Windows 8 Sperrbildschirm "Interpol"

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013
Ran by SYSTEM on MININT-3ADNFCU on 10-10-2013 15:51:27
Running from D:\
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Recovery

The current controlset is ControlSet001
ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log.

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-10] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1212048 2012-06-07] (Realtek Semiconductor)
HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2873744 2013-03-12] (ELAN Microelectronics Corp.)
HKLM\...\Run: [BtPreLoad] - "C:\Program Files (x86)\Bluetooth Suite\BtPreLoad.exe"
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] - C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [132736 2013-01-28] ( (Atheros Communications))
HKLM-x32\...\Run: [BakupManagerTray] - C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [533568 2012-08-22] (NTI Corporation)
HKLM-x32\...\Run: [Dolby Home Theater v4] - C:\Dolby PCEE4\pcee4.exe [508256 2012-04-22] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [LManager] - [x]
HKLM-x32\...\Run: [Norton Online Backup] - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [2995904 2012-07-10] (Symantec Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-26] (Microsoft Corporation)
HKLM-x32\...\Run: [PDFPrint] - C:\Program Files (x86)\PDF24\pdf24.exe [162856 2013-07-22] (Geek Software GmbH)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2010-03-17] (Apple Inc.)
HKU\Anja\...\Run: [AcerCloud] - C:\Program Files (x86)\Acer\Acer Cloud\acpanel_win.exe [11064904 2013-01-24] (Acer Incorporated)
HKU\Anja\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2013-03-06] (Google Inc.)
HKU\Anja\...\Run: [Spotify Web Helper] - C:\Users\Anja\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1104384 2013-08-30] (Spotify Ltd)
HKU\Anja\...\Run: [Sony PC Companion] - C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [449248 2013-05-29] (Sony)
HKU\Anja\...\Run: [isCNoWgFrx.exe] - C:\Users\Anja\AppData\Local\abspPPDUN\isCNoWgFrx.exe [111472 2013-10-10] (Microsoft Corporation)
HKU\Anja\...\Winlogon: [Shell] cmd.exe [404992 2012-07-25] (Microsoft Corporation) <==== ATTENTION 
HKU\Anja\...\Command Processor: "C:\Users\Anja\AppData\Local\abspPPDUN\isCNoWgFrx.exe" <===== ATTENTION!
HKU\Default\...\RunOnce: [RegAutoPlay] - C:\Program Files (x86)\Acer\clear.fi Media\RegAutoplay.exe [1845392 2012-07-20] (Acer Incorporated)
HKU\Default User\...\RunOnce: [RegAutoPlay] - C:\Program Files (x86)\Acer\clear.fi Media\RegAutoplay.exe [1845392 2012-07-20] (Acer Incorporated)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll [266448 2013-05-12] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [214448 2013-05-12] (NVIDIA Corporation)
Startup: C:\Users\Anja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

==================== Services (Whitelisted) =================

S2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [227456 2013-01-28] (Qualcomm Atheros Commnucations)
S2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe [2615368 2013-01-24] (Acer Incorporated)
S3 DeviceFastLaneService; C:\Program Files\Acer\Acer Device Fast-lane\DeviceFastLaneSvc.exe [468624 2012-08-22] (Acer Incorporated)
S3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [658576 2012-08-22] (Acer Incorporated)
S2 ETDService; C:\Program Files\Elantech\ETDService.exe [92560 2013-03-12] (ELAN Microelectronics Corp.)
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-17] (Intel Corporation)
S2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [3939008 2012-07-10] (Symantec Corporation)
S2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [259136 2012-08-22] (NTI Corporation)
S2 RfButtonDriverService; C:\Windows\RfBtnSvc64.exe [93296 2012-09-11] (Dritek System INC.)
S2 StrartMenuService; C:\Program Files (x86)\IObit\Start Menu 8\StartMenuServices.exe [71488 2013-01-23] (IObit)
S2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-01] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

S3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [5139968 2012-06-02] (Broadcom Corporation)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-01-28] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-25] (Microsoft Corporation)
S1 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0401000.00A\ccSetx64.sys [168608 2012-05-25] (Symantec Corporation)
S3 Ps2Kb2Hid; C:\Windows\System32\drivers\aPs2Kb2Hid.sys [26736 2012-09-11] (Dritek System Inc.)
S3 s1039bus; C:\Windows\System32\drivers\s1039bus.sys [127600 2010-03-15] (MCCI Corporation)
S3 s1039mdfl; C:\Windows\system32\DRIVERS\s1039mdfl.sys [19568 2010-03-15] (MCCI Corporation)
S3 s1039mdm; C:\Windows\system32\DRIVERS\s1039mdm.sys [161904 2010-03-15] (MCCI Corporation)
S3 s1039mgmt; C:\Windows\system32\DRIVERS\s1039mgmt.sys [141424 2010-03-15] (MCCI Corporation)
S3 s1039nd5; C:\Windows\system32\DRIVERS\s1039nd5.sys [34416 2010-03-15] (MCCI Corporation)
S3 s1039obex; C:\Windows\system32\DRIVERS\s1039obex.sys [137328 2010-03-15] (MCCI Corporation)
S3 s1039unic; C:\Windows\System32\drivers\s1039unic.sys [158320 2010-03-15] (MCCI Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-10 15:42 - 2013-10-10 15:42 - 00000000 ____D C:\FRST
2013-10-10 04:25 - 2013-10-10 04:25 - 00321536 _____ C:\Users\Anja\AppData\Roaming\LjqRPvoC
2013-10-10 04:25 - 2013-10-10 04:25 - 00321536 _____ C:\Users\Anja\AppData\Local\7N4GsmCRl
2013-10-10 04:25 - 2013-10-10 04:25 - 00321536 _____ C:\ProgramData\z3Ix2uyRn
2013-10-10 04:21 - 2013-10-10 04:21 - 00322560 _____ C:\Users\Anja\AppData\Roaming\VmQyVV2sRm5
2013-10-10 04:21 - 2013-10-10 04:21 - 00322560 _____ C:\Users\Anja\AppData\Local\soj79ulZ
2013-10-10 04:21 - 2013-10-10 04:21 - 00322560 _____ C:\ProgramData\loRlUdx5T
2013-10-10 04:10 - 2013-10-10 04:10 - 00321536 _____ C:\Users\Anja\AppData\Roaming\ZwaWUI8Qp2F
2013-10-10 04:10 - 2013-10-10 04:10 - 00321536 _____ C:\Users\Anja\AppData\Local\qNgKnoXR
2013-10-10 04:10 - 2013-10-10 04:10 - 00321536 _____ C:\ProgramData\8I6H6IlGz
2013-10-10 04:05 - 2013-10-10 04:05 - 00321536 _____ C:\Users\Anja\AppData\Roaming\ez2U7pqoi
2013-10-10 04:05 - 2013-10-10 04:05 - 00321536 _____ C:\Users\Anja\AppData\Local\bcH7oCIr
2013-10-10 04:05 - 2013-10-10 04:05 - 00321536 _____ C:\ProgramData\mjpGOaua5
2013-10-10 04:03 - 2013-10-10 04:03 - 00321536 _____ C:\Users\Anja\AppData\Roaming\PLGu8hpYPOR
2013-10-10 04:03 - 2013-10-10 04:03 - 00321536 _____ C:\Users\Anja\AppData\Local\TcB7B2Xi8D6
2013-10-10 04:03 - 2013-10-10 04:03 - 00321536 _____ C:\ProgramData\64RTLFh2Pk
2013-10-10 04:03 - 2013-10-10 04:03 - 00000000 ____D C:\Users\Anja\AppData\Local\abspPPDUN
2013-10-09 22:58 - 2013-10-09 22:58 - 00451472 _____ C:\Windows\System32\FNTCACHE.DAT
2013-10-08 10:00 - 2013-09-22 15:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-10-08 10:00 - 2013-09-22 15:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-10-08 10:00 - 2013-09-22 15:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-10-08 10:00 - 2013-09-22 15:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-10-08 10:00 - 2013-09-22 15:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-10-08 10:00 - 2013-09-22 15:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-10-08 10:00 - 2013-09-22 15:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-10-08 10:00 - 2013-09-22 15:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-10-08 10:00 - 2013-09-22 14:55 - 02241024 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-10-08 10:00 - 2013-09-22 14:55 - 01365504 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-10-08 10:00 - 2013-09-22 14:55 - 00051712 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-10-08 10:00 - 2013-09-22 14:54 - 19252224 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-10-08 10:00 - 2013-09-22 14:54 - 15404544 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-10-08 10:00 - 2013-09-22 14:54 - 03959296 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-10-08 10:00 - 2013-09-22 14:54 - 02647552 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-10-08 10:00 - 2013-09-22 14:54 - 00855552 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-10-08 10:00 - 2013-09-22 14:54 - 00603136 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-10-08 10:00 - 2013-07-05 16:15 - 00652288 _____ (Microsoft Corporation) C:\Windows\System32\comctl32.dll
2013-10-08 10:00 - 2013-07-03 18:13 - 00541696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2013-10-08 10:00 - 2013-05-15 14:37 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2013-10-08 10:00 - 2013-05-15 14:35 - 00053760 _____ (Microsoft Corporation) C:\Windows\System32\UXInit.dll
2013-10-08 10:00 - 2013-05-14 05:14 - 02706432 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-10-08 10:00 - 2013-05-14 01:23 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-10-08 10:00 - 2013-04-28 14:28 - 00915968 _____ (Microsoft Corporation) C:\Windows\System32\uxtheme.dll
2013-10-08 10:00 - 2013-02-21 02:29 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-10-08 10:00 - 2013-02-21 02:29 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-10-08 10:00 - 2013-02-21 02:29 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-10-08 10:00 - 2013-02-21 02:29 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-10-08 10:00 - 2013-02-21 02:14 - 00136704 _____ (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-10-08 10:00 - 2013-02-21 02:14 - 00053248 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-10-08 10:00 - 2013-02-19 01:53 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2013-10-08 10:00 - 2012-11-07 20:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-10-08 10:00 - 2012-11-07 20:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-10-08 09:57 - 2013-08-22 21:11 - 04040192 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys
2013-10-08 09:57 - 2013-07-19 14:13 - 00124112 _____ (Microsoft Corporation) C:\Windows\System32\PresentationCFFRasterizerNative_v0300.dll
2013-10-08 09:57 - 2013-07-19 14:13 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-08 09:57 - 2013-07-05 14:02 - 00099328 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbcir.sys
2013-10-08 09:57 - 2013-07-05 14:01 - 00210560 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbvideo.sys
2013-10-08 09:57 - 2013-07-01 17:41 - 00447320 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\USBHUB3.SYS
2013-10-08 09:57 - 2013-07-01 17:41 - 00337752 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\USBXHCI.SYS
2013-10-08 09:57 - 2013-07-01 17:41 - 00213336 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\UCX01000.SYS
2013-10-08 09:57 - 2013-07-01 14:14 - 00043008 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbscan.sys
2013-10-08 09:57 - 2013-07-01 14:14 - 00025600 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbprint.sys
2013-10-08 09:57 - 2013-06-30 17:42 - 00623448 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbhub.sys
2013-10-08 09:57 - 2013-06-30 17:42 - 00498008 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbport.sys
2013-10-08 09:57 - 2013-06-30 17:42 - 00079192 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbehci.sys
2013-10-08 09:57 - 2013-06-30 17:42 - 00021848 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbd.sys
2013-10-08 09:57 - 2013-06-28 19:08 - 00032768 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\hidparse.sys
2013-10-08 09:57 - 2013-06-28 19:07 - 00083968 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\hidclass.sys
2013-10-08 09:57 - 2013-06-28 19:07 - 00032256 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbuhci.sys
2013-10-08 09:57 - 2013-06-28 19:06 - 00120832 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbccgp.sys
2013-10-08 09:57 - 2013-06-21 21:45 - 00785624 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\Wdf01000.sys
2013-10-08 09:57 - 2013-06-21 21:45 - 00054488 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\WdfLdr.sys
2013-10-08 09:57 - 2013-05-26 15:17 - 00035328 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-10-08 09:57 - 2013-05-26 14:59 - 00046080 _____ (Adobe Systems) C:\Windows\System32\atmlib.dll
2013-10-08 09:57 - 2013-05-24 19:15 - 00362496 _____ (Adobe Systems Incorporated) C:\Windows\System32\atmfd.dll
2013-10-08 09:57 - 2013-05-24 18:32 - 00300032 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-10-04 10:04 - 2013-10-04 10:04 - 00026578 _____ C:\Users\Anja\Desktop\Hotel Hamburg.htm
2013-10-04 08:31 - 2013-08-06 21:15 - 00144896 _____ (Microsoft Corporation) C:\Windows\System32\tssdisai.dll
2013-10-03 06:43 - 2013-10-03 06:43 - 00000000 ____D C:\ProgramData\Sony
2013-10-03 06:42 - 2013-10-03 06:42 - 00000000 ____D C:\Users\Anja\Podcasts
2013-10-03 06:42 - 2013-10-03 06:42 - 00000000 ____D C:\Users\Anja\Documents\Media Go
2013-10-03 06:42 - 2013-10-03 06:42 - 00000000 ____D C:\Users\Anja\AppData\Local\Sony
2013-10-03 06:41 - 2013-10-03 06:41 - 00000000 ____D C:\ProgramData\Avanquest
2013-10-03 06:41 - 2013-10-03 06:41 - 00000000 ____D C:\Program Files (x86)\Avanquest update
2013-10-03 06:40 - 2013-10-03 06:40 - 00000000 ____D C:\ProgramData\BVRP Software
2013-10-03 06:38 - 2013-10-03 06:43 - 00000000 ____D C:\Program Files (x86)\Sony
2013-10-03 06:38 - 2013-10-03 06:38 - 00000110 _____ C:\Windows\wininit.ini
2013-10-03 06:38 - 2013-10-03 06:38 - 00000000 ____D C:\Users\Anja\AppData\Local\Downloaded Installations
2013-10-03 06:37 - 2013-10-03 06:38 - 00000000 ____D C:\Program Files (x86)\QuickTime
2013-10-03 06:37 - 2013-10-03 06:37 - 00000000 ____D C:\ProgramData\Apple Computer
2013-10-03 06:36 - 2013-10-03 06:36 - 00000000 ____D C:\Users\Anja\AppData\Local\Apple
2013-10-03 06:36 - 2013-10-03 06:36 - 00000000 ____D C:\ProgramData\Apple
2013-10-03 06:36 - 2013-10-03 06:36 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2013-10-03 06:34 - 2013-10-03 06:42 - 00000000 ____D C:\Users\Anja\AppData\Roaming\Sony
2013-10-03 06:34 - 2013-10-03 06:34 - 00000000 ____D C:\Users\Anja\AppData\Roaming\Sony Setup
2013-10-03 06:30 - 2013-10-03 06:43 - 00000000 ____D C:\Users\Anja\AppData\Local\Sony Ericsson
2013-10-03 06:30 - 2013-10-03 06:43 - 00000000 ____D C:\ProgramData\Sony Ericsson
2013-10-03 06:30 - 2013-10-03 06:30 - 00000000 ____H C:\Windows\System32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2013-09-27 05:02 - 2013-09-27 05:02 - 00018799 _____ C:\Users\Anja\Desktop\130925-mn31s ak8.ods
2013-09-27 00:59 - 2013-09-27 00:59 - 00000000 ____D C:\Users\Anja\AppData\Local\PDF24
2013-09-27 00:48 - 2013-09-27 01:02 - 00000000 ____D C:\Program Files (x86)\PDF24
2013-09-26 00:12 - 2013-09-26 00:14 - 00000983 _____ C:\Users\Anja\Desktop\mgen wsn33.txt
2013-09-26 00:12 - 2013-09-26 00:14 - 00000983 _____ C:\Users\Anja\Desktop\mgen n31s.txt
2013-09-25 23:42 - 2013-09-26 00:11 - 00000979 _____ C:\Users\Anja\Desktop\m gen.txt
2013-09-24 07:19 - 2013-09-24 07:19 - 00000000 _____ C:\Users\Anja\Desktop\Neues Textdokument.txt
2013-09-24 05:49 - 2013-09-27 06:01 - 07601896 _____ C:\Users\Anja\Desktop\Poster münster korrigiert.pptx
2013-09-24 04:24 - 2013-09-24 04:24 - 01388032 _____ C:\Users\Anja\Desktop\A0.ppt
2013-09-23 08:16 - 2013-10-04 00:57 - 00013312 _____ C:\Users\Anja\Desktop\Tabelle AK Substanzen WSN33.xls
2013-09-21 04:42 - 2013-09-21 04:42 - 00000000 ____D C:\Program Files (x86)\MSECache
2013-09-20 09:02 - 2013-09-20 09:03 - 03485429 _____ C:\Users\Anja\Desktop\Poster Münsteranja.pptx
2013-09-20 00:59 - 2013-09-26 23:55 - 00233984 _____ C:\Users\Anja\Desktop\PRT anja2.xls
2013-09-19 23:34 - 2013-09-20 23:26 - 00000000 ____D C:\Users\Anja\Desktop\plaques
2013-09-18 01:23 - 2013-09-27 05:35 - 00805273 _____ C:\Users\Anja\Desktop\TABanja.pptx
2013-09-18 00:04 - 2013-09-27 05:38 - 07060393 _____ C:\Users\Anja\Desktop\Poster Münster.pptx
2013-09-12 14:14 - 2013-08-15 21:41 - 00058200 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\dam.sys
2013-09-12 14:14 - 2013-08-15 21:39 - 02371728 _____ (Microsoft Corporation) C:\Windows\System32\WSService.dll
2013-09-12 14:14 - 2013-08-15 21:39 - 00059416 _____ (Microsoft Corporation) C:\Windows\System32\wuauclt.exe
2013-09-12 14:14 - 2013-08-15 21:32 - 00209200 _____ (Microsoft Corporation) C:\Windows\System32\NotificationUI.exe
2013-09-12 14:14 - 2013-08-15 21:22 - 04917760 _____ (Microsoft Corporation) C:\Windows\System32\sppsvc.exe
2013-09-12 14:14 - 2013-08-15 21:22 - 00040448 _____ (Microsoft Corporation) C:\Windows\System32\wuapp.exe
2013-09-12 14:14 - 2013-08-15 21:21 - 03275776 _____ (Microsoft Corporation) C:\Windows\System32\wuaueng.dll
2013-09-12 14:14 - 2013-08-15 21:21 - 01621504 _____ (Microsoft Corporation) C:\Windows\System32\wucltux.dll
2013-09-12 14:14 - 2013-08-15 21:21 - 01164288 _____ (Microsoft Corporation) C:\Windows\System32\sppobjs.dll
2013-09-12 14:14 - 2013-08-15 21:21 - 00773120 _____ (Microsoft Corporation) C:\Windows\System32\wuapi.dll
2013-09-12 14:14 - 2013-08-15 21:21 - 00688640 _____ (Microsoft Corporation) C:\Windows\System32\WSShared.dll
2013-09-12 14:14 - 2013-08-15 21:21 - 00368640 _____ (Microsoft Corporation) C:\Windows\System32\sppwinob.dll
2013-09-12 14:14 - 2013-08-15 21:21 - 00252416 _____ (Microsoft Corporation) C:\Windows\System32\WUSettingsProvider.dll
2013-09-12 14:14 - 2013-08-15 21:21 - 00204800 _____ (Microsoft Corporation) C:\Windows\System32\WSClient.dll
2013-09-12 14:14 - 2013-08-15 21:21 - 00198656 _____ (Microsoft Corporation) C:\Windows\System32\Windows.ApplicationModel.Store.dll
2013-09-12 14:14 - 2013-08-15 21:21 - 00183808 _____ (Microsoft Corporation) C:\Windows\System32\WSSync.dll
2013-09-12 14:14 - 2013-08-15 21:21 - 00174592 _____ (Microsoft Corporation) C:\Windows\System32\storewuauth.dll
2013-09-12 14:14 - 2013-08-15 21:21 - 00163840 _____ (Microsoft Corporation) C:\Windows\System32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-09-12 14:14 - 2013-08-15 21:21 - 00142848 _____ (Microsoft Corporation) C:\Windows\System32\wuwebv.dll
2013-09-12 14:14 - 2013-08-15 21:21 - 00120320 _____ (Microsoft Corporation) C:\Windows\System32\sppc.dll
2013-09-12 14:14 - 2013-08-15 21:21 - 00099328 _____ (Microsoft Corporation) C:\Windows\System32\wudriver.dll
2013-09-12 14:14 - 2013-08-15 21:21 - 00081408 _____ (Microsoft Corporation) C:\Windows\System32\setupcln.dll
2013-09-12 14:14 - 2013-08-15 21:21 - 00049664 _____ (Microsoft Corporation) C:\Windows\System32\wups.dll
2013-09-12 14:14 - 2013-08-15 21:21 - 00049152 _____ (Microsoft Corporation) C:\Windows\System32\wups2.dll
2013-09-12 14:14 - 2013-08-15 21:20 - 00105984 _____ (Microsoft Corporation) C:\Windows\System32\WinSetupUI.dll
2013-09-12 14:14 - 2013-08-15 14:43 - 00628736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2013-09-12 14:14 - 2013-08-15 14:43 - 00562688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2013-09-12 14:14 - 2013-08-15 14:43 - 00167424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSClient.dll
2013-09-12 14:14 - 2013-08-15 14:43 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSSync.dll
2013-09-12 14:14 - 2013-08-15 14:43 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2013-09-12 14:14 - 2013-08-15 14:43 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2013-09-12 14:14 - 2013-08-15 14:43 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-09-12 14:14 - 2013-08-15 14:43 - 00084992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2013-09-12 14:14 - 2013-08-15 14:43 - 00083968 _____ C:\Windows\SysWOW64\OEMLicense.dll
2013-09-12 14:14 - 2013-08-15 14:43 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2013-09-12 14:14 - 2013-08-15 14:43 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2013-09-12 14:14 - 2013-08-15 14:42 - 00091648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppc.dll
2013-09-12 14:14 - 2013-08-15 14:42 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupcln.dll
2013-09-12 14:12 - 2013-07-09 00:04 - 00120144 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\msgpioclx.sys
2013-09-12 14:12 - 2013-07-08 22:18 - 00439488 _____ (Microsoft Corporation) C:\Windows\System32\WerFault.exe
2013-09-12 14:12 - 2013-07-08 20:25 - 00385768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe
2013-09-12 14:12 - 2013-07-08 19:57 - 00245760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LocationApi.dll
2013-09-12 14:12 - 2013-07-08 14:46 - 00543744 _____ (Microsoft Corporation) C:\Windows\System32\wwanmm.dll
2013-09-12 14:12 - 2013-07-08 14:46 - 00414208 _____ (Microsoft Corporation) C:\Windows\System32\wwanconn.dll
2013-09-12 14:12 - 2013-07-08 14:46 - 00370688 _____ (Microsoft Corporation) C:\Windows\System32\Wwanadvui.dll
2013-09-12 14:12 - 2013-07-08 14:45 - 00312832 _____ (Microsoft Corporation) C:\Windows\System32\LocationApi.dll
2013-09-12 14:12 - 2013-07-05 16:16 - 01025024 _____ (Microsoft Corporation) C:\Windows\System32\localspl.dll
2013-09-12 14:12 - 2013-07-02 16:23 - 00778752 _____ (Microsoft Corporation) C:\Windows\System32\oleaut32.dll
2013-09-12 14:12 - 2013-07-02 16:23 - 00391168 _____ (Microsoft Corporation) C:\Windows\System32\Windows.Networking.BackgroundTransfer.dll
2013-09-12 14:12 - 2013-07-02 16:22 - 02839552 _____ (Microsoft Corporation) C:\Windows\System32\msftedit.dll
2013-09-12 14:12 - 2013-07-02 16:22 - 01300480 _____ (Microsoft Corporation) C:\Windows\System32\gdi32.dll
2013-09-12 14:12 - 2013-07-02 16:11 - 00551424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2013-09-12 14:12 - 2013-07-02 16:11 - 00268800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2013-09-12 14:12 - 2013-07-02 16:10 - 02273792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2013-09-12 14:12 - 2013-07-01 14:08 - 00387583 _____ C:\Windows\System32\ApnDatabase.xml
2013-09-12 14:12 - 2013-06-30 14:30 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\openfiles.exe
2013-09-12 14:12 - 2013-06-30 14:29 - 00077312 _____ (Microsoft Corporation) C:\Windows\System32\openfiles.exe
2013-09-12 14:12 - 2013-06-28 22:15 - 00195416 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\sdbus.sys
2013-09-12 14:12 - 2013-06-28 22:15 - 00125784 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\dumpsd.sys
2013-09-12 14:12 - 2013-06-28 21:43 - 00327512 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\Classpnp.sys
2013-09-12 14:12 - 2013-06-28 17:12 - 01022464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-09-12 14:12 - 2013-06-25 19:01 - 00321536 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\udfs.sys
2013-09-12 14:12 - 2013-06-25 18:59 - 00341504 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\HdAudio.sys
2013-09-12 14:12 - 2013-06-24 14:54 - 00447488 _____ (Microsoft Corporation) C:\Windows\System32\wwansvc.dll
2013-09-12 14:12 - 2013-06-24 14:54 - 00263680 _____ (Microsoft Corporation) C:\Windows\System32\wcmsvc.dll
2013-09-12 14:12 - 2013-06-24 14:54 - 00074240 _____ (Microsoft Corporation) C:\Windows\System32\wcmcsp.dll
2013-09-12 14:12 - 2013-06-18 21:36 - 00183808 _____ (Microsoft Corporation) C:\Windows\System32\winmmbase.dll
2013-09-12 14:12 - 2013-06-18 21:36 - 00115712 _____ (Microsoft Corporation) C:\Windows\System32\winmm.dll
2013-09-12 14:12 - 2013-06-18 14:38 - 00160256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmmbase.dll
2013-09-12 14:12 - 2013-06-18 14:38 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmm.dll
2013-09-12 14:12 - 2013-06-11 15:43 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll
2013-09-12 14:12 - 2013-06-11 15:26 - 00230912 _____ (Microsoft Corporation) C:\Windows\System32\WinSCard.dll
2013-09-12 14:12 - 2013-06-10 13:17 - 00096512 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\wfplwfs.sys
2013-09-12 14:12 - 2013-06-10 11:16 - 00888832 _____ (Microsoft Corporation) C:\Windows\System32\nshwfp.dll
2013-09-12 14:12 - 2013-06-10 11:15 - 01156096 _____ (Microsoft Corporation) C:\Windows\System32\IKEEXT.DLL
2013-09-12 14:12 - 2013-06-10 11:15 - 00723968 _____ (Microsoft Corporation) C:\Windows\System32\BFE.DLL
2013-09-12 14:12 - 2013-06-10 11:15 - 00381952 _____ (Microsoft Corporation) C:\Windows\System32\FWPUCLNT.DLL
2013-09-12 14:12 - 2013-06-10 11:10 - 00702464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-09-12 14:12 - 2013-06-10 11:10 - 00245248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-09-12 14:12 - 2013-06-06 00:03 - 00119040 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\USBSTOR.SYS
2013-09-10 03:53 - 2013-09-10 09:34 - 00291373 _____ C:\Users\Anja\Desktop\Blatt.pptx

==================== One Month Modified Files and Folders =======

2013-10-10 15:42 - 2013-10-10 15:42 - 00000000 ____D C:\FRST
2013-10-10 05:24 - 2013-03-06 03:51 - 00001112 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-10 05:20 - 2012-07-25 23:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-10 04:25 - 2013-10-10 04:25 - 00321536 _____ C:\Users\Anja\AppData\Roaming\LjqRPvoC
2013-10-10 04:25 - 2013-10-10 04:25 - 00321536 _____ C:\Users\Anja\AppData\Local\7N4GsmCRl
2013-10-10 04:25 - 2013-10-10 04:25 - 00321536 _____ C:\ProgramData\z3Ix2uyRn
2013-10-10 04:21 - 2013-10-10 04:21 - 00322560 _____ C:\Users\Anja\AppData\Roaming\VmQyVV2sRm5
2013-10-10 04:21 - 2013-10-10 04:21 - 00322560 _____ C:\Users\Anja\AppData\Local\soj79ulZ
2013-10-10 04:21 - 2013-10-10 04:21 - 00322560 _____ C:\ProgramData\loRlUdx5T
2013-10-10 04:11 - 2013-03-06 03:51 - 00001116 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-10 04:10 - 2013-10-10 04:10 - 00321536 _____ C:\Users\Anja\AppData\Roaming\ZwaWUI8Qp2F
2013-10-10 04:10 - 2013-10-10 04:10 - 00321536 _____ C:\Users\Anja\AppData\Local\qNgKnoXR
2013-10-10 04:10 - 2013-10-10 04:10 - 00321536 _____ C:\ProgramData\8I6H6IlGz
2013-10-10 04:05 - 2013-10-10 04:05 - 00321536 _____ C:\Users\Anja\AppData\Roaming\ez2U7pqoi
2013-10-10 04:05 - 2013-10-10 04:05 - 00321536 _____ C:\Users\Anja\AppData\Local\bcH7oCIr
2013-10-10 04:05 - 2013-10-10 04:05 - 00321536 _____ C:\ProgramData\mjpGOaua5
2013-10-10 04:03 - 2013-10-10 04:03 - 00321536 _____ C:\Users\Anja\AppData\Roaming\PLGu8hpYPOR
2013-10-10 04:03 - 2013-10-10 04:03 - 00321536 _____ C:\Users\Anja\AppData\Local\TcB7B2Xi8D6
2013-10-10 04:03 - 2013-10-10 04:03 - 00321536 _____ C:\ProgramData\64RTLFh2Pk
2013-10-10 04:03 - 2013-10-10 04:03 - 00000000 ____D C:\Users\Anja\AppData\Local\abspPPDUN
2013-10-10 04:00 - 2012-07-26 00:12 - 00000000 ____D C:\Windows\System32\sru
2013-10-10 03:58 - 2013-02-26 02:32 - 01097422 _____ C:\Windows\WindowsUpdate.log
2013-10-09 22:58 - 2013-10-09 22:58 - 00451472 _____ C:\Windows\System32\FNTCACHE.DAT
2013-10-09 12:16 - 2012-07-25 21:26 - 00262144 ___SH C:\Windows\System32\config\BBI
2013-10-08 10:24 - 2012-07-26 00:12 - 00000000 ____D C:\Windows\AUInstallAgent
2013-10-05 06:40 - 2012-08-02 18:21 - 00045428 _____ C:\Windows\PFRO.log
2013-10-04 10:13 - 2013-08-30 07:57 - 00000000 ____D C:\Users\Anja\AppData\Local\Deployment
2013-10-04 10:04 - 2013-10-04 10:04 - 00026578 _____ C:\Users\Anja\Desktop\Hotel Hamburg.htm
2013-10-04 00:57 - 2013-09-23 08:16 - 00013312 _____ C:\Users\Anja\Desktop\Tabelle AK Substanzen WSN33.xls
2013-10-04 00:53 - 2013-03-01 13:19 - 00000000 ____D C:\Users\Anja\AppData\Local\CrashDumps
2013-10-03 07:05 - 2013-02-26 08:40 - 00000000 ____D C:\Users\Anja\AppData\Roaming\vlc
2013-10-03 06:51 - 2012-09-12 00:56 - 00757416 _____ C:\Windows\System32\perfh007.dat
2013-10-03 06:51 - 2012-09-12 00:56 - 00159916 _____ C:\Windows\System32\perfc007.dat
2013-10-03 06:51 - 2012-07-25 23:28 - 01745416 _____ C:\Windows\System32\PerfStringBackup.INI
2013-10-03 06:47 - 2012-09-11 15:21 - 00495300 _____ C:\Windows\DPINST.LOG
2013-10-03 06:43 - 2013-10-03 06:43 - 00000000 ____D C:\ProgramData\Sony
2013-10-03 06:43 - 2013-10-03 06:38 - 00000000 ____D C:\Program Files (x86)\Sony
2013-10-03 06:43 - 2013-10-03 06:30 - 00000000 ____D C:\Users\Anja\AppData\Local\Sony Ericsson
2013-10-03 06:43 - 2013-10-03 06:30 - 00000000 ____D C:\ProgramData\Sony Ericsson
2013-10-03 06:43 - 2012-08-02 18:28 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-10-03 06:42 - 2013-10-03 06:42 - 00000000 ____D C:\Users\Anja\Podcasts
2013-10-03 06:42 - 2013-10-03 06:42 - 00000000 ____D C:\Users\Anja\Documents\Media Go
2013-10-03 06:42 - 2013-10-03 06:42 - 00000000 ____D C:\Users\Anja\AppData\Local\Sony
2013-10-03 06:42 - 2013-10-03 06:34 - 00000000 ____D C:\Users\Anja\AppData\Roaming\Sony
2013-10-03 06:42 - 2013-02-26 02:31 - 00000000 ____D C:\users\Anja
2013-10-03 06:41 - 2013-10-03 06:41 - 00000000 ____D C:\ProgramData\Avanquest
2013-10-03 06:41 - 2013-10-03 06:41 - 00000000 ____D C:\Program Files (x86)\Avanquest update
2013-10-03 06:40 - 2013-10-03 06:40 - 00000000 ____D C:\ProgramData\BVRP Software
2013-10-03 06:38 - 2013-10-03 06:38 - 00000110 _____ C:\Windows\wininit.ini
2013-10-03 06:38 - 2013-10-03 06:38 - 00000000 ____D C:\Users\Anja\AppData\Local\Downloaded Installations
2013-10-03 06:38 - 2013-10-03 06:37 - 00000000 ____D C:\Program Files (x86)\QuickTime
2013-10-03 06:38 - 2013-04-05 03:07 - 00000000 ____D C:\ProgramData\Sony Corporation
2013-10-03 06:37 - 2013-10-03 06:37 - 00000000 ____D C:\ProgramData\Apple Computer
2013-10-03 06:36 - 2013-10-03 06:36 - 00000000 ____D C:\Users\Anja\AppData\Local\Apple
2013-10-03 06:36 - 2013-10-03 06:36 - 00000000 ____D C:\ProgramData\Apple
2013-10-03 06:36 - 2013-10-03 06:36 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2013-10-03 06:34 - 2013-10-03 06:34 - 00000000 ____D C:\Users\Anja\AppData\Roaming\Sony Setup
2013-10-03 06:30 - 2013-10-03 06:30 - 00000000 ____H C:\Windows\System32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2013-10-03 06:30 - 2012-07-25 23:21 - 00038950 _____ C:\Windows\setupact.log
2013-10-02 06:00 - 2013-08-30 09:03 - 00000000 ____D C:\Users\Anja\AppData\Roaming\Spotify
2013-10-02 05:55 - 2013-08-30 09:04 - 00000000 ____D C:\Users\Anja\AppData\Local\Spotify
2013-10-01 17:38 - 2013-03-05 00:40 - 00694232 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-10-01 17:38 - 2013-03-05 00:40 - 00078296 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-27 06:01 - 2013-09-24 05:49 - 07601896 _____ C:\Users\Anja\Desktop\Poster münster korrigiert.pptx
2013-09-27 05:38 - 2013-09-18 00:04 - 07060393 _____ C:\Users\Anja\Desktop\Poster Münster.pptx
2013-09-27 05:35 - 2013-09-18 01:23 - 00805273 _____ C:\Users\Anja\Desktop\TABanja.pptx
2013-09-27 05:02 - 2013-09-27 05:02 - 00018799 _____ C:\Users\Anja\Desktop\130925-mn31s ak8.ods
2013-09-27 01:02 - 2013-09-27 00:48 - 00000000 ____D C:\Program Files (x86)\PDF24
2013-09-27 00:59 - 2013-09-27 00:59 - 00000000 ____D C:\Users\Anja\AppData\Local\PDF24
2013-09-26 23:55 - 2013-09-20 00:59 - 00233984 _____ C:\Users\Anja\Desktop\PRT anja2.xls
2013-09-26 05:37 - 2013-08-30 08:03 - 00119024 _____ C:\Users\Anja\AppData\Local\GDIPFONTCACHEV1.DAT
2013-09-26 00:34 - 2013-03-14 03:40 - 00000000 ____D C:\Users\Anja\AppData\Roaming\Ape
2013-09-26 00:14 - 2013-09-26 00:12 - 00000983 _____ C:\Users\Anja\Desktop\mgen wsn33.txt
2013-09-26 00:14 - 2013-09-26 00:12 - 00000983 _____ C:\Users\Anja\Desktop\mgen n31s.txt
2013-09-26 00:11 - 2013-09-25 23:42 - 00000979 _____ C:\Users\Anja\Desktop\m gen.txt
2013-09-25 22:46 - 2013-03-10 23:13 - 00000000 ____D C:\Users\Anja\Desktop\Anja p
2013-09-25 10:48 - 2012-07-26 00:12 - 00000000 ____D C:\Windows\System32\NDF
2013-09-24 07:19 - 2013-09-24 07:19 - 00000000 _____ C:\Users\Anja\Desktop\Neues Textdokument.txt
2013-09-24 04:26 - 2013-03-04 03:53 - 00000000 ____D C:\Users\Anja\Desktop\Jena Unterlagen
2013-09-24 04:24 - 2013-09-24 04:24 - 01388032 _____ C:\Users\Anja\Desktop\A0.ppt
2013-09-22 15:28 - 2013-10-08 10:00 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-22 15:28 - 2013-10-08 10:00 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-22 15:27 - 2013-10-08 10:00 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-22 15:27 - 2013-10-08 10:00 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-22 15:27 - 2013-10-08 10:00 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-22 15:27 - 2013-10-08 10:00 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-22 15:27 - 2013-10-08 10:00 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-22 15:27 - 2013-10-08 10:00 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-22 14:55 - 2013-10-08 10:00 - 02241024 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-09-22 14:55 - 2013-10-08 10:00 - 01365504 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-09-22 14:55 - 2013-10-08 10:00 - 00051712 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-09-22 14:54 - 2013-10-08 10:00 - 19252224 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-09-22 14:54 - 2013-10-08 10:00 - 15404544 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-09-22 14:54 - 2013-10-08 10:00 - 03959296 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-09-22 14:54 - 2013-10-08 10:00 - 02647552 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-09-22 14:54 - 2013-10-08 10:00 - 00855552 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-09-22 14:54 - 2013-10-08 10:00 - 00603136 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-09-21 13:20 - 2013-02-26 02:32 - 00000000 ____D C:\Users\Anja\AppData\Local\Packages
2013-09-21 04:42 - 2013-09-21 04:42 - 00000000 ____D C:\Program Files (x86)\MSECache
2013-09-21 04:40 - 2013-08-30 07:44 - 00000000 ____D C:\Users\Anja\AppData\Local\Microsoft Help
2013-09-20 23:26 - 2013-09-19 23:34 - 00000000 ____D C:\Users\Anja\Desktop\plaques
2013-09-20 09:03 - 2013-09-20 09:02 - 03485429 _____ C:\Users\Anja\Desktop\Poster Münsteranja.pptx
2013-09-20 00:55 - 2013-09-09 00:49 - 00144896 _____ C:\Users\Anja\Desktop\PRT anja.xls
2013-09-15 23:46 - 2012-07-26 00:12 - 00000000 ____D C:\Windows\rescache
2013-09-13 07:13 - 2012-07-26 00:12 - 00000000 ____D C:\Windows\WinStore
2013-09-13 07:13 - 2012-07-26 00:12 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-09-13 07:13 - 2012-07-25 21:38 - 00000000 ____D C:\Windows\System32\oobe
2013-09-12 23:11 - 2013-08-14 01:23 - 00000000 ____D C:\Windows\System32\MRT
2013-09-12 23:10 - 2013-03-02 01:42 - 79143768 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-09-10 09:34 - 2013-09-10 03:53 - 00291373 _____ C:\Users\Anja\Desktop\Blatt.pptx

Files to move or delete:
====================
C:\Users\Anja\AppData\Local\abspPPDUN\isCNoWgFrx.exe


Some content of TEMP:
====================
C:\Users\Anja\AppData\Local\Temp\drm_dyndata_7400006.dll
C:\Users\Anja\AppData\Local\Temp\ose00000.exe
C:\Users\Anja\AppData\Local\Temp\sgpkgimwgkwaxshuftt.dll
C:\Users\Anja\AppData\Local\Temp\sgpkgimwgkwaxshuftt.exe


==================== Known DLLs (Whitelisted) ================


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points  =========================

4
Restore point made on: 2013-09-25 00:52:34
Restore point made on: 2013-10-02 06:07:07
Restore point made on: 2013-10-03 06:37:30
Restore point made on: 2013-10-08 09:59:03

==================== Memory info =========================== 

Percentage of memory in use: 16%
Total physical RAM: 3911.27 MB
Available physical RAM: 3260.95 MB
Total Pagefile: 3911.27 MB
Available Pagefile: 3277.57 MB
Total Virtual: 8192 MB
Available Virtual: 8191.86 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:443.69 GB) (Free:385.09 GB) NTFS
Drive d: () (Removable) (Total:1.91 GB) (Free:1.91 GB) FAT
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 3E7054EA)

Partition: GPT Partition Type
========================================================
Disk: 1 (Size: 2 GB) (Disk ID: 9B2CF522)
Partition 1: (Not Active) - (Size=2 GB) - (Type=06)


LastRegBack: 2013-10-09 09:42

==================== End Of Log ============================