Hallo,
mir ist aufgefallen, daß der Defender sich nicht starten läßt.
Englisches Win 7 64bit.
Meldung ist "The specified service does not exist as an installed service. (Error Code: 0x80070424).
Läßt sich der Defender z.B. über regsvr32 als Service registrieren?

Danke und Gruß
Nils

Hi,
evtl. ein Malware Problem.
Falls noch nicht vorhanden, lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop

• Starte bitte die
  OTL.exe
  .
  Vista und Win7 User mit Rechtsklick "als Administrator starten"
• Kopiere nun den Inhalt in die
  Textbox.

activex
netsvcs
msconfig
%SYSTEMDRIVE%\*.
%PROGRAMFILES%\*.exe
%LOCALAPPDATA%\*.exe
%systemroot%\*. /mp /s
C:\Windows\system32\*.tsp
/md5start
userinit.exe
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
ws2ifsl.sys
sceclt.dll
ntelogon.dll
winlogon.exe
logevent.dll
user32.DLL
explorer.exe
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
/md5stop
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%USERPROFILE%\*.*
%USERPROFILE%\Local Settings\Temp\*.exe
%USERPROFILE%\Local Settings\Temp\*.dll
%USERPROFILE%\Application Data\*.exe
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems|Windows /rs
CREATERESTOREPOINT
         

• Schliesse bitte nun alle Programme. (Wichtig)
• Klicke nun bitte auf den Quick Scan Button.
• Kopiere
  nun den Inhalt aus OTL.txt und Extra.txt hier in Deinen Thread

OTL EXTRAS Logfile:

OTL Extras logfile created on: 25.03.2013 13:05:35 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Sarah\Desktop
 Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,00 Gb Total Physical Memory | 1,77 Gb Available Physical Memory | 58,82% Memory free
6,01 Gb Paging File | 4,39 Gb Available in Paging File | 73,07% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 465,66 Gb Total Space | 424,95 Gb Free Space | 91,26% Space Free | Partition Type: NTFS
 
Computer Name: SARAH-PC | User Name: Sarah | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
 
[HKEY_USERS\S-1-5-21-1166454095-1526899334-2563939059-1000\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office14\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "C:\Program Files\Microsoft Office\Office14\msohtmed.exe" /p %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
========== Authorized Applications List ==========
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{08A8A180-C869-44BD-947E-F7C082E6E6D6}" = lport=1900 | protocol=17 | dir=in | name=udp 1900 | 
"{0F531F7A-182E-4FB5-9241-67A383244D06}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{107C5521-24DD-4064-8B96-21A6AED2CA2B}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe | 
"{2833CFC5-155F-42E8-9685-B5F6AC715FBD}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{31697308-1BE0-46E1-9F6F-CE96D420781E}" = rport=445 | protocol=6 | dir=out | app=system | 
"{36C8265D-A9C5-4C8B-8CA3-55C01E1BBF83}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe | 
"{3D2DAB4F-B449-4EDB-9CAF-E17854F0F3BF}" = rport=137 | protocol=17 | dir=out | app=system | 
"{53B98FB8-F43B-41E9-A062-4D0838DF83F4}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{56F0D066-5D7F-4852-8C44-796A9770BD03}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{576D15B9-DF92-4F6E-B314-584017724889}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office14\outlook.exe | 
"{58EEE5D6-5EA5-449E-BC2A-9E32B7AC065A}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{5FD2CE8F-7F51-4268-80B7-68602D0B1AD3}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{6CDA7838-976B-4702-909F-40DAC7FB4B50}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 
"{82CEBD4E-3CD3-406B-8CFB-0DCF30CEDA38}" = lport=139 | protocol=6 | dir=in | app=system | 
"{85D1E191-E88A-401E-99AB-9C95290DC7F0}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{8A120D78-770F-4CFD-958B-A56DA54D2CB5}" = rport=10243 | protocol=6 | dir=out | app=system | 
"{8ABD86C8-8049-4F92-AF59-D94CCB968C13}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{905BBA47-8B21-41CE-A857-B336284AD9C8}" = rport=139 | protocol=6 | dir=out | app=system | 
"{964CEB6F-4B58-47BA-9DC1-7AF533FB543D}" = lport=445 | protocol=6 | dir=in | app=system | 
"{9955520B-4EEA-407B-907D-4E62946771CD}" = lport=2869 | protocol=6 | dir=in | name=tcp 2869 | 
"{9D0A9FB4-93A1-4B9B-A312-906BDE7C3FD9}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{9E3243F7-14A3-4C33-8251-6075CAC69FE7}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{A21B09BB-4294-4E8F-A5FB-59F640608060}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe | 
"{BAE4BF83-F866-4275-A7CE-8AB758CE2ACE}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{BB98D8B5-6B5F-4D98-9076-083DB0A0757E}" = lport=10243 | protocol=6 | dir=in | app=system | 
"{C4243F91-8202-4D5F-8A3F-34A0B76F13E8}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{CDDE67F3-BFF6-4CB2-B253-1870E164FE11}" = lport=138 | protocol=17 | dir=in | app=system | 
"{D1EA8F4C-24E7-4EAE-85BC-99A595FCF303}" = rport=138 | protocol=17 | dir=out | app=system | 
"{DA94D692-2ADE-4091-BAE9-AEC3C3B52B30}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{E6F6FAD5-3938-4FF9-871F-5DE81848E0B0}" = lport=137 | protocol=17 | dir=in | app=system | 
"{EDFCA4F5-E256-466B-9E51-057292A5DD48}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe | 
"{FDAC0C14-E39E-45CA-BCF0-70F5FEA19E7A}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{009C6C63-2220-4FCB-8829-F0103A817640}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{02309DA9-E575-42A2-AC04-68863FB624C4}" = protocol=6 | dir=in | app=c:\program files\lenovo\system update\uncserver.exe | 
"{0422C871-E94B-4F94-9EAE-E2CBA0E31FEB}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{0CD90B6B-07B2-4C8B-AD99-E5853E2B1A52}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office14\onenote.exe | 
"{18FABF10-6F30-4C63-9AF2-ACF74D2A98BE}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{1A026639-1239-4EE8-BC4B-029D4F166DED}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 
"{274BD454-97B5-4B29-8228-959298869A28}" = protocol=17 | dir=in | app=c:\program files\lenovo\system update\uncserver.exe | 
"{3DC9788A-2720-4BB2-B29B-6565BBFCBFDB}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{458419F4-4F6B-4807-A7D5-F7CA493E391E}" = protocol=6 | dir=out | app=system | 
"{4ACE24A9-EACE-432F-A3BE-0ABAE6181E5A}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 
"{5375DDF1-BE84-437B-A04E-1F7DD749C22E}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{53E71AB1-39A5-489A-9831-7004C02D1523}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office14\onenote.exe | 
"{598DF111-C37D-4D12-BC97-B0A94196E246}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe | 
"{5F65C016-6D09-41BF-AAC8-F74BA41778FE}" = protocol=17 | dir=in | app=c:\program files\lenovo\system update\uncserver.exe | 
"{67389A41-F225-4A28-8FC6-E3EEEED65653}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{7EFCA164-5D22-4BD5-832E-6D8763AC745A}" = dir=in | app=c:\program files\itunes\itunes.exe | 
"{8FEB191F-38D4-43F6-85D9-7A5017A1794D}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{A1480078-713F-4330-A495-967DF0C1BA8C}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{A9FE9BF2-A9AD-4F64-82A9-4595B5D25E0A}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{B06AAE1D-9E51-4A80-A411-289116B06DBE}" = protocol=6 | dir=in | app=c:\program files\lenovo\system update\uncserver.exe | 
"{B5EA8E5B-29FB-4927-A668-CC30731C614F}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{C6A8D8D1-68FE-4D63-99EF-639619F33938}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{D02443B7-B9DF-43EA-ACFA-2DC772BCA3FD}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 
"{D10EAF23-B783-4E98-A2DD-E2CC0D751C71}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{D75B3BD2-C709-48C7-84DB-127162111645}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{E2450B82-CD17-4333-9501-374F3A8281CC}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{EA0E874C-5EA7-4EE6-BAB1-AC6DFD5C40F8}" = dir=in | app=c:\program files\intel\wifi\bin\pandhcpdns.exe | 
"{F1B35E02-74CB-492E-BDF2-F0486C961483}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{FDECA753-B16C-4918-AFF5-4EA31296BA55}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 
"TCP Query User{D6A31C46-0A0B-4F94-B635-CE4FDB65DE60}C:\users\sarah\appdata\local\akamai\netsession_win.exe" = protocol=6 | dir=in | app=c:\users\sarah\appdata\local\akamai\netsession_win.exe | 
"TCP Query User{E6F549CB-ECB9-4092-8726-6AE52E31B8DE}C:\users\sarah\appdata\local\akamai\netsession_win.exe" = protocol=6 | dir=in | app=c:\users\sarah\appdata\local\akamai\netsession_win.exe | 
"UDP Query User{13EC657A-D745-497F-9427-5CF63E731679}C:\users\sarah\appdata\local\akamai\netsession_win.exe" = protocol=17 | dir=in | app=c:\users\sarah\appdata\local\akamai\netsession_win.exe | 
"UDP Query User{74AA5FB8-FA1B-44A7-87BB-0684E97BBB26}C:\users\sarah\appdata\local\akamai\netsession_win.exe" = protocol=17 | dir=in | app=c:\users\sarah\appdata\local\akamai\netsession_win.exe | 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{240C3DDD-C5E9-4029-9DF7-95650D040CF2}" = Intel(R) USB 3.0 eXtensible Host Controller Driver
"{25C64847-B900-48AD-A164-1B4F9B774650}" = Lenovo System Update
"{268278CF-FB69-4D98-B70E-BFEC1CDCA225}" = iTunes
"{3015F546-6C3E-4E6A-B564-BCDF88C0BA2A}" = Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{45C56AA7-ED1B-4800-A97F-EDDF3F3520B1}" = Apple Application Support
"{46A84694-59EC-48F0-964C-7E76E9F8A2ED}" = ThinkVantage System für aktiven Festplattenschutz
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.1
"{5DDB3393-E08B-447E-925F-6C00B95D0FE7}" = iCloud
"{6D9B9CF3-1E9C-45B6-B41E-5CF568605556}" = SPSS 15.0 für Windows [Auswertung Version]
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{90140000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2010
"{90140000-0015-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2010
"{90140000-0016-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2010
"{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2010
"{90140000-0019-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2010
"{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2010
"{90140000-001B-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2010
"{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{65A2328E-FDFB-4CA3-8582-357EA6825FEA}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{99ACCA38-6DD3-48A8-96AE-A283C9759279}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
"{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{46298F6A-1E7E-4D4A-B5F5-106A4F0E48C6}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2010
"{90140000-001F-0410-0000-0000000FF1CE}_Office14.SingleImage_{C0743197-FFEE-4C19-BAEB-8F7437DC4C8A}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2010
"{90140000-002C-0407-0000-0000000FF1CE}_Office14.SingleImage_{4275FB46-ABDF-4456-876C-17CF64294D9A}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-003D-0000-0000-0000000FF1CE}" = Microsoft Office Single Image 2010
"{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{047B0968-E622-4FAA-9B4B-121FA109EDDE}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2010
"{90140000-006E-0407-0000-0000000FF1CE}_Office14.SingleImage_{98EDFD9F-EA76-40CC-BCE9-92C69413F65B}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2010
"{90140000-00A1-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{9444970A-C09C-4E47-AB6B-C908569E7866}" = AuthenTec TrueSuite
"{95140000-0081-0407-0000-0000000FF1CE}" = Microsoft Office Outlook Connector
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{AC76BA86-7AD7-1031-7B44-AB0000000001}" = Adobe Reader XI (11.0.02) - Deutsch
"{B26438B4-BF51-49C3-9567-7F14A5E40CB9}" = Dolby Home Theater v4
"{E0A7ED39-8CD6-4351-93C3-69CCA00D12B4}" = Integrated Camera
"{E14ADE0E-75F3-4A46-87E5-26692DD626EC}" = Apple Mobile Device Support
"{E97F409F-9E1C-42A0-B72D-765A78DF3696}" = Intel® PROSet/Wireless WiFi-Software
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{F7E7F0CB-AA41-4D5A-B6F2-8E6738EB063F}" = Realtek Ethernet Controller All-In-One Windows Driver
"{FCB3772C-B7D0-4933-B1A9-3707EBACC573}" = Intel(R) OpenCL CPU Runtime
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"DVDVideoSoftTB_DE Toolbar" = DVDVideoSoftTB DE Toolbar
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.11.37.1212
"LenovoAutoScrollUtility" = Lenovo Auto Scroll Utility
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Mozilla Firefox 19.0.2 (x86 de)" = Mozilla Firefox 19.0.2 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"Office14.SingleImage" = Microsoft Office Professional 2010
"Power Management Driver" = Lenovo Power Management Driver
"ProInst" = Intel PROSet Wireless
"SynTPDeinstKey" = ThinkPad UltraNav Driver
"WinRAR archiver" = WinRAR 4.20 (32-Bit)
 
========== HKEY_USERS Uninstall List ==========
 
[HKEY_USERS\S-1-5-21-1166454095-1526899334-2563939059-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Akamai" = Akamai NetSession Interface
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 21.03.2013 11:01:38 | Computer Name = Sarah-PC | Source = Bonjour Service | ID = 100
Description = mDNSCoreReceiveResponse: ProbeCount 2; will deregister    4 Sarah-PC.local.
 Addr 77.80.25.67
 
Error - 21.03.2013 11:01:38 | Computer Name = Sarah-PC | Source = Bonjour Service | ID = 100
Description = Local Hostname Sarah-PC.local already in use; will try Sarah-PC-2.local
 instead
 
Error - 22.03.2013 17:50:04 | Computer Name = Sarah-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second
 
Error - 22.03.2013 17:50:04 | Computer Name = Sarah-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 15584
 
Error - 22.03.2013 17:50:04 | Computer Name = Sarah-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 15584
 
Error - 22.03.2013 23:50:20 | Computer Name = Sarah-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second
 
Error - 22.03.2013 23:50:20 | Computer Name = Sarah-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 21650895
 
Error - 22.03.2013 23:50:20 | Computer Name = Sarah-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 21650895
 
Error - 25.03.2013 07:57:49 | Computer Name = Sarah-PC | Source = Application Hang | ID = 1002
Description = Programm OTL.exe, Version 3.2.69.0 kann nicht mehr unter Windows ausgeführt
 werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung,
 um nach weiteren Informationen zum Problem zu suchen.    Prozess-ID: 1178    Startzeit:
 01ce294e9a79268f    Endzeit: 16    Anwendungspfad: C:\Users\Sarah\Desktop\OTL.exe    Berichts-ID:
   
 
Error - 25.03.2013 08:02:00 | Computer Name = Sarah-PC | Source = Application Hang | ID = 1002
Description = Programm OTL.exe, Version 3.2.69.0 kann nicht mehr unter Windows ausgeführt
 werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung,
 um nach weiteren Informationen zum Problem zu suchen.    Prozess-ID: 1480    Startzeit:
 01ce29500172f4d6    Endzeit: 16    Anwendungspfad: C:\Users\Sarah\Desktop\OTL.exe    Berichts-ID:
   
 
[ Media Center Events ]
Error - 13.02.2013 06:51:30 | Computer Name = Sarah-PC | Source = MCUpdate | ID = 0
Description = 11:51:30 - Directory konnte nicht abgerufen werden (Fehler: Die Verbindung
 mit dem Remoteserver kann nicht hergestellt werden.)  
 
Error - 13.02.2013 06:52:33 | Computer Name = Sarah-PC | Source = MCUpdate | ID = 0
Description = 11:52:12 - MCESpotlight konnte nicht abgerufen werden (Fehler: Die
 Verbindung mit dem Remoteserver kann nicht hergestellt werden.)  
 
Error - 13.02.2013 06:53:16 | Computer Name = Sarah-PC | Source = MCUpdate | ID = 0
Description = 11:52:54 - MCEClientUX konnte nicht abgerufen werden (Fehler: Die 
Verbindung mit dem Remoteserver kann nicht hergestellt werden.)  
 
Error - 13.02.2013 06:53:41 | Computer Name = Sarah-PC | Source = MCUpdate | ID = 0
Description = 11:53:37 - Broadband konnte nicht abgerufen werden (Fehler: Die Verbindung
 mit dem Remoteserver kann nicht hergestellt werden.)  
 
[ System Events ]
Error - 06.03.2013 08:36:57 | Computer Name = Sarah-PC | Source = BROWSER | ID = 8032
Description = 
 
Error - 07.03.2013 06:18:04 | Computer Name = Sarah-PC | Source = Service Control Manager | ID = 7031
Description = Der Dienst "Apple Mobile Device" wurde unerwartet beendet. Dies ist
 bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden
 durchgeführt: Neustart des Diensts.
 
Error - 07.03.2013 06:18:43 | Computer Name = Sarah-PC | Source = Service Control Manager | ID = 7031
Description = Der Dienst "Apple Mobile Device" wurde unerwartet beendet. Dies ist
 bereits 2 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden
 durchgeführt: Neustart des Diensts.
 
Error - 07.03.2013 06:19:43 | Computer Name = Sarah-PC | Source = Service Control Manager | ID = 7032
Description = Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden
 des Dienstes "Apple Mobile Device" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen,
 ist fehlgeschlagen. Fehler:   %%1056
 
Error - 07.03.2013 06:53:52 | Computer Name = Sarah-PC | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
   cdrom
 
Error - 09.03.2013 17:14:11 | Computer Name = Sarah-PC | Source = BROWSER | ID = 8032
Description = 
 
Error - 12.03.2013 06:08:58 | Computer Name = Sarah-PC | Source = ACPI | ID = 327693
Description = : Der eingebettete Controller (EC) hat nicht innerhalb des angegebenen
 Zeitlimits reagiert. Dies deutet auf einen Fehler in der EC-Hardware oder -Firmware
 hin bzw. darauf, dass das BIOS auf falsche Art auf den EC zugreift. Fragen Sie 
den Computerhersteller nach einem aktualisierten BIOS. Dieser Fehler kann in einigen
 Situationen zur Folge haben, dass der Computer fehlerhaft läuft.
 
Error - 15.03.2013 18:14:59 | Computer Name = Sarah-PC | Source = Service Control Manager | ID = 7011
Description = Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung
 von Dienst iphlpsvc erreicht.
 
Error - 16.03.2013 03:20:51 | Computer Name = Sarah-PC | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
   cdrom
 
Error - 22.03.2013 00:11:17 | Computer Name = Sarah-PC | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
   cdrom
 
 
< End of report >
         

--- --- ---