Malwarebytes findet pup.optional.iminent.a u.a.

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.11.14.03

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16736
nl :: NL-HP [Administrator]

14.11.2013 13:32:40
MBAM-log-2013-11-14 (13-38-11).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 261778
Laufzeit: 3 Minute(n), 41 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 2
C:\Users\Geo\AppData\Local\DownloadGuide (PUP.Optional.DownloadGuide.A) -> Keine Aktion durchgeführt.
C:\Users\Geo\AppData\Local\DownloadGuide\Offers (PUP.Optional.DownloadGuide.A) -> Keine Aktion durchgeführt.

Infizierte Dateien: 5
C:\Users\Geo\AppData\Local\DownloadGuide\Offers\iminent.exe (PUP.Optional.Iminent.A) -> Keine Aktion durchgeführt.
C:\Users\Geo\AppData\Local\DownloadGuide\amazon.ico (PUP.Optional.DownloadGuide.A) -> Keine Aktion durchgeführt.
C:\Users\Geo\AppData\Local\DownloadGuide\FreeSystemUtilities.exe (PUP.Optional.DownloadGuide.A) -> Keine Aktion durchgeführt.
C:\Users\Geo\AppData\Local\DownloadGuide\Offers\foxydeal.exe (PUP.Optional.DownloadGuide.A) -> Keine Aktion durchgeführt.
C:\Users\Geo\AppData\Local\DownloadGuide\Offers\hometab.exe (PUP.Optional.DownloadGuide.A) -> Keine Aktion durchgeführt.

(Ende)
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 14-11-2013
Ran by nl at 2013-11-14 12:41:29
Running from C:\Users\nl\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Sophos Anti-Virus (Enabled - Up to date) {65FBD860-96D8-75EF-C7ED-7BE27E6C498A}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Sophos Anti-Virus (Enabled - Up to date) {DE9A3984-B0E2-7A61-FD5D-409005EB0337}

==================== Installed Programs ======================

Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.152)
AMD Accelerated Video Transcoding (Version: 2.00.0002)
AMD APP SDK Runtime (Version: 10.0.873.1)
AMD AVIVO64 Codecs (Version: 12.2.0.20708)
AMD Catalyst Install Manager (Version: 8.0.871.0)
AMD Media Foundation Decoders (Version: 1.0.70708.2225)
AMD Steady Video Plug-In  (Version: 2.03.0000)
AMD USB 3.0 Device Detector (Version: 2.1.27.0)
AMD VISION Engine Control Center (x32 Version: 2012.0708.2230.38439)
ArcSoft TotalMedia (x32 Version: 1.0.61.25)
ArcSoft TotalMedia (x32 Version: 2.0.39.42)
ArcSoft Webcam Sharing Manager (x32 Version: 2.0.0.39)
Avidemux 2.6 - 64bits (x32 Version: 2.6.6.8941)
Biet-O-Matic v2.14.12 (x32 Version: 2.14.12)
Bing Bar (x32 Version: 7.2.241.0)
Bonjour (Version: 3.0.0.10)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center Graphics Previews Common (x32 Version: 2012.0708.2230.38439)
Catalyst Control Center Localization All (x32 Version: 2012.0708.2230.38439)
CCC Help Chinese Standard (x32 Version: 2012.0708.2229.38439)
CCC Help Chinese Traditional (x32 Version: 2012.0708.2229.38439)
CCC Help Czech (x32 Version: 2012.0708.2229.38439)
CCC Help Danish (x32 Version: 2012.0708.2229.38439)
CCC Help Dutch (x32 Version: 2012.0708.2229.38439)
CCC Help English (x32 Version: 2012.0708.2229.38439)
CCC Help Finnish (x32 Version: 2012.0708.2229.38439)
CCC Help French (x32 Version: 2012.0708.2229.38439)
CCC Help German (x32 Version: 2012.0708.2229.38439)
CCC Help Greek (x32 Version: 2012.0708.2229.38439)
CCC Help Hungarian (x32 Version: 2012.0708.2229.38439)
CCC Help Italian (x32 Version: 2012.0708.2229.38439)
CCC Help Japanese (x32 Version: 2012.0708.2229.38439)
CCC Help Korean (x32 Version: 2012.0708.2229.38439)
CCC Help Norwegian (x32 Version: 2012.0708.2229.38439)
CCC Help Polish (x32 Version: 2012.0708.2229.38439)
CCC Help Portuguese (x32 Version: 2012.0708.2229.38439)
CCC Help Russian (x32 Version: 2012.0708.2229.38439)
CCC Help Spanish (x32 Version: 2012.0708.2229.38439)
CCC Help Swedish (x32 Version: 2012.0708.2229.38439)
CCC Help Thai (x32 Version: 2012.0708.2229.38439)
CCC Help Turkish (x32 Version: 2012.0708.2229.38439)
ccc-utility64 (Version: 2012.0708.2230.38439)
D3DX10 (x32 Version: 15.4.2368.0902)
Device Access Manager for HP ProtectTools (Version: 7.0.0.4)
Drive Encryption For HP ProtectTools (Version: 7.0.28.30376)
Energy Star Digital Logo (x32 Version: 1.0.1)
ESET Online Scanner v3 (x32)
Evernote v. 4.5.4 (x32 Version: 4.5.4.6487)
Face Recognition for HP ProtectTools (Version: 7.01.4525)
File Sanitizer For HP ProtectTools (x32 Version: 7.0.0.5)
Fotogalerie (x32 Version: 16.4.3508.0205)
Hewlett-Packard ACLM.NET v1.1.2.0 (x32 Version: 1.00.0000)
HP 3D DriveGuard (Version: 5.0.8.0)
HP Auto (Version: 1.0.12935.3667)
HP Connection Manager (x32 Version: 4.2.50.1)
HP Customer Experience Enhancements (x32 Version: 6.0.1.8)
HP Documentation (x32 Version: 1.1.1.0)
HP ESU for Microsoft Windows 7 (x32 Version: 2.2.1)
HP HD Webcam Driver (x32 Version: 3.4.8.16)
HP Hotkey Support (x32 Version: 4.6.11.2)
HP Postscript Converter (Version: 3.0.3384)
HP Power Assistant (Version: 2.5.0.16)
HP ProtectTools Security Manager (Version: 7.0.0.1177)
HP Setup (x32 Version: 9.1.15453.4066)
HP SoftPaq Download Manager (x32 Version: 3.4.10.0)
HP Software Framework (x32 Version: 4.6.10.1)
HP Software Setup (x32 Version: 8.5.2.1)
HP Support Assistant (x32 Version: 6.1.12.1)
HP System Default Settings (x32 Version: 2.4.1.2)
HP Wallpaper (x32 Version: 3.0.0.1)
IDT Audio (x32 Version: 1.0.6435.0)
JMicron Flash Media Controller Driver (x32 Version: 1.0.72.4)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
MD5 File Hasher 1.3 (x32)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Movie Maker (x32 Version: 16.4.3508.0205)
Mozilla Firefox 23.0.1 (x86 de) (x32 Version: 23.0.1)
Mozilla Maintenance Service (x32 Version: 23.0.1)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT110 (x32 Version: 16.4.1108.0727)
MSVCRT110_amd64 (Version: 16.4.1109.0912)
OpenOffice 4.0.1 (x32 Version: 4.01.9714)
opensource (x32 Version: 1.0.14960.3876)
Opera 12.16 (x32 Version: 12.16.1860)
PDF Complete Corporate Edition (x32 Version: 4.1.33)
Photo Common (x32 Version: 16.4.3508.0205)
Photo Gallery (x32 Version: 16.4.3508.0205)
Privacy Manager for HP ProtectTools (Version: 7.0.0.865)
Ralink Bluetooth Stack64 (Version: 9.0.725.0)
Ralink RT3290 802.11bgn Wi-Fi Adapter (x32 Version: 5.0.5.0)
Realtek Ethernet Controller All-In-One Windows Driver (x32 Version: 7.58.411.2012)
SDK (x32 Version: 2.30.042)
Skype™ 5.10 (x32 Version: 5.10.116)
Sophos Anti-Virus (x32 Version: 10.3.1)
Sophos AutoUpdate (x32 Version: 2.9.0.344)
Synaptics Pointing Device Driver (Version: 16.3.9.0)
Theft Recovery for HP ProtectTools (x32 Version: 7.0.0.10)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (x32 Version: 3)
Validity Fingerprint Sensor Driver (Version: 4.4.213.0)
Windows Live Communications Platform (x32 Version: 16.4.3508.0205)
Windows Live Essentials (x32 Version: 16.4.3508.0205)
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0)
Windows Live Installer (x32 Version: 16.4.3508.0205)
Windows Live Photo Common (x32 Version: 16.4.3508.0205)
Windows Live PIMT Platform (x32 Version: 16.4.3508.0205)
Windows Live SOXE (x32 Version: 16.4.3508.0205)
Windows Live SOXE Definitions (x32 Version: 16.4.3508.0205)
Windows Live UX Platform (x32 Version: 16.4.3508.0205)
Windows Live UX Platform Language Pack (x32 Version: 16.4.3508.0205)
WinZip 15.0 (Version: 15.0.10039)

==================== Restore Points  =========================

20-10-2013 21:35:58 Gerätetreiber-Paketinstallation: AVM Berlin AVM USB-Fernanschluss
27-10-2013 09:27:42 Windows Live Essentials
27-10-2013 09:28:33 DirectX wurde installiert
27-10-2013 09:29:01 DirectX wurde installiert
27-10-2013 09:29:42 DirectX wurde installiert
27-10-2013 09:33:43 WLSetup
27-10-2013 12:10:57 Windows Update
04-11-2013 21:54:22 OpenOffice 4.0.1 wird installiert
13-11-2013 08:58:41 Removed Apple Application Support
13-11-2013 09:51:05 Removed Apple Software Update
13-11-2013 10:02:00 Windows-Sicherung
13-11-2013 12:04:46 Windows Update

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {1B162037-C8B5-4139-8204-66BB98F1FC84} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation)
Task: {36AF2166-271B-4D24-8C43-11BB1F601F19} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPSFMessenger\HPSFMsgr.exe [2011-09-10] (Hewlett-Packard Company)
Task: {5A26EC0D-729A-4BCB-874C-9C0F49993113} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-21] (Microsoft Corporation)
Task: {664B3282-928A-4C1F-A5C7-BBCA26767195} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-11-13] (Adobe Systems Incorporated)
Task: {77A0F59E-F876-4618-B9AB-224DF98AAAD2} - System32\Tasks\Software Updater => C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.Bootstrapper.exe
Task: {912E308D-4BC0-4296-836E-DD0BEDC4C563} - System32\Tasks\HPCeeScheduleForNadine => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15] (Hewlett-Packard)
Task: {9FC3E781-D6A6-4BCA-9CE9-67CF0452D9F3} - System32\Tasks\Software Updater Ui => C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.Ui.exe
Task: {B1CDB928-6460-48E7-9570-178C6AF85968} - System32\Tasks\Registration => C:\Program Files (x86)\Hewlett-Packard\HP Setup\Dependencies\RemEngine.exe [2012-03-21] ()
Task: {C14254A1-D126-4B66-9D44-0C28523ED338} - System32\Tasks\Games\UpdateCheck_S-1-5-21-1806876041-131380617-2470248960-1001
Task: {C2A8903B-D98C-400B-AE06-88C67F9387EA} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater\HPSFUpdater.exe [2013-02-19] (Hewlett-Packard)
Task: {DBA64EF9-0174-432A-A463-CDD1F92F53EA} - System32\Tasks\Freemium1ClickMaint => C:\Program Files (x86)\Covus Freemium\Free System Utilities\1Click.exe
Task: {DD8B7049-2057-4BED-A798-C80CF0E1D726} - System32\Tasks\HPCeeScheduleForGeo => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15] (Hewlett-Packard)
Task: {EC9CC308-4D9C-431C-B4C3-13ED46C146D2} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2011-09-10] (Hewlett-Packard Company)
Task: {FB89A81C-1DAE-41AD-8596-CED62EFCC787} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Tuneup => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2011-09-10] (Hewlett-Packard Company)
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\HPCeeScheduleForGeo.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\windows\Tasks\HPCeeScheduleForNadine.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

==================== Loaded Modules (whitelisted) =============


==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SAVService => ""="service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SAVService => ""="service"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (11/14/2013 00:22:39 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (11/14/2013 08:17:01 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/13/2013 11:22:14 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/13/2013 07:03:16 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/13/2013 01:17:06 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/13/2013 10:47:40 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/13/2013 09:50:04 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/12/2013 04:42:04 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/12/2013 00:51:42 AM) (Source: Application Hang) (User: )
Description: Programm firefox.exe, Version 25.0.0.5046 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 13f8

Startzeit: 01cedf305dd827e4

Endzeit: 125

Anwendungspfad: C:\Program Files (x86)\Mozilla Firefox\firefox.exe

Berichts-ID: 2bc84ad4-4b2c-11e3-9824-b4b52f917681

Error: (11/11/2013 11:49:41 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (11/14/2013 11:22:08 AM) (Source: Service Control Manager) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Sophos Anti-Virus" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler: 
%%1056

Error: (11/14/2013 11:22:07 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Sophos Anti-Virus" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 500 Millisekunden durchgeführt: Neustart des Diensts.

Error: (11/14/2013 11:22:07 AM) (Source: SAVOnAccess) (User: )
Description: Treiber-Threads sind beim Herunterfahren des Threads noch aktiv.

Error: (11/14/2013 11:05:46 AM) (Source: Microsoft-Windows-HAL) (User: )
Description: Der Speicher wurde beim letzten Leistungsübergang des Systems von der Plattformfirmware beschädigt. Überprüfen Sie, ob für Ihr System aktualisierte Firmware verfügbar ist.

Error: (11/14/2013 08:16:36 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Offlinedateien" wurde mit folgendem Fehler beendet: 
%%3

Error: (11/13/2013 11:21:44 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Offlinedateien" wurde mit folgendem Fehler beendet: 
%%3

Error: (11/13/2013 07:13:06 PM) (Source: Microsoft-Windows-HAL) (User: )
Description: Der Speicher wurde beim letzten Leistungsübergang des Systems von der Plattformfirmware beschädigt. Überprüfen Sie, ob für Ihr System aktualisierte Firmware verfügbar ist.

Error: (11/13/2013 07:02:56 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Offlinedateien" wurde mit folgendem Fehler beendet: 
%%3

Error: (11/13/2013 01:16:45 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Offlinedateien" wurde mit folgendem Fehler beendet: 
%%3

Error: (11/13/2013 01:06:06 PM) (Source: WMPNetworkSvc) (User: )
Description: 0x80004004-1


Microsoft Office Sessions:
=========================
Error: (11/14/2013 00:22:39 PM) (Source: SideBySide)(User: )
Description: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsSMSEditor.exe

Error: (11/14/2013 08:17:01 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/13/2013 11:22:14 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/13/2013 07:03:16 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/13/2013 01:17:06 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/13/2013 10:47:40 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/13/2013 09:50:04 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/12/2013 04:42:04 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/12/2013 00:51:42 AM) (Source: Application Hang)(User: )
Description: firefox.exe25.0.0.504613f801cedf305dd827e4125C:\Program Files (x86)\Mozilla Firefox\firefox.exe2bc84ad4-4b2c-11e3-9824-b4b52f917681

Error: (11/11/2013 11:49:41 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


==================== Memory info =========================== 

Percentage of memory in use: 50%
Total physical RAM: 3537.44 MB
Available physical RAM: 1742.04 MB
Total Pagefile: 7073.06 MB
Available Pagefile: 5272.16 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:442.87 GB) (Free:383.26 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive e: (HP_TOOLS) (Fixed) (Total:1.99 GB) (Free:1.97 GB) FAT32
Drive g: (HP_RECOVERY) (Fixed) (Total:20.59 GB) (Free:3.16 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: A6451A16)
Partition 1: (Active) - (Size=300 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=443 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=21 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=2 GB) - (Type=0C)

==================== End Of Log ============================
         

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-11-2013
Ran by nl (administrator) on NL-HP on 14-11-2013 12:40:41
Running from C:\Users\nl\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\windows\system32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\STacSV64.exe
(Hewlett-Packard Company) C:\windows\system32\Hpservice.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe
(PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe
(Sophos Limited) C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVAdminService.exe
(Sophos Limited) C:\Program Files (x86)\Sophos\AutoUpdate\ALsvc.exe
(Sophos Limited) C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe
(ArcSoft, Inc.) C:\windows\SysWow64\ArcVCapRender\uArcCapture.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\SeaPort.exe
(Sophos Limited) C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
(AMD) C:\windows\system32\atieclxx.exe
(DigitalPersona, Inc.) c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe
(Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\AMDUSB3DeviceDetector\nusb3mon.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Sophos Limited) C:\Program Files (x86)\Sophos\AutoUpdate\ALMon.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe
(Sophos Limited) C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavMain.exe
(Opera Software) C:\Program Files (x86)\Opera\Opera.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [NUSB3MON] - C:\Program Files (x86)\ATI Technologies\AMDUSB3DeviceDetector\nusb3mon.exe [97280 2012-04-11] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3011824 2013-05-25] (Synaptics Incorporated)
HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [1664000 2013-06-10] (IDT, Inc.)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe,
HKLM-x32\...\Run: [Sophos AutoUpdate Monitor] - C:\Program Files (x86)\Sophos\AutoUpdate\ALMon.exe [929272 2013-01-11] (Sophos Limited)
HKLM-x32\...\Run: [AMD AVT] - C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [12288 2012-04-20] ()
HKLM-x32\...\Run: [QLBController] - C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe [334240 2012-09-12] (Hewlett-Packard Company)
HKLM-x32\...\Run: [] - [x]
HKU\Geo\...\Run: [RESTART_STICKY_NOTES] - C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation)
HKU\Nadine\...\Run: [AVMUSBFernanschluss] - C:\Users\Nadine\AppData\Local\Apps\2.0\M44LLLTV.JM0\7MG03G3X.JRT\frit..tion_1acae14e4778b8d2_0002.0003_7c9366a34786c7f9\AVMAutoStart.exe [139264 2013-11-03] (AVM Berlin)
HKU\Nadine\...\Run: [RESTART_STICKY_NOTES] - C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation)
AppInit_DLLs: C:\PROGRA~2\Sophos\SOPHOS~1\SOPHOS~2.DLL [217672 2013-10-21] (Sophos Limited)
AppInit_DLLs-x32: C:\PROGRA~2\Sophos\SOPHOS~1\SOPHOS~1.DLL [275352 2013-10-21] (Sophos Limited)
Lsa: [Notification Packages] DPPassFilter scecli
Startup: C:\Users\Nadine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe (No File)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPCOM/10
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPCOM/10
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=CMNTDF
SearchScopes: HKLM-x32 - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=CMNTDF
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=CMNTDF&pc=CMNTDF&src=IE-SearchBox
SearchScopes: HKCU - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = 
BHO: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Bing Bar Helper - {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: File Sanitizer for HP ProtectTools - {3134413B-49B4-425C-98A5-893C1F195601} - C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\IEBHO.dll (Hewlett-Packard)
BHO-x32: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
Toolbar: HKLM-x32 - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll (Microsoft Corporation.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Winsock: Catalog9 01 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)
Winsock: Catalog9 02 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)
Winsock: Catalog9 03 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)
Winsock: Catalog9 04 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)
Winsock: Catalog9 05 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)
Winsock: Catalog9 06 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)
Winsock: Catalog9 07 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)
Winsock: Catalog9 08 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)
Winsock: Catalog9 20 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)
Winsock: Catalog9-x64 01 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp_64.dll [132904] (Sophos Limited)
Winsock: Catalog9-x64 02 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp_64.dll [132904] (Sophos Limited)
Winsock: Catalog9-x64 03 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp_64.dll [132904] (Sophos Limited)
Winsock: Catalog9-x64 04 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp_64.dll [132904] (Sophos Limited)
Winsock: Catalog9-x64 05 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp_64.dll [132904] (Sophos Limited)
Winsock: Catalog9-x64 06 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp_64.dll [132904] (Sophos Limited)
Winsock: Catalog9-x64 07 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp_64.dll [132904] (Sophos Limited)
Winsock: Catalog9-x64 08 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp_64.dll [132904] (Sophos Limited)
Winsock: Catalog9-x64 20 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp_64.dll [132904] (Sophos Limited)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\nl\AppData\Roaming\Mozilla\Firefox\Profiles\nd4ea19r.default
FF DefaultSearchEngine: Yahoo
FF SelectedSearchEngine: Yahoo
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_9_900_152.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll ()
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Firefox\Extensions: [otis@digitalpersona.com] - c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt\
FF Extension: DigitalPersona Extension - c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt\

==================== Services (Whitelisted) =================

S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
S4 BlueSoleilCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe [1612552 2012-09-26] (IVT Corporation)
S3 BsHelpCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe [146184 2012-09-19] (IVT Corporation)
S4 DpHost; c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe [493904 2012-03-15] (DigitalPersona, Inc.)
S4 FLCDLOCK; c:\windows\SysWOW64\flcdlock.exe [477056 2012-01-31] (Hewlett-Packard Company)
R2 hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe [523680 2012-09-12] (Hewlett-Packard Company)
S4 McAfee Endpoint Encryption Agent; C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeHost.exe [1327104 2012-03-22] ()
R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1135752 2013-02-07] (PDF Complete Inc)
R2 SAVAdminService; C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVAdminService.exe [290296 2013-10-21] (Sophos Limited)
R2 SAVService; C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe [206328 2013-10-21] (Sophos Limited)
R2 Sophos AutoUpdate Service; C:\Program Files (x86)\Sophos\AutoUpdate\ALsvc.exe [237048 2013-01-11] (Sophos Limited)
R2 swi_service; C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe [3109880 2013-10-21] (Sophos Limited)
S2 swi_update_64; C:\ProgramData\Sophos\Web Intelligence\swi_update_64.exe [2012152 2013-10-21] (Sophos Limited)
R2 uArcCapture; C:\windows\SysWow64\ArcVCapRender\uArcCapture.exe [498352 2012-04-05] (ArcSoft, Inc.)

==================== Drivers (Whitelisted) ====================

R0 amdkmpfd; C:\Windows\System32\DRIVERS\amdkmpfd.sys [31872 2012-01-31] (Advanced Micro Devices, Inc.)
R3 ARCVCAM; C:\Windows\System32\DRIVERS\ArcSoftVCapture.sys [42816 2012-02-03] (ArcSoft, Inc.)
R3 avmaura; C:\Windows\System32\DRIVERS\avmaura.sys [116480 2013-10-20] (AVM Berlin)
R3 BtAudioBusSrv; C:\Windows\System32\Drivers\BtAudioBus.sys [23136 2012-06-15] (IVT Corporation)
S3 BthL2caScoIfSrv; C:\Windows\System32\Drivers\BtL2caScoIf.sys [56904 2012-07-19] (Ralink Corporation)
S3 btUrbFilterDrv; C:\Windows\System32\Drivers\IvtUrbBtFlt.sys [48608 2012-10-02] (Ralink Corporation)
S3 DAMDrv; C:\Windows\System32\DRIVERS\DAMDrv64.sys [64312 2012-01-31] (Hewlett-Packard Company)
R0 MfeEpeOpal; C:\Windows\System32\Drivers\MfeEpeOpal.sys [93640 2012-03-22] (McAfee, Inc.)
R0 MfeEpePc; C:\Windows\System32\Drivers\MfeEpePc.sys [158792 2012-03-22] (McAfee, Inc.)
R3 rtbth; C:\Windows\System32\DRIVERS\rtbth.sys [692832 2012-10-02] (Ralink Technology, Corp.)
R1 SAVOnAccess; C:\Windows\System32\DRIVERS\savonaccess.sys [154952 2013-05-21] (Sophos Limited)
S4 SophosBootDriver; C:\Windows\System32\DRIVERS\SophosBootDriver.sys [25608 2013-05-21] (Sophos Plc)
R3 SPUVCbv; C:\Windows\System32\Drivers\SPUVCbv_x64.sys [1064184 2013-05-25] (Sunplus)
U5 BlueletAudio; C:\Windows\System32\Drivers\BlueletAudio.sys [34912 2012-06-15] (Ralink Corporation.)
U5 BlueletAudio; C:\Windows\SysWOW64\Drivers\BlueletAudio.sys [34912 2012-06-15] (Ralink Corporation.)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-14 12:40 - 2013-11-14 12:41 - 00013526 _____ C:\Users\nl\Desktop\FRST.txt
2013-11-14 12:40 - 2013-11-14 12:40 - 00000000 ____D C:\FRST
2013-11-14 12:39 - 2013-11-14 12:39 - 01957794 _____ (Farbar) C:\Users\nl\Desktop\FRST64.exe
2013-11-13 13:08 - 2013-10-12 09:45 - 02241536 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-11-13 13:08 - 2013-10-12 09:45 - 01364992 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-11-13 13:08 - 2013-10-12 09:45 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-11-13 13:08 - 2013-10-12 09:43 - 19269632 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-11-13 13:08 - 2013-10-12 09:43 - 15404544 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-11-13 13:08 - 2013-10-12 09:43 - 03959808 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-11-13 13:08 - 2013-10-12 09:43 - 02648576 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-11-13 13:08 - 2013-10-12 09:43 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-11-13 13:08 - 2013-10-12 09:43 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-11-13 13:08 - 2013-10-12 09:43 - 00526336 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-11-13 13:08 - 2013-10-12 09:43 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-11-13 13:08 - 2013-10-12 09:43 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-11-13 13:08 - 2013-10-12 09:43 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-11-13 13:08 - 2013-10-12 09:43 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-11-13 13:08 - 2013-10-12 08:03 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-11-13 13:08 - 2013-10-12 08:03 - 01138176 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-11-13 13:08 - 2013-10-12 08:02 - 14355968 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-11-13 13:08 - 2013-10-12 08:02 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-11-13 13:08 - 2013-10-12 08:02 - 02877952 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-11-13 13:08 - 2013-10-12 08:02 - 02049024 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-11-13 13:08 - 2013-10-12 08:02 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-11-13 13:08 - 2013-10-12 08:02 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-11-13 13:08 - 2013-10-12 08:02 - 00391168 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2013-11-13 13:08 - 2013-10-12 08:02 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2013-11-13 13:08 - 2013-10-12 08:02 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2013-11-13 13:08 - 2013-10-12 08:02 - 00039424 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-11-13 13:08 - 2013-10-12 08:02 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2013-11-13 13:08 - 2013-10-12 07:35 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-11-13 13:08 - 2013-10-12 07:08 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-11-13 13:08 - 2013-10-12 06:44 - 00089600 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2013-11-13 13:08 - 2013-10-12 06:15 - 00071680 _____ (Microsoft Corporation) C:\windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-13 12:38 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\windows\system32\nshwfp.dll
2013-11-13 12:38 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\windows\system32\IKEEXT.DLL
2013-11-13 12:38 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\windows\system32\FWPUCLNT.DLL
2013-11-13 12:38 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\windows\SysWOW64\nshwfp.dll
2013-11-13 12:38 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\windows\SysWOW64\FWPUCLNT.DLL
2013-11-13 12:38 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\windows\system32\crypt32.dll
2013-11-13 12:38 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\windows\SysWOW64\crypt32.dll
2013-11-13 12:38 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\windows\system32\SmartcardCredentialProvider.dll
2013-11-13 12:38 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\windows\system32\credui.dll
2013-11-13 12:38 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\windows\system32\authui.dll
2013-11-13 12:38 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\windows\SysWOW64\SmartcardCredentialProvider.dll
2013-11-13 12:38 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\windows\SysWOW64\authui.dll
2013-11-13 12:38 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\credui.dll
2013-11-13 12:38 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll
2013-11-13 12:38 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll
2013-11-13 12:38 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys
2013-11-13 12:38 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2013-11-13 12:38 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2013-11-13 12:38 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2013-11-13 12:38 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2013-11-13 12:38 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2013-11-13 12:38 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2013-11-13 12:38 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2013-11-13 12:38 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2013-11-13 12:38 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2013-11-13 12:38 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2013-11-13 12:38 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll
2013-11-13 12:38 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncrypt.dll
2013-11-13 12:38 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2013-11-13 12:38 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cng.sys
2013-11-13 09:59 - 2013-11-13 09:59 - 00000000 ____D C:\windows\system32\appmgmt
2013-11-06 09:09 - 2013-11-07 22:56 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-06 08:07 - 2013-11-06 08:07 - 00000000 ____D C:\Users\Geo\AppData\Roaming\OpenOffice
2013-11-05 19:53 - 2013-11-05 19:53 - 00000000 ____D C:\Users\Nadine\AppData\Roaming\OpenOffice
2013-11-04 22:58 - 2013-11-04 22:58 - 00001098 _____ C:\Users\Nadine\Desktop\OpenOffice Writer.lnk
2013-11-04 22:57 - 2013-11-04 22:57 - 00000000 ____D C:\Program Files (x86)\OpenOffice 4
2013-11-04 22:53 - 2013-11-04 22:53 - 00000000 ____D C:\Users\nl\Desktop\OpenOffice 4.0.1 (de) Installation Files
2013-11-04 09:49 - 2013-11-04 10:04 - 163606685 _____ C:\Users\Geo\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de.exe
2013-11-03 18:33 - 2013-11-03 18:33 - 00000000 ____D C:\Users\Nadine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FRITZ!Box
2013-11-03 18:33 - 2013-11-03 18:33 - 00000000 ____D C:\Users\Nadine\AppData\Local\Deployment
2013-11-03 18:33 - 2013-11-03 18:33 - 00000000 ____D C:\Users\Nadine\AppData\Local\Apps\2.0
2013-11-03 18:32 - 2013-11-03 18:32 - 00010245 _____ C:\Users\Nadine\Downloads\fritzbox-usb-fernanschluss.application
2013-11-02 00:04 - 2013-11-02 00:06 - 00000000 ____D C:\Users\Geo\Downloads\Tor Browser
2013-10-31 19:47 - 2013-10-31 19:48 - 00000000 ____D C:\Users\Nadine\Documents\Briefe und Protokolle
2013-10-29 19:50 - 2013-10-29 19:50 - 00004128 _____ C:\Users\Nadine\Desktop\FIlm AG Pedo.wlmp
2013-10-29 19:25 - 2013-10-29 19:38 - 00000000 ____D C:\Users\Nadine\AppData\Roaming\avidemux
2013-10-29 15:11 - 2013-10-29 15:13 - 00000000 ____D C:\Users\Geo\Documents\Ebay
2013-10-29 15:11 - 2013-10-29 15:11 - 00000000 ____D C:\Users\Geo\Documents\Neuer Ordner
2013-10-27 13:12 - 2013-10-27 13:12 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-10-27 12:50 - 2013-10-27 12:54 - 95555709 _____ C:\Users\Geo\Desktop\Film Hase.mp4
2013-10-27 10:57 - 2013-10-27 10:57 - 00005763 _____ C:\Users\Geo\Desktop\Film Hase.wlmp
2013-10-27 10:35 - 2013-10-27 10:35 - 00000000 ____D C:\windows\de
2013-10-27 10:35 - 2013-10-27 10:35 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2013-10-27 10:34 - 2013-10-27 10:34 - 00000000 ____D C:\windows\PCHEALTH
2013-10-27 10:33 - 2013-10-27 10:34 - 00000000 ____D C:\Program Files (x86)\Windows Live
2013-10-27 10:32 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAudio2_7.dll
2013-10-27 10:32 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\windows\system32\XAudio2_7.dll
2013-10-27 10:32 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\windows\system32\XAPOFX1_5.dll
2013-10-27 10:32 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAPOFX1_5.dll
2013-10-27 10:32 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\windows\system32\D3DCompiler_43.dll
2013-10-27 10:32 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DCompiler_43.dll
2013-10-27 10:32 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\windows\system32\d3dx11_43.dll
2013-10-27 10:32 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx11_43.dll
2013-10-27 10:29 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\windows\system32\d3dx10_42.dll
2013-10-27 10:29 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx10_42.dll
2013-10-27 10:28 - 2013-10-27 10:28 - 00000193 _____ C:\windows\DirectX.log
2013-10-27 10:28 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\windows\system32\d3dx9_32.dll
2013-10-27 10:28 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx9_32.dll
2013-10-27 10:27 - 2013-10-27 10:27 - 00000000 ____D C:\Users\nl\AppData\Local\Windows Live
2013-10-25 22:18 - 2013-10-25 22:18 - 00000907 _____ C:\Users\Public\Desktop\Avidemux 2.6 - 64bits.lnk
2013-10-25 22:18 - 2013-10-25 22:18 - 00000907 _____ C:\ProgramData\Desktop\Avidemux 2.6 - 64bits.lnk
2013-10-25 22:18 - 2013-10-25 22:18 - 00000000 ____D C:\Program Files\Avidemux 2.6 - 64bits
2013-10-21 17:45 - 2013-10-21 17:44 - 00037880 _____ (Sophos Limited) C:\windows\system32\SophosBootTasks.exe
2013-10-20 22:31 - 2013-11-14 11:20 - 00567298 _____ C:\windows\avmacc.log
2013-10-20 22:31 - 2013-11-13 11:10 - 00000894 _____ C:\windows\avmacc1.log
2013-10-20 22:31 - 2013-10-20 22:31 - 00116480 _____ (AVM Berlin) C:\windows\system32\Drivers\avmaura.sys
2013-10-20 22:31 - 2013-10-20 22:31 - 00000000 ____D C:\Users\Geo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FRITZ!Box
2013-10-20 22:30 - 2013-11-13 11:05 - 00000000 ____D C:\Users\Geo\AppData\Local\Deployment
2013-10-20 22:30 - 2013-10-20 22:30 - 00010245 _____ C:\Users\Geo\Downloads\fritzbox-usb-fernanschluss.application
2013-10-20 22:30 - 2013-10-20 22:30 - 00000000 ____D C:\Users\Geo\AppData\Local\Apps\2.0
2013-10-20 17:10 - 2013-11-10 13:38 - 00000000 ____D C:\Users\Nadine\Documents\Phi 13
2013-10-15 23:20 - 2013-09-04 13:12 - 00343040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbhub.sys
2013-10-15 23:20 - 2013-09-04 13:11 - 00325120 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbport.sys
2013-10-15 23:20 - 2013-09-04 13:11 - 00099840 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbccgp.sys
2013-10-15 23:20 - 2013-09-04 13:11 - 00052736 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbehci.sys
2013-10-15 23:20 - 2013-09-04 13:11 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbuhci.sys
2013-10-15 23:20 - 2013-09-04 13:11 - 00025600 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbohci.sys
2013-10-15 23:20 - 2013-09-04 13:11 - 00007808 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbd.sys
2013-10-15 17:45 - 2013-10-21 09:18 - 00012899 _____ C:\Users\Geo\Desktop\Unbenannt 1.odt

==================== One Month Modified Files and Folders =======

2013-11-14 12:41 - 2013-11-14 12:40 - 00013526 _____ C:\Users\nl\Desktop\FRST.txt
2013-11-14 12:40 - 2013-11-14 12:40 - 00000000 ____D C:\FRST
2013-11-14 12:39 - 2013-11-14 12:39 - 01957794 _____ (Farbar) C:\Users\nl\Desktop\FRST64.exe
2013-11-14 12:38 - 2012-04-21 06:44 - 00000830 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-11-14 12:09 - 2013-01-17 16:03 - 01356570 _____ C:\windows\WindowsUpdate.log
2013-11-14 12:01 - 2013-05-30 08:30 - 00000000 ____D C:\Users\Geo\AppData\Roaming\BOM
2013-11-14 11:24 - 2013-05-21 08:42 - 00064024 _____ C:\Users\nl\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-14 11:21 - 2013-05-21 08:36 - 00000000 ____D C:\Users\nl
2013-11-14 11:20 - 2013-10-20 22:31 - 00567298 _____ C:\windows\avmacc.log
2013-11-14 10:16 - 2013-05-27 10:37 - 00003910 _____ C:\windows\System32\Tasks\User_Feed_Synchronization-{76792F57-5F6A-4102-84CE-5FC84C141FCD}
2013-11-14 09:23 - 2013-05-25 00:13 - 00000336 _____ C:\windows\Tasks\HPCeeScheduleForNadine.job
2013-11-14 08:24 - 2009-07-14 05:45 - 00031312 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-14 08:24 - 2009-07-14 05:45 - 00031312 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-14 08:23 - 2012-04-21 04:11 - 00696870 _____ C:\windows\system32\perfh007.dat
2013-11-14 08:23 - 2012-04-21 04:11 - 00148134 _____ C:\windows\system32\perfc007.dat
2013-11-14 08:23 - 2009-07-14 06:13 - 01612484 _____ C:\windows\system32\PerfStringBackup.INI
2013-11-14 08:17 - 2012-04-21 06:43 - 00000000 ____D C:\ProgramData\PDFC
2013-11-14 08:16 - 2009-07-14 06:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2013-11-14 08:16 - 2009-07-14 05:51 - 00084153 _____ C:\windows\setupact.log
2013-11-13 13:07 - 2013-07-17 07:15 - 00000000 ____D C:\windows\system32\MRT
2013-11-13 13:05 - 2013-05-21 11:55 - 82896128 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-11-13 11:50 - 2013-05-24 07:11 - 00007591 _____ C:\Users\nl\AppData\Local\Resmon.ResmonCfg
2013-11-13 11:10 - 2013-10-20 22:31 - 00000894 _____ C:\windows\avmacc1.log
2013-11-13 11:05 - 2013-10-20 22:30 - 00000000 ____D C:\Users\Geo\AppData\Local\Deployment
2013-11-13 10:23 - 2013-07-31 12:36 - 00000000 ____D C:\Users\nl\AppData\Local\Adobe
2013-11-13 10:23 - 2012-04-21 06:44 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2013-11-13 10:23 - 2012-04-21 06:44 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-11-13 10:23 - 2012-04-21 06:44 - 00003768 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2013-11-13 09:59 - 2013-11-13 09:59 - 00000000 ____D C:\windows\system32\appmgmt
2013-11-13 09:50 - 2012-09-26 08:53 - 00000932 _____ C:\windows\SysWOW64\bscs.ini
2013-11-12 19:31 - 2013-09-16 20:09 - 00000000 ____D C:\Users\Nadine\Documents\Deu 5
2013-11-12 16:51 - 2013-05-21 16:03 - 00003922 _____ C:\windows\System32\Tasks\User_Feed_Synchronization-{62A9F36E-17F3-40F5-90C0-1A677CE29C86}
2013-11-11 20:12 - 2013-07-30 20:06 - 00000000 _____ C:\windows\system32\vireng.log
2013-11-10 14:07 - 2013-06-18 20:42 - 00000000 ____D C:\Users\Nadine\Documents\Philo 11
2013-11-10 13:38 - 2013-10-20 17:10 - 00000000 ____D C:\Users\Nadine\Documents\Phi 13
2013-11-07 22:56 - 2013-11-06 09:09 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-06 08:13 - 2013-06-20 08:58 - 00000000 ____D C:\Users\Geo\AppData\Roaming\MD5 File Hasher
2013-11-06 08:07 - 2013-11-06 08:07 - 00000000 ____D C:\Users\Geo\AppData\Roaming\OpenOffice
2013-11-05 19:53 - 2013-11-05 19:53 - 00000000 ____D C:\Users\Nadine\AppData\Roaming\OpenOffice
2013-11-05 19:51 - 2013-05-21 16:04 - 00064024 _____ C:\Users\Nadine\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-05 18:53 - 2009-07-14 05:45 - 00294712 _____ C:\windows\system32\FNTCACHE.DAT
2013-11-04 23:07 - 2013-05-27 13:01 - 00064024 _____ C:\Users\Geo\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-04 22:58 - 2013-11-04 22:58 - 00001098 _____ C:\Users\Nadine\Desktop\OpenOffice Writer.lnk
2013-11-04 22:57 - 2013-11-04 22:57 - 00000000 ____D C:\Program Files (x86)\OpenOffice 4
2013-11-04 22:57 - 2013-05-21 14:48 - 00000000 ____D C:\Program Files (x86)\OpenOffice.org 3
2013-11-04 22:53 - 2013-11-04 22:53 - 00000000 ____D C:\Users\nl\Desktop\OpenOffice 4.0.1 (de) Installation Files
2013-11-04 10:04 - 2013-11-04 09:49 - 163606685 _____ C:\Users\Geo\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de.exe
2013-11-03 18:33 - 2013-11-03 18:33 - 00000000 ____D C:\Users\Nadine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FRITZ!Box
2013-11-03 18:33 - 2013-11-03 18:33 - 00000000 ____D C:\Users\Nadine\AppData\Local\Deployment
2013-11-03 18:33 - 2013-11-03 18:33 - 00000000 ____D C:\Users\Nadine\AppData\Local\Apps\2.0
2013-11-03 18:32 - 2013-11-03 18:32 - 00010245 _____ C:\Users\Nadine\Downloads\fritzbox-usb-fernanschluss.application
2013-11-02 00:06 - 2013-11-02 00:04 - 00000000 ____D C:\Users\Geo\Downloads\Tor Browser
2013-11-01 11:52 - 2013-05-31 10:52 - 00003170 _____ C:\windows\System32\Tasks\HPCeeScheduleForGeo
2013-11-01 11:52 - 2013-05-31 10:52 - 00000324 _____ C:\windows\Tasks\HPCeeScheduleForGeo.job
2013-10-31 19:49 - 2013-08-12 15:51 - 00000000 ____D C:\Users\Nadine\Documents\Philo 12
2013-10-31 19:48 - 2013-10-31 19:47 - 00000000 ____D C:\Users\Nadine\Documents\Briefe und Protokolle
2013-10-29 19:50 - 2013-10-29 19:50 - 00004128 _____ C:\Users\Nadine\Desktop\FIlm AG Pedo.wlmp
2013-10-29 19:38 - 2013-10-29 19:25 - 00000000 ____D C:\Users\Nadine\AppData\Roaming\avidemux
2013-10-29 15:13 - 2013-10-29 15:11 - 00000000 ____D C:\Users\Geo\Documents\Ebay
2013-10-29 15:11 - 2013-10-29 15:11 - 00000000 ____D C:\Users\Geo\Documents\Neuer Ordner
2013-10-27 13:12 - 2013-10-27 13:12 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-10-27 13:12 - 2013-01-17 16:35 - 00000000 ____D C:\ProgramData\Skype
2013-10-27 12:54 - 2013-10-27 12:50 - 95555709 _____ C:\Users\Geo\Desktop\Film Hase.mp4
2013-10-27 10:57 - 2013-10-27 10:57 - 00005763 _____ C:\Users\Geo\Desktop\Film Hase.wlmp
2013-10-27 10:38 - 2013-06-20 09:08 - 00000000 ____D C:\Users\Geo\AppData\Roaming\avidemux
2013-10-27 10:35 - 2013-10-27 10:35 - 00000000 ____D C:\windows\de
2013-10-27 10:35 - 2013-10-27 10:35 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2013-10-27 10:34 - 2013-10-27 10:34 - 00000000 ____D C:\windows\PCHEALTH
2013-10-27 10:34 - 2013-10-27 10:33 - 00000000 ____D C:\Program Files (x86)\Windows Live
2013-10-27 10:34 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2013-10-27 10:28 - 2013-10-27 10:28 - 00000193 _____ C:\windows\DirectX.log
2013-10-27 10:27 - 2013-10-27 10:27 - 00000000 ____D C:\Users\nl\AppData\Local\Windows Live
2013-10-25 22:36 - 2013-06-21 09:23 - 00008192 _____ C:\Users\Geo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-10-25 22:18 - 2013-10-25 22:18 - 00000907 _____ C:\Users\Public\Desktop\Avidemux 2.6 - 64bits.lnk
2013-10-25 22:18 - 2013-10-25 22:18 - 00000907 _____ C:\ProgramData\Desktop\Avidemux 2.6 - 64bits.lnk
2013-10-25 22:18 - 2013-10-25 22:18 - 00000000 ____D C:\Program Files\Avidemux 2.6 - 64bits
2013-10-23 08:55 - 2009-07-14 06:08 - 00032640 _____ C:\windows\Tasks\SCHEDLGU.TXT
2013-10-22 19:15 - 2013-09-04 10:22 - 00000000 ____D C:\Users\Nadine\Documents\Deu 9
2013-10-21 22:03 - 2010-11-21 04:47 - 00036410 _____ C:\windows\PFRO.log
2013-10-21 17:45 - 2013-05-21 13:53 - 00000000 ____D C:\ProgramData\Sophos
2013-10-21 17:44 - 2013-10-21 17:45 - 00037880 _____ (Sophos Limited) C:\windows\system32\SophosBootTasks.exe
2013-10-21 09:18 - 2013-10-15 17:45 - 00012899 _____ C:\Users\Geo\Desktop\Unbenannt 1.odt
2013-10-20 22:31 - 2013-10-20 22:31 - 00116480 _____ (AVM Berlin) C:\windows\system32\Drivers\avmaura.sys
2013-10-20 22:31 - 2013-10-20 22:31 - 00000000 ____D C:\Users\Geo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FRITZ!Box
2013-10-20 22:30 - 2013-10-20 22:30 - 00010245 _____ C:\Users\Geo\Downloads\fritzbox-usb-fernanschluss.application
2013-10-20 22:30 - 2013-10-20 22:30 - 00000000 ____D C:\Users\Geo\AppData\Local\Apps\2.0
2013-10-17 09:39 - 2009-07-14 04:20 - 00000000 ____D C:\windows\rescache
2013-10-15 12:20 - 2012-04-21 06:24 - 01590378 _____ C:\windows\SysWOW64\PerfStringBackup.INI

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-14 12:21

==================== End Of Log ============================