zu meinem Thema http://www.trojaner-board.de/147702-...erschafft.html von letzter Woche, hat sich nun herausgestellt, dass ein 3. PC am Netzwerk dranhing, diesen möchte ich nun auch noch säubern. Ich hoffe das gerechtfertigt einen neuen Thread, da der alter sonst zu unübersichtlich wird mit den ganze Logs.

Ich habe (wie im anderen Thread schon angewiesen) MBAM, adwCleaner, MBAR (ohne Funde) und FRST (in dieser Reihenfolge!) laufen lassen. Hier erstmal die FRST logs von heute:


FRST.txt

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-01-2014 03
Ran by Eva (administrator) on EVA-PC on 18-01-2014 17:34:48
Running from C:\Users\Eva\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
 
The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
() C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 4620 series\Bin\ScanToPCActivationApp.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Mail\wlmail.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 4620 series\Bin\HPNetworkCommunicator.exe
 
 
==================== Registry (Whitelisted) ==================
 
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1157640 2009-08-18] (Dritek System Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3764024 2014-01-17] (AVAST Software)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKCU\...\Run: [HP Officejet 4620 series (NET)] - C:\Program Files\HP\HP Officejet 4620 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
MountPoints2: {45a024f4-60d4-11e2-839b-705ab615811a} - "E:\WD SmartWare.exe" autoplay=true
Startup: C:\Users\Eva\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
 
==================== Internet (Whitelisted) ====================
 
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x753A106CECE9CD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
URLSearchHook: HKLM-x32 - (No Name) - {32b29df0-2237-4370-9a29-37cebb730e9b} - No File
URLSearchHook: HKCU - (No Name) - {32b29df0-2237-4370-9a29-37cebb730e9b} - No File
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: No Name - {32b29df0-2237-4370-9a29-37cebb730e9b} -  No File
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - No Name - {32b29df0-2237-4370-9a29-37cebb730e9b} -  No File
Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - No Name - {32B29DF0-2237-4370-9A29-37CEBB730E9B} -  No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash..cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
 
FireFox:
========
FF ProfilePath: C:\Users\Eva\AppData\Roaming\Mozilla\Firefox\Profiles\3gekotvz.default
FF SelectedSearchEngine: user_pref("browser.search.selectedEngine", "");
FF Homepage: https://facebook.com/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.0.4 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10174.dll (Amazon.com, Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Add to Amazon Wish List Button - C:\Users\Eva\AppData\Roaming\Mozilla\Firefox\Profiles\3gekotvz.default\Extensions\amznUWL2@amazon.com.xpi [2013-11-26]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-01-17]
 
==================== Services (Whitelisted) =================
 
R2 AAV UpdateService; C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-01-13] (Adobe Systems)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-01-17] (AVAST Software)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
 
==================== Drivers (Whitelisted) ====================
 
R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [142424 2013-05-19] (SlySoft, Inc.)
R3 AnyDVD; C:\Windows\SysWOW64\Drivers\AnyDVD.sys [142424 2013-05-19] (SlySoft, Inc.)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2014-01-17] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2014-01-17] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-01-17] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1034464 2014-01-17] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [422216 2014-01-17] (AVAST Software)
R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [79672 2014-01-17] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2014-01-17] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
 
==================== NetSvcs (Whitelisted) ===================
 
 
==================== One Month Created Files and Folders ========
 
2014-01-18 17:34 - 2014-01-18 17:35 - 00010682 _____ C:\Users\Eva\Desktop\FRST.txt
2014-01-18 17:34 - 2014-01-18 17:34 - 00000000 ____D C:\FRST
2014-01-18 17:32 - 2014-01-18 17:32 - 02076160 _____ (Farbar) C:\Users\Eva\Desktop\FRST64.exe
2014-01-17 20:53 - 2014-01-17 20:53 - 00000998 _____ C:\Users\Eva\Desktop\IrfanView.lnk
2014-01-17 20:52 - 2014-01-17 20:52 - 01883792 _____ (Irfan Skiljan) C:\Users\Eva\Downloads\iview437_setup.exe
2014-01-17 20:30 - 2014-01-17 20:30 - 00000000 ____D C:\Users\Eva\AppData\Roaming\AVAST Software
2014-01-17 20:29 - 2014-01-18 17:15 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2014-01-17 20:29 - 2014-01-17 20:29 - 00001966 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-01-17 20:28 - 2014-01-17 20:29 - 00079672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2014-01-17 20:28 - 2014-01-17 20:28 - 01034464 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-01-17 20:28 - 2014-01-17 20:28 - 00422216 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-01-17 20:28 - 2014-01-17 20:28 - 00334136 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-01-17 20:28 - 2014-01-17 20:28 - 00207904 _____ C:\Windows\system32\Drivers\aswVmm.sys
2014-01-17 20:28 - 2014-01-17 20:28 - 00092544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-01-17 20:28 - 2014-01-17 20:28 - 00078648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-01-17 20:28 - 2014-01-17 20:28 - 00065776 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2014-01-17 20:28 - 2014-01-17 20:28 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-01-17 20:27 - 2014-01-17 20:27 - 00000000 ____D C:\Program Files\AVAST Software
2014-01-17 20:25 - 2014-01-17 20:25 - 00000000 ____D C:\ProgramData\AVAST Software
2014-01-17 20:19 - 2014-01-17 20:21 - 91412976 _____ (AVAST Software) C:\Users\Eva\Downloads\avast_free_antivirus_setup.exe
2014-01-17 19:10 - 2014-01-17 20:14 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-01-17 19:09 - 2014-01-17 20:14 - 00000000 ____D C:\Users\Eva\Desktop\mbar
2014-01-17 19:09 - 2014-01-17 19:09 - 00089304 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-01-17 18:37 - 2014-01-17 18:36 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-01-17 18:37 - 2014-01-17 18:36 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-01-17 18:37 - 2014-01-17 18:36 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-01-17 18:37 - 2014-01-17 18:36 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-01-17 18:36 - 2014-01-17 18:36 - 00000000 ____D C:\Program Files (x86)\Java
2014-01-17 18:35 - 2014-01-17 18:35 - 00921000 _____ (Oracle Corporation) C:\Users\Eva\Downloads\jxpiinstall(4).exe
2014-01-17 18:19 - 2014-01-17 18:19 - 00921000 _____ (Oracle Corporation) C:\Users\Eva\Downloads\jxpiinstall(3).exe
2014-01-16 23:13 - 2014-01-17 14:19 - 00000000 ____D C:\AdwCleaner
2014-01-16 22:57 - 2014-01-16 22:57 - 00000000 ____D C:\Users\Eva\AppData\Roaming\Oracle
2014-01-16 19:33 - 2014-01-16 19:33 - 01236282 _____ C:\Users\Eva\Desktop\adwcleaner.exe
2014-01-16 18:49 - 2014-01-16 18:49 - 00921000 _____ (Oracle Corporation) C:\Users\Eva\Downloads\jxpiinstall(2).exe
2014-01-16 14:04 - 2014-01-16 14:04 - 00001109 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-16 14:04 - 2014-01-16 14:04 - 00000000 ____D C:\Users\Eva\AppData\Roaming\Malwarebytes
2014-01-16 14:04 - 2014-01-16 14:04 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-16 14:04 - 2014-01-16 14:04 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-16 14:04 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-16 14:02 - 2014-01-16 14:02 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Eva\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-16 14:01 - 2014-01-16 14:01 - 00000000 ____D C:\Users\Eva\Documents\My Received Files
2014-01-15 22:36 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 22:36 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 22:36 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 22:36 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 22:36 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 22:36 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 22:36 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 22:36 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 22:36 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-20 12:47 - 2013-12-20 12:47 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
 
==================== One Month Modified Files and Folders =======
 
2014-01-18 17:35 - 2014-01-18 17:34 - 00010682 _____ C:\Users\Eva\Desktop\FRST.txt
2014-01-18 17:34 - 2014-01-18 17:34 - 00000000 ____D C:\FRST
2014-01-18 17:33 - 2013-01-03 21:38 - 00000000 ____D C:\Users\Eva\AppData\Roaming\Skype
2014-01-18 17:32 - 2014-01-18 17:32 - 02076160 _____ (Farbar) C:\Users\Eva\Desktop\FRST64.exe
2014-01-18 17:31 - 2013-01-03 21:53 - 00000000 ____D C:\Users\Eva\AppData\Local\Windows Live
2014-01-18 17:29 - 2013-01-03 20:45 - 01554780 _____ C:\Windows\WindowsUpdate.log
2014-01-18 17:15 - 2014-01-17 20:29 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2014-01-18 17:15 - 2013-01-03 22:06 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-17 23:22 - 2013-05-21 10:46 - 00000000 ____D C:\Users\Eva\Desktop\drucken
2014-01-17 23:21 - 2013-01-04 21:56 - 00000000 ____D C:\Users\Eva\Documents\photoshop
2014-01-17 21:51 - 2009-07-14 05:45 - 00015280 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-17 21:51 - 2009-07-14 05:45 - 00015280 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-17 21:48 - 2009-07-14 18:58 - 00699666 _____ C:\Windows\system32\perfh007.dat
2014-01-17 21:48 - 2009-07-14 18:58 - 00149774 _____ C:\Windows\system32\perfc007.dat
2014-01-17 21:48 - 2009-07-14 06:13 - 01620612 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-17 21:42 - 2013-01-03 21:13 - 00623144 _____ C:\Windows\PFRO.log
2014-01-17 21:42 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-17 21:42 - 2009-07-14 05:51 - 00025666 _____ C:\Windows\setupact.log
2014-01-17 21:00 - 2013-01-03 21:47 - 00001066 _____ C:\Users\Public\Desktop\VLC media player.lnk
2014-01-17 20:58 - 2013-01-03 21:52 - 00000000 ____D C:\Users\Eva\AppData\Roaming\vlc
2014-01-17 20:53 - 2014-01-17 20:53 - 00000998 _____ C:\Users\Eva\Desktop\IrfanView.lnk
2014-01-17 20:53 - 2013-01-03 21:39 - 00000000 ____D C:\Users\Eva\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView
2014-01-17 20:52 - 2014-01-17 20:52 - 01883792 _____ (Irfan Skiljan) C:\Users\Eva\Downloads\iview437_setup.exe
2014-01-17 20:30 - 2014-01-17 20:30 - 00000000 ____D C:\Users\Eva\AppData\Roaming\AVAST Software
2014-01-17 20:29 - 2014-01-17 20:29 - 00001966 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-01-17 20:29 - 2014-01-17 20:28 - 00079672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2014-01-17 20:28 - 2014-01-17 20:28 - 01034464 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-01-17 20:28 - 2014-01-17 20:28 - 00422216 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-01-17 20:28 - 2014-01-17 20:28 - 00334136 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-01-17 20:28 - 2014-01-17 20:28 - 00207904 _____ C:\Windows\system32\Drivers\aswVmm.sys
2014-01-17 20:28 - 2014-01-17 20:28 - 00092544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-01-17 20:28 - 2014-01-17 20:28 - 00078648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-01-17 20:28 - 2014-01-17 20:28 - 00065776 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2014-01-17 20:28 - 2014-01-17 20:28 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-01-17 20:27 - 2014-01-17 20:27 - 00000000 ____D C:\Program Files\AVAST Software
2014-01-17 20:25 - 2014-01-17 20:25 - 00000000 ____D C:\ProgramData\AVAST Software
2014-01-17 20:24 - 2013-10-04 13:02 - 00000000 ____D C:\Users\Eva\Desktop\fotos
2014-01-17 20:23 - 2013-10-28 13:53 - 00000000 ____D C:\Users\Eva\Desktop\mirigeb
2014-01-17 20:23 - 2013-07-15 19:00 - 00000000 ____D C:\Users\Eva\Desktop\kita
2014-01-17 20:21 - 2014-01-17 20:19 - 91412976 _____ (AVAST Software) C:\Users\Eva\Downloads\avast_free_antivirus_setup.exe
2014-01-17 20:21 - 2013-12-14 11:05 - 00000000 ____D C:\Users\Eva\Desktop\Tobi Rezepte
2014-01-17 20:21 - 2013-11-06 12:08 - 00000000 ____D C:\Users\Eva\Desktop\bauch
2014-01-17 20:14 - 2014-01-17 19:10 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-01-17 20:14 - 2014-01-17 19:09 - 00000000 ____D C:\Users\Eva\Desktop\mbar
2014-01-17 19:09 - 2014-01-17 19:09 - 00089304 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-01-17 18:59 - 2013-01-03 22:02 - 01594892 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2014-01-17 18:38 - 2013-09-13 13:14 - 00000000 ____D C:\ProgramData\Oracle
2014-01-17 18:36 - 2014-01-17 18:37 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-01-17 18:36 - 2014-01-17 18:37 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-01-17 18:36 - 2014-01-17 18:37 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-01-17 18:36 - 2014-01-17 18:37 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-01-17 18:36 - 2014-01-17 18:36 - 00000000 ____D C:\Program Files (x86)\Java
2014-01-17 18:35 - 2014-01-17 18:35 - 00921000 _____ (Oracle Corporation) C:\Users\Eva\Downloads\jxpiinstall(4).exe
2014-01-17 18:33 - 2013-08-03 09:28 - 00000246 _____ C:\Windows\SIERRA.INI
2014-01-17 18:19 - 2014-01-17 18:19 - 00921000 _____ (Oracle Corporation) C:\Users\Eva\Downloads\jxpiinstall(3).exe
2014-01-17 14:19 - 2014-01-16 23:13 - 00000000 ____D C:\AdwCleaner
2014-01-16 23:03 - 2009-07-14 05:45 - 02290240 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-16 22:57 - 2014-01-16 22:57 - 00000000 ____D C:\Users\Eva\AppData\Roaming\Oracle
2014-01-16 19:33 - 2014-01-16 19:33 - 01236282 _____ C:\Users\Eva\Desktop\adwcleaner.exe
2014-01-16 19:14 - 2013-01-06 22:18 - 00000000 ___RD C:\Users\Eva\Dropbox
2014-01-16 19:07 - 2013-08-16 09:57 - 00000000 ____D C:\Windows\system32\MRT
2014-01-16 19:02 - 2013-01-06 15:52 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-16 18:55 - 2013-01-06 22:14 - 00000000 ____D C:\Users\Eva\AppData\Roaming\Dropbox
2014-01-16 18:55 - 2013-01-03 20:54 - 00000000 ___RD C:\Users\Eva\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-16 18:49 - 2014-01-16 18:49 - 00921000 _____ (Oracle Corporation) C:\Users\Eva\Downloads\jxpiinstall(2).exe
2014-01-16 18:05 - 2013-01-06 22:18 - 00001009 _____ C:\Users\Eva\Desktop\Dropbox.lnk
2014-01-16 18:05 - 2013-01-06 22:16 - 00000000 ____D C:\Users\Eva\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-01-16 14:04 - 2014-01-16 14:04 - 00001109 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-16 14:04 - 2014-01-16 14:04 - 00000000 ____D C:\Users\Eva\AppData\Roaming\Malwarebytes
2014-01-16 14:04 - 2014-01-16 14:04 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-16 14:04 - 2014-01-16 14:04 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-16 14:02 - 2014-01-16 14:02 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Eva\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-16 14:01 - 2014-01-16 14:01 - 00000000 ____D C:\Users\Eva\Documents\My Received Files
2014-01-09 18:30 - 2013-08-19 18:09 - 00012378 _____ C:\Users\Eva\Desktop\auto vergleich.xlsx
2013-12-22 18:05 - 2013-01-03 21:19 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-20 14:28 - 2013-12-14 09:27 - 00000000 ____D C:\Users\Eva\Desktop\Brigitte streichen
2013-12-20 12:47 - 2013-12-20 12:47 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
 
Some content of TEMP:
====================
C:\Users\Eva\AppData\Local\Temp\avgnt.exe
C:\Users\Eva\AppData\Local\Temp\Quarantine.exe
C:\Users\Eva\AppData\Local\Temp\vlc-2.1.2-win32.exe
C:\Users\Eva\AppData\Local\Temp\VP6Install.exe
C:\Users\Eva\AppData\Local\Temp\VP6VFW.dll
 
 
==================== Bamital & volsnap Check =================
 
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 
LastRegBack: 2013-11-23 14:52
 
==================== End Of Log ============================
         

Addition.txt

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17-01-2014 03
Ran by Eva at 2014-01-18 17:36:56
Running from C:\Users\Eva\Desktop
Boot Mode: Normal
==========================================================
 
 
==================== Security Center ========================
 
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
 
==================== Installed Programs ======================
 
AAVUpdateManager (x32 Version: 18.00.0000 - Wolters Kluwer Deutschland GmbH)
Adobe Bridge 1.0 (x32 Version: 001.000.001 - Adobe Systems) Hidden
Adobe Common File Installer (x32 Version: 1.00.001 - Adobe System Incorporated) Hidden
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Help Center 1.0 (x32 Version: 1.0.1 - Adobe Systems) Hidden
Adobe Photoshop CS2 (x32 Version: 9.0 - Adobe Systems, Inc.)
Adobe Photoshop CS2 (x32 Version: 9.0 - Adobe Systems, Inc.) Hidden
Adobe Reader XI (11.0.06) - Deutsch (x32 Version: 11.0.06 - Adobe Systems Incorporated)
Adobe Stock Photos 1.0 (x32 Version: 1.0.1 - Adobe Systems) Hidden
Amazon MP3-Downloader 1.0.17 (x32 Version: 1.0.17 - Amazon Services LLC)
AnyDVD (x32 Version: 7.2.3.0 - SlySoft)
avast! Free Antivirus (x32 Version: 9.0.2011 - Avast Software)
CloneDVD2 (x32 Version: 2.9.3.0 - Elaborate Bytes)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Definition Update for Microsoft Office 2010 (KB982726) 64-Bit Edition (Version:  - Microsoft)
Die Sims™ 2 Deluxe (x32 Version:  - )
Dropbox (HKCU Version: 2.4.11 - Dropbox, Inc.)
ElsterFormular (x32 Version: 14.1.20130301 - Landesfinanzdirektion Thüringen)
Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
HP Officejet 4620 series - Grundlegende Software für das Gerät (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Officejet 4620 series Hilfe (x32 Version: 6.0.0 - Hewlett Packard)
HP Photo Creations (x32 Version: 1.0.0.9572 - HP)
HP Update (x32 Version: 5.003.003.001 - Hewlett-Packard)
HPDiagnosticAlert (x32 Version: 1.00.0000 - Microsoft) Hidden
I.R.I.S. OCR (x32 Version: 12.3.4.0 - HP)
IrfanView (remove only) (x32 Version: 4.37 - Irfan Skiljan)
Java 7 Update 51 (x32 Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Junk Mail filter update (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Launch Manager (x32 Version: 3.0.02 - Acer Inc.)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Home and Student 2010 (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Office 32-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 32-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
Photo Gallery (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
PhotoScape (x32 Version:  - )
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version:  - Microsoft) Hidden
Skype™ 6.11 (x32 Version: 6.11.102 - Skype Technologies S.A.)
Steuer-Spar-Erklärung 2013 (x32 Version: 18.08 - Wolters Kluwer Deutschland GmbH)
Update for Microsoft Access 2010 (KB2553446) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2810071) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2826026) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2810072) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2553145) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2810066) 64-Bit Edition (Version:  - Microsoft)
Update for Microsoft Word 2010 (KB2837593) 64-Bit Edition (Version:  - Microsoft)
VLC media player 2.1.2 (x32 Version: 2.1.2 - VideoLAN)
Windows Live Communications Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 16.4.3505.0912 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
WinRAR 4.20 (64-Bit) (Version: 4.20.0 - win.rar GmbH)
 
==================== Restore Points  =========================
 
13-12-2013 08:37:54 Windows Update
16-12-2013 08:28:11 Windows Update
16-01-2014 18:00:35 Windows Update
17-01-2014 17:28:26 Removed Java 7 Update 45 (64-bit)
17-01-2014 17:30:15 Removed Java 7 Update 45
17-01-2014 17:36:33 Installed Java 7 Update 51
17-01-2014 17:51:34 Windows Update
17-01-2014 19:26:49 avast! antivirus system restore point
 
==================== Hosts content: ==========================
 
2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 
==================== Scheduled Tasks (whitelisted) =============
 
Task: {31842906-FD81-4147-84F7-90D61B7FD58A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11] (Adobe Systems Incorporated)
Task: {C012B4C0-09FC-4296-AE6D-B3F579442B74} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-01-17] (AVAST Software)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
 
==================== Loaded Modules (whitelisted) =============
 
2014-01-17 20:36 - 2014-01-17 10:49 - 02155008 _____ () C:\Program Files\AVAST Software\Avast\defs\14011700\algo.dll
2014-01-18 17:18 - 2014-01-18 10:01 - 02155008 _____ () C:\Program Files\AVAST Software\Avast\defs\14011800\algo.dll
2014-01-17 20:28 - 2014-01-17 20:28 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2013-12-20 12:47 - 2013-12-20 12:47 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2012-09-12 15:57 - 2012-09-12 15:57 - 00282112 _____ () C:\Program Files (x86)\Windows Live\Writer\de\WindowsLive.Writer.Localization.resources.dll
 
==================== Alternate Data Streams (whitelisted) =========
 
 
==================== Safe Mode (whitelisted) ===================
 
 
==================== Faulty Device Manager Devices =============
 
 
==================== Event log errors: =========================
 
Application errors:
==================
Error: (01/17/2014 08:27:02 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
 
 
Details:
AddLegacyDriverFiles: Unable to back up image of binary hhpcjwsb.
 
System Error:
Das System kann die angegebene Datei nicht finden.
.
 
Error: (01/17/2014 07:01:39 PM) (Source: .NET Runtime Optimization Service) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_64) - 1>Failed to compile: mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 .. Error code = 0x80070003
 
Error: (01/17/2014 06:25:11 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: javaw.exe, Version: 7.0.450.18, Zeitstempel: 0x5254005d
Name des fehlerhaften Moduls: deploy.dll, Version: 10.45.2.18, Zeitstempel: 0x5254099e
Ausnahmecode: 0xc0000409
Fehleroffset: 0x00000000000308d6
ID des fehlerhaften Prozesses: 0x1530
Startzeit der fehlerhaften Anwendung: 0xjavaw.exe0
Pfad der fehlerhaften Anwendung: javaw.exe1
Pfad des fehlerhaften Moduls: javaw.exe2
Berichtskennung: javaw.exe3
 
Error: (01/17/2014 02:24:05 PM) (Source: MsiInstaller) (User: Eva-PC)
Description: Produkt: Adobe Reader XI - Deutsch - Update "{AC76BA86-7AD7-0000-2550-7A8C40011006}" konnte nicht installiert werden. Fehlercode 1625. Windows Installer kann Protokolle erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung der Protokollierungsunterstützung zu erhalten: hxxp://go.microsoft.com/fwlink/?LinkId=23127
 
Error: (01/16/2014 11:47:48 PM) (Source: MsiInstaller) (User: Eva-PC)
Description: Produkt: Adobe Reader XI - Deutsch - Update "{AC76BA86-7AD7-0000-2550-7A8C40011006}" konnte nicht installiert werden. Fehlercode 1625. Windows Installer kann Protokolle erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung der Protokollierungsunterstützung zu erhalten: hxxp://go.microsoft.com/fwlink/?LinkId=23127
 
Error: (01/16/2014 11:10:05 PM) (Source: MsiInstaller) (User: Eva-PC)
Description: Produkt: Adobe Reader XI - Deutsch - Update "{AC76BA86-7AD7-0000-2550-7A8C40011006}" konnte nicht installiert werden. Fehlercode 1625. Windows Installer kann Protokolle erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung der Protokollierungsunterstützung zu erhalten: hxxp://go.microsoft.com/fwlink/?LinkId=23127
 
Error: (01/16/2014 06:03:55 PM) (Source: MsiInstaller) (User: Eva-PC)
Description: Produkt: Adobe Reader XI - Deutsch - Update "{AC76BA86-7AD7-0000-2550-7A8C40011006}" konnte nicht installiert werden. Fehlercode 1625. Windows Installer kann Protokolle erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung der Protokollierungsunterstützung zu erhalten: hxxp://go.microsoft.com/fwlink/?LinkId=23127
 
Error: (01/15/2014 10:13:36 PM) (Source: MsiInstaller) (User: Eva-PC)
Description: Produkt: Adobe Reader XI - Deutsch - Update "{AC76BA86-7AD7-0000-2550-7A8C40011006}" konnte nicht installiert werden. Fehlercode 1625. Windows Installer kann Protokolle erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung der Protokollierungsunterstützung zu erhalten: hxxp://go.microsoft.com/fwlink/?LinkId=23127
 
Error: (01/03/2014 05:25:49 PM) (Source: Application Hang) (User: )
Description: Programm Skype.exe, Version 6.11.0.102 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 
Prozess-ID: 894
 
Startzeit: 01ceff38905141d7
 
Endzeit: 230
 
Anwendungspfad: C:\Program Files (x86)\Skype\Phone\Skype.exe
 
Berichts-ID: a7cc4475-7493-11e3-88dd-705ab615811a
 
Error: (01/02/2014 03:04:27 PM) (Source: ESENT) (User: )
Description: wlmail (920) WindowsLiveMail0: Fehler -1032 (0xfffffbf8) beim Öffnen von Protokolldatei C:\Users\Eva\AppData\Local\Microsoft\Windows Live Mail\edb.log.
 
 
System errors:
=============
Error: (01/18/2014 05:14:43 PM) (Source: atikmdag) (User: )
Description: Display is not active
 
Error: (01/18/2014 05:57:57 AM) (Source: atikmdag) (User: )
Description: Display is not active
 
Error: (01/17/2014 11:00:31 PM) (Source: atikmdag) (User: )
Description: Display is not active
 
Error: (01/17/2014 09:45:04 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053
 
Error: (01/17/2014 09:45:04 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Media Player-Netzwerkfreigabedienst erreicht.
 
Error: (01/17/2014 09:44:34 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053
 
Error: (01/17/2014 09:44:34 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Media Player-Netzwerkfreigabedienst erreicht.
 
Error: (01/17/2014 09:42:19 PM) (Source: atikmdag) (User: )
Description: Display is not active
 
Error: (01/17/2014 09:42:19 PM) (Source: atikmdag) (User: )
Description: CPLIB :: General - Invalid Parameter
 
Error: (01/17/2014 08:12:48 PM) (Source: atikmdag) (User: )
Description: Display is not active
 
 
Microsoft Office Sessions:
=========================
Error: (01/17/2014 08:27:02 PM) (Source: Microsoft-Windows-CAPI2)(User: )
Description: 
Details:
AddLegacyDriverFiles: Unable to back up image of binary hhpcjwsb.
 
System Error:
Das System kann die angegebene Datei nicht finden.
 
Error: (01/17/2014 07:01:39 PM) (Source: .NET Runtime Optimization Service)(User: )
Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_64) - 1>Failed to compile: mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 .. Error code = 0x80070003 
mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
 
Error: (01/17/2014 06:25:11 PM) (Source: Application Error)(User: )
Description: javaw.exe7.0.450.185254005ddeploy.dll10.45.2.185254099ec000040900000000000308d6153001cf13a90a7dc3aeC:\Program Files\Java\jre7\bin\javaw.exeC:\Program Files\Java\jre7\bin\deploy.dll51027874-7f9c-11e3-9580-705ab615811a
 
Error: (01/17/2014 02:24:05 PM) (Source: MsiInstaller)(User: Eva-PC)
Description: Adobe Reader XI - Deutsch{AC76BA86-7AD7-0000-2550-7A8C40011006}1625(NULL)(NULL)(NULL)
 
Error: (01/16/2014 11:47:48 PM) (Source: MsiInstaller)(User: Eva-PC)
Description: Adobe Reader XI - Deutsch{AC76BA86-7AD7-0000-2550-7A8C40011006}1625(NULL)(NULL)(NULL)
 
Error: (01/16/2014 11:10:05 PM) (Source: MsiInstaller)(User: Eva-PC)
Description: Adobe Reader XI - Deutsch{AC76BA86-7AD7-0000-2550-7A8C40011006}1625(NULL)(NULL)(NULL)
 
Error: (01/16/2014 06:03:55 PM) (Source: MsiInstaller)(User: Eva-PC)
Description: Adobe Reader XI - Deutsch{AC76BA86-7AD7-0000-2550-7A8C40011006}1625(NULL)(NULL)(NULL)
 
Error: (01/15/2014 10:13:36 PM) (Source: MsiInstaller)(User: Eva-PC)
Description: Adobe Reader XI - Deutsch{AC76BA86-7AD7-0000-2550-7A8C40011006}1625(NULL)(NULL)(NULL)
 
Error: (01/03/2014 05:25:49 PM) (Source: Application Hang)(User: )
Description: Skype.exe6.11.0.10289401ceff38905141d7230C:\Program Files (x86)\Skype\Phone\Skype.exea7cc4475-7493-11e3-88dd-705ab615811a
 
Error: (01/02/2014 03:04:27 PM) (Source: ESENT)(User: )
Description: wlmail920WindowsLiveMail0: C:\Users\Eva\AppData\Local\Microsoft\Windows Live Mail\edb.log-1032 (0xfffffbf8)
 
 
==================== Memory info =========================== 
 
Percentage of memory in use: 55%
Total physical RAM: 2812.05 MB
Available physical RAM: 1254.87 MB
Total Pagefile: 5622.28 MB
Available Pagefile: 3848.89 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB
 
==================== Drives ================================
 
Drive c: () (Fixed) (Total:285.99 GB) (Free:82.32 GB) NTFS
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 183E870D)
Partition 1: (Not Active) - (Size=12 GB) - (Type=27)
Partition 2: (Active) - (Size=102 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=286 GB) - (Type=07 NTFS)
 
==================== End Of Log ============================
         

hi,

auch sauber