTFS ==>[System with boot components (obtained from reading drive)] 
Drive e: (HP_TOOLS) (Fixed) (Total:3.96 GB) (Free:1.08 GB) FAT32   
==================== MBR & Partition Table ==================   
======================================================== 
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 43BE8158) 
Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS) 
Partition 2: (Not Active) - (Size=441 GB) - (Type=07 NTFS) 
Partition 3: (Not Active) - (Size=21 GB) - (Type=07 NTFS) 
Partition 4: (Not Active) - (Size=4 GB) - (Type=0C)   
==================== End Of Log ============================   Huhu schrauber =) 
Na dann hoffentlich nur eine Kleinigkeit.  
Der Scan ging ungewöhnlich schnell, ca 5 Minuten. Sonst ging der  ca eine Stunde oder länger. Hatte das Gefühl da wurde diesmal einiges ausgelassen o.o  
lg Isei    |