DCOM-Server-Prozessstart unerwartet beendet -> blue screen

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 20:34 on 01/09/2014 (Claudia)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 31-08-2014 02
Ran by Claudia (administrator) on CLAUDIA-PC on 01-09-2014 20:36:07
Running from C:\Users\Claudia\Downloads
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
() C:\Program Files\Dell\Dell Data Protection\Client Security Framework\Dell.SecurityManager.Loader.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Validity Sensors, Inc.) C:\Windows\System32\valWBFPolicyService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Dell Inc.) C:\Program Files\Dell\Dell Data Protection\Client Security Framework\Dell.SecurityManager.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Dell, Inc.) C:\Program Files\Dell\Dell Data Protection\Client Security Framework\Dell.SecurityManager.MgmtServer.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Waves Audio Ltd.) C:\Program Files\Realtek\Audio\HDA\WavesSvc64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
() C:\Program Files\Dell\Dell Data Protection\Client Security Framework\Dell.SecurityManager.SystrayApp.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(Dropbox, Inc.) C:\Users\Claudia\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Dr. J. Rathlev, D-24222 Schwentinental) C:\Program Files (x86)\Personal Backup 5\Persbackup.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Creative Technology Ltd) C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Dell Products, LP.) C:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(O2Micro International) C:\Windows\System32\drivers\o2flash.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell Backup and Recovery\SftService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell Backup and Recovery\Toaster.exe
() C:\Program Files (x86)\Dell Backup and Recovery\Components\Shell\DBRCrawler.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Trend Micro Inc.) C:\Users\Claudia\Downloads\HijackThis.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Apoint] => C:\Program Files\DellTPad\Apoint.exe [708952 2013-07-09] (Alps Electric Co., Ltd.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7202520 2013-08-20] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1321688 2013-07-30] (Realtek Semiconductor)
HKLM\...\Run: [WavesSvc] => C:\Program Files\Realtek\Audio\HDA\WavesSvc64.exe [115968 2013-07-24] (Waves Audio Ltd.)
HKLM\...\Run: [RtHDVBg_PushButton] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1321688 2013-07-30] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-30] (Intel Corporation)
HKLM\...\Run: [IntelPROSet] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [4791024 2013-02-08] (Intel(R) Corporation)
HKLM\...\Run: [BLEServicesCtrl] => C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe [184112 2012-09-17] (Intel Corporation)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp
HKLM\...\Run: [CSFTrayApp] => C:\Program Files\Dell\Dell Data Protection\Client Security Framework\Dell.SecurityManager.SystrayApp.exe [230752 2013-12-17] ()
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Smart Security\egui.exe [5618456 2013-09-12] (ESET)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [134616 2013-09-12] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-11] (Intel Corporation)
HKLM-x32\...\Run: [Dell Webcam Central] => C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe [462974 2011-12-16] (Creative Technology Ltd)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311616 2014-07-25] (Samsung Electronics Co., Ltd.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-394462837-1285216601-3550877629-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21650016 2014-07-24] (Skype Technologies S.A.)
HKU\S-1-5-21-394462837-1285216601-3550877629-1000\...\Run: [KiesPreload] => C:\Program Files (x86)\Samsung\Kies\Kies.exe [1562264 2014-07-25] (Samsung)
HKU\S-1-5-21-394462837-1285216601-3550877629-1000\...\Run: [KiesAirMessage] => C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup
HKU\S-1-5-21-394462837-1285216601-3550877629-1000\...\MountPoints2: {892b3a40-2d4d-11e4-ab5f-b4b676a648ab} - F:\LaunchU3.exe -a
HKU\S-1-5-21-394462837-1285216601-3550877629-1000\...\MountPoints2: {ce8e2128-8396-11e3-8baf-b4b676a648ab} - F:\LaunchU3.exe -a
Startup: C:\Users\Claudia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Claudia\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Claudia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Persbackup.lnk
ShortcutTarget: Persbackup.lnk -> C:\Program Files (x86)\Personal Backup 5\Persbackup.exe (Dr. J. Rathlev, D-24222 Schwentinental)
ShellIconOverlayIdentifiers: DBARFileBackuped -> {831cebdd-6baf-4432-be76-9e0989c14aef} => C:\Windows\system32\mscoree.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: DBARFileNotBackuped -> {275e4fd7-21ef-45cf-a836-832e5d2cc1b3} => C:\Windows\system32\mscoree.dll (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://dell13.msn.com/?pc=DCJB
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://dell13.msn.com/?pc=DCJB
SearchScopes: HKLM - DefaultScope {805EFAD5-E774-46F6-BE7D-EEF59D3A9A08} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=DCJB
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM - {805EFAD5-E774-46F6-BE7D-EEF59D3A9A08} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=DCJB
SearchScopes: HKLM-x32 - DefaultScope {805EFAD5-E774-46F6-BE7D-EEF59D3A9A08} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=DCJB
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 - {805EFAD5-E774-46F6-BE7D-EEF59D3A9A08} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=DCJB
SearchScopes: HKCU - DefaultScope {805EFAD5-E774-46F6-BE7D-EEF59D3A9A08} URL = 
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: No Name -> {269D0B18-45D0-46D0-A644-2D60D928BC7F} -> C:\Users\Claudia\AppData\LocalLow\Internet Explorer BHO\bho.dll ()
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\qnikdio5.default
FF SearchEngineOrder.1: Ask.com Search
FF SelectedSearchEngine: user_pref("browser.search.selectedEngine", "");
FF Homepage: hxxp://search.conduit.com/?ctid=CT2736476&SearchSource=13
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll No File
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\qnikdio5.default\searchplugins\ask-search.xml
FF SearchPlugin: C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\qnikdio5.default\searchplugins\askcom.xml
FF SearchPlugin: C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\qnikdio5.default\searchplugins\askcomsearch.xml
FF SearchPlugin: C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\qnikdio5.default\searchplugins\google-images.xml
FF SearchPlugin: C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\qnikdio5.default\searchplugins\google-maps.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Adblock Plus - C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\qnikdio5.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-01-23]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2014-01-15]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2014-02-09]
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF HKCU\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\qnikdio5.default\extensions\cliqz@cliqz.com

Chrome: 
=======
CHR Profile: C:\Users\Claudia\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Claudia\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-15]
CHR Extension: (Google Drive) - C:\Users\Claudia\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-15]
CHR Extension: (YouTube) - C:\Users\Claudia\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-15]
CHR Extension: (Google-Suche) - C:\Users\Claudia\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-15]
CHR Extension: (Google Wallet) - C:\Users\Claudia\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-23]
CHR Extension: (Google Mail) - C:\Users\Claudia\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-15]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 Dell.PowerManager.Service; C:\Windows\system32\dllhost.exe [9728 2009-07-14] (Microsoft Corporation)
R2 Dell.PowerManager.Service; C:\Windows\SysWOW64\dllhost.exe [7168 2009-07-14] (Microsoft Corporation)
R2 DellMgmtAgent; C:\Program Files\Dell\Dell Data Protection\Client Security Framework\Dell.SecurityManager.exe [247136 2013-12-17] (Dell Inc.)
R2 DellMgmtLoader; C:\Program Files\Dell\Dell Data Protection\Client Security Framework\Dell.SecurityManager.Loader.exe [26464 2013-12-17] ()
R2 DellMgmtServer; C:\Program Files\Dell\Dell Data Protection\Client Security Framework\Dell.SecurityManager.MgmtServer.exe [33632 2013-12-17] (Dell, Inc.)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [1337752 2013-09-12] (ESET)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-30] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation)
S3 InvProtectSvc; C:\Program Files (x86)\Invincea\Enterprise\X64\InvProtectSvc64.exe [2947856 2013-07-30] (Invincea, Inc.)
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [174368 2014-02-28] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-12] (Intel Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273136 2013-02-08] ()
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [50688 2011-04-13] (Hewlett-Packard) [File not signed]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [66048 2011-04-13] (Hewlett-Packard) [File not signed]
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [246488 2013-06-19] (Realtek Semiconductor)
S3 SboxSvc; C:\Program Files (x86)\Invincea\Enterprise\Sandbox\SboxSvc.exe [124616 2013-07-30] ()
R2 SftService; C:\Program Files (x86)\Dell Backup and Recovery\sftservice.exe [1915920 2013-11-22] (SoftThinks SAS)
S2 tcsd_win32.exe; C:\Program Files\Dell\Dell Data Protection\TSS\bin\tcsd_win32.exe [1636352 2012-12-10] (Security Innovation, Inc.) [File not signed]
R2 valWBFPolicyService; C:\Windows\system32\valWBFPolicyService.exe [35328 2013-10-09] (Validity Sensors, Inc.) [File not signed]
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3386608 2013-02-08] (Intel® Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R0 amdkmpfd; C:\Windows\System32\DRIVERS\amdkmpfd.sys [36520 2012-09-14] (Advanced Micro Devices, Inc.)
R3 btmaux; C:\Windows\System32\DRIVERS\btmaux.sys [131968 2012-10-30] (Motorola Solutions, Inc.)
R3 btmhsf; C:\Windows\System32\DRIVERS\btmhsf.sys [1342848 2012-12-03] (Motorola Solutions, Inc.)
R0 CredFltL; C:\Windows\System32\DRIVERS\CredFltL.sys [34048 2013-12-17] ()
R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [488216 2014-02-25] (Intel Corporation)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [239320 2013-09-17] (ESET)
U5 edevmon; C:\Windows\System32\Drivers\edevmon.sys [239296 2013-09-17] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [168256 2013-09-17] (ESET)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [220232 2013-09-17] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [44120 2013-09-17] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [62136 2013-09-17] (ESET)
U5 ew_hwusbdev; C:\Windows\System32\Drivers\ew_hwusbdev.sys [117248 2010-07-27] (Huawei Technologies Co., Ltd.)
S3 hwdatacard; C:\Windows\SysWOW64\DRIVERS\ewusbmdm.sys [92032 2007-03-01] (Huawei Technologies Co., Ltd.) [File not signed]
R0 iaStorF; C:\Windows\System32\drivers\iaStorF.sys [28008 2013-08-29] (Intel Corporation)
R3 IntcAzAudAddService; C:\Windows\System32\drivers\RTDVHD64.sys [2261464 2013-08-27] (Realtek Semiconductor Corp.)
S3 InvProtectDrv; C:\Program Files (x86)\Invincea\Enterprise\X64\InvProtectDrv64.sys [34824 2013-07-30] ()
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-09-12] (Intel Corporation)
R3 O2FJ2RDR; C:\Windows\System32\DRIVERS\O2FJ2w7x64.sys [185760 2013-05-07] (O2Micro )
S3 SboxDrv; C:\Program Files (x86)\Invincea\Enterprise\Sandbox\SboxDrv.sys [202248 2013-07-30] ()
R3 ST_ACCEL; C:\Windows\System32\DRIVERS\ST_Accel.sys [89312 2013-03-27] (STMicroelectronics)
R3 usb3Hub; C:\Windows\System32\DRIVERS\usb3Hub.sys [48024 2013-01-28] (Windows (R) Win 7 DDK provider)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2012-12-13] (Apple, Inc.) [File not signed]
R3 XHCIPort; C:\Windows\System32\DRIVERS\XHCIPort.sys [194456 2013-01-28] (Windows (R) Win 7 DDK provider)
S3 PCDSRVC{D3412D80-CF3B4A27-06020200}_0; \??\c:\program files\my dell\pcdsrvc_x64.pkms [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-01 20:36 - 2014-09-01 20:38 - 00024637 _____ () C:\Users\Claudia\Downloads\FRST.txt
2014-09-01 20:36 - 2014-09-01 20:36 - 00000000 ____D () C:\FRST
2014-09-01 20:35 - 2014-09-01 20:35 - 02104832 _____ (Farbar) C:\Users\Claudia\Downloads\FRST64.exe
2014-09-01 20:34 - 2014-09-01 20:34 - 00000476 _____ () C:\Users\Claudia\Downloads\defogger_disable.log
2014-09-01 20:34 - 2014-09-01 20:34 - 00000000 _____ () C:\Users\Claudia\defogger_reenable
2014-09-01 20:33 - 2014-09-01 20:33 - 00050477 _____ () C:\Users\Claudia\Downloads\Defogger.exe
2014-09-01 19:04 - 2014-09-01 19:04 - 00388608 _____ (Trend Micro Inc.) C:\Users\Claudia\Downloads\HijackThis.exe
2014-09-01 19:04 - 2014-09-01 19:04 - 00013761 _____ () C:\Users\Claudia\Downloads\hijackthis.log
2014-09-01 09:07 - 2014-09-01 09:07 - 00285296 _____ () C:\Windows\Minidump\090114-26504-01.dmp
2014-08-31 13:49 - 2014-08-31 13:49 - 00285184 _____ () C:\Windows\Minidump\083114-31137-01.dmp
2014-08-30 18:50 - 2014-08-30 18:51 - 00284944 _____ () C:\Windows\Minidump\083014-24180-01.dmp
2014-08-30 18:40 - 2014-08-30 18:40 - 00284872 _____ () C:\Windows\Minidump\083014-28454-01.dmp
2014-08-30 17:39 - 2014-08-30 17:39 - 00759344 _____ () C:\Windows\Minidump\083014-33665-01.dmp
2014-08-30 12:47 - 2014-08-30 12:47 - 00284864 _____ () C:\Windows\Minidump\083014-18969-01.dmp
2014-08-29 09:29 - 2014-08-23 04:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-29 09:29 - 2014-08-23 03:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-29 09:29 - 2014-08-23 02:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-28 13:22 - 2014-08-28 13:22 - 00285080 _____ () C:\Windows\Minidump\082814-13665-01.dmp
2014-08-26 22:19 - 2014-08-26 22:19 - 00015201 _____ () C:\Users\Claudia\Downloads\MemTest-41.zip
2014-08-26 22:19 - 2014-08-26 22:19 - 00000000 ____D () C:\Users\Claudia\Downloads\MemTest-41
2014-08-26 21:14 - 2014-08-27 19:38 - 00000000 ____D () C:\Users\Claudia\Desktop\bluescreen_analyse
2014-08-26 21:07 - 2014-08-26 21:07 - 00284952 _____ () C:\Windows\Minidump\082614-11684-01.dmp
2014-08-26 20:44 - 2014-08-26 20:44 - 01058200 _____ (Adobe) C:\Users\Claudia\Downloads\install_flashplayer14x32au_mssd_aaa_aih.exe
2014-08-26 20:19 - 2014-08-26 20:20 - 00284984 _____ () C:\Windows\Minidump\082614-17924-01.dmp
2014-08-23 21:11 - 2014-08-23 21:11 - 00000000 ____D () C:\Users\Claudia\AppData\Roaming\JAM Software
2014-08-23 21:11 - 2014-08-23 21:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TreeSize Free
2014-08-23 21:11 - 2014-08-23 21:11 - 00000000 ____D () C:\Program Files (x86)\JAM Software
2014-08-23 21:10 - 2014-08-23 21:11 - 01101648 _____ () C:\Users\Claudia\Downloads\TreeSize Free - CHIP-Installer.exe
2014-08-23 20:36 - 2014-08-23 20:36 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01007.Wdf
2014-08-23 20:35 - 2014-08-23 20:35 - 00000000 ____D () C:\Users\Public\Documents\NativeFus_Log
2014-08-23 20:35 - 2014-06-16 08:01 - 00708168 _____ (Microsoft Corporation) C:\Windows\system32\WinUSBCoInstaller.dll
2014-08-23 20:35 - 2014-06-16 08:01 - 00206080 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudmdm.sys
2014-08-23 20:35 - 2014-06-16 08:01 - 00110336 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys
2014-08-23 20:33 - 2014-08-23 20:35 - 00002004 _____ () C:\Users\Public\Desktop\Samsung Kies (Lite).lnk
2014-08-23 20:33 - 2014-08-23 20:33 - 00001994 _____ () C:\Users\Public\Desktop\Samsung Kies.lnk
2014-08-23 20:33 - 2014-08-23 20:33 - 00000000 ____D () C:\Users\Claudia\Documents\samsung
2014-08-23 20:33 - 2014-08-23 20:33 - 00000000 ____D () C:\Users\Claudia\AppData\Roaming\Samsung
2014-08-23 20:33 - 2014-08-23 20:33 - 00000000 ____D () C:\Users\Claudia\AppData\Local\Samsung
2014-08-23 20:33 - 2014-08-23 20:33 - 00000000 ____D () C:\Program Files (x86)\MarkAny
2014-08-23 20:32 - 2014-08-23 20:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyFree Codec
2014-08-23 20:32 - 2014-08-23 20:32 - 00000000 ____D () C:\Program Files (x86)\MyFree Codec
2014-08-23 20:31 - 2014-08-23 20:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2014-08-23 20:31 - 2014-02-07 16:33 - 04659712 _____ (Dmitry Streblechenko) C:\Windows\SysWOW64\Redemption.dll
2014-08-23 20:31 - 2014-01-23 18:31 - 00821824 _____ (Devguru Co., Ltd.) C:\Windows\SysWOW64\dgderapi.dll
2014-08-23 20:30 - 2014-08-23 20:32 - 00000000 ____D () C:\ProgramData\Samsung
2014-08-23 20:30 - 2014-08-23 20:32 - 00000000 ____D () C:\Program Files (x86)\Samsung
2014-08-23 20:30 - 2014-08-23 20:30 - 00000000 ____D () C:\Users\Claudia\AppData\Local\Downloaded Installations
2014-08-23 20:29 - 2014-08-23 20:30 - 75211320 _____ (Samsung Electronics Co., Ltd.) C:\Users\Claudia\Downloads\KiesSetup.exe
2014-08-23 13:55 - 2014-08-23 13:55 - 00285240 _____ () C:\Windows\Minidump\082314-25537-01.dmp
2014-08-20 13:00 - 2014-08-20 13:01 - 00284872 _____ () C:\Windows\Minidump\082014-25786-01.dmp
2014-08-20 10:47 - 2014-08-20 10:47 - 00284904 _____ () C:\Windows\Minidump\082014-27284-01.dmp
2014-08-19 11:06 - 2014-08-19 11:07 - 00284952 _____ () C:\Windows\Minidump\081914-27331-01.dmp
2014-08-19 10:50 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-08-19 10:50 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-08-19 10:50 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-08-19 10:50 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-08-19 10:49 - 2014-05-14 18:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-08-19 10:49 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2014-08-19 10:49 - 2014-05-14 18:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-08-19 10:49 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2014-08-19 10:49 - 2014-05-14 18:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-08-19 10:49 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2014-08-19 10:49 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-08-19 10:49 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2014-08-19 10:49 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-08-19 10:49 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2014-08-18 09:36 - 2014-08-01 01:41 - 00348856 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-18 09:36 - 2014-08-01 01:16 - 00307384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-08-18 09:36 - 2014-07-25 16:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-08-18 09:36 - 2014-07-25 16:01 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-08-18 09:36 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-08-18 09:36 - 2014-07-25 15:30 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-08-18 09:36 - 2014-07-25 15:28 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-08-18 09:36 - 2014-07-25 15:25 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-18 09:36 - 2014-07-25 15:11 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-08-18 09:36 - 2014-07-25 15:10 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-08-18 09:36 - 2014-07-25 15:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-08-18 09:36 - 2014-07-25 15:03 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-08-18 09:36 - 2014-07-25 15:00 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-08-18 09:36 - 2014-07-25 14:40 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-08-18 09:36 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-08-18 09:36 - 2014-07-25 14:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-08-18 09:36 - 2014-07-25 14:33 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-08-18 09:36 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-08-18 09:36 - 2014-07-25 14:28 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-18 09:36 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-08-18 09:36 - 2014-07-25 14:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-08-18 09:36 - 2014-07-25 14:17 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-08-18 09:36 - 2014-07-25 14:17 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-08-18 09:36 - 2014-07-25 14:12 - 00438784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-08-18 09:36 - 2014-07-25 14:10 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-08-18 09:36 - 2014-07-25 14:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-08-18 09:36 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-08-18 09:36 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-08-18 09:36 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-08-18 09:36 - 2014-07-25 13:47 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-08-18 09:36 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-08-18 09:36 - 2014-07-25 13:42 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-08-18 09:36 - 2014-07-25 13:39 - 02087936 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-08-18 09:36 - 2014-07-25 13:39 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-08-18 09:36 - 2014-07-25 13:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-08-18 09:36 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-08-18 09:36 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-08-18 09:36 - 2014-07-25 13:23 - 13547008 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-08-18 09:36 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-08-18 09:36 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-08-18 09:36 - 2014-07-25 13:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-08-18 09:36 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-08-18 09:36 - 2014-07-25 12:26 - 01431040 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-08-18 09:36 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-08-18 09:36 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-08-18 09:36 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-08-18 09:36 - 2014-06-03 12:02 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-08-18 09:36 - 2014-06-03 12:02 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-08-18 09:36 - 2014-06-03 12:02 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-08-18 09:36 - 2014-06-03 12:02 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-08-18 09:36 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-08-18 09:36 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-08-18 09:36 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2014-08-18 09:35 - 2014-07-25 16:52 - 23645696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-18 09:35 - 2014-07-25 15:28 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-18 09:35 - 2014-07-25 15:25 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-18 09:35 - 2014-07-25 15:00 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-18 09:35 - 2014-07-25 14:59 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-18 09:35 - 2014-07-25 14:47 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-18 09:35 - 2014-07-25 14:28 - 05824512 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-18 09:35 - 2014-07-25 14:19 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-08-18 09:35 - 2014-07-25 12:52 - 02266624 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-08-18 09:35 - 2014-07-25 12:17 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-08-16 09:57 - 2014-08-16 09:57 - 00284936 _____ () C:\Windows\Minidump\081614-53196-01.dmp
2014-08-15 20:05 - 2014-08-15 20:05 - 00759304 _____ () C:\Windows\Minidump\081514-59545-01.dmp
2014-08-14 16:42 - 2014-07-01 00:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-08-14 16:42 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll
2014-08-14 16:42 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2014-08-14 16:42 - 2014-06-06 08:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-14 16:42 - 2014-03-09 23:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-08-14 16:42 - 2014-03-09 23:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-08-14 16:42 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe
2014-08-14 16:42 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll
2014-08-14 11:44 - 2014-08-07 04:06 - 00529920 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-14 11:44 - 2014-08-07 04:01 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-14 11:44 - 2014-07-16 05:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-08-14 11:44 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-08-14 11:44 - 2014-07-14 04:02 - 01216000 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-08-14 11:44 - 2014-07-14 03:40 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2014-08-14 11:44 - 2014-06-25 04:05 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-08-14 11:44 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-08-14 11:44 - 2014-06-16 04:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-08-10 21:10 - 2014-08-10 21:10 - 00001305 _____ () C:\Users\Public\Desktop\Ashampoo Burning Studio 2014.lnk
2014-08-10 21:10 - 2014-08-10 21:10 - 00000000 ____D () C:\Users\Claudia\AppData\Roaming\Ashampoo
2014-08-10 21:10 - 2014-08-10 21:10 - 00000000 ____D () C:\Users\Claudia\AppData\Local\ashampoo
2014-08-10 21:10 - 2014-08-10 21:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo
2014-08-10 21:09 - 2014-08-10 21:10 - 00000000 ____D () C:\ProgramData\Ashampoo
2014-08-10 21:09 - 2014-08-10 21:09 - 00000000 ____D () C:\Program Files (x86)\Ashampoo
2014-08-10 21:09 - 2011-05-13 12:16 - 00493056 _____ ( datenhaus GmbH) C:\Windows\SysWOW64\dhRichClient3.dll
2014-08-10 21:09 - 2011-03-25 20:42 - 00338432 _____ () C:\Windows\SysWOW64\sqlite36_engine.dll
2014-08-10 21:08 - 2014-08-10 21:08 - 01101648 _____ () C:\Users\Claudia\Downloads\Vollversion Ashampoo Burning Studio 2014 - CHIP-Installer.exe
2014-08-10 21:05 - 2014-08-10 21:06 - 00000000 ____D () C:\Users\Claudia\AppData\Roaming\InfraRecorder
2014-08-10 21:05 - 2014-08-10 21:05 - 04151536 _____ () C:\Users\Claudia\Downloads\ir053.exe
2014-08-10 21:05 - 2014-08-10 21:05 - 00001069 _____ () C:\Users\Public\Desktop\InfraRecorder.lnk
2014-08-10 21:05 - 2014-08-10 21:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\InfraRecorder
2014-08-10 21:05 - 2014-08-10 21:05 - 00000000 ____D () C:\Program Files (x86)\InfraRecorder
2014-08-10 19:59 - 2014-08-10 20:01 - 00000000 ____D () C:\Users\Claudia\AppData\Local\Nero
2014-08-10 19:59 - 2014-08-10 19:59 - 00000000 ____D () C:\Users\Claudia\AppData\Roaming\Nero
2014-08-10 19:59 - 2014-08-10 19:59 - 00000000 ____D () C:\Users\Claudia\AppData\Local\Nero_AG
2014-08-10 19:57 - 2014-08-10 21:04 - 00000000 ____D () C:\ProgramData\Nero
2014-08-10 19:56 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2014-08-10 19:56 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2014-08-10 19:56 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2014-08-10 19:45 - 2014-08-10 19:46 - 00000000 ____D () C:\Users\Claudia\AppData\Roaming\Security Systems
2014-08-10 19:45 - 2014-08-10 19:45 - 01040592 _____ () C:\Users\Claudia\Downloads\Nero-Media-Home-lnstall.exe
2014-08-10 19:42 - 2014-08-11 08:04 - 00000000 ____D () C:\Program Files (x86)\CDBurnerXP
2014-08-10 19:42 - 2014-08-10 20:01 - 00001951 _____ () C:\Users\Public\Desktop\CDBurnerXP.lnk
2014-08-10 19:42 - 2014-08-10 20:01 - 00001901 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDBurnerXP.lnk
2014-08-10 19:42 - 2014-08-10 19:42 - 00000000 ____D () C:\Users\Claudia\AppData\Roaming\Canneverbe Limited
2014-08-10 19:42 - 2014-08-10 19:42 - 00000000 ____D () C:\ProgramData\Canneverbe Limited
2014-08-10 19:41 - 2014-08-10 19:41 - 05408152 _____ (Canneverbe Limited ) C:\Users\Claudia\Downloads\cdbxp_setup_4.5.4.4954_minimal.exe
2014-08-10 18:56 - 2014-08-10 18:56 - 00284864 _____ () C:\Windows\Minidump\081014-24211-01.dmp
2014-08-10 18:53 - 2014-08-10 18:53 - 00285064 _____ () C:\Windows\Minidump\081014-30872-01.dmp
2014-08-09 12:57 - 2014-08-09 12:58 - 00763984 _____ () C:\Windows\Minidump\080914-29390-01.dmp
2014-08-03 13:39 - 2014-08-03 13:39 - 00001026 _____ () C:\Users\Public\Desktop\bob internet.lnk
2014-08-03 13:39 - 2014-08-03 13:39 - 00000000 __HDC () C:\ProgramData\{09C34D8E-27B5-4858-9351-D431317DA117}
2014-08-03 13:39 - 2014-08-03 13:39 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ew_jubusenum_01007.Wdf
2014-08-03 13:39 - 2014-08-03 13:39 - 00000000 ____D () C:\ProgramData\mquadr.at
2014-08-03 13:39 - 2014-08-03 13:39 - 00000000 ____D () C:\Program Files (x86)\bob internet
2014-08-03 13:39 - 2011-05-31 17:11 - 00415744 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbwwan.sys
2014-08-03 13:39 - 2011-05-03 15:42 - 00222464 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbmdm.sys
2014-08-03 13:39 - 2011-02-25 18:02 - 00098816 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jucdcacm.sys
2014-08-03 13:39 - 2011-01-30 18:20 - 00212992 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_juwwanecm.sys
2014-08-03 13:39 - 2011-01-30 18:19 - 00086016 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jubusenum.sys
2014-08-03 13:39 - 2011-01-30 18:19 - 00069632 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jucdcecm.sys
2014-08-03 13:39 - 2011-01-30 18:19 - 00028672 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_juextctrl.sys
2014-08-03 13:39 - 2010-10-08 16:59 - 00032768 _____ (Huawei Tech. Co., Ltd.) C:\Windows\system32\Drivers\ewdcsc.sys
2014-08-03 13:39 - 2010-09-26 18:09 - 00022016 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_hwupgrade.sys
2014-08-03 13:39 - 2010-08-06 07:43 - 01001472 _____ (DiBcom SA) C:\Windows\system32\Drivers\mod7700.sys
2014-08-03 13:39 - 2010-07-27 09:52 - 00117248 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_hwusbdev.sys
2014-08-03 13:39 - 2010-03-20 12:06 - 00013952 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_usbenumfilter.sys
2014-08-03 13:39 - 2010-03-02 14:59 - 00121344 _____ (ZTE Incorporated) C:\Windows\system32\Drivers\ZTEusbser6k.sys
2014-08-03 13:39 - 2010-03-02 14:59 - 00121344 _____ (ZTE Incorporated) C:\Windows\system32\Drivers\ZTEusbnmea.sys
2014-08-03 13:39 - 2010-03-02 14:59 - 00121344 _____ (ZTE Incorporated) C:\Windows\system32\Drivers\ZTEusbmdm6k.sys
2014-08-03 13:39 - 2010-02-22 10:09 - 00011776 _____ (MBB Incorporated) C:\Windows\system32\Drivers\massfilter.sys
2014-08-03 13:39 - 2009-12-28 15:06 - 00135168 _____ (ZTE Corporation) C:\Windows\system32\Drivers\ZTEusbnet.sys
2014-08-03 13:39 - 2008-03-27 16:51 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01007.dll
2014-08-03 13:39 - 2008-03-27 16:51 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfCoInstaller01007.dll
2014-08-03 13:38 - 2014-08-03 13:38 - 40075688 _____ (A1 Telekom Austria AG ) C:\Users\Claudia\Downloads\BOB_WIN_1.17.0.0.exe
2014-08-03 13:37 - 2014-08-03 13:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\bob
2014-08-03 13:37 - 2014-08-03 13:37 - 00001219 _____ () C:\Users\Public\Desktop\bob internet installieren.lnk
2014-08-03 13:37 - 2014-08-03 13:37 - 00000000 __HDC () C:\ProgramData\{EA7A5450-AFDA-48F6-B414-3972A5D46653}
2014-08-03 13:37 - 2014-08-03 13:37 - 00000000 ____D () C:\Program Files (x86)\bob
2014-08-03 13:36 - 2014-08-03 13:36 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-08-03 12:51 - 2014-08-03 12:51 - 00284880 _____ () C:\Windows\Minidump\080314-26208-01.dmp

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-01 20:38 - 2014-09-01 20:36 - 00024637 _____ () C:\Users\Claudia\Downloads\FRST.txt
2014-09-01 20:36 - 2014-09-01 20:36 - 00000000 ____D () C:\FRST
2014-09-01 20:35 - 2014-09-01 20:35 - 02104832 _____ (Farbar) C:\Users\Claudia\Downloads\FRST64.exe
2014-09-01 20:34 - 2014-09-01 20:34 - 00000476 _____ () C:\Users\Claudia\Downloads\defogger_disable.log
2014-09-01 20:34 - 2014-09-01 20:34 - 00000000 _____ () C:\Users\Claudia\defogger_reenable
2014-09-01 20:34 - 2014-01-15 09:17 - 00000000 ____D () C:\Users\Claudia
2014-09-01 20:33 - 2014-09-01 20:33 - 00050477 _____ () C:\Users\Claudia\Downloads\Defogger.exe
2014-09-01 20:28 - 2013-12-16 08:19 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-01 20:26 - 2014-01-15 20:45 - 00000000 ____D () C:\Users\Claudia\AppData\Roaming\Skype
2014-09-01 20:07 - 2014-06-22 01:02 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cf8da4e8303d1a.job
2014-09-01 19:57 - 2011-03-01 06:56 - 00700380 _____ () C:\Windows\system32\perfh007.dat
2014-09-01 19:57 - 2011-03-01 06:56 - 00149986 _____ () C:\Windows\system32\perfc007.dat
2014-09-01 19:57 - 2009-07-14 07:13 - 01622706 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-09-01 19:51 - 2014-06-22 01:02 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf8da4e80eab57.job
2014-09-01 19:50 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-01 19:49 - 2013-12-16 16:11 - 01849458 _____ () C:\Windows\WindowsUpdate.log
2014-09-01 19:49 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-09-01 19:22 - 2014-01-29 17:40 - 00000000 ____D () C:\Users\Claudia\AppData\Local\CrashDumps
2014-09-01 19:04 - 2014-09-01 19:04 - 00388608 _____ (Trend Micro Inc.) C:\Users\Claudia\Downloads\HijackThis.exe
2014-09-01 19:04 - 2014-09-01 19:04 - 00013761 _____ () C:\Users\Claudia\Downloads\hijackthis.log
2014-09-01 19:04 - 2014-01-15 09:17 - 00000000 ____D () C:\Users\Claudia\AppData\Local\VirtualStore
2014-09-01 18:29 - 2013-12-16 08:56 - 00000000 ____D () C:\Program Files (x86)\Dell Backup and Recovery
2014-09-01 18:29 - 2009-07-14 06:45 - 00031312 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-01 18:29 - 2009-07-14 06:45 - 00031312 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-01 18:22 - 2014-07-08 21:00 - 00021561 _____ () C:\Windows\setupact.log
2014-09-01 18:22 - 2014-01-23 15:54 - 00000000 ___RD () C:\Users\Claudia\Dropbox
2014-09-01 18:22 - 2014-01-22 22:42 - 00131072 ___SH () C:\CredSED.dat
2014-09-01 18:22 - 2014-01-15 20:43 - 00000000 ____D () C:\Users\Claudia\AppData\Roaming\Dropbox
2014-09-01 18:22 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Registration
2014-09-01 09:07 - 2014-09-01 09:07 - 00285296 _____ () C:\Windows\Minidump\090114-26504-01.dmp
2014-09-01 09:07 - 2014-07-09 19:05 - 921774016 _____ () C:\Windows\MEMORY.DMP
2014-09-01 09:07 - 2014-06-01 22:25 - 00000000 ____D () C:\Windows\Minidump
2014-09-01 09:06 - 2014-01-22 21:07 - 00003440 _____ () C:\Windows\System32\Tasks\PCDEventLauncherTask
2014-08-31 13:49 - 2014-08-31 13:49 - 00285184 _____ () C:\Windows\Minidump\083114-31137-01.dmp
2014-08-30 18:51 - 2014-08-30 18:50 - 00284944 _____ () C:\Windows\Minidump\083014-24180-01.dmp
2014-08-30 18:40 - 2014-08-30 18:40 - 00284872 _____ () C:\Windows\Minidump\083014-28454-01.dmp
2014-08-30 17:39 - 2014-08-30 17:39 - 00759344 _____ () C:\Windows\Minidump\083014-33665-01.dmp
2014-08-30 12:47 - 2014-08-30 12:47 - 00284864 _____ () C:\Windows\Minidump\083014-18969-01.dmp
2014-08-30 12:38 - 2009-07-14 06:45 - 00496600 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-28 13:22 - 2014-08-28 13:22 - 00285080 _____ () C:\Windows\Minidump\082814-13665-01.dmp
2014-08-27 19:38 - 2014-08-26 21:14 - 00000000 ____D () C:\Users\Claudia\Desktop\bluescreen_analyse
2014-08-26 22:19 - 2014-08-26 22:19 - 00015201 _____ () C:\Users\Claudia\Downloads\MemTest-41.zip
2014-08-26 22:19 - 2014-08-26 22:19 - 00000000 ____D () C:\Users\Claudia\Downloads\MemTest-41
2014-08-26 21:07 - 2014-08-26 21:07 - 00284952 _____ () C:\Windows\Minidump\082614-11684-01.dmp
2014-08-26 20:44 - 2014-08-26 20:44 - 01058200 _____ (Adobe) C:\Users\Claudia\Downloads\install_flashplayer14x32au_mssd_aaa_aih.exe
2014-08-26 20:20 - 2014-08-26 20:19 - 00284984 _____ () C:\Windows\Minidump\082614-17924-01.dmp
2014-08-23 21:11 - 2014-08-23 21:11 - 00000000 ____D () C:\Users\Claudia\AppData\Roaming\JAM Software
2014-08-23 21:11 - 2014-08-23 21:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TreeSize Free
2014-08-23 21:11 - 2014-08-23 21:11 - 00000000 ____D () C:\Program Files (x86)\JAM Software
2014-08-23 21:11 - 2014-08-23 21:10 - 01101648 _____ () C:\Users\Claudia\Downloads\TreeSize Free - CHIP-Installer.exe
2014-08-23 20:36 - 2014-08-23 20:36 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01007.Wdf
2014-08-23 20:35 - 2014-08-23 20:35 - 00000000 ____D () C:\Users\Public\Documents\NativeFus_Log
2014-08-23 20:35 - 2014-08-23 20:33 - 00002004 _____ () C:\Users\Public\Desktop\Samsung Kies (Lite).lnk
2014-08-23 20:33 - 2014-08-23 20:33 - 00001994 _____ () C:\Users\Public\Desktop\Samsung Kies.lnk
2014-08-23 20:33 - 2014-08-23 20:33 - 00000000 ____D () C:\Users\Claudia\Documents\samsung
2014-08-23 20:33 - 2014-08-23 20:33 - 00000000 ____D () C:\Users\Claudia\AppData\Roaming\Samsung
2014-08-23 20:33 - 2014-08-23 20:33 - 00000000 ____D () C:\Users\Claudia\AppData\Local\Samsung
2014-08-23 20:33 - 2014-08-23 20:33 - 00000000 ____D () C:\Program Files (x86)\MarkAny
2014-08-23 20:32 - 2014-08-23 20:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyFree Codec
2014-08-23 20:32 - 2014-08-23 20:32 - 00000000 ____D () C:\Program Files (x86)\MyFree Codec
2014-08-23 20:32 - 2014-08-23 20:30 - 00000000 ____D () C:\ProgramData\Samsung
2014-08-23 20:32 - 2014-08-23 20:30 - 00000000 ____D () C:\Program Files (x86)\Samsung
2014-08-23 20:31 - 2014-08-23 20:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2014-08-23 20:31 - 2013-12-16 08:26 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-08-23 20:30 - 2014-08-23 20:30 - 00000000 ____D () C:\Users\Claudia\AppData\Local\Downloaded Installations
2014-08-23 20:30 - 2014-08-23 20:29 - 75211320 _____ (Samsung Electronics Co., Ltd.) C:\Users\Claudia\Downloads\KiesSetup.exe
2014-08-23 15:04 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-08-23 13:55 - 2014-08-23 13:55 - 00285240 _____ () C:\Windows\Minidump\082314-25537-01.dmp
2014-08-23 04:07 - 2014-08-29 09:29 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-23 03:45 - 2014-08-29 09:29 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-23 02:59 - 2014-08-29 09:29 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-20 13:01 - 2014-08-20 13:00 - 00284872 _____ () C:\Windows\Minidump\082014-25786-01.dmp
2014-08-20 10:47 - 2014-08-20 10:47 - 00284904 _____ () C:\Windows\Minidump\082014-27284-01.dmp
2014-08-19 20:49 - 2013-12-16 08:19 - 00699568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-08-19 20:49 - 2013-12-16 08:19 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-08-19 20:49 - 2013-12-16 08:19 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-08-19 20:47 - 2014-01-15 20:45 - 00000000 ____D () C:\ProgramData\Skype
2014-08-19 11:07 - 2014-08-19 11:06 - 00284952 _____ () C:\Windows\Minidump\081914-27331-01.dmp
2014-08-19 03:18 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-08-16 09:57 - 2014-08-16 09:57 - 00284936 _____ () C:\Windows\Minidump\081614-53196-01.dmp
2014-08-16 09:48 - 2014-01-23 15:54 - 00001029 _____ () C:\Users\Claudia\Desktop\Dropbox.lnk
2014-08-16 09:48 - 2014-01-15 20:43 - 00000000 ____D () C:\Users\Claudia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-08-15 20:05 - 2014-08-15 20:05 - 00759304 _____ () C:\Windows\Minidump\081514-59545-01.dmp
2014-08-15 17:08 - 2014-01-15 20:36 - 00002177 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-08-14 16:50 - 2014-01-22 21:05 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-08-14 16:41 - 2014-04-30 17:25 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-08-11 08:04 - 2014-08-10 19:42 - 00000000 ____D () C:\Program Files (x86)\CDBurnerXP
2014-08-10 21:10 - 2014-08-10 21:10 - 00001305 _____ () C:\Users\Public\Desktop\Ashampoo Burning Studio 2014.lnk
2014-08-10 21:10 - 2014-08-10 21:10 - 00000000 ____D () C:\Users\Claudia\AppData\Roaming\Ashampoo
2014-08-10 21:10 - 2014-08-10 21:10 - 00000000 ____D () C:\Users\Claudia\AppData\Local\ashampoo
2014-08-10 21:10 - 2014-08-10 21:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo
2014-08-10 21:10 - 2014-08-10 21:09 - 00000000 ____D () C:\ProgramData\Ashampoo
2014-08-10 21:09 - 2014-08-10 21:09 - 00000000 ____D () C:\Program Files (x86)\Ashampoo
2014-08-10 21:08 - 2014-08-10 21:08 - 01101648 _____ () C:\Users\Claudia\Downloads\Vollversion Ashampoo Burning Studio 2014 - CHIP-Installer.exe
2014-08-10 21:06 - 2014-08-10 21:05 - 00000000 ____D () C:\Users\Claudia\AppData\Roaming\InfraRecorder
2014-08-10 21:05 - 2014-08-10 21:05 - 04151536 _____ () C:\Users\Claudia\Downloads\ir053.exe
2014-08-10 21:05 - 2014-08-10 21:05 - 00001069 _____ () C:\Users\Public\Desktop\InfraRecorder.lnk
2014-08-10 21:05 - 2014-08-10 21:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\InfraRecorder
2014-08-10 21:05 - 2014-08-10 21:05 - 00000000 ____D () C:\Program Files (x86)\InfraRecorder
2014-08-10 21:04 - 2014-08-10 19:57 - 00000000 ____D () C:\ProgramData\Nero
2014-08-10 20:01 - 2014-08-10 19:59 - 00000000 ____D () C:\Users\Claudia\AppData\Local\Nero
2014-08-10 20:01 - 2014-08-10 19:42 - 00001951 _____ () C:\Users\Public\Desktop\CDBurnerXP.lnk
2014-08-10 20:01 - 2014-08-10 19:42 - 00001901 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDBurnerXP.lnk
2014-08-10 19:59 - 2014-08-10 19:59 - 00000000 ____D () C:\Users\Claudia\AppData\Roaming\Nero
2014-08-10 19:59 - 2014-08-10 19:59 - 00000000 ____D () C:\Users\Claudia\AppData\Local\Nero_AG
2014-08-10 19:58 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Cursors
2014-08-10 19:46 - 2014-08-10 19:45 - 00000000 ____D () C:\Users\Claudia\AppData\Roaming\Security Systems
2014-08-10 19:45 - 2014-08-10 19:45 - 01040592 _____ () C:\Users\Claudia\Downloads\Nero-Media-Home-lnstall.exe
2014-08-10 19:42 - 2014-08-10 19:42 - 00000000 ____D () C:\Users\Claudia\AppData\Roaming\Canneverbe Limited
2014-08-10 19:42 - 2014-08-10 19:42 - 00000000 ____D () C:\ProgramData\Canneverbe Limited
2014-08-10 19:41 - 2014-08-10 19:41 - 05408152 _____ (Canneverbe Limited ) C:\Users\Claudia\Downloads\cdbxp_setup_4.5.4.4954_minimal.exe
2014-08-10 18:56 - 2014-08-10 18:56 - 00284864 _____ () C:\Windows\Minidump\081014-24211-01.dmp
2014-08-10 18:53 - 2014-08-10 18:53 - 00285064 _____ () C:\Windows\Minidump\081014-30872-01.dmp
2014-08-09 12:58 - 2014-08-09 12:57 - 00763984 _____ () C:\Windows\Minidump\080914-29390-01.dmp
2014-08-07 04:06 - 2014-08-14 11:44 - 00529920 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-07 04:01 - 2014-08-14 11:44 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-05 09:20 - 2010-11-21 05:27 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-08-03 16:03 - 2014-01-15 20:31 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-08-03 13:39 - 2014-08-03 13:39 - 00001026 _____ () C:\Users\Public\Desktop\bob internet.lnk
2014-08-03 13:39 - 2014-08-03 13:39 - 00000000 __HDC () C:\ProgramData\{09C34D8E-27B5-4858-9351-D431317DA117}
2014-08-03 13:39 - 2014-08-03 13:39 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ew_jubusenum_01007.Wdf
2014-08-03 13:39 - 2014-08-03 13:39 - 00000000 ____D () C:\ProgramData\mquadr.at
2014-08-03 13:39 - 2014-08-03 13:39 - 00000000 ____D () C:\Program Files (x86)\bob internet
2014-08-03 13:39 - 2014-08-03 13:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\bob
2014-08-03 13:38 - 2014-08-03 13:38 - 40075688 _____ (A1 Telekom Austria AG ) C:\Users\Claudia\Downloads\BOB_WIN_1.17.0.0.exe
2014-08-03 13:37 - 2014-08-03 13:37 - 00001219 _____ () C:\Users\Public\Desktop\bob internet installieren.lnk
2014-08-03 13:37 - 2014-08-03 13:37 - 00000000 __HDC () C:\ProgramData\{EA7A5450-AFDA-48F6-B414-3972A5D46653}
2014-08-03 13:37 - 2014-08-03 13:37 - 00000000 ____D () C:\Program Files (x86)\bob
2014-08-03 13:36 - 2014-08-03 13:36 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-08-03 12:51 - 2014-08-03 12:51 - 00284880 _____ () C:\Windows\Minidump\080314-26208-01.dmp

Files to move or delete:
====================
C:\Users\Claudia\pb-setup-5.5.0900.exe


Some content of TEMP:
====================
C:\Users\Claudia\AppData\Local\Temp\amazonicon_fwde.exe
C:\Users\Claudia\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpb1qg2a.dll
C:\Users\Claudia\AppData\Local\Temp\Nero_MediaHome-15.0.04100_free.exe
C:\Users\Claudia\AppData\Local\Temp\protegere6_ff_ie_fwde.exe
C:\Users\Claudia\AppData\Local\Temp\sdanircmdc.exe
C:\Users\Claudia\AppData\Local\Temp\sdapskill.exe
C:\Users\Claudia\AppData\Local\Temp\sdaspwn.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-08-27 23:05

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 31-08-2014 02
Ran by Claudia at 2014-09-01 20:38:44
Running from C:\Users\Claudia\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: ESET Smart Security 7.0 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET Smart Security 7.0 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
FW: ESET Personal firewall (Enabled) {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKCU\...\uTorrent) (Version: 3.3.2.30488 - BitTorrent Inc.)
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
2007 Microsoft Office Suite Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
2007 Microsoft Office system (HKLM-x32\...\PROHYBRIDR) (Version: 12.0.6612.1000 - Microsoft Corporation)
64 Bit HP CIO Components Installer (Version: 8.2.4 - Hewlett-Packard) Hidden
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Acrobat X Pro - English, Français, Deutsch (HKLM-x32\...\{AC76BA86-1033-F400-7760-000000000005}) (Version: 10.1.2 - Adobe Systems)
Adobe Flash Player 14 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 14.0.0.176 - Adobe Systems Incorporated)
Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
Allway Sync version 14.0.1 (HKLM-x32\...\Allway Sync_is1) (Version:  - Botkind Inc)
AMD Accelerated Video Transcoding (Version: 12.10.100.30717 - Advanced Micro Devices, Inc.) Hidden
AMD APP SDK Runtime (Version: 10.0.1124.2 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Install Manager (HKLM\...\{C49F01A6-1151-BE59-8BD2-107CD8AC3088}) (Version: 8.0.911.0 - Advanced Micro Devices, Inc.)
ArcGIS 10.1 for Desktop - Sprachpaket Deutsch (HKLM-x32\...\ArcGIS 10.1 for Desktop - Sprachpaket Deutsch) (Version: 10.1.3035 - Environmental Systems Research Institute, Inc.)
ArcGIS 10.1 for Desktop - Sprachpaket Deutsch (x32 Version: 10.1.3035 - Environmental Systems Research Institute, Inc.) Hidden
ArcGIS 10.2.1 for Desktop (HKLM-x32\...\ArcGIS 10.2.1 for Desktop) (Version: 10.2.3497 - Environmental Systems Research Institute, Inc.)
ArcGIS 10.2.1 for Desktop (x32 Version: 10.2.3497 - Environmental Systems Research Institute, Inc.) Hidden
Ashampoo Burning Studio 2014 v.12.0.5 (HKLM-x32\...\{91B33C97-280F-B76D-E27B-E712D7041B76}_is1) (Version: 12.0.5 - Ashampoo GmbH & Co. KG)
AuthenTec Fingerprint Driver (Version: 1.6.2.0350 - AuthenTec) Hidden
AuthenTec WinBio FingerPrint Software 64-bit (Version: 3.4.2.1016 - AuthenTec, Inc.) Hidden
bob internet (HKLM-x32\...\bob internet) (Version: 1.17.0.0 - A1 Telekom Austria AG)
bob internet (x32 Version: 1.17.0.0 - A1 Telekom Austria AG) Hidden
bob internet zugangssoftware (HKLM-x32\...\bob internet zugangssoftware) (Version:  - mobilkom austria AG)
bob internet zugangssoftware (x32 Version: 1.1.0.13 - mobilkom austria AG) Hidden
Canon CanoScan Toolbox 5.0 (HKLM-x32\...\CanoScan Toolbox 5.0) (Version:  - )
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center (x32 Version: 2013.0717.624.9597 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2013.0717.624.9597 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2013.0717.624.9597 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Profiles Mobile (x32 Version: 2013.0717.624.9597 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2013.0717.0623.9597 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2013.0717.0623.9597 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2013.0717.0623.9597 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2013.0717.0623.9597 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2013.0717.0623.9597 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2013.0717.0623.9597 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2013.0717.0623.9597 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2013.0717.0623.9597 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2013.0717.0623.9597 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2013.0717.0623.9597 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2013.0717.0623.9597 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2013.0717.0623.9597 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2013.0717.0623.9597 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2013.0717.0623.9597 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2013.0717.0623.9597 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2013.0717.0623.9597 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2013.0717.624.9597 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.15 - Piriform)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.4.5000 - CDBurnerXP)
Cliqz (HKLM-x32\...\{5A0C0737-6AFE-4DC6-A8B4-6DFE509ACD75}_is1) (Version: 0.5.0.1 - Cliqz.com)
CmgMasterPrerequisites (x32 Version: 1.2.1.419 - Credant Technologies Inc.) Hidden
Compatibility Pack für 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dell Backup and Recovery - Support Software (HKLM-x32\...\{A9668246-FB70-4103-A1E3-66C9BC2EFB49}) (Version: 1.6.2.4 - Dell Inc.)
Dell Backup and Recovery (HKLM-x32\...\{0ED7EE95-6A97-47AA-AD73-152C08A15B04}) (Version: 1.6.2.4 - Dell Inc.)
Dell Client System Update (HKLM-x32\...\{04566294-A6B6-4462-9721-031073EB3694}) (Version: 1.3.0 - Dell Inc.)
Dell Custom Help (Version: 15.06.1000.0142 - Intel Corporation) Hidden
Dell Data Protection | Client Security Framework (HKLM\...\{CF5E8D60-A1FD-4BF2-9EDD-EA8C05F784A9}) (Version: 8.2.1.1311 - Dell)
Dell Data Protection | Security Tools (HKLM-x32\...\InstallShield_{AA2AFD30-F80C-401C-9B85-03A05A2F7EFD}) (Version: 1.2.1.419 - Dell)
Dell Data Protection | Security Tools (x32 Version: 1.2.1.419 - Dell) Hidden
Dell Digital Delivery (HKLM-x32\...\{98CB551E-EDB1-4535-82A6-E3258597F64E}) (Version: 2.7.1000.0 - Dell Products, LP)
Dell Edoc Viewer (HKLM\...\{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}) (Version: 1.0.0 - Dell Inc)
Dell Power Manager (HKLM\...\{E45D7941-F3F0-4E8E-AD55-DCE2FE0AE6D8}) (Version: 1.1.0 - Dell Inc.)
Dell Protected Workspace (HKLM-x32\...\{E2CAA395-66B3-4772-85E3-6134DBAB244E}) (Version: 2.3.15835 - Invincea, Inc.)
Dell Touchpad (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 8.1200.101.134 - ALPS ELECTRIC CO., LTD.)
Dell Webcam Central (HKLM-x32\...\Dell Webcam Central) (Version: 1.40.54 - Creative Technology Ltd)
DigitalPersona TouchChip Driver (Version: 1.6.3.379 - DigitalPersona, Inc.) Hidden
Dropbox (HKCU\...\Dropbox) (Version: 2.10.28 - Dropbox, Inc.)
ESET Smart Security (HKLM\...\{F7C525E7-659A-47F6-A25A-7A63FA10E767}) (Version: 7.0.302.26 - ESET, spol s r. o.)
FileZilla Client 3.7.4 (HKLM-x32\...\FileZilla Client) (Version: 3.7.4 - Tim Kosse)
Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Foxy Secure (HKLM-x32\...\Foxy Secure) (Version: 6 - )
Galerie de photos (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 36.0.1985.143 - Google Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
Google+ Auto Backup (HKLM-x32\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google)
InfraRecorder (HKLM-x32\...\InfraRecorder) (Version:  - Christian Kindahl)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1011 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.14.1724 - Intel Corporation)
Intel(R) Network Connections 18.5.52.1 (HKLM\...\PROSetDX) (Version: 18.5.52.1 - Intel)
Intel(R) Network Connections 18.5.52.1 (Version: 18.5.52.1 - Intel) Hidden
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{DA2600C1-6BDF-4FD1-1212-148929CC1385}) (Version: 2.6.1212.0302 - Intel Corporation)
Intel(R) PROSet/Wireless WiFi Software Driver (Version: 15.06.1000.0167 - Intel Corporation) Hidden
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.2.1000 - Intel Corporation)
Intel(R) Rapid Storage Technology (Version: 12.8.2.1000 - Intel Corporation) Hidden
Intel(R) Update Manager (HKLM-x32\...\{12914061-EB9B-4AE7-AC7E-0B8A607C7DF4}) (Version: 2.3.1338 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.0.0.102 - Intel Corporation)
Intel(R) WiDi (HKLM\...\{62E7C369-64FF-452C-8F46-6BE9B77FF097}) (Version: 4.0.18.0 - Intel Corporation)
Intel(R) Wireless Display (HKLM\...\{28EF7372-9087-4AC3-9B9F-D9751FCDF830}) (Version:  - )
Intel® PROSet/Wireless Software (HKLM-x32\...\{fae8de85-97ab-4053-a8bb-03bfc86ac533}) (Version: 15.6.1 - Intel Corporation)
Intel® PROSet/Wireless WiFi Software (Version: 15.06.1000.0142 - Intel Corporation) Hidden
Intel® Trusted Connect Service Client (Version: 1.28.487.1 - Intel Corporation) Hidden
Ipswitch WS_FTP 12 (HKLM-x32\...\{AD88355B-A4E0-4DA1-BAC3-EA4FEA930691}) (Version: 12.3 - Ipswitch)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.37 - Irfan Skiljan)
Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.550 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Java(TM) 7 Update 1 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417001FF}) (Version: 7.0.10 - Oracle)
Junk Mail filter update (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Hybrid 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 x64 ENU (HKLM\...\{8424B163-D1E0-48B7-88A2-C7A61767B3D7}) (Version: 4.0.8482.1 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mobile Partner (HKLM-x32\...\Mobile Partner) (Version: 1.0 - Huawei Technologies Co.,Ltd)
Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
MozBackup 1.5.1 (HKLM-x32\...\MozBackup) (Version:  - Pavel Cvrcek)
Mozilla Firefox 31.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 31.0 (x86 de)) (Version: 31.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
Mozilla Thunderbird 24.6.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 24.6.0 (x86 de)) (Version: 24.6.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
My Dell (HKLM\...\PC-Doctor for Windows) (Version: 3.5.6426.22 - PC-Doctor, Inc.)
MyFreeCodec (HKCU\...\MyFreeCodec) (Version:  - )
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.5.3 - Notepad++ Team)
O2Micro OZ776 SCR Driver (x32 Version: 1.1.4.223 - O2Micro International LTD.) Hidden
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
Personal Backup 5.5 (HKLM-x32\...\Personal Backup 5_is1) (Version: 5.3 - J. Rathlev)
Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
PowerXpressHybrid (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden
Realtek Audio COM Components (HKLM-x32\...\{2355B503-9B11-4449-861D-1C1748B26320}) (Version: 1.0.2 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5988 - Realtek Semiconductor Corp.)
Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.2.14014_6 - Samsung Electronics Co., Ltd.)
Samsung Kies (x32 Version: 2.6.2.14014_6 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.45.0 - SAMSUNG Electronics Co., Ltd.)
Security Innovation TSS (Version: 2.1.42 - Security Innovation) Hidden
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Skype™ 6.18 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.18.106 - Skype Technologies S.A.)
ST Microelectronics 3 Axis Digital Accelerometer Solution (HKLM-x32\...\{9C24F411-9CA7-4A8A-91F3-F08A4A38EB31}) (Version: 4.10.0046 - ST Microelectronics)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.26297 - TeamViewer)
TreeSize Free V3.1 (HKLM-x32\...\TreeSize Free_is1) (Version: 3.1 - JAM Software)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_PROHYBRIDR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_PROHYBRIDR_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM-x32\...\{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2883097) 32-Bit Edition (HKLM-x32\...\{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{B2260BC9-D561-46EE-B33D-739CF760A2A9}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_PROHYBRIDR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_PROHYBRIDR_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_PROHYBRIDR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_PROHYBRIDR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
Validity WBF DDK 495 (HKLM\...\{F622E82E-AFFA-4784-A08F-74311F5716CA}) (Version: 4.5.238.0 - Validity Sensors, Inc.)
VC_CRT_x64 (Version: 1.02.0000 - Intel Corporation) Hidden
Windows Live (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Family Safety (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
WinZip 18.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240DF}) (Version: 18.0.10661 - WinZip Computing, S.L. )

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-394462837-1285216601-3550877629-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Claudia\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-394462837-1285216601-3550877629-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Claudia\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-394462837-1285216601-3550877629-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Claudia\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-394462837-1285216601-3550877629-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Claudia\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-394462837-1285216601-3550877629-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Claudia\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-394462837-1285216601-3550877629-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Claudia\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-394462837-1285216601-3550877629-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Claudia\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-394462837-1285216601-3550877629-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Claudia\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-394462837-1285216601-3550877629-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Claudia\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

==================== Restore Points  =========================

27-08-2014 16:38:02 Windows Modules Installer
29-08-2014 07:29:30 Windows Update
29-08-2014 12:36:57 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2014-02-09 14:15 - 00001805 ___RA C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 3dns.adobe.com 3dns-1.adobe.com 3dns-2.adobe.com 3dns-3.adobe.com 3dns-4.adobe.com activate.adobe.com activate-sea.adobe.com activate-sjc0.adobe.com activate.wip.adobe.com
127.0.0.1 activate.wip1.adobe.com activate.wip2.adobe.com activate.wip3.adobe.com activate.wip4.adobe.com adobe-dns.adobe.com adobe-dns-1.adobe.com adobe-dns-2.adobe.com adobe-dns-3.adobe.com adobe-dns-4.adobe.com
127.0.0.1 adobeereg.com practivate.adobe practivate.adobe.com practivate.adobe.newoa practivate.adobe.ntp practivate.adobe.ipp ereg.adobe.com ereg.wip.adobe.com ereg.wip1.adobe.com
127.0.0.1 ereg.wip2.adobe.com ereg.wip3.adobe.com ereg.wip4.adobe.com hl2rcv.adobe.com wip.adobe.com wip1.adobe.com wip2.adobe.com wip3.adobe.com wip4.adobe.com
127.0.0.1 www.adobeereg.com wwis-dubc1-vip60.adobe.com www.wip.adobe.com www.wip1.adobe.com
127.0.0.1 www.wip2.adobe.com www.wip3.adobe.com www.wip4.adobe.com wwis-dubc1-vip60.adobe.com crl.verisign.net CRL.VERISIGN.NET ood.opsource.net


==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {03BF2336-5E99-4C53-AE9A-8E81595FE954} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {0A7AC804-A3CC-4E58-BE90-00487F81B9A7} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\My Dell\uaclauncher.exe [2014-01-31] (PC-Doctor, Inc.)
Task: {26608C91-1BCE-4764-AE06-05E7E8872876} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\My Dell\sessionchecker.exe [2014-01-31] (PC-Doctor, Inc.)
Task: {5DA12B9D-9863-46C7-B059-9BDB71D2E717} - System32\Tasks\SystemToolsDailyTest => uaclauncher.exe
Task: {896186C5-90FD-491F-9EAC-575105742DDE} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-02-28] ()
Task: {9FB57D52-FE23-4137-B494-596E3737F7E5} - System32\Tasks\GoogleUpdateTaskMachineCore1cf8da4e80eab57 => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-01-15] (Google Inc.)
Task: {E0FD246E-88F3-45F7-BD0F-269F2ED3EF7F} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-06-24] (Piriform Ltd)
Task: {F7CFFDAB-12DE-4693-B581-0F4185AF43FE} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-02-28] ()
Task: {F8889184-2D76-46F4-874B-67798FA905E5} - System32\Tasks\GoogleUpdateTaskMachineUA1cf8da4e8303d1a => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-01-15] (Google Inc.)
Task: {FFF5F912-9376-4B4F-A851-06F47A89EF92} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-08-19] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf8da4e80eab57.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cf8da4e8303d1a.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-12-17 23:42 - 2013-12-17 23:42 - 00026464 _____ () C:\Program Files\Dell\Dell Data Protection\Client Security Framework\Dell.SecurityManager.Loader.exe
2013-12-17 23:42 - 2013-12-17 23:42 - 02162016 _____ () C:\Program Files\Dell\Dell Data Protection\Client Security Framework\Dell.SecurityManager.Resources.dll
2013-12-17 23:42 - 2013-12-17 23:42 - 00025440 _____ () C:\Program Files\Dell\Dell Data Protection\Client Security Framework\Dell.SecurityManager.Interfaces.dll
2013-12-17 23:42 - 2013-12-17 23:42 - 00081760 _____ () C:\Program Files\Dell\Dell Data Protection\Client Security Framework\Dell.SecurityManager.Objects.dll
2013-12-17 23:42 - 2013-12-17 23:42 - 02047840 _____ () C:\Program Files\Dell\Dell Data Protection\Client Security Framework\de\Dell.SecurityManager.Resources.resources.dll
2013-12-17 23:42 - 2013-12-17 23:42 - 00061280 _____ () C:\Program Files\Dell\Dell Data Protection\Client Security Framework\Dell.SecurityManager.Agent.Plugins.AuthProxy.dll
2013-12-17 23:42 - 2013-12-17 23:42 - 00066912 _____ () C:\Program Files\Dell\Dell Data Protection\Client Security Framework\Dell.SecurityManager.Agent.Plugins.PBA.dll
2013-12-17 23:42 - 2013-12-17 23:42 - 00019296 _____ () C:\Program Files\Dell\Dell Data Protection\Client Security Framework\de\Dell.SecurityManager.Agent.Plugins.PBA.resources.dll
2013-12-17 23:42 - 2013-12-17 23:42 - 00034656 _____ () C:\Program Files\Dell\Dell Data Protection\Client Security Framework\Dell.SecurityManager.Agent.Plugins.SED.dll
2013-12-17 23:42 - 2013-12-17 23:42 - 00016736 _____ () C:\Program Files\Dell\Dell Data Protection\Client Security Framework\de\Dell.SecurityManager.Agent.Plugins.SED.resources.dll
2013-12-17 23:42 - 2013-12-17 23:42 - 00130400 _____ () C:\Program Files\Dell\Dell Data Protection\Client Security Framework\CredSEDProxy.dll
2013-12-17 23:42 - 2013-12-17 23:42 - 00635232 _____ () C:\Program Files\Dell\Dell Data Protection\Client Security Framework\CredCommon.dll
2013-12-17 23:42 - 2013-12-17 23:42 - 00862048 _____ () C:\Program Files\Dell\Dell Data Protection\Client Security Framework\CryptoProvider.dll
2013-12-17 23:42 - 2013-12-17 23:42 - 00700768 _____ () C:\Program Files\Dell\Dell Data Protection\Client Security Framework\DBManager.dll
2013-12-17 23:42 - 2013-12-17 23:42 - 00360800 _____ () C:\Program Files\Dell\Dell Data Protection\Client Security Framework\OPALProvider.dll
2013-12-17 23:42 - 2013-12-17 23:42 - 01483104 _____ () C:\Program Files\Dell\Dell Data Protection\Client Security Framework\ConnectionProvider.dll
2010-01-02 16:42 - 2010-01-02 16:42 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2013-12-17 23:42 - 2013-12-17 23:42 - 00230752 _____ () C:\Program Files\Dell\Dell Data Protection\Client Security Framework\Dell.SecurityManager.SystrayApp.exe
2013-12-17 23:42 - 2013-12-17 23:42 - 00352096 _____ () C:\Program Files\Dell\Dell Data Protection\Client Security Framework\Dell.SecurityManager.UXLib.dll
2013-12-16 08:56 - 2013-11-22 01:22 - 00484880 _____ () C:\Program Files (x86)\Dell Backup and Recovery\Components\Shell\DBRCrawler.exe
2014-01-23 17:08 - 2011-09-28 10:44 - 01887232 _____ () C:\Windows\system32\spool\DRIVERS\x64\3\hpmsn117.DLL
2014-09-01 18:22 - 2014-09-01 18:22 - 00043008 _____ () c:\users\claudia\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpb1qg2a.dll
2013-08-23 21:01 - 2013-08-23 21:01 - 25100288 _____ () C:\Users\Claudia\AppData\Roaming\Dropbox\bin\libcef.dll
2014-02-09 22:22 - 2014-02-09 22:22 - 00093696 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
2013-08-07 16:27 - 2013-08-07 16:27 - 00110088 _____ () c:\Program Files (x86)\Dell Digital Delivery\ServiceTagPlusPlus.dll
2013-12-16 08:27 - 2013-09-12 23:55 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2013-12-20 23:32 - 2013-11-21 23:00 - 01904928 _____ () C:\Program Files (x86)\Dell Backup and Recovery\Components\Restore\STRestoreAPI.dll
2013-12-16 08:56 - 2012-11-26 01:20 - 01153384 _____ () C:\Program Files (x86)\Dell Backup and Recovery\Components\Restore\libxml2.dll
2013-12-16 08:56 - 2012-11-26 01:20 - 00117608 _____ () C:\Program Files (x86)\Dell Backup and Recovery\Components\Restore\zlib1.dll
2014-02-09 14:23 - 2014-02-09 14:23 - 10507264 _____ () C:\Users\Claudia\AppData\Local\Adobe\Acrobat\10.0\Cache\AcLang_exlang32.deu
2012-01-03 15:10 - 2012-01-03 15:10 - 00249232 _____ () C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\sqlite.dll
2014-02-10 10:48 - 2014-02-10 10:48 - 00100352 _____ () C:\Users\Claudia\AppData\Local\Adobe\Acrobat\10.0\Cache\AcLang_EScript.DEU
2014-02-10 10:48 - 2014-02-10 10:48 - 02529792 _____ () C:\Users\Claudia\AppData\Local\Adobe\Acrobat\10.0\Cache\AcLang_Annots.DEU
2014-08-03 13:36 - 2014-08-03 13:36 - 03800688 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Windows\SysWOW64\MSIHANDLE:3204
AlternateDataStreams: C:\Windows\SysWOW64\MSIHANDLE:3257
AlternateDataStreams: C:\Windows\SysWOW64\MSIHANDLE:3358

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^Users^Claudia^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup
MSCONFIG\startupreg: Acrobat Assistant 8.0 => "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe"
MSCONFIG\startupreg: Adobe Acrobat Speed Launcher => "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe"
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: StartCCC => "c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (09/01/2014 07:51:24 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/01/2014 07:49:35 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe_ProfSvc, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc3c1
Name des fehlerhaften Moduls: msvcrt.dll, Version: 7.0.7601.17744, Zeitstempel: 0x4eeb033f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000000123d
ID des fehlerhaften Prozesses: 0x41c
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe_ProfSvc0
Pfad der fehlerhaften Anwendung: svchost.exe_ProfSvc1
Pfad des fehlerhaften Moduls: svchost.exe_ProfSvc2
Berichtskennung: svchost.exe_ProfSvc3

Error: (09/01/2014 07:22:48 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: WerFault.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc2d9
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0003b5f0
ID des fehlerhaften Prozesses: 0x4e0
Startzeit der fehlerhaften Anwendung: 0xWerFault.exe0
Pfad der fehlerhaften Anwendung: WerFault.exe1
Pfad des fehlerhaften Moduls: WerFault.exe2
Berichtskennung: WerFault.exe3

Error: (09/01/2014 07:22:43 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 31.0.0.5310, Zeitstempel: 0x53c75e91
Name des fehlerhaften Moduls: mozalloc.dll, Version: 31.0.0.5310, Zeitstempel: 0x53c72e91
Ausnahmecode: 0x80000003
Fehleroffset: 0x0000141b
ID des fehlerhaften Prozesses: 0x1a00
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3

Error: (09/01/2014 07:01:39 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: TrustedInstaller.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7989b
Name des fehlerhaften Moduls: cbscore.dll, Version: 6.1.7601.17592, Zeitstempel: 0x4da00179
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000c0127
ID des fehlerhaften Prozesses: 0x1820
Startzeit der fehlerhaften Anwendung: 0xTrustedInstaller.exe0
Pfad der fehlerhaften Anwendung: TrustedInstaller.exe1
Pfad des fehlerhaften Moduls: TrustedInstaller.exe2
Berichtskennung: TrustedInstaller.exe3

Error: (09/01/2014 06:22:35 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/01/2014 06:20:43 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe_Power, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc3c1
Name des fehlerhaften Moduls: FastProx.dll, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bdefe
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000002c9c
ID des fehlerhaften Prozesses: 0x384
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe_Power0
Pfad der fehlerhaften Anwendung: svchost.exe_Power1
Pfad des fehlerhaften Moduls: svchost.exe_Power2
Berichtskennung: svchost.exe_Power3

Error: (09/01/2014 06:07:05 PM) (Source: Python Service) (EventID: 255) (User: )
Description: Exception : (1053, 'StartService', 'Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.')

Error: (09/01/2014 06:07:04 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: iumsvc.exe, Version: 0.0.0.0, Zeitstempel: 0x5164ab26
Name des fehlerhaften Moduls: python27.dll, Version: 2.7.3150.1013, Zeitstempel: 0x4f84a6c7
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00010015
ID des fehlerhaften Prozesses: 0x12f8
Startzeit der fehlerhaften Anwendung: 0xiumsvc.exe0
Pfad der fehlerhaften Anwendung: iumsvc.exe1
Pfad des fehlerhaften Moduls: iumsvc.exe2
Berichtskennung: iumsvc.exe3

Error: (09/01/2014 06:01:38 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (09/01/2014 07:51:38 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Windows-Verwaltungsinstrumentation" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler: 
%%1056

Error: (09/01/2014 07:51:38 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "IKE- und AuthIP IPsec-Schlüsselerstellungsmodule" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler: 
%%1056

Error: (09/01/2014 07:51:38 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Computerbrowser" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler: 
%%1056

Error: (09/01/2014 07:50:38 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Server" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler: 
%%1056

Error: (09/01/2014 07:49:38 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Update" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/01/2014 07:49:38 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows-Verwaltungsinstrumentation" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/01/2014 07:49:38 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Designs" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/01/2014 07:49:38 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Shellhardwareerkennung" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/01/2014 07:49:38 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benachrichtigungsdienst für Systemereignisse" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/01/2014 07:49:38 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Aufgabenplanung" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.


Microsoft Office Sessions:
=========================

==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5-4300M CPU @ 2.60GHz
Percentage of memory in use: 43%
Total physical RAM: 8097.43 MB
Available physical RAM: 4540.14 MB
Total Pagefile: 16193.05 MB
Available Pagefile: 12516.27 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:116.68 GB) (Free:26.62 GB) NTFS
Drive d: (Volume) (Fixed) (Total:333.37 GB) (Free:70.98 GB) NTFS
Drive f: (INTENSO) (Fixed) (Total:931.28 GB) (Free:681.34 GB) FAT32
Drive g: (MyDrive) (Fixed) (Total:931.51 GB) (Free:865.25 GB) NTFS
Drive y: (RECOVERY) (Fixed) (Total:15.67 GB) (Free:5.86 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: 874D5251)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=0C)

========================================================
Disk: 2 (Size: 931.5 GB) (Disk ID: 54C403CA)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-09-01 21:09:27
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\00000064  rev. 0,00MB
Running: Gmer-19357.exe; Driver: C:\Users\Claudia\AppData\Local\Temp\axliafog.sys


---- Kernel code sections - GMER 2.1 ----

INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 674                                                                                                                                                       fffff800035bf092 6 bytes [00, 00, 80, FA, FF, FF]
INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 681                                                                                                                                                       fffff800035bf099 9 bytes [00, 00, 00, 00, 00, 00, 00, ...]

---- User code sections - GMER 2.1 ----

.text     C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe[1332] C:\Windows\syswow64\kernel32.dll!SetUnhandledExceptionFilter                                                                                                0000000076568791 4 bytes [C2, 04, 00, 00]
.text     C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe[1332] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 69                                                                                                     00000000756d1465 2 bytes [6D, 75]
.text     C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe[1332] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 155                                                                                                    00000000756d14bb 2 bytes [6D, 75]
.text     ...                                                                                                                                                                                                                      * 2
.text     C:\Program Files (x86)\Samsung\Kies\Kies.exe[4624] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                                               00000000756d1465 2 bytes [6D, 75]
.text     C:\Program Files (x86)\Samsung\Kies\Kies.exe[4624] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                                              00000000756d14bb 2 bytes [6D, 75]
.text     ...                                                                                                                                                                                                                      * 2
.text     C:\Users\Claudia\AppData\Roaming\Dropbox\bin\Dropbox.exe[4784] C:\Windows\syswow64\Psapi.dll!GetModuleInformation + 69                                                                                                   00000000756d1465 2 bytes [6D, 75]
.text     C:\Users\Claudia\AppData\Roaming\Dropbox\bin\Dropbox.exe[4784] C:\Windows\syswow64\Psapi.dll!GetModuleInformation + 155                                                                                                  00000000756d14bb 2 bytes [6D, 75]
.text     ...                                                                                                                                                                                                                      * 2
.text     C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe[5020] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                                      00000000756d1465 2 bytes [6D, 75]
.text     C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe[5020] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                                     00000000756d14bb 2 bytes [6D, 75]
.text     ...                                                                                                                                                                                                                      * 2
.text     C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe[6236] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                                        00000000756d1465 2 bytes [6D, 75]
.text     C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe[6236] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                                       00000000756d14bb 2 bytes [6D, 75]
.text     ...                                                                                                                                                                                                                      * 2
.text     c:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe[6420] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                           00000000756d1465 2 bytes [6D, 75]
.text     c:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe[6420] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                          00000000756d14bb 2 bytes [6D, 75]
.text     ...                                                                                                                                                                                                                      * 2
.text     C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe[3044] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                              00000000756d1465 2 bytes [6D, 75]
.text     C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe[3044] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                             00000000756d14bb 2 bytes [6D, 75]
.text     ...                                                                                                                                                                                                                      * 2
.text     C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[5040] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                     00000000756d1465 2 bytes [6D, 75]
.text     C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[5040] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                    00000000756d14bb 2 bytes [6D, 75]
.text     ...                                                                                                                                                                                                                      * 2
.text     C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe[6900] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                             00000000756d1465 2 bytes [6D, 75]
.text     C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe[6900] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                            00000000756d14bb 2 bytes [6D, 75]
.text     ...                                                                                                                                                                                                                      * 2
.text     C:\Program Files (x86)\Dell Backup and Recovery\TOASTER.EXE[2068] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                                00000000756d1465 2 bytes [6D, 75]
.text     C:\Program Files (x86)\Dell Backup and Recovery\TOASTER.EXE[2068] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                               00000000756d14bb 2 bytes [6D, 75]
.text     ...                                                                                                                                                                                                                      * 2
---- Processes - GMER 2.1 ----

Library   C:\Users\Claudia\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll (*** suspicious ***) @ C:\Users\Claudia\AppData\Roaming\Dropbox\bin\Dropbox.exe [4784](2014-08-15 18:46:08)                                                0000000004010000
Library   c:\users\claudia\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpb1qg2a.dll (*** suspicious ***) @ C:\Users\Claudia\AppData\Roaming\Dropbox\bin\Dropbox.exe [4784](2014-09-01 16:22:45)  0000000003f00000
Library   C:\Users\Claudia\AppData\Roaming\Dropbox\bin\libcef.dll (*** suspicious ***) @ C:\Users\Claudia\AppData\Roaming\Dropbox\bin\Dropbox.exe [4784](2013-08-23 19:01:44)                                                      0000000066920000
Library   C:\Users\Claudia\AppData\Roaming\Dropbox\bin\icudt.dll (*** suspicious ***) @ C:\Users\Claudia\AppData\Roaming\Dropbox\bin\Dropbox.exe [4784] (ICU Data DLL/The ICU Project)(2013-08-23 19:01:42)                        0000000065f90000

---- Registry - GMER 2.1 ----

Reg       HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\b4b676a648ab                                                                                                                                              
Reg       HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\b4b676a648ab@e84e843d1dbb                                                                                                                                 0xEF 0x7F 0x7B 0x93 ...
Reg       HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\b4b676a648ab (not active ControlSet)                                                                                                                          
Reg       HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\b4b676a648ab@e84e843d1dbb                                                                                                                                     0xEF 0x7F 0x7B 0x93 ...

---- Disk sectors - GMER 2.1 ----

Disk      \Device\Harddisk0\DR0                                                                                                                                                                                                    sector 0: rootkit-like behavior

---- EOF - GMER 2.1 ----