![]() |
|
Log-Analyse und Auswertung: SoftwareUpdater.UI.exeWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #1 |
![]() | ![]() SoftwareUpdater.UI.exe Hallo, habe auch das Problem mit dem Programm SoftwareUpdater.UI.exe und möchte es ebenfalls vom Rechner löschen. Das Ergebnis des Scan mit FRST sende ich Euch zu. Wäre schön wenn es klappt. Gruß wojobi Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-07-2013 Ran by WJB (ATTENTION: The logged in user is not administrator) on 29-07-2013 16:32:36 Running from C:\Users\WJB\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= () C:\Windows\System32\spool\drivers\x64\3\WrtMon.exe (Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe (Microsoft Corporation) C:\Users\WJB\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (FSL - Freesoftland) C:\Program Files\IconRestorer\IconRestorer.exe (Deutsche Telekom AG) C:\Program Files\Netzmanager\netzmanager.exe (Acronis) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe () C:\Windows\System32\spool\drivers\x64\3\WrtProc.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Microsoft Corporation) C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE (Microsoft Corporation) C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [WrtMon.exe] - C:\Windows\system32\spool\drivers\x64\3\WrtMon.exe [20480 2006-09-20] () HKLM\...\Run: [Acronis Scheduler2 Service] - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [362032 2009-11-12] (Acronis) HKCU\...\Run: [SkyDrive] - C:\Users\WJB\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [257136 2013-07-02] (Microsoft Corporation) HKLM-x32\...\Run: [TrueImageMonitor.exe] - C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [5140960 2009-11-12] (Acronis) HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [345144 2013-06-25] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642656 2013-03-28] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [BtTray] - C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe [374024 2012-10-23] (IVT Corporation) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation) HKLM-x32\...\Run: [JMB36X IDE Setup] - C:\Windows\RaidTool\xInsIDE.exe [43608 2010-09-07] () Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AutorunsDisabled () Startup: C:\Users\W.J.Bitzl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AutorunsDisabled () Startup: C:\Users\W.J.Bitzl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\IconRestorer.lnk ShortcutTarget: IconRestorer.lnk -> C:\Program Files\IconRestorer\IconRestorer.exe (FSL - Freesoftland) Startup: C:\Users\WJB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation) Startup: C:\Users\WJB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AutorunsDisabled () Startup: C:\Users\WJB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\IconRestorer.lnk ShortcutTarget: IconRestorer.lnk -> C:\Program Files\IconRestorer\IconRestorer.exe (FSL - Freesoftland) Startup: C:\Users\WJB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Netzmanager.lnk ShortcutTarget: Netzmanager.lnk -> C:\Program Files\Netzmanager\netzmanager.exe (Deutsche Telekom AG) Startup: C:\Users\WJB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (No File) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.t-online.de/nachrichten/ HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://de.msn.com/?ocid=EIE9HP&PC=UP50 SearchScopes: HKLM-x32 - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2529008 BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) BHO: WOT Helper - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files\WOT\WOT.dll () BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: No Name - {1d8566bd-f06f-4029-a3be-ba80af5a09f3} - No File BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation) BHO-x32: WOT Helper - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files (x86)\WOT\WOT.dll () BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll () Toolbar: HKLM-x32 - No Name - {1d8566bd-f06f-4029-a3be-ba80af5a09f3} - No File Toolbar: HKLM-x32 - WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files (x86)\WOT\WOT.dll () Toolbar: HKCU - No Name - {1D8566BD-F06F-4029-A3BE-BA80AF5A09F3} - No File Toolbar: HKCU - WOT - {71576546-354D-41C9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll () DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab Handler: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files\WOT\WOT.dll () Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Windows\SysWOW64\skype4com.dll (Skype Technologies) Handler-x32: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files (x86)\WOT\WOT.dll () Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\WJB\AppData\Roaming\Mozilla\Firefox\Profiles\lidr8wug.default FF Homepage: hxxp://www.t-online.de/ FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll () FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.) FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.) FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.) FF Extension: hacktheweb - C:\Users\WJB\AppData\Roaming\Mozilla\Firefox\Profiles\lidr8wug.default\Extensions\hacktheweb@instantfox.com.xpi FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} Chrome: ======= CHR HomePage: hxxp://www.google.com/ CHR RestoreOnStartup: "hxxp://www.google.com/" CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding} CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms} CHR Extension: (YouTube) - C:\Users\WJB\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0 CHR Extension: (Google Search) - C:\Users\WJB\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0 CHR Extension: (Gmail) - C:\Users\WJB\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0 ==================== Services (Whitelisted) ================= R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe [371768 2013-06-25] (Avira Operations GmbH & Co. KG) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-06-25] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-06-25] (Avira Operations GmbH & Co. KG) R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [589368 2013-06-25] (Avira Operations GmbH & Co. KG) R2 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173192 2013-06-20] (Microsoft Corp.) R2 BlueSoleilCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe [1616136 2012-11-20] (IVT Corporation) R2 Bluetooth Low Energy Service; C:\Program Files\Motorola\Bluetooth\LEsrv.exe [591920 2011-07-20] (Motorola Solutions, Inc.) R3 BsHelpCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe [146184 2012-10-23] (IVT Corporation) R2 lmhosts; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) R2 Netzmanager Service; C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2635776 2012-07-20] (Deutsche Telekom AG) R2 NlaSvc; C:\Windows\System32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) R2 nsi; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) R2 OfficeSvc; C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [1900728 2013-06-09] (Microsoft Corporation) S3 SystemExplorerHelpService; C:\Program Files (x86)\System Explorer\service\SystemExplorerService64.exe [821720 2012-08-21] (Mister Group) S2 SystemStoreService; C:\Program Files\SoftwareUpdater\SystemStore.exe [296448 2013-07-29] () ==================== Drivers (Whitelisted) ==================== R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-03-25] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130016 2013-03-25] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-25] (Avira Operations GmbH & Co. KG) R3 BtAudioBusSrv; C:\Windows\System32\Drivers\BtAudioBus.sys [22536 2011-07-01] (IVT Corporation) R3 BthL2caScoIfSrv; C:\Windows\System32\Drivers\BtL2caScoIf.sys [56904 2012-07-19] (Ralink Corporation) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-02-22] (DT Soft Ltd) R3 MTSBDA; C:\Windows\System32\Drivers\MtsBda.sys [344592 2009-07-13] (TechniSat Provide) R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] () R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-08-10] (Corel Corporation) R0 sptd; C:\Windows\System32\Drivers\sptd.sys [530488 2013-02-23] () R0 tdrpman258; C:\Windows\System32\DRIVERS\tdrpm258.sys [1477728 2013-02-25] (Acronis) R3 TelekomNM6; C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [45664 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH) S1 grbcjvcr; \??\C:\Windows\system32\drivers\grbcjvcr.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-07-29 16:32 - 2013-07-29 16:32 - 00000000 ____D C:\FRST 2013-07-29 16:32 - 2013-07-29 13:18 - 01780547 _____ (Farbar) C:\Users\WJB\Desktop\FRST64.exe 2013-07-24 16:40 - 2013-07-24 16:40 - 00263592 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2013-07-24 16:40 - 2013-07-24 16:40 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2013-07-24 16:40 - 2013-07-24 16:40 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2013-07-24 16:40 - 2013-07-24 16:40 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2013-07-24 16:36 - 2013-07-24 16:36 - 01093032 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll 2013-07-24 16:36 - 2013-07-24 16:36 - 00972712 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll 2013-07-24 16:36 - 2013-07-24 16:36 - 00312232 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2013-07-24 16:36 - 2013-07-24 16:36 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2013-07-24 16:36 - 2013-07-24 16:36 - 00188840 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2013-07-24 16:36 - 2013-07-24 16:36 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll 2013-07-24 16:36 - 2013-07-24 16:36 - 00000000 ____D C:\Program Files\Java 2013-07-24 15:36 - 2013-05-10 07:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll 2013-07-24 15:36 - 2013-05-10 05:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll 2013-07-24 15:36 - 2013-04-17 09:02 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2013-07-24 15:36 - 2013-04-17 08:24 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2013-07-24 15:36 - 2013-03-19 07:53 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll 2013-07-24 15:36 - 2013-03-19 07:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll 2013-07-24 15:35 - 2013-04-26 01:30 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll 2013-07-24 15:35 - 2013-04-01 00:52 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll 2013-07-24 15:35 - 2013-01-24 08:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys 2013-07-24 15:28 - 2013-07-24 15:29 - 00000000 ____D C:\Windows\system32\MRT 2013-07-15 17:16 - 2013-07-25 11:10 - 00000000 ____D C:\Program Files\Google 2013-07-15 17:16 - 2013-07-15 17:16 - 00000000 ____D C:\Users\WJB\AppData\Local\Google 2013-07-15 17:15 - 2013-07-25 11:10 - 00000000 ____D C:\Program Files (x86)\Google 2013-07-15 17:15 - 2013-07-24 16:13 - 00000000 ____D C:\Users\W.J.Bitzl\AppData\Local\Google 2013-07-15 17:13 - 2013-07-15 17:13 - 00000000 ____D C:\Users\W.J.Bitzl\AppData\Local\Adobe 2013-07-12 21:51 - 2013-06-12 01:43 - 14329856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-07-12 21:51 - 2013-06-12 01:43 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-07-12 21:51 - 2013-06-12 01:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-07-12 21:51 - 2013-06-12 01:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-07-12 21:51 - 2013-06-12 01:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-07-12 21:51 - 2013-06-12 01:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-07-12 21:51 - 2013-06-12 01:43 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-07-12 21:51 - 2013-06-12 01:42 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-07-12 21:51 - 2013-06-12 01:42 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-07-12 21:51 - 2013-06-12 01:42 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-07-12 21:51 - 2013-06-12 01:42 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-07-12 21:51 - 2013-06-12 01:42 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-07-12 21:51 - 2013-06-12 01:42 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-07-12 21:51 - 2013-06-12 01:26 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-07-12 21:51 - 2013-06-12 01:26 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-07-12 21:51 - 2013-06-12 01:26 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-07-12 21:51 - 2013-06-12 01:25 - 19238912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-07-12 21:51 - 2013-06-12 01:25 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-07-12 21:51 - 2013-06-12 01:25 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-07-12 21:51 - 2013-06-12 01:25 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-07-12 21:51 - 2013-06-12 01:25 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-07-12 21:51 - 2013-06-12 01:25 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-07-12 21:51 - 2013-06-12 01:25 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-07-12 21:51 - 2013-06-12 01:25 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-07-12 21:51 - 2013-06-12 01:25 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-07-12 21:51 - 2013-06-12 01:25 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-07-12 21:51 - 2013-06-12 01:25 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-07-12 21:51 - 2013-06-12 00:51 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-07-12 21:51 - 2013-06-12 00:50 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-07-12 21:51 - 2013-06-07 05:22 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-07-12 21:51 - 2013-06-07 04:37 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-07-12 21:30 - 2013-06-05 05:34 - 03153920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-07-12 21:30 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2013-07-12 21:30 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2013-07-12 21:30 - 2013-05-06 08:03 - 01887744 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2013-07-12 21:30 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2013-07-12 21:29 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2013-07-12 21:29 - 2013-04-03 00:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2013-07-06 20:00 - 2013-07-06 20:00 - 00001254 _____ C:\Users\Public\Desktop\MailStore Home.lnk 2013-07-06 19:55 - 2013-07-06 19:56 - 00000000 ____D C:\Users\WJB\Documents\MailStore Home 2013-07-06 19:48 - 2013-07-06 20:14 - 00000000 ____D C:\ProgramData\firebird 2013-07-06 19:41 - 2013-07-06 19:41 - 00000000 ____D C:\Program Files (x86)\deepinvent ==================== One Month Modified Files and Folders ======= 2013-07-29 16:32 - 2013-07-29 16:32 - 00000000 ____D C:\FRST 2013-07-29 16:32 - 2009-07-14 19:58 - 00715050 _____ C:\Windows\system32\perfh007.dat 2013-07-29 16:32 - 2009-07-14 19:58 - 00153766 _____ C:\Windows\system32\perfc007.dat 2013-07-29 16:32 - 2009-07-14 07:13 - 01650156 _____ C:\Windows\system32\PerfStringBackup.INI 2013-07-29 16:31 - 2013-05-30 18:30 - 00000000 ____D C:\Program Files\SoftwareUpdater 2013-07-29 16:30 - 2013-06-22 21:01 - 00001262 _____ C:\Users\Public\Desktop\Wise Registry Cleaner.lnk 2013-07-29 16:28 - 2013-06-01 16:12 - 00000000 ___RD C:\Users\WJB\SkyDrive 2013-07-29 16:27 - 2012-10-23 17:34 - 00000816 _____ C:\Windows\SysWOW64\bscs.ini 2013-07-29 16:27 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-07-29 16:27 - 2009-07-14 06:51 - 00067585 _____ C:\Windows\setupact.log 2013-07-29 16:25 - 2013-02-22 16:54 - 02052981 _____ C:\Windows\WindowsUpdate.log 2013-07-29 16:25 - 2009-07-14 06:45 - 00014944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-07-29 16:25 - 2009-07-14 06:45 - 00014944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-07-29 16:19 - 2013-02-27 16:43 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-07-29 13:18 - 2013-07-29 16:32 - 01780547 _____ (Farbar) C:\Users\WJB\Desktop\FRST64.exe 2013-07-29 10:41 - 2013-03-07 17:21 - 00000000 ____D C:\Users\WJB\AppData\Local\Microsoft Help 2013-07-25 11:10 - 2013-07-15 17:16 - 00000000 ____D C:\Program Files\Google 2013-07-25 11:10 - 2013-07-15 17:15 - 00000000 ____D C:\Program Files (x86)\Google 2013-07-25 11:10 - 2013-02-22 17:16 - 00140896 _____ C:\Windows\PFRO.log 2013-07-24 16:40 - 2013-07-24 16:40 - 00263592 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2013-07-24 16:40 - 2013-07-24 16:40 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2013-07-24 16:40 - 2013-07-24 16:40 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2013-07-24 16:40 - 2013-07-24 16:40 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2013-07-24 16:40 - 2013-03-21 16:14 - 00867240 _____ (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll 2013-07-24 16:40 - 2013-03-21 16:14 - 00789416 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll 2013-07-24 16:36 - 2013-07-24 16:36 - 01093032 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll 2013-07-24 16:36 - 2013-07-24 16:36 - 00972712 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll 2013-07-24 16:36 - 2013-07-24 16:36 - 00312232 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2013-07-24 16:36 - 2013-07-24 16:36 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2013-07-24 16:36 - 2013-07-24 16:36 - 00188840 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2013-07-24 16:36 - 2013-07-24 16:36 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll 2013-07-24 16:36 - 2013-07-24 16:36 - 00000000 ____D C:\Program Files\Java 2013-07-24 16:13 - 2013-07-15 17:15 - 00000000 ____D C:\Users\W.J.Bitzl\AppData\Local\Google 2013-07-24 15:39 - 2013-02-22 20:54 - 01627114 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2013-07-24 15:29 - 2013-07-24 15:28 - 00000000 ____D C:\Windows\system32\MRT 2013-07-24 15:27 - 2013-02-22 16:54 - 00000000 ____D C:\Users\W.J.Bitzl 2013-07-15 17:16 - 2013-07-15 17:16 - 00000000 ____D C:\Users\WJB\AppData\Local\Google 2013-07-15 17:16 - 2013-07-15 17:13 - 00000000 ____D C:\Users\W.J.Bitzl\AppData\Local\Adobe 2013-07-15 17:15 - 2013-02-25 13:21 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-07-15 17:15 - 2013-02-25 13:21 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-07-15 17:07 - 2009-07-14 06:45 - 00559608 _____ C:\Windows\system32\FNTCACHE.DAT 2013-07-15 17:06 - 2013-02-22 22:07 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2013-07-15 17:06 - 2013-02-22 22:07 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2013-07-15 17:06 - 2009-07-14 20:18 - 00000000 ____D C:\Program Files\Windows Journal 2013-07-15 17:06 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender 2013-07-15 17:06 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender 2013-07-12 21:55 - 2013-06-03 14:53 - 00000000 ____D C:\Program Files\Microsoft Office 15 2013-07-07 19:56 - 2013-03-08 17:30 - 00000000 ____D C:\Users\WJB\AppData\Roaming\XnView 2013-07-06 20:14 - 2013-07-06 19:48 - 00000000 ____D C:\ProgramData\firebird 2013-07-06 20:00 - 2013-07-06 20:00 - 00001254 _____ C:\Users\Public\Desktop\MailStore Home.lnk 2013-07-06 19:56 - 2013-07-06 19:55 - 00000000 ____D C:\Users\WJB\Documents\MailStore Home 2013-07-06 19:41 - 2013-07-06 19:41 - 00000000 ____D C:\Program Files (x86)\deepinvent ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 28-07-2013 Ran by WJB at 2013-07-29 16:33:44 Running from C:\Users\WJB\Desktop Boot Mode: Normal ========================================================== ==================== Installed Programs ======================= Absolute Uninstaller 2.9.0.722 (x32) Acronis*True*Image*Home (x32 Version: 13.0.6053) Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.94) Adobe Flash Player 11 Plugin (x32 Version: 11.7.700.224) AMD Accelerated Video Transcoding (Version: 12.10.100.30328) AMD APP SDK Runtime (Version: 10.0.1084.4) AMD Catalyst Install Manager (Version: 8.0.911.0) AMD Drag and Drop Transcoding (Version: 2.00.0000) AMD Media Foundation Decoders (Version: 1.0.80328.2204) Anki (x32) Apple Application Support (x32 Version: 2.3.4) Apple Mobile Device Support (Version: 6.1.0.13) Apple Software Update (x32 Version: 2.1.3.127) AquaSoft DiaShow 7 Ultimate (x32 Version: 7.7.11) Ashampoo Burning Studio 2010 Advanced (x32 Version: 9.2.4) Avanquest App'-Anwendungsleiste Toolbar (x32 Version: 6.2.6.0) Avira Antivirus Premium (x32 Version: 13.0.0.3884) BenVista PhotoZoom Pro 4.1.4 (x32 Version: 4.1.4) Bing-Desktop (x32 Version: 1.3.171.0) Bonjour (Version: 3.0.0.10) CadStd (x32 Version: 3.7.3) Canon MP Navigator EX 1.0 (x32) Canon Utilities Solution Menu (x32) Catalyst Control Center - Branding (x32 Version: 1.00.0000) Catalyst Control Center (x32 Version: 2013.0328.2218.38225) Catalyst Control Center Graphics Previews Common (x32 Version: 2013.0328.2218.38225) Catalyst Control Center InstallProxy (x32 Version: 2013.0328.2218.38225) Catalyst Control Center Localization All (x32 Version: 2013.0328.2218.38225) CCC Help Chinese Standard (x32 Version: 2013.0328.2217.38225) CCC Help Chinese Traditional (x32 Version: 2013.0328.2217.38225) CCC Help Czech (x32 Version: 2013.0328.2217.38225) CCC Help Danish (x32 Version: 2013.0328.2217.38225) CCC Help Dutch (x32 Version: 2013.0328.2217.38225) CCC Help English (x32 Version: 2013.0328.2217.38225) CCC Help Finnish (x32 Version: 2013.0328.2217.38225) CCC Help French (x32 Version: 2013.0328.2217.38225) CCC Help German (x32 Version: 2013.0328.2217.38225) CCC Help Greek (x32 Version: 2013.0328.2217.38225) CCC Help Hungarian (x32 Version: 2013.0328.2217.38225) CCC Help Italian (x32 Version: 2013.0328.2217.38225) CCC Help Japanese (x32 Version: 2013.0328.2217.38225) CCC Help Korean (x32 Version: 2013.0328.2217.38225) CCC Help Norwegian (x32 Version: 2013.0328.2217.38225) CCC Help Polish (x32 Version: 2013.0328.2217.38225) CCC Help Portuguese (x32 Version: 2013.0328.2217.38225) CCC Help Russian (x32 Version: 2013.0328.2217.38225) CCC Help Spanish (x32 Version: 2013.0328.2217.38225) CCC Help Swedish (x32 Version: 2013.0328.2217.38225) CCC Help Thai (x32 Version: 2013.0328.2217.38225) CCC Help Turkish (x32 Version: 2013.0328.2217.38225) ccc-utility64 (Version: 2013.0328.2218.38225) CDBurnerXP (x32 Version: 4.5.1.3868) Corel PaintShop Pro X4 (x32 Version: 14.0.0.332) Corel PaintShop Pro X4 (x32 Version: 14.3.0.3) Corel PaintShop Pro X4 Ultimate Bonus Pack (x32 Version: 1.00.0000) Corel PaintShop Pro X4 Ultimate Bonus Pack (x32) D3DX10 (x32 Version: 15.4.2368.0902) DAEMON Tools Lite (x32 Version: 4.46.1.0327) Driver Genius Professional Edition (x32 Version: 10.0) DVBViewer TE2 (x32) DVDStyler v2.4.3 (x32) Firebird SQL Server - MAGIX Edition (x32 Version: 2.1.27.0) Free Driver Scout (Version: 1.0.0.111) Free Driver Scout (x32 Version: 1.0.0.111) ICA (x32 Version: 14.0.0.332) IPM_PSP_COM (x32 Version: 14.0.0.332) iTunes (Version: 11.0.4.4) Java 7 Update 25 (64-bit) (Version: 7.0.250) Java 7 Update 25 (x32 Version: 7.0.250) Java Auto Updater (x32 Version: 2.1.9.5) JMicron JMB36X Driver (x32 Version: 1.17.65.11) Magic Bullet Quick Looks (MAGIX) (x32 Version: 1.0.0) MAGIX 3D Maker (embeded) (x32 Version: 6.0.0.8) MAGIX Screenshare (x32 Version: 4.3.6.1987) MAGIX Speed burnR (MSI) (x32 Version: 7.0.2.6) MAGIX Speed burnR (x32 Version: 6.0.1.4) MAGIX Video deluxe 16 Plus 9.0.0.54 (D) (x32 Version: 9.0.0.54) MAGIX Video deluxe MX Premium (x32 Version: 11.0.0.42) MAGIX Xtreme Foto Designer 6 (x32 Version: 6.0.29.0) MailStore Home 5.0.0.6684 (x32 Version: 5.0.0.6684) MainConcept DTV Decoder Pro (x32 Version: 1.5.0.2) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft .NET Framework 4 Extended (Version: 4.0.30319) Microsoft Application Error Reporting (Version: 12.0.6015.5000) Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003) Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1) Microsoft Office Outlook Connector (x32 Version: 14.0.5118.5000) Microsoft Office Professional Plus 2013 - de-de (Version: 15.0.4517.1005) Microsoft Silverlight (Version: 5.1.20513.0) Microsoft SkyDrive (HKCU Version: 17.0.2011.0627) Microsoft Sync Framework 2.0 Core Components (x64) ENU (Version: 2.0.1578.0) Microsoft Sync Framework 2.0 Provider Services (x64) ENU (Version: 2.0.1578.0) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001) Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) Microsoft WSE 3.0 Runtime (x32 Version: 3.0.5305.0) Mozilla Firefox 22.0 (x86 de) (x32 Version: 22.0) Mozilla Maintenance Service (x32 Version: 22.0) Mozilla Thunderbird 17.0.4 (x86 de) (x32 Version: 17.0.4) MPC-HC 1.6.7.7114 (9eb64ec) (x32 Version: 1.6.7.7114) MSVCRT (x32 Version: 15.4.2862.0708) MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0) MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0) MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0) Netzmanager (Version: 1.071) Netzmanager (x32 Version: 1.071) NewBlueFX Light Blends (x32 Version: 1.4) Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4505.1510) Office 15 Click-to-Run Licensing Component (Version: 15.0.4505.1510) Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4505.1510) orola Bluetooth (Version: 4.0.14.324) PDFCreator (x32 Version: 1.3.2) PDF-Viewer (Version: 2.5.207.0) Presto! PageManager 7.15.16 (x32 Version: 7.15.16) proDAD Adorage 3.0 (x32 Version: 3.0.92) proDAD Vitascene 2.0 (x32 Version: 2.0.113) PSPPContent (x32 Version: 14.0.0.332) PSPPHelp (x32 Version: 14.0.0.332) PSPPro64 (Version: 14.0.0.332) Ralink Bluetooth Stack64 (Version: 9.0.727.3) Realtek Ethernet Controller Driver (x32 Version: 7.72.410.2013) Realtek HDMI Audio Driver for ATI (x32 Version: 6.0.1.6650) ScanSoft OmniPage SE 4 (x32 Version: 15.2.0020) Setup (x32 Version: 14.0.0.332) SyncToy 2.1 (x64) (Version: 2.1.0) System Explorer 3.9.7 (x32) TechniSat DVB-PC TV Star (x32 Version: 1.0.0) TeraCopy 2.27 TinyCAD 2.80.03 (x32 Version: 2.80.03) TMPGEnc MPEG Smart Renderer 4 (x32 Version: 4.1.1.56) Tonido 3.66.0.23160 (x32) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1) Windows Live Communications Platform (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3555.0308) Windows Live ID Sign-in Assistant (Version: 7.250.4232.0) Windows Live Installer (x32 Version: 15.4.3502.0922) Windows Live Language Selector (Version: 15.4.3555.0308) Windows Live PIMT Platform (x32 Version: 15.4.3508.1109) Windows Live SOXE (x32 Version: 15.4.3502.0922) Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922) Windows Live UX Platform (x32 Version: 15.4.3502.0922) Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109) Windows Live Writer (x32 Version: 15.4.3502.0922) Windows Live Writer Resources (x32 Version: 15.4.3502.0922) WinZip 15.0 (x32 Version: 15.0.9411) Wise Registry Cleaner 7.82 (x32 Version: 7.82) WISO Steuer-Sparbuch 2013 (x32 Version: 20.00.8137) WOT for Internet Explorer (Version: 12.8.2.0) XnView 1.99.6 (x32 Version: 1.99.6) ==================== Restore Points ========================= Could not list Restore Points. ==================== Hosts content: ========================== 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => ? ==================== Faulty Device Manager Devices ============= Name: Description: Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (07/29/2013 01:00:29 PM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 9969 Error: (07/29/2013 01:00:29 PM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 9969 Error: (07/29/2013 01:00:29 PM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (07/29/2013 00:18:20 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Error: (07/29/2013 00:17:05 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Error: (07/19/2013 06:38:10 PM) (Source: Application Hang) (User: ) Description: Programm Explorer.EXE, Version 6.1.7601.17567 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: abc Startzeit: 01ce849e2a50ac7e Endzeit: 31 Anwendungspfad: C:\Windows\Explorer.EXE Berichts-ID: 8d68942c-f091-11e2-988b-9988660020a6 Error: (07/17/2013 07:43:05 PM) (Source: Bonjour Service) (User: ) Description: ERROR: handle_resolve_request bad interfaceIndex 24 Error: (07/17/2013 07:43:05 PM) (Source: Bonjour Service) (User: ) Description: ERROR: handle_resolve_request bad interfaceIndex 23 Error: (07/17/2013 07:43:05 PM) (Source: Bonjour Service) (User: ) Description: ERROR: handle_resolve_request bad interfaceIndex 22 Error: (07/17/2013 07:43:05 PM) (Source: Bonjour Service) (User: ) Description: ERROR: handle_resolve_request bad interfaceIndex 21 System errors: ============= Error: (07/29/2013 03:35:43 PM) (Source: Disk) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk9\DR9 gefunden. Error: (07/29/2013 03:35:42 PM) (Source: Disk) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk9\DR9 gefunden. Error: (07/28/2013 01:43:22 PM) (Source: DCOM) (User: ) Description: {14286318-B6CF-49A1-81FC-D74AD94902F9} Error: (07/24/2013 03:49:43 PM) (Source: Ntfs) (User: ) Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar. Führen Sie auf dem Volume "\Device\HarddiskVolumeShadowCopy1" den Befehl "chkdsk" aus. Error: (07/24/2013 03:48:34 PM) (Source: Ntfs) (User: ) Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar. Führen Sie auf dem Volume "\Device\HarddiskVolumeShadowCopy1" den Befehl "chkdsk" aus. Error: (07/24/2013 03:42:44 PM) (Source: DCOM) (User: ) Description: {14286318-B6CF-49A1-81FC-D74AD94902F9} Error: (07/24/2013 03:12:52 PM) (Source: DCOM) (User: ) Description: {14286318-B6CF-49A1-81FC-D74AD94902F9} Error: (07/23/2013 07:37:30 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Windows Presentation Foundation-Schriftartcache 3.0.0.0" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (07/23/2013 07:37:30 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Presentation Foundation-Schriftartcache 3.0.0.0 erreicht. Error: (07/23/2013 07:37:28 PM) (Source: DCOM) (User: ) Description: {14286318-B6CF-49A1-81FC-D74AD94902F9} Microsoft Office Sessions: ========================= Error: (07/29/2013 01:00:29 PM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 9969 Error: (07/29/2013 01:00:29 PM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledEvent 9969 Error: (07/29/2013 01:00:29 PM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (07/29/2013 00:18:20 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestc:\program files (x86)\ralink corporation\ralink bluetooth stack\BsSMSEditor.exe Error: (07/29/2013 00:17:05 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsSMSEditor.exe Error: (07/19/2013 06:38:10 PM) (Source: Application Hang)(User: ) Description: Explorer.EXE6.1.7601.17567abc01ce849e2a50ac7e31C:\Windows\Explorer.EXE8d68942c-f091-11e2-988b-9988660020a6 Error: (07/17/2013 07:43:05 PM) (Source: Bonjour Service)(User: ) Description: ERROR: handle_resolve_request bad interfaceIndex 24 Error: (07/17/2013 07:43:05 PM) (Source: Bonjour Service)(User: ) Description: ERROR: handle_resolve_request bad interfaceIndex 23 Error: (07/17/2013 07:43:05 PM) (Source: Bonjour Service)(User: ) Description: ERROR: handle_resolve_request bad interfaceIndex 22 Error: (07/17/2013 07:43:05 PM) (Source: Bonjour Service)(User: ) Description: ERROR: handle_resolve_request bad interfaceIndex 21 ==================== Memory info =========================== Percentage of memory in use: 28% Total physical RAM: 8183.05 MB Available physical RAM: 5834.18 MB Total Pagefile: 16364.29 MB Available Pagefile: 13596.85 MB Total Virtual: 8192 MB Available Virtual: 8191.82 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:151.71 GB) (Free:64.77 GB) NTFS (Disk=0 Partition=2) Drive d: (Archiv) (Fixed) (Total:313.94 GB) (Free:81.93 GB) NTFS (Disk=0 Partition=3) Drive e: (Work) (Fixed) (Total:345.62 GB) (Free:120.54 GB) NTFS (Disk=1 Partition=1) Drive f: (Backup BS) (Fixed) (Total:120.13 GB) (Free:78.18 GB) NTFS (Disk=1 Partition=2) Drive n: () (Removable) (Total:0.94 GB) (Free:0.94 GB) FAT (Disk=6 Partition=1) Drive p: (Externe Festplatte) (Fixed) (Total:503.05 GB) (Free:465.97 GB) NTFS (Disk=7 Partition=1) Drive q: (Multimediadateien-Sicherung) (Fixed) (Total:894.21 GB) (Free:520.49 GB) NTFS (Disk=7 Partition=2) ==================== MBR & Partition Table ================== ==================== End Of Log ============================ |
Themen zu SoftwareUpdater.UI.exe |
administrator, antivir, antivirus, avg, avira, branding, browser, error, explorer, externe festplatte, farbar, farbar recovery scan tool, fehler, festplatte, flash player, frst.txt, helper, home, homepage, mozilla, plug-in, problem, programm, registry, richtlinie, scan, services.exe, softwareupdater.ui.exe will sich beim start ausführen., svchost.exe, system, tracker, vista, winlogon.exe |