Windows 8.1 - McAfee - Echtzeit-Scanner deaktiviert sich von selbst

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 17:23 on 08/02/2014 (Martin)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 07-02-2014
Ran by Martin at 2014-02-08 17:26:39
Running from C:\Users\Martin\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {ADA629C7-7F48-5689-624A-3B76997E0892}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {16C7C823-5972-5907-58FA-0004E2F9422F}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: McAfee Firewall (Enabled) {959DA8E2-3527-57D1-4915-924367AD4FE9}

==================== Installed Programs ======================

Adobe Reader X MUI (x32 Version: 10.0.0 - Adobe Systems Incorporated)
ASUS Instant Key (x32 Version: 1.1.3 - ASUS)
ASUS Live Update (x32 Version: 3.2.6 - ASUS)
ASUS Power4Gear Hybrid (Version: 3.0.6 - ASUS)
ASUS Screen Saver (x32 Version: 1.0.2 - ASUS)
ASUS Smart Gesture (x32 Version: 2.2.4 - ASUS)
ASUS Splendid Video Enhancement Technology (x32 Version: 2.01.0018 - ASUS)
ASUS USB Charger Plus (x32 Version: 3.1.7 - ASUS)
ASUS Video Magic (x32 Version: 6.0.8015 - CyberLink Corp.)
ASUS Video Magic (x32 Version: 6.0.8015 - CyberLink Corp.) Hidden
ASUS WebStorage Sync Agent (x32 Version: 1.1.18.159 - ASUS Cloud Corporation)
ASUSDVD (x32 Version: 10.0.5520.52 - CyberLink Corp.)
ASUSDVD (x32 Version: 10.0.5520.52 - CyberLink Corp.) Hidden
AsusVibe2.0 (x32 Version: 2.0.12.310 - ASUSTEK)
ATK Package (x32 Version: 1.0.0030 - ASUS)
Azteca (x32 Version: 2.2.0.97 - WildTangent) Hidden
Bejeweled 3 (x32 Version: 2.2.0.97 - WildTangent) Hidden
Cut the Rope (x32 Version: 3.0.2.38 - WildTangent) Hidden
CyberLink MediaEspresso 6.5 (x32 Version: 6.5.4103_46746 - CyberLink Corp.)
CyberLink MediaEspresso 6.5 (x32 Version: 6.5.4103_46746 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Galerie de photos (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
GIMP 2.8.10 (Version: 2.8.10 - The GIMP Team)
Google Chrome (x32 Version: 32.0.1700.107 - Google Inc.)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
Intel Collaborative Processor Performance Control (x32 Version: 1.0.0.1013 - Intel Corporation)
Intel(R) Management Engine Components (x32 Version: 9.0.10.1372 - Intel Corporation)
Intel(R) PRO/Wireless Driver (Version: 16.01.5000.0577 - Intel Corporation) Hidden
Intel(R) Processor Graphics (x32 Version: 10.18.10.3308 - Intel Corporation)
Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed (Version: 16.1.1.0084 - Intel Corporation) Hidden
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology(patch version 3.0.1332.1) (Version: 3.1.1307.0366 - Intel Corporation)
Intel(R) Update Manager (x32 Version: 1.6.3.70 - Intel Corporation) Hidden
Intel(R) WiDi (Version: 4.2.19.0 - Intel Corporation)
Intel® PROSet/Wireless Software (x32 Version: 16.1.5 - Intel Corporation)
Intel® PROSet/Wireless WiFi Software (Version: 16.01.5000.0269 - Intel Corporation) Hidden
Intel® Trusted Connect Service Client (Version: 1.28.487.1 - Intel Corporation) Hidden
Java 7 Update 51 (64-bit) (Version: 7.0.510 - Oracle)
McAfee Internet Security (x32 Version: 12.8.908 - McAfee, Inc.)
McAfee Virtual Technician (x32 Version: 7.5.0.3026 - McAfee, Inc.)
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office (x32 Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
MyBitCast 2.0 (x32 Version: 2.0 - ASUS)
Notepad++ (x32 Version: 6.5.3 - Notepad++ Team)
NVIDIA Grafiktreiber 331.65 (Version: 331.65 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.133.889 - NVIDIA Corporation) Hidden
NVIDIA Optimus 4.11.9 (Version: 4.11.9 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.0604 - NVIDIA Corporation) Hidden
NVIDIA PhysX System Software 9.13.0604 (Version: 9.13.0604 - NVIDIA Corporation)
NVIDIA Systemsteuerung 331.65 (Version: 331.65 - NVIDIA Corporation) Hidden
NVIDIA Update 4.11.9 (Version: 4.11.9 - NVIDIA Corporation)
NVIDIA Update Components (Version: 4.11.9 - NVIDIA Corporation) Hidden
Peggle (x32 Version: 2.2.0.95 - WildTangent) Hidden
Penguins! (x32 Version: 2.2.0.98 - WildTangent) Hidden
Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Raccolta foto (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Realtek Card Reader (x32 Version: 6.2.9200.21236 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (x32 Version: 8.18.621.2013 - Realtek)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.7023 - Realtek Semiconductor Corp.)
Shared C Run-time for x64 (Version: 10.0.0 - McAfee)
Tales of Lagoona (x32 Version: 2.2.0.110 - WildTangent) Hidden
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
WildTangent Games (x32 Version: 1.0.0.0 - WildTangent)
WildTangent Games App (x32 Version: 4.0.10.5 - WildTangent) Hidden
Windows Driver Package - ASUS (ATP) Mouse  (08/19/2013 1.0.0.185) (Version: 08/19/2013 1.0.0.185 - ASUS)
Windows Live (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 16.4.3505.0912 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
WinFlash (x32 Version: 2.42.0 - ASUS)

==================== Restore Points  =========================


==================== Hosts content: ==========================

2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {035792A1-D4EF-4A78-BF9A-AA9628C281A3} - System32\Tasks\Microsoft\Windows\Setup\SetupCleanupTask
Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {09176434-F29C-4B26-BFBC-E8F8BA03E4E0} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-02-08] (Google Inc.)
Task: {0A90CA84-9E9B-4C24-8187-73A62DFAB8F2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-02-08] (Google Inc.)
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {1ACC3DB8-4ABA-4343-A64F-FAADEF8B275C} - System32\Tasks\AsusVibeSchedule => C:\Program Files (x86)\Asus\AsusVibe\AsusVibeLauncher.exe [2013-07-09] ()
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {47D4D55E-08E6-40CE-98DA-BB996EAC8B22} - System32\Tasks\ISM-UpdateService-e57b59e7-5862-4250-9ce0-76fb411dc0d2-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\Bootstrap.exe [2013-07-18] (Intel Corporation)
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {58595AF8-5888-4B71-8CFE-1FBE16E3BB28} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2013-09-04] (AsusTek)
Task: {59BEDE1B-496C-43CF-8847-3E40AD5709E0} - System32\Tasks\ISM-UpdateService-e57b59e7-5862-4250-9ce0-76fb411dc0d2 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\Bootstrap.exe [2013-07-18] (Intel Corporation)
Task: {62B9DD7D-A756-4762-BD80-B71AFD51CDC0} - System32\Tasks\ASUS InstantOn Config => C:\Program Files\ASUS\P4G\InsOnCfg.exe
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {B664F96C-1593-48C2-A98D-9A74B95EFE34} - System32\Tasks\ASUS Splendid ColorU => C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe [2013-08-16] (ASUSTeK Computer Inc.)
Task: {B77FBD15-19ED-40DC-B966-F575EA5358A1} - System32\Tasks\Microsoft\Windows\SetupSQMTask => C:\WINDOWS\SYSTEM32\OOBE\SETUPSQM.EXE [2013-08-22] (Microsoft Corporation)
Task: {BE669653-867C-4DB9-9B4E-87F976205A57} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2013-08-19] (ASUS)
Task: {CB51B437-F252-48F1-9A7B-49E9CDD2D00C} - System32\Tasks\ASUS P4G => C:\Program Files\ASUS\P4G\BatteryLife.exe [2013-08-29] (ASUS)
Task: {CF67EBC4-4E45-45B5-9DA7-FA25DE5C7144} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2013-08-29] (ASUSTek Computer Inc.)
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-08-29 17:01 - 2013-08-29 17:01 - 00031360 _____ () C:\Program Files\ASUS\P4G\DevMng.dll
2013-08-19 18:16 - 2013-08-19 18:16 - 00015440 _____ () C:\Program Files (x86)\ASUS\Splendid\DetectDisplayDC.dll
2013-08-16 11:03 - 2013-08-16 11:03 - 00023040 _____ () C:\Program Files (x86)\ASUS\Splendid\CCTAdjust.dll
2013-12-10 08:13 - 2013-12-10 08:13 - 00013088 _____ () C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll
2014-02-08 00:49 - 2014-02-02 00:41 - 00715592 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\libglesv2.dll
2014-02-08 00:49 - 2014-02-02 00:41 - 00100168 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\libegl.dll
2014-02-08 00:49 - 2014-02-02 00:42 - 04055368 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\pdf.dll
2014-02-08 00:49 - 2014-02-02 00:42 - 00399688 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ppGoogleNaClPluginChrome.dll
2014-02-08 00:49 - 2014-02-02 00:41 - 01634632 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ffmpegsumo.dll
2014-02-08 00:49 - 2014-02-02 00:42 - 13616456 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Users\Martin\SkyDrive:ms-properties

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (02/08/2014 05:26:40 PM) (Source: AVLogEvent) (User: NT-AUTORITÄT)
Description: Content is missing.
Error Code:a7f42014

Error: (02/08/2014 05:25:55 PM) (Source: AVLogEvent) (User: NT-AUTORITÄT)
Description: Content is missing.
Error Code:a7f42014

Error: (02/08/2014 05:25:54 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: FRST64.exe, Version: 3.3.10.2, Zeitstempel: 0x52f44fbf
Name des fehlerhaften Moduls: FRST64.exe, Version: 3.3.10.2, Zeitstempel: 0x52f44fbf
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000025669
ID des fehlerhaften Prozesses: 0x157c
Startzeit der fehlerhaften Anwendung: 0xFRST64.exe0
Pfad der fehlerhaften Anwendung: FRST64.exe1
Pfad des fehlerhaften Moduls: FRST64.exe2
Berichtskennung: FRST64.exe3
Vollständiger Name des fehlerhaften Pakets: FRST64.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: FRST64.exe5

Error: (02/08/2014 05:25:40 PM) (Source: AVLogEvent) (User: NT-AUTORITÄT)
Description: Content is missing.
Error Code:a7f42014

Error: (02/08/2014 05:25:40 PM) (Source: AVLogEvent) (User: NT-AUTORITÄT)
Description: Content is missing.
Error Code:a7f42014

Error: (02/08/2014 05:25:39 PM) (Source: AVLogEvent) (User: NT-AUTORITÄT)
Description: Content is missing.
Error Code:a7f42014

Error: (02/08/2014 05:24:40 PM) (Source: AVLogEvent) (User: NT-AUTORITÄT)
Description: Content is missing.
Error Code:a7f42014

Error: (02/08/2014 05:23:40 PM) (Source: AVLogEvent) (User: NT-AUTORITÄT)
Description: Content is missing.
Error Code:a7f42014

Error: (02/08/2014 05:22:39 PM) (Source: AVLogEvent) (User: NT-AUTORITÄT)
Description: Content is missing.
Error Code:a7f42014

Error: (02/08/2014 05:21:39 PM) (Source: AVLogEvent) (User: NT-AUTORITÄT)
Description: Content is missing.
Error Code:a7f42014


System errors:
=============
Error: (02/08/2014 05:16:07 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (02/08/2014 05:16:07 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1326

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (02/08/2014 05:16:07 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "McAfee Inc. mfeapfk" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1243

Error: (02/08/2014 04:50:23 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (02/08/2014 04:50:23 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1326

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (02/08/2014 04:50:22 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "McAfee Inc. mfeapfk" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1243

Error: (02/08/2014 04:49:38 PM) (Source: DCOM) (User: MARTIN-PC)
Description: 1084ShellHWDetectionNicht verfügbar{DD522ACC-F821-461A-A407-50B198B896DC}

Error: (02/08/2014 04:49:24 PM) (Source: DCOM) (User: MARTIN-PC)
Description: 1084ShellHWDetectionNicht verfügbar{DD522ACC-F821-461A-A407-50B198B896DC}

Error: (02/08/2014 04:49:18 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: 1084McNaiAnnNicht verfügbar{C90134D2-4AE9-407A-919A-4A2EF09C6C51}

Error: (02/08/2014 04:49:18 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: 1084McNaiAnnNicht verfügbar{C90134D2-4AE9-407A-919A-4A2EF09C6C51}


Microsoft Office Sessions:
=========================
Error: (02/08/2014 05:26:40 PM) (Source: AVLogEvent)(User: NT-AUTORITÄT)
Description: a7f42014

Error: (02/08/2014 05:25:55 PM) (Source: AVLogEvent)(User: NT-AUTORITÄT)
Description: a7f42014

Error: (02/08/2014 05:25:54 PM) (Source: Application Error)(User: )
Description: FRST64.exe3.3.10.252f44fbfFRST64.exe3.3.10.252f44fbfc00000050000000000025669157c01cf24ea611abbdbC:\Users\Martin\Desktop\FRST64.exeC:\Users\Martin\Desktop\FRST64.exeadf3c401-90dd-11e3-be80-0c8bfd9db074

Error: (02/08/2014 05:25:40 PM) (Source: AVLogEvent)(User: NT-AUTORITÄT)
Description: a7f42014

Error: (02/08/2014 05:25:40 PM) (Source: AVLogEvent)(User: NT-AUTORITÄT)
Description: a7f42014

Error: (02/08/2014 05:25:39 PM) (Source: AVLogEvent)(User: NT-AUTORITÄT)
Description: a7f42014

Error: (02/08/2014 05:24:40 PM) (Source: AVLogEvent)(User: NT-AUTORITÄT)
Description: a7f42014

Error: (02/08/2014 05:23:40 PM) (Source: AVLogEvent)(User: NT-AUTORITÄT)
Description: a7f42014

Error: (02/08/2014 05:22:39 PM) (Source: AVLogEvent)(User: NT-AUTORITÄT)
Description: a7f42014

Error: (02/08/2014 05:21:39 PM) (Source: AVLogEvent)(User: NT-AUTORITÄT)
Description: a7f42014


==================== Memory info =========================== 

Percentage of memory in use: 21%
Total physical RAM: 8075.1 MB
Available physical RAM: 6311.44 MB
Total Pagefile: 9995.1 MB
Available Pagefile: 8180.39 MB
Total Virtual: 131072 MB
Available Virtual: 131071.83 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:372.26 GB) (Free:327.82 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (Data) (Fixed) (Total:537.8 GB) (Free:537.64 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 932 GB) (Disk ID: 57788C0B)

Partition: GPT Partition Type
==================== End Of Log ============================
         

LastRegBack: 2014-02-08 11:32

==================== End Of Log ============================
         

GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-02-08 17:35:32
Windows 6.2.9200  x64 \Device\Harddisk0\DR0 -> \Device\00000038 HGST_HTS541010A9E680 rev.JA0OA560 931,51GB
Running: Gmer-19357.exe; Driver: C:\Users\Martin\AppData\Local\Temp\pxdyypow.sys


---- User code sections - GMER 2.1 ----

.text   C:\WINDOWS\system32\dwm.exe[988] C:\WINDOWS\system32\KERNEL32.DLL!K32GetModuleInformation                                       00007ffe313a30e0 7 bytes JMP 00007fff304402d0
.text   C:\WINDOWS\system32\dwm.exe[988] C:\WINDOWS\system32\KERNEL32.DLL!RegQueryValueExW                                              00007ffe313a4478 7 bytes JMP 00007fff30440308
.text   C:\WINDOWS\system32\dwm.exe[988] C:\WINDOWS\system32\KERNEL32.DLL!RegDeleteValueW                                               00007ffe314511a8 7 bytes JMP 00007fff30440340
.text   C:\WINDOWS\system32\dwm.exe[988] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExW                                                00007ffe3145121c 7 bytes JMP 00007fff304403b0
.text   C:\WINDOWS\system32\dwm.exe[988] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExA                                                00007ffe31451668 7 bytes JMP 00007fff30440378
.text   C:\WINDOWS\system32\dwm.exe[988] C:\WINDOWS\system32\KERNEL32.DLL!K32GetModuleFileNameExW                                       00007ffe314572d0 7 bytes JMP 00007fff30440260
.text   C:\WINDOWS\system32\dwm.exe[988] C:\WINDOWS\system32\KERNEL32.DLL!K32EnumProcessModulesEx                                       00007ffe3147d5a4 7 bytes JMP 00007fff30440228
.text   C:\WINDOWS\system32\dwm.exe[988] C:\WINDOWS\system32\KERNEL32.DLL!K32GetMappedFileNameW                                         00007ffe3147d614 7 bytes JMP 00007fff30440298
.text   C:\WINDOWS\system32\dwm.exe[988] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleW                                            00007ffe30452124 7 bytes JMP 00007fff304400d8
.text   C:\WINDOWS\system32\dwm.exe[988] C:\WINDOWS\system32\KERNELBASE.dll!FreeLibrary                                                 00007ffe304550e8 5 bytes JMP 00007fff30440180
.text   C:\WINDOWS\system32\dwm.exe[988] C:\WINDOWS\system32\KERNELBASE.dll!LoadLibraryExW                                              00007ffe304552a0 5 bytes JMP 00007fff30440148
.text   C:\WINDOWS\system32\dwm.exe[988] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleExW                                          00007ffe3045a9b0 5 bytes JMP 00007fff30440110
.text   C:\WINDOWS\system32\dwm.exe[988] C:\WINDOWS\system32\USER32.dll!CreateWindowExW                                                 00007ffe30be7b64 10 bytes JMP 00007fff30440490
.text   C:\WINDOWS\system32\dwm.exe[988] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesA                                             00007ffe30c02910 5 bytes JMP 00007fff30440420
.text   C:\WINDOWS\system32\dwm.exe[988] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesW                                             00007ffe30c04578 5 bytes JMP 00007fff30440458
.text   C:\WINDOWS\system32\dwm.exe[988] C:\WINDOWS\system32\USER32.dll!DisplayConfigGetDeviceInfo                                      00007ffe30c04980 9 bytes JMP 00007fff304403e8
.text   C:\WINDOWS\system32\dwm.exe[988] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList                                         00007ffe31251500 8 bytes JMP 00007fff304401b8
.text   C:\WINDOWS\system32\dwm.exe[988] C:\WINDOWS\system32\GDI32.dll!D3DKMTQueryAdapterInfo                                           00007ffe31251750 8 bytes JMP 00007fff304401f0
.text   C:\WINDOWS\system32\dwm.exe[988] C:\WINDOWS\system32\dxgi.dll!CreateDXGIFactory                                                 00007ffe2e06705c 5 bytes JMP 00007fff2e0500d8
.text   C:\WINDOWS\system32\dwm.exe[988] C:\WINDOWS\system32\dxgi.dll!CreateDXGIFactory1                                                00007ffe2e067678 5 bytes JMP 00007fff2e050110
.text   C:\WINDOWS\system32\nvvsvc.exe[784] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506                                      00007ffe310b169a 4 bytes [0B, 31, FE, 7F]
.text   C:\WINDOWS\system32\nvvsvc.exe[784] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514                                      00007ffe310b16a2 4 bytes [0B, 31, FE, 7F]
.text   C:\WINDOWS\system32\nvvsvc.exe[784] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118                                         00007ffe310b181a 4 bytes [0B, 31, FE, 7F]
.text   C:\WINDOWS\system32\nvvsvc.exe[784] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142                                         00007ffe310b1832 4 bytes [0B, 31, FE, 7F]
.text   C:\WINDOWS\system32\WLANExt.exe[1480] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506                                    00007ffe310b169a 4 bytes [0B, 31, FE, 7F]
.text   C:\WINDOWS\system32\WLANExt.exe[1480] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514                                    00007ffe310b16a2 4 bytes [0B, 31, FE, 7F]
.text   C:\WINDOWS\system32\WLANExt.exe[1480] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118                                       00007ffe310b181a 4 bytes [0B, 31, FE, 7F]
.text   C:\WINDOWS\system32\WLANExt.exe[1480] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142                                       00007ffe310b1832 4 bytes [0B, 31, FE, 7F]
.text   C:\Program Files\Intel\WiFi\bin\EvtEng.exe[1944] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506                         00007ffe310b169a 4 bytes [0B, 31, FE, 7F]
.text   C:\Program Files\Intel\WiFi\bin\EvtEng.exe[1944] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514                         00007ffe310b16a2 4 bytes [0B, 31, FE, 7F]
.text   C:\Program Files\Intel\WiFi\bin\EvtEng.exe[1944] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118                            00007ffe310b181a 4 bytes [0B, 31, FE, 7F]
.text   C:\Program Files\Intel\WiFi\bin\EvtEng.exe[1944] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142                            00007ffe310b1832 4 bytes [0B, 31, FE, 7F]
.text   C:\Program Files\Intel\WiFi\bin\EvtEng.exe[1944] C:\WINDOWS\SYSTEM32\WSOCK32.dll!setsockopt + 194                               00007ffe23e81f6a 4 bytes [E8, 23, FE, 7F]
.text   C:\Program Files\Intel\WiFi\bin\EvtEng.exe[1944] C:\WINDOWS\SYSTEM32\WSOCK32.dll!setsockopt + 218                               00007ffe23e81f82 4 bytes [E8, 23, FE, 7F]
.text   C:\windows\system32\mfevtps.exe[1664] C:\WINDOWS\system32\psapi.dll!GetModuleBaseNameA + 506                                    00007ffe310b169a 4 bytes [0B, 31, FE, 7F]
.text   C:\windows\system32\mfevtps.exe[1664] C:\WINDOWS\system32\psapi.dll!GetModuleBaseNameA + 514                                    00007ffe310b16a2 4 bytes [0B, 31, FE, 7F]
.text   C:\windows\system32\mfevtps.exe[1664] C:\WINDOWS\system32\psapi.dll!QueryWorkingSet + 118                                       00007ffe310b181a 4 bytes [0B, 31, FE, 7F]
.text   C:\windows\system32\mfevtps.exe[1664] C:\WINDOWS\system32\psapi.dll!QueryWorkingSet + 142                                       00007ffe310b1832 4 bytes [0B, 31, FE, 7F]
.text   C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe[1192] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506     00007ffe310b169a 4 bytes [0B, 31, FE, 7F]
.text   C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe[1192] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514     00007ffe310b16a2 4 bytes [0B, 31, FE, 7F]
.text   C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe[1192] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118        00007ffe310b181a 4 bytes [0B, 31, FE, 7F]
.text   C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe[1192] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142        00007ffe310b1832 4 bytes [0B, 31, FE, 7F]
.text   C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe[1904] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506              00007ffe310b169a 4 bytes [0B, 31, FE, 7F]
.text   C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe[1904] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514              00007ffe310b16a2 4 bytes [0B, 31, FE, 7F]
.text   C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe[1904] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118                 00007ffe310b181a 4 bytes [0B, 31, FE, 7F]
.text   C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe[1904] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142                 00007ffe310b1832 4 bytes [0B, 31, FE, 7F]
.text   C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe[2092] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506  00007ffe310b169a 4 bytes [0B, 31, FE, 7F]
.text   C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe[2092] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514  00007ffe310b16a2 4 bytes [0B, 31, FE, 7F]
.text   C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe[2092] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118     00007ffe310b181a 4 bytes [0B, 31, FE, 7F]
.text   C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe[2092] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142     00007ffe310b1832 4 bytes [0B, 31, FE, 7F]
.text   C:\WINDOWS\system32\wbem\wmiprvse.exe[2628] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506                              00007ffe310b169a 4 bytes [0B, 31, FE, 7F]
.text   C:\WINDOWS\system32\wbem\wmiprvse.exe[2628] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514                              00007ffe310b16a2 4 bytes [0B, 31, FE, 7F]
.text   C:\WINDOWS\system32\wbem\wmiprvse.exe[2628] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118                                 00007ffe310b181a 4 bytes [0B, 31, FE, 7F]
.text   C:\WINDOWS\system32\wbem\wmiprvse.exe[2628] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142                                 00007ffe310b1832 4 bytes [0B, 31, FE, 7F]
.text   C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe[2156] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506           00007ffe310b169a 4 bytes [0B, 31, FE, 7F]
.text   C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe[2156] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514           00007ffe310b16a2 4 bytes [0B, 31, FE, 7F]
.text   C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe[2156] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118              00007ffe310b181a 4 bytes [0B, 31, FE, 7F]
.text   C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe[2156] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142              00007ffe310b1832 4 bytes [0B, 31, FE, 7F]

---- Threads - GMER 2.1 ----

Thread  C:\WINDOWS\system32\csrss.exe [676:712]                                                                                         fffff960009694d0
Thread  C:\Windows\System32\SettingSyncHost.exe [4240:4040]                                                                             00007ffe1bdc64f4

---- Disk sectors - GMER 2.1 ----

Disk    \Device\Harddisk0\DR0                                                                                                           unknown MBR code

---- EOF - GMER 2.1 ----