| |
| |||||||
Log-Analyse und Auswertung: Firefox: Tab mit Werbung öffnen sich ständigWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
24.11.2013, 15:34
| #1 |
| |  Firefox: Tab mit Werbung öffnen sich ständig Bei fast jeder Aktion, die ich in meinem Firefox mache, öffnet sich ein neuer Tab mit Werbung, Umfragen, etc. Auf den Internetseiten die von mir geöffnet werden wird auch ständig Werbung eingeblendet. Was kann ich jetzt machen? Bin dankbar für jede Hilfe!  Hier sind die Logfiles: Defogger Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1)
Log created at 15:00 on 24/11/2013 (Magic)
Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
Checking for services/drivers...
-=E.O.F=-
FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 23-11-2013 03
Ran by Magic (administrator) on MAGIC-PC on 24-11-2013 15:04:41
Running from C:\Users\Magic\Desktop
Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(AMD) C:\Windows\System32\atiesrxx.exe
(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_b3d7bbbd6875f4bb\stacsv.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_b3d7bbbd6875f4bb\AEstSrv.exe
(LSI Corporation) C:\Program Files\LSI SoftModem\agrsmsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
(PDF Complete Inc) C:\Program Files\PDF Complete\pdfsvc.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
( Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
( Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\VolCtrl.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe
(Updater) C:\ProgramData\Updater\updater.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe
(WatchDog) C:\ProgramData\RHelpers\ChromeHelper\ChromeHelper.exe
(WatchDog) C:\ProgramData\RHelpers\FirefoxHelper\FirefoxHelper.exe
(WatchDog) C:\ProgramData\RHelpers\IeHelper\IeHelper.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
() C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Service.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_9_900_152.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_9_900_152.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [QlbCtrl.exe] - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe [288312 2009-07-27] ( Hewlett-Packard Development Company, L.P.)
HKLM\...\Run: [PDF Complete] - C:\Program Files\PDF Complete\pdfsty.exe [563736 2009-06-18] (PDF Complete Inc)
HKLM\...\Run: [WirelessAssistant] - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [498744 2009-07-23] (Hewlett-Packard)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1545512 2009-07-30] (Synaptics Incorporated)
HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2009-08-04] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray.exe [458844 2009-07-14] (IDT, Inc.)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [681032 2013-10-07] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [SDTray] - C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
HKLM\...\Run: [Updater] - C:\ProgramData\Updater\updater.exe [481144 2013-11-12] (Updater)
HKLM\...\runonceex: [ContentMerger] - c:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\ContentMerger10.exe [19952 2009-06-13] (Sonic Solutions)
Winlogon\Notify\ScCertProp: wlnotify.dll [X]
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
HKCU\...\Run: [LightScribe Control Panel] - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2363392 2009-06-17] (Hewlett-Packard Company)
HKCU\...\Run: [AmazonMP3DownloaderHelper] - C:\Users\Magic\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe
HKCU\...\Run: [Spybot-S&D Cleaning] - C:\Program Files\Spybot - Search & Destroy 2\SDCleaner.exe [3642312 2013-05-16] (Safer-Networking Ltd.)
HKCU\...\Run: [Updater] - C:\ProgramData\Updater\updater.exe [481144 2013-11-12] (Updater)
HKU\Default\...\Run: [HPADVISOR] - C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe [ 2009-07-16] (Hewlett-Packard)
AppInit_DLLs: C:\Program Files\PSupport\psupport.dll [ 2013-10-06] ()
BootExecute: autocheck autochk * sdnclean.exe
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_DE&c=92&bd=all&pf=cmnb
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_DE&c=92&bd=all&pf=cmnb
SearchScopes: HKLM - DefaultScope value is missing.
BHO: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
Toolbar: HKLM - No Name - {0BF43445-2F28-4351-9252-17FE6E806AA0} - No File
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation)
Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 03 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 04 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 05 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 06 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 07 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 08 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 19 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\Magic\AppData\Roaming\Mozilla\Firefox\Profiles\eptn8pod.default
FF NewTab: www.google.de
FF DefaultSearchEngine: user_pref("browser.search.defaultenginename", "");
FF SearchEngineOrder.user_pref("browser.search.order.1", "");: user_pref("browser.search.order.1", "");
FF SearchEngineOrder.user_pref("browser.search.order.1,S", "");: user_pref("browser.search.order.1,S", "");
FF SelectedSearchEngine: user_pref("browser.search.selectedEngine", "");
FF Homepage: www.google.de
FF Keyword.URL: user_pref("keyword.URL", "");
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF32_11_9_900_152.dll ()
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Tube Dimmer - C:\Users\Magic\AppData\Roaming\Mozilla\Firefox\Profiles\eptn8pod.default\Extensions\support@tubedimmerapp.com
FF Extension: Santander Chipcard Plugin - C:\Users\Magic\AppData\Roaming\Mozilla\Firefox\Profiles\eptn8pod.default\Extensions\{fd639891-5cc6-45ae-9055-a7a6abb5a7a9}
FF Extension: testpilot - C:\Users\Magic\AppData\Roaming\Mozilla\Firefox\Profiles\eptn8pod.default\Extensions\testpilot@labs.mozilla.com.xpi
FF Extension: tabmix - C:\Users\Magic\AppData\Roaming\Mozilla\Firefox\Profiles\eptn8pod.default\Extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi
========================== Services (Whitelisted) =================
R2 AgereModemAudio; C:\Program Files\LSI SoftModem\agrsmsvc.exe [14336 2009-07-27] (LSI Corporation)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440392 2013-10-07] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440392 2013-10-07] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1164360 2013-10-07] (Avira Operations GmbH & Co. KG)
R2 HP Health Check Service; C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [124928 2009-07-09] (Hewlett-Packard)
R2 pdfcDispatcher; C:\Program Files\PDF Complete\pdfsvc.exe [635416 2009-06-18] (PDF Complete Inc)
R2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.)
R2 STacSV; C:\windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_b3d7bbbd6875f4bb\STacSV.exe [221266 2009-07-14] (IDT, Inc.)
==================== Drivers (Whitelisted) ====================
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [89376 2013-10-07] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [137208 2013-10-07] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-10-07] (Avira Operations GmbH & Co. KG)
S3 cxbu0wdm; C:\Windows\System32\DRIVERS\cxbu0wdm.sys [126976 2013-08-19] (HID Global Corporation)
R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [31088 2010-12-16] (Elaborate Bytes AG)
S3 MfeAVFK; C:\Windows\System32\drivers\MfeAVFK.sys [79816 2009-05-16] (McAfee, Inc.)
S3 MfeBOPK; C:\Windows\System32\drivers\MfeBOPK.sys [35272 2009-05-16] (McAfee, Inc.)
R1 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [214024 2009-05-16] (McAfee, Inc.)
S3 MfeRKDK; C:\Windows\System32\drivers\MfeRKDK.sys [34248 2009-05-16] (McAfee, Inc.)
R1 mfetdik; C:\Windows\System32\drivers\mfetdik.sys [55336 2009-05-16] (McAfee, Inc.)
S3 NuidFltr; C:\Windows\System32\DRIVERS\NuidFltr.sys [25712 2013-05-13] (Microsoft Corporation)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1765168 2009-07-02] ()
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-11-24 15:04 - 2013-11-24 15:05 - 00012268 _____ C:\Users\Magic\Desktop\FRST.txt
2013-11-24 15:04 - 2013-11-24 15:04 - 00000000 ____D C:\FRST
2013-11-24 15:02 - 2013-11-24 15:02 - 01091525 _____ (Farbar) C:\Users\Magic\Desktop\FRST.exe
2013-11-24 15:00 - 2013-11-24 15:01 - 00000472 _____ C:\Users\Magic\Desktop\defogger_disable.log
2013-11-24 15:00 - 2013-11-24 15:00 - 00000000 _____ C:\Users\Magic\defogger_reenable
2013-11-24 14:58 - 2013-11-24 14:58 - 00050477 _____ C:\Users\Magic\Desktop\Defogger.exe
2013-11-24 14:21 - 2013-11-24 14:21 - 00131072 ____N C:\windows\Minidump\112413-23930-01.dmp
2013-11-24 14:19 - 2013-11-24 14:19 - 00131072 ____N C:\windows\Minidump\112413-22588-01.dmp
2013-11-24 11:10 - 2013-11-24 11:10 - 00131072 ____N C:\windows\Minidump\112413-20529-01.dmp
2013-11-24 09:51 - 2013-11-24 14:21 - 00000000 ____D C:\windows\Minidump
2013-11-24 09:51 - 2013-11-24 09:51 - 00131072 ____N C:\windows\Minidump\112413-19047-01.dmp
2013-11-23 18:27 - 2013-11-23 18:30 - 00000000 ____D C:\AdwCleaner
2013-11-23 18:27 - 2013-11-23 18:27 - 01085542 _____ C:\Users\Magic\Downloads\adwcleaner.exe
2013-11-18 14:37 - 2013-11-18 14:37 - 00000322 _____ C:\windows\PFRO.log
2013-11-17 21:27 - 2013-11-17 21:27 - 00000094 _____ C:\windows\wininit.ini
2013-11-17 16:17 - 2013-11-17 16:18 - 23115760 _____ (Mozilla) C:\Users\Magic\Downloads\Firefox_Setup_25.0.1.exe
2013-11-16 22:43 - 2013-11-24 14:21 - 00001344 _____ C:\windows\setupact.log
2013-11-16 22:43 - 2013-11-16 22:43 - 00000000 _____ C:\windows\setuperr.log
2013-11-15 15:01 - 2013-11-15 15:18 - 00000000 ____D C:\output
2013-11-15 15:01 - 2013-11-15 15:01 - 00000592 _____ C:\Users\Public\Desktop\WAV To MP3.lnk
2013-11-15 15:01 - 2013-11-15 15:01 - 00000000 ____D C:\WAV To MP3
2013-11-15 14:59 - 2013-11-15 14:59 - 03432683 _____ (WAV To MP3 ) C:\Users\Magic\Downloads\wav2mp3v21.exe
2013-11-15 14:42 - 2013-11-23 18:15 - 00000000 ____D C:\Users\Magic\AppData\Roaming\Amazon
2013-11-15 14:41 - 2013-11-23 18:15 - 00000000 ____D C:\Users\Magic\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon
2013-11-15 14:41 - 2013-11-15 14:41 - 00000000 ____D C:\Users\Magic\Documents\Amazon MP3
2013-11-15 14:40 - 2013-11-15 14:40 - 02328864 _____ C:\Users\Magic\Downloads\AmazonMP3DownloaderInstall._V383688031_(1).exe
2013-11-15 14:31 - 2013-11-15 14:31 - 00000000 ____D C:\ProgramData\TubeDimmer
2013-11-15 14:27 - 2013-11-15 14:27 - 00001600 _____ C:\Users\Magic\Downloads\Amazon-MP3-1384521990.amz
2013-11-15 14:25 - 2013-11-15 14:25 - 02328864 _____ C:\Users\Magic\Downloads\AmazonMP3DownloaderInstall._V383688031_.exe
2013-11-15 14:25 - 2013-11-15 14:25 - 00001600 _____ C:\Users\Magic\Downloads\Amazon-MP3-1384521914.amz
2013-11-15 14:22 - 2013-11-15 14:22 - 00000000 ____D C:\Users\Magic\Documents\Amazon Music Importer
2013-11-15 14:22 - 2013-11-15 14:22 - 00000000 ____D C:\Users\Magic\AppData\Roaming\com.amazon.music.uploader
2013-11-15 14:22 - 2013-11-15 14:22 - 00000000 ____D C:\ProgramData\Adobe
2013-11-15 14:21 - 2013-11-15 14:21 - 00001190 _____ C:\Users\Public\Desktop\Amazon Music Importer.lnk
2013-11-15 14:21 - 2013-11-15 14:21 - 00000000 ____D C:\Program Files\Amazon
2013-11-15 14:20 - 2013-11-17 18:21 - 00000000 ____D C:\Users\Magic\AppData\Local\Adobe
2013-11-15 14:20 - 2013-11-15 14:20 - 09629432 _____ C:\Users\Magic\Downloads\AmazonMusicImporterInstaller-2.1.0._V371017662_(1).exe
2013-11-15 14:19 - 2013-11-15 14:20 - 09629432 _____ C:\Users\Magic\Downloads\AmazonMusicImporterInstaller-2.1.0._V371017662_.exe
2013-11-15 14:12 - 2013-11-23 21:19 - 00000000 ____D C:\Users\Magic\AppData\Roaming\Audacity
2013-11-15 14:12 - 2013-11-15 14:12 - 00000969 _____ C:\Users\Public\Desktop\Audacity.lnk
2013-11-15 14:12 - 2013-11-15 14:12 - 00000000 ____D C:\Program Files\Audacity
2013-11-15 14:08 - 2013-11-15 14:09 - 22180353 _____ (Audacity Team ) C:\Users\Magic\Downloads\audacity-win-2.0.5(2).exe
2013-11-15 14:06 - 2013-11-15 14:08 - 22180353 _____ (Audacity Team ) C:\Users\Magic\Downloads\audacity-win-2.0.5.exe
2013-11-15 14:06 - 2013-11-15 14:08 - 22180353 _____ (Audacity Team ) C:\Users\Magic\Downloads\audacity-win-2.0.5(1).exe
2013-11-15 13:58 - 2013-11-15 13:58 - 00001122 _____ C:\Users\Magic\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2013-11-15 13:49 - 2013-11-15 13:49 - 00001224 _____ C:\Users\Magic\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Create Amazing Presentations.lnk
2013-11-15 13:49 - 2013-11-15 13:49 - 00000000 ____D C:\Users\Magic\AppData\Local\emaze
2013-11-15 13:47 - 2013-11-15 13:47 - 00000000 ____D C:\Users\Magic\AppData\Local\Google
2013-11-15 13:46 - 2013-11-15 13:46 - 00000000 ____D C:\ProgramData\Updater
2013-11-15 13:46 - 2013-11-15 13:46 - 00000000 ____D C:\ProgramData\RHelpers
2013-11-15 13:43 - 2013-11-15 13:43 - 02252584 _____ (Premium Installer ) C:\Users\Magic\Downloads\Setup.exe
2013-11-14 14:00 - 2013-11-14 14:00 - 00002718 _____ C:\Users\Magic\Desktop\Weihnachtszauber der Hildesheimer Zauberfreunde - Verknüpfung.lnk
2013-11-14 13:18 - 2013-11-14 13:18 - 00000000 ____D C:\Program Files\PSupport
2013-11-14 13:16 - 2013-11-14 13:16 - 00338472 _____ (Amônétízé Ltd) C:\Users\Magic\Downloads\Hot Butter Popcorn Extended Version 1972.mp3__4150_il5985199.exe
2013-11-14 09:21 - 2013-10-12 08:04 - 00042496 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-11-14 09:21 - 2013-10-12 08:03 - 01767936 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-11-14 09:21 - 2013-10-12 08:03 - 01138176 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-11-14 09:21 - 2013-10-12 08:02 - 14355968 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-11-14 09:21 - 2013-10-12 08:02 - 13761024 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-11-14 09:21 - 2013-10-12 08:02 - 02877952 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-11-14 09:21 - 2013-10-12 08:02 - 02049024 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-11-14 09:21 - 2013-10-12 08:02 - 00690688 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-11-14 09:21 - 2013-10-12 08:02 - 00493056 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-11-14 09:21 - 2013-10-12 08:02 - 00391168 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-11-14 09:21 - 2013-10-12 08:02 - 00109056 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-11-14 09:21 - 2013-10-12 08:02 - 00061440 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-11-14 09:21 - 2013-10-12 08:02 - 00039424 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-11-14 09:21 - 2013-10-12 08:02 - 00033280 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-11-14 09:21 - 2013-10-12 07:08 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-11-14 09:21 - 2013-10-12 06:15 - 00071680 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2013-11-14 09:08 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\windows\system32\nshwfp.dll
2013-11-14 09:08 - 2013-10-12 03:01 - 00679424 _____ (Microsoft Corporation) C:\windows\system32\IKEEXT.DLL
2013-11-14 09:08 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\windows\system32\FWPUCLNT.DLL
2013-11-14 09:08 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\windows\system32\crypt32.dll
2013-11-14 09:08 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\windows\system32\SmartcardCredentialProvider.dll
2013-11-14 09:08 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\windows\system32\authui.dll
2013-11-14 09:08 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\windows\system32\credui.dll
2013-11-14 09:08 - 2013-10-03 02:58 - 00305152 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll
2013-11-14 09:08 - 2013-09-25 03:01 - 00136640 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2013-11-14 09:08 - 2013-09-25 03:01 - 00067520 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2013-11-14 09:08 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2013-11-14 09:08 - 2013-09-25 02:57 - 00099840 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2013-11-14 09:08 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2013-11-14 09:08 - 2013-09-25 02:56 - 01038848 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2013-11-14 09:08 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2013-11-14 09:08 - 2013-09-25 01:49 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2013-11-14 09:08 - 2013-09-25 01:49 - 00015872 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2013-11-14 09:08 - 2013-07-04 13:16 - 00369848 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cng.sys
2013-11-13 19:22 - 2013-11-13 19:25 - 29888288 _____ C:\Users\Magic\Downloads\setupDE(1).exe
2013-11-13 18:13 - 2013-11-13 18:13 - 00000048 _____ C:\MyUpdateLogs.log
2013-11-13 17:57 - 2013-11-13 19:29 - 00000679 _____ C:\InstallHelper.log
2013-11-13 17:56 - 2013-11-13 19:29 - 00002003 _____ C:\Users\Public\Desktop\eBay Turbo Lister 2.lnk
2013-11-13 17:56 - 2013-11-13 17:56 - 00000000 ____D C:\ProgramData\eBay
2013-11-13 17:56 - 2013-11-13 17:56 - 00000000 ____D C:\Program Files\eBay
2013-11-13 17:52 - 2013-11-13 17:55 - 29888288 _____ C:\Users\Magic\Downloads\setupDE.exe
2013-11-11 14:45 - 2013-11-11 14:45 - 01044480 ____R (eHelp Corporation.) C:\windows\system32\roboex32.dll
2013-11-11 14:45 - 2013-11-11 14:45 - 00049152 ____R (Blue Sky Software Corporation.) C:\windows\system32\inetwh32.dll
2013-11-07 19:19 - 2013-11-17 16:19 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-11-05 18:14 - 2013-11-05 18:15 - 04379048 _____ (Piriform Ltd) C:\Users\Magic\Downloads\ccsetup407.exe
2013-11-03 19:02 - 2013-09-04 02:15 - 00258560 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbhub.sys
2013-11-03 19:02 - 2013-09-04 02:14 - 00284672 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbport.sys
2013-11-03 19:02 - 2013-09-04 02:14 - 00076288 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbccgp.sys
2013-11-03 19:02 - 2013-09-04 02:14 - 00043008 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbehci.sys
2013-11-03 19:02 - 2013-09-04 02:14 - 00024064 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbuhci.sys
2013-11-03 19:02 - 2013-09-04 02:14 - 00020480 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbohci.sys
2013-11-03 19:02 - 2013-09-04 02:14 - 00006016 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbd.sys
2013-11-03 12:49 - 2013-11-03 12:49 - 00004960 _____ C:\Users\Magic\Desktop\Cube A Libra - Sympathetic Cubes Magic Trick - Verknüpfung.lnk
2013-10-30 18:46 - 2013-11-23 20:47 - 00000000 ____D C:\Program Files\Mozilla Thunderbird
==================== One Month Modified Files and Folders =======
2013-11-24 15:05 - 2013-11-24 15:04 - 00012268 _____ C:\Users\Magic\Desktop\FRST.txt
2013-11-24 15:04 - 2013-11-24 15:04 - 00000000 ____D C:\FRST
2013-11-24 15:02 - 2013-11-24 15:02 - 01091525 _____ (Farbar) C:\Users\Magic\Desktop\FRST.exe
2013-11-24 15:01 - 2013-11-24 15:00 - 00000472 _____ C:\Users\Magic\Desktop\defogger_disable.log
2013-11-24 15:00 - 2013-11-24 15:00 - 00000000 _____ C:\Users\Magic\defogger_reenable
2013-11-24 15:00 - 2013-08-17 19:19 - 00000000 ____D C:\Users\Magic
2013-11-24 14:58 - 2013-11-24 14:58 - 00050477 _____ C:\Users\Magic\Desktop\Defogger.exe
2013-11-24 14:35 - 2013-10-11 08:27 - 01177231 _____ C:\windows\WindowsUpdate.log
2013-11-24 14:29 - 2009-07-14 05:34 - 00019536 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-24 14:29 - 2009-07-14 05:34 - 00019536 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-24 14:28 - 2013-08-18 07:19 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-11-24 14:21 - 2013-11-24 14:21 - 00131072 ____N C:\windows\Minidump\112413-23930-01.dmp
2013-11-24 14:21 - 2013-11-24 09:51 - 00000000 ____D C:\windows\Minidump
2013-11-24 14:21 - 2013-11-16 22:43 - 00001344 _____ C:\windows\setupact.log
2013-11-24 14:21 - 2009-07-14 05:53 - 00000006 ____H C:\windows\Tasks\SA.DAT
2013-11-24 14:19 - 2013-11-24 14:19 - 00131072 ____N C:\windows\Minidump\112413-22588-01.dmp
2013-11-24 11:10 - 2013-11-24 11:10 - 00131072 ____N C:\windows\Minidump\112413-20529-01.dmp
2013-11-24 09:51 - 2013-11-24 09:51 - 00131072 ____N C:\windows\Minidump\112413-19047-01.dmp
2013-11-24 09:29 - 2009-09-10 08:39 - 00000000 ____D C:\ProgramData\PDFC
2013-11-23 22:22 - 2013-08-17 23:30 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-11-23 21:19 - 2013-11-15 14:12 - 00000000 ____D C:\Users\Magic\AppData\Roaming\Audacity
2013-11-23 20:47 - 2013-10-30 18:46 - 00000000 ____D C:\Program Files\Mozilla Thunderbird
2013-11-23 18:30 - 2013-11-23 18:27 - 00000000 ____D C:\AdwCleaner
2013-11-23 18:27 - 2013-11-23 18:27 - 01085542 _____ C:\Users\Magic\Downloads\adwcleaner.exe
2013-11-23 18:15 - 2013-11-15 14:42 - 00000000 ____D C:\Users\Magic\AppData\Roaming\Amazon
2013-11-23 18:15 - 2013-11-15 14:41 - 00000000 ____D C:\Users\Magic\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon
2013-11-18 14:37 - 2013-11-18 14:37 - 00000322 _____ C:\windows\PFRO.log
2013-11-17 21:27 - 2013-11-17 21:27 - 00000094 _____ C:\windows\wininit.ini
2013-11-17 21:27 - 2013-09-22 16:51 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-11-17 19:58 - 2013-09-22 16:51 - 00000000 ____D C:\Program Files\Spybot - Search & Destroy 2
2013-11-17 19:54 - 2013-09-18 15:00 - 00000000 ____D C:\Users\Magic\Documents\Zauberei
2013-11-17 18:21 - 2013-11-15 14:20 - 00000000 ____D C:\Users\Magic\AppData\Local\Adobe
2013-11-17 18:14 - 2013-08-18 07:19 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerApp.exe
2013-11-17 18:14 - 2013-08-18 07:19 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerCPLApp.cpl
2013-11-17 16:19 - 2013-11-07 19:19 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-11-17 16:19 - 2013-08-17 23:30 - 00001109 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-11-17 16:18 - 2013-11-17 16:17 - 23115760 _____ (Mozilla) C:\Users\Magic\Downloads\Firefox_Setup_25.0.1.exe
2013-11-17 14:55 - 2013-08-18 07:47 - 00000000 ____D C:\Users\Magic\Documents\Briefkopf
2013-11-16 22:43 - 2013-11-16 22:43 - 00000000 _____ C:\windows\setuperr.log
2013-11-16 19:48 - 2009-07-14 03:37 - 00000000 ____D C:\windows\Microsoft.NET
2013-11-15 15:18 - 2013-11-15 15:01 - 00000000 ____D C:\output
2013-11-15 15:01 - 2013-11-15 15:01 - 00000592 _____ C:\Users\Public\Desktop\WAV To MP3.lnk
2013-11-15 15:01 - 2013-11-15 15:01 - 00000000 ____D C:\WAV To MP3
2013-11-15 14:59 - 2013-11-15 14:59 - 03432683 _____ (WAV To MP3 ) C:\Users\Magic\Downloads\wav2mp3v21.exe
2013-11-15 14:41 - 2013-11-15 14:41 - 00000000 ____D C:\Users\Magic\Documents\Amazon MP3
2013-11-15 14:40 - 2013-11-15 14:40 - 02328864 _____ C:\Users\Magic\Downloads\AmazonMP3DownloaderInstall._V383688031_(1).exe
2013-11-15 14:31 - 2013-11-15 14:31 - 00000000 ____D C:\ProgramData\TubeDimmer
2013-11-15 14:27 - 2013-11-15 14:27 - 00001600 _____ C:\Users\Magic\Downloads\Amazon-MP3-1384521990.amz
2013-11-15 14:25 - 2013-11-15 14:25 - 02328864 _____ C:\Users\Magic\Downloads\AmazonMP3DownloaderInstall._V383688031_.exe
2013-11-15 14:25 - 2013-11-15 14:25 - 00001600 _____ C:\Users\Magic\Downloads\Amazon-MP3-1384521914.amz
2013-11-15 14:22 - 2013-11-15 14:22 - 00000000 ____D C:\Users\Magic\Documents\Amazon Music Importer
2013-11-15 14:22 - 2013-11-15 14:22 - 00000000 ____D C:\Users\Magic\AppData\Roaming\com.amazon.music.uploader
2013-11-15 14:22 - 2013-11-15 14:22 - 00000000 ____D C:\ProgramData\Adobe
2013-11-15 14:21 - 2013-11-15 14:21 - 00001190 _____ C:\Users\Public\Desktop\Amazon Music Importer.lnk
2013-11-15 14:21 - 2013-11-15 14:21 - 00000000 ____D C:\Program Files\Amazon
2013-11-15 14:21 - 2013-08-18 07:58 - 00000000 ____D C:\Users\Magic\AppData\Roaming\Adobe
2013-11-15 14:20 - 2013-11-15 14:20 - 09629432 _____ C:\Users\Magic\Downloads\AmazonMusicImporterInstaller-2.1.0._V371017662_(1).exe
2013-11-15 14:20 - 2013-11-15 14:19 - 09629432 _____ C:\Users\Magic\Downloads\AmazonMusicImporterInstaller-2.1.0._V371017662_.exe
2013-11-15 14:12 - 2013-11-15 14:12 - 00000969 _____ C:\Users\Public\Desktop\Audacity.lnk
2013-11-15 14:12 - 2013-11-15 14:12 - 00000000 ____D C:\Program Files\Audacity
2013-11-15 14:09 - 2013-11-15 14:08 - 22180353 _____ (Audacity Team ) C:\Users\Magic\Downloads\audacity-win-2.0.5(2).exe
2013-11-15 14:08 - 2013-11-15 14:06 - 22180353 _____ (Audacity Team ) C:\Users\Magic\Downloads\audacity-win-2.0.5.exe
2013-11-15 14:08 - 2013-11-15 14:06 - 22180353 _____ (Audacity Team ) C:\Users\Magic\Downloads\audacity-win-2.0.5(1).exe
2013-11-15 13:58 - 2013-11-15 13:58 - 00001122 _____ C:\Users\Magic\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2013-11-15 13:55 - 2009-07-14 03:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2013-11-15 13:49 - 2013-11-15 13:49 - 00001224 _____ C:\Users\Magic\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Create Amazing Presentations.lnk
2013-11-15 13:49 - 2013-11-15 13:49 - 00000000 ____D C:\Users\Magic\AppData\Local\emaze
2013-11-15 13:47 - 2013-11-15 13:47 - 00000000 ____D C:\Users\Magic\AppData\Local\Google
2013-11-15 13:46 - 2013-11-15 13:46 - 00000000 ____D C:\ProgramData\Updater
2013-11-15 13:46 - 2013-11-15 13:46 - 00000000 ____D C:\ProgramData\RHelpers
2013-11-15 13:43 - 2013-11-15 13:43 - 02252584 _____ (Premium Installer ) C:\Users\Magic\Downloads\Setup.exe
2013-11-15 11:03 - 2009-07-27 09:31 - 00000000 ____D C:\windows\Panther
2013-11-15 10:02 - 2009-07-14 03:37 - 00000000 ____D C:\windows\rescache
2013-11-14 14:00 - 2013-11-14 14:00 - 00002718 _____ C:\Users\Magic\Desktop\Weihnachtszauber der Hildesheimer Zauberfreunde - Verknüpfung.lnk
2013-11-14 13:18 - 2013-11-14 13:18 - 00000000 ____D C:\Program Files\PSupport
2013-11-14 13:16 - 2013-11-14 13:16 - 00338472 _____ (Amônétízé Ltd) C:\Users\Magic\Downloads\Hot Butter Popcorn Extended Version 1972.mp3__4150_il5985199.exe
2013-11-14 10:32 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\de-DE
2013-11-14 09:23 - 2009-09-10 08:48 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-11-14 09:21 - 2013-08-17 21:42 - 00000000 ____D C:\windows\system32\MRT
2013-11-14 09:19 - 2013-08-17 21:42 - 80340640 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-11-13 19:29 - 2013-11-13 17:57 - 00000679 _____ C:\InstallHelper.log
2013-11-13 19:29 - 2013-11-13 17:56 - 00002003 _____ C:\Users\Public\Desktop\eBay Turbo Lister 2.lnk
2013-11-13 19:25 - 2013-11-13 19:22 - 29888288 _____ C:\Users\Magic\Downloads\setupDE(1).exe
2013-11-13 18:13 - 2013-11-13 18:13 - 00000048 _____ C:\MyUpdateLogs.log
2013-11-13 17:56 - 2013-11-13 17:56 - 00000000 ____D C:\ProgramData\eBay
2013-11-13 17:56 - 2013-11-13 17:56 - 00000000 ____D C:\Program Files\eBay
2013-11-13 17:55 - 2013-11-13 17:52 - 29888288 _____ C:\Users\Magic\Downloads\setupDE.exe
2013-11-13 14:35 - 2009-09-10 08:35 - 01498506 _____ C:\windows\system32\PerfStringBackup.INI
2013-11-13 11:22 - 2013-08-18 07:47 - 00000000 ____D C:\Users\Magic\Documents\GEK
2013-11-13 11:13 - 2013-08-18 07:47 - 00000000 ____D C:\Users\Magic\Documents\Ameos
2013-11-11 14:45 - 2013-11-11 14:45 - 01044480 ____R (eHelp Corporation.) C:\windows\system32\roboex32.dll
2013-11-11 14:45 - 2013-11-11 14:45 - 00049152 ____R (Blue Sky Software Corporation.) C:\windows\system32\inetwh32.dll
2013-11-11 05:50 - 2013-08-18 00:05 - 00230048 ____N (Microsoft Corporation) C:\windows\system32\MpSigStub.exe
2013-11-05 18:15 - 2013-11-05 18:14 - 04379048 _____ (Piriform Ltd) C:\Users\Magic\Downloads\ccsetup407.exe
2013-11-05 18:15 - 2013-09-22 16:43 - 00000969 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-11-05 18:15 - 2013-09-22 16:43 - 00000000 ____D C:\Program Files\CCleaner
2013-11-03 12:49 - 2013-11-03 12:49 - 00004960 _____ C:\Users\Magic\Desktop\Cube A Libra - Sympathetic Cubes Magic Trick - Verknüpfung.lnk
2013-10-31 09:54 - 2013-09-29 12:08 - 00012543 _____ C:\Users\Magic\Documents\Monatszettel.xlsx
2013-10-25 06:50 - 2009-07-14 05:53 - 00032626 _____ C:\windows\Tasks\SCHEDLGU.TXT
Some content of TEMP:
====================
C:\Users\Magic\AppData\Local\Temp\avgnt.exe
C:\Users\Magic\AppData\Local\Temp\Quarantine.exe
C:\Users\Magic\AppData\Local\Temp\setup{D74E843B-4DCB-4D5E-9577-18D8B5BD355D}.exe
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-11-11 17:42
==================== End Of Log ============================
--- --- --- --- --- --- Addition Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 23-11-2013 03
Ran by Magic at 2013-11-24 15:06:28
Running from C:\Users\Magic\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
==================== Installed Programs ======================
ActiveCheck component for HP Active Support Library (Version: 3.0.0.1)
Adobe Flash Player 11 Plugin (Version: 11.9.900.152)
Amazon Music Importer (Version: 2.1.0)
ATI Catalyst Install Manager (Version: 3.0.732.0)
Audacity 2.0.5 (Version: 2.0.5)
Avira Free Antivirus (Version: 14.0.0.383)
Broadcom 802.11 Wireless LAN Adapter (Version: 5.30.21.0)
Catalyst Control Center - Branding (Version: 1.00.0000)
Catalyst Control Center Core Implementation (Version: 2009.0804.1118.18368)
Catalyst Control Center Graphics Full Existing (Version: 2009.0804.1118.18368)
Catalyst Control Center Graphics Full New (Version: 2009.0804.1118.18368)
Catalyst Control Center Graphics Light (Version: 2009.0804.1118.18368)
Catalyst Control Center InstallProxy (Version: 2009.0804.1118.18368)
Catalyst Control Center Localization All (Version: 2009.0804.1118.18368)
CCC Help Chinese Standard (Version: 2009.0804.1117.18368)
CCC Help Chinese Traditional (Version: 2009.0804.1117.18368)
CCC Help Czech (Version: 2009.0804.1117.18368)
CCC Help Danish (Version: 2009.0804.1117.18368)
CCC Help Dutch (Version: 2009.0804.1117.18368)
CCC Help English (Version: 2009.0804.1117.18368)
CCC Help Finnish (Version: 2009.0804.1117.18368)
CCC Help French (Version: 2009.0804.1117.18368)
CCC Help German (Version: 2009.0804.1117.18368)
CCC Help Greek (Version: 2009.0804.1117.18368)
CCC Help Hungarian (Version: 2009.0804.1117.18368)
CCC Help Italian (Version: 2009.0804.1117.18368)
CCC Help Japanese (Version: 2009.0804.1117.18368)
CCC Help Korean (Version: 2009.0804.1117.18368)
CCC Help Norwegian (Version: 2009.0804.1117.18368)
CCC Help Polish (Version: 2009.0804.1117.18368)
CCC Help Portuguese (Version: 2009.0804.1117.18368)
CCC Help Russian (Version: 2009.0804.1117.18368)
CCC Help Spanish (Version: 2009.0804.1117.18368)
CCC Help Swedish (Version: 2009.0804.1117.18368)
CCC Help Thai (Version: 2009.0804.1117.18368)
CCC Help Turkish (Version: 2009.0804.1117.18368)
ccc-core-static (Version: 2009.0804.1118.18368)
ccc-utility (Version: 2009.0804.1118.18368)
CCleaner (Version: 4.07)
Choice Guard (Version: 1.2.87.0)
CloneDVD2 (Version: 2.9.3.0)
CPQ Wallpaper (Version: 1.0.1.1)
DHTML Editing Component (Version: 6.02.0001)
DirectX 9 Runtime (Version: 1.00.0000)
Google Update Helper (Version: 1.3.23.0)
HP Advisor (Version: 3.2.8946.3086)
HP Common Access Service Library (Version: 3.0.28.1)
HP Customer Experience Enhancements (Version: 5.7.0.3036)
HP ESU for Microsoft Windows 7 (Version: 1.0.1.1)
HP Quick Launch Buttons (Version: 6.50.4.2)
HP Setup (Version: 1.2.3215.3078)
HP Software Setup (Version: 1.0.0.15)
HP Support Assistant (Version: 4.1.11.3)
HP User Guides 0133 (Version: 1.02.0001)
HP Web Camera (Version: 1.0.0)
HP Webcam (Version: 1.0)
HP Webcam Driver (Version: 5.8.50008.0)
HP Wireless Assistant (Version: 3.50.9.1)
HPAsset component for HP Active Support Library (Version: 3.0.0.2)
IDT Audio (Version: 1.0.6222.0)
LightScribe System Software (Version: 1.18.6.1)
LSI HDA Modem (Version: 2.1.94)
Marvell Miniport Driver (Version: 10.70.5.3)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Home and Student 2007 (Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1)
Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft-Maus- und Tastatur-Center (Version: 2.2.173.0)
MozBackup 1.5.1
Mozilla Firefox 25.0.1 (x86 de) (Version: 25.0.1)
Mozilla Maintenance Service (Version: 24.1.1)
Mozilla Thunderbird 24.1.1 (x86 de) (Version: 24.1.1)
MSVCRT (Version: 14.0.1468.721)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
PDF Complete Special Edition (Version: 3.5.108)
PokerStars.eu
QLBCASL (Version: 6.40.17.2)
Roxio Activation Module (Version: 1.0)
Roxio Creator Audio (Version: 3.8.0)
Roxio Creator Business (Version: 10.3)
Roxio Creator Business v10 (Version: 3.8.0)
Roxio Creator Copy (Version: 3.8.0)
Roxio Creator Data (Version: 3.8.0)
Roxio Creator Tools (Version: 3.8.0)
Roxio Express Labeler 3 (Version: 3.2.2)
Roxio MyDVD (Version: 10.3.349)
Sonic CinePlayer Decoder Pack (Version: 4.3.0)
Spybot - Search & Destroy (Version: 2.1.21)
Synaptics Pointing Device Driver (Version: 13.2.6.2)
Turbo Lister 2 (Version: 2.00.0000)
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (Version: 3)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition
Update für Microsoft Office Excel 2007 Help (KB963678)
Update für Microsoft Office Powerpoint 2007 Help (KB963669)
Update für Microsoft Office Word 2007 Help (KB963665)
Updater (Version: 2.6.48)
WAV To MP3 V2
Windows 7 Default Setting (Version: 1.0.0.6)
Windows Live Anmelde-Assistent (Version: 5.000.818.6)
Windows Live Call (Version: 14.0.8050.1202)
Windows Live Communications Platform (Version: 14.0.8050.1202)
Windows Live Essentials (Version: 14.0.8050.1202)
Windows Live Messenger (Version: 14.0.8050.1202)
Windows Live-Uploadtool (Version: 14.0.8014.1029)
==================== Restore Points =========================
10-10-2013 14:03:36 Windows Update
15-10-2013 12:44:37 Windows Update
18-10-2013 15:38:22 Windows Update
22-10-2013 11:36:00 Windows Update
26-10-2013 20:27:37 Windows Update
01-11-2013 15:54:05 Windows Update
03-11-2013 18:55:00 Windows Update
08-11-2013 16:18:31 Windows Update
12-11-2013 13:21:00 Windows Update
13-11-2013 16:56:13 Turbo Lister 2 wurde installiert.
14-11-2013 08:18:47 Windows Update
15-11-2013 12:51:24 Microsoft Visual Studio 2010 Tools for Office Runtime (x86) wird installiert
15-11-2013 13:03:53 Removed Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
15-11-2013 13:04:36 Removed Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
20-11-2013 16:32:26 Windows Update
==================== Hosts content: ==========================
2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {24A7F1AC-7045-4308-89C9-F1E9F90F8080} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation)
Task: {26716D12-AA3C-487A-AEDB-6FB6E97904C0} - System32\Tasks\Hewlett-Packard\HP Assistant\PC Tuneup => C:\Program Files\Hewlett-Packard\HP Support Framework\HPSF.exe [2009-07-09] (Hewlett-Packard)
Task: {3BEC8E00-291E-4DA2-AAC1-8D3408BE3D36} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-11-17] (Adobe Systems Incorporated)
Task: {42343CB5-C98E-444E-93F2-E122AFBADFB7} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\MouseKeyboardCenter.exe [2013-05-13] (Microsoft)
Task: {63767374-1258-4476-B239-FB471BB8BE24} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-20] (Microsoft Corporation)
Task: {760D665B-04D8-47AA-8E6B-D8C589C59A7C} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files\Spybot - Search & Destroy 2\SDScan.exe
Task: {7C480968-E5D3-4103-B43A-1969EB82B3D4} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-10-22] (Piriform Ltd)
Task: {96BE79AA-8648-4284-AAE7-40211704FD89} - System32\Tasks\Registration => C:\Program Files\Hewlett-Packard\HP TCS\RemEngine.exe [2009-07-07] ()
Task: {9B8D47E4-5DFA-4000-AD55-64A1D865C66F} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation)
Task: {B3FC7506-8974-4D90-97E4-BD0946FD2F5A} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)
Task: {B5CFC74E-EB9B-4A30-A1B9-5F5A5A8B8D03} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files\Spybot - Search & Destroy 2\SDImmunize.exe
Task: {B7F627C4-4C81-4F9E-A7AD-214178A3F717} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe
Task: {C4416D5C-C68D-45BD-82E2-4CC08291D1C6} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)
Task: {C9C29D26-E0C1-4E25-9F19-B887B52FCEF5} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-11] (Microsoft Corporation)
Task: {FA413613-77DC-499F-918F-F744296EDE77} - System32\Tasks\Hewlett-Packard\HP Assistant\PC Health Analysis => C:\Program Files\Hewlett-Packard\HP Support Framework\HPSF.exe [2009-07-09] (Hewlett-Packard)
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Loaded Modules (whitelisted) =============
2013-09-22 16:51 - 2013-05-16 09:55 - 00113496 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2013-09-22 16:51 - 2013-05-16 09:55 - 00416600 _____ () C:\Program Files\Spybot - Search & Destroy 2\DEC150.bpl
2009-06-17 19:40 - 2009-06-17 19:40 - 02121728 _____ () C:\Program Files\Common Files\LightScribe\QtCore4.dll
2009-06-17 19:40 - 2009-06-17 19:40 - 07745536 _____ () C:\Program Files\Common Files\LightScribe\QtGui4.dll
2009-06-17 19:40 - 2009-06-17 19:40 - 00135168 _____ () C:\Program Files\Common Files\LightScribe\plugins\imageformats\qjpeg4.dll
2013-10-06 14:49 - 2013-10-06 14:49 - 00857600 _____ () C:\Program Files\PSupport\psupport.dll
2013-11-07 19:19 - 2013-11-13 04:39 - 03363952 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
2008-12-18 23:03 - 2008-12-18 23:03 - 00020480 ____R () C:\Program Files\ATI Technologies\ATI.ACE\Branding\Branding.dll
2013-08-18 04:09 - 2013-08-18 04:09 - 00270336 _____ () C:\windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2013-11-17 18:14 - 2013-11-17 18:14 - 16237448 _____ () C:\windows\system32\Macromed\Flash\NPSWF32_11_9_900_152.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (11/24/2013 11:14:46 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: firefox.exe, Version: 25.0.1.5064, Zeitstempel: 0x5282f204
Name des fehlerhaften Moduls: xul.dll, Version: 25.0.1.5064, Zeitstempel: 0x5282f10e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00118f87
ID des fehlerhaften Prozesses: 0x16ac
Startzeit der fehlerhaften Anwendung: 0xfirefox.exe0
Pfad der fehlerhaften Anwendung: firefox.exe1
Pfad des fehlerhaften Moduls: firefox.exe2
Berichtskennung: firefox.exe3
Error: (11/18/2013 05:20:23 PM) (Source: Application Error) (User: )
Description: Aus einem der folgenden Gründe kann nicht auf die Datei "" zugegriffen werden:
Es besteht ein Problem mit der Netzwerkverbindung, dem Datenträger mit der gespeicherten Datei bzw. den auf dem Computer installierten
Speichertreibern, oder der Datenträger fehlt.
Das Programm Updater service wurde wegen dieses Fehlers geschlossen.
Programm: Updater service
Datei:
Der Fehlerwert ist im Abschnitt "Zusätzliche Dateien" aufgelistet.
Benutzeraktion
1. Öffnen Sie die Datei erneut.
Diese Situation ist eventuell ein temporäres Problem, das selbstständig behoben wird, wenn das Programm erneut ausgeführt wird.
2.
Wenn Sie weiterhin nicht auf die Datei zugreifen können und
- diese sich im Netzwerk befindet,
dann sollte der Netzwerkadministrator überprüfen, dass kein Netzwerkproblem besteht und dass eine Verbindung mit dem Server hergestellt werden kann.
- diese sich auf einem Wechseldatenträger, wie z. B. einer Diskette oder einer CD, befindet, überprüfen Sie, ob der Datenträger richtig in den Computer eingelegt ist.
3. Überprüfen und reparieren Sie das Dateisystem, indem Sie CHKDSK ausführen. Klicken Sie dazu im Menü "Start" auf "Ausführen", geben Sie CMD ein, und klicken Sie auf "OK". Geben Sie an der Eingabeaufforderung CHKDSK /F ein, und drücken Sie die EINGABETASTE.
4. Stellen Sie die Datei von einer Sicherungskopie wieder her, wenn das Problem weiterhin besteht.
5. Überprüfen Sie, ob andere Dateien auf demselben Datenträger geöffnet werden können. Falls dies nicht möglich ist, ist der Datenträger eventuell beschädigt.
Wenden Sie sich an den Administrator oder den Hersteller der Computerhardware, um weitere Unterstützung zu erhalten, wenn es sich um eine Festplatte handelt.
Zusätzliche Daten
Fehlerwert: 00000000
Datenträgertyp: 0
Error: (11/18/2013 05:20:23 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: updater.exe, Version: 1.0.0.1, Zeitstempel: 0x5282768b
Name des fehlerhaften Moduls: ole32.DLL, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b96f
Ausnahmecode: 0xc0000096
Fehleroffset: 0x000485fe
ID des fehlerhaften Prozesses: 0x9b4
Startzeit der fehlerhaften Anwendung: 0xupdater.exe0
Pfad der fehlerhaften Anwendung: updater.exe1
Pfad des fehlerhaften Moduls: updater.exe2
Berichtskennung: updater.exe3
Error: (11/15/2013 00:29:39 PM) (Source: Application Hang) (User: )
Description: Programm wmplayer.exe, Version 12.0.7601.17514 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 4ac
Startzeit: 01cee1f5d84e1413
Endzeit: 32
Anwendungspfad: C:\Program Files\Windows Media Player\wmplayer.exe
Berichts-ID: 33177fb6-4de9-11e3-84ef-18a905e6f6ba
Error: (11/15/2013 09:37:20 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: firefox.exe, Version: 25.0.0.5046, Zeitstempel: 0x526b1e27
Name des fehlerhaften Moduls: xul.dll, Version: 25.0.0.5046, Zeitstempel: 0x526b1d27
Ausnahmecode: 0xc0000005
Fehleroffset: 0x001157e7
ID des fehlerhaften Prozesses: 0xdec
Startzeit der fehlerhaften Anwendung: 0xfirefox.exe0
Pfad der fehlerhaften Anwendung: firefox.exe1
Pfad des fehlerhaften Moduls: firefox.exe2
Berichtskennung: firefox.exe3
Error: (11/13/2013 05:56:55 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC90.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.30729.4148"1".
Die abhängige Assemblierung "Microsoft.VC90.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.30729.4148"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (11/13/2013 05:56:55 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC90.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.30729.4148"1".
Die abhängige Assemblierung "Microsoft.VC90.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.30729.4148"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (11/05/2013 06:16:19 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: firefox.exe, Version: 24.0.0.5001, Zeitstempel: 0x522fd29f
Name des fehlerhaften Moduls: xul.dll, Version: 24.0.0.5001, Zeitstempel: 0x522fd1a4
Ausnahmecode: 0xc0000005
Fehleroffset: 0x001b72a8
ID des fehlerhaften Prozesses: 0x374
Startzeit der fehlerhaften Anwendung: 0xfirefox.exe0
Pfad der fehlerhaften Anwendung: firefox.exe1
Pfad des fehlerhaften Moduls: firefox.exe2
Berichtskennung: firefox.exe3
Error: (11/02/2013 01:50:51 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: SDTray.exe, Version: 2.1.21.129, Zeitstempel: 0x51f0ed9e
Name des fehlerhaften Moduls: dhcpcsvc.DLL_unloaded, Version: 0.0.0.0, Zeitstempel: 0x4a5bd9b5
Ausnahmecode: 0xc0000005
Fehleroffset: 0x73001b2d
ID des fehlerhaften Prozesses: 0x8b0
Startzeit der fehlerhaften Anwendung: 0xSDTray.exe0
Pfad der fehlerhaften Anwendung: SDTray.exe1
Pfad des fehlerhaften Moduls: SDTray.exe2
Berichtskennung: SDTray.exe3
Error: (10/01/2013 03:19:48 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: firefox.exe, Version: 23.0.1.4974, Zeitstempel: 0x520bc252
Name des fehlerhaften Moduls: xul.dll, Version: 23.0.1.4974, Zeitstempel: 0x520bc166
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0017af08
ID des fehlerhaften Prozesses: 0x474
Startzeit der fehlerhaften Anwendung: 0xfirefox.exe0
Pfad der fehlerhaften Anwendung: firefox.exe1
Pfad des fehlerhaften Moduls: firefox.exe2
Berichtskennung: firefox.exe3
System errors:
=============
Error: (11/24/2013 02:22:28 PM) (Source: Microsoft-Windows-WHEA-Logger) (User: NT-AUTORITÄT)
Description: Schwerwiegender Hardwarefehler.
Gemeldet von Komponente: Prozessorkern
Fehlerquelle: 3
Fehlertyp: 256
Prozessor-ID: 1
Die Detailansicht dieses Eintrags beinhaltet weitere Informationen.
Error: (11/24/2013 02:22:28 PM) (Source: Microsoft-Windows-WHEA-Logger) (User: NT-AUTORITÄT)
Description: Schwerwiegender Hardwarefehler.
Gemeldet von Komponente: Prozessorkern
Fehlerquelle: 3
Fehlertyp: 256
Prozessor-ID: 1
Die Detailansicht dieses Eintrags beinhaltet weitere Informationen.
Error: (11/24/2013 02:22:28 PM) (Source: Microsoft-Windows-WHEA-Logger) (User: NT-AUTORITÄT)
Description: Schwerwiegender Hardwarefehler.
Gemeldet von Komponente: Prozessorkern
Fehlerquelle: 3
Fehlertyp: 11
Prozessor-ID: 0
Die Detailansicht dieses Eintrags beinhaltet weitere Informationen.
Error: (11/24/2013 02:21:51 PM) (Source: atikmdag) (User: )
Description: Display is not active
Error: (11/24/2013 02:21:51 PM) (Source: atikmdag) (User: )
Description: CPLIB :: General - Invalid Parameter
Error: (11/24/2013 02:21:54 PM) (Source: SCardSvr) (User: )
Description: Das System kann den angegebenen Pfad nicht finden.
Error: (11/24/2013 02:21:54 PM) (Source: SCardSvr) (User: )
Description: Das System kann den angegebenen Pfad nicht finden.
Error: (11/24/2013 02:21:54 PM) (Source: SCardSvr) (User: )
Description: Das System kann den angegebenen Pfad nicht finden.
Error: (11/24/2013 02:21:54 PM) (Source: SCardSvr) (User: )
Description: Das System kann den angegebenen Pfad nicht finden.
Error: (11/24/2013 02:21:54 PM) (Source: SCardSvr) (User: )
Description: Das System kann den angegebenen Pfad nicht finden.
Microsoft Office Sessions:
=========================
==================== Memory info ===========================
Percentage of memory in use: 52%
Total physical RAM: 1788.87 MB
Available physical RAM: 850.08 MB
Total Pagefile: 3577.73 MB
Available Pagefile: 2083.18 MB
Total Virtual: 2047.88 MB
Available Virtual: 1899.81 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:280.8 GB) (Free:213.87 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive e: (HP_TOOLS) (Fixed) (Total:1.99 GB) (Free:1.99 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: FE3476BB)
Partition 1: (Active) - (Size=300 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=281 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=15 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=2 GB) - (Type=0C)
==================== End Of Log ============================
Gmer Code:
ATTFilter GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-11-24 15:26:30
Windows 6.1.7601 Service Pack 1 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 WDC_WD3200BEKT-60V5T1 rev.12.01A12 298,09GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\Magic\AppData\Local\Temp\pgloypod.sys
---- System - GMER 2.1 ----
SSDT 8EC48A46 ZwCreateSection
SSDT 8EC48A50 ZwRequestWaitReplyPort
SSDT 8EC48A4B ZwSetContextThread
SSDT 8EC48A55 ZwSetSecurityObject
SSDT 8EC48A5A ZwSystemDebugControl
SSDT 8EC489E7 ZwTerminateProcess
---- Kernel code sections - GMER 2.1 ----
.text ntkrnlpa.exe!ZwRollbackEnlistment + 142D 82C8BA15 1 Byte [06]
.text ntkrnlpa.exe!KiDispatchInterrupt + 5A2 82CC5212 19 Bytes [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}
.text ntkrnlpa.exe!KeRemoveQueueEx + 11F7 82CCC58C 4 Bytes [46, 8A, C4, 8E]
.text ntkrnlpa.exe!KeRemoveQueueEx + 1553 82CCC8E8 4 Bytes [50, 8A, C4, 8E]
.text ntkrnlpa.exe!KeRemoveQueueEx + 1597 82CCC92C 4 Bytes [4B, 8A, C4, 8E]
.text ntkrnlpa.exe!KeRemoveQueueEx + 1613 82CCC9A8 4 Bytes [55, 8A, C4, 8E]
.text ntkrnlpa.exe!KeRemoveQueueEx + 1667 82CCC9FC 4 Bytes [5A, 8A, C4, 8E]
.text ...
.text C:\windows\system32\DRIVERS\atikmdag.sys section is writeable [0x8F603000, 0x2D51CE, 0xE8000020]
---- Devices - GMER 2.1 ----
AttachedDevice \Driver\kbdclass \Device\KeyboardClass0 Wdf01000.sys
AttachedDevice \Driver\kbdclass \Device\KeyboardClass1 Wdf01000.sys
AttachedDevice \Driver\tdx \Device\Tcp mfetdik.sys
AttachedDevice \Driver\tdx \Device\Udp mfetdik.sys
AttachedDevice \FileSystem\fastfat \Fat fltmgr.sys
---- EOF - GMER 2.1 ----
 |
| Themen zu Firefox: Tab mit Werbung öffnen sich ständig |
| aktion, branding, ccsetup, dankbar, device driver, firefox, hilfe, hilfe!, inter, interne, internetseite, internetseiten, launch, minidump, neuer, newtab, pup.optional.ibryte, pup.optional.installmonetizer, pup.optional.searchagent, pup.optional.searchdonkey.a, pup.optional.sprotect.a, refresh, seite, seiten, tab, trick, trojan.agent, umfrage, werbung, öffnen, öffnet |
Baum-Darstellung