Ungewollte Startseite in den Browsern - http://www.default-search.net - wie entferne ich das?

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-07-2014 01
Ran by Ana (administrator) on ANA-PC on 25-07-2014 14:23:40
Running from C:\Users\Ana\Downloads
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer Portal\CCDMonitorService.exe
(Acer Cloud Technology) C:\Program Files (x86)\Acer\Acer Portal\ccd.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QASvc.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\RMSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(TODO: <Company name>) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
() C:\Windows\System32\PortChanger.exe
(Aztec Media Inc) C:\Program Files (x86)\Settings Manager\systemk\SystemkService.exe
(Aztec Media Inc) C:\Program Files (x86)\Settings Manager\systemk\SystemkService.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDTouch.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAEvent.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAMsg.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QuickAccess.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe
(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3070 B611 series\Bin\ScanToPCActivationApp.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3070 B611 series\Bin\HPNetworkCommunicatorCom.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Pokki) C:\Users\Ana\AppData\Local\Pokki\Engine\pokki.exe
(Dropbox, Inc.) C:\Users\Ana\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3070 B611 series\Bin\HPNetworkCommunicator.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\delegate_execute.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Reader_6.3.9654.17044_x64__8wekyb3d8bbwe\glcnd.exe
(Microsoft Corporation) C:\Windows\System32\reg.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2890056 2013-09-06] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13647576 2013-08-27] (Realtek Semiconductor)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2014-05-08] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [132736 2013-09-07] ( (Atheros Communications))
HKU\S-1-5-21-1561291992-2936079153-2951588444-1001\...\Run: [Pokki] => C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform 
HKU\S-1-5-21-1561291992-2936079153-2951588444-1001\...\Run: [AcerCloud] => C:\Program Files (x86)\Acer\Acer Portal\acpanel_win.exe [18247424 2014-02-13] (Acer Incorporated)
HKU\S-1-5-21-1561291992-2936079153-2951588444-1001\...\Run: [HP Deskjet 3070 B611 series (NET)] => C:\Program Files\HP\HP Deskjet 3070 B611 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
IFEO\bitguard.exe: [Debugger] tasklist.exe
IFEO\bprotect.exe: [Debugger] tasklist.exe
IFEO\bpsvc.exe: [Debugger] tasklist.exe
IFEO\browserdefender.exe: [Debugger] tasklist.exe
IFEO\browserprotect.exe: [Debugger] tasklist.exe
IFEO\browsersafeguard.exe: [Debugger] tasklist.exe
IFEO\dprotectsvc.exe: [Debugger] tasklist.exe
IFEO\jumpflip: [Debugger] tasklist.exe
IFEO\protectedsearch.exe: [Debugger] tasklist.exe
IFEO\searchinstaller.exe: [Debugger] tasklist.exe
IFEO\searchprotection.exe: [Debugger] tasklist.exe
IFEO\searchprotector.exe: [Debugger] tasklist.exe
IFEO\searchsettings.exe: [Debugger] tasklist.exe
IFEO\searchsettings64.exe: [Debugger] tasklist.exe
IFEO\snapdo.exe: [Debugger] tasklist.exe
IFEO\stinst32.exe: [Debugger] tasklist.exe
IFEO\stinst64.exe: [Debugger] tasklist.exe
IFEO\umbrella.exe: [Debugger] tasklist.exe
IFEO\utiljumpflip.exe: [Debugger] tasklist.exe
IFEO\volaro: [Debugger] tasklist.exe
IFEO\vonteera: [Debugger] tasklist.exe
IFEO\websteroids.exe: [Debugger] tasklist.exe
IFEO\websteroidsservice.exe: [Debugger] tasklist.exe
Startup: C:\Users\Ana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Ana\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Ana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Deskjet 3070 B611 series (Netzwerk).lnk
ShortcutTarget: Tintenwarnungen überwachen - HP Deskjet 3070 B611 series (Netzwerk).lnk -> C:\Program Files\HP\HP Deskjet 3070 B611 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)
ShellIconOverlayIdentifiers:  SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File
ShellIconOverlayIdentifiers:  SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File
ShellIconOverlayIdentifiers:  SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File
ShellIconOverlayIdentifiers:  SkyDrivePro1 (ErrorConflict) -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers:  SkyDrivePro2 (SyncInProgress) -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers:  SkyDrivePro3 (InSync) -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ana\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ana\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ana\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: DropboxExt4 -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ana\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32:  SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File
ShellIconOverlayIdentifiers-x32:  SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File
ShellIconOverlayIdentifiers-x32:  SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File
ShellIconOverlayIdentifiers-x32: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers-x32: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers-x32: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  No File

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.default-search.net?sid=503&aid=103&itype=n&ver=13437&tm=416&src=hmp
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com/?pc=ACJB
SearchScopes: HKLM - DefaultScope {EB4404F9-7C29-4ECF-9078-7D739DD346F0} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2503} URL = hxxp://www.default-search.net/search?sid=503&aid=103&itype=n&ver=13437&tm=416&src=ds&p={searchTerms}
SearchScopes: HKLM - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKLM - {EB4404F9-7C29-4ECF-9078-7D739DD346F0} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB
SearchScopes: HKLM-x32 - DefaultScope {EB4404F9-7C29-4ECF-9078-7D739DD346F0} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2503} URL = hxxp://www.default-search.net/search?sid=503&aid=103&itype=n&ver=13437&tm=416&src=ds&p={searchTerms}
SearchScopes: HKLM-x32 - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKLM-x32 - {EB4404F9-7C29-4ECF-9078-7D739DD346F0} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB
SearchScopes: HKCU - DefaultScope {EB4404F9-7C29-4ECF-9078-7D739DD346F0} URL = 
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2503} URL = hxxp://www.default-search.net/search?sid=503&aid=103&itype=n&ver=13437&tm=416&src=ds&p={searchTerms}
SearchScopes: HKCU - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKCU - {EB4404F9-7C29-4ECF-9078-7D739DD346F0} URL = 
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Ana\AppData\Roaming\Mozilla\Firefox\Profiles\4x5pemc8.default
FF SearchEngineOrder.1: default-search.net
FF Homepage: hxxp://www.default-search.net?sid=503&aid=103&itype=n&ver=13437&tm=416&src=hmp
FF Keyword.URL: hxxp://www.default-search.net/search?sid=503&aid=103&itype=n&ver=13437&tm=416&src=ds&p=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Ana\AppData\Roaming\Mozilla\Firefox\Profiles\4x5pemc8.default\searchplugins\default-search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\default-search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: ProxTube - Unblock YouTube - C:\Users\Ana\AppData\Roaming\Mozilla\Firefox\Profiles\4x5pemc8.default\Extensions\ich@maltegoetz.de [2014-05-17]
FF Extension: Boomerang for GMail - C:\Users\Ana\AppData\Roaming\Mozilla\Firefox\Profiles\4x5pemc8.default\Extensions\{65e41d20-f092-41b7-bb83-c6e8a9ab0f57}.xpi [2014-06-03]
FF Extension: Adblock Plus - C:\Users\Ana\AppData\Roaming\Mozilla\Firefox\Profiles\4x5pemc8.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-03-21]

Chrome: 
=======
CHR HomePage: chrome://newtab
CHR StartupUrls: "hxxp://www.default-search.net?sid=503&aid=103&itype=n&ver=13437&tm=416&src=hmp"
CHR DefaultSearchProvider: default-search.net
CHR DefaultSearchURL: hxxp://www.default-search.net/search?sid=503&aid=103&itype=n&ver=13437&tm=416&src=ds&p={searchTerms}
CHR Extension: (ProxFlow) - C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2014-05-21]
CHR Extension: (Google Docs) - C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-28]
CHR Extension: (Google Drive) - C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-28]
CHR Extension: (YouTube) - C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-28]
CHR Extension: (Google-Suche) - C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-02-28]
CHR Extension: (SiteAdvisor) - C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2014-02-28]
CHR Extension: (AdBlock) - C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-02-28]
CHR Extension: (Google Wallet) - C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-28]
CHR Extension: (Chloe) - C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\pillplnpmfjckedkedpaoembffbpklnf [2014-02-28]
CHR Extension: (Google Mail) - C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-02-28]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [312448 2013-09-07] (Windows (R) Win 7 DDK provider)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Portal\CCDMonitorService.exe [2798336 2014-02-13] (Acer Incorporated)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2279608 2014-05-21] (Microsoft Corporation)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [663592 2013-07-05] (Acer Incorporated)
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [101192 2013-09-06] (ELAN Microelectronics Corp.)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [235008 2013-07-16] (TODO: <Company name>) [File not signed]
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-04] (Intel Corporation)
R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [457768 2013-08-03] (Acer Incorporate)
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219272 2013-08-07] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [182752 2013-08-07] (McAfee, Inc.)
S3 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [4278112 2013-08-01] (Symantec Corporation)
S3 OpenVPNService; C:\Program Files (x86)\OpenVPN\bin\openvpnserv.exe [32568 2013-08-22] (The OpenVPN Project)
R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [457768 2013-08-02] (Acer Incorporate)
R3 RMSvc; C:\Program Files\Acer\Acer Quick Access\RMSvc.exe [448040 2013-08-02] (Acer Incorporate)
S3 swprv; C:\Windows\System32\swprv.dll [718336 2014-03-27] (Microsoft Corporation) [File not signed]
R2 SystemkService; C:\Program Files (x86)\Settings Manager\systemk\SystemkService.exe [3572240 2014-07-17] (Aztec Media Inc)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)
S2 McAfee SiteAdvisor Service; c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3859968 2013-08-15] (Qualcomm Atheros Communications, Inc.)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-09-07] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
R3 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0405000.009\ccSetx64.sys [150104 2013-07-30] (Symantec Corporation)
S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70112 2013-08-07] (McAfee, Inc.)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)
R1 F06DEFF2-5B9C-490D-910F-35D3A9119622; C:\Program Files (x86)\Settings Manager\systemk\x64\systemkmgrc2.cfg [41872 2014-07-17] (Aztec Media Inc)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-07-25] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2014-05-12] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-04] (Intel Corporation)
S3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [179664 2013-08-07] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [310224 2013-08-07] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [69264 2013-08-07] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [519064 2013-08-07] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [776168 2013-08-07] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [343568 2013-08-07] (McAfee, Inc.)
R1 MpKsl5ff1c867; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{F54352D1-0806-40B5-8F5B-BC1CE9C063A2}\MpKsl5ff1c867.sys [45352 2014-07-25] (Microsoft Corporation)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-07-25 14:23 - 2014-07-25 14:24 - 00025196 _____ () C:\Users\Ana\Downloads\FRST.txt
2014-07-25 14:22 - 2014-07-25 14:23 - 00000000 ____D () C:\FRST
2014-07-25 14:21 - 2014-07-25 14:22 - 02093568 _____ (Farbar) C:\Users\Ana\Downloads\FRST64.exe
2014-07-25 14:03 - 2014-07-25 14:03 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-25 14:00 - 2014-07-25 14:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-07-25 14:00 - 2014-07-25 14:00 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-07-25 14:00 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-07-25 14:00 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-07-25 13:19 - 2014-07-25 13:20 - 00000000 ____D () C:\Users\Ana\Documents\Drucker
2014-07-25 12:27 - 2014-07-25 12:27 - 01035034 _____ () C:\Users\Ana\Downloads\Dateiordner_Allgemeiner_Dateiordner.zip
2014-07-25 12:25 - 2014-07-25 12:35 - 00000000 ____D () C:\Users\Ana\Documents\HAUSARBEIT ZivilRecht
2014-07-25 12:25 - 2014-07-25 12:26 - 00000000 ____D () C:\Users\Ana\Documents\HAUSARBEIT ÖffRecht
2014-07-25 12:24 - 2014-07-25 12:25 - 00000000 ____D () C:\Users\Ana\Documents\Sonstiges
2014-07-25 11:25 - 2014-07-25 12:39 - 00000000 ____D () C:\Users\Ana\Desktop\Wasserschaden
2014-07-22 21:25 - 2014-07-22 21:25 - 00000000 ____D () C:\Users\Ana\AppData\Roaming\FirefoxToolbar
2014-07-22 21:25 - 2014-07-22 21:25 - 00000000 ____D () C:\Program Files (x86)\Settings Manager
2014-07-22 21:24 - 2014-07-25 13:57 - 00000000 ____D () C:\ProgramData\systemk
2014-07-22 21:24 - 2014-07-22 21:24 - 00000000 ____D () C:\Users\Ana\AppData\Roaming\OpenCandy
2014-07-22 21:24 - 2014-07-22 21:24 - 00000000 ____D () C:\Users\Ana\AppData\Roaming\AnvSoft
2014-07-22 21:23 - 2014-07-22 21:23 - 31540304 _____ (Any-Video-Converter.com ) C:\Users\Ana\Downloads\avc-free563.exe
2014-07-22 11:38 - 2014-07-22 11:38 - 00009799 _____ () C:\Users\Ana\Downloads\Briefvorlagen.zip
2014-07-22 11:37 - 2014-07-22 11:37 - 00961360 _____ (Chip Digital GmbH) C:\Users\Ana\Downloads\Briefvorlagen - CHIP-Installer.exe
2014-07-21 21:38 - 2014-07-25 13:21 - 00000000 ____D () C:\Users\Ana\Documents\4. ARBEIT
2014-07-21 21:37 - 2014-07-25 13:18 - 00000000 ____D () C:\Users\Ana\Documents\1. UNI
2014-07-20 18:53 - 2014-07-20 18:53 - 00000000 ____D () C:\Windows\LastGood
2014-07-20 18:53 - 2014-07-20 18:53 - 00000000 ____D () C:\ProgramData\Hewlett-Packard
2014-07-19 19:15 - 2014-07-19 19:15 - 06774037 _____ () C:\Users\Ana\Downloads\wordpress-3.9.1-de_DE (1).zip
2014-07-19 19:10 - 2014-07-19 19:10 - 06774037 _____ () C:\Users\Ana\Downloads\wordpress-3.9.1-de_DE.zip
2014-07-16 17:30 - 2014-07-16 17:34 - 00000000 ____D () C:\Users\Ana\Downloads\Dateiordner_DERECHO_CIVIL
2014-07-16 17:29 - 2014-07-16 17:29 - 00432644 _____ () C:\Users\Ana\Downloads\Dateiordner_DERECHO_CIVIL.zip
2014-07-15 14:26 - 2014-07-15 14:27 - 01468764 _____ () C:\Users\Ana\Downloads\Dateiordner_Fall_13_-_Klausurvorbereitung_Wiederholung (1).zip
2014-07-12 20:24 - 2014-07-12 20:24 - 09974912 _____ (Microsoft Corporation) C:\Users\Ana\Downloads\FF2014 deDE.exe
2014-07-11 13:41 - 2014-07-11 13:41 - 01468764 _____ () C:\Users\Ana\Downloads\Dateiordner_Fall_13_-_Klausurvorbereitung_Wiederholung.zip
2014-07-11 13:41 - 2014-07-11 13:41 - 00000000 ____D () C:\Users\Ana\Downloads\Dateiordner_Fall_13_-_Klausurvorbereitung_Wiederholung
2014-07-11 13:41 - 2014-07-11 13:41 - 00000000 ____D () C:\Users\Ana\AppData\Local\Adobe
2014-07-11 11:26 - 2014-07-11 11:27 - 00000000 ____D () C:\Users\Ana\Downloads\Anhänge_2014711 (2)
2014-07-11 11:26 - 2014-07-11 11:26 - 00000000 ____D () C:\Users\Ana\Downloads\Anhänge_2014711 (1)
2014-07-11 11:25 - 2014-07-11 11:25 - 10329775 _____ () C:\Users\Ana\Downloads\Anhänge_2014711 (2).zip
2014-07-11 11:25 - 2014-07-11 11:25 - 00000000 ____D () C:\Users\Ana\Downloads\Anhänge_2014711
2014-07-11 11:23 - 2014-07-11 11:23 - 10499155 _____ () C:\Users\Ana\Downloads\Anhänge_2014711.zip
2014-07-11 11:23 - 2014-07-11 11:23 - 05108594 _____ () C:\Users\Ana\Downloads\Anhänge_2014711 (1).zip
2014-07-11 11:10 - 2014-07-11 11:10 - 00003548 _____ () C:\Windows\System32\Tasks\HP AR Program Upload - 4d8106614a004b35b4cd45b7cbd914a8d2d9985f39984a619889280a1299dd6c
2014-07-10 20:17 - 2014-04-14 05:29 - 01018880 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-07-09 18:23 - 2014-06-17 00:26 - 00779264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2014-07-09 18:23 - 2014-06-17 00:24 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-07-09 18:23 - 2014-06-06 16:20 - 04190720 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-07-09 18:23 - 2014-05-30 05:03 - 00563200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-07-09 18:23 - 2014-05-29 14:02 - 00565576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2014-07-09 18:23 - 2014-05-29 09:55 - 00735232 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-07-09 18:23 - 2014-05-29 08:40 - 00735232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2014-07-09 18:23 - 2014-05-29 08:37 - 00436224 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2014-07-09 18:23 - 2014-05-29 07:34 - 00318976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2014-07-09 18:23 - 2014-05-29 07:27 - 01417216 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-07-09 18:10 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-09 18:10 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-09 18:10 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-07-09 18:10 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-09 18:10 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-09 18:10 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-09 18:10 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-09 18:10 - 2014-06-19 01:46 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-07-09 18:10 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-09 18:10 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-09 18:10 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-07-09 18:10 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-09 18:10 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-07-09 18:10 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-07-09 18:10 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-09 18:10 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-07-09 18:10 - 2014-06-19 00:57 - 00225280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-07-09 18:10 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-07-09 18:10 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-09 18:10 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-07-09 18:10 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-07-09 18:10 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-07-09 18:10 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-09 18:10 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-09 18:10 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-07-09 18:10 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-07-09 18:10 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-07-09 18:04 - 2014-06-06 15:04 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-07-09 18:04 - 2014-06-06 14:18 - 00488960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-07-09 18:00 - 2014-05-31 12:07 - 00054776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-07-09 18:00 - 2014-05-31 12:06 - 00555736 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2014-07-09 18:00 - 2014-05-31 05:40 - 13287936 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2014-07-09 18:00 - 2014-05-31 05:30 - 11792384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2014-07-09 18:00 - 2014-05-31 05:12 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-09 18:00 - 2014-05-31 05:06 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-07-09 18:00 - 2014-05-31 05:03 - 00827392 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-07-09 18:00 - 2014-05-31 05:01 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-09 18:00 - 2014-05-31 04:56 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2014-07-09 18:00 - 2014-05-31 04:54 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2014-07-09 18:00 - 2014-05-31 04:48 - 03463680 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-07-09 18:00 - 2014-05-31 04:37 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2014-07-09 18:00 - 2014-05-31 04:36 - 00923136 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2014-07-09 18:00 - 2014-05-31 04:35 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2014-07-09 18:00 - 2014-05-31 04:32 - 00756224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2014-07-09 17:55 - 2014-07-09 17:55 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\WSReset.exe
2014-07-08 19:34 - 2014-07-08 19:34 - 00002457 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-07-08 19:33 - 2014-07-12 20:06 - 00000000 ____D () C:\ProgramData\Adobe
2014-07-08 19:33 - 2014-07-08 19:33 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-07-06 21:34 - 2014-07-06 21:34 - 00080492 _____ () C:\Users\Ana\Downloads\Bewertungsmatrix-1.pptx

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2021-10-21 15:36 - 2013-11-16 23:30 - 00000852 _____ () C:\Windows\system32\Drivers\RTKHDRC.dat
2021-10-04 09:34 - 2013-11-16 23:30 - 00000712 _____ () C:\Windows\system32\Drivers\RTMICEQ0.dat
2014-07-25 14:24 - 2014-07-25 14:23 - 00025196 _____ () C:\Users\Ana\Downloads\FRST.txt
2014-07-25 14:23 - 2014-07-25 14:22 - 00000000 ____D () C:\FRST
2014-07-25 14:22 - 2014-07-25 14:21 - 02093568 _____ (Farbar) C:\Users\Ana\Downloads\FRST64.exe
2014-07-25 14:16 - 2014-02-28 15:55 - 00000000 ____D () C:\Users\Ana\AppData\Roaming\Skype
2014-07-25 14:03 - 2014-07-25 14:03 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-25 14:03 - 2014-02-28 05:45 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1561291992-2936079153-2951588444-1001
2014-07-25 14:00 - 2014-07-25 14:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-07-25 14:00 - 2014-07-25 14:00 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-07-25 14:00 - 2014-03-02 22:33 - 00001122 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-07-25 14:00 - 2014-03-02 22:33 - 00000000 ____D () C:\Users\Ana\AppData\Roaming\Malwarebytes
2014-07-25 14:00 - 2014-03-02 22:33 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-25 14:00 - 2014-03-02 22:33 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-07-25 14:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru
2014-07-25 13:57 - 2014-07-22 21:24 - 00000000 ____D () C:\ProgramData\systemk
2014-07-25 13:44 - 2014-02-28 19:07 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-07-25 13:35 - 2014-02-28 06:05 - 00001118 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-25 13:22 - 2014-03-02 00:21 - 00000000 ____D () C:\Users\Ana\AppData\Local\CrashDumps
2014-07-25 13:21 - 2014-07-21 21:38 - 00000000 ____D () C:\Users\Ana\Documents\4. ARBEIT
2014-07-25 13:20 - 2014-07-25 13:19 - 00000000 ____D () C:\Users\Ana\Documents\Drucker
2014-07-25 13:18 - 2014-07-21 21:37 - 00000000 ____D () C:\Users\Ana\Documents\1. UNI
2014-07-25 13:18 - 2014-03-12 15:00 - 00005120 _____ () C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for ANA-PC-Ana Ana-PC
2014-07-25 13:13 - 2013-11-16 23:12 - 01155192 _____ () C:\Windows\WindowsUpdate.log
2014-07-25 12:39 - 2014-07-25 11:25 - 00000000 ____D () C:\Users\Ana\Desktop\Wasserschaden
2014-07-25 12:38 - 2014-02-28 06:39 - 00000000 ___RD () C:\Users\Ana\Dropbox
2014-07-25 12:36 - 2014-06-04 08:28 - 00000000 ____D () C:\Users\Ana\Documents\2. DOKUMENTE
2014-07-25 12:35 - 2014-07-25 12:25 - 00000000 ____D () C:\Users\Ana\Documents\HAUSARBEIT ZivilRecht
2014-07-25 12:32 - 2014-02-28 05:39 - 00000000 ____D () C:\Users\Ana\AppData\Local\Packages
2014-07-25 12:31 - 2014-02-28 06:46 - 00000000 ____D () C:\Users\Ana\AppData\Local\Deployment
2014-07-25 12:27 - 2014-07-25 12:27 - 01035034 _____ () C:\Users\Ana\Downloads\Dateiordner_Allgemeiner_Dateiordner.zip
2014-07-25 12:26 - 2014-07-25 12:25 - 00000000 ____D () C:\Users\Ana\Documents\HAUSARBEIT ÖffRecht
2014-07-25 12:25 - 2014-07-25 12:24 - 00000000 ____D () C:\Users\Ana\Documents\Sonstiges
2014-07-25 11:14 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness
2014-07-25 11:06 - 2014-02-28 06:36 - 00000000 ____D () C:\Users\Ana\AppData\Roaming\Dropbox
2014-07-25 11:06 - 2014-02-28 05:37 - 00000000 ____D () C:\Users\Ana\AppData\Local\Pokki
2014-07-25 11:05 - 2014-02-28 06:39 - 00001027 _____ () C:\Users\Ana\Desktop\Dropbox.lnk
2014-07-25 11:05 - 2014-02-28 06:38 - 00000000 ____D () C:\Users\Ana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-07-25 11:03 - 2014-02-28 06:06 - 00002199 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-07-25 11:03 - 2014-02-28 06:05 - 00001114 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-25 11:03 - 2014-02-28 05:43 - 00000000 __RDO () C:\Users\Ana\SkyDrive
2014-07-22 21:25 - 2014-07-22 21:25 - 00000000 ____D () C:\Users\Ana\AppData\Roaming\FirefoxToolbar
2014-07-22 21:25 - 2014-07-22 21:25 - 00000000 ____D () C:\Program Files (x86)\Settings Manager
2014-07-22 21:24 - 2014-07-22 21:24 - 00000000 ____D () C:\Users\Ana\AppData\Roaming\OpenCandy
2014-07-22 21:24 - 2014-07-22 21:24 - 00000000 ____D () C:\Users\Ana\AppData\Roaming\AnvSoft
2014-07-22 21:23 - 2014-07-22 21:23 - 31540304 _____ (Any-Video-Converter.com ) C:\Users\Ana\Downloads\avc-free563.exe
2014-07-22 11:38 - 2014-07-22 11:38 - 00009799 _____ () C:\Users\Ana\Downloads\Briefvorlagen.zip
2014-07-22 11:37 - 2014-07-22 11:37 - 00961360 _____ (Chip Digital GmbH) C:\Users\Ana\Downloads\Briefvorlagen - CHIP-Installer.exe
2014-07-20 18:53 - 2014-07-20 18:53 - 00000000 ____D () C:\Windows\LastGood
2014-07-20 18:53 - 2014-07-20 18:53 - 00000000 ____D () C:\ProgramData\Hewlett-Packard
2014-07-19 19:15 - 2014-07-19 19:15 - 06774037 _____ () C:\Users\Ana\Downloads\wordpress-3.9.1-de_DE (1).zip
2014-07-19 19:10 - 2014-07-19 19:10 - 06774037 _____ () C:\Users\Ana\Downloads\wordpress-3.9.1-de_DE.zip
2014-07-16 17:34 - 2014-07-16 17:30 - 00000000 ____D () C:\Users\Ana\Downloads\Dateiordner_DERECHO_CIVIL
2014-07-16 17:29 - 2014-07-16 17:29 - 00432644 _____ () C:\Users\Ana\Downloads\Dateiordner_DERECHO_CIVIL.zip
2014-07-15 14:27 - 2014-07-15 14:26 - 01468764 _____ () C:\Users\Ana\Downloads\Dateiordner_Fall_13_-_Klausurvorbereitung_Wiederholung (1).zip
2014-07-12 20:24 - 2014-07-12 20:24 - 09974912 _____ (Microsoft Corporation) C:\Users\Ana\Downloads\FF2014 deDE.exe
2014-07-12 20:06 - 2014-07-08 19:33 - 00000000 ____D () C:\ProgramData\Adobe
2014-07-11 15:36 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\rescache
2014-07-11 13:41 - 2014-07-11 13:41 - 01468764 _____ () C:\Users\Ana\Downloads\Dateiordner_Fall_13_-_Klausurvorbereitung_Wiederholung.zip
2014-07-11 13:41 - 2014-07-11 13:41 - 00000000 ____D () C:\Users\Ana\Downloads\Dateiordner_Fall_13_-_Klausurvorbereitung_Wiederholung
2014-07-11 13:41 - 2014-07-11 13:41 - 00000000 ____D () C:\Users\Ana\AppData\Local\Adobe
2014-07-11 13:41 - 2014-02-28 05:39 - 00000000 ____D () C:\Users\Ana\AppData\Roaming\Adobe
2014-07-11 11:27 - 2014-07-11 11:26 - 00000000 ____D () C:\Users\Ana\Downloads\Anhänge_2014711 (2)
2014-07-11 11:26 - 2014-07-11 11:26 - 00000000 ____D () C:\Users\Ana\Downloads\Anhänge_2014711 (1)
2014-07-11 11:25 - 2014-07-11 11:25 - 10329775 _____ () C:\Users\Ana\Downloads\Anhänge_2014711 (2).zip
2014-07-11 11:25 - 2014-07-11 11:25 - 00000000 ____D () C:\Users\Ana\Downloads\Anhänge_2014711
2014-07-11 11:23 - 2014-07-11 11:23 - 10499155 _____ () C:\Users\Ana\Downloads\Anhänge_2014711.zip
2014-07-11 11:23 - 2014-07-11 11:23 - 05108594 _____ () C:\Users\Ana\Downloads\Anhänge_2014711 (1).zip
2014-07-11 11:10 - 2014-07-11 11:10 - 00003548 _____ () C:\Windows\System32\Tasks\HP AR Program Upload - 4d8106614a004b35b4cd45b7cbd914a8d2d9985f39984a619889280a1299dd6c
2014-07-11 06:47 - 2013-11-17 07:54 - 00765582 _____ () C:\Windows\system32\perfh007.dat
2014-07-11 06:47 - 2013-11-17 07:54 - 00159366 _____ () C:\Windows\system32\perfc007.dat
2014-07-11 06:47 - 2013-10-15 16:30 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-11 06:41 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-11 06:40 - 2013-08-22 16:44 - 00473704 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-07-11 00:25 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-07-11 00:23 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ToastData
2014-07-11 00:23 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-11 00:23 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-11 00:23 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\WinStore
2014-07-10 20:20 - 2014-03-03 10:58 - 00000000 ____D () C:\Windows\system32\MRT
2014-07-10 20:20 - 2013-08-22 17:20 - 00000000 ____D () C:\Windows\CbsTemp
2014-07-10 20:18 - 2014-03-03 10:58 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-07-10 20:15 - 2013-08-22 21:11 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-09 19:16 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2014-07-09 17:55 - 2014-07-09 17:55 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\WSReset.exe
2014-07-08 20:44 - 2014-02-28 19:07 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-07-08 19:34 - 2014-07-08 19:34 - 00002457 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-07-08 19:33 - 2014-07-08 19:33 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-07-06 21:34 - 2014-07-06 21:34 - 00080492 _____ () C:\Users\Ana\Downloads\Bewertungsmatrix-1.pptx
2014-06-29 23:58 - 2014-02-28 05:37 - 00000000 ____D () C:\Users\Ana
2014-06-29 16:53 - 2014-02-28 06:01 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-26 22:55 - 2014-05-21 21:48 - 00703968 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-06-26 22:55 - 2014-05-21 21:48 - 00105440 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

Some content of TEMP:
====================
C:\Users\Ana\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp8tt8eh.dll
C:\Users\Ana\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmppkuqe8.dll
C:\Users\Ana\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
C:\Users\Ana\AppData\Local\Temp\octA586.tmp.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-07-18 11:12

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 24-07-2014 01
Ran by Ana at 2014-07-25 14:25:00
Running from C:\Users\Ana\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Acer Docs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.03.3000 - Acer Incorporated)
Acer Docs Office AddIn (HKLM-x32\...\{DCBF3379-246B-47E1-8173-639B63940838}) (Version: 2.04.2005 - Acer)
Acer Games (HKCU\...\Pokki_03d432a7e610c3e908213e7689d4342ce2111caf) (Version: 1.1.9.43466 - Pokki)
Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.8101 - Acer Incorporated)
Acer Media (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.04.3002.6 - Acer Incorporated)
Acer Photo (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 2.04.3003.1 - Acer Incorporated)
Acer Portal (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 2.04.3004 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.8100 - Acer Incorporated)
Acer Quick Access (HKLM\...\{C1FA525F-D701-4B31-9D32-504FC0CF0B98}) (Version: 1.00.3000 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.8100 - Acer Incorporated)
Acer Remote Files (HKLM\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 1.02.3001 - Acer Incorporated)
Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
Aloha TriPeaks (x32 Version: 2.2.0.98 - WildTangent) Hidden
Broadcom Card Reader Driver Installer (HKLM\...\{67AA948F-8D83-4566-B84A-7CAABCF64E3F}) (Version: 16.0.2.8 - Broadcom Corporation)
Broadcom NetLink Controller (HKLM\...\{D1D7ED66-5C08-40A0-AEC0-B6DF977697BB}) (Version: 16.2.1.2 - Broadcom Corporation)
Cradle Of Egypt Collector's Edition (x32 Version: 2.2.0.110 - WildTangent) Hidden
CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.3126.57 - CyberLink Corp.)
CyberLink PowerDVD 12 (x32 Version: 12.0.3126.57 - CyberLink Corp.) Hidden
Dropbox (HKCU\...\Dropbox) (Version: 2.10.3 - Dropbox, Inc.)
eBay Worldwide (HKLM-x32\...\{91589413-6675-4C27-8AFC-EFB9103B90A5}) (Version: 2.4.0105 - OEM)
ETDWare PS/2-X64 11.6.27.201_WHQL (HKLM\...\Elantech) (Version: 11.6.27.201 - ELAN Microelectronic Corp.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 36.0.1985.125 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
Governor of Poker 2 Premium Edition (x32 Version: 2.2.0.110 - WildTangent) Hidden
HP Deskjet 3070 B611 series - Grundlegende Software für das Gerät (HKLM\...\{48DF59F8-2ACD-4F1F-87F3-D820FE7A6178}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Deskjet 3070 B611 series Hilfe (HKLM-x32\...\{9F20CE56-3828-432D-A3C5-3EC6A2ED93C6}) (Version: 140.0.2.2 - Hewlett Packard)
HP Update (HKLM-x32\...\{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}) (Version: 5.003.003.001 - Hewlett-Packard)
Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.8100 - Acer Incorporated)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.14.1724 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3304 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.28.487.1 - Intel Corporation) Hidden
Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.550 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.8100 - Acer Incorporated)
Luxor Evolved (x32 Version: 2.2.0.98 - WildTangent) Hidden
Magic Academy (x32 Version: 2.2.0.98 - WildTangent) Hidden
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Microsoft Office 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 15.0.4623.1003 - Microsoft Corporation)
Microsoft Office Home and Student 2013 - de-de (HKLM\...\HomeStudentRetail - de-de) (Version: 15.0.4623.1003 - Microsoft Corporation)
Microsoft OneDrive (HKCU\...\OneDriveSetup.exe) (Version: 17.0.4041.0512 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2005 Tools for Office Runtime (x32 Version: 8.0.60940.0 - Microsoft Corporation) Hidden
Mozilla Firefox 30.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 30.0 (x86 de)) (Version: 30.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
Nero BackItUp (x32 Version: 12.5.11000 - Nero AG) Hidden
Nero BackItUp 12 Essentials OEM.a01 (HKLM-x32\...\{551AC8F2-FEA2-4B45-ACF7-C98681233CC9}) (Version: 12.5.01200 - Nero AG)
Nero BackItUp Help (CHM) (x32 Version: 12.0.13000 - Nero AG) Hidden
Nero ControlCenter (x32 Version: 11.0.15900 - Nero AG) Hidden
Nero ControlCenter Help (CHM) (x32 Version: 12.0.12000 - Nero AG) Hidden
Nero Core Components (x32 Version: 11.0.20900 - Nero AG) Hidden
Nero Launcher (x32 Version: 12.2.7000 - Nero AG) Hidden
Nero RescueAgent (x32 Version: 12.0.3001 - Nero AG) Hidden
Nero RescueAgent Help (CHM) (x32 Version: 12.0.7000 - Nero AG) Hidden
Nero Update (x32 Version: 11.0.11800.31.0 - Nero AG) Hidden
Norton Online Backup (HKLM-x32\...\{E625FCA0-E43E-4D3B-92FF-4851308A0366}) (Version: 2.8.0.44 - Symantec Corporation)
Norton Online Backup (x32 Version: 4.5.0.9 - Symantec Corporation) Hidden
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4623.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4623.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4623.1003 - Microsoft Corporation) Hidden
Office Addin (HKLM-x32\...\{6D2BBE1D-E600-4695-BA37-0B0E605542CC}) (Version: 2.02.2009 - Acer)
OpenVPN 2.3.2 UniPassau (HKLM-x32\...\OpenVPN) (Version: 2.3.2 - )
Peggle Nights (x32 Version: 2.2.0.98 - WildTangent) Hidden
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden
Pokki (HKCU\...\Pokki) (Version: 0.266.1.172 - Pokki)
Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.305 - Qualcomm Atheros Communications)
Qualcomm Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 12.07 - Qualcomm Atheros)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7027 - Realtek Semiconductor Corp.)
Settings Manager (HKLM-x32\...\Settings Manager) (Version: 5.0.0.13437 - Aztec Media Inc) <==== ATTENTION
Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.)
Spotify (HKLM-x32\...\Spotify) (Version: 0.9.1.57.ge7405149 - Spotify AB)
TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )
The Chronicles of Emerland Solitaire (x32 Version: 3.0.2.32 - WildTangent) Hidden
Trinklit Supreme (x32 Version: 2.2.0.98 - WildTangent) Hidden
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
Visual Studio 2005 Tools for Office Second Edition Runtime (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Office Runtime) (Version:  - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version:  - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime (x32 Version: 9.0.30729 - Microsoft Corporation) Hidden
Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation)
WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.4.0 - WildTangent)
WildTangent Games App (x32 Version: 4.0.10.20 - WildTangent) Hidden

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-1561291992-2936079153-2951588444-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Ana\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1561291992-2936079153-2951588444-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Ana\AppData\Local\Microsoft\SkyDrive\17.0.4041.0512\amd64\FileSyncApi64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1561291992-2936079153-2951588444-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ana\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1561291992-2936079153-2951588444-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ana\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1561291992-2936079153-2951588444-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ana\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1561291992-2936079153-2951588444-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ana\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1561291992-2936079153-2951588444-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ana\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1561291992-2936079153-2951588444-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ana\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1561291992-2936079153-2951588444-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ana\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1561291992-2936079153-2951588444-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ana\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

==================== Restore Points  =========================

03-07-2014 06:27:47 Geplanter Prüfpunkt
09-07-2014 16:10:10 Windows Update
17-07-2014 14:49:35 Geplanter Prüfpunkt

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {2265BB1D-9D64-4809-86E0-2F8D672A792F} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2014-07-10] (Microsoft Corporation)
Task: {273E690B-ED52-4013-8A5E-C3D6CE0A26D1} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2013-08-03] (Acer Incorporate)
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {37888B6B-4114-499C-BEA0-F29FD99FF954} - System32\Tasks\HP AR Program Upload - 4d8106614a004b35b4cd45b7cbd914a8d2d9985f39984a619889280a1299dd6c => C:\Program Files\HP\HP Deskjet 3070 B611 series\bin\HPRewards.exe [2012-10-17] (TODO: <Company name>)
Task: {3A3FFB06-963A-4379-8527-2D3097B90D72} - System32\Tasks\Microsoft Office 15 Sync Maintenance for ANA-PC-Ana Ana-PC => C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe [2014-06-10] (Microsoft Corporation)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {443F2FEC-7133-4A18-AE1F-5406A3FE7091} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-08] (Adobe Systems Incorporated)
Task: {47EC7D86-5C17-4D19-BD84-22E219AE1567} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTray.exe [2013-07-05] (Acer Incorporated)
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {5DA00787-65B5-48BB-A343-6BA9333EBBF9} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Validation
Task: {6201454E-98A5-4EF0-B4F4-03E852C03A99} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\Windows\system32\cleanmgr.exe [2014-02-22] (Microsoft Corporation)
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {6F5109CE-F37A-48B8-BC92-262028B1FF10} - System32\Tasks\AcerCloud => C:\Program Files (x86)\Acer\Acer Portal\acpanel_win.exe [2014-02-13] (Acer Incorporated)
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {7E155388-079E-43C0-BE4A-3F7505C26B03} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2014-05-13] (Microsoft Corporation)
Task: {81C5280C-EDD3-4A73-92F2-490CFCA30CD9} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2013-01-22] ()
Task: {81EAECA7-70E1-4F4A-A293-14B9F5D46118} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Management
Task: {8321566A-E8F8-4C65-8E70-6584A2FE6D99} - System32\Tasks\Quick Access => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2013-08-02] (Acer Incorporate)
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {8BDA1E8A-54DA-417B-BB24-3215C68FBCCE} - System32\Tasks\Norton Online Backup ARA => C:\Program Files (x86)\Norton Online Backup ARA\Engine\4.5.0.9\\Ara.exe [2013-08-07] (Symantec Corporation)
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {929ADF79-9F4A-4CFB-8619-55219B958E3B} - System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-1561291992-2936079153-2951588444-1001 => %localappdata%\Microsoft\SkyDrive\SkyDrive.exe
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {A55AEB6E-9502-4B7D-8120-4321EEFD77E4} - System32\Tasks\HP AR Program Upload - e41a615a72c040489efdb659eb1aba5c8193bd9dd6794d80b81adc7375622892 => C:\Program Files\HP\HP Deskjet 3070 B611 series\bin\HPRewards.exe [2012-10-17] (TODO: <Company name>)
Task: {AAC9F690-8298-4E9E-B652-2DBE6EFE2A21} - System32\Tasks\Recovery Management\Notification => C:\Program Files\Acer\Acer Recovery Management\Notification\Notification.exe [2013-07-10] (Acer Incorporated)
Task: {AD08E39C-0C7B-4967-BB35-46A3CFA32521} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2013-07-08] ()
Task: {B71943DB-EFDE-46F5-ABD5-0804DB39B07C} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics
Task: {CA242118-91F9-46BD-A381-15DDFD11C79E} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network => Sc.exe start wuauserv
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D1CF5A90-73C1-4A5D-80B8-ADF68EDD0996} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload
Task: {D6BAE496-E96E-4F14-A504-F6881D57D71B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-02-28] (Google Inc.)
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {D9CC6464-F64F-4200-9187-A2067575CC51} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-02-28] (Google Inc.)
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: {E7A6BBBE-39F5-4874-A98D-1AC4126A2B77} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2014-06-10] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-05-17 11:38 - 2013-10-31 18:13 - 00102568 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2012-10-19 04:52 - 2012-10-19 04:52 - 03867040 _____ () C:\Windows\system32\PortChanger.exe
2014-07-22 21:25 - 2014-07-17 14:56 - 00665104 ____N () C:\Program Files (x86)\Settings Manager\systemk\x64\sysapcrt.dll
2013-09-07 02:48 - 2013-09-07 02:48 - 00011264 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2013-09-07 02:45 - 2013-09-07 02:45 - 00086016 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\Map\MAP.dll
2013-09-07 02:52 - 2013-09-07 02:52 - 00012928 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
2013-11-16 23:52 - 2013-07-30 19:11 - 00110152 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\Clearfishellext_x64.dll
2013-10-15 17:14 - 2013-09-03 21:45 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2013-11-16 23:24 - 2013-09-04 01:53 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2014-07-22 21:25 - 2014-07-17 14:56 - 00489488 ____N () C:\Program Files (x86)\Settings Manager\systemk\sysapcrt.dll
2014-06-10 21:20 - 2014-06-10 21:20 - 00316584 _____ () C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\AppVIsvStream32.dll
2014-07-22 21:25 - 2014-07-17 14:56 - 00019472 _____ () C:\Program Files (x86)\Settings Manager\systemk\smdmfldr.dll
2013-11-16 23:52 - 2013-07-30 19:11 - 00088648 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\Clearfishellext.dll
2014-07-25 11:05 - 2014-07-25 11:05 - 00043008 _____ () c:\users\ana\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp8tt8eh.dll
2013-10-19 01:55 - 2013-10-19 01:55 - 25100288 _____ () C:\Users\Ana\AppData\Roaming\Dropbox\bin\libcef.dll
2014-07-17 20:39 - 2014-07-15 11:24 - 08537928 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\pdf.dll
2014-07-17 20:39 - 2014-07-15 11:24 - 00353096 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\ppGoogleNaClPluginChrome.dll
2014-07-17 20:39 - 2014-07-15 11:24 - 01732936 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\ffmpegsumo.dll
2014-06-24 23:05 - 2014-06-24 23:05 - 03852912 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Users\Ana\SkyDrive:ms-properties

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

HKCU\...\StartupApproved\Run: => "AcerCloud"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (07/25/2014 02:04:18 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ANA-PC)
Description: Bei der Aktivierung der App „YahooInc.YahooMail_xvnatx83ncrvj!YahooInc.YahooMail“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (07/25/2014 01:21:58 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Explorer.EXE, Version: 6.3.9600.17039, Zeitstempel: 0x53156588
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.3.9600.17031, Zeitstempel: 0x530895af
Ausnahmecode: 0xc0000374
Fehleroffset: 0x00000000000f8c9c
ID des fehlerhaften Prozesses: 0x4e0c
Startzeit der fehlerhaften Anwendung: 0xExplorer.EXE0
Pfad der fehlerhaften Anwendung: Explorer.EXE1
Pfad des fehlerhaften Moduls: Explorer.EXE2
Berichtskennung: Explorer.EXE3
Vollständiger Name des fehlerhaften Pakets: Explorer.EXE4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Explorer.EXE5

Error: (07/19/2014 09:26:01 PM) (Source: Winlogon) (EventID: 4005) (User: )
Description: Der Windows-Anmeldeprozess wurde unerwartet beendet.

Error: (07/19/2014 08:56:53 AM) (Source: Desktop Window Manager) (EventID: 9020) (User: )
Description: Der Desktopfenster-Manager hat einen schwerwiegenden Fehler (0x8898008d) festgestellt.

Error: (06/28/2014 09:00:32 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: delegate_execute.exe, Version: 35.0.1916.153, Zeitstempel: 0x538faf86
Name des fehlerhaften Moduls: delegate_execute.exe, Version: 35.0.1916.153, Zeitstempel: 0x538faf86
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00045bec
ID des fehlerhaften Prozesses: 0x8ec
Startzeit der fehlerhaften Anwendung: 0xdelegate_execute.exe0
Pfad der fehlerhaften Anwendung: delegate_execute.exe1
Pfad des fehlerhaften Moduls: delegate_execute.exe2
Berichtskennung: delegate_execute.exe3
Vollständiger Name des fehlerhaften Pakets: delegate_execute.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: delegate_execute.exe5

Error: (06/25/2014 11:19:55 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ANA-PC)
Description: Bei der Aktivierung der App „YahooInc.YahooMail_xvnatx83ncrvj!YahooInc.YahooMail“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (06/25/2014 11:19:55 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ANA-PC)
Description: Bei der Aktivierung der App „Facebook.Facebook_8xx8rvfyw5nnt!App“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (06/24/2014 07:29:21 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -2143485936

Error: (06/24/2014 07:29:21 AM) (Source: Microsoft Office 15) (EventID: 2011) (User: )
Description: Office Subscription licensing exception: Error Code: 0x803D0010; CorrelationId: {305DC4CF-7BFA-4CF3-BF8E-8669381CDC08}

Error: (06/24/2014 07:29:21 AM) (Source: Microsoft Office 15) (EventID: 2011) (User: )
Description: Office Subscription licensing exception: Error Code: 0x803D0010; CorrelationId: {305DC4CF-7BFA-4CF3-BF8E-8669381CDC08}


System errors:
=============
Error: (07/25/2014 02:07:52 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows-Fehlerberichterstattungsdienst erreicht.

Error: (07/25/2014 02:04:13 PM) (Source: DCOM) (EventID: 10010) (User: ANA-PC)
Description: YahooInc.YahooMail.AppXjmhvx6vdq1pz1sp22sm2m73sk7h65jg8.wwa

Error: (07/25/2014 01:21:04 PM) (Source: DCOM) (EventID: 10010) (User: ANA-PC)
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

Error: (07/22/2014 10:28:38 PM) (Source: DCOM) (EventID: 10010) (User: ANA-PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

Error: (07/22/2014 10:28:38 PM) (Source: DCOM) (EventID: 10010) (User: ANA-PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

Error: (07/22/2014 09:25:57 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "Systemk Service" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.

Error: (07/22/2014 09:23:44 AM) (Source: Tcpip) (EventID: 4199) (User: )
Description: Das System hat einen Adressenkonflikt der IP-Adresse 192.168.2.106 mit dem Computer mit der
Netzwerkhardwareadresse 08-ED-B9-BD-24-E3 ermittelt. Netzwerkvorgänge könnten daher auf diesem
System unterbrochen werden.

Error: (07/20/2014 09:43:03 PM) (Source: DCOM) (EventID: 10010) (User: ANA-PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

Error: (07/20/2014 09:43:03 PM) (Source: DCOM) (EventID: 10010) (User: ANA-PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

Error: (07/19/2014 05:01:39 PM) (Source: Tcpip) (EventID: 4199) (User: )
Description: Das System hat einen Adressenkonflikt der IP-Adresse 2a02:810d:600:2f1c::2 mit dem Computer mit der
Netzwerkhardwareadresse B8-E8-56-7D-5A-74 ermittelt. Netzwerkvorgänge könnten daher auf diesem
System unterbrochen werden.


Microsoft Office Sessions:
=========================
Error: (07/25/2014 02:04:18 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ANA-PC)
Description: YahooInc.YahooMail_xvnatx83ncrvj!YahooInc.YahooMail-2144927141

Error: (07/25/2014 01:21:58 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Explorer.EXE6.3.9600.1703953156588ntdll.dll6.3.9600.17031530895afc000037400000000000f8c9c4e0c01cfa7e74a345611C:\Windows\Explorer.EXEC:\Windows\SYSTEM32\ntdll.dlle38c7dd0-13ed-11e4-826a-201a06ae8af8

Error: (07/19/2014 09:26:01 PM) (Source: Winlogon) (EventID: 4005) (User: )
Description: 

Error: (07/19/2014 08:56:53 AM) (Source: Desktop Window Manager) (EventID: 9020) (User: )
Description: 0x8898008d

Error: (06/28/2014 09:00:32 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: delegate_execute.exe35.0.1916.153538faf86delegate_execute.exe35.0.1916.153538faf86c000000500045bec8ec01cf929ea6160667C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\delegate_execute.exeC:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\delegate_execute.exee4ed1c54-fe91-11e3-8268-201a06ae8af8

Error: (06/25/2014 11:19:55 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ANA-PC)
Description: YahooInc.YahooMail_xvnatx83ncrvj!YahooInc.YahooMail-2144927141

Error: (06/25/2014 11:19:55 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ANA-PC)
Description: Facebook.Facebook_8xx8rvfyw5nnt!App-2144927141

Error: (06/24/2014 07:29:21 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -2143485936

Error: (06/24/2014 07:29:21 AM) (Source: Microsoft Office 15) (EventID: 2011) (User: )
Description: Office Subscription licensing exception: Error Code: 0x803D0010; CorrelationId: {305DC4CF-7BFA-4CF3-BF8E-8669381CDC08}

Error: (06/24/2014 07:29:21 AM) (Source: Microsoft Office 15) (EventID: 2011) (User: )
Description: Office Subscription licensing exception: Error Code: 0x803D0010; CorrelationId: {305DC4CF-7BFA-4CF3-BF8E-8669381CDC08}


CodeIntegrity Errors:
===================================
  Date: 2014-07-25 11:14:05.140
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Settings Manager\systemk\x64\sysapcrt.dll that did not meet the Windows signing level requirements.

  Date: 2014-07-25 11:14:04.954
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Settings Manager\systemk\sysapcrt.dll that did not meet the Windows signing level requirements.


==================== Memory info =========================== 

Percentage of memory in use: 62%
Total physical RAM: 3985.27 MB
Available physical RAM: 1513.42 MB
Total Pagefile: 8081.27 MB
Available Pagefile: 3958.21 MB
Total Virtual: 131072 MB
Available Virtual: 131071.79 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:914.69 GB) (Free:876.48 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 932 GB) (Disk ID: 857ACA3B)

Partition: GPT Partition Type.

==================== End Of Log ============================
         

 Malwarebytes Anti-Malware 
www.malwarebytes.org


Protection, 25.07.2014 14:03:35, SYSTEM, ANA-PC, Protection, Malware Protection, Starting, 
Protection, 25.07.2014 14:03:35, SYSTEM, ANA-PC, Protection, Malware Protection, Started, 
Protection, 25.07.2014 14:03:35, SYSTEM, ANA-PC, Protection, Malicious Website Protection, Starting, 
Protection, 25.07.2014 14:03:36, SYSTEM, ANA-PC, Protection, Malicious Website Protection, Started, 
Update, 25.07.2014 14:03:37, SYSTEM, ANA-PC, Manual, Rootkit Database, 2014.2.20.1, 2014.7.17.1, 
Update, 25.07.2014 14:03:42, SYSTEM, ANA-PC, Manual, Malware Database, 2014.3.4.9, 2014.7.25.2, 
Protection, 25.07.2014 14:03:43, SYSTEM, ANA-PC, Protection, Refresh, Starting, 
Protection, 25.07.2014 14:03:43, SYSTEM, ANA-PC, Protection, Malicious Website Protection, Stopping, 
Protection, 25.07.2014 14:03:44, SYSTEM, ANA-PC, Protection, Malicious Website Protection, Stopped, 
Protection, 25.07.2014 14:03:49, SYSTEM, ANA-PC, Protection, Refresh, Success, 
Protection, 25.07.2014 14:03:49, SYSTEM, ANA-PC, Protection, Malicious Website Protection, Starting, 
Protection, 25.07.2014 14:03:49, SYSTEM, ANA-PC, Protection, Malicious Website Protection, Started, 
Detection, 25.07.2014 14:04:46, SYSTEM, ANA-PC, Protection, Malware Protection, File, PUP.Optional.SystemK.A, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, Quarantine, [9a1c6f34e4973afc717b4a3af30ed729]
Protection, 25.07.2014 14:04:46, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, 
Error, 25.07.2014 14:04:46, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, 
Detection, 25.07.2014 14:05:59, SYSTEM, ANA-PC, Protection, Malware Protection, File, PUP.Optional.SystemK.A, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, Quarantine, [9a1c6f34e4973afc717b4a3af30ed729]
Protection, 25.07.2014 14:05:59, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, 
Error, 25.07.2014 14:05:59, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, 
Detection, 25.07.2014 14:06:43, Ana, ANA-PC, Protection, Malware Protection, File, PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\sysapcrt.dll, Quarantine, [ebcb2380d1aa33037bf9555960a227d9]
Protection, 25.07.2014 14:06:43, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\sysapcrt.dll, 
Error, 25.07.2014 14:06:43, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\sysapcrt.dll, 
Detection, 25.07.2014 14:06:53, SYSTEM, ANA-PC, Protection, Malware Protection, File, PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\sysapcrt.dll, Quarantine, [ebcb2380d1aa33037bf9555960a227d9]
Protection, 25.07.2014 14:06:53, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\sysapcrt.dll, 
Error, 25.07.2014 14:06:53, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\sysapcrt.dll, 
Detection, 25.07.2014 14:07:00, SYSTEM, ANA-PC, Protection, Malware Protection, File, PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\x64\sysapcrt.dll, Quarantine, [7e38059e2a510b2bd2a22e8009f97e82]
Protection, 25.07.2014 14:07:00, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\x64\sysapcrt.dll, 
Error, 25.07.2014 14:07:00, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\x64\sysapcrt.dll, 
Detection, 25.07.2014 14:07:14, SYSTEM, ANA-PC, Protection, Malware Protection, File, PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\x64\sysapcrt.dll, Quarantine, [7e38059e2a510b2bd2a22e8009f97e82]
Detection, 25.07.2014 14:07:15, SYSTEM, ANA-PC, Protection, Malware Protection, File, PUP.Optional.SystemK.A, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, Quarantine, [9a1c6f34e4973afc717b4a3af30ed729]
Protection, 25.07.2014 14:07:15, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\x64\sysapcrt.dll, 
Error, 25.07.2014 14:07:15, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\x64\sysapcrt.dll, 
Protection, 25.07.2014 14:07:15, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, 
Error, 25.07.2014 14:07:15, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, 
Detection, 25.07.2014 14:07:54, SYSTEM, ANA-PC, Protection, Malware Protection, File, PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\sysapcrt.dll, Quarantine, [ebcb2380d1aa33037bf9555960a227d9]
Detection, 25.07.2014 14:07:54, SYSTEM, ANA-PC, Protection, Malware Protection, File, PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\x64\sysapcrt.dll, Quarantine, [7e38059e2a510b2bd2a22e8009f97e82]
Detection, 25.07.2014 14:07:54, SYSTEM, ANA-PC, Protection, Malware Protection, File, PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\sysapcrt.dll, Quarantine, [ebcb2380d1aa33037bf9555960a227d9]
Protection, 25.07.2014 14:07:55, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\sysapcrt.dll, 
Error, 25.07.2014 14:07:55, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\sysapcrt.dll, 
Protection, 25.07.2014 14:07:55, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\x64\sysapcrt.dll, 
Protection, 25.07.2014 14:07:55, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\sysapcrt.dll, 
Error, 25.07.2014 14:07:55, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\x64\sysapcrt.dll, 
Error, 25.07.2014 14:07:55, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\sysapcrt.dll, 
Detection, 25.07.2014 14:08:27, SYSTEM, ANA-PC, Protection, Malware Protection, File, PUP.Optional.SystemK.A, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, Quarantine, [9a1c6f34e4973afc717b4a3af30ed729]
Protection, 25.07.2014 14:08:27, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, 
Error, 25.07.2014 14:08:28, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, 
Detection, 25.07.2014 14:09:12, SYSTEM, ANA-PC, Protection, Malware Protection, File, PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\sysapcrt.dll, Quarantine, [ebcb2380d1aa33037bf9555960a227d9]
Protection, 25.07.2014 14:09:12, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\sysapcrt.dll, 
Error, 25.07.2014 14:09:12, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\sysapcrt.dll, 
Detection, 25.07.2014 14:09:17, SYSTEM, ANA-PC, Protection, Malware Protection, File, PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\x64\sysapcrt.dll, Quarantine, [7e38059e2a510b2bd2a22e8009f97e82]
Protection, 25.07.2014 14:09:17, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\x64\sysapcrt.dll, 
Error, 25.07.2014 14:09:17, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\x64\sysapcrt.dll, 
Detection, 25.07.2014 14:09:22, SYSTEM, ANA-PC, Protection, Malware Protection, File, PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\sysapcrt.dll, Quarantine, [ebcb2380d1aa33037bf9555960a227d9]
Protection, 25.07.2014 14:09:22, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\sysapcrt.dll, 
Error, 25.07.2014 14:09:22, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\sysapcrt.dll, 
Detection, 25.07.2014 14:09:26, SYSTEM, ANA-PC, Protection, Malware Protection, File, PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\x64\sysapcrt.dll, Quarantine, [7e38059e2a510b2bd2a22e8009f97e82]
Protection, 25.07.2014 14:09:26, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\x64\sysapcrt.dll, 
Error, 25.07.2014 14:09:27, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\x64\sysapcrt.dll, 
Detection, 25.07.2014 14:09:30, SYSTEM, ANA-PC, Protection, Malware Protection, File, PUP.Optional.SystemK.A, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, Quarantine, [9a1c6f34e4973afc717b4a3af30ed729]
Protection, 25.07.2014 14:09:30, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, 
Error, 25.07.2014 14:09:30, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, 
Detection, 25.07.2014 14:10:33, SYSTEM, ANA-PC, Protection, Malware Protection, File, PUP.Optional.SystemK.A, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, Quarantine, [9a1c6f34e4973afc717b4a3af30ed729]
Protection, 25.07.2014 14:10:33, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, 
Error, 25.07.2014 14:10:33, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, 
Detection, 25.07.2014 14:10:44, SYSTEM, ANA-PC, Protection, Malware Protection, File, PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\sysapcrt.dll, Quarantine, [ebcb2380d1aa33037bf9555960a227d9]
Protection, 25.07.2014 14:10:44, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\sysapcrt.dll, 
Error, 25.07.2014 14:10:45, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\sysapcrt.dll, 
Detection, 25.07.2014 14:10:48, SYSTEM, ANA-PC, Protection, Malware Protection, File, PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\x64\sysapcrt.dll, Quarantine, [7e38059e2a510b2bd2a22e8009f97e82]
Protection, 25.07.2014 14:10:48, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\x64\sysapcrt.dll, 
Error, 25.07.2014 14:10:48, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\x64\sysapcrt.dll, 
Detection, 25.07.2014 14:11:00, Ana, ANA-PC, Protection, Malware Protection, File, PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\sysapcrt.dll, Quarantine, [ebcb2380d1aa33037bf9555960a227d9]
Protection, 25.07.2014 14:11:00, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\sysapcrt.dll, 
Error, 25.07.2014 14:11:00, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\sysapcrt.dll, 
Detection, 25.07.2014 14:11:36, SYSTEM, ANA-PC, Protection, Malware Protection, File, PUP.Optional.SystemK.A, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, Quarantine, [9a1c6f34e4973afc717b4a3af30ed729]
Protection, 25.07.2014 14:11:36, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, 
Error, 25.07.2014 14:11:36, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, 
Detection, 25.07.2014 14:12:39, SYSTEM, ANA-PC, Protection, Malware Protection, File, PUP.Optional.SystemK.A, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, Quarantine, [9a1c6f34e4973afc717b4a3af30ed729]
Protection, 25.07.2014 14:12:39, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, 
Error, 25.07.2014 14:12:39, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, 
Detection, 25.07.2014 14:13:42, SYSTEM, ANA-PC, Protection, Malware Protection, File, PUP.Optional.SystemK.A, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, Quarantine, [9a1c6f34e4973afc717b4a3af30ed729]
Protection, 25.07.2014 14:13:43, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, 
Error, 25.07.2014 14:13:43, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, 
Detection, 25.07.2014 14:14:45, SYSTEM, ANA-PC, Protection, Malware Protection, File, PUP.Optional.SystemK.A, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, Quarantine, [9a1c6f34e4973afc717b4a3af30ed729]
Protection, 25.07.2014 14:14:45, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, 
Error, 25.07.2014 14:14:45, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, 
Detection, 25.07.2014 14:15:48, SYSTEM, ANA-PC, Protection, Malware Protection, File, PUP.Optional.SystemK.A, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, Quarantine, [9a1c6f34e4973afc717b4a3af30ed729]
Protection, 25.07.2014 14:15:48, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, 
Error, 25.07.2014 14:15:48, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, 
Detection, 25.07.2014 14:16:52, SYSTEM, ANA-PC, Protection, Malware Protection, File, PUP.Optional.SystemK.A, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, Quarantine, [9a1c6f34e4973afc717b4a3af30ed729]
Protection, 25.07.2014 14:16:52, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, 
Error, 25.07.2014 14:16:52, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, 
Detection, 25.07.2014 14:17:54, SYSTEM, ANA-PC, Protection, Malware Protection, File, PUP.Optional.SystemK.A, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, Quarantine, [9a1c6f34e4973afc717b4a3af30ed729]
Protection, 25.07.2014 14:17:54, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, 
Error, 25.07.2014 14:17:54, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, 
Detection, 25.07.2014 14:18:57, SYSTEM, ANA-PC, Protection, Malware Protection, File, PUP.Optional.SystemK.A, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, Quarantine, [9a1c6f34e4973afc717b4a3af30ed729]
Protection, 25.07.2014 14:18:57, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, 
Error, 25.07.2014 14:18:57, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, 
Detection, 25.07.2014 14:20:02, SYSTEM, ANA-PC, Protection, Malware Protection, File, PUP.Optional.SystemK.A, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, Quarantine, [9a1c6f34e4973afc717b4a3af30ed729]
Protection, 25.07.2014 14:20:02, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, 
Error, 25.07.2014 14:20:02, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, 
Detection, 25.07.2014 14:21:06, SYSTEM, ANA-PC, Protection, Malware Protection, File, PUP.Optional.SystemK.A, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, Quarantine, [9a1c6f34e4973afc717b4a3af30ed729]
Protection, 25.07.2014 14:21:06, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, 
Error, 25.07.2014 14:21:06, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, 
Detection, 25.07.2014 14:22:08, SYSTEM, ANA-PC, Protection, Malware Protection, File, PUP.Optional.SystemK.A, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, Quarantine, [9a1c6f34e4973afc717b4a3af30ed729]
Protection, 25.07.2014 14:22:09, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, 
Error, 25.07.2014 14:22:09, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, 
Detection, 25.07.2014 14:22:51, SYSTEM, ANA-PC, Protection, Malware Protection, File, PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\sysapcrt.dll, Quarantine, [ebcb2380d1aa33037bf9555960a227d9]
Protection, 25.07.2014 14:22:51, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\sysapcrt.dll, 
Error, 25.07.2014 14:22:51, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\sysapcrt.dll, 
Detection, 25.07.2014 14:23:03, SYSTEM, ANA-PC, Protection, Malware Protection, File, PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\x64\sysapcrt.dll, Quarantine, [7e38059e2a510b2bd2a22e8009f97e82]
Protection, 25.07.2014 14:23:03, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\x64\sysapcrt.dll, 
Error, 25.07.2014 14:23:03, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\x64\sysapcrt.dll, 
Detection, 25.07.2014 14:23:07, SYSTEM, ANA-PC, Protection, Malware Protection, File, PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\sysapcrt.dll, Quarantine, [ebcb2380d1aa33037bf9555960a227d9]
Protection, 25.07.2014 14:23:07, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\sysapcrt.dll, 
Error, 25.07.2014 14:23:07, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\sysapcrt.dll, 
Detection, 25.07.2014 14:23:14, Ana, ANA-PC, Protection, Malware Protection, File, PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\x64\sysapcrt.dll, Quarantine, [7e38059e2a510b2bd2a22e8009f97e82]
Detection, 25.07.2014 14:23:14, SYSTEM, ANA-PC, Protection, Malware Protection, File, PUP.Optional.SystemK.A, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, Quarantine, [9a1c6f34e4973afc717b4a3af30ed729]
Protection, 25.07.2014 14:23:14, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\x64\sysapcrt.dll, 
Error, 25.07.2014 14:23:14, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\x64\sysapcrt.dll, 
Protection, 25.07.2014 14:23:14, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, 
Error, 25.07.2014 14:23:14, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, 
Detection, 25.07.2014 14:24:17, SYSTEM, ANA-PC, Protection, Malware Protection, File, PUP.Optional.SystemK.A, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, Quarantine, [9a1c6f34e4973afc717b4a3af30ed729]
Protection, 25.07.2014 14:24:17, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, 
Error, 25.07.2014 14:24:17, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, 
Detection, 25.07.2014 14:24:41, SYSTEM, ANA-PC, Protection, Malware Protection, File, PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\sysapcrt.dll, Quarantine, [ebcb2380d1aa33037bf9555960a227d9]
Protection, 25.07.2014 14:24:41, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\sysapcrt.dll, 
Error, 25.07.2014 14:24:41, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\sysapcrt.dll, 
Detection, 25.07.2014 14:25:00, Ana, ANA-PC, Protection, Malware Protection, File, PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\x64\sysapcrt.dll, Quarantine, [7e38059e2a510b2bd2a22e8009f97e82]
Protection, 25.07.2014 14:25:00, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\x64\sysapcrt.dll, 
Error, 25.07.2014 14:25:00, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\x64\sysapcrt.dll, 
Detection, 25.07.2014 14:25:35, SYSTEM, ANA-PC, Protection, Malware Protection, File, PUP.Optional.SystemK.A, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, Quarantine, [9a1c6f34e4973afc717b4a3af30ed729]
Protection, 25.07.2014 14:25:35, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, 
Error, 25.07.2014 14:25:35, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, 
Detection, 25.07.2014 14:25:58, Ana, ANA-PC, Protection, Malware Protection, File, PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\sysapcrt.dll, Quarantine, [ebcb2380d1aa33037bf9555960a227d9]
Protection, 25.07.2014 14:25:58, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\sysapcrt.dll, 
Error, 25.07.2014 14:25:58, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\sysapcrt.dll, 
Detection, 25.07.2014 14:26:02, SYSTEM, ANA-PC, Protection, Malware Protection, File, PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\x64\sysapcrt.dll, Quarantine, [7e38059e2a510b2bd2a22e8009f97e82]
Protection, 25.07.2014 14:26:02, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\x64\sysapcrt.dll, 
Error, 25.07.2014 14:26:02, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\x64\sysapcrt.dll, 
Detection, 25.07.2014 14:27:22, SYSTEM, ANA-PC, Protection, Malware Protection, File, PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\sysapcrt.dll, Quarantine, [ebcb2380d1aa33037bf9555960a227d9]
Protection, 25.07.2014 14:27:22, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\sysapcrt.dll, 
Error, 25.07.2014 14:27:22, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\sysapcrt.dll, 
Detection, 25.07.2014 14:27:31, Ana, ANA-PC, Protection, Malware Protection, File, PUP.Optional.SystemK.A, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, Quarantine, [9a1c6f34e4973afc717b4a3af30ed729]
Detection, 25.07.2014 14:27:31, SYSTEM, ANA-PC, Protection, Malware Protection, File, PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\x64\sysapcrt.dll, Quarantine, [7e38059e2a510b2bd2a22e8009f97e82]
Protection, 25.07.2014 14:27:31, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\x64\sysapcrt.dll, 
Error, 25.07.2014 14:27:31, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\x64\sysapcrt.dll, 
Error, 25.07.2014 14:27:31, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, 
Detection, 25.07.2014 14:29:02, SYSTEM, ANA-PC, Protection, Malware Protection, File, PUP.Optional.SystemK.A, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, Quarantine, [9a1c6f34e4973afc717b4a3af30ed729]
Protection, 25.07.2014 14:29:03, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, 
Error, 25.07.2014 14:29:03, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, 
Detection, 25.07.2014 14:30:05, SYSTEM, ANA-PC, Protection, Malware Protection, File, PUP.Optional.SystemK.A, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, Quarantine, [9a1c6f34e4973afc717b4a3af30ed729]
Protection, 25.07.2014 14:30:05, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, 
Error, 25.07.2014 14:30:05, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, 
Detection, 25.07.2014 14:31:08, SYSTEM, ANA-PC, Protection, Malware Protection, File, PUP.Optional.SystemK.A, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, Quarantine, [9a1c6f34e4973afc717b4a3af30ed729]
Protection, 25.07.2014 14:31:08, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, 
Error, 25.07.2014 14:31:08, SYSTEM, ANA-PC, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\Settings Manager\systemk\systemku.exe, 

(end)