Hallo,

leider hat meine Frau trotz aller Warnungen geschafft, den ZIP-Anhang einer Email zu öffnen. Die Email stammte von FRITZ!Box und beinhaltete angeblich einen Fax. Im Anhang war eine ZIP-Datei.
Sie sagte, danach gab es einen doppelten Ton aus den Boxen, sonst nichts. Die Email wurde gelöscht und befindet sich z.Z. im Trash-Ordner.

Jetzt bin ich mir nicht sicher, ob der Antivirus reagiert hat oder nicht, und somit die Frage,
ob das System befallen sei. Es ist Windows 7 Prof.

Ich habe schon Desinfect vom USB-Stick gestartet und dort zwei Scanvorgänhe gemacht: Mit Avira und Kaspersky. Sowohl Avira als auch Kaspersky haben im besagten Trashordner von Thunderbird einen Virus in der Datei "Telefax_04999016283.zip" gefunden.

Meldung von Kaspersky: "Beendet mit Code 102. Es ist ein Fehler aufgetreten oder es wurde ein Virus gefunden. Wiederholen Sie den Scan ggf. im Expertenmodus mit Logging". Ich würde hier die gesamte Meldung von Kaspersky einfügen. Wo kann ich das machen?

Was wären die nächsten Schritte?

Danke schon mal für Eure Hilfe.

Gruss
Chris

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Hier die beiden Logfiles:

FRST:

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 23-01-2014
Ran by Leitung (ATTENTION: The logged in user is not administrator) on KITA-DESKTOP on 23-01-2014 10:22:18
Running from C:\Users\Leitung\Desktop
Microsoft Windows 7 Professional  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal


==================== Processes (Whitelisted) ===================

(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Avira Operations GmbH & Co. KG) C:\Avira\AntiVir Desktop\avgnt.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(Brother Industries, Ltd.) C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
(MMSOFT Design Ltd.) C:\Program Files\PC Monitor\pcmontask.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Brother Industries, Ltd.) C:\Program Files\Brother\ControlCenter3\BrccMCtl.exe
(Brother Industries, Ltd.) C:\Program Files\Brother\Brmfcmon\BrMfimon.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [avgnt] - C:\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-18] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-05-11] (Adobe Systems Incorporated)
HKLM\...\Run: [RtHDVCpl] - C:\Windows\RtHDVCpl.exe [3784704 2013-09-02] (Realtek Semiconductor)
HKLM\...\Run: [BrMfcWnd] - C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe [1159168 2009-05-26] (Brother Industries, Ltd.)
HKLM\...\Run: [ControlCenter3] - C:\Program Files\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.)
HKLM\...\Run: [PC Monitor Operations] - C:\Program Files\PC Monitor\pcmontask.exe [517592 2014-01-13] (MMSOFT Design Ltd.)
HKLM\...\RunOnce: [*WerKernelReporting] - %SYSTEMROOT%\SYSTEM32\WerFault.exe -k -rq [360448 2009-07-14] (Microsoft Corporation)
HKCU\...\Run: [RESTART_STICKY_NOTES] - C:\Windows\System32\StikyNot.exe [354304 2009-07-14] (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Avira SearchFree Toolbar plus Web Protection - {41564952-412D-5637-00A7-7A786E7484D7} - "C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" No File
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
Toolbar: HKLM - Avira SearchFree Toolbar plus Web Protection - {41564952-412D-5637-00A7-7A786E7484D7} - "C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" No File
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Winsock: Catalog9 01 C:\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 C:\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 03 C:\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 04 C:\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 05 C:\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 06 C:\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 07 C:\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 08 C:\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 19 C:\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Tcpip\Parameters: [DhcpNameServer] 195.50.140.116 195.50.140.246 192.168.5.1

FireFox:
========
FF ProfilePath: C:\Users\Leitung\AppData\Roaming\Mozilla\Firefox\Profiles\4cbljrur.default
FF Homepage: kindergruppe10.de
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin: @microsoft.com/Lync,version=15.0 - C:\Program Files\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF Extension: Noia 2.0 eXtreme OPT - C:\Users\Leitung\AppData\Roaming\Mozilla\Firefox\Profiles\4cbljrur.default\Extensions\noia2_option@kk.noia [2013-09-14]
FF Extension: Noia 2.0 (eXtreme) - C:\Users\Leitung\AppData\Roaming\Mozilla\Firefox\Profiles\4cbljrur.default\Extensions\{9f08cb5a-76b1-4bcf-aff9-90e1a5d60b1e} [2013-09-14]
FF Extension: Firefox Vista - C:\Users\Leitung\AppData\Roaming\Mozilla\Firefox\Profiles\4cbljrur.default\Extensions\{C1CCF2A6-D735-4817-866A-993A66CF9A3D} [2013-09-14]
FF StartMenuInternet: FIREFOX.EXE - C:\Mozilla Firefox\firefox.exe

========================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Avira\AntiVir Desktop\sched.exe [440376 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-26] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Avira\AntiVir Desktop\AVWEBGRD.EXE [1011768 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 Brother XP spl Service; C:\Windows\system32\brsvc01a.exe [57344 2004-06-13] (brother Industries Ltd)
R2 lmhosts; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
R2 NlaSvc; C:\Windows\System32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
R2 nsi; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
R2 PC Monitor; C:\Program Files\PC Monitor\PCMonitorSrv.exe [696792 2014-01-13] (MMSOFT Design Ltd.)
R2 TeamViewer8; C:\TeamViewer\Version8\TeamViewer_Service.exe [5091168 2013-10-01] (TeamViewer GmbH)
S4 APNMCP; "C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe" [x]

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [90400 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135648 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-26] (Avira Operations GmbH & Co. KG)
R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [243128 2013-09-02] (Disc Soft Ltd)
S3 Linksys_adapter_H; C:\Windows\System32\DRIVERS\AE1200w7.sys [1092160 2011-03-29] (Broadcom Corporation)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-09-02] (Avira GmbH)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-23 10:22 - 2014-01-23 10:22 - 00007659 _____ C:\Users\Leitung\Desktop\FRST.txt
2014-01-23 10:20 - 2014-01-23 10:20 - 00000000 ____D C:\FRST
2014-01-23 09:00 - 2014-01-23 09:00 - 01222144 _____ (Farbar) C:\Users\Leitung\Desktop\FRST.exe
2014-01-23 07:19 - 2014-01-23 07:20 - 00000000 ____D C:\.Trash-999
2014-01-22 15:01 - 2014-01-22 15:00 - 04767744 _____ C:\Users\Leitung\Desktop\inSSIDer31-installer.msi
2014-01-16 16:05 - 2014-01-16 16:05 - 05137408 _____ C:\Users\Leitung\Desktop\K10 - Bewerber EA_2014.ppt
2014-01-08 10:57 - 2014-01-08 10:57 - 00002120 _____ C:\Users\Leitung\Desktop\K 10 Urschleim-Rezepte - Verknüpfung.lnk

==================== One Month Modified Files and Folders =======

2014-01-23 10:22 - 2014-01-23 10:22 - 00007659 _____ C:\Users\Leitung\Desktop\FRST.txt
2014-01-23 10:22 - 2009-07-14 05:34 - 00014752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-23 10:22 - 2009-07-14 05:34 - 00014752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-23 10:20 - 2014-01-23 10:20 - 00000000 ____D C:\FRST
2014-01-23 10:20 - 2013-09-02 21:21 - 00000000 ____D C:\TREBER Root
2014-01-23 10:18 - 2009-07-14 05:39 - 00024924 _____ C:\Windows\setupact.log
2014-01-23 10:16 - 2013-09-02 15:41 - 01956244 _____ C:\Windows\WindowsUpdate.log
2014-01-23 10:13 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-23 09:00 - 2014-01-23 09:00 - 01222144 _____ (Farbar) C:\Users\Leitung\Desktop\FRST.exe
2014-01-23 07:20 - 2014-01-23 07:19 - 00000000 ____D C:\.Trash-999
2014-01-22 22:14 - 2013-09-02 16:01 - 01612484 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-22 15:00 - 2014-01-22 15:01 - 04767744 _____ C:\Users\Leitung\Desktop\inSSIDer31-installer.msi
2014-01-22 14:56 - 2013-09-02 20:42 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-21 17:00 - 2013-09-13 19:55 - 00000000 ____D C:\Users\Leitung\Documents\BRECKERFELD
2014-01-17 13:47 - 2013-09-13 19:55 - 00000000 ____D C:\Users\Leitung\Desktop\ESSENSPLAN+ Einkaufsliste
2014-01-16 16:05 - 2014-01-16 16:05 - 05137408 _____ C:\Users\Leitung\Desktop\K10 - Bewerber EA_2014.ppt
2014-01-15 09:37 - 2013-09-18 15:39 - 00000000 ____D C:\Program Files\PC Monitor
2014-01-13 10:02 - 2013-11-22 10:42 - 00027136 _____ C:\Users\Leitung\Documents\Einschulung 2015.xls
2014-01-08 10:57 - 2014-01-08 10:57 - 00002120 _____ C:\Users\Leitung\Desktop\K 10 Urschleim-Rezepte - Verknüpfung.lnk
2014-01-07 16:23 - 2013-11-13 11:21 - 00000000 ____D C:\Users\Leitung\Documents\ADRESSENLISTE
2014-01-06 15:37 - 2013-09-13 19:57 - 00000000 ____D C:\Users\Leitung\Documents\DIENSTPLAN

Some content of TEMP:
====================
C:\Users\Leitung\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== End Of Log ============================
         

--- --- ---

--- --- ---


Addition:

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 23-01-2014
Ran by Leitung at 2014-01-23 10:23:10
Running from C:\Users\Leitung\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

Adobe Flash Player 11 Plugin (Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.05) - Deutsch (Version: 11.0.05 - Adobe Systems Incorporated)
Avira Free Antivirus (Version: 14.0.2.286 - Avira)
Avira SearchFree Toolbar plus Web Protection (Version: 12.2.2.663 - Ask Partner Network)
Brother BRAdmin Light 1.24.0000 (Version: 1.24.0000 - Brother)
Brother MFL-Pro Suite MFC-820CW (Version: 1.0.1.0 - Brother Industries, Ltd.)
DAEMON Tools Lite (Version: 4.47.1.0337 - Disc Soft Ltd)
Definition Update for Microsoft Office 2013 (KB2760587) 32-Bit Edition (Version:  - Microsoft)
Intel(R) Graphics Media Accelerator Driver (Version: 8.15.10.1930 - Intel Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Access MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft DCF MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Excel MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Groove MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft InfoPath MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Lync MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Korrekturhilfen 2013 - Deutsch (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office OSM MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office OSM UX MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2013 (Version: 15.0.4420.1017 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - Italiano (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft OneNote MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Outlook MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft PowerPoint MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Publisher MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Word MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Mozilla Firefox 23.0.1 (x86 de) (Version: 23.0.1 - Mozilla)
Mozilla Firefox 26.0 (x86 de) (HKCU Version: 26.0 - Mozilla)
Mozilla Thunderbird 17.0.8 (x86 de) (Version: 17.0.8 - Mozilla)
Mozilla Thunderbird 24.2.0 (x86 de) (HKCU Version: 24.2.0 - Mozilla)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
PC Monitor (Version: 4.0.0 - MMSOFT Design)
Realtek High Definition Audio Driver (Version:  - )
TAB-AV KiBiz (Version:  - )
TeamViewer 8 Host (Version: 8.0.22298 - TeamViewer)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (Version: 1 - Microsoft Corporation)
Update for Microsoft Access 2013 (KB2752093) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Access 2013 (KB2760350) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Lync 2013 (KB2817621) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2726954) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2726996) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2727096) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2737954) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2752025) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760224) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760267) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760533) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760538) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760539) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760553) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760610) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2767845) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2767851) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2767860) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2768016) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817311) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817491) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817493) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817624) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817626) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817632) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft OneNote 2013 (KB2768011) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft OneNote 2013 (KB2817467) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Outlook 2013 (KB2817629) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft PowerPoint 2013 (KB2726947) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft PowerPoint 2013 (KB2810006) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft SkyDrive Pro (KB2817622) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Visio 2013 (KB2810008) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2013 (KB2768338) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2767863) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2817308) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2817627) 32-Bit Edition (Version:  - Microsoft)
Winamp (Version: 5.65  - Nullsoft, Inc)
WinRAR 4.20 (32-Bit) (Version: 4.20.0 - win.rar GmbH)

==================== Restore Points  =========================

Could not list Restore Points. Check WMI.


==================== Hosts content: ==========================

2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => ?

==================== Loaded Modules (whitelisted) =============

2013-09-18 14:59 - 2009-02-27 15:38 - 00139264 ____R () C:\Program Files\Brother\BrUtilities\BrLogAPI.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============

Name: Standardtastatur (PS/2)
Description: Standardtastatur (PS/2)
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardtastaturen)
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: PS/2-kompatible Maus
Description: PS/2-kompatible Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (01/23/2014 10:23:05 AM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2014/01/23 10:23:05.904]: [00001836]: GetDeviceIpAddress: GetAddressByName [BRN_B3A5BC] Error

Error: (01/23/2014 10:22:35 AM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2014/01/23 10:22:35.858]: [00001836]: GetDeviceIpAddress: GetAddressByName [BRN_B3A5BC] Error

Error: (01/23/2014 10:22:05 AM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2014/01/23 10:22:05.812]: [00001836]: GetDeviceIpAddress: GetAddressByName [BRN_B3A5BC] Error

Error: (01/23/2014 10:21:35 AM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2014/01/23 10:21:35.767]: [00001836]: GetDeviceIpAddress: GetAddressByName [BRN_B3A5BC] Error

Error: (01/23/2014 10:21:05 AM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2014/01/23 10:21:05.721]: [00001836]: GetDeviceIpAddress: GetAddressByName [BRN_B3A5BC] Error

Error: (01/23/2014 10:20:35 AM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2014/01/23 10:20:35.689]: [00001836]: GetDeviceIpAddress: GetAddressByName [BRN_B3A5BC] Error

Error: (01/23/2014 10:20:05 AM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2014/01/23 10:20:05.652]: [00001836]: GetDeviceIpAddress: GetAddressByName [BRN_B3A5BC] Error

Error: (01/23/2014 10:19:35 AM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2014/01/23 10:19:35.613]: [00001836]: GetDeviceIpAddress: GetAddressByName [BRN_B3A5BC] Error

Error: (01/23/2014 10:19:05 AM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2014/01/23 10:19:05.572]: [00001836]: GetDeviceIpAddress: GetAddressByName [BRN_B3A5BC] Error

Error: (01/23/2014 10:18:35 AM) (Source: Brother BrLog) (User: )
Description: STI BrtSTI: [2014/01/23 10:18:35.527]: [00001836]: GetDeviceIpAddress: GetAddressByName [BRN_B3A5BC] Error


System errors:
=============
Error: (01/23/2014 10:18:30 AM) (Source: Microsoft-Windows-DriverFrameworks-UserMode) (User: NT-AUTORITÄT)
Description: Das Treiberpaket konnte nicht installiert werden. Der letzte Status war "258".

Error: (01/23/2014 10:17:56 AM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (01/22/2014 10:14:15 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR2 gefunden.

Error: (01/22/2014 10:12:30 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (01/15/2014 04:31:50 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "UPnP-Gerätehost" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (01/15/2014 04:31:50 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "upnphost" konnte sich nicht als "NT AUTHORITY\LocalService" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%50

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (01/15/2014 04:31:50 PM) (Source: DCOM) (User: )
Description: 1069upnphost{204810B9-73B2-11D4-BF42-00B0D0118B56}

Error: (11/08/2013 01:14:29 PM) (Source: BugCheck) (User: )
Description: 0x0000007e (0xc0000005, 0x82a8b415, 0x8cf2b7c0, 0x8cf2b3a0)C:\Windows\MEMORY.DMP110813-17690-01

Error: (11/08/2013 01:14:24 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎08.‎11.‎2013 um 12:40:54 unerwartet heruntergefahren.

Error: (10/15/2013 02:02:35 PM) (Source: BugCheck) (User: )
Description: 0x0000008e (0xc0000005, 0x82a89415, 0xb72c3324, 0x00000000)C:\Windows\MEMORY.DMP101513-17300-01


Microsoft Office Sessions:
=========================
Error: (01/23/2014 10:24:05 AM) (Source: Brother BrLog)(User: )
Description: STIBrtSTI: [2014/01/23 10:24:05.995]: [00001836]: GetDeviceIpAddress: GetAddressByName [BRN_B3A5BC] Error

Error: (01/23/2014 10:23:35 AM) (Source: Brother BrLog)(User: )
Description: STIBrtSTI: [2014/01/23 10:23:35.949]: [00001836]: GetDeviceIpAddress: GetAddressByName [BRN_B3A5BC] Error

Error: (01/23/2014 10:23:05 AM) (Source: Brother BrLog)(User: )
Description: STIBrtSTI: [2014/01/23 10:23:05.904]: [00001836]: GetDeviceIpAddress: GetAddressByName [BRN_B3A5BC] Error

Error: (01/23/2014 10:22:35 AM) (Source: Brother BrLog)(User: )
Description: STIBrtSTI: [2014/01/23 10:22:35.858]: [00001836]: GetDeviceIpAddress: GetAddressByName [BRN_B3A5BC] Error

Error: (01/23/2014 10:22:05 AM) (Source: Brother BrLog)(User: )
Description: STIBrtSTI: [2014/01/23 10:22:05.812]: [00001836]: GetDeviceIpAddress: GetAddressByName [BRN_B3A5BC] Error

Error: (01/23/2014 10:21:35 AM) (Source: Brother BrLog)(User: )
Description: STIBrtSTI: [2014/01/23 10:21:35.767]: [00001836]: GetDeviceIpAddress: GetAddressByName [BRN_B3A5BC] Error

Error: (01/23/2014 10:21:05 AM) (Source: Brother BrLog)(User: )
Description: STIBrtSTI: [2014/01/23 10:21:05.721]: [00001836]: GetDeviceIpAddress: GetAddressByName [BRN_B3A5BC] Error

Error: (01/23/2014 10:20:35 AM) (Source: Brother BrLog)(User: )
Description: STIBrtSTI: [2014/01/23 10:20:35.689]: [00001836]: GetDeviceIpAddress: GetAddressByName [BRN_B3A5BC] Error

Error: (01/23/2014 10:20:05 AM) (Source: Brother BrLog)(User: )
Description: STIBrtSTI: [2014/01/23 10:20:05.652]: [00001836]: GetDeviceIpAddress: GetAddressByName [BRN_B3A5BC] Error

Error: (01/23/2014 10:19:35 AM) (Source: Brother BrLog)(User: )
Description: STIBrtSTI: [2014/01/23 10:19:35.613]: [00001836]: GetDeviceIpAddress: GetAddressByName [BRN_B3A5BC] Error


==================== Memory info =========================== 

Percentage of memory in use: 27%
Total physical RAM: 3061.98 MB
Available physical RAM: 2205.61 MB
Total Pagefile: 6122.26 MB
Available Pagefile: 4974.68 MB
Total Virtual: 2047.88 MB
Available Virtual: 1906.29 MB

==================== Drives ================================

Drive c: (SYSTEM) (Fixed) (Total:232.88 GB) (Free:195.33 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

==================== End Of Log ============================
         

Zitat von schrauber

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Hallo @schrauber. Habe ich das richtige Log eingefügt?
Was wäre der nächste Schritt?

Sieht gut aus. Wurde rechtzeitig geblockt