| |
| |||||||
Log-Analyse und Auswertung: Windows7: hochfahren geht, dann nur Ausschalten möglichWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
22.11.2013, 23:27
| #1 |
| |  Windows7: hochfahren geht, dann nur Ausschalten möglich Wenn ich den Laptop Windows 7, 64 Bit hochfahre ist er extrem langsam und ich kann gar nichts machen außer ausschalten (runterfahren geht auch nicht). Im abgesicherten Modus geht er großteils (Updateverlauf geht nicht, da muss ich auch ausschalten). Bevor nichts mehr ging waren folgende Sachen - ich weiß nicht ob das zusammenhängt: - ich hatte dosearches anstatt google auf meiner Firefox-Startseite, ich dachte ich hätte das eliminiert - Fehlermeldung: Can not load Hotkey.sys - Fehlermeldung: Server ist ausgelastet - hat ab und zu selbständig startup Repair gemacht - ich habe nur 1 Systemwiederherstellungspunkt, andere sind nicht verfügbar, leider genau nachdem der Fehler aufgetaucht ist Am Tag bevor der Fehler kam hat mein Laptop ein Windows-Update und das Firefox-Update runtergeladen (Details kann ich ja nicht abrufen / Firefox habe ich inzwischen deinstalliert). 1. Bei "Laufwerksemulatonen abschalten mit Defogger" kam nichts raus. 2. Bei "Systemscan mit FRST" kommt: Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-11-2013 01 Ran by schneeflocke (administrator) on GEIGE on 22-11-2013 22:44:04 Running from C:\Users\schneeflocke\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 9 Boot Mode: Safe Mode (with Networking) ==================== Processes (Whitelisted) ================= ==================== Registry (Whitelisted) ================== HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1890088 2009-12-11] (Synaptics Incorporated) HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11548264 2010-11-03] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2181224 2010-11-03] (Realtek Semiconductor) HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] () Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKCU\...\Run: [] - [x] MountPoints2: {1350d239-bd28-11e0-9202-00262dc33487} - F:\AutoRun.exe MountPoints2: {1350d251-bd28-11e0-9202-00262dc33487} - F:\AutoRun.exe MountPoints2: {c7f0f023-44f0-11e2-bccb-485d60461830} - F:\NokiaPCIA_Autorun.exe HKLM-x32\...\Run: [HotkeyApp] - C:\Program Files (x86)\Launch Manager\HotkeyApp.exe [200704 2009-12-14] (Wistron) HKLM-x32\...\Run: [Wbutton] - C:\Program Files (x86)\Launch Manager\WButton.exe [436264 2010-06-21] (Wistron Corp.) HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation) HKLM-x32\...\Run: [CLMLServer] - C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [103720 2009-11-02] (CyberLink) HKLM-x32\...\Run: [YouCam Mirage] - C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [136488 2010-10-29] (CyberLink) HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation) HKLM-x32\...\Run: [] - [x] HKLM-x32\...\Run: [ApnUpdater] - C:\Program Files (x86)\Ask.com\Updater\Updater.exe [1573584 2012-10-19] (Ask) HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-06] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [TkBellExe] - C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe [295072 2012-12-22] (RealNetworks, Inc.) HKLM-x32\...\Run: [DATAMNGR] - C:\PROGRA~2\SEARCH~1\Datamngr\DATAMN~1.EXE HKLM-x32\...\Run: [WinZip Malware Protector_startup] - C:\Program Files (x86)\WinZip Malware Protector\WinZipMalwareProtector.exe [6390136 2013-03-26] (Nico Mak Computing) HKU\Default\...\RunOnce: [HKCU] - C:\Windows\System32\oobe\Info\HKCU.vbs [126 2009-11-12] () HKU\Default\...\RunOnce: [Screensaver] - C:\Windows\Web\Wallpaper\MEDION\start.vbs HKU\Default User\...\RunOnce: [HKCU] - C:\Windows\System32\oobe\Info\HKCU.vbs [126 2009-11-12] () HKU\Default User\...\RunOnce: [Screensaver] - C:\Windows\Web\Wallpaper\MEDION\start.vbs AppInit_DLLs: C:\PROGRA~3\Wincert\WIN64C~1.DLL C:\PROGRA~2\SEARCH~1\Datamngr\x64\datamngr.dll C:\PROGRA~2\SEARCH~1\Datamngr\x64\IEBHO.dll [ ] () AppInit_DLLs-x32: C:\PROGRA~3\Wincert\WIN32C~1.DLL C:\PROGRA~2\SEARCH~1\Datamngr\datamngr.dll C:\PROGRA~2\SEARCH~1\Datamngr\IEBHO.dll [ ] () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.searchnu.com/406 HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com URLSearchHook: HKCU - UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&gct=ds&appid=394&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=9042900101854303&q={searchTerms} SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&gct=ds&appid=394&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=9042900101854303&q={searchTerms} SearchScopes: HKCU - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&gct=ds&appid=394&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=9042900101854303&q={searchTerms} SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&gct=ds&appid=394&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=9042900101854303&q={searchTerms} SearchScopes: HKCU - {C5295E35-A70E-4717-8529-215172C457CE} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10262&src=kw&q={searchTerms}&locale=&apn_ptnrs=^AGT&apn_dtid=^YYYYYY^YY^CH&apn_uid=af8bc7cb-f1e5-4613-884d-05c546d728e4&apn_sauid=DDBB015D-B65B-412B-8E01-9EB9B883DF93 BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: DataMngr - {C1ED9DA0-AFD0-4b90-AC6A-D3874F591014} - C:\PROGRA~2\SEARCH~1\Datamngr\x64\BROWSE~1.DLL No File BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader) BHO-x32: Search-Results Toolbar - {377e5d4d-77e5-476a-8716-7e70a9272da0} - C:\PROGRA~2\SEARCH~1\Datamngr\SRTOOL~1\searchresultsDx.dll No File BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) BHO-x32: DataMngr - {C1ED9DA0-AFD0-4b90-AC6A-D3874F591014} - C:\PROGRA~2\SEARCH~1\Datamngr\BROWSE~1.DLL No File BHO-x32: Avira SearchFree Toolbar plus Web Protection - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM-x32 - Avira SearchFree Toolbar plus Web Protection - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) Toolbar: HKLM-x32 - Search-Results Toolbar - {377e5d4d-77e5-476a-8716-7e70a9272da0} - C:\PROGRA~2\SEARCH~1\Datamngr\SRTOOL~1\searchresultsDx.dll No File Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - No File Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1 Tcpip\..\Interfaces\{1F4077BE-1B64-416E-AC6A-0816A15AEA05}: [NameServer]195.141.56.5 193.192.227.3 FireFox: ======== FF ProfilePath: C:\Users\schneeflocke\AppData\Roaming\Mozilla\Firefox\Profiles\ast32ekx.default-1339943103397 FF SearchEngineOrder.1: Ask.com FF SelectedSearchEngine: Ask.com FF Homepage: hxxp://www.google.at/ FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @nokia.com/EnablerPlugin - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( ) FF Plugin-x32: @real.com/nppl3260;version=16.0.0.282 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.0 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.0 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.0 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprpplugin;version=16.0.0.282 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer) FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\Search_Results.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\{1FD91A9C-410C-4090-BBCC-55D3450EF433} FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext FF HKLM-x32\...\Firefox\Extensions: [{34712C68-7391-4c47-94F3-8F88D49AD632}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ ==================== Services (Whitelisted) ================= S2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-09-06] (Avira Operations GmbH & Co. KG) S2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-06] (Avira Operations GmbH & Co. KG) S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [815160 2013-09-06] (Avira Operations GmbH & Co. KG) S2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [339456 2010-11-16] () S2 Mobile Partner. RunOuc; C:\Program Files (x86)\Mobile Partner\UpdateDog\ouc.exe [218624 2011-08-02] () S2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [38608 2012-11-29] () S2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [244904 2010-02-10] () S3 WisLMSvc; C:\Program Files (x86)\Launch Manager\WisLMSvc.exe [118560 2009-10-23] (Wistron Corp.) S2 x10nets; C:\Program Files (x86)\Common Files\X10\Common\X10nets.exe [20480 2009-11-07] (X10) S3 AdobeFlashPlayerUpdateSvc; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [x] ==================== Drivers (Whitelisted) ==================== S2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105344 2013-09-06] (Avira Operations GmbH & Co. KG) S1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132088 2013-09-06] (Avira Operations GmbH & Co. KG) S1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-27] (Avira Operations GmbH & Co. KG) S3 mod7764; C:\Windows\System32\DRIVERS\mod77-64.sys [913888 2009-09-24] (DiBcom SA) S3 NxpCap64; C:\Windows\System32\DRIVERS\NxpCap64.sys [1888864 2010-02-04] (NXP Semiconductors Germany GmbH) S3 TrdCap64; C:\Windows\System32\DRIVERS\TrdCap64.sys [1887528 2010-06-09] (Trident Microsystems, Inc.) R3 X10Hid; C:\Windows\System32\Drivers\x10hid.sys [15896 2009-05-13] (X10 Wireless Technology, Inc.) S3 XUIF; C:\Windows\System32\Drivers\x10ufx2.sys [32792 2009-05-13] (X10 Wireless Technology, Inc.) U5 ew_hwusbdev; C:\Windows\System32\Drivers\ew_hwusbdev.sys [117248 2011-08-02] (Huawei Technologies Co., Ltd.) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-11-22 22:44 - 2013-11-22 22:44 - 00015029 _____ C:\Users\schneeflocke\Desktop\FRST.txt 2013-11-22 22:44 - 2013-11-22 22:44 - 00000000 ____D C:\FRST 2013-11-22 22:41 - 2013-11-22 22:42 - 01958070 _____ (Farbar) C:\Users\schneeflocke\Desktop\FRST64.exe 2013-11-22 22:39 - 2013-11-22 22:39 - 00000258 _____ C:\Users\schneeflocke\Desktop\defogger_enable.log 2013-11-22 22:38 - 2013-11-22 22:38 - 00050477 _____ C:\Users\schneeflocke\Desktop\Defogger.exe 2013-11-22 22:38 - 2013-11-22 22:38 - 00000486 _____ C:\Users\schneeflocke\Desktop\defogger_disable.log 2013-11-22 20:10 - 2013-11-22 20:10 - 00001153 _____ C:\Users\Public\Desktop\WinZip Malware Protector.lnk 2013-11-22 20:10 - 2013-11-22 20:10 - 00000000 ____D C:\Users\schneeflocke\AppData\Roaming\Nico Mak Computing 2013-11-22 20:10 - 2013-11-22 20:10 - 00000000 ____D C:\ProgramData\Nico Mak Computing 2013-11-22 20:10 - 2013-11-22 20:10 - 00000000 ____D C:\Program Files (x86)\WinZip Malware Protector 2013-11-22 20:10 - 2013-03-15 17:10 - 00020480 _____ C:\Windows\system32\wsusnative64.exe 2013-11-17 11:34 - 2013-11-17 11:34 - 00280520 _____ C:\Windows\Minidump\111713-38204-01.dmp 2013-11-16 08:41 - 2013-11-16 20:32 - 104637397 _____ C:\Windows\SysWOW64\撛툆 2013-11-15 19:50 - 2013-11-20 22:27 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-11-14 22:39 - 2013-10-13 16:58 - 17847296 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-11-14 22:39 - 2013-10-13 16:09 - 10926080 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-11-14 22:39 - 2013-10-13 15:55 - 02334720 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-11-14 22:39 - 2013-10-13 15:48 - 01346560 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-11-14 22:39 - 2013-10-13 15:47 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-11-14 22:39 - 2013-10-13 15:46 - 01494528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-11-14 22:39 - 2013-10-13 15:46 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-11-14 22:39 - 2013-10-13 15:44 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-11-14 22:39 - 2013-10-13 15:42 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-11-14 22:39 - 2013-10-13 15:42 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-11-14 22:39 - 2013-10-13 15:42 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-11-14 22:39 - 2013-10-13 15:39 - 02147840 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-11-14 22:39 - 2013-10-13 15:38 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-11-14 22:39 - 2013-10-13 15:36 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-11-14 22:39 - 2013-10-13 15:35 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-11-14 22:39 - 2013-10-13 15:29 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-11-14 22:39 - 2013-10-13 11:42 - 12344832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-11-14 22:39 - 2013-10-13 11:08 - 09739264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-11-14 22:39 - 2013-10-13 10:48 - 01806848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-11-14 22:39 - 2013-10-13 10:37 - 01104896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-11-14 22:39 - 2013-10-13 10:35 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-11-14 22:39 - 2013-10-13 10:35 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-11-14 22:39 - 2013-10-13 10:33 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-11-14 22:39 - 2013-10-13 10:32 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-11-14 22:39 - 2013-10-13 10:30 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-11-14 22:39 - 2013-10-13 10:30 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-11-14 22:39 - 2013-10-13 10:29 - 00420864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-11-14 22:39 - 2013-10-13 10:27 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-11-14 22:39 - 2013-10-13 10:27 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-11-14 22:39 - 2013-10-13 10:26 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-11-14 22:39 - 2013-10-13 10:25 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-11-14 22:39 - 2013-10-13 10:20 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-11-14 18:22 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-11-14 18:22 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-11-14 18:21 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll 2013-11-14 18:21 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll 2013-11-14 18:21 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2013-11-14 18:21 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll 2013-11-14 18:21 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2013-11-14 18:21 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll 2013-11-14 18:21 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2013-11-14 18:20 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2013-11-14 18:20 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2013-11-14 18:20 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2013-11-14 18:20 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2013-11-14 18:20 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2013-11-14 18:20 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2013-11-14 18:20 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2013-11-14 18:20 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2013-11-14 18:20 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2013-11-14 18:20 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2013-11-14 18:20 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2013-11-14 18:20 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2013-11-14 18:20 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2013-11-14 18:20 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2013-11-14 18:18 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2013-11-14 18:18 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2013-11-14 18:17 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll 2013-11-14 18:17 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2013-11-14 18:17 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL 2013-11-14 18:17 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll 2013-11-14 18:17 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL 2013-11-14 18:00 - 2013-11-14 18:00 - 104278918 _____ C:\Windows\SysWOW64\�䱤@ 2013-11-12 22:37 - 2013-11-12 22:37 - 00000000 ____D C:\Users\schneeflocke\Desktop\Alte Firefox-Daten 2013-11-09 19:38 - 2013-11-09 19:38 - 103387443 _____ C:\Windows\SysWOW64\䎋ਲ਼” 2013-11-05 19:25 - 2013-11-05 19:25 - 00280520 _____ C:\Windows\Minidump\110513-34741-01.dmp 2013-11-05 06:55 - 2011-03-25 04:29 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2013-11-05 06:55 - 2011-03-25 04:29 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2013-11-05 06:55 - 2011-03-25 04:29 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2013-11-05 06:55 - 2011-03-25 04:29 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2013-11-05 06:55 - 2011-03-25 04:29 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2013-11-05 06:55 - 2011-03-25 04:29 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2013-11-05 06:55 - 2011-03-25 04:28 - 00007936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2013-11-01 09:30 - 2013-11-01 09:30 - 00002053 _____ C:\Users\Public\Desktop\Nokia Suite.lnk 2013-11-01 09:27 - 2013-11-01 09:27 - 00000000 ____D C:\Program Files (x86)\PC Connectivity Solution 2013-11-01 09:27 - 2012-10-17 14:53 - 00026112 _____ (Nokia) C:\Windows\system32\Drivers\pccsmcfdx64.sys 2013-11-01 09:04 - 2013-11-01 09:04 - 00000000 ____D C:\Users\schneeflocke\AppData\Local\NokiaAccount 2013-11-01 08:35 - 2013-11-01 08:35 - 00280520 _____ C:\Windows\Minidump\110113-31387-01.dmp 2013-10-29 14:33 - 2013-10-29 14:33 - 103932228 _____ C:\Windows\SysWOW64\�I 2013-10-25 06:49 - 2013-10-25 12:37 - 102943771 _____ C:\Windows\SysWOW64\⣪찇W 2013-10-24 20:55 - 2013-10-24 20:55 - 00280520 _____ C:\Windows\Minidump\102413-42307-01.dmp ==================== One Month Modified Files and Folders ======= 2013-11-22 22:44 - 2013-11-22 22:44 - 00015029 _____ C:\Users\schneeflocke\Desktop\FRST.txt 2013-11-22 22:44 - 2013-11-22 22:44 - 00000000 ____D C:\FRST 2013-11-22 22:42 - 2013-11-22 22:41 - 01958070 _____ (Farbar) C:\Users\schneeflocke\Desktop\FRST64.exe 2013-11-22 22:39 - 2013-11-22 22:39 - 00000258 _____ C:\Users\schneeflocke\Desktop\defogger_enable.log 2013-11-22 22:39 - 2011-01-24 22:42 - 00000000 ____D C:\Users\schneeflocke 2013-11-22 22:38 - 2013-11-22 22:38 - 00050477 _____ C:\Users\schneeflocke\Desktop\Defogger.exe 2013-11-22 22:38 - 2013-11-22 22:38 - 00000486 _____ C:\Users\schneeflocke\Desktop\defogger_disable.log 2013-11-22 22:17 - 2011-01-20 23:59 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-11-22 22:16 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-11-22 22:15 - 2009-07-14 05:51 - 00225426 _____ C:\Windows\setupact.log 2013-11-22 22:10 - 2011-01-20 23:56 - 01187841 _____ C:\Windows\WindowsUpdate.log 2013-11-22 22:01 - 2011-01-30 22:38 - 00000000 ____D C:\Windows\SysWOW64\Adobe 2013-11-22 20:10 - 2013-11-22 20:10 - 00001153 _____ C:\Users\Public\Desktop\WinZip Malware Protector.lnk 2013-11-22 20:10 - 2013-11-22 20:10 - 00000000 ____D C:\Users\schneeflocke\AppData\Roaming\Nico Mak Computing 2013-11-22 20:10 - 2013-11-22 20:10 - 00000000 ____D C:\ProgramData\Nico Mak Computing 2013-11-22 20:10 - 2013-11-22 20:10 - 00000000 ____D C:\Program Files (x86)\WinZip Malware Protector 2013-11-22 19:18 - 2011-01-20 23:59 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-11-20 22:39 - 2011-01-20 23:59 - 00000000 ____D C:\Program Files\Google 2013-11-20 22:39 - 2011-01-20 23:59 - 00000000 ____D C:\Program Files (x86)\Google 2013-11-20 22:39 - 2010-07-07 17:17 - 00223700 _____ C:\Windows\PFRO.log 2013-11-20 22:37 - 2011-01-22 14:21 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-11-20 22:27 - 2013-11-15 19:50 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-11-20 22:27 - 2011-01-24 22:44 - 00000000 ____D C:\Users\schneeflocke\AppData\Local\Google 2013-11-20 22:27 - 2011-01-20 23:59 - 00000000 ____D C:\ProgramData\Google 2013-11-20 21:53 - 2010-05-12 09:18 - 00657660 _____ C:\Windows\system32\perfh007.dat 2013-11-20 21:53 - 2010-05-12 09:18 - 00131032 _____ C:\Windows\system32\perfc007.dat 2013-11-20 21:53 - 2009-07-14 06:13 - 01507406 _____ C:\Windows\system32\PerfStringBackup.INI 2013-11-20 19:38 - 2013-08-20 12:05 - 00000000 ____D C:\Users\schneeflocke\Documents\Kinesiologie 2013-11-17 20:31 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\registration 2013-11-17 11:34 - 2013-11-17 11:34 - 00280520 _____ C:\Windows\Minidump\111713-38204-01.dmp 2013-11-17 11:34 - 2012-05-04 22:57 - 00000000 ____D C:\Windows\Minidump 2013-11-17 11:33 - 2012-05-04 22:57 - 341078705 _____ C:\Windows\MEMORY.DMP 2013-11-16 20:32 - 2013-11-16 08:41 - 104637397 _____ C:\Windows\SysWOW64\撛툆 2013-11-16 12:44 - 2013-10-22 06:20 - 00000632 ____H C:\Windows\Tasks\Norton Product InstallerIdle.job 2013-11-16 11:22 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2013-11-16 08:41 - 2009-07-14 05:45 - 00010096 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-11-16 08:41 - 2009-07-14 05:45 - 00010096 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-11-14 22:39 - 2013-07-13 22:43 - 00000000 ____D C:\Windows\system32\MRT 2013-11-14 22:33 - 2010-07-07 16:49 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-11-14 18:00 - 2013-11-14 18:00 - 104278918 _____ C:\Windows\SysWOW64\�䱤@ 2013-11-12 23:24 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\AppCompat 2013-11-12 23:23 - 2011-12-10 20:34 - 00000000 ____D C:\Users\schneeflocke\AppData\Roaming\Skype 2013-11-12 23:23 - 2011-06-18 13:33 - 00000000 ____D C:\ProgramData\Real 2013-11-12 23:23 - 2011-01-22 14:19 - 00000000 __RHD C:\MSOCache 2013-11-12 22:37 - 2013-11-12 22:37 - 00000000 ____D C:\Users\schneeflocke\Desktop\Alte Firefox-Daten 2013-11-09 19:38 - 2013-11-09 19:38 - 103387443 _____ C:\Windows\SysWOW64\䎋ਲ਼” 2013-11-05 19:25 - 2013-11-05 19:25 - 00280520 _____ C:\Windows\Minidump\110513-34741-01.dmp 2013-11-01 13:36 - 2011-02-19 11:22 - 00000952 ___SH C:\ProgramData\KGyGaAvL.sys 2013-11-01 09:30 - 2013-11-01 09:30 - 00002053 _____ C:\Users\Public\Desktop\Nokia Suite.lnk 2013-11-01 09:27 - 2013-11-01 09:27 - 00000000 ____D C:\Program Files (x86)\PC Connectivity Solution 2013-11-01 09:27 - 2010-11-02 17:44 - 00102808 _____ C:\Windows\DPINST.LOG 2013-11-01 09:25 - 2011-01-23 21:59 - 00000000 ____D C:\Program Files (x86)\Nokia 2013-11-01 09:04 - 2013-11-01 09:04 - 00000000 ____D C:\Users\schneeflocke\AppData\Local\NokiaAccount 2013-11-01 08:35 - 2013-11-01 08:35 - 00280520 _____ C:\Windows\Minidump\110113-31387-01.dmp 2013-10-29 14:33 - 2013-10-29 14:33 - 103932228 _____ C:\Windows\SysWOW64\�I 2013-10-25 12:37 - 2013-10-25 06:49 - 102943771 _____ C:\Windows\SysWOW64\⣪찇W 2013-10-25 06:53 - 2012-03-04 13:47 - 00000000 ____D C:\Program Files (x86)\Java 2013-10-24 20:55 - 2013-10-24 20:55 - 00280520 _____ C:\Windows\Minidump\102413-42307-01.dmp Some content of TEMP: ==================== C:\Users\schneeflocke\AppData\Local\Temp\NEventMessages.dll C:\Users\schneeflocke\AppData\Local\Temp\NOSEventMessages.dll ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-11-11 17:14 ==================== End Of Log ============================ und Additional scan result of Farbar Recovery Scan Tool (x64) Version: 22-11-2013 01 Ran by schneeflocke at 2013-11-22 22:45:27 Running from C:\Users\schneeflocke\Desktop Boot Mode: Safe Mode (with Networking) ========================================================== ==================== Security Center ======================== AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C} AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== Update for Microsoft Office 2007 (KB2508958) (x32) Acrobat.com (x32 Version: 1.6.65) Adobe AIR (x32 Version: 2.5.0.16600) Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05) Ashampoo Burning Studio (x32 Version: 9.23.0) Ashampoo Photo Commander (x32 Version: 8.3.2) Ashampoo Photo Optimizer (x32 Version: 3.12.0) Ashampoo Snap (x32 Version: 3.4.1) Ask Toolbar (x32 Version: 1.15.13.0) Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (x32 Version: 1.0.0.27) Avira Free Antivirus (x32 Version: 13.0.0.4052) Avira SearchFree Toolbar plus Web Protection Updater (HKCU Version: 1.4.1.29781) Cisco EAP-FAST Module (x32 Version: 2.2.14) Cisco LEAP Module (x32 Version: 1.0.19) Cisco PEAP Module (x32 Version: 1.1.6) Complete FCE (x32 Version: 1.00.0000) Control ActiveX de Windows Live Mesh para conexiones remotas (x32 Version: 15.4.5722.2) Contrôle ActiveX Windows Live Mesh pour connexions à distance (x32 Version: 15.4.5722.2) Corel Shell Extension - 64Bit (Version: 14.0) CorelDRAW Essentials 4 - Content (x32 Version: 4.0) CorelDRAW Essentials 4 - Draw (x32 Version: 4.0) CorelDRAW Essentials 4 - Filters (x32 Version: 4.0) CorelDRAW Essentials 4 - ICA (x32 Version: 4.0) CorelDRAW Essentials 4 - IPM - No VBA (x32 Version: 4.0) CorelDRAW Essentials 4 - Lang BR (x32 Version: 4.0) CorelDRAW Essentials 4 - Lang DE (x32 Version: 4.0) CorelDRAW Essentials 4 - Lang EN (x32 Version: 4.0) CorelDRAW Essentials 4 - Lang ES (x32 Version: 4.0) CorelDRAW Essentials 4 - Lang FR (x32 Version: 4.0) CorelDRAW Essentials 4 - Lang IT (x32 Version: 4.0) CorelDRAW Essentials 4 - Lang NL (x32 Version: 4.0) CorelDRAW Essentials 4 - PHOTO-PAINT (x32 Version: 4.0) CorelDRAW Essentials 4 - Windows Shell Extension (x32 Version: 1.1) CorelDRAW Essentials 4 - Windows Shell Extension (x32) CorelDRAW Essentials 4 (x32 Version: 4.0) CorelDRAW Essentials 4 (x32) CyberLink LabelPrint (x32 Version: 2.5.3418) CyberLink MediaShow (x32 Version: 5.0.1410a) CyberLink MediaShow Espresso (x32 Version: 5.5.1412_24021a) CyberLink PhotoNow (x32 Version: 1.1.0.6904) CyberLink Power2Go (x32 Version: 6.1.3802) CyberLink PowerDirector (x32 Version: 8.0.3224a) CyberLink PowerDVD 10 (x32 Version: 10.0.2225) CyberLink PowerDVD Copy (x32 Version: 1.5.1306) CyberLink PowerProducer (x32 Version: 5.0.2.2429) CyberLink YouCam (x32 Version: 3.1.3428) D3DX10 (x32 Version: 15.4.2368.0902) Easy Learning Englisch (x32 Version: 5.0) Easy Learning Italienisch (x32 Version: 5.0) Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsługę połączeń zdalnych (x32 Version: 15.4.5722.2) Fotogalerija Windows Live (x32 Version: 15.4.3502.0922) Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922) Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922) Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922) Galerie de photos Windows Live (x32 Version: 15.4.3502.0922) Google Chrome (x32 Version: 5.0.375.125) Google Earth Plug-in (x32 Version: 7.1.1.1888) Google Toolbar for Internet Explorer (x32 Version: 1.0.0) Google Update Helper (x32 Version: 1.3.21.165) Haali Media Splitter (x32) HOFER Bestellsoftware 4.12.1 (x32 Version: 4.12.1) Intel(R) Graphics Media Accelerator Driver (x32 Version: 8.15.10.2189) Intel(R) Management Engine Components (x32 Version: 6.0.0.1179) Intel(R) Rapid Storage Technology (x32 Version: 9.6.0.1014) Java 7 Update 25 (x32 Version: 7.0.250) Java 7 Update 45 (64-bit) (Version: 7.0.450) Java Auto Updater (x32 Version: 2.1.9.5) Java(TM) 6 Update 22 (64-bit) (Version: 6.0.220) Java(TM) 6 Update 31 (x32 Version: 6.0.310) JavaFX 2.1.1 (x32 Version: 2.1.1) Junk Mail filter update (x32 Version: 15.4.3502.0922) Kontrolnik Windows Live Mesh ActiveX za oddaljene povezave (x32 Version: 15.4.5722.2) Launch Manager (x32 Version: 1.5.1.2) Licensing Service Install (x32 Version: 2.0.1.181) Medion Home Cinema (x32 Version: 8.0.2213) Mesh Runtime (x32 Version: 15.4.5722.2) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft Application Error Reporting (Version: 12.0.6015.5000) Microsoft Office 2007 Service Pack 3 (SP3) (x32) Microsoft Office 2010 (x32 Version: 14.0.4763.1000) Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003) Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1) Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000) Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014) Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32) Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000) Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Save as PDF or XPS Add-in for 2007 Microsoft Office programs (x32 Version: 12.0.4518.1014) Microsoft Silverlight (Version: 5.1.20913.0) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000) Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (Version: 8.0.50727.4053) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001) Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (Version: 9.0.30729.5570) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (x32 Version: 9.0.30729.5570) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) Microsoft_VC100_CRT_SP1_x64 (Version: 10.0.40219.1) Microsoft_VC100_CRT_SP1_x86 (x32 Version: 10.0.40219.1) Mobile Partner (x32 Version: 21.005.11.01.154) MSVC80_x64_v2 (Version: 1.0.3.0) MSVC80_x86_v2 (x32 Version: 1.0.3.0) MSVC90_x64 (Version: 1.0.1.2) MSVC90_x86 (x32 Version: 1.0.1.2) MSVCRT (x32 Version: 15.4.2862.0708) MSVCRT_amd64 (x32 Version: 15.4.2862.0708) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0) MuseScore 1.0 MuseScore score typesetter (x32 Version: 1.0.0) Nokia Connectivity Cable Driver (x32 Version: 7.1.172.0) Nokia PC Suite (x32 Version: 7.1.60.0) Nokia PC-Internetzugang (x32 Version: 2.0.2.2) Nokia Suite (x32 Version: 3.8.48.0) PC Connectivity Solution (x32 Version: 12.0.109.0) PlayReady PC Runtime amd64 (Version: 1.3.0) Poczta usługi Windows Live (x32 Version: 15.4.3502.0922) Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922) Pošta Windows Live (x32 Version: 15.4.3502.0922) Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922) RealDownloader (x32 Version: 1.3.0) RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0) RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0) RealPlayer (x32 Version: 16.0.0) Realtek High Definition Audio Driver (x32 Version: 6.0.1.6237) Realtek USB 2.0 Card Reader (x32 Version: 6.1.7600.30121) REALTEK Wireless LAN Driver (x32 Version: 1.00.0148) RealUpgrade 1.1 (x32 Version: 1.1.0) Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.26.0) Skype Click to Call (x32 Version: 5.9.9216) Skype™ 6.3 (x32 Version: 6.3.107) swMSM (x32 Version: 12.0.0.1) Synaptics Pointing Device Driver (Version: 14.0.19.0) System Checkup 3.4 (x32 Version: 3.4.0.53) Update for 2007 Microsoft Office System (KB967642) (x32) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3) Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32) Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32) Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32) Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32) Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (x32) Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2825642) 32-Bit Edition (x32) Update für Microsoft Office Excel 2007 Help (KB963678) (x32) Update für Microsoft Office Outlook 2007 Help (KB963677) (x32) Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32) Update für Microsoft Office Word 2007 Help (KB963665) (x32) Windows Live Communications Platform (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3502.0922) Windows Live Fotogalerie (x32 Version: 15.4.3502.0922) Windows Live Fotogalleri (x32 Version: 15.4.3502.0922) Windows Live Fotoğraf Galerisi (x32 Version: 15.4.3502.0922) Windows Live Fotótár (x32 Version: 15.4.3502.0922) Windows Live ID Sign-in Assistant (Version: 7.250.4225.0) Windows Live Installer (x32 Version: 15.4.3502.0922) Windows Live Language Selector (Version: 15.4.3502.0922) Windows Live Mail (x32 Version: 15.4.3502.0922) Windows Live Mesh (x32 Version: 15.4.3502.0922) Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2) Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2) Windows Live Messenger (x32 Version: 15.4.3502.0922) Windows Live MIME IFilter (Version: 15.4.3502.0922) Windows Live Movie Maker (x32 Version: 15.4.3502.0922) Windows Live Photo Common (x32 Version: 15.4.3502.0922) Windows Live Photo Gallery (x32 Version: 15.4.3502.0922) Windows Live PIMT Platform (x32 Version: 15.4.3502.0922) Windows Live Remote Client (Version: 15.4.5722.2) Windows Live Remote Client Resources (Version: 15.4.5722.2) Windows Live Remote Service (Version: 15.4.5722.2) Windows Live Remote Service Resources (Version: 15.4.5722.2) Windows Live SOXE (x32 Version: 15.4.3502.0922) Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922) Windows Live Temel Parçalar (x32 Version: 15.4.3502.0922) Windows Live UX Platform (x32 Version: 15.4.3502.0922) Windows Live UX Platform Language Pack (x32 Version: 15.4.3502.0922) Windows Live Writer (x32 Version: 15.4.3502.0922) Windows Live Writer Resources (x32 Version: 15.4.3502.0922) Windows Liven asennustyökalu (x32 Version: 15.4.3502.0922) Windows Liven sähköposti (x32 Version: 15.4.3502.0922) Windows Liven valokuvavalikoima (x32 Version: 15.4.3502.0922) Windows Media Encoder 9 Series (x32 Version: 9.00.2980) Windows Media Encoder 9 Series (x32) Windows Media Player Firefox Plugin (x32 Version: 1.0.0.8) Windows-Treiberpaket - Nokia Modem (06/09/2010 7.01.0.8) (Version: 06/09/2010 7.01.0.8) Windows-Treiberpaket - Nokia Modem (10/07/2010 4.6) (Version: 10/07/2010 4.6) Windows-Treiberpaket - Nokia pccsmcfd LegacyDriver (05/31/2012 7.1.2.0) (Version: 05/31/2012 7.1.2.0) WinZip Malware Protector (x32 Version: 2.1.1000.10740) X10 Hardware(TM) (x32) Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922) ==================== Restore Points ========================= 16-11-2013 22:25:38 Windows Update ==================== Hosts content: ========================== 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {0A61A782-D5A9-4098-B08E-926187BA5773} - System32\Tasks\{FD6606DE-7FE1-4BD0-8A20-6E8E52598B0C} => C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE [2013-08-14] (Microsoft Corporation) Task: {1317B5AE-7215-4D39-A8BB-B5FF0E0224CC} - System32\Tasks\{D83810AA-6FB5-4CCB-8C71-DFB735F49F6D} => C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE [2013-08-14] (Microsoft Corporation) Task: {2C5443F2-311D-40B4-9E61-CA0EAA401C1D} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-2149481765-3784214131-32840530-1001 => C:\Program Files (x86)\Real\RealUpgrade\realupgrade.exe [2012-11-30] (RealNetworks, Inc.) Task: {2D9C5EBB-8852-4B3E-B57D-93AB18400293} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-2149481765-3784214131-32840530-1001 => C:\Program Files (x86)\Real\RealUpgrade\realupgrade.exe [2012-11-30] (RealNetworks, Inc.) Task: {2FF85D8D-F458-4531-8FD9-03133F1E0BC9} - System32\Tasks\{4A0F1C53-A9F3-4C61-BCE9-3574DF83714F} => C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE [2013-08-14] (Microsoft Corporation) Task: {355D19C2-8715-45C9-BA38-99CA8A5D1C0B} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation) Task: {3DA66859-4D97-445E-A718-C9B4EC0DD790} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-2149481765-3784214131-32840530-1000 => C:\Program Files (x86)\Real\RealUpgrade\realupgrade.exe [2012-11-30] (RealNetworks, Inc.) Task: {40AE8473-A764-422B-A65F-6A1ED5C595F0} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-01-20] (Google Inc.) Task: {5361756F-85F6-431B-A388-3BD33D2E9BA8} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: {6F3BCC2C-25E7-4E48-B8D5-90F7C45F6D24} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-2149481765-3784214131-32840530-1000 => C:\Program Files (x86)\Real\RealUpgrade\realupgrade.exe [2012-11-30] (RealNetworks, Inc.) Task: {7BB56DF7-58D8-49E4-8455-BA42BA77403D} - System32\Tasks\{17CF8CE1-99C6-41D1-8C6A-8788EB845999} => C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE [2013-08-14] (Microsoft Corporation) Task: {85A51BF1-1855-4F0C-80BF-0D3E072F3F33} - System32\Tasks\{07291F2F-C9FC-4C49-9151-6EECC471E3F2} => C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE [2013-08-14] (Microsoft Corporation) Task: {9813B140-305A-41B2-A980-BC8573D8383E} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2149481765-3784214131-32840530-1001 => C:\Program Files (x86)\Real\RealUpgrade\realupgrade.exe [2012-11-30] (RealNetworks, Inc.) Task: {AB35C17F-140D-43F3-8645-12C41F10FA71} - System32\Tasks\{4D3DB157-FA70-4C56-AC1B-1C5B43BB67F6} => C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE [2013-08-14] (Microsoft Corporation) Task: {BD223675-981D-411C-8E3C-E4F13937CF43} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files (x86)\Ask.com\UpdateTask.exe [2012-12-20] () Task: {CA9B3AA4-B173-4C98-A9AB-6DE30EDF0C3B} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-20] (Microsoft Corporation) Task: {E07A66BA-008D-4D18-BF4D-3334A336D5E5} - System32\Tasks\Norton Product InstallerIdle => C:\Windows\SysWOW64\Adobe\Shockwave 12\SymInstallStub.exe Task: {EC0DDFDD-0E12-482E-86C8-B75E3ECC63BB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-01-20] (Google Inc.) Task: {EDF87CD2-BE3B-4E0B-BD91-7B521E4F15A8} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2149481765-3784214131-32840530-1001 => C:\Program Files (x86)\Real\RealUpgrade\realupgrade.exe [2012-11-30] (RealNetworks, Inc.) Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\Norton Product InstallerIdle.job => C:\Windows\SysWOW64\Adobe\Shockwave 12\SymInstallStub.exe ==================== Loaded Modules (whitelisted) ============= ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BsScanner => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\BsScanner => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="2" ==================== Faulty Device Manager Devices ============= Name: Security Processor Loader Driver Description: Security Processor Loader Driver Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: spldr Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. Name: Anwenderinfrarotgeräte Description: Anwenderinfrarotgeräte Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: circlass Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31) Resolution: Update the driver ==================== Event log errors: ========================= Application errors: ================== Error: (11/20/2013 08:17:40 PM) (Source: Outlook) (User: ) Description: Fehler beim Bestimmen, ob sich der Speicher im Crawlbereich befindet (Fehler=0x8007043c). Error: (11/20/2013 08:17:40 PM) (Source: Outlook) (User: ) Description: Fehler beim Abrufen des Crawlbereichs-Managers. Fehler=0x8007043c. Error: (11/20/2013 08:17:40 PM) (Source: Outlook) (User: ) Description: Fehler beim Bestimmen, ob sich der Speicher im Crawlbereich befindet (Fehler=0x8007043c). Error: (11/20/2013 08:17:40 PM) (Source: Outlook) (User: ) Description: Fehler beim Abrufen des Crawlbereichs-Managers. Fehler=0x8007043c. Error: (11/20/2013 07:52:10 PM) (Source: Outlook) (User: ) Description: Fehler beim Bestimmen, ob sich der Speicher im Crawlbereich befindet (Fehler=0x8007043c). Error: (11/20/2013 07:52:10 PM) (Source: Outlook) (User: ) Description: Fehler beim Abrufen des Crawlbereichs-Managers. Fehler=0x8007043c. Error: (11/20/2013 07:52:10 PM) (Source: Outlook) (User: ) Description: Fehler beim Bestimmen, ob sich der Speicher im Crawlbereich befindet (Fehler=0x8007043c). Error: (11/20/2013 07:52:10 PM) (Source: Outlook) (User: ) Description: Fehler beim Abrufen des Crawlbereichs-Managers. Fehler=0x8007043c. Error: (11/20/2013 07:33:14 PM) (Source: Outlook) (User: ) Description: Fehler beim Bestimmen, ob sich der Speicher im Crawlbereich befindet (Fehler=0x8007043c). Error: (11/20/2013 07:33:14 PM) (Source: Outlook) (User: ) Description: Fehler beim Abrufen des Crawlbereichs-Managers. Fehler=0x8007043c. System errors: ============= Error: (11/22/2013 10:45:14 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (11/22/2013 10:45:14 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (11/22/2013 10:45:14 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (11/22/2013 10:41:58 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (11/22/2013 10:41:58 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (11/22/2013 10:41:58 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (11/22/2013 10:40:20 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (11/22/2013 10:40:20 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (11/22/2013 10:40:20 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (11/22/2013 10:39:52 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Microsoft Office Sessions: ========================= Error: (05/30/2013 08:55:22 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 96345 seconds with 960 seconds of active time. This session ended with a crash. ==================== Memory info =========================== Percentage of memory in use: 20% Total physical RAM: 3893.49 MB Available physical RAM: 3097.75 MB Total Pagefile: 7785.16 MB Available Pagefile: 7034.12 MB Total Virtual: 8192 MB Available Virtual: 8191.81 MB ==================== Drives ================================ Drive c: (Boot) (Fixed) (Total:546.25 GB) (Free:478.17 GB) NTFS Drive d: (Recover) (Fixed) (Total:48.83 GB) (Free:6.82 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 596 GB) (Disk ID: 2BD2C32A) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=546 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=49 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=1023 MB) - (Type=12) ==================== End Of Log ============================ 3. bei GMER kommt: GMER 2.1.19163 - hxxp://www.gmer.net Rootkit scan 2013-11-22 23:14:53 Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 SAMSUNG_ rev.2AJ1 596,17GB Running: gmer_2.1.19163.exe; Driver: C:\Users\SCHNEE~1\AppData\Local\Temp\ugtdqpod.sys ---- Disk sectors - GMER 2.1 ---- Disk \Device\Harddisk0\DR0 unknown MBR code ---- EOF - GMER 2.1 ---- 4. mit Winzip Malware Protector kam erst: c:/users/schneeflocke/appdata/local/adobe/acrobat/10.0/cache/rdlang_escript.deu und rdlang_digsig.deu -> die beiden habe ich gelöscht und auch Adobe FlashPlayer11 Plugin und ActiveX und Shockwave Player 12 deinstallier / Adobe Reader konnte ich nicht deinstallieren: auf Windows Installer kann nicht zugegriffen werden -> die beiden Daten wurden am gleichen Tag wie Skype installiert -> hat das was zu bedeuten, auch Skype kann ich nicht deinstallieren mit nochmaligem Winzip Malware Protector Scan kam: c:/$recycle.bin/s-1-5-21-2149481765-3784214131-32840530-1001/$rmoletq.deu und $rp0s7d0.deu -> beide Dateien kann ich nicht finden. Vielen Dank sunflower222 |
| Themen zu Windows7: hochfahren geht, dann nur Ausschalten möglich |
| adobe flashplayer, antivir, avira, avira searchfree toolbar, device driver, error, excel, google, helper, hijack.startpage, homepage, hängt, iexplore.exe, js/agent.nkw, langsam, launch, malware, minidump, plug-in, pup.datamngr, pup.optional.bandoo, pup.optional.datamngr.a, pup.optional.searchqu.a, realtek, registry, required, security, server, svchost.exe, usb, winzip malware protector |
Baum-Darstellung