![]() |
|
Log-Analyse und Auswertung: PUP.Optional.Installcore.a - Probleme mit dem Laptop-TouchpadWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #2 |
| ![]() PUP.Optional.Installcore.a - Probleme mit dem Laptop-Touchpad Übrigens kann ich jetzt plötzlich scrollen (ich denke sowieso das hat nichts mit der Malware zu tun).
__________________FRST (Part2) Code:
ATTFilter 2013-11-27 15:21 - 2013-11-27 15:21 - 00000000 ____D C:\Users\XXXX\AppData\Local\Secunia PSI 2013-11-27 15:21 - 2013-11-27 15:21 - 00000000 ____D C:\Program Files (x86)\Secunia 2013-11-27 15:19 - 2013-11-27 15:19 - 03865488 _____ (Secunia) C:\Users\XXXX\Downloads\PSI9015Setup.exe 2013-11-27 15:15 - 2013-11-27 15:15 - 00000000 ____D C:\Users\XXXX\AppData\Local\Macromedia 2013-11-27 15:14 - 2013-11-27 15:15 - 00000000 ____D C:\Users\XXXX\AppData\Local\Adobe 2013-11-27 14:44 - 2013-11-27 14:44 - 00000117 _____ C:\WINDOWS\system32\netcfg-77308526.txt 2013-11-27 14:44 - 2013-11-27 14:44 - 00000117 _____ C:\WINDOWS\system32\netcfg-77308292.txt 2013-11-26 22:40 - 2013-11-26 22:40 - 00000117 _____ C:\WINDOWS\system32\netcfg-19475991.txt 2013-11-26 22:40 - 2013-11-26 22:40 - 00000117 _____ C:\WINDOWS\system32\netcfg-19475695.txt 2013-11-26 20:14 - 2013-11-26 20:14 - 00000117 _____ C:\WINDOWS\system32\netcfg-10662465.txt 2013-11-26 20:14 - 2013-11-26 20:14 - 00000117 _____ C:\WINDOWS\system32\netcfg-10662153.txt 2013-11-26 18:10 - 2013-11-26 18:10 - 00001087 _____ C:\Users\Public\Desktop\SpywareBlaster.lnk 2013-11-26 18:10 - 2013-11-26 18:10 - 00000000 ____D C:\ProgramData\Licenses 2013-11-26 18:10 - 2013-11-26 18:10 - 00000000 ____D C:\Program Files (x86)\SpywareBlaster 2013-11-26 18:10 - 2011-11-04 05:13 - 01070352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSCOMCTL.OCX 2013-11-26 18:10 - 2009-03-24 12:52 - 00129872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSSTDFMT.DLL 2013-11-26 18:08 - 2013-11-26 18:08 - 00000000 ____D C:\Users\XXXX\AppData\Roaming\AVAST Software 2013-11-26 18:07 - 2013-11-26 18:07 - 04095448 _____ (BrightFort LLC ) C:\Users\XXXX\Downloads\spywareblastersetup50.exe 2013-11-26 18:07 - 2013-11-26 18:07 - 00001970 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2013-11-26 18:06 - 2013-12-05 09:17 - 00004182 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update 2013-11-26 18:06 - 2013-11-26 18:06 - 01032416 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys 2013-11-26 18:06 - 2013-11-26 18:06 - 00409832 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys 2013-11-26 18:06 - 2013-11-26 18:06 - 00334648 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe 2013-11-26 18:06 - 2013-11-26 18:06 - 00205320 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys 2013-11-26 18:06 - 2013-11-26 18:06 - 00092544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys 2013-11-26 18:06 - 2013-11-26 18:06 - 00084328 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys 2013-11-26 18:06 - 2013-11-26 18:06 - 00065776 _____ C:\WINDOWS\system32\Drivers\aswRvrt.sys 2013-11-26 18:06 - 2013-11-26 18:06 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr 2013-11-26 18:06 - 2013-11-26 18:06 - 00038984 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswFsBlk.sys 2013-11-26 17:56 - 2013-11-26 17:56 - 00000000 ____D C:\Program Files\AVAST Software 2013-11-26 17:55 - 2013-11-26 17:55 - 04733496 _____ (AVAST Software) C:\Users\XXXX\Downloads\avast_free_antivirus_setup_online_fdi-c.exe 2013-11-26 17:55 - 2013-11-26 17:55 - 00000000 ____D C:\ProgramData\AVAST Software 2013-11-26 17:54 - 2013-11-27 15:08 - 00000000 ____D C:\Users\XXXX\AppData\Local\Mozilla 2013-11-26 17:54 - 2013-11-26 17:54 - 00000000 ____D C:\Users\XXXX\AppData\Roaming\Mozilla 2013-11-26 17:54 - 2013-11-26 17:54 - 00000000 ____D C:\ProgramData\Mozilla 2013-11-26 17:48 - 2013-12-14 23:30 - 00003600 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2895581597-4197396578-4116386622-1001 2013-11-26 17:44 - 2013-11-26 17:44 - 00000000 ____D C:\Users\XXXX\AppData\Roaming\Macromedia 2013-11-26 17:42 - 2013-11-28 14:32 - 00000000 ___RD C:\Users\XXXX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-11-26 17:42 - 2013-11-28 14:32 - 00000000 ___RD C:\Users\XXXX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2013-11-26 17:42 - 2013-11-26 17:42 - 00001446 _____ C:\Users\XXXX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-11-26 17:42 - 2013-11-26 17:42 - 00000000 ____D C:\Users\XXXX\AppData\Roaming\Adobe 2013-11-26 17:41 - 2013-12-16 12:29 - 02023731 _____ C:\WINDOWS\WindowsUpdate.log 2013-11-26 17:41 - 2013-12-14 21:36 - 00000000 ____D C:\Users\XXXX\AppData\Local\Packages 2013-11-26 17:41 - 2013-12-01 11:29 - 00000000 ____D C:\Users\XXXX 2013-11-26 17:41 - 2013-11-27 17:57 - 00000000 ____D C:\ProgramData\PRICache 2013-11-26 17:41 - 2013-11-26 17:41 - 00000020 ___SH C:\Users\XXXX\ntuser.ini 2013-11-26 17:41 - 2013-11-26 17:41 - 00000000 _SHDL C:\Users\XXXX\Vorlagen 2013-11-26 17:41 - 2013-11-26 17:41 - 00000000 _SHDL C:\Users\XXXX\Startmenü 2013-11-26 17:41 - 2013-11-26 17:41 - 00000000 _SHDL C:\Users\XXXX\Netzwerkumgebung 2013-11-26 17:41 - 2013-11-26 17:41 - 00000000 _SHDL C:\Users\XXXX\Lokale Einstellungen 2013-11-26 17:41 - 2013-11-26 17:41 - 00000000 _SHDL C:\Users\XXXX\Eigene Dateien 2013-11-26 17:41 - 2013-11-26 17:41 - 00000000 _SHDL C:\Users\XXXX\Druckumgebung 2013-11-26 17:41 - 2013-11-26 17:41 - 00000000 _SHDL C:\Users\XXXX\Documents\Eigene Musik 2013-11-26 17:41 - 2013-11-26 17:41 - 00000000 _SHDL C:\Users\XXXX\Documents\Eigene Bilder 2013-11-26 17:41 - 2013-11-26 17:41 - 00000000 _SHDL C:\Users\XXXX\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-11-26 17:41 - 2013-11-26 17:41 - 00000000 _SHDL C:\Users\XXXX\AppData\Local\Verlauf 2013-11-26 17:41 - 2013-11-26 17:41 - 00000000 _SHDL C:\Users\XXXX\AppData\Local\Anwendungsdaten 2013-11-26 17:41 - 2013-11-26 17:41 - 00000000 _SHDL C:\Users\XXXX\Anwendungsdaten 2013-11-26 17:41 - 2013-11-26 17:41 - 00000000 ____D C:\Users\XXXX\AppData\Local\VirtualStore 2013-11-26 17:41 - 2012-07-26 09:13 - 00000000 ___RD C:\Users\XXXX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2013-11-26 17:41 - 2012-07-26 09:13 - 00000000 ___RD C:\Users\XXXX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2013-11-26 17:41 - 2012-07-26 09:13 - 00000000 ___RD C:\Users\XXXX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2013-11-26 17:41 - 2012-07-26 09:13 - 00000000 ____D C:\Users\XXXX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2013-11-26 17:39 - 2013-11-26 17:39 - 00000000 ____D C:\WINDOWS\CSC 2013-11-26 17:38 - 2013-11-26 17:38 - 00000117 _____ C:\WINDOWS\system32\netcfg-1340844.txt 2013-11-26 17:38 - 2013-11-26 17:38 - 00000117 _____ C:\WINDOWS\system32\netcfg-1340656.txt 2013-11-26 17:38 - 2013-11-26 17:38 - 00000117 _____ C:\WINDOWS\system32\netcfg-1340048.txt 2013-11-26 17:38 - 2013-11-26 17:38 - 00000117 _____ C:\WINDOWS\system32\netcfg-1336928.txt 2013-11-26 17:37 - 2013-11-26 17:37 - 00001139 _____ C:\WINDOWS\system32\netcfg-1247181.txt 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\Users\Default\Vorlagen 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\Users\Default\Startmenü 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\Users\Default\Eigene Dateien 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\Users\Default\Druckumgebung 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\Programme 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\ProgramData\Vorlagen 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\ProgramData\Startmenü 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\ProgramData\Dokumente 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\Dokumente und Einstellungen 2013-11-26 17:13 - 2013-11-26 17:13 - 00001135 _____ C:\WINDOWS\system32\netcfg-163239.txt 2013-11-26 17:13 - 2013-11-26 17:13 - 00000196 _____ C:\WINDOWS\system32\netcfg-164315.txt 2013-11-26 17:13 - 2013-11-26 17:13 - 00000185 _____ C:\WINDOWS\system32\netcfg-162085.txt 2013-11-26 17:13 - 2013-11-26 17:13 - 00000161 _____ C:\WINDOWS\system32\netcfg-158356.txt 2013-11-26 17:12 - 2013-11-26 17:12 - 00000164 _____ C:\WINDOWS\system32\netcfg-155470.txt 2013-11-26 17:12 - 2013-11-26 17:12 - 00000160 _____ C:\WINDOWS\system32\netcfg-157732.txt 2013-11-26 17:12 - 2013-11-26 17:12 - 00000160 _____ C:\WINDOWS\system32\netcfg-156687.txt 2013-11-26 17:12 - 2013-11-26 17:12 - 00000160 _____ C:\WINDOWS\system32\netcfg-148138.txt 2013-11-26 17:12 - 2013-11-26 17:12 - 00000159 _____ C:\WINDOWS\system32\netcfg-156141.txt 2013-11-26 17:12 - 2013-11-26 17:12 - 00000157 _____ C:\WINDOWS\system32\netcfg-157139.txt 2013-11-26 17:12 - 2013-11-26 17:12 - 00000157 _____ C:\WINDOWS\system32\netcfg-154628.txt 2013-11-26 17:12 - 2013-11-26 17:12 - 00000150 _____ C:\WINDOWS\system32\netcfg-155002.txt 2013-11-26 17:12 - 2013-11-26 17:12 - 00000000 _____ C:\WINDOWS\system32\atiicdxx.dat 2013-11-26 17:12 - 2013-11-26 17:12 - 00000000 _____ C:\WINDOWS\ativpsrm.bin 2013-11-26 17:11 - 2013-11-26 17:11 - 00001134 _____ C:\WINDOWS\system32\netcfg-81245.txt 2013-11-26 17:10 - 2013-12-04 23:32 - 00002922 _____ C:\WINDOWS\PFRO.log 2013-11-26 17:10 - 2013-11-26 17:41 - 00000000 ____D C:\WINDOWS\Panther 2013-11-26 17:10 - 2013-11-26 17:10 - 00000000 _____ C:\Recovery.txt ==================== One Month Modified Files and Folders ======= 2013-12-16 13:59 - 2013-12-16 13:59 - 00009002 _____ C:\Users\XXXX\Desktop\FRST.txt 2013-12-16 13:59 - 2013-12-16 13:59 - 00000000 ____D C:\FRST 2013-12-16 13:55 - 2013-12-16 13:55 - 01927940 _____ (Farbar) C:\Users\XXXX\Desktop\FRST64.exe 2013-12-16 13:00 - 2012-07-26 09:12 - 00000000 ____D C:\WINDOWS\system32\sru 2013-12-16 12:44 - 2013-12-16 12:44 - 00000000 ____D C:\Users\XXXX\AppData\Roaming\Malwarebytes 2013-12-16 12:43 - 2013-12-16 12:43 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\XXXX\Downloads\mbam-setup-1.75.0.1300.exe 2013-12-16 12:43 - 2013-12-16 12:43 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-12-16 12:43 - 2013-12-16 12:43 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-12-16 12:37 - 2013-12-16 12:37 - 00001155 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2013-12-16 12:37 - 2013-12-16 12:37 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-12-16 12:37 - 2013-12-16 12:37 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-12-16 12:35 - 2013-12-16 12:35 - 00283096 _____ (Mozilla) C:\Users\XXXX\Downloads\Firefox Setup Stub 26.0.exe 2013-12-16 12:29 - 2013-11-26 17:41 - 02023731 _____ C:\WINDOWS\WindowsUpdate.log 2013-12-14 23:42 - 2012-07-26 09:12 - 00000000 ____D C:\WINDOWS\rescache 2013-12-14 23:30 - 2013-11-26 17:48 - 00003600 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2895581597-4197396578-4116386622-1001 2013-12-14 21:36 - 2013-11-26 17:41 - 00000000 ____D C:\Users\XXXX\AppData\Local\Packages 2013-12-14 21:36 - 2012-07-26 09:12 - 00000000 ____D C:\WINDOWS\AUInstallAgent 2013-12-14 21:31 - 2012-07-26 11:27 - 00715482 _____ C:\WINDOWS\system32\perfh007.dat 2013-12-14 21:31 - 2012-07-26 11:27 - 00148046 _____ C:\WINDOWS\system32\perfc007.dat 2013-12-14 21:31 - 2012-07-26 08:28 - 01654648 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2013-12-14 21:27 - 2012-07-26 08:22 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2013-12-14 21:25 - 2012-07-26 09:12 - 00000000 ____D C:\WINDOWS\system32\SecureBootUpdates 2013-12-14 21:25 - 2012-07-26 06:26 - 00262144 ___SH C:\WINDOWS\system32\config\BBI 2013-12-14 21:24 - 2013-11-27 16:43 - 00000000 ____D C:\WINDOWS\system32\MRT 2013-12-14 21:23 - 2013-11-27 16:43 - 90708896 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2013-12-11 21:15 - 2012-07-26 06:38 - 00000000 ____D C:\WINDOWS\system32\oobe 2013-12-10 22:27 - 2013-12-10 22:27 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf 2013-12-10 22:27 - 2012-07-26 08:21 - 00020098 _____ C:\WINDOWS\setupact.log 2013-12-09 19:34 - 2013-12-09 19:34 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf 2013-12-09 15:47 - 2013-12-09 15:47 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf 2013-12-05 09:17 - 2013-11-26 18:06 - 00004182 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update 2013-12-04 23:32 - 2013-11-26 17:10 - 00002922 _____ C:\WINDOWS\PFRO.log 2013-12-04 01:53 - 2013-11-27 17:54 - 00694240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2013-12-04 01:53 - 2013-11-27 17:54 - 00078304 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2013-12-01 11:29 - 2013-11-26 17:41 - 00000000 ____D C:\Users\XXXX 2013-11-28 14:32 - 2013-11-26 17:42 - 00000000 ___RD C:\Users\XXXX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-11-28 14:32 - 2013-11-26 17:42 - 00000000 ___RD C:\Users\XXXX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2013-11-28 14:29 - 2012-07-26 09:12 - 00000000 ___RD C:\WINDOWS\ToastData 2013-11-28 14:29 - 2012-07-26 09:12 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2013-11-28 14:28 - 2012-07-26 09:12 - 00000000 ____D C:\WINDOWS\WinStore 2013-11-28 14:28 - 2012-07-26 09:12 - 00000000 ____D C:\WINDOWS\PolicyDefinitions 2013-11-28 12:18 - 2013-11-28 12:10 - 00002105 _____ C:\Users\XXXX\Desktop\Klicken Sie hier, um PC-Fehler zu finden und zu reparieren.lnk 2013-11-28 12:18 - 2013-11-28 12:10 - 00001338 _____ C:\Users\XXXX\Desktop\Smart Data Recovery.lnk 2013-11-28 12:10 - 2013-11-28 12:10 - 00000000 ____D C:\Program Files (x86)\Smart PC Solutions 2013-11-28 12:07 - 2013-11-28 12:07 - 02300056 _____ (Smart PC Solutions ) C:\Users\XXXX\Downloads\recoverysetup_4.4.exe 2013-11-28 12:03 - 2013-11-28 12:03 - 00001330 _____ C:\Users\XXXX\Desktop\PC Inspector File Recovery.lnk 2013-11-28 12:03 - 2013-11-28 12:03 - 00000000 ____D C:\Users\XXXX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Convar 2013-11-28 12:03 - 2013-11-28 12:03 - 00000000 ____D C:\Program Files (x86)\Convar 2013-11-28 12:02 - 2013-11-28 12:02 - 03462033 _____ C:\Users\XXXX\Downloads\pci_filerecovery.exe 2013-11-27 17:57 - 2013-11-27 17:49 - 00000000 ___RD C:\WINDOWS\BrowserChoice 2013-11-27 17:57 - 2013-11-26 17:41 - 00000000 ____D C:\ProgramData\PRICache 2013-11-27 17:55 - 2012-07-26 06:37 - 00000000 ____D C:\WINDOWS\servicing 2013-11-27 17:50 - 2012-07-26 09:12 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2013-11-27 17:50 - 2012-07-26 09:12 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2013-11-27 17:50 - 2012-07-26 09:12 - 00000000 ____D C:\Program Files\Windows Defender 2013-11-27 17:50 - 2012-07-26 09:12 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2013-11-27 17:50 - 2012-07-26 09:12 - 00000000 ____D C:\Program Files (x86)\Windows Defender 2013-11-27 17:49 - 2012-07-26 11:29 - 00000000 ____D C:\Program Files\Windows Journal 2013-11-27 17:45 - 2012-07-26 09:12 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2013-11-27 17:45 - 2012-07-26 09:12 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2013-11-27 17:45 - 2012-07-26 09:12 - 00000000 ____D C:\Program Files\Windows Photo Viewer 2013-11-27 17:45 - 2012-07-26 09:12 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2013-11-27 17:45 - 2012-07-26 06:38 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism 2013-11-27 17:45 - 2012-07-26 06:38 - 00000000 ____D C:\WINDOWS\system32\Dism 2013-11-27 15:21 - 2013-11-27 15:21 - 00000000 ____D C:\Users\XXXX\AppData\Local\Secunia PSI 2013-11-27 15:21 - 2013-11-27 15:21 - 00000000 ____D C:\Program Files (x86)\Secunia 2013-11-27 15:19 - 2013-11-27 15:19 - 03865488 _____ (Secunia) C:\Users\XXXX\Downloads\PSI9015Setup.exe 2013-11-27 15:15 - 2013-11-27 15:15 - 00000000 ____D C:\Users\XXXX\AppData\Local\Macromedia 2013-11-27 15:15 - 2013-11-27 15:14 - 00000000 ____D C:\Users\XXXX\AppData\Local\Adobe 2013-11-27 15:08 - 2013-11-26 17:54 - 00000000 ____D C:\Users\XXXX\AppData\Local\Mozilla 2013-11-27 14:44 - 2013-11-27 14:44 - 00000117 _____ C:\WINDOWS\system32\netcfg-77308526.txt 2013-11-27 14:44 - 2013-11-27 14:44 - 00000117 _____ C:\WINDOWS\system32\netcfg-77308292.txt 2013-11-26 22:40 - 2013-11-26 22:40 - 00000117 _____ C:\WINDOWS\system32\netcfg-19475991.txt 2013-11-26 22:40 - 2013-11-26 22:40 - 00000117 _____ C:\WINDOWS\system32\netcfg-19475695.txt 2013-11-26 20:14 - 2013-11-26 20:14 - 00000117 _____ C:\WINDOWS\system32\netcfg-10662465.txt 2013-11-26 20:14 - 2013-11-26 20:14 - 00000117 _____ C:\WINDOWS\system32\netcfg-10662153.txt 2013-11-26 18:10 - 2013-11-26 18:10 - 00001087 _____ C:\Users\Public\Desktop\SpywareBlaster.lnk 2013-11-26 18:10 - 2013-11-26 18:10 - 00000000 ____D C:\ProgramData\Licenses 2013-11-26 18:10 - 2013-11-26 18:10 - 00000000 ____D C:\Program Files (x86)\SpywareBlaster 2013-11-26 18:08 - 2013-11-26 18:08 - 00000000 ____D C:\Users\XXXX\AppData\Roaming\AVAST Software 2013-11-26 18:07 - 2013-11-26 18:07 - 04095448 _____ (BrightFort LLC ) C:\Users\XXXX\Downloads\spywareblastersetup50.exe 2013-11-26 18:07 - 2013-11-26 18:07 - 00001970 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2013-11-26 18:06 - 2013-11-26 18:06 - 01032416 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys 2013-11-26 18:06 - 2013-11-26 18:06 - 00409832 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys 2013-11-26 18:06 - 2013-11-26 18:06 - 00334648 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe 2013-11-26 18:06 - 2013-11-26 18:06 - 00205320 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys 2013-11-26 18:06 - 2013-11-26 18:06 - 00092544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys 2013-11-26 18:06 - 2013-11-26 18:06 - 00084328 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys 2013-11-26 18:06 - 2013-11-26 18:06 - 00065776 _____ C:\WINDOWS\system32\Drivers\aswRvrt.sys 2013-11-26 18:06 - 2013-11-26 18:06 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr 2013-11-26 18:06 - 2013-11-26 18:06 - 00038984 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswFsBlk.sys 2013-11-26 17:56 - 2013-11-26 17:56 - 00000000 ____D C:\Program Files\AVAST Software 2013-11-26 17:56 - 2012-07-26 09:12 - 00000000 ____D C:\WINDOWS\system32\restore 2013-11-26 17:55 - 2013-11-26 17:55 - 04733496 _____ (AVAST Software) C:\Users\XXXX\Downloads\avast_free_antivirus_setup_online_fdi-c.exe 2013-11-26 17:55 - 2013-11-26 17:55 - 00000000 ____D C:\ProgramData\AVAST Software 2013-11-26 17:54 - 2013-11-26 17:54 - 00000000 ____D C:\Users\XXXX\AppData\Roaming\Mozilla 2013-11-26 17:54 - 2013-11-26 17:54 - 00000000 ____D C:\ProgramData\Mozilla 2013-11-26 17:44 - 2013-11-26 17:44 - 00000000 ____D C:\Users\XXXX\AppData\Roaming\Macromedia 2013-11-26 17:42 - 2013-11-26 17:42 - 00001446 _____ C:\Users\XXXX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-11-26 17:42 - 2013-11-26 17:42 - 00000000 ____D C:\Users\XXXX\AppData\Roaming\Adobe 2013-11-26 17:41 - 2013-11-26 17:41 - 00000020 ___SH C:\Users\XXXX\ntuser.ini 2013-11-26 17:41 - 2013-11-26 17:41 - 00000000 _SHDL C:\Users\XXXX\Vorlagen 2013-11-26 17:41 - 2013-11-26 17:41 - 00000000 _SHDL C:\Users\XXXX\Startmenü 2013-11-26 17:41 - 2013-11-26 17:41 - 00000000 _SHDL C:\Users\XXXX\Netzwerkumgebung 2013-11-26 17:41 - 2013-11-26 17:41 - 00000000 _SHDL C:\Users\XXXX\Lokale Einstellungen 2013-11-26 17:41 - 2013-11-26 17:41 - 00000000 _SHDL C:\Users\XXXX\Eigene Dateien 2013-11-26 17:41 - 2013-11-26 17:41 - 00000000 _SHDL C:\Users\XXXX\Druckumgebung 2013-11-26 17:41 - 2013-11-26 17:41 - 00000000 _SHDL C:\Users\XXXX\Documents\Eigene Musik 2013-11-26 17:41 - 2013-11-26 17:41 - 00000000 _SHDL C:\Users\XXXX\Documents\Eigene Bilder 2013-11-26 17:41 - 2013-11-26 17:41 - 00000000 _SHDL C:\Users\XXXX\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-11-26 17:41 - 2013-11-26 17:41 - 00000000 _SHDL C:\Users\XXXX\AppData\Local\Verlauf 2013-11-26 17:41 - 2013-11-26 17:41 - 00000000 _SHDL C:\Users\XXXX\AppData\Local\Anwendungsdaten 2013-11-26 17:41 - 2013-11-26 17:41 - 00000000 _SHDL C:\Users\XXXX\Anwendungsdaten 2013-11-26 17:41 - 2013-11-26 17:41 - 00000000 ____D C:\Users\XXXX\AppData\Local\VirtualStore 2013-11-26 17:41 - 2013-11-26 17:10 - 00000000 ____D C:\WINDOWS\Panther 2013-11-26 17:39 - 2013-11-26 17:39 - 00000000 ____D C:\WINDOWS\CSC 2013-11-26 17:38 - 2013-11-26 17:38 - 00000117 _____ C:\WINDOWS\system32\netcfg-1340844.txt 2013-11-26 17:38 - 2013-11-26 17:38 - 00000117 _____ C:\WINDOWS\system32\netcfg-1340656.txt 2013-11-26 17:38 - 2013-11-26 17:38 - 00000117 _____ C:\WINDOWS\system32\netcfg-1340048.txt 2013-11-26 17:38 - 2013-11-26 17:38 - 00000117 _____ C:\WINDOWS\system32\netcfg-1336928.txt 2013-11-26 17:37 - 2013-11-26 17:37 - 00001139 _____ C:\WINDOWS\system32\netcfg-1247181.txt 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\Users\Default\Vorlagen 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\Users\Default\Startmenü 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\Users\Default\Eigene Dateien 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\Users\Default\Druckumgebung 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\Programme 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\ProgramData\Vorlagen 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\ProgramData\Startmenü 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\ProgramData\Dokumente 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien 2013-11-26 17:17 - 2013-11-26 17:17 - 00000000 _SHDL C:\Dokumente und Einstellungen 2013-11-26 17:17 - 2012-07-26 09:12 - 00000000 ____D C:\Program Files\Windows NT 2013-11-26 17:17 - 2012-07-26 06:37 - 00000000 __RHD C:\Users\Default 2013-11-26 17:15 - 2012-07-26 09:13 - 00001720 _____ C:\WINDOWS\DtcInstall.log 2013-11-26 17:13 - 2013-11-26 17:13 - 00001135 _____ C:\WINDOWS\system32\netcfg-163239.txt 2013-11-26 17:13 - 2013-11-26 17:13 - 00000196 _____ C:\WINDOWS\system32\netcfg-164315.txt 2013-11-26 17:13 - 2013-11-26 17:13 - 00000185 _____ C:\WINDOWS\system32\netcfg-162085.txt 2013-11-26 17:13 - 2013-11-26 17:13 - 00000161 _____ C:\WINDOWS\system32\netcfg-158356.txt 2013-11-26 17:12 - 2013-11-26 17:12 - 00000164 _____ C:\WINDOWS\system32\netcfg-155470.txt 2013-11-26 17:12 - 2013-11-26 17:12 - 00000160 _____ C:\WINDOWS\system32\netcfg-157732.txt 2013-11-26 17:12 - 2013-11-26 17:12 - 00000160 _____ C:\WINDOWS\system32\netcfg-156687.txt 2013-11-26 17:12 - 2013-11-26 17:12 - 00000160 _____ C:\WINDOWS\system32\netcfg-148138.txt 2013-11-26 17:12 - 2013-11-26 17:12 - 00000159 _____ C:\WINDOWS\system32\netcfg-156141.txt 2013-11-26 17:12 - 2013-11-26 17:12 - 00000157 _____ C:\WINDOWS\system32\netcfg-157139.txt 2013-11-26 17:12 - 2013-11-26 17:12 - 00000157 _____ C:\WINDOWS\system32\netcfg-154628.txt 2013-11-26 17:12 - 2013-11-26 17:12 - 00000150 _____ C:\WINDOWS\system32\netcfg-155002.txt 2013-11-26 17:12 - 2013-11-26 17:12 - 00000000 _____ C:\WINDOWS\system32\atiicdxx.dat 2013-11-26 17:12 - 2013-11-26 17:12 - 00000000 _____ C:\WINDOWS\ativpsrm.bin 2013-11-26 17:11 - 2013-11-26 17:11 - 00001134 _____ C:\WINDOWS\system32\netcfg-81245.txt 2013-11-26 17:10 - 2013-11-26 17:10 - 00000000 _____ C:\Recovery.txt 2013-11-26 17:10 - 2012-07-26 09:13 - 00262144 _____ C:\WINDOWS\system32\config\BCD-Template 2013-11-26 17:10 - 2012-07-26 09:12 - 00000000 ____D C:\WINDOWS\system32\Recovery 2013-11-23 07:43 - 2013-12-11 12:43 - 00420864 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll 2013-11-23 06:05 - 2013-12-11 12:43 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll Some content of TEMP: ==================== C:\Users\XXXX\AppData\Local\Temp\fp_pl_pfs_installer-1.exe C:\Users\XXXX\AppData\Local\Temp\fp_pl_pfs_installer-2.exe C:\Users\XXXX\AppData\Local\Temp\fp_pl_pfs_installer-3.exe C:\Users\XXXX\AppData\Local\Temp\fp_pl_pfs_installer-4.exe C:\Users\XXXX\AppData\Local\Temp\fp_pl_pfs_installer.exe C:\Users\XXXX\AppData\Local\Temp\ICReinstall_Firefox_Setup.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-12-08 14:39 ==================== End Of Log ============================ Addition.txt Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 16-12-2013 02 Ran by XXXX at 2013-12-16 14:00:37 Running from C:\Users\XXXX\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170) avast! Free Antivirus (x32 Version: 9.0.2008) Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300) Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0) Mozilla Maintenance Service (x32 Version: 26.0) Secunia PSI (3.0.0.9015) (x32 Version: 3.0.0.9015) Smart Data Recovery v4.4 (x32 Version: 4.4) SpywareBlaster 5.0 (x32 Version: 5.0.0) ==================== Restore Points ========================= 04-12-2013 17:39:34 Geplanter Prüfpunkt 09-12-2013 15:50:33 Windows Update 14-12-2013 20:22:47 Windows Update ==================== Hosts content: ========================== 2012-07-26 06:26 - 2012-07-26 06:26 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {115A30F5-9629-4E2E-993E-F2EF77734558} - System32\Tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange => Rundll32.exe bfe.dll,BfeOnServiceStartTypeChange Task: {12EAE5B5-51A0-430E-B1D8-34A4EA3FB0EF} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-11-26] (AVAST Software) Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList Task: {307D8C75-FDA3-49D3-AA9F-DB79F405FB59} - System32\Tasks\Microsoft\Windows\Autochk\Proxy => Rundll32.exe /d acproxy.dll,PerformAutochkOperations Task: {67229DF8-B971-4F31-933D-0FD466D45DE1} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe aepdu.dll,AePduRunUpdate Task: {874A3BD7-D03D-4F2B-9461-5D6876D624CD} - System32\Tasks\Microsoft\Windows\Setup\Pre-staged GDR Notification => C:\Windows\System32\NotificationUI.exe [2013-08-16] (Microsoft Corporation) Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState Task: {E5AF74D9-4E90-4939-9741-60358E8000CA} - System32\Tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector => Rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask ==================== Loaded Modules (whitelisted) ============= 2013-12-16 13:27 - 2013-12-15 22:42 - 02152448 _____ () C:\Program Files\AVAST Software\Avast\defs\13121501\algo.dll 2013-11-26 18:06 - 2013-11-26 18:06 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\ProgramData\TEMP:5C321E34 ==================== Safe Mode (whitelisted) =================== ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (12/16/2013 01:53:39 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 10.0.9200.16537, Zeitstempel: 0x512347f7 Name des fehlerhaften Moduls: MSVCR110.dll, Version: 11.0.51106.1, Zeitstempel: 0x5098858e Ausnahmecode: 0xc0000005 Fehleroffset: 0x00012b8a ID des fehlerhaften Prozesses: 0xe00 Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0 Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1 Pfad des fehlerhaften Moduls: IEXPLORE.EXE2 Berichtskennung: IEXPLORE.EXE3 Vollständiger Name des fehlerhaften Pakets: IEXPLORE.EXE4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: IEXPLORE.EXE5 Error: (12/16/2013 01:52:33 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 10.0.9200.16537, Zeitstempel: 0x512347f7 Name des fehlerhaften Moduls: MSVCR110.dll, Version: 11.0.51106.1, Zeitstempel: 0x5098858e Ausnahmecode: 0xc0000005 Fehleroffset: 0x00012b8a ID des fehlerhaften Prozesses: 0x96c Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0 Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1 Pfad des fehlerhaften Moduls: IEXPLORE.EXE2 Berichtskennung: IEXPLORE.EXE3 Vollständiger Name des fehlerhaften Pakets: IEXPLORE.EXE4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: IEXPLORE.EXE5 Error: (12/16/2013 00:42:14 PM) (Source: Application Hang) (User: ) Description: Programm firefox.exe, Version 26.0.0.5087 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: ff0 Startzeit: 01cefa5345d42f22 Endzeit: 4294967295 Anwendungspfad: C:\Program Files (x86)\Mozilla Firefox\firefox.exe Berichts-ID: 1a898982-6647-11e3-be6e-3860778cca8a Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error: (12/16/2013 00:23:54 PM) (Source: Application Hang) (User: ) Description: Programm firefox.exe, Version 25.0.1.5064 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: aa8 Startzeit: 01cefa50f829915b Endzeit: 4294967295 Anwendungspfad: C:\Program Files (x86)\Mozilla Firefox\firefox.exe Berichts-ID: 894a8470-6644-11e3-be6e-3860778cca8a Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error: (12/10/2013 11:29:04 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: wwahost.exe, Version: 6.2.9200.16420, Zeitstempel: 0x505a9152 Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.2.9200.16451, Zeitstempel: 0x50988aa6 Ausnahmecode: 0xe0434352 Fehleroffset: 0x000000000003811c ID des fehlerhaften Prozesses: 0x520 Startzeit der fehlerhaften Anwendung: 0xwwahost.exe0 Pfad der fehlerhaften Anwendung: wwahost.exe1 Pfad des fehlerhaften Moduls: wwahost.exe2 Berichtskennung: wwahost.exe3 Vollständiger Name des fehlerhaften Pakets: wwahost.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: wwahost.exe5 Error: (12/10/2013 11:29:03 PM) (Source: .NET Runtime) (User: ) Description: Anwendung: wwahost.exe Frameworkversion: v4.0.30319 Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet. Ausnahmeinformationen: System.UnauthorizedAccessException Stapel: bei System.Runtime.CompilerServices.AsyncMethodBuilderCore.<ThrowAsync>b__1(System.Object) bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean) bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean) bei System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem() bei System.Threading.ThreadPoolWorkQueue.Dispatch() Error: (11/28/2013 11:58:30 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: PSIA.exe, Version: 3.0.0.9015, Zeitstempel: 0x5277789f Name des fehlerhaften Moduls: ntdll.dll, Version: 6.2.9200.16578, Zeitstempel: 0x515fac6e Ausnahmecode: 0xc0000005 Fehleroffset: 0x00051e0a ID des fehlerhaften Prozesses: 0x62c Startzeit der fehlerhaften Anwendung: 0xPSIA.exe0 Pfad der fehlerhaften Anwendung: PSIA.exe1 Pfad des fehlerhaften Moduls: PSIA.exe2 Berichtskennung: PSIA.exe3 Vollständiger Name des fehlerhaften Pakets: PSIA.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: PSIA.exe5 System errors: ============= Error: (12/16/2013 00:50:54 AM) (Source: Microsoft-Windows-Kernel-Power) (User: ) Description: 4 Error: (12/15/2013 01:56:11 PM) (Source: Microsoft-Windows-Kernel-Power) (User: ) Description: 4 Error: (12/15/2013 10:33:15 AM) (Source: Microsoft-Windows-Kernel-Power) (User: ) Description: 4 Error: (12/15/2013 00:36:22 AM) (Source: Microsoft-Windows-Kernel-Power) (User: ) Description: 4 Error: (12/14/2013 09:26:10 PM) (Source: Microsoft-Windows-Kernel-General) (User: NT-AUTORITÄT) Description: 0xc000014d0 Error: (12/14/2013 09:24:52 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x8007045b fehlgeschlagen: Update für Microsoft Camera Codec Pack unter Windows 8 für x64-basierte Systeme (KB2899190) Error: (12/14/2013 11:15:24 AM) (Source: Microsoft-Windows-Kernel-Power) (User: ) Description: 4 Error: (12/14/2013 00:20:37 AM) (Source: Microsoft-Windows-Kernel-Power) (User: ) Description: 4 Error: (12/13/2013 07:15:13 PM) (Source: Microsoft-Windows-Kernel-Power) (User: ) Description: 4 Error: (12/12/2013 11:45:31 PM) (Source: Microsoft-Windows-Kernel-Power) (User: ) Description: 4 Microsoft Office Sessions: ========================= Error: (12/16/2013 01:53:39 PM) (Source: Application Error)(User: ) Description: IEXPLORE.EXE10.0.9200.16537512347f7MSVCR110.dll11.0.51106.15098858ec000000500012b8ae0001cefa5d71d4e7a8C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\WINDOWS\WinSxS\x86_avast.vc110.crt_2036b14a11e83e4a_11.0.60610.1_none_1d37a43bbfe1dc9c\MSVCR110.dll150bd970-6651-11e3-be6e-3860778cca8a Error: (12/16/2013 01:52:33 PM) (Source: Application Error)(User: ) Description: IEXPLORE.EXE10.0.9200.16537512347f7MSVCR110.dll11.0.51106.15098858ec000000500012b8a96c01cefa5dae5c6822C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\WINDOWS\WinSxS\x86_avast.vc110.crt_2036b14a11e83e4a_11.0.60610.1_none_1d37a43bbfe1dc9c\MSVCR110.dllee1bc7c0-6650-11e3-be6e-3860778cca8a Error: (12/16/2013 00:42:14 PM) (Source: Application Hang)(User: ) Description: firefox.exe26.0.0.5087ff001cefa5345d42f224294967295C:\Program Files (x86)\Mozilla Firefox\firefox.exe1a898982-6647-11e3-be6e-3860778cca8a Error: (12/16/2013 00:23:54 PM) (Source: Application Hang)(User: ) Description: firefox.exe25.0.1.5064aa801cefa50f829915b4294967295C:\Program Files (x86)\Mozilla Firefox\firefox.exe894a8470-6644-11e3-be6e-3860778cca8a Error: (12/10/2013 11:29:04 PM) (Source: Application Error)(User: ) Description: wwahost.exe6.2.9200.16420505a9152KERNELBASE.dll6.2.9200.1645150988aa6e0434352000000000003811c52001cef5f7122e7af5C:\WINDOWS\system32\wwahost.exeC:\WINDOWS\system32\KERNELBASE.dll79507c86-61ea-11e3-be6d-3860778cca8aMicrosoft.BingWeather_1.2.0.135_x64__8wekyb3d8bbweApp Error: (12/10/2013 11:29:03 PM) (Source: .NET Runtime)(User: ) Description: Anwendung: wwahost.exe Frameworkversion: v4.0.30319 Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet. Ausnahmeinformationen: System.UnauthorizedAccessException Stapel: bei System.Runtime.CompilerServices.AsyncMethodBuilderCore.<ThrowAsync>b__1(System.Object) bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean) bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean) bei System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem() bei System.Threading.ThreadPoolWorkQueue.Dispatch() Error: (11/28/2013 11:58:30 AM) (Source: Application Error)(User: ) Description: PSIA.exe3.0.0.90155277789fntdll.dll6.2.9200.16578515fac6ec000000500051e0a62c01ceeb9198eb04afC:\Program Files (x86)\Secunia\PSI\PSIA.exeC:\WINDOWS\SYSTEM32\ntdll.dll03ce5f2c-581c-11e3-be68-3860778cca8a ==================== Memory info =========================== Percentage of memory in use: 26% Total physical RAM: 7913.9 MB Available physical RAM: 5845.07 MB Total Pagefile: 9129.9 MB Available Pagefile: 7123.21 MB Total Virtual: 8192 MB Available Virtual: 8191.77 MB ==================== Drives ================================ Drive c: (Acer) (Fixed) (Total:447.66 GB) (Free:413.28 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 1F732B1D) Partition 1: (Not Active) - (Size=18 GB) - (Type=27) Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=448 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
Themen zu PUP.Optional.Installcore.a - Probleme mit dem Laptop-Touchpad |
.dll, adblock, administrator, adobe, antivirus, anzeige, avast, browser, dateien, defender, explorer, firefox, homepage, hängt, icreinstall, infizierte, internet, microsoft, mozilla, newtab, problem, registry, scan, schutz, secunia psi, security, software, windows, öffnet |