![]() |
|
Plagegeister aller Art und deren Bekämpfung: Win7-64: Eltern-PC infiziert; ESET startet nicht, Malwarebytes updatet nichtWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() | #1 |
| ![]() Win7-64: Eltern-PC infiziert; ESET startet nicht, Malwarebytes updatet nicht Ho, ho, ho, nachträglich frohe Weihnachten, Ich habe den Hilferuf meiner Eltern vernommen und habe mich aufgemacht ihren Rechner (noch erfolglos) auf Vordermann zu bringen und bräuchte etwas Fachkenntnis ![]() - AntiVir meldet keine Funde - Malwarebytes konnte ich herunterladen und installieren, aber updates können keine gefahren werden (PROGRAM_ERROR_UPDATING (404,0,HTTPStatusCode). Eine Suche mit 267 Tagen veralteten Definitionen ergab keine Funde. - ESET online scan konnte ebenso nicht durchgeführt werden. Hier wie bei vielen anderen Seiten kommt ledliglich die Meldung: 404. That’s an error. The requested URL /at/home/products/online-scanner/ was not found on this server. That’s all we know. Diese Meldung kommt auch bei vielen anderen Seiten. Lt. meinen (leider nicht allzu IT versierten) Eltern haben sie eine Email geöffnet, die vorgibt eine Rechnung vom österreichischen A1 Handy-Netzbetreiber zu beinhalten. Kurzer Sachverhalt hier: www.watchlist-internet.at/gefaelschte-rechnungen/gefaelschte-a1-rechnungen-mit-trojaner-im-anhang/ (sry, Link einfügen funktioniert nicht korrekt?!). Demnach könnte es sich um einen Troyan-Spy.Zbot handeln. Aktuelles FRST sieht wie folgt aus: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-12-2013 01 Ran by Hma63 (administrator) on Hma63-PC on 28-12-2013 12:45:29 Running from C:\temp Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe (Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe (Microsoft Corp.) C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\HpqSRmon.exe (Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Microsoft Corporation) C:\Windows\System32\taskmgr.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11057768 2010-07-06] (Realtek Semiconductor) HKLM-x32\...\Run: [hpqSRMon] - C:\Program Files (x86)\HP\Digital Imaging\bin\HpqSRmon.exe [150528 2008-07-22] (Hewlett-Packard) HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe [54840 2007-05-08] (Hewlett-Packard) HKLM-x32\...\Run: [] - [x] HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-17] (Avira Operations GmbH & Co. KG) MountPoints2: {c0288cf7-9ff3-11df-9d00-6cf0497bd310} - J:\Windows\CHECK\DriveNavigator.exe ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://at.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xAC48ABAE0134CB01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-at URLSearchHook: HKCU - (No Name) - {00000000-6E41-4FD3-8538-502F5495E5FC} - No File SearchScopes: HKCU - {BF35BFFB-96F7-45FC-828A-512BE116BEB2} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-3&o=APN10397&src=kw&q={searchTerms}&locale=de_AT&apn_ptnrs=^ABV&apn_dtid=^YYYYYY^YY^AT&apn_uid=4b059a44-206e-4ea2-a6ec-f84dc30094f0&apn_sauid=58088C16-7C25-4CC8-B2AD-CD401B910DE2 BHO: Windows Live Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\smart web printing\hpswp_printenhancer.dll (Hewlett-Packard Co.) BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} - No File BHO-x32: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll (Microsoft Corp.) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation) BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\smart web printing\hpswp_BHO.dll (Hewlett-Packard Co.) Toolbar: HKLM-x32 - &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation) Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - No File Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation) Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation) Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{7A74AA43-E345-4709-B12D-B8E99492B1A2}: [NameServer]193.169.244.191 Tcpip\..\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}: [NameServer]193.169.244.191 FireFox: ======== FF ProfilePath: C:\Users\Hma63\AppData\Roaming\Mozilla\Firefox\Profiles\5fy9hgmo.default FF SearchEngineOrder.1: Ask.com FF Homepage: google.de FF NetworkProxy: "ftp", "localhost" FF NetworkProxy: "ftp_port", 4001 FF NetworkProxy: "http", "localhost" FF NetworkProxy: "http_port", 4001 FF NetworkProxy: "type", 0 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll () FF Plugin: @java.com/DTPlugin,version=10.17.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin-x32: @Citrix.com/npagee,version=9.1.101.5 - C:\Program Files (x86)\Citrix\Secure Access Client\npagee.dll (Citrix Systems, Inc.) FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\3.0.50106.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8117.0416 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Users\Hma63\AppData\Roaming\Mozilla\Firefox\Profiles\5fy9hgmo.default\searchplugins\dictcc-ende.xml FF SearchPlugin: C:\Users\Hma63\AppData\Roaming\Mozilla\Firefox\Profiles\5fy9hgmo.default\searchplugins\guenstiger.xml FF SearchPlugin: C:\Users\Hma63\AppData\Roaming\Mozilla\Firefox\Profiles\5fy9hgmo.default\searchplugins\IMDB_German.xml FF SearchPlugin: C:\Users\Hma63\AppData\Roaming\Mozilla\Firefox\Profiles\5fy9hgmo.default\searchplugins\preissuchmaschine.xml FF SearchPlugin: C:\Users\Hma63\AppData\Roaming\Mozilla\Firefox\Profiles\5fy9hgmo.default\searchplugins\searchplugins-backup FF SearchPlugin: C:\Users\Hma63\AppData\Roaming\Mozilla\Firefox\Profiles\5fy9hgmo.default\searchplugins\songtextnet.xml FF SearchPlugin: C:\Users\Hma63\AppData\Roaming\Mozilla\Firefox\Profiles\5fy9hgmo.default\searchplugins\tvinfo.xml FF SearchPlugin: C:\Users\Hma63\AppData\Roaming\Mozilla\Firefox\Profiles\5fy9hgmo.default\searchplugins\youtube---videos.xml FF SearchPlugin: C:\Users\Hma63\AppData\Roaming\Mozilla\Firefox\Profiles\5fy9hgmo.default\searchplugins\youtube-videosuche.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: DownloadHelper - C:\Users\Hma63\AppData\Roaming\Mozilla\Firefox\Profiles\5fy9hgmo.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} FF Extension: NoScript - C:\Users\Hma63\AppData\Roaming\Mozilla\Firefox\Profiles\5fy9hgmo.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi FF Extension: Adblock Plus - C:\Users\Hma63\AppData\Roaming\Mozilla\Firefox\Profiles\5fy9hgmo.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} FF HKLM-x32\...\Firefox\Extensions: [{3112ca9c-de6d-4884-a869-9855de68056c}] - C:\ProgramData\Google\Toolbar for Firefox\{3112ca9c-de6d-4884-a869-9855de68056c} FF Extension: Google Toolbar for Firefox - C:\ProgramData\Google\Toolbar for Firefox\{3112ca9c-de6d-4884-a869-9855de68056c} FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 Chrome: ======= CHR HomePage: homepage_is_newtabpage CHR RestoreOnStartup: "tabs":{"use_vertical_tabs" CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-17] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-19] (Avira Operations GmbH & Co. KG) ==================== Drivers (Whitelisted) ==================== R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-17] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-17] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-19] (Avira Operations GmbH & Co. KG) S3 ioatdma1; C:\Windows\System32\Drivers\qd160x64.sys [40072 2008-01-18] (Intel Corporation) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-12-28 12:43 - 2013-12-28 12:43 - 00000000 ____D C:\FRST 2013-12-28 12:40 - 2013-12-28 12:40 - 00001133 _____ C:\Users\Hma63\Desktop\ Malwarebytes Anti-Malware .lnk 2013-12-28 12:37 - 2013-12-28 12:37 - 00003376 _____ C:\Windows\PFRO.log 2013-12-28 12:34 - 2008-05-02 07:26 - 01414440 _____ (Nero AG) C:\Windows\SysWOW64\ShellManager310E2D762.dll 2013-12-28 12:34 - 2008-04-29 22:35 - 00773120 _____ C:\Windows\SysWOW64\NEROINSTAEC43759.DB 2013-12-28 12:32 - 2013-12-28 12:32 - 00000040 _____ C:\Users\Public\Documents\_rgpl 2013-12-28 12:22 - 2013-12-28 12:22 - 00003196 _____ C:\Windows\System32\Tasks\{0889EB88-B017-4578-B7C4-BD6ED7B636E7} 2013-12-28 11:55 - 2013-12-28 11:55 - 00001135 _____ C:\Users\Public\Desktop\Opera.lnk 2013-12-28 11:55 - 2013-12-28 11:55 - 00000000 ____D C:\Users\Hma63\AppData\Roaming\Opera Software 2013-12-28 11:55 - 2013-12-28 11:55 - 00000000 ____D C:\Users\Hma63\AppData\Local\Opera Software 2013-12-28 11:55 - 2013-12-28 11:55 - 00000000 ____D C:\Program Files (x86)\Opera 2013-12-23 10:49 - 2013-12-23 10:49 - 00003088 _____ C:\Windows\System32\Tasks\{84B79431-8B05-4302-94DF-FEBD1879E36B} 2013-12-14 07:31 - 2013-12-14 07:31 - 00002218 _____ C:\Users\Public\Desktop\Google Earth.lnk 2013-12-13 12:15 - 2013-12-13 13:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird 2013-12-13 11:44 - 2013-12-28 12:37 - 00004267 _____ C:\Windows\setupact.log 2013-12-13 11:44 - 2013-12-13 11:44 - 00000000 _____ C:\Windows\setuperr.log 2013-12-12 22:03 - 2013-12-12 22:03 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-12-10 20:48 - 2013-12-10 20:48 - 00000000 ____D C:\Users\Hma63\AppData\Roaming\Malwarebytes 2013-12-10 20:48 - 2013-12-10 20:48 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-12-10 20:48 - 2013-12-10 20:48 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-12-10 20:48 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2013-12-10 20:32 - 2013-12-10 20:42 - 00000000 ____D C:\AdwCleaner 2013-12-10 20:03 - 2013-12-10 20:03 - 00001168 _____ C:\Users\Public\Desktop\TeamViewer 9.lnk 2013-12-10 20:03 - 2013-12-10 20:03 - 00000000 ____D C:\Program Files (x86)\TeamViewer 2013-12-10 11:50 - 2013-12-13 07:47 - 00000000 ____D C:\Users\Hma63\AppData\Roaming\Hayh 2013-12-10 11:50 - 2013-12-10 12:07 - 00000000 ____D C:\Users\Hma63\AppData\Roaming\Eriz 2013-12-10 11:50 - 2013-12-10 11:50 - 00000000 ____D C:\Users\Hma63\AppData\Roaming\Ugiq ==================== One Month Modified Files and Folders ======= 2013-12-28 12:43 - 2013-12-28 12:43 - 00000000 ____D C:\FRST 2013-12-28 12:41 - 2010-08-04 19:08 - 01929391 _____ C:\Windows\WindowsUpdate.log 2013-12-28 12:40 - 2013-12-28 12:40 - 00001133 _____ C:\Users\Hma63\Desktop\ Malwarebytes Anti-Malware .lnk 2013-12-28 12:40 - 2009-07-14 05:45 - 00015152 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-12-28 12:40 - 2009-07-14 05:45 - 00015152 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-12-28 12:38 - 2010-08-04 19:21 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-12-28 12:37 - 2013-12-28 12:37 - 00003376 _____ C:\Windows\PFRO.log 2013-12-28 12:37 - 2013-12-13 11:44 - 00004267 _____ C:\Windows\setupact.log 2013-12-28 12:37 - 2010-08-04 19:21 - 00000000 ____D C:\Program Files\Google 2013-12-28 12:37 - 2010-08-04 19:21 - 00000000 ____D C:\Program Files (x86)\Google 2013-12-28 12:37 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-12-28 12:36 - 2011-10-26 15:26 - 00000000 ____D C:\ProgramData\Apple Computer 2013-12-28 12:34 - 2010-07-30 08:43 - 00000188 _____ C:\Windows\SysWOW64\MsiExec.exe.log 2013-12-28 12:34 - 2010-07-30 08:41 - 00000000 ____D C:\ProgramData\Nero 2013-12-28 12:32 - 2013-12-28 12:32 - 00000040 _____ C:\Users\Public\Documents\_rgpl 2013-12-28 12:31 - 2010-08-05 17:22 - 00000000 ____D C:\Users\Hma63\AppData\Roaming\HappyFoto 2013-12-28 12:28 - 2010-10-29 13:06 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2013-12-28 12:28 - 2010-08-04 19:21 - 00001114 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-12-28 12:25 - 2011-03-18 18:40 - 00000000 ____D C:\Program Files (x86)\SlySoft 2013-12-28 12:25 - 2011-03-18 18:32 - 00000000 ____D C:\Program Files (x86)\Elaborate Bytes 2013-12-28 12:24 - 2012-09-16 15:45 - 00000000 ____D C:\Program Files (x86)\INTERSPAR 2013-12-28 12:22 - 2013-12-28 12:22 - 00003196 _____ C:\Windows\System32\Tasks\{0889EB88-B017-4578-B7C4-BD6ED7B636E7} 2013-12-28 12:21 - 2013-03-19 09:42 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-12-28 11:55 - 2013-12-28 11:55 - 00001135 _____ C:\Users\Public\Desktop\Opera.lnk 2013-12-28 11:55 - 2013-12-28 11:55 - 00000000 ____D C:\Users\Hma63\AppData\Roaming\Opera Software 2013-12-28 11:55 - 2013-12-28 11:55 - 00000000 ____D C:\Users\Hma63\AppData\Local\Opera Software 2013-12-28 11:55 - 2013-12-28 11:55 - 00000000 ____D C:\Program Files (x86)\Opera 2013-12-27 13:37 - 2010-08-05 17:52 - 00000000 ____D C:\Users\Hma63\AppData\Roaming\Skype 2013-12-24 14:22 - 2009-07-14 18:58 - 00654150 _____ C:\Windows\system32\perfh007.dat 2013-12-24 14:22 - 2009-07-14 18:58 - 00130022 _____ C:\Windows\system32\perfc007.dat 2013-12-24 14:22 - 2009-07-14 06:13 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI 2013-12-23 10:49 - 2013-12-23 10:49 - 00003088 _____ C:\Windows\System32\Tasks\{84B79431-8B05-4302-94DF-FEBD1879E36B} 2013-12-22 08:53 - 2010-08-04 19:09 - 00000000 ____D C:\Users\Hma63 2013-12-22 08:52 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\registration 2013-12-22 08:52 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\AppCompat 2013-12-17 14:06 - 2013-05-06 13:08 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2013-12-17 14:06 - 2013-03-20 11:39 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2013-12-17 14:06 - 2013-03-20 11:39 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2013-12-14 07:31 - 2013-12-14 07:31 - 00002218 _____ C:\Users\Public\Desktop\Google Earth.lnk 2013-12-13 19:50 - 2012-05-08 09:54 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-12-13 13:29 - 2013-12-13 12:15 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird 2013-12-13 11:44 - 2013-12-13 11:44 - 00000000 _____ C:\Windows\setuperr.log 2013-12-13 07:47 - 2013-12-10 11:50 - 00000000 ____D C:\Users\Hma63\AppData\Roaming\Hayh 2013-12-12 22:03 - 2013-12-12 22:03 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-12-11 14:21 - 2013-03-19 09:42 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-12-11 14:21 - 2013-03-19 09:42 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-12-11 14:21 - 2012-01-04 18:45 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-12-10 20:48 - 2013-12-10 20:48 - 00000000 ____D C:\Users\Hma63\AppData\Roaming\Malwarebytes 2013-12-10 20:48 - 2013-12-10 20:48 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-12-10 20:48 - 2013-12-10 20:48 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-12-10 20:47 - 2010-08-04 19:49 - 00063336 _____ C:\Users\Hma63\AppData\Local\GDIPFONTCACHEV1.DAT 2013-12-10 20:42 - 2013-12-10 20:32 - 00000000 ____D C:\AdwCleaner 2013-12-10 20:38 - 2009-07-14 05:45 - 00290760 _____ C:\Windows\system32\FNTCACHE.DAT 2013-12-10 20:27 - 2011-03-18 21:12 - 00000000 ____D C:\Windows\pss 2013-12-10 20:24 - 2010-07-30 08:43 - 00000000 ____D C:\Windows\Panther 2013-12-10 20:20 - 2010-08-04 19:35 - 00000000 ____D C:\Program Files (x86)\CCleaner 2013-12-10 20:12 - 2010-08-04 19:09 - 00000000 ___RD C:\Users\Hma63\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-12-10 20:03 - 2013-12-10 20:03 - 00001168 _____ C:\Users\Public\Desktop\TeamViewer 9.lnk 2013-12-10 20:03 - 2013-12-10 20:03 - 00000000 ____D C:\Program Files (x86)\TeamViewer 2013-12-10 19:26 - 2013-08-21 22:26 - 00000000 ___RD C:\Users\Hma63\Dropbox 2013-12-10 19:26 - 2013-08-21 22:23 - 00000000 ____D C:\Users\Hma63\AppData\Roaming\Dropbox 2013-12-10 12:07 - 2013-12-10 11:50 - 00000000 ____D C:\Users\Hma63\AppData\Roaming\Eriz 2013-12-10 11:50 - 2013-12-10 11:50 - 00000000 ____D C:\Users\Hma63\AppData\Roaming\Ugiq 2013-12-06 07:32 - 2009-07-14 06:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2013-12-04 13:17 - 2012-03-21 15:12 - 00013387 _____ C:\Users\Hma63\Documents\Abrechnung erna.odt 2013-12-03 14:05 - 2012-09-16 15:29 - 00000000 ____D C:\Users\Hma63\Desktop\marlon isabel 2013-12-03 07:23 - 2010-08-04 19:21 - 00004110 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2013-12-03 07:23 - 2010-08-04 19:21 - 00003858 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore Files to move or delete: ==================== C:\ProgramData\PKP_DLdu.DAT C:\ProgramData\PKP_DLdw.DAT Some content of TEMP: ==================== C:\Users\Hma63\AppData\Local\Temp\avgnt.exe C:\Users\Hma63\AppData\Local\Temp\ezGameXN.dll C:\Users\Hma63\AppData\Local\Temp\GameXNGO.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-12-20 12:33 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27-12-2013 01 Ran by Hma63 at 2013-12-28 12:46:17 Running from C:\temp Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C} AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691} AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== 64 Bit HP CIO Components Installer (Version: 7.2.8) 7-Zip 9.20 (x64 edition) (Version: 9.20.00.0) Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170) Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170) Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05) Ashampoo Burning Studio 2010 Advanced (x32 Version: 9.2.4) Avira Free Antivirus (x32 Version: 14.0.2.286) BufferChm (x32 Version: 130.0.331.000) C4400 (x32 Version: 130.0.365.000) CCleaner (Version: 4.08) Citrix Access Gateway Endpoint Analysis (x32 Version: 9.1.101.5) Citrix Online Plug-in - Web (x32 Version: 11.2.2.3) Citrix Online Plug-in (DV) (x32 Version: 11.2.2.3) Citrix Online Plug-in (HDX) (x32 Version: 11.2.2.3) Citrix Online Plug-in (USB) (x32 Version: 11.2.2.3) Citrix Online Plug-in (Web) (x32 Version: 11.2.2.3) Copy (x32 Version: 130.0.428.000) Destinations (x32 Version: 130.0.0.0) DeviceDiscovery (x32 Version: 130.0.465.000) DocProc (x32 Version: 13.0.0.0) Dropbox (HKCU Version: 2.0.26) File Uploader (x32 Version: 1.2.3) Free Studio version 2013 (x32 Version: 6.0.0.128) Google Chrome (x32 Version: 31.0.1650.63) Google Earth (x32 Version: 7.1.2.2041) Google Toolbar for Firefox (x32 Version: 7.1.20110512) Google Update Helper (x32 Version: 1.3.22.3) GPBaseService2 (x32 Version: 130.0.371.000) HP Customer Participation Program 13.0 (Version: 13.0) HP Imaging Device Functions 13.0 (Version: 13.0) HP Photosmart C4400 All-In-One Driver Software 13.0 Rel. 3 (Version: 13.0) HP Photosmart Essential 3.5 (Version: 3.5) HP Smart Web Printing 4.51 (Version: 4.51) HP Solution Center 13.0 (Version: 13.0) HP Update (x32 Version: 4.000.011.006) HPPhotoGadget (x32 Version: 130.0.282.000) HPPhotoSmartDiscLabelContent1 (x32 Version: 2.04.0000) HPPhotosmartEssential (x32 Version: 2.04.0000) HPProductAssistant (x32 Version: 130.0.371.000) HPSSupply (x32 Version: 130.0.371.000) Java 7 Update 17 (64-bit) (Version: 7.0.170) Java 7 Update 45 (x32 Version: 7.0.450) Java Auto Updater (x32 Version: 2.1.9.8) Junk Mail filter update (x32 Version: 14.0.8117.416) Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300) MarketResearch (x32 Version: 130.0.374.000) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30320) Microsoft Application Error Reporting (Version: 12.0.6015.5000) Microsoft Choice Guard (x32 Version: 2.0.48.0) Microsoft Search Enhancement Pack (x32 Version: 1.2.123.0) Microsoft Silverlight (x32 Version: 3.0.50106.0) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000) Microsoft Sync Framework Runtime Native v1.0 (x86) (x32 Version: 1.0.1215.0) Microsoft Sync Framework Services Native v1.0 (x86) (x32 Version: 1.0.1215.0) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193) Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0) Mozilla Maintenance Service (x32 Version: 24.2.0) Mozilla Thunderbird 24.2.0 (x86 de) (x32 Version: 24.2.0) MSVCRT (x32 Version: 14.0.1468.721) MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0) MSXML 4.0 SP2 Parser and SDK (x32 Version: 4.20.9818.0) neroxml (x32 Version: 1.0.0) Nikon Message Center (x32 Version: 0.92.000) OCR Software by I.R.I.S. 13.0 (Version: 13.0) OLYMPUS Master 2 (x32 Version: 1.0.10) OpenOffice.org 3.2 (x32 Version: 3.2.9502) Opera Stable 18.0.1284.68 (x32 Version: 18.0.1284.68) Picasa 3 (x32 Version: 3.9) PicPick (x32 Version: 3.2.5) Picture Control Utility (x32 Version: 1.1.9) PMB (x32 Version: 5.2.00.03250) PS_AIO_03_C4400_Software_Min (x32 Version: 130.0.365.000) QuickShare (x32 Version: 1.6.1.950) <==== ATTENTION Realtek High Definition Audio Driver (x32 Version: 6.0.1.6151) Samsung Kies (x32 Version: 2.5.2.13021_10) SAMSUNG USB Driver for Mobile Phones (Version: 1.5.18.0) Scan (x32 Version: 13.0.0.0) Shop for HP Supplies (Version: 13.0) Skype Click to Call (x32 Version: 5.9.9216) Skype™ 6.10 (x32 Version: 6.10.104) SmartWebPrinting (x32 Version: 130.0.457.000) SolutionCenter (x32 Version: 130.0.373.000) Status (x32 Version: 130.0.469.000) TeamViewer 9 (x32 Version: 9.0.24482) Toolbox (x32 Version: 130.0.648.000) TrayApp (x32 Version: 130.0.422.000) UnloadSupport (x32 Version: 11.0.0) VCRedistSetup (x32 Version: 1.0.0) ViewNX (x32 Version: 1.5.1) VLC media player 1.1.2 (x32 Version: 1.1.2) WebReg (x32 Version: 130.0.132.017) Windows Live Anmelde-Assistent (x32 Version: 5.000.818.5) Windows Live Call (x32 Version: 14.0.8117.0416) Windows Live Communications Platform (x32 Version: 14.0.8117.416) Windows Live Essentials (x32 Version: 14.0.8117.0416) Windows Live Essentials (x32 Version: 14.0.8117.416) Windows Live Family Safety (Version: 14.0.8118.427) Windows Live Fotogalerie (x32 Version: 14.0.8117.416) Windows Live Mail (x32 Version: 14.0.8117.0416) Windows Live Messenger (x32 Version: 14.0.8117.0416) Windows Live Movie Maker (x32 Version: 14.0.8117.0416) Windows Live Sync (x32 Version: 14.0.8117.416) Windows Live Toolbar (x32 Version: 14.0.8117.416) Windows Live Writer (x32 Version: 14.0.8117.0416) Windows Live-Uploadtool (x32 Version: 14.0.8014.1029) WinZip 16.5 (Version: 16.5.10095) ==================== Restore Points ========================= 19-12-2013 10:46:21 Geplanter Prüfpunkt 22-12-2013 07:38:25 Wiederherstellungsvorgang 28-12-2013 11:25:07 Remove CloneDVD2 28-12-2013 11:25:59 Removed Apple Application Support 28-12-2013 11:27:19 Removed Apple Mobile Device Support 28-12-2013 11:27:51 Removed Apple Software Update 28-12-2013 11:28:44 Entfernt Panorama Maker 28-12-2013 11:29:15 Removed Bonjour 28-12-2013 11:29:39 Removed iTunes 28-12-2013 11:33:21 Removed Nero 8 Essentials. Available with Windows Installer version 1.2 and later. 28-12-2013 11:35:41 Removed QuickTime ==================== Hosts content: ========================== 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {15B4F9EA-B09D-4173-AAE5-D37D47B7AC3A} - System32\Tasks\{B075558D-2D60-44A1-AF53-5A847D3F8BEA} => Firefox.exe hxxp://ui.skype.com/ui/0/6.3.0.105/de/abandoninstall?page=tsProgressBar Task: {29C3D7B0-0350-4DE0-A397-A2396798B504} - System32\Tasks\{84B79431-8B05-4302-94DF-FEBD1879E36B} => Firefox.exe hxxp://ui.skype.com/ui/0/6.11.0.102/de/abandoninstall?page=tsProgressBar Task: {2CA47D92-5DA7-4CE2-98A9-9672DEC4364E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11] (Adobe Systems Incorporated) Task: {4EFAA066-1B26-421C-BD5B-1C275D3FEA58} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-08-04] (Google Inc.) Task: {862C9C28-5F3E-4811-936A-780DE6253D75} - \Scheduled Update for Ask Toolbar No Task File Task: {E972B472-1E6D-4325-96BD-B8B7EB1CCCB9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-08-04] (Google Inc.) Task: {F1B0917E-C21E-4B88-B228-5B0B62CBC6A5} - System32\Tasks\CCleanerSkipUAC => C:\Program Files (x86)\CCleaner\CCleaner.exe [2013-11-22] (Piriform Ltd) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2013-03-19 09:00 - 2013-03-19 08:56 - 00397704 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll 2013-12-12 22:03 - 2013-12-12 22:03 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll 2013-12-11 14:21 - 2013-12-11 14:21 - 16242056 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (12/28/2013 00:27:15 PM) (Source: Microsoft-Windows-RestartManager) (User: Hma63-PC) Description: Die Anwendung oder der Dienst "Apple Mobile Device" konnte nicht neu gestartet werden. Error: (12/28/2013 00:27:15 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.CRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195"1". Die abhängige Assemblierung "Microsoft.VC80.CRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (12/26/2013 11:18:12 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3. Ungültige XML-Syntax. Error: (12/26/2013 11:15:42 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Error: (12/26/2013 11:15:42 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Error: (12/26/2013 11:15:41 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (12/25/2013 02:48:55 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3. Ungültige XML-Syntax. Error: (12/25/2013 02:46:24 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Error: (12/25/2013 02:46:24 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Error: (12/25/2013 02:46:23 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. System errors: ============= Error: (12/28/2013 00:27:15 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Apple Mobile Device" wurde aufgrund folgenden Fehlers nicht gestartet: %%14001 Error: (12/11/2013 00:30:09 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Windows Update" wurde nicht richtig gestartet. Error: (12/10/2013 08:36:11 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Remoteprozeduraufruf (RPC)" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Computers. Error: (12/10/2013 08:36:11 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "RPC-Endpunktzuordnung" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts. Error: (12/10/2013 02:29:02 PM) (Source: DCOM) (User: ) Description: {995C996E-D918-4A8C-A302-45719A6F4EA7} Error: (11/23/2013 07:41:49 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows-Fehlerberichterstattungsdienst erreicht. Error: (11/13/2013 00:52:00 PM) (Source: volsnap) (User: ) Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte. Error: (11/13/2013 09:49:20 AM) (Source: Service Control Manager) (User: ) Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Avira Echtzeit-Scanner" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler: %%1056 Error: (11/13/2013 09:49:20 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Avira Echtzeit-Scanner" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts. Error: (11/13/2013 09:49:19 AM) (Source: Service Control Manager) (User: ) Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen: %%5 Microsoft Office Sessions: ========================= Error: (12/28/2013 00:27:15 PM) (Source: Microsoft-Windows-RestartManager)(User: Hma63-PC) Description: 0AppleMobileDeviceService.exeApple Mobile Device03026217816040 Error: (12/28/2013 00:27:15 PM) (Source: SideBySide)(User: ) Description: Microsoft.VC80.CRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe Error: (12/26/2013 11:18:12 AM) (Source: SideBySide)(User: ) Description: c:\program files (x86)\microsoft\search enhancement pack\search helper\searchhelper.dllc:\program files (x86)\microsoft\search enhancement pack\search helper\searchhelper.dll2 Error: (12/26/2013 11:15:42 AM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Program Files (x86)\Nero\Nero8\Nero PhotoSnap\PhotoSnapViewer.exe Error: (12/26/2013 11:15:42 AM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Program Files (x86)\Nero\Nero8\Nero PhotoSnap\PhotoSnap.exe Error: (12/26/2013 11:15:41 AM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\Nero\Nero8\Nero Toolkit\DiscSpeed.exe Error: (12/25/2013 02:48:55 PM) (Source: SideBySide)(User: ) Description: c:\program files (x86)\microsoft\search enhancement pack\search helper\searchhelper.dllc:\program files (x86)\microsoft\search enhancement pack\search helper\searchhelper.dll2 Error: (12/25/2013 02:46:24 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Program Files (x86)\Nero\Nero8\Nero PhotoSnap\PhotoSnapViewer.exe Error: (12/25/2013 02:46:24 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Program Files (x86)\Nero\Nero8\Nero PhotoSnap\PhotoSnap.exe Error: (12/25/2013 02:46:23 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\Nero\Nero8\Nero Toolkit\DiscSpeed.exe ==================== Memory info =========================== Percentage of memory in use: 38% Total physical RAM: 3959.49 MB Available physical RAM: 2452.49 MB Total Pagefile: 7917.16 MB Available Pagefile: 6010.55 MB Total Virtual: 8192 MB Available Virtual: 8191.81 MB ==================== Drives ================================ Drive c: (System) (Fixed) (Total:100 GB) (Free:32.92 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive d: (Daten) (Fixed) (Total:831.51 GB) (Free:788.87 GB) NTFS Drive e: (DVD_Stolz) (CDROM) (Total:4.3 GB) (Free:0 GB) UDF ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 47DFD502) Partition 1: (Active) - (Size=100 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=832 GB) - (Type=07 NTFS) ==================== End Of Log ============================ daredan |
Themen zu Win7-64: Eltern-PC infiziert; ESET startet nicht, Malwarebytes updatet nicht |
adblock, antivir, antivirus, avira, browser, chromium, defender, desktop, email, error, fehler, firefox, flash player, ftp, helper, homepage, installation, mozilla, plug-in, realtek, registry, richtlinie, scan, security, services.exe, software, system, updates, usb, win7-64 |