| |
| |||||||
Log-Analyse und Auswertung: SPAM MAILS vom gleichen Provider aber unterschiedlichen Absender Adressen - daher keine Möglichkeit Absender zu sperrenWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
07.08.2013, 17:30
| #1 | ||
| |  SPAM MAILS vom gleichen Provider aber unterschiedlichen Absender Adressen - daher keine Möglichkeit Absender zu sperren Hallo liebe Trojaner-board-Community, seit längerer Zeit erhalte ich immer wieder Spam Emails, welche im Grunde genommen den gleichen Inhalt haben und auch grafisch gleich aufgebaut sind, jedoch von unterschiedlichen skurilen Absendern. Daher komme ich leider nicht weiter, wenn ich diese Mails als Spam über Outlook 2010 markiere. Zwar wird dann temporär die gerade erhaltene Email in den SPAM Ordner verschoben, aber schon kurze Zeit später erhalte ich wieder neue SPAM Mails dieser Art. Alle IP Adressen laufen über den selben Provider. Laut hxxp://www.utrace.de handelt es sich um Hostkey B.v.. Über web.de habe ich die Möglichkeit unter Einstellungen E-Mail/Domains zu sperren. Dort habe ich auch schon hostkey.com eingetragen, aber es scheint nicht zu funktionieren. Es ist so, dass ich wirklich ratlos bin wie ich diese SPAM Mails loswerde. Ich hoffe, dass Ihr mir weiterhelfen könnt. Anbei die Internetkopfzeile der aktuellen SPAM Mail (meine eigene Emailadresse habe ich durch XXX@web.de ersetzt) Zitat:
Zitat:
|
|
07.08.2013, 18:57
| #2 |
| /// the machine /// TB-Ausbilder    |  SPAM MAILS vom gleichen Provider aber unterschiedlichen Absender Adressen - daher keine Möglichkeit Absender zu sperren Hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
07.08.2013, 20:26
| #3 |
| | SPAM MAILS vom gleichen Provider aber unterschiedlichen Absender Adressen - daher keine Möglichkeit Absender zu sperren Hallo Schrauber,
__________________danke für Deine Hilfe schonmal im Vorfeld. Hier die Logfiles FRST.txt: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 07-08-2013 05
Ran by Antonia (administrator) on 07-08-2013 21:22:14
Running from C:\Users\Antonia\Downloads
Microsoft Windows 7 Professional Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MsMpEng.exe
(Teruten) C:\windows\system32\FsUsbExService.Exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
() C:\windows\SYSTEM32\Rezip.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(AlcaTech) C:\Windows\System32\mmrtkrnl.exe
(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
() C:\Program Files\Greenshot\Greenshot.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
(Dropbox, Inc.) C:\Users\Antonia\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\NisSrv.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet Pro 8600\Bin\HPNetworkCommunicator.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [7625248 2009-07-21] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated)
HKLM\...\Run: [SwitchBoard] - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2011-07-05] (Apple Inc.)
HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [947152 2013-01-27] (Microsoft Corporation)
HKLM\...\Run: [Realtime Audio Engine] - "mmrtkrnl.exe" /i [x]
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [HP Software Update] - C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [54576 2009-11-18] (Hewlett-Packard)
HKLM\...\Run: [] - [x]
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKCU\...\Run: [Greenshot] - C:\Program Files\Greenshot\Greenshot.exe [548864 2010-07-12] ()
HKCU\...\Run: [HP Officejet Pro 8600 (NET)] - C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe [1837672 2012-10-17] (Hewlett-Packard Co.)
MountPoints2: {4ef97dfa-cce5-11e1-a7ee-00245437fdf6} - E:\AutoRun.exe
MountPoints2: {4ef97e24-cce5-11e1-a7ee-00245437fdf6} - E:\AutoRun.exe
MountPoints2: {927ce16f-abc6-11df-9d12-00245437fdf6} - E:\Password.exe
MountPoints2: {f29595df-9e5c-11e0-898e-00245437fdf6} - E:\LaunchU3.exe -a
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Users\Antonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Antonia\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Antonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Outlook 2010 (2).lnk
ShortcutTarget: Microsoft Outlook 2010 (2).lnk -> C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=smsn&bmod=smsn
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
SearchScopes: HKLM - DefaultScope value is missing.
BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - No Name - {DFEFCDEE-CF1A-4FC8-88AD-48514E463B27} - No File
Toolbar: HKCU -No Name - {DFEFCDEE-CF1A-4FC8-88AD-48514E463B27} - No File
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
FireFox:
========
FF ProfilePath: C:\Users\Antonia\AppData\Roaming\Mozilla\Firefox\Path=Profiles\ornllial.Antonia_Neu
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\foxsearch.src
FF Extension: No Name - C:\Users\Antonia\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF Extension: Default - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
Chrome:
=======
CHR Extension: (YouTube) - C:\Users\Antonia\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2_0
CHR Extension: (Google Search) - C:\Users\Antonia\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.14_0
CHR Extension: (Gmail) - C:\Users\Antonia\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\6.1.3_0
CHR HKLM\...\Chrome\Extension: [cmnhhbdhmbmddjdhehbidiapelbedljo] - C:\ProgramData\Codecv\cmnhhbdhmbmddjdhehbidiapelbedljo.crx
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx
========================== Services (Whitelisted) =================
S2 KMService; C:\windows\system32\srvany.exe [8192 2011-04-02] ()
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [20456 2013-01-27] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [295232 2013-01-27] (Microsoft Corporation)
R2 Rezip; C:\windows\SYSTEM32\Rezip.exe [311296 2009-03-05] ()
==================== Drivers (Whitelisted) ====================
R3 FsUsbExDisk; C:\windows\system32\FsUsbExDisk.SYS [37344 2013-02-05] ()
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [195296 2013-01-20] (Microsoft Corporation)
S3 NPF; C:\Windows\System32\drivers\NPF.sys [35088 2011-09-22] (CACE Technologies, Inc.)
R1 SABI; C:\windows\system32\Drivers\SABI.sys [10752 2009-05-28] (SAMSUNG ELECTRONICS)
S3 SCREAMINGBDRIVER; C:\Windows\System32\drivers\ScreamingBAudio.sys [34896 2010-07-01] (Screaming Bee LLC)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [721904 2010-08-15] ()
S2 adfs; No ImagePath
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [x]
S3 ew_usbenumfilter; system32\DRIVERS\ew_usbenumfilter.sys [x]
S3 huawei_cdcacm; system32\DRIVERS\ew_jucdcacm.sys [x]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [x]
S3 huawei_ext_ctrl; system32\DRIVERS\ew_juextctrl.sys [x]
S3 huawei_wwanecm; system32\DRIVERS\ew_juwwanecm.sys [x]
S1 mocfkxgv; \??\C:\windows\system32\drivers\mocfkxgv.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-08-07 21:21 - 2013-08-07 21:21 - 00000000 ____D C:\FRST
2013-08-07 21:19 - 2013-08-07 21:21 - 01229788 _____ (Farbar) C:\Users\Antonia\Downloads\FRST.exe
2013-08-03 02:05 - 2013-08-03 02:07 - 00000790 _____ C:\DelFix.txt
2013-07-29 23:56 - 2013-08-03 02:05 - 00000000 ____D C:\windows\ERUNT
2013-07-29 16:47 - 2013-07-29 16:47 - 00000000 ____D C:\Users\Antonia\AppData\Roaming\Malwarebytes
2013-07-29 16:46 - 2013-07-29 16:46 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-07-28 01:36 - 2013-07-28 01:36 - 00000000 ____D C:\Users\Antonia\Qtrax
2013-07-27 02:06 - 2013-07-28 00:45 - 00000060 _____ C:\Users\Antonia\AppData\Roaming\WB.CFG
2013-07-26 00:24 - 2013-07-26 00:24 - 00000000 ____D C:\Users\Antonia\AppData\Roaming\QuickScan
2013-07-11 16:25 - 2013-06-12 01:43 - 02877440 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-07-11 16:25 - 2013-06-12 01:43 - 01767936 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-07-11 16:25 - 2013-06-12 01:43 - 01141248 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-07-11 16:25 - 2013-06-12 01:43 - 00690688 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-07-11 16:25 - 2013-06-12 01:43 - 00493056 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-07-11 16:25 - 2013-06-12 01:43 - 00042496 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-07-11 16:25 - 2013-06-12 01:43 - 00039424 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-07-11 16:25 - 2013-06-12 01:42 - 02046976 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-07-11 16:25 - 2013-06-12 01:42 - 00391168 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-07-11 16:25 - 2013-06-12 01:42 - 00109056 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-07-11 16:25 - 2013-06-12 01:42 - 00061440 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-07-11 16:25 - 2013-06-12 01:42 - 00033280 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-07-11 16:25 - 2013-06-12 00:51 - 00071680 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2013-07-11 16:25 - 2013-06-07 04:37 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-07-11 16:24 - 2013-06-12 01:43 - 14329856 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-07-11 16:24 - 2013-06-12 01:42 - 13760512 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-07-11 03:09 - 2013-06-05 05:05 - 02347520 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2013-07-11 03:09 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll
2013-07-11 03:09 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) C:\windows\system32\WMVDECOD.DLL
2013-07-11 03:09 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\windows\system32\DWrite.dll
==================== One Month Modified Files and Folders =======
2013-08-07 21:21 - 2013-08-07 21:21 - 00000000 ____D C:\FRST
2013-08-07 21:21 - 2013-08-07 21:19 - 01229788 _____ (Farbar) C:\Users\Antonia\Downloads\FRST.exe
2013-08-07 20:53 - 2012-07-17 01:47 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-08-07 20:14 - 2009-08-28 02:32 - 01346365 _____ C:\windows\WindowsUpdate.log
2013-08-07 19:27 - 2009-07-14 04:37 - 00000000 ____D C:\windows\tracing
2013-08-07 18:51 - 2011-01-17 21:34 - 00002016 ____H C:\Users\Antonia\Documents\Default.rdp
2013-08-07 18:39 - 2009-07-14 06:52 - 00000000 ____D C:\windows\system32\FxsTmp
2013-08-07 17:27 - 2009-07-14 06:34 - 00022720 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-07 17:27 - 2009-07-14 06:34 - 00022720 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-07 17:21 - 2011-12-21 03:14 - 00000000 ____D C:\Users\Antonia\AppData\Roaming\Dropbox
2013-08-07 17:20 - 2012-02-20 15:01 - 00000434 _____ C:\windows\system32\Drivers\etc\hosts.ics
2013-08-07 17:20 - 2011-12-21 03:18 - 00000000 ___RD C:\Users\Antonia\Dropbox
2013-08-07 17:19 - 2012-12-26 20:29 - 00016384 _____ C:\windows\system32\Ikeext.etl
2013-08-07 17:18 - 2009-07-14 06:53 - 00000006 ____H C:\windows\Tasks\SA.DAT
2013-08-07 17:18 - 2009-07-14 06:39 - 00117680 _____ C:\windows\setupact.log
2013-08-06 16:19 - 2009-07-26 22:06 - 01507502 _____ C:\windows\system32\PerfStringBackup.INI
2013-08-05 23:37 - 2012-06-20 23:24 - 00884736 ___SH C:\Users\Antonia\Desktop\Thumbs.db
2013-08-05 22:52 - 2009-07-14 06:33 - 03812408 _____ C:\windows\system32\FNTCACHE.DAT
2013-08-05 02:00 - 2010-03-22 20:02 - 00000000 ____D C:\Users\Antonia\AppData\Local\Adobe
2013-08-05 00:21 - 2010-03-22 20:21 - 00117864 _____ C:\Users\Antonia\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-03 02:07 - 2013-08-03 02:05 - 00000790 _____ C:\DelFix.txt
2013-08-03 02:05 - 2013-07-29 23:56 - 00000000 ____D C:\windows\ERUNT
2013-08-03 01:07 - 2009-08-27 11:18 - 00678898 _____ C:\windows\PFRO.log
2013-07-29 17:14 - 2011-04-02 15:01 - 00000000 _RSHD C:\windows\kmsem
2013-07-29 17:11 - 2012-07-13 15:23 - 00000000 ____D C:\ProgramData\CodecUpdate
2013-07-29 16:47 - 2013-07-29 16:47 - 00000000 ____D C:\Users\Antonia\AppData\Roaming\Malwarebytes
2013-07-29 16:46 - 2013-07-29 16:46 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-07-28 01:50 - 2011-04-27 11:29 - 00000000 ____D C:\Users\Antonia\AppData\Roaming\Greenshot
2013-07-28 01:36 - 2013-07-28 01:36 - 00000000 ____D C:\Users\Antonia\Qtrax
2013-07-28 01:36 - 2010-03-22 20:00 - 00000000 ____D C:\Users\Antonia
2013-07-28 00:58 - 2013-07-03 00:45 - 00000005 _____ C:\Users\Antonia\AppData\Roaming\WBPU-TTL.DAT
2013-07-28 00:45 - 2013-07-27 02:06 - 00000060 _____ C:\Users\Antonia\AppData\Roaming\WB.CFG
2013-07-26 00:24 - 2013-07-26 00:24 - 00000000 ____D C:\Users\Antonia\AppData\Roaming\QuickScan
2013-07-23 23:35 - 2010-04-12 15:31 - 00000000 ____D C:\Users\Antonia\AppData\Roaming\Skype
2013-07-17 16:03 - 2010-03-22 22:29 - 00000000 ____D C:\Users\Antonia\Documents\Youcam
2013-07-17 15:22 - 2012-06-07 16:29 - 00692104 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerApp.exe
2013-07-17 15:22 - 2011-08-09 04:05 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerCPLApp.cpl
2013-07-14 18:09 - 2013-03-04 01:03 - 00000000 ____D C:\Users\Antonia\Desktop\Bewerbung Trainee
2013-07-12 19:07 - 2010-04-12 15:30 - 00000000 ___RD C:\Program Files\Skype
2013-07-12 19:07 - 2010-04-12 15:30 - 00000000 ____D C:\ProgramData\Skype
2013-07-11 17:26 - 2009-07-14 04:37 - 00000000 ____D C:\windows\Microsoft.NET
2013-07-11 16:32 - 2010-08-20 15:10 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-11 16:32 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Windows Defender
2013-07-11 16:29 - 2010-03-22 20:11 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-07-11 16:08 - 2011-12-04 02:11 - 00052736 ___SH C:\Users\Antonia\Documents\Thumbs.db
2013-07-11 13:52 - 2013-07-02 23:46 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-07-11 03:19 - 2010-04-06 18:36 - 75699896 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-07-08 12:22 - 2013-04-13 17:48 - 00000000 ____D C:\Users\Antonia\AppData\Roaming\HpUpdate
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-08-02 00:53
==================== End Of Log ============================
--- --- --- Addition.txt: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 07-08-2013 05
Ran by Antonia at 2013-08-07 21:24:59
Running from C:\Users\Antonia\Downloads
Boot Mode: Normal
==========================================================
==================== Installed Programs =======================
32 Bit HP CIO Components Installer (Version: 7.1.8)
6000E609_eDocs (Version: 1.00.0000)
6000E609_Help (Version: 1.00.0000)
6000E609a (Version: 140.0.000.000)
7-Zip 4.65
Adobe AIR (Version: 3.3.0.3650)
Adobe Flash Player 11 ActiveX (Version: 11.7.700.224)
Adobe Flash Player 11 Plugin (Version: 11.8.800.94)
Adobe Media Player (Version: 1.8)
Adobe Photoshop CS5 (Version: 12.0)
Adobe Reader XI (11.0.03) - Deutsch (Version: 11.0.03)
Apple Application Support (Version: 2.0.1)
Apple Software Update (Version: 2.1.3.127)
Atheros Client Installation Program (Version: 1.0.1.0805)
BPDSoftware (Version: 140.0.000.000)
BPDSoftware_Ini (Version: 1.00.0000)
BufferChm (Version: 140.0.213.000)
CyberLink YouCam (Version: 2.0.2907)
D3DX10 (Version: 15.4.2368.0902)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition
DeviceDiscovery (Version: 140.0.213.000)
Dropbox (HKCU Version: 2.0.22)
Foxit Creator (Version: 3,0,2,0506)
Foxit Reader (Version: 3.1.1.901)
GPBaseService2 (Version: 140.0.212.000)
Greenshot
HP Customer Participation Program 14.0 (Version: 14.0)
HP Imaging Device Functions 14.0 (Version: 14.0)
HP Officejet 6000 E609 Series (Version: 14.0)
HP Officejet Pro 8600 - Grundlegende Software für das Gerät (Version: 28.0.1315.0)
HP Photo Creations (Version: 1.0.0.9572)
HP Smart Web Printing 4.60 (Version: 4.60)
HP Solution Center 14.0 (Version: 14.0)
HP Update (Version: 5.002.002.002)
HPDiagnosticAlert (Version: 1.00.0000)
HPProductAssistant (Version: 140.0.213.000)
Image Converter (Version: 1.0.0)
Image Editor Packages
Image Editor Packages 51
Intel(R) Graphics Media Accelerator Driver (Version: 8.15.10.1930)
Java 7 Update 25 (Version: 7.0.250)
Java Auto Updater (Version: 2.1.9.5)
Java(TM) 6 Update 29 (Version: 6.0.290)
JavaFX 2.1.1 (Version: 2.1.1)
Junk Mail filter update (Version: 15.4.3502.0922)
MarketResearch (Version: 140.0.214.000)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320)
Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8402.2)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Office 2010 Service Pack 1 (SP1)
Microsoft Office Access MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Activation Assistant for Netbooks (Version: 1.6)
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Groove MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office InfoPath MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1)
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Professional Plus 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (French) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (Italian) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proofing (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Word MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Security Client (Version: 4.2.0223.1)
Microsoft Security Client DE-DE Language Pack (Version: 2.1.1116.0)
Microsoft Security Essentials (Version: 4.2.223.1)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft_VC80_ATL_x86 (Version: 8.0.50727.4053)
Microsoft_VC80_CRT_x86 (Version: 8.0.50727.4053)
Microsoft_VC80_MFC_x86 (Version: 8.0.50727.4053)
Microsoft_VC80_MFCLOC_x86 (Version: 8.0.50727.4053)
Microsoft_VC90_ATL_x86 (Version: 1.00.0000)
Microsoft_VC90_CRT_x86 (Version: 1.00.0000)
Microsoft_VC90_MFC_x86 (Version: 1.00.0000)
Microsoft_VC90_MFCLOC_x86 (Version: 1.00.0000)
Mozilla Firefox 22.0 (x86 de) (Version: 22.0)
Mozilla Maintenance Service (Version: 22.0)
MSVCRT (Version: 15.4.2862.0708)
Network (Version: 140.0.215.000)
Notepad++ (Version: 5.9)
OpenOffice.org 3.2 (Version: 3.2.9483)
PDFCreator (Version: 1.6.2)
ProductContext (Version: 140.0.000.000)
QuickTime (Version: 7.70.80.34)
Realtek Ethernet Controller Driver (Version: 1.00.0008)
Realtek High Definition Audio Driver (Version: 6.0.1.5898)
REALTEK Wireless LAN Software (Version: 1.01.0088)
Samsung Kies (Version: 2.1.1.11124_17)
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.18.0)
Skype Click to Call (Version: 5.10.9560)
Skype™ 6.6 (Version: 6.6.106)
SmartWebPrinting (Version: 140.0.213.000)
SolutionCenter (Version: 140.0.214.000)
Status (Version: 140.0.256.000)
Synaptics Pointing Device Driver (Version: 15.2.20.0)
Toolbox (Version: 140.0.428.000)
TrayApp (Version: 140.0.213.000)
TreeSize Professional 5.2.3
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft Office 2010 (KB2494150)
Update for Microsoft Office 2010 (KB2553065)
Update for Microsoft Office 2010 (KB2553092)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553378) 32-Bit Edition
Update for Microsoft Office 2010 (KB2566458)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition
Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition
Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition
Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition
Update for Microsoft Outlook 2010 (KB2597090) 32-Bit Edition
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition
Update for Microsoft PowerPoint 2010 (KB2598240) 32-Bit Edition
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition
VLC media player 2.0.2 (Version: 2.0.2)
WebReg (Version: 140.0.213.017)
Windows Live Communications Platform (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3555.0308)
Windows Live Family Safety (Version: 15.4.3555.0308)
Windows Live Fotogalerie (Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (Version: 15.4.3502.0922)
Windows Live Mail (Version: 15.4.3502.0922)
Windows Live Messenger (Version: 15.4.3538.0513)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (Version: 15.4.3502.0922)
Windows Live Photo Common (Version: 15.4.3502.0922)
Windows Live Photo Gallery (Version: 15.4.3502.0922)
Windows Live PIMT Platform (Version: 15.4.3508.1109)
Windows Live SOXE (Version: 15.4.3502.0922)
Windows Live SOXE Definitions (Version: 15.4.3502.0922)
Windows Live Sync (Version: 14.0.8064.206)
Windows Live UX Platform (Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (Version: 15.4.3508.1109)
Windows Live Writer (Version: 15.4.3502.0922)
Windows Live Writer Resources (Version: 15.4.3502.0922)
==================== Restore Points =========================
03-08-2013 00:06:03 Ende der Bereinigung
04-08-2013 20:29:44 Windows-Sicherung
05-08-2013 00:59:24 Windows Update
==================== Hosts content: ==========================
2009-07-14 04:04 - 2012-09-13 23:25 - 00444838 ____R C:\windows\system32\Drivers\etc\hosts
127.0.0.1 activate.adobe.com
127.0.0.1 adobe.activate.com
127.0.0.1 practivate.adobe.com
127.0.0.1 ereg.adobe.com
127.0.0.1 adobeereg.com
127.0.0.1 activate.wip3.adobe.com
127.0.0.1 wip3.adobe.com
127.0.0.1 3dns-3.adobe.com
127.0.0.1 3dns-2.adobe.com
127.0.0.1 adobe-dns.adobe.com
127.0.0.1 adobe-dns-2.adobe.com
127.0.0.1 adobe-dns-3.adobe.com
127.0.0.1 ereg.wip3.adobe.com
127.0.0.1 activate-sea.adobe.com
127.0.0.1 wwis-dubc1-vip60.adobe.com
127.0.0.1 activate-sjc0.adobe.com
127.0.0.1 wwis-dubc1-vip60.adobe.com
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
There are 1000 more lines.
==================== Scheduled Tasks (whitelisted) =============
Task: {0356BF63-C305-47F1-B800-8E91F440D9FE} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation)
Task: {0E89EE92-3ED2-4AB1-B5AB-DDF482E70F5C} - System32\Tasks\AdobeAAMUpdater-1.0-Antonia-PC-Antonia => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-09-20] (Adobe Systems Incorporated)
Task: {1760A271-5C0A-48B7-8BD0-188298947EA8} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\windows\System32\lpksetup.exe [2010-11-20] (Microsoft Corporation)
Task: {4ADABA7E-3772-43A1-A4C6-FA09B445B67E} - System32\Tasks\Adobe Flash Player Updater => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-17] (Adobe Systems Incorporated)
Task: {66DCA2D2-6FA0-4B31-9788-20FB5499BAAB} - System32\Tasks\DealPly => C:\Users\Antonia\AppData\Roaming\DealPly\UPDATE~1\UPDATE~1.EXE No File
Task: {6AB99BE2-28FD-4418-BF44-B789BBC7E0B8} - System32\Tasks\SUPBackground => C:\Program Files\Samsung\Samsung Update Plus\SUPBackground.exe No File
Task: {7CA8F3F6-B9E1-4AE3-BC1D-FFF0D05F1C7E} - System32\Tasks\{D7C1EBDD-DA93-4F32-B930-016223942014} => C:\Program Files\Skype\Phone\Skype.exe [2013-06-21] (Skype Technologies S.A.)
Task: {8BCDF9E0-D02C-4D4C-B2D6-DF4F6201703A} - System32\Tasks\Your File Updater => C:\Program Files\YourFileDownloader\YourFileUpdater.exe No File
Task: {959E0EAF-0527-47ED-AC67-734143880525} - System32\Tasks\ChkWiz4VistaWin7 => C:\Sysprep\ChkWiz4VistaWin7.exe No File
Task: {A1DE7127-2ABC-4685-A90E-42FE16C51313} - System32\Tasks\DSite => C:\Users\Antonia\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE No File
Task: {AEEBBEE2-8996-437F-A474-7848EA45BCA0} - System32\Tasks\QtraxPlayer => C:\Program Files\Microsoft Silverlight\sllauncher.exe [2013-05-13] (Microsoft Corporation)
Task: {D83CBCB5-98BF-4496-8FF4-3307E02D4DDA} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe [2010-11-20] (Microsoft Corporation)
Task: {D9EC7765-9DE8-48C5-86B6-503644ECC0A0} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => c:\Program Files\Microsoft Security Client\MpCmdRun.exe [2013-01-27] (Microsoft Corporation)
Task: {EF2BD537-8ACA-495C-A2A3-EDF37EC21A11} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2010-11-20] (Microsoft Corporation)
Task: {FB682ACC-0287-455A-A5B5-AFB492899B90} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Faulty Device Manager Devices =============
Name: Officejet Pro 8600
Description: Officejet Pro 8600
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service:
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: adfs
Description: adfs
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: adfs
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
==================== Event log errors: =========================
Application errors:
==================
Error: (08/06/2013 01:24:06 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (08/05/2013 10:54:30 PM) (Source: CONTENTWALL) (User: NT-AUTORITÄT)
Description: Der Dienstprozess konnte keine Verbindung mit dem Dienstcontroller herstellen.
Error: (08/05/2013 02:46:49 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (08/04/2013 02:51:45 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (08/04/2013 02:00:58 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (08/04/2013 00:33:13 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (08/03/2013 02:05:51 AM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.
Vorgang:
Generatordaten werden gesammelt
Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {0540bfe9-cef5-425c-a817-a528cd477106}
Error: (08/02/2013 03:46:46 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (08/02/2013 03:25:41 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (08/02/2013 00:56:02 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
System errors:
=============
Error: (08/07/2013 09:13:15 PM) (Source: ipnathlp) (User: )
Description: 0
Error: (08/07/2013 09:13:11 PM) (Source: ipnathlp) (User: )
Description: 0
Error: (08/07/2013 08:34:20 PM) (Source: ipnathlp) (User: )
Description: 0
Error: (08/07/2013 07:43:24 PM) (Source: ipnathlp) (User: )
Description: 0
Error: (08/07/2013 07:21:33 PM) (Source: ipnathlp) (User: )
Description: 0
Error: (08/07/2013 05:59:53 PM) (Source: ipnathlp) (User: )
Description: 0
Error: (08/07/2013 05:58:24 PM) (Source: ipnathlp) (User: )
Description: 0
Error: (08/07/2013 05:29:32 PM) (Source: ipnathlp) (User: )
Description: 0
Error: (08/07/2013 05:21:15 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (08/07/2013 05:20:26 PM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
cdrom
Microsoft Office Sessions:
=========================
Error: (08/06/2013 01:24:06 AM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\HP\HP Officejet Pro 8600\DriverStore\Pipeline\amd64\hpinkins5912.exe
Error: (08/05/2013 10:54:30 PM) (Source: CONTENTWALL)(User: NT-AUTORITÄT)
Description: Der Dienstprozess konnte keine Verbindung mit dem Dienstcontroller herstellen.
Error: (08/05/2013 02:46:49 AM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\HP\HP Officejet Pro 8600\DriverStore\Pipeline\amd64\hpinkins5912.exe
Error: (08/04/2013 02:51:45 AM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\HP\HP Officejet Pro 8600\DriverStore\Pipeline\amd64\hpinkins5912.exe
Error: (08/04/2013 02:00:58 AM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\HP\HP Officejet Pro 8600\DriverStore\Pipeline\amd64\hpinkins5912.exe
Error: (08/04/2013 00:33:13 AM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\HP\HP Officejet Pro 8600\DriverStore\Pipeline\amd64\hpinkins5912.exe
Error: (08/03/2013 02:05:51 AM) (Source: VSS)(User: )
Description: 0x80070005, Zugriff verweigert
Vorgang:
Generatordaten werden gesammelt
Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {0540bfe9-cef5-425c-a817-a528cd477106}
Error: (08/02/2013 03:46:46 AM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\HP\HP Officejet Pro 8600\DriverStore\Pipeline\amd64\hpinkins5912.exe
Error: (08/02/2013 03:25:41 AM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\HP\HP Officejet Pro 8600\DriverStore\Pipeline\amd64\hpinkins5912.exe
Error: (08/02/2013 00:56:02 AM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\HP\HP Officejet Pro 8600\DriverStore\Pipeline\amd64\hpinkins5912.exe
==================== Memory info ===========================
Percentage of memory in use: 88%
Total physical RAM: 1014.37 MB
Available physical RAM: 116.51 MB
Total Pagefile: 2038.37 MB
Available Pagefile: 574.22 MB
Total Virtual: 2047.88 MB
Available Virtual: 1899.95 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:66.97 GB) (Free:22.53 GB) NTFS
Drive d: () (Fixed) (Total:66.98 GB) (Free:5.98 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 149 GB) (Disk ID: 829A415E)
Partition 1: (Not Active) - (Size=15 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=67 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=67 GB) - (Type=07 NTFS)
==================== End Of Log ============================
|
|
08.08.2013, 04:53
| #4 | |
| /// the machine /// TB-Ausbilder | SPAM MAILS vom gleichen Provider aber unterschiedlichen Absender Adressen - daher keine Möglichkeit Absender zu sperrenZitat:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu SPAM MAILS vom gleichen Provider aber unterschiedlichen Absender Adressen - daher keine Möglichkeit Absender zu sperren |
| absender, absender unterschiedlich, adresse, adressen, aktuelle, einstellungen, email, emailadresse, emails, erhalte, hostkey b.v., inhalt, interne, ip adresse, ip adressen, kurze, laufen, mails, nemesis, neue, ordner, ordner verschoben, outlook, ratlos, spam, spam mails, sperre, sperren, super, vergleich, verschoben, wirklich, world |
Linear-Darstellung
