| |
| |||||||
Log-Analyse und Auswertung: AVG 2014 Update schlägt fehl und meldet "allgemeiner Fehler"Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
09.04.2014, 20:51
| #1 |
 |  AVG 2014 Update schlägt fehl und meldet "allgemeiner Fehler" Hallo, ich verwende AVG Free als Virenscanner. Der Versuch, die Virendatenbank zu aktualisieren wird immer abgebrochen mit Fehlermeldung "Allgemeiner Fehler". Was war zuvor passiert: Vor einigen Wochen hat es mich aufgefordert, von Version 2013 auf 2014 zu aktualisieren. Dieses Update schlug fehl; es brach mittendrin ab. Erst nachdem ich 2013 komplett deinstalliert hatte konnte ich eine neue Installation durchführen, doch anschließend in der Benutzeroberfläche hat keine einzige der Funktionen ... funktioniert. Erst nach mehrmaliger De- und Neuinstallation funktionierten sie und ein Update war durchführbar. Andere Dinge die mir auffallen oder die bedenkenswert sind:
Und hier die log files - es gibt auch welche von AVG Free, welche ich nicht poste da sie sehr lang sind. Bitte gib Bescheid wenn ich das doch machen soll. Viele Grüße, threeColors defogger_disable.txt ********** START defogger_disable by jpshortstuff (23.02.10.1) Log created at 19:51 on 09/04/2014 (**********) Checking for autostart values... HKCU\~\Run values retrieved. HKLM\~\Run values retrieved. Checking for services/drivers... -=E.O.F=- defogger_disable.txt ********** ENDE FRST.txt ********** START FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-03-2014 01 (ATTENTION: ====> FRST version is 27 days old and could be outdated)
Ran by ********* (administrator) on *************-PC on 09-04-2014 19:55:43
Running from C:\Users\*********\Downloads\Download
Microsoft® Windows Vista™ Business Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgrsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgcsrvx.exe
(Lenovo) C:\Windows\system32\ibmpmsvc.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(Lenovo Group Limited) C:\Windows\system32\IPSSVC.EXE
(Lenovo) C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe
(Andrea Electronics Corporation) C:\Windows\system32\AEADISRV.EXE
(Apple, Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgwdsvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Diskeeper Corporation) C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
( ) c:\Program Files\Lenovo\System Update\SUService.exe
(Lenovo Group Limited) C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe
() C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe
(IBM) C:\Program Files\Lenovo\Client Security Solution\tvttcsd.exe
() C:\Program Files\Lenovo\Rescue and Recovery\rrpservice.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Rescue and Recovery\rrservice.exe
(Lenovo Group Limited) c:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe
() C:\Program Files\Lenovo\Rescue and Recovery\ADM\IUService.exe
(Conexant Systems, Inc.) C:\Windows\system32\DRIVERS\xaudio.exe
(Lenovo) C:\Program Files\ThinkPad\ConnectUtilities\AcSvc.exe
() C:\Program Files\Common Files\Lenovo\Logger\logmon.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgnsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgemcx.exe
(Lenovo) C:\Program Files\ThinkPad\ConnectUtilities\SvcGuiHlpr.exe
(Diskeeper Corporation) C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\NPDIRECT\tpfnf7sp.exe
() C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\AwayTask\AwaySch.EXE
(Lenovo Group Limited) C:\Program Files\Lenovo\Client Security Solution\cssauth.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\TrackPoint\tp4serv.exe
(Analog Devices, Inc.) C:\Program Files\Analog Devices\Core\smax4pnp.exe
(Lenovo Group Limited) C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgui.exe
(Microsoft Corporation) C:\Windows\system32\wbem\unsecapp.exe
() C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Zoom\TpScrex.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Client Security Solution\tvtpwm_tray.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\mobsync.exe
(Microsoft Corporation) C:\Windows\system32\conime.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-19] (Microsoft Corporation)
HKLM\...\Run: [TPFNF7] - C:\Program Files\Lenovo\NPDIRECT\TPFNF7SP.exe [58416 2007-01-17] (Lenovo Group Limited)
HKLM\...\Run: [TPHOTKEY] - C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe [64128 2006-11-10] ()
HKLM\...\Run: [PWMTRV] - C:\Program Files\ThinkPad\Utilities\PWMTR32V.DLL [263728 2006-12-19] (Lenovo Group Limited)
HKLM\...\Run: [AwaySch] - C:\Program Files\Lenovo\AwayTask\AwaySch.EXE [91688 2006-11-07] (Lenovo Group Limited)
HKLM\...\Run: [cssauth] - C:\Program Files\Lenovo\Client Security Solution\cssauth.exe [2614848 2006-12-13] (Lenovo Group Limited)
HKLM\...\Run: [DiskeeperSystray] - C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe [217176 2006-11-15] (Diskeeper Corporation)
HKLM\...\Run: [TrackPointSrv] - C:\Program Files\Lenovo\TrackPoint\tp4serv.exe [93032 2009-11-24] (Lenovo Group Limited)
HKLM\...\Run: [SoundMAXPnP] - C:\Program Files\Analog Devices\Core\smax4pnp.exe [1282048 2007-07-10] (Analog Devices, Inc.)
HKLM\...\Run: [TVT Scheduler Proxy] - C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe [536576 2006-12-14] (Lenovo Group Limited)
HKLM\...\Run: [AVG_UI] - C:\Program Files\AVG\AVG2014\avgui.exe [4962320 2014-01-22] (AVG Technologies CZ, s.r.o.)
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-21-559201451-4058377737-3668885732-1003\...\MountPoints2: {00b9b2f8-7154-11e3-aa26-e7e89ef222ca} - F:\setup_vmb_lite.exe /checkApplicationPresence
HKU\S-1-5-21-559201451-4058377737-3668885732-1003\...\MountPoints2: {aa673b77-6fbe-11e3-bcf2-b531af1861a5} - D:\setup_vmb_lite.exe /checkApplicationPresence
HKU\S-1-5-21-559201451-4058377737-3668885732-1003\...\MountPoints2: {aa673be3-6fbe-11e3-bcf2-e3f153dda613} - D:\setup_vmb_lite.exe /checkApplicationPresence
Lsa: [Notification Packages] scecli ACGina
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo.live.com
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope URL =
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: No Name - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - No File
BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: CPwmIEBrowserHelper Object - {F040E541-A427-4CF7-85D8-75E3E0F476C5} - C:\Program Files\Lenovo\Client Security Solution\tvtpwm_ie_com.dll (Lenovo Group Limited)
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} hxxp://ax.emsisoft.com/emsisoft_webscan.cab
Handler: AutorunsDisabled\livecall - {828030A1-22C1-4009-854F-8E305202313F} - No File
Handler: AutorunsDisabled\msnim - {828030A1-22C1-4009-854F-8E305202313F} - No File
Handler: AutorunsDisabled\skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 05 C:\Program Files\Bonjour\mdnsNSP.dll [147456] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\*********\AppData\Roaming\Mozilla\Firefox\Profiles\4dv4qp29.default
FF user.js: detected! => C:\Users\*********\AppData\Roaming\Mozilla\Firefox\Profiles\4dv4qp29.default\user.js
FF Homepage: about:blank
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @google.com/npPicasa2,version=2.0.0 - C:\Program Files\Picasa2\npPicasa2.dll No File
FF Plugin: @java.com/DTPlugin,version=10.7.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: No Name - C:\Users\*********\AppData\Roaming\Mozilla\Firefox\Profiles\4dv4qp29.default\Extensions\staged [2012-08-22]
FF Extension: Microsoft .NET Framework Assistant - C:\Users\*********\AppData\Roaming\Mozilla\Firefox\Profiles\4dv4qp29.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b} [2011-03-27]
FF Extension: WOT - C:\Users\*********\AppData\Roaming\Mozilla\Firefox\Profiles\4dv4qp29.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2013-11-26]
FF Extension: Bitdefender QuickScan - C:\Users\*********\AppData\Roaming\Mozilla\Firefox\Profiles\4dv4qp29.default\Extensions\{e001c731-5e37-4538-a5cb-8168736a2360} [2013-08-15]
FF Extension: Firebug - C:\Users\*********\AppData\Roaming\Mozilla\Firefox\Profiles\4dv4qp29.default\Extensions\firebug@software.joehewitt.com.xpi [2011-04-11]
FF Extension: NoScript - C:\Users\*********\AppData\Roaming\Mozilla\Firefox\Profiles\4dv4qp29.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2012-08-14]
FF Extension: Adblock Plus - C:\Users\*********\AppData\Roaming\Mozilla\Firefox\Profiles\4dv4qp29.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-08-14]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ []
FF HKCU\...\Firefox\Extensions: [{FCF36B88-1BBA-487f-B64B-D2E8980A9293}] - C:\Program Files\Lenovo\Client Security Solution\PWM Firefox Extension
FF Extension: ThinkVantage Password Manager - C:\Program Files\Lenovo\Client Security Solution\PWM Firefox Extension [2007-12-01]
========================== Services (Whitelisted) =================
R2 Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [110592 2008-01-15] (Apple, Inc.)
R2 AVGIDSAgent; C:\Program Files\AVG\AVG2014\avgidsagent.exe [3788816 2014-01-22] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.)
R2 Diskeeper; C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe [634988 2006-11-15] (Diskeeper Corporation)
R2 IPSSVC; C:\Windows\system32\IPSSVC.EXE [108080 2006-11-20] (Lenovo Group Limited)
R2 SUService; c:\Program Files\Lenovo\System Update\SUService.exe [11776 2006-12-15] ( )
R2 TPHKSVC; C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe [55928 2006-10-13] ()
R2 TSSCoreService; C:\Program Files\Lenovo\Client Security Solution\tvttcsd.exe [722496 2006-12-13] (IBM)
R2 TVT Backup Protection Service; C:\Program Files\Lenovo\Rescue and Recovery\rrpservice.exe [569344 2006-12-14] ()
R2 TVT Scheduler; c:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe [1118208 2006-12-14] (Lenovo Group Limited)
R2 tvtnetwk; C:\Program Files\Lenovo\Rescue and Recovery\ADM\IUService.exe [45056 2006-12-13] ()
==================== Drivers (Whitelisted) ====================
R1 65230671; C:\Windows\System32\DRIVERS\65230671.sys [128016 2009-09-25] (Kaspersky Lab)
R0 65230672; C:\Windows\System32\DRIVERS\65230672.sys [37392 2009-10-22] (Kaspersky Lab)
R1 Avgdiskx; C:\Windows\System32\DRIVERS\avgdiskx.sys [120600 2013-11-25] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [210712 2013-11-25] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [149272 2013-11-25] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [22808 2014-01-19] (AVG Technologies CZ, s.r.o.)
R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [176952 2013-11-01] (AVG Technologies CZ, s.r.o.)
R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [222520 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [102712 2013-10-01] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [27448 2013-09-10] (AVG Technologies CZ, s.r.o.)
R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [193848 2013-08-01] (AVG Technologies CZ, s.r.o.)
S3 huawei_cdcacm; C:\Windows\System32\DRIVERS\ew_jucdcacm.sys [96000 2013-01-30] (Huawei Technologies Co., Ltd.)
S3 huawei_cdcecm; C:\Windows\System32\DRIVERS\ew_jucdcecm.sys [69760 2013-01-30] (Huawei Technologies Co., Ltd.)
S3 huawei_ext_ctrl; C:\Windows\System32\DRIVERS\ew_juextctrl.sys [27520 2013-01-30] (Huawei Technologies Co., Ltd.)
R2 PROCDD; C:\Windows\System32\DRIVERS\PROCDD.SYS [12080 2006-11-06] (Lenovo Group Limited)
R1 setup_9.0.0.722_07.07.2012_12-34drv; C:\Windows\System32\DRIVERS\6523067.sys [311312 2009-10-09] (Kaspersky Lab)
R3 Tp4Track; C:\Windows\System32\DRIVERS\tp4track.sys [23152 2009-11-24] (Lenovo Group Limited)
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]
========================== Drivers MD5 =======================
C:\Windows\System32\DRIVERS\65230671.sys 7DD41B7AC1FBB1DBF20BB1F4E4FBE58C
C:\Windows\System32\DRIVERS\65230672.sys A305FAD3719C5DB0C13D1C2BFD08A04D
C:\Windows\System32\drivers\acpi.sys 82B296AE1892FE3DBEE00C9CF92F8AC7
C:\Windows\System32\drivers\ADIHdAud.sys A51EA92451897824C5C7474A160AF773
C:\Windows\system32\drivers\adp94xx.sys ==> MD5 is legit
C:\Windows\system32\drivers\adpahci.sys ==> MD5 is legit
C:\Windows\system32\drivers\adpu160m.sys ==> MD5 is legit
C:\Windows\system32\drivers\adpu320.sys ==> MD5 is legit
C:\Windows\system32\drivers\afd.sys 3911B972B55FEA0478476B2E777B29FA
C:\Windows\system32\drivers\agp440.sys ==> MD5 is legit
C:\Windows\system32\drivers\djsvs.sys ==> MD5 is legit
C:\Windows\system32\drivers\aliide.sys 63FE281D76C5703F97BC37483DB78B51
C:\Windows\system32\drivers\amdagp.sys ==> MD5 is legit
C:\Windows\system32\drivers\amdide.sys 654044212C625A4582797B42D4B1BD89
C:\Windows\system32\drivers\amdk7.sys ==> MD5 is legit
C:\Windows\system32\drivers\amdk8.sys ==> MD5 is legit
C:\Windows\system32\drivers\arc.sys ==> MD5 is legit
C:\Windows\system32\drivers\arcsas.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\asyncmac.sys 53B202ABEE6455406254444303E87BE1
C:\Windows\System32\drivers\atapi.sys 1F05B78AB91C9075565A9D8A4B880BC4
C:\Windows\System32\DRIVERS\athr.sys B0C272DEF210B149C0BFA0D85600CE4B
C:\Windows\System32\DRIVERS\avgdiskx.sys B4A79941AB02993E43A6C2248CE932FD
C:\Windows\System32\DRIVERS\avgidsdriverx.sys 92CA68E3361576420C43FC33C47DECF7
C:\Windows\System32\DRIVERS\avgidshx.sys 4D792ED58F49235704E580C34391CFF5
C:\Windows\System32\DRIVERS\avgidsshimx.sys 18B3FFED808F032E037ED7F54A838053
C:\Windows\System32\DRIVERS\avgldx86.sys 578ECC3D911897B2C5B760EDAF8ED6CA
C:\Windows\System32\DRIVERS\avglogx.sys BD1A440B9F126AFE52978A44952B0018
C:\Windows\System32\DRIVERS\avgmfx86.sys 7DC192EC714342E7C020C7CF42E394D8
C:\Windows\System32\DRIVERS\avgrkx86.sys E6322DF686CE1C59D7797FAEF0732454
C:\Windows\System32\DRIVERS\avgtdix.sys E98603F9D1F412F38ADF2F76053F9E5A
C:\Windows\System32\DRIVERS\b57nd60x.sys 3CD64FF273DA206819C750D997E7D5D0
C:\Windows\system32\Drivers\Beep.sys 67E506B75BD5326A3EC7B70BD014DFB6
C:\Windows\System32\DRIVERS\bowser.sys 35F376253F687BDE63976CCB3F2108CA
C:\Windows\system32\drivers\brfiltlo.sys ==> MD5 is legit
C:\Windows\system32\drivers\brfiltup.sys ==> MD5 is legit
C:\Windows\system32\drivers\brserid.sys ==> MD5 is legit
C:\Windows\system32\drivers\brserwdm.sys ==> MD5 is legit
C:\Windows\system32\drivers\brusbmdm.sys ==> MD5 is legit
C:\Windows\system32\drivers\brusbser.sys ==> MD5 is legit
C:\Windows\system32\drivers\bthmodem.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\cdfs.sys 7ADD03E75BEB9E6DD102C3081D29840A
C:\Windows\System32\DRIVERS\cdrom.sys 6B4BFFB9BECD728097024276430DB314
C:\Windows\system32\drivers\circlass.sys ==> MD5 is legit
C:\Windows\System32\CLFS.sys D7659D3B5B92C31E84E53C1431F35132
C:\Windows\System32\DRIVERS\CmBatt.sys 99AFC3795B58CC478FBBBCDC658FCB56
C:\Windows\system32\drivers\cmdide.sys ED46B460BE318F2411C609DD6F318991
C:\Windows\System32\DRIVERS\compbatt.sys 6AFEF0B60FA25DE07C0968983EE4F60A
C:\Windows\System32\drivers\crcdisk.sys ==> MD5 is legit
C:\Windows\system32\drivers\crusoe.sys ==> MD5 is legit
C:\Windows\System32\drivers\csc.sys 9BDB2E89BE8D0EF37B1F25C3D3FC192C
C:\Windows\System32\Drivers\dfsc.sys 622C41A07CA7E6DD91770F50D532CB6C
C:\Windows\System32\drivers\disk.sys 5D4AEFC3386920236A548271F8F1AF6A
C:\Windows\System32\drivers\drmkaud.sys 97FEF831AB90BEE128C9AF390E243F80
C:\Windows\System32\drivers\dxgkrnl.sys 988670D8343EF9835FB3659DB71B2EFA
C:\Windows\System32\DRIVERS\E1G60I32.sys ==> MD5 is legit
C:\Windows\System32\drivers\ecache.sys 7F64EA048DCFAC7ACF8B4D7B4E6FE371
C:\Windows\system32\drivers\elxstor.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ew_hwusbdev.sys 57C171EA22F0A7F068FCB0CAEDD1E8E7
C:\Windows\System32\DRIVERS\ew_usbenumfilter.sys 61A973F60E94A551BA7B15F3460444FB
C:\Windows\system32\Drivers\exfat.sys 22B408651F9123527BCEE54B4F6C5CAE
C:\Windows\system32\Drivers\fastfat.sys 1E9B9A70D332103C52995E957DC09EF8
C:\Windows\System32\DRIVERS\fdc.sys ==> MD5 is legit
C:\Windows\System32\drivers\fileinfo.sys A8C0139A884861E3AAE9CFE73B208A9F
C:\Windows\System32\drivers\filetrace.sys 0AE429A696AECBC5970E3CF2C62635AE
C:\Windows\System32\DRIVERS\flpydisk.sys ==> MD5 is legit
C:\Windows\System32\drivers\fltmgr.sys 01334F9EA68E6877C4EF05D3EA8ABB05
C:\Windows\system32\Drivers\Fs_Rec.sys B972A66758577E0BFD1DE0F91AAA27B5
C:\Windows\system32\drivers\gagp30kx.sys ==> MD5 is legit
C:\Windows\System32\Drivers\GEARAspiWDM.sys 4AC51459805264AFFD5F6FDFB9D9235F
C:\Windows\System32\drivers\HdAudio.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\HDAudBus.sys 062452B7FFD68C8C042A6261FE8DFF4A
C:\Windows\system32\drivers\hidbth.sys ==> MD5 is legit
C:\Windows\system32\drivers\hidir.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\hidusb.sys CCA4B519B17E23A00B826C55716809CC
C:\Windows\system32\drivers\hpcisss.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\VSTAZL3.SYS 46D67209550973257601A533E2AC5785
C:\Windows\System32\DRIVERS\HSX_DPV.sys 7BC42C65B5C6281777C1A7605B253BA8
C:\Windows\System32\DRIVERS\HSXHWAZL.sys 9EBF2D102CCBB6BCDFBF1B7922F8BA2E
C:\Windows\System32\drivers\HTTP.sys F870AA3E254628EBEAFE754108D664DE
C:\Windows\System32\DRIVERS\ew_jucdcacm.sys 8A670E1FC2B308C6023E009728CE1B16
C:\Windows\System32\DRIVERS\ew_jucdcecm.sys 54407CB2EFDA98053DEC65FC5760105F
C:\Windows\System32\DRIVERS\ew_jubusenum.sys 4F3C8140A1725FBAAA786A351AF13437
C:\Windows\System32\DRIVERS\ew_juextctrl.sys E43FBF827B32F11BF4E33FE67C52FE0C
C:\Windows\system32\drivers\i2omp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\i8042prt.sys 22D56C8184586B7A1F6FA60BE5F5A2BD
C:\Windows\System32\DRIVERS\igdkmd32.sys 9378D57E2B96C0A185D844770AD49948
C:\Windows\System32\DRIVERS\iaStor.sys FD7F9D74C2B35DBDA400804A3F5ED5D8
C:\Windows\system32\drivers\iastorv.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ibmpmdrv.sys BF648877413F6160E480814A24942B65
C:\Windows\System32\DRIVERS\igdkmd32.sys 9378D57E2B96C0A185D844770AD49948
C:\Windows\system32\drivers\iirsp.sys ==> MD5 is legit
C:\Windows\System32\drivers\intelide.sys C12012C570BCF4B31F36200AFA2B4F88
C:\Windows\System32\DRIVERS\intelppm.sys 224191001E78C89DFA78924C3EA595FF
C:\Windows\System32\DRIVERS\ipfltdrv.sys 62C265C38769B864CB25B4BCF62DF6C3
C:\Windows\system32\drivers\ipmidrv.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ipnat.sys 8793643A67B42CEC66490B2A0CF92D68
C:\Windows\System32\drivers\irenum.sys 109C0DFB82C3632FBD11949B73AEEAC9
C:\Windows\system32\drivers\isapnp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\msiscsi.sys 232FA340531D940AAC623B121A595034
C:\Windows\system32\drivers\iteatapi.sys ==> MD5 is legit
C:\Windows\system32\drivers\iteraid.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\kbdclass.sys 37605E0A8CF00CBBA538E753E4344C6E
C:\Windows\system32\drivers\kbdhid.sys D2600CB17B7408B4A83F231DC9A11AC3
C:\Windows\System32\Drivers\ksecdd.sys 4A1445EFA932A3BAF5BDB02D7131EE20
C:\Windows\System32\DRIVERS\smiif32.sys 63DE2C8974F5D528FBC3D6978FD8AD6A
C:\Windows\System32\DRIVERS\lltdio.sys D1C5883087A0C3F1344D9D55A44901F6
C:\Windows\system32\drivers\lsi_fc.sys ==> MD5 is legit
C:\Windows\system32\drivers\lsi_sas.sys ==> MD5 is legit
C:\Windows\system32\drivers\lsi_scsi.sys ==> MD5 is legit
C:\Windows\system32\drivers\luafv.sys 8F5C7426567798E62A3B3614965D62CC
C:\Windows\System32\DRIVERS\mdmxsdk.sys 0CEA2D0D3FA284B85ED5B68365114F76
C:\Windows\system32\drivers\megasas.sys ==> MD5 is legit
C:\Windows\System32\drivers\modem.sys E13B5EA0F51BA5B1512EC671393D09BA
C:\Windows\System32\DRIVERS\monitor.sys 0A9BB33B56E294F686ABB7C1E4E2D8A8
C:\Windows\System32\DRIVERS\mouclass.sys 5BF6A1326A335C5298477754A506D263
C:\Windows\System32\DRIVERS\mouhid.sys 93B8D4869E12CFBE663915502900876F
C:\Windows\System32\drivers\mountmgr.sys BDAFC88AA6B92F7842416EA6A48E1600
C:\Windows\system32\drivers\mpio.sys ==> MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys 22241FEBA9B2DEFA669C8CB0A8DD7D2E
C:\Windows\system32\drivers\mraid35x.sys ==> MD5 is legit
C:\Windows\system32\drivers\mrxdav.sys 82CEA0395524AACFEB58BA1448E8325C
C:\Windows\System32\DRIVERS\mrxsmb.sys 1E94971C4B446AB2290DEB71D01CF0C2
C:\Windows\System32\DRIVERS\mrxsmb10.sys 4FCCB34D793B116423209C0F8B7A3B03
C:\Windows\System32\DRIVERS\mrxsmb20.sys C3CB1B40AD4A0124D617A1199B0B9D7C
C:\Windows\System32\drivers\msahci.sys 0A37A1BA8AFE084899BF82EEF923DAEA
C:\Windows\system32\drivers\msdsm.sys ==> MD5 is legit
C:\Windows\system32\Drivers\Msfs.sys A9927F4A46B816C92F461ACB90CF8515
C:\Windows\System32\drivers\msisadrv.sys 0F400E306F385C56317357D6DEA56F62
C:\Windows\System32\drivers\MSKSSRV.sys D8C63D34D9C9E56C059E24EC7185CC07
C:\Windows\System32\drivers\MSPCLOCK.sys 1D373C90D62DDB641D50E55B9E78D65E
C:\Windows\System32\drivers\MSPQM.sys B572DA05BF4E098D4BBA3A4734FB505B
C:\Windows\system32\Drivers\MsRPC.sys B49456D70555DE905C311BCDA6EC6ADB
C:\Windows\System32\DRIVERS\mssmbios.sys E384487CB84BE41D09711C30CA79646C
C:\Windows\System32\drivers\MSTEE.sys 7199C1EEC1E4993CAF96B8C0A26BD58A
C:\Windows\System32\Drivers\mup.sys 6A57B5733D4CB702C8EA4542E836B96C
C:\Windows\System32\DRIVERS\nwifi.sys 85C44FDFF9CF7E72A40DCB7EC06A4416
C:\Windows\System32\drivers\ndis.sys 1357274D1883F68300AEADD15D7BBB42
C:\Windows\System32\DRIVERS\ndistapi.sys 0E186E90404980569FB449BA7519AE61
C:\Windows\System32\DRIVERS\ndisuio.sys D6973AA34C4D5D76C0430B181C3CD389
C:\Windows\System32\DRIVERS\ndiswan.sys 818F648618AE34F729FDB47EC68345C3
C:\Windows\system32\Drivers\NDProxy.sys 71DAB552B41936358F3B541AE5997FB3
C:\Windows\System32\DRIVERS\netbios.sys BCD093A5A6777CF626434568DC7DBA78
C:\Windows\System32\DRIVERS\netbt.sys ECD64230A59CBD93C85F1CD1CAB9F3F6
C:\Windows\system32\drivers\nfrd960.sys ==> MD5 is legit
C:\Windows\system32\Drivers\Npfs.sys D36F239D7CCE1931598E8FB90A0DBC26
C:\Windows\System32\drivers\nsiproxy.sys 609773E344A97410CE4EBF74A8914FCF
C:\Windows\system32\Drivers\Ntfs.sys 2C1121F2B87E9A6B12485DF53CD848C7
C:\Windows\system32\drivers\ntrigdigi.sys ==> MD5 is legit
C:\Windows\system32\Drivers\Null.sys C5DBBCDA07D780BDA9B685DF333BB41E
C:\Windows\system32\drivers\nvraid.sys E69E946F80C1C31C53003BFBF50CBB7C
C:\Windows\system32\drivers\nvstor.sys 9E0BA19A28C498A6D323D065DB76DFFC
C:\Windows\system32\drivers\nv_agp.sys ==> MD5 is legit
C:\Windows\system32\drivers\ohci1394.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\parport.sys ==> MD5 is legit
C:\Windows\System32\drivers\partmgr.sys B9C2B89F08670E159F7181891E449CD9
C:\Windows\System32\DRIVERS\parvdm.sys ==> MD5 is legit
C:\Windows\System32\drivers\pci.sys 941DC1D19E7E8620F40BBC206981EFDB
C:\Windows\System32\DRIVERS\pciide.sys 1636D43F10416AEB483BC6001097B26C
C:\Windows\System32\DRIVERS\pcmcia.sys 3BB2244F343B610C29C98035504C9B75
C:\Windows\System32\drivers\peauth.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\raspptp.sys ECFFFAEC0C1ECD8DBC77F39070EA1DB1
C:\Windows\System32\DRIVERS\PROCDD.SYS 1D80309FED4BABF8EA9E7B84A394348B
C:\Windows\system32\drivers\processr.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\psadd.sys CE5114C9D3AB67E6F6F8017C5F975292
C:\Windows\System32\DRIVERS\pacer.sys 99514FAA8DF93D34B5589187DB3AA0BA
C:\Windows\System32\Drivers\PxHelp20.sys 49452BFCEC22F36A7A9B9C2181BC3042
C:\Windows\system32\drivers\ql2300.sys ==> MD5 is legit
C:\Windows\system32\drivers\ql40xx.sys ==> MD5 is legit
C:\Windows\system32\drivers\qwavedrv.sys 9F5E0E1926014D17486901C88ECA2DB7
C:\Windows\System32\DRIVERS\rasacd.sys 147D7F9C556D259924351FEB0DE606C3
C:\Windows\System32\DRIVERS\rasl2tp.sys A214ADBAF4CB47DD2728859EF31F26B0
C:\Windows\System32\DRIVERS\raspppoe.sys 509A98DD18AF4375E1FC40BC175F1DEF
C:\Windows\System32\DRIVERS\rassstp.sys 2005F4A1E05FA09389AC85840F0A9E4D
C:\Windows\System32\DRIVERS\rdbss.sys B14C9D5B9ADD2F84F70570BBBFAA7935
C:\Windows\System32\DRIVERS\RDPCDD.sys 89E59BE9A564262A3FB6C4F4F1CD9899
C:\Windows\System32\DRIVERS\rdpdr.sys 943B18305EAE3935598A9B4A3D560B4C
C:\Windows\System32\drivers\rdpencdd.sys 9D91FE5286F748862ECFFA05F8A0710C
C:\Windows\system32\Drivers\RDPWD.sys C127EBD5AFAB31524662C48DFCEB773A
C:\Windows\System32\DRIVERS\rspndr.sys 9C508F4074A39E8B4B31D27198146FAD
C:\Windows\system32\drivers\sbp2port.sys ==> MD5 is legit
C:\Windows\system32\Drivers\secdrv.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\serenum.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\serial.sys ==> MD5 is legit
C:\Windows\system32\drivers\sermouse.sys 8AF3D28A879BF75DB53A0EE7A4289624
C:\Windows\System32\DRIVERS\6523067.sys 64D93EC1218765498C40619427A85A91
C:\Windows\system32\drivers\sffdisk.sys 51CF56AA8BCC241F134B420B8F850406
C:\Windows\system32\drivers\sffp_mmc.sys 96DED8B20C734AC41641CE275250E55D
C:\Windows\system32\drivers\sffp_sd.sys 8B08CAB1267B2C377883FC9E56981F90
C:\Windows\System32\DRIVERS\sfloppy.sys C33BFBD6E9E41FCD9FFEF9729E9FAED6
C:\Windows\system32\drivers\sisagp.sys ==> MD5 is legit
C:\Windows\system32\drivers\sisraid2.sys ==> MD5 is legit
C:\Windows\system32\drivers\sisraid4.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\smb.sys 7B75299A4D201D6A6533603D6914AB04
C:\Windows\system32\Drivers\spldr.sys 7AEBDEEF071FE28B0EEF2CDD69102BFF
C:\Windows\System32\DRIVERS\srv.sys 41987F9FC0E61ADF54F581E15029AD91
C:\Windows\System32\DRIVERS\srv2.sys FF33AFF99564B1AA534F58868CBE41EF
C:\Windows\System32\DRIVERS\srvnet.sys 7605C0E1D01A08F3ECD743F38B834A44
C:\Windows\System32\DRIVERS\swenum.sys 7BA58ECF0C0A9A69D44B3DCA62BECF56
C:\Windows\system32\drivers\symc8xx.sys ==> MD5 is legit
C:\Windows\system32\drivers\sym_hi.sys ==> MD5 is legit
C:\Windows\system32\drivers\sym_u3.sys ==> MD5 is legit
C:\Windows\System32\drivers\tcpip.sys D18D53974FD715D50FC76F9FFE1C830D
C:\Windows\System32\DRIVERS\tcpip.sys D18D53974FD715D50FC76F9FFE1C830D
C:\Windows\System32\drivers\tcpipreg.sys 608C345A255D82A6289C2D468EB41FD7
C:\Windows\System32\drivers\tdpipe.sys 5DCF5E267BE67A1AE926F2DF77FBCC56
C:\Windows\System32\drivers\tdtcp.sys 389C63E32B3CEFED425B61ED92D3F021
C:\Windows\System32\DRIVERS\tdx.sys 76B06EB8A01FC8624D699E7045303E54
C:\Windows\System32\DRIVERS\termdd.sys 3CAD38910468EAB9A6479E2F01DB43C7
C:\Windows\System32\DRIVERS\tp4track.sys 1C950AE9C09904C229525F22EEFC15DB
C:\Windows\System32\DRIVERS\tssecsrv.sys F4EAA7ECBCB25DE901C9B7F2CDCDA0B3
C:\Windows\System32\DRIVERS\tunmp.sys CAECC0120AC49E3D2F758B9169872D38
C:\Windows\System32\DRIVERS\tunnel.sys 300DB877AC094FEAB0BE7688C3454A9C
C:\Windows\System32\DRIVERS\tvtfilter.sys 49258A02A1E8D304ED88B0F1C56B1738
C:\Windows\System32\DRIVERS\Tvti2c.sys C254BFF0A928EA7D5CCDC2522D56FD01
C:\Windows\system32\drivers\uagp35.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\udfs.sys D9728AF68C4C7693CB100B8441CBDEC6
C:\Windows\system32\drivers\uliagpkx.sys ==> MD5 is legit
C:\Windows\system32\drivers\uliahci.sys ==> MD5 is legit
C:\Windows\system32\drivers\ulsata.sys ==> MD5 is legit
C:\Windows\system32\drivers\ulsata2.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\umbus.sys 32CFF9F809AE9AED85464492BF3E32D2
C:\Windows\System32\DRIVERS\usbccgp.sys AAB0B5F72D2D726FBFDC895A2902DE1D
C:\Windows\system32\drivers\usbcir.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\usbehci.sys 153E8515CB86F8BB5D1A8B478EBF4BB2
C:\Windows\System32\DRIVERS\usbhub.sys 2AE6BCEBD85D31317E433733DAF25888
C:\Windows\system32\drivers\usbohci.sys ==> MD5 is legit
C:\Windows\system32\drivers\usbprint.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\usbscan.sys 1D714B8497CD68307806D5D3F60A5169
C:\Windows\System32\DRIVERS\USBSTOR.SYS BE3DA31C191BC222D9AD503C5224F2AD
C:\Windows\System32\DRIVERS\usbuhci.sys 44056325428A8E4C755830426E29878F
C:\Windows\System32\DRIVERS\VBoxNetAdp.sys 85BE2230CFEF3FB299358E45A33F29A9
C:\Windows\System32\DRIVERS\vgapnp.sys ==> MD5 is legit
C:\Windows\System32\drivers\vga.sys 2E93AC0A1D8C79D019DB6C51F036636C
C:\Windows\system32\drivers\viaagp.sys ==> MD5 is legit
C:\Windows\system32\drivers\viac7.sys ==> MD5 is legit
C:\Windows\system32\drivers\viaide.sys 9FA7C28D7088058CC9796008812F40E5
C:\Windows\System32\drivers\volmgr.sys 69503668AC66C77C6CD7AF86FBDF8C43
C:\Windows\System32\drivers\volmgrx.sys 23E41B834759917BFD6B9A0D625D0C28
C:\Windows\System32\drivers\volsnap.sys 786DB5771F05EF300390399F626BF30A
C:\Windows\system32\drivers\vsmraid.sys ==> MD5 is legit
C:\Windows\system32\drivers\wacompen.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\wanarp.sys 55201897378CCA7AF8B5EFD874374A26
C:\Windows\System32\DRIVERS\wanarp.sys 55201897378CCA7AF8B5EFD874374A26
C:\Windows\system32\drivers\wd.sys ==> MD5 is legit
C:\Windows\System32\drivers\Wdf01000.sys 25944D2CC49E0A6C581D02A74B7D6645
C:\Windows\System32\DRIVERS\wimfltr.sys F9AD3A5E3FD7E0BDB18B8202B0FDD4E4
C:\Windows\System32\DRIVERS\HSX_CNXT.sys 5A77AC34A0FFB70CE8B35B524FEDE9BA
C:\Windows\system32\drivers\wmiacpi.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\wpdusb.sys DE9D36F91A4DF3D911626643DEBF11EA
C:\Windows\system32\drivers\ws2ifsl.sys E3A3CB253C0EC2494D4A61F5E43A389C
C:\Windows\System32\drivers\WudfPf.sys 06E6F32C8D0A3F66D956F57B43A2E070
C:\Windows\System32\DRIVERS\WUDFRd.sys 867C301E8B790040AE9CF6486E8041DF
C:\Windows\System32\DRIVERS\xaudio.sys 88AF537264F2B818DA15479CEEAF5D7C
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-04-09 18:35 - 2014-03-08 01:51 - 12347904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-09 18:35 - 2014-03-08 01:20 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-09 18:35 - 2014-03-08 01:12 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-09 18:35 - 2014-03-08 01:03 - 01105408 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-09 18:35 - 2014-03-08 01:02 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-04-09 18:35 - 2014-03-08 01:02 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-09 18:35 - 2014-03-08 01:00 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-04-09 18:35 - 2014-03-08 00:59 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-09 18:35 - 2014-03-08 00:57 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-04-09 18:35 - 2014-03-08 00:57 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-04-09 18:35 - 2014-03-08 00:56 - 00421376 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-04-09 18:35 - 2014-03-08 00:54 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-09 18:35 - 2014-03-08 00:53 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-09 18:35 - 2014-03-08 00:52 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-09 18:35 - 2014-03-08 00:52 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-04-09 18:35 - 2014-03-08 00:47 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-09 09:04 - 2014-02-06 03:56 - 00894464 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-03-30 15:23 - 2014-03-30 15:26 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-03-18 11:44 - 2014-03-18 11:44 - 00000000 ___HD () C:\$AVG
2014-03-18 11:30 - 2014-04-09 19:45 - 00000000 ____D () C:\ProgramData\MFAData
2014-03-18 11:30 - 2014-03-18 11:30 - 00000000 ____D () C:\Users\*********\AppData\Local\MFAData
2014-03-17 18:01 - 2014-03-17 18:01 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware
2014-03-17 18:01 - 2013-04-04 15:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-17 15:29 - 2014-04-09 19:55 - 00000000 ____D () C:\FRST
2014-03-17 15:28 - 2014-03-17 15:28 - 00000000 _____ () C:\Users\*********\defogger_reenable
2014-03-17 11:14 - 2014-03-17 11:14 - 00000000 ____D () C:\Users\*********\AppData\Roaming\AVG2014
2014-03-17 10:56 - 2014-03-17 11:10 - 00000000 ____D () C:\ProgramData\AVG2014
2014-03-17 10:49 - 2014-03-17 11:14 - 00000000 ____D () C:\Users\*********\AppData\Local\Avg2014
2014-03-12 18:42 - 2014-03-12 18:42 - 05777288 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerInstaller.exe
2014-03-12 10:28 - 2014-02-07 12:38 - 02050560 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-12 10:28 - 2014-02-03 12:37 - 00505344 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-12 10:28 - 2014-01-30 09:46 - 00876032 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-12 10:27 - 2013-11-13 02:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
==================== One Month Modified Files and Folders =======
2014-04-09 19:55 - 2014-03-17 15:29 - 00000000 ____D () C:\FRST
2014-04-09 19:55 - 2013-11-20 15:26 - 00000000 ____D () C:\Users\*********\Downloads\Download
2014-04-09 19:45 - 2014-03-18 11:30 - 00000000 ____D () C:\ProgramData\MFAData
2014-04-09 19:45 - 2007-12-01 19:24 - 01586666 _____ () C:\Windows\WindowsUpdate.log
2014-04-09 19:44 - 2010-04-13 13:07 - 00000000 ____D () C:\Users\*********\Documents\zuhause
2014-04-09 19:41 - 2013-11-29 16:33 - 00020962 _____ () C:\Users\*********\Desktop\ebay.txt
2014-04-09 19:41 - 2013-09-11 21:00 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-04-09 19:17 - 2006-11-02 14:47 - 00003552 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-09 19:17 - 2006-11-02 14:47 - 00003552 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-09 19:15 - 2006-12-14 20:14 - 00025269 _____ () C:\Windows\system32\PROCDB.INI
2014-04-09 19:15 - 2006-12-14 20:14 - 00000480 _____ () C:\Windows\system32\IPSCtrl.INI
2014-04-09 19:15 - 2006-11-02 15:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-09 19:13 - 2006-11-02 15:01 - 00032514 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-04-09 19:03 - 2007-12-01 19:59 - 00000000 ____D () C:\SWSHARE
2014-04-09 18:35 - 2013-07-16 18:33 - 00000000 ____D () C:\Windows\system32\MRT
2014-04-09 18:31 - 2006-11-02 12:24 - 88028728 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2014-04-09 16:01 - 2006-11-02 14:37 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-04-09 11:36 - 2008-02-01 12:32 - 00000000 ___RD () C:\Users\*********\Documents\handel
2014-04-09 11:31 - 2009-05-27 22:24 - 00000000 ____D () C:\Users\*********\AppData\Roaming\StarOffice8
2014-04-04 19:35 - 2008-02-01 12:50 - 00000000 ____D () C:\Users\*********\Documents\briefe
2014-04-03 14:11 - 2006-11-02 12:33 - 01576054 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-02 19:04 - 2007-02-16 20:53 - 00015929 _____ () C:\Users\*********\Documents\passwörter.txt
2014-04-01 08:54 - 2012-07-27 17:10 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-03-30 15:26 - 2014-03-30 15:23 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-03-20 20:24 - 2013-12-26 17:32 - 00000000 ____D () C:\Users\*********\Desktop\unsortiert
2014-03-18 19:00 - 2014-02-16 18:04 - 00000236 _____ () C:\Users\*********\Desktop\teste.txt
2014-03-18 11:44 - 2014-03-18 11:44 - 00000000 ___HD () C:\$AVG
2014-03-18 11:30 - 2014-03-18 11:30 - 00000000 ____D () C:\Users\*********\AppData\Local\MFAData
2014-03-18 11:27 - 2010-02-09 11:41 - 00000000 ____D () C:\Program Files\AVG
2014-03-18 11:26 - 2012-08-22 11:27 - 07538834 _____ () C:\Windows\PFRO.log
2014-03-17 22:40 - 2010-01-28 16:16 - 00000000 ____D () C:\Users\*********\AppData\Local\CrashDumps
2014-03-17 18:01 - 2014-03-17 18:01 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware
2014-03-17 15:28 - 2014-03-17 15:28 - 00000000 _____ () C:\Users\*********\defogger_reenable
2014-03-17 15:28 - 2008-01-09 14:30 - 00000000 ____D () C:\Users\*********
2014-03-17 13:18 - 2009-12-14 16:24 - 00000000 ____D () C:\Users\*********\Documents\Turbo Lister Backup
2014-03-17 11:14 - 2014-03-17 11:14 - 00000000 ____D () C:\Users\*********\AppData\Roaming\AVG2014
2014-03-17 11:14 - 2014-03-17 10:49 - 00000000 ____D () C:\Users\*********\AppData\Local\Avg2014
2014-03-17 11:13 - 2006-11-02 14:37 - 00000000 ____D () C:\Program Files\Windows Sidebar
2014-03-17 11:10 - 2014-03-17 10:56 - 00000000 ____D () C:\ProgramData\AVG2014
2014-03-13 12:51 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\rescache
2014-03-13 12:05 - 2014-03-07 22:38 - 00168360 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-13 11:30 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\de-DE
2014-03-12 18:43 - 2012-08-14 09:46 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-03-12 18:43 - 2011-11-28 22:01 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-03-12 18:42 - 2014-03-12 18:42 - 05777288 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerInstaller.exe
Files to move or delete:
====================
C:\ProgramData\ezsid.dat
Some content of TEMP:
====================
C:\Users\*********\AppData\Local\Temp\DseShExt-x86.dll
C:\Users\*********\AppData\Local\Temp\install_flashplayer11x32au_mssd_aaa_aih.exe
C:\Users\*********\AppData\Local\Temp\install_flashplayer11x32au_mssd_aaa_aih_1.exe
C:\Users\*********\AppData\Local\Temp\SDShelEx-win32.dll
C:\Users\*********\AppData\Local\Temp\vsdel.exe
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit
==================== BCD ================================
Windows-Start-Manager
---------------------
Bezeichner {bootmgr}
device partition=C:
description Windows Boot Manager
locale de-DE
inherit {globalsettings}
default {current}
resumeobject {9f5c8777-704a-11db-9519-8441f37d8489}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 0
resume No
Windows-Startladeprogramm
-------------------------
Bezeichner {572bcd55-ffa7-11d9-aae0-0007e994107d}
device ramdisk=[\Device\HarddiskVolume1]\tvtos\winpe.wim,{ramdiskoptions}
path \windows\system32\boot\winload.exe
description Windows Recovery Environment
osdevice ramdisk=[\Device\HarddiskVolume1]\tvtos\winpe.wim,{ramdiskoptions}
systemroot \windows
nx OptIn
detecthal Yes
winpe Yes
Windows-Startladeprogramm
-------------------------
Bezeichner {current}
device partition=C:
path \Windows\system32\winload.exe
description Microsoft Windows Vista
locale de-DE
inherit {bootloadersettings}
recoverysequence {572bcd55-ffa7-11d9-aae0-0007e994107d}
recoveryenabled Yes
osdevice partition=C:
systemroot \Windows
resumeobject {9f5c8777-704a-11db-9519-8441f37d8489}
nx OptIn
Wiederaufnahme aus dem Ruhezustand
----------------------------------
Bezeichner {9f5c8777-704a-11db-9519-8441f37d8489}
device partition=C:
path \Windows\system32\winresume.exe
description Windows Resume Application
locale de-DE
inherit {resumeloadersettings}
filedevice partition=C:
filepath \hiberfil.sys
pae Yes
debugoptionenabled No
Windows-Speichertestprogramm
----------------------------
Bezeichner {memdiag}
device partition=C:
path \boot\memtest.exe
description Windows-Speicherdiagnose
locale de-DE
inherit {globalsettings}
badmemoryaccess Yes
Windows-Legacybetriebssystem-Ladeprogramm
-----------------------------------------
Bezeichner {ntldr}
device unknown
path \ntldr
description Frhere Windows-Version
EMS-Einstellungen
-----------------
Bezeichner {emssettings}
bootems Yes
Debuggereinstellungen
---------------------
Bezeichner {dbgsettings}
debugtype Serial
debugport 1
baudrate 115200
RAM-Defekte
-----------
Bezeichner {badmemory}
Globale Einstellungen
---------------------
Bezeichner {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}
Startladeprogramm-Einstellungen
-------------------------------
Bezeichner {bootloadersettings}
inherit {globalsettings}
Einstellungen zur Ladeprogrammfortsetzung
-----------------------------------------
Bezeichner {resumeloadersettings}
inherit {globalsettings}
Optionen zum RAM-Datentr„gersetup
---------------------------------
Bezeichner {ramdiskoptions}
description Ramdisk options
ramdisksdidevice partition=\Device\HarddiskVolume1
ramdisksdipath \boot\boot.sdi
LastRegBack: 2014-04-09 19:26
==================== End Of Log ============================
FRST.txt ********** ENDE Addition.txt ********** STARTFRST Additions Logfile: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 13-03-2014 01
Ran by ************* at 2014-04-09 19:56:48
Running from C:\Users\*************\Downloads\Download
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: AVG AntiVirus Free Edition 2014 (Enabled - Out of date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG AntiVirus Free Edition 2014 (Enabled - Out of date) {B5F5C120-2089-702E-0001-553BB0D5A664}
==================== Installed Programs ======================
7-Zip 4.57 (HKLM\...\7-Zip) (Version: - )
Access Help (HKLM\...\{C6FA39A7-26B1-480A-BC74-6D17531AC222}) (Version: 2.00 - )
Adobe AIR (HKLM\...\Adobe AIR) (Version: 3.6.0.5970 - Adobe Systems Incorporated)
Adobe AIR (Version: 3.6.0.5970 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 12 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Photoshop 6.0 (HKLM\...\Adobe Photoshop 6.0) (Version: 6.0 - Adobe Systems, Inc.)
Adobe Reader X (10.1.4) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.4 - Adobe Systems Incorporated)
Adobe SVG Viewer 3.0 (HKLM\...\Adobe SVG Viewer) (Version: 3.0 - )
Anzeige am Bildschirm (HKLM\...\OnScreenDisplay) (Version: 5.00 - )
Apple Mobile Device Support (HKLM\...\{D8AB8F0C-CEEB-4A29-8EF5-219B064813F4}) (Version: 1.1.3.26 - Apple Inc.)
Apple Software Update (HKLM\...\{B74F042E-E1B9-4A5B-8D46-387BB172F0A4}) (Version: 2.0.2.92 - Apple Inc.)
AVG 2014 (HKLM\...\AVG) (Version: 2014.0.4336 - AVG Technologies)
AVG 2014 (Version: 14.0.3722 - AVG Technologies) Hidden
AVG 2014 (Version: 14.0.4336 - AVG Technologies) Hidden
Bonjour (HKLM\...\{47BF1BD6-DCAC-468F-A0AD-E5DECC2211C3}) (Version: 1.0.104 - Apple Inc.)
Choice Guard (Version: 1.2.87.0 - Microsoft Corporation) Hidden
Client Security Solution (HKLM\...\{0F4EFCE8-E358-4430-A504-F55F32BA1816}) (Version: 8.0.0113.00 - Lenovo Group Limited)
Composer - Php Dependency Manager (HKLM\...\Composer_is1) (Version: - getcomposer.org)
Core FTP LE 2.1 (HKLM\...\Core FTP LE 2.1) (Version: - )
Diskeeper Home (HKLM\...\{796E076A-82F7-4D49-98C8-DEC0C3BC733A}) (Version: 9.0.545 - Diskeeper Corporation)
Ergänzung zu Productivity Center für ThinkPad (HKLM\...\{D728E945-256D-4477-B377-6BBA693714AC}) (Version: 2.00 - )
FileZilla Client 3.2.7.1 (HKLM\...\FileZilla Client) (Version: 3.2.7.1 - )
Git version 1.8.4-preview20130916 (HKLM\...\Git_is1) (Version: 1.8.4-preview20130916 - The Git Development Community)
Help Center (HKLM\...\{986F64DC-FF15-449D-998F-EE3BCEC6666A}) (Version: 2.00b - )
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: - )
iTunes (HKLM\...\{B85C4D19-6CEB-48CF-BD98-C887AC8C6F94}) (Version: 7.6.0.29 - Apple Inc.)
Java 7 Update 7 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217007FF}) (Version: 7.0.70 - Oracle)
Junk Mail filter update (Version: 14.0.8050.1202 - Microsoft Corporation) Hidden
Lenovo System Interface Driver (HKLM\...\LENOVO.SMIIF) (Version: 1.00 - )
Maintenance Manager (HKLM\...\AwayTask) (Version: 3.0.2.0 - )
Malwarebytes Anti-Malware Version 1.75.0.1300 (HKLM\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
Message Center (HKLM\...\{E7E836B8-4BDD-454F-82E6-5FEA17C83AD4}) (Version: 2.00b - )
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - deu) (Version: - Microsoft Corporation)
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft SQL Server Native Client (HKLM\...\{F46E21DF-5BE1-48E2-8390-5EEA8B25E36A}) (Version: 9.00.5000.00 - Microsoft Corporation)
Microsoft SQL Server VSS Writer (HKLM\...\{FDE96E86-7780-431C-92F7-679C6A7CEC51}) (Version: 9.00.5000.00 - Microsoft Corporation)
Microsoft Sync Framework Runtime Native v1.0 (x86) (HKLM\...\{8A74E887-8F0F-4017-AF53-CBA42211AAA5}) (Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Sync Framework Services Native v1.0 (x86) (HKLM\...\{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}) (Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
minicontrol 2.3.3 (HKLM\...\minicontrol 2.3.3) (Version: - LucaNet AG)
Mozilla Firefox 28.0 (x86 de) (HKLM\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)
MSVCRT (Version: 14.0.1468.721 - Microsoft) Hidden
MSXML 4.0 SP2 (KB936181) (HKLM\...\{C04E32E0-0416-434D-AFB9-6969D703A9EF}) (Version: 4.20.9848.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB941833) (HKLM\...\{C523D256-313D-4866-B36A-F3DE528246EF}) (Version: 4.20.9849.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
PC-Doctor 5 für Windows (HKLM\...\PC-Doctor 5 for Windows) (Version: 5.00.4330.05 - PC-Doctor, Inc.)
Präsentationsdirektor (HKLM\...\{65706020-7B6F-41F2-8047-FC69579E386A}) (Version: 3.01a - )
QuickTime (HKLM\...\{6EC874C2-F950-4B7E-A5B7-B1066D6B74AA}) (Version: 7.4.0.91 - Apple Inc.)
Registry patch for Windows Vista USB S3 PM Enablement (HKLM\...\USBPMon) (Version: 1.00 - )
Registry patch of Changing Timing of IDLE IRP by Finger Print Driver for Windows Vista (HKLM\...\FPIRPOn) (Version: 1.00 - )
Registry Patch of Enabling Device Initiated Power Management(DIPM) on SATA for Windows Vista (HKLM\...\Dipmon) (Version: 1.01 - )
Rescue and Recovery (HKLM\...\{7E4C16B8-8F76-4940-8505-98E93C00BF19}) (Version: 4.00.0113.00 - Lenovo Group Limited)
Shutterfly Express Uploader (HKLM\...\com.Shutterfly.ExpressUploader) (Version: 1.2.0.0 - Shutterfly, Inc.)
Shutterfly Express Uploader (Version: 1.2.0 - Shutterfly, Inc.) Hidden
Skype™ 6.11 (HKLM\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
Some PDF Image Extractr 1.5 (HKLM\...\Some PDF Image Extract_is1) (Version: - SomePDF.com)
SoundMAX (HKLM\...\{F0A37341-D692-11D4-A984-009027EC0A9C}) (Version: 6.10.1.5140 - Analog Devices)
StarOffice 8 (HKLM\...\{AB24FEBA-140D-4FAF-BC6F-4D34032EAADF}) (Version: 8.00.9011 - Sun Microsystems)
Sublime Text 2.0.2 (HKLM\...\Sublime Text 2_is1) (Version: - )
System Migration Assistant (HKLM\...\{F705E3E1-A471-426B-9A09-73429F3418EE}) (Version: 5.20.0026 - Lenovo Group Limited.)
System Update (HKLM\...\{8675339C-128C-44DD-83BF-0A5D6ABD8297}) (Version: 3.00.0022 - Lenovo)
ThinkPad Energie-Manager (HKLM\...\{DAC01CEE-5BAE-42D5-81FC-B687E84E8405}) (Version: 2.01 - )
ThinkPad FullScreen Magnifier (HKLM\...\ThinkPad FullScreen Magnifier) (Version: 1.16 - )
ThinkPad Mobility Center Customization (HKLM\...\{E0EF321A-1949-451B-9484-7886F4F4719E}) (Version: 1.00.0000 - Lenovo)
ThinkPad Modem (HKLM\...\CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_10140588) (Version: 7.62.00 - )
ThinkPad Power Management Driver (HKLM\...\Power Management Driver) (Version: 1.43 - )
ThinkPad TrackPoint Driver (HKLM\...\TrackPoint) (Version: 4.71.0.0 - Lenovo)
Thinkpad Wireless LAN Adapters Software (11a/b, 11b/g, 11a/b/g) (HKLM\...\{4B1B0FC1-BEEA-47DB-88DE-CFD8F26C2D0D}) (Version: 7.1.0.90 - Atheros Communications)
Thinkpad Wireless LAN Adapters Software (11a/b/g/n) (HKLM\...\{8485F313-4B62-42F3-ADD8-0DE34A4DDAEF}) (Version: 7.3.1.42b - Atheros Communications)
ThinkPad-Dienstprogramm 'EasyEject' (HKLM\...\{1297C681-92D7-40EF-93BF-03F66EC5105C}) (Version: 2.30 - )
ThinkVantage Access Connections (HKLM\...\{7EB114D8-207F-45AE-BABD-1669715F2630}) (Version: 4.31a - )
ThinkVantage Productivity Center (HKLM\...\{CF5737AF-8550-4546-A69B-0EA9EF5A9B55}) (Version: 2.01 - )
ThinkVantage Technologies Welcome Message (Version: 1.17 - ) Hidden
Turbo Lister 2 (HKLM\...\{8927E07C-97F7-4A54-88FB-D976F50DD46E}) (Version: 2.00.0000 - eBay Inc.)
Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch) (HKLM\...\{07629207-FAA0-4F1A-8092-BF5085BE511F}) (Version: 9.00.5000.00 - Microsoft Corporation)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (HKLM\...\{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707) (Version: 1 - Microsoft Corporation)
USB Scanner (HKLM\...\USB Scanner) (Version: - )
Visual Studio 2012 x86 Redistributables (HKLM\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
Wallpapers (Version: - ) Hidden
WampServer 2.2 (HKLM\...\WampServer 2_is1) (Version: - Hervé Leclerc (HeL))
Windows Driver Package - Broadcom (b57nd60x) Net (11/09/2006 9.36.0.0) (HKLM\...\CAFD8C258F6EB727276162D1667A38A8901813F2) (Version: 11/09/2006 9.36.0.0 - Broadcom)
Windows Driver Package - Intel (iaStor) hdc (02/12/2007 7.0.0.1020) (HKLM\...\67CCAA793684CADDDCD55BAD807632E611CA05D2) (Version: 02/12/2007 7.0.0.1020 - Intel)
Windows Driver Package - Intel hdc (09/15/2006 8.2.0.1008) (HKLM\...\9DE44D33DF9291DE11A1A790CFBF8541856C70DC) (Version: 09/15/2006 8.2.0.1008 - Intel)
Windows Driver Package - Intel hdc (09/15/2006 8.2.0.1008) (HKLM\...\C07FE7FC75ACBDD151782F792980433C19F635D4) (Version: 09/15/2006 8.2.0.1008 - Intel)
Windows Driver Package - Intel System (09/15/2006 7.0.0.1011) (HKLM\...\E6CEFD9A59425A2A27E92572AB367B28C371D3D8) (Version: 09/15/2006 7.0.0.1011 - Intel)
Windows Driver Package - Intel System (09/15/2006 7.0.0.1020) (HKLM\...\8B51271D05166ED3E2A0A7FD52BCB8628E296043) (Version: 09/15/2006 7.0.0.1020 - Intel)
Windows Driver Package - Intel System (09/15/2006 8.2.0.1008) (HKLM\...\DADE94E03F9586B655AEA5F99234D390348E108C) (Version: 09/15/2006 8.2.0.1008 - Intel)
Windows Driver Package - Intel USB (09/13/2006 8.2.0.1008) (HKLM\...\73501D040246FD1119FF9BD02EAA9CA1541A9E01) (Version: 09/13/2006 8.2.0.1008 - Intel)
Windows Driver Package - Lenovo (IBMPMDRV) System (11/01/2006 1.41) (HKLM\...\3CD6E6EC537F34026EA60F5BE964BCA8B58F5703) (Version: 11/01/2006 1.41 - Lenovo)
Windows Live Anmelde-Assistent (HKLM\...\{83E2CFA9-E0EB-4E08-9F85-43E577FF3D60}) (Version: 5.000.818.6 - Microsoft Corporation)
Windows Live Call (Version: 14.0.8050.1202 - Microsoft Corporation) Hidden
Windows Live Communications Platform (Version: 14.0.8050.1202 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM\...\WinLiveSuite_Wave3) (Version: 14.0.8050.1202 - Microsoft Corporation)
Windows Live Essentials (Version: 14.0.8050.1202 - Microsoft Corporation) Hidden
Windows Live Mail (Version: 14.0.8050.1202 - Microsoft Corporation) Hidden
Windows Live-Uploadtool (HKLM\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
==================== Restore Points =========================
27-03-2014 09:48:22 Geplanter Prüfpunkt
31-03-2014 13:14:36 Geplanter Prüfpunkt
09-04-2014 14:34:54 Geplanter Prüfpunkt
09-04-2014 16:29:35 Windows Update
==================== Hosts content: ==========================
2006-11-02 12:23 - 2013-05-22 20:36 - 00000817 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
::1 localhost
==================== Scheduled Tasks (whitelisted) =============
Task: {155723BA-60E2-4354-93AF-84EAC8D3C2D8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-05] ()
Task: {191A73DF-A04A-478B-9DBD-F4305052DFF2} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\netsh.exe [2006-11-02] (Microsoft Corporation)
Task: {2DE18FE4-6467-484F-8431-206702EC5546} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-19] (Microsoft Corporation)
Task: {2E5B7D97-F14C-4CFF-864E-620AABA892D1} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {4D72741E-769C-45DB-8604-CB8EBDADAA29} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {8B292281-1845-4CE3-A048-E878366DF33B} - System32\Tasks\Norton Internet Security - Systemprüfung ausführen - ************* => C:\Program Files\Norton Internet Security\Engine\17.6.0.32\navw32.exe
Task: {93FEB9DE-2D6F-4218-9AC7-457421924657} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {BCABEDC6-ED4A-4DE6-845B-CDF1AC41FC63} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-12] (Adobe Systems Incorporated)
Task: {CD32344C-64A4-4527-B287-AA013E613141} - System32\Tasks\PMTask => C:\Program Files\ThinkPad\Utilities\PWMIDTSV.EXE [2006-12-19] ()
Task: {ED23C45E-B557-47E1-B0B1-89202430CA45} - System32\Tasks\ROC_REG_JAN_DELETE => C:\ProgramData\AVG January 2013 Campaign\ROC.exe [2013-01-17] ()
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\ROC_REG_JAN_DELETE.job => C:\ProgramData\AVG January 2013 Campaign\ROC.exe
==================== Loaded Modules (whitelisted) =============
2006-11-30 07:00 - 2006-10-13 06:08 - 00055928 _____ () C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe
2006-12-14 00:13 - 2006-12-14 00:13 - 00569344 ____N () C:\Program Files\Lenovo\Rescue and Recovery\rrpservice.exe
2006-12-13 23:58 - 2006-12-13 23:58 - 00139264 ____N () C:\Program Files\Lenovo\Rescue and Recovery\CDRecord.dll
2006-12-13 22:46 - 2006-12-13 22:46 - 00045056 ____N () C:\Program Files\Lenovo\Rescue and Recovery\ADM\IUService.exe
2006-12-13 23:59 - 2006-12-13 23:59 - 00022016 ____N () C:\Program Files\Common Files\Lenovo\Logger\logmon.exe
2009-08-23 19:58 - 2009-08-23 19:58 - 00094208 _____ () C:\Program Files\FileZilla FTP Client\fzshellext.dll
2007-12-01 19:50 - 2006-12-19 19:01 - 00035376 ____N () C:\Program Files\ThinkPad\Utilities\GR\PWMRT32V.DLL
2013-11-20 17:13 - 2013-09-16 13:15 - 00324070 _____ () C:\Program Files\Git\git-cheetah\git_shell_ext.dll
2006-09-05 15:21 - 2006-09-05 15:21 - 00144424 ____N () C:\Program Files\ThinkVantage\SMA\7z\7-zip.dll
2007-12-01 19:47 - 2007-01-17 20:01 - 00063024 ____N () C:\Program Files\Lenovo\NPDIRECT\Oemdspif.dll
2007-12-01 19:47 - 2007-01-17 20:01 - 00071216 ____N () C:\Program Files\Lenovo\NPDIRECT\Oemdsp4I.dll
2007-12-01 19:47 - 2007-01-17 20:01 - 00235056 ____N () C:\Program Files\Lenovo\NPDIRECT\tpfnf7.dll
2006-11-30 07:00 - 2006-11-10 06:26 - 00064128 _____ () C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe
2006-11-30 07:00 - 2006-11-10 06:26 - 00030256 _____ () C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.dll
2006-11-30 07:00 - 2006-09-06 09:37 - 00079400 _____ () C:\Program Files\Lenovo\HOTKEY\tplhmm.dll
2006-12-13 12:24 - 2006-12-13 12:24 - 00110592 ____N () C:\Program Files\Common Files\Lenovo\XML4CMessages5_5.DLL
2006-12-13 23:58 - 2006-12-13 23:58 - 00139264 ____N () C:\Program Files\Common Files\Lenovo\CDRecord.dll
2006-11-30 07:00 - 2006-10-13 06:09 - 00073256 _____ () C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
2014-03-30 15:24 - 2014-03-30 15:26 - 03642480 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\Users\*************\Cookies:J1zCvrfTZwfT4jp50OtOgSfx
AlternateDataStreams: C:\Users\*************\Cookies:ZJBNNM20hVFcqqyssktLBd
==================== Safe Mode (whitelisted) ===================
==================== Disabled items from MSCONFIG ==============
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Gamma Loader.exe.lnk => C:\Windows\pss\Adobe Gamma Loader.exe.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^*************^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^StarOffice 8.lnk => C:\Windows\pss\StarOffice 8.lnk.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: AMSG => C:\Program Files\ThinkVantage\AMSG\Amsg.exe /startup
MSCONFIG\startupreg: BLOG => rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\BTVLogEx.DLL,StartBattLog
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files\QuickTime\QTTask.exe" -atboottime
==================== Faulty Device Manager Devices =============
Name: 6TO4 Adapter
Description: Microsoft-6zu4-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
Name: Microsoft-6zu4-Adapter #49
Description: Microsoft-6zu4-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
Name: Microsoft-6zu4-Adapter #22
Description: Microsoft-6zu4-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
Name: Microsoft-6zu4-Adapter #50
Description: Microsoft-6zu4-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
Name: Microsoft-6zu4-Adapter #41
Description: Microsoft-6zu4-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
Name: Microsoft-6zu4-Adapter #48
Description: Microsoft-6zu4-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
Name: Microsoft-ISATAP-Adapter #47
Description: Microsoft-ISATAP-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
Name: Microsoft-ISATAP-Adapter #48
Description: Microsoft-ISATAP-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
Name: Microsoft-ISATAP-Adapter #53
Description: Microsoft-ISATAP-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
Name: Microsoft-ISATAP-Adapter #70
Description: Microsoft-ISATAP-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
Name: Microsoft-ISATAP-Adapter #71
Description: Microsoft-ISATAP-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
Name: isatap.{8440AC40-B18B-4481-B99B-43740385BC96}
Description: Microsoft-ISATAP-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
==================== Event log errors: =========================
Application errors:
==================
Error: (04/09/2014 03:26:45 PM) (Source: Application Hang) (User: )
Description: Programm Photoshp.exe, Version 6.0.128.0 arbeitet nicht mehr mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen über das Problem zu suchen.
Prozess-ID: 10b4
Anfangszeit: 01cf53f52eda2b58
Zeitpunkt der Beendigung: 63
Error: (03/18/2014 05:33:16 PM) (Source: Microsoft Fax) (User: )
Description: Fehler beim Senden des Faxes. Kein Freizeichen. Dieses Fax wird nicht gesendet, da die maximale Wiederholungsanzahl erreicht wurde. Absender: *************. Rechnungscode: . Firma des Absenders: . Abteilung des Absenders: . Gerätename: ThinkPad Modem. Auftrags-ID: 0x0201cf42bb17c667. Benutzername: \*************.-PC\*************.
Weitere Informationen erhalten Sie im Aktivitätsprotokoll.
Error: (03/18/2014 05:30:41 PM) (Source: Microsoft Fax) (User: )
Description: Fehler beim Senden des Faxes. Kein Freizeichen. Dieses Fax wird nicht gesendet, da die maximale Wiederholungsanzahl erreicht wurde. Absender: *************. Rechnungscode: . Firma des Absenders: . Abteilung des Absenders: . Gerätename: ThinkPad Modem. Auftrags-ID: 0x0201cf42babba29b. Benutzername: \*************.-PC\*************.
Weitere Informationen erhalten Sie im Aktivitätsprotokoll.
Error: (03/18/2014 11:25:25 AM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung bmgr32.exe, Version 4.0.106.0, Zeitstempel 0x4580c99f, fehlerhaftes Modul kernel32.dll, Version 6.0.6002.18881, Zeitstempel 0x51da3e27, Ausnahmecode 0xc0000142, Fehleroffset 0x00009f5d,
Prozess-ID 0xa4c, Anwendungsstartzeit bmgr32.exe0.
Error: (03/18/2014 11:12:26 AM) (Source: MsiInstaller) (User: \*************.-PC)
Description: SA_Error1709: StandardAction(0xC00706AD): Produkt: AVG 2014 -- Fehler 1406. SA_Error1406: StandardAction(0xC007057E): Wert CORE_ProdCode konnte nicht in Schlüssel \SOFTWARE\AVG\AVG2014 geschrieben werden. Systemfehler: . Überprüfen Sie, ob Sie ausreichende Zugriffsrechte auf diesen Schlüssel besitzen oder wenden Sie sich an den Support.
Error: (03/17/2014 10:36:07 PM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung AVG_Remover.exe, Version 0.0.0.0, Zeitstempel 0x500f9a67, fehlerhaftes Modul AVG_Remover.exe, Version 0.0.0.0, Zeitstempel 0x500f9a67, Ausnahmecode 0xc0000005, Fehleroffset 0x00023c57,
Prozess-ID 0x1560, Anwendungsstartzeit AVG_Remover.exe0.
Error: (03/17/2014 07:56:27 PM) (Source: MsiInstaller) (User: \*************.-PC)
Description: SA_Error1709: StandardAction(0xC00706AD): Produkt: AVG 2014 -- Fehler 1406. SA_Error1406: StandardAction(0xC007057E): Wert CORE_ProdCode konnte nicht in Schlüssel \SOFTWARE\AVG\AVG2014 geschrieben werden. Systemfehler: . Überprüfen Sie, ob Sie ausreichende Zugriffsrechte auf diesen Schlüssel besitzen oder wenden Sie sich an den Support.
Error: (03/17/2014 06:30:14 PM) (Source: RasClient) (User: )
Description: CoID={45C20273-62D7-403F-9825-F885D29B3F1B}: Der Benutzer "\*************.-PC\*************" hat eine Verbindung mit dem Namen "Breitbandverbindung" gewählt, die Verbindung konnte jedoch nicht hergestellt werden. Der durch den Fehler zurückgegebene Ursachencode lautet: 815.
Error: (03/17/2014 06:04:04 PM) (Source: RasClient) (User: )
Description: CoID={67AEA7A4-2F3D-412E-B60A-EC2CA17E8157}: Der Benutzer "\*************.-PC\*************" hat eine Verbindung mit dem Namen "Breitbandverbindung" gewählt, die Verbindung konnte jedoch nicht hergestellt werden. Der durch den Fehler zurückgegebene Ursachencode lautet: 815.
Error: (03/08/2014 00:16:04 AM) (Source: Application Hang) (User: )
Description: Programm _iu14D2N.tmp, Version 51.52.0.0 arbeitet nicht mehr mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen über das Problem zu suchen.
Prozess-ID: 14b4
Anfangszeit: 01cf3a51aa1b0f43
Zeitpunkt der Beendigung: 16
System errors:
=============
Error: (04/09/2014 07:19:11 PM) (Source: Service Control Manager) (User: )
Description: 30000WPDBusEnum
Error: (04/09/2014 07:18:41 PM) (Source: Service Control Manager) (User: )
Description: 30000SysMain
Error: (04/09/2014 07:18:00 PM) (Source: Service Control Manager) (User: )
Description: 30000TrkWks
Error: (04/09/2014 07:15:58 PM) (Source: Service Control Manager) (User: )
Description: SQL Server VSS Writer1
Error: (04/09/2014 07:15:58 PM) (Source: Service Control Manager) (User: )
Description: Parallel port driver%%1058
Error: (04/09/2014 07:12:47 PM) (Source: Service Control Manager) (User: )
Description: Gruppenrichtlinienclient
Error: (04/09/2014 07:04:16 PM) (Source: DCOM) (User: )
Description: {6295DF2D-35EE-11D1-8707-00C04FD93327}
Error: (04/09/2014 07:02:55 PM) (Source: Service Control Manager) (User: )
Description: SQL Server VSS Writer1
Error: (04/09/2014 07:02:55 PM) (Source: Service Control Manager) (User: )
Description: Parallel port driver%%1058
Error: (04/09/2014 07:02:55 PM) (Source: Service Control Manager) (User: )
Description: Windows-Audio
Microsoft Office Sessions:
=========================
Error: (04/09/2014 03:26:45 PM) (Source: Application Hang)(User: )
Description: Photoshp.exe6.0.128.010b401cf53f52eda2b5863
Error: (03/18/2014 05:33:16 PM) (Source: Microsoft Fax)(User: )
Description: *************ThinkPad Modem0x0201cf42bb17c667\*************.-PC\*************
Error: (03/18/2014 05:30:41 PM) (Source: Microsoft Fax)(User: )
Description: *************ThinkPad Modem0x0201cf42babba29b\*************.-PC\*************
Error: (03/18/2014 11:25:25 AM) (Source: Application Error)(User: )
Description: bmgr32.exe4.0.106.04580c99fkernel32.dll6.0.6002.1888151da3e27c000014200009f5da4c01cf428bfdb8df42
Error: (03/18/2014 11:12:26 AM) (Source: MsiInstaller)(User: \*************.-PC)
Description: SA_Error1709: StandardAction(0xC00706AD): Produkt: AVG 2014 -- Fehler 1406. SA_Error1406: StandardAction(0xC007057E): Wert CORE_ProdCode konnte nicht in Schlüssel \SOFTWARE\AVG\AVG2014 geschrieben werden. Systemfehler: . Überprüfen Sie, ob Sie ausreichende Zugriffsrechte auf diesen Schlüssel besitzen oder wenden Sie sich an den Support.(NULL)(NULL)(NULL)(NULL)
Error: (03/17/2014 10:36:07 PM) (Source: Application Error)(User: )
Description: AVG_Remover.exe0.0.0.0500f9a67AVG_Remover.exe0.0.0.0500f9a67c000000500023c57156001cf421fffe70f94
Error: (03/17/2014 07:56:27 PM) (Source: MsiInstaller)(User: \*************.-PC)
Description: SA_Error1709: StandardAction(0xC00706AD): Produkt: AVG 2014 -- Fehler 1406. SA_Error1406: StandardAction(0xC007057E): Wert CORE_ProdCode konnte nicht in Schlüssel \SOFTWARE\AVG\AVG2014 geschrieben werden. Systemfehler: . Überprüfen Sie, ob Sie ausreichende Zugriffsrechte auf diesen Schlüssel besitzen oder wenden Sie sich an den Support.(NULL)(NULL)(NULL)(NULL)
Error: (03/17/2014 06:30:14 PM) (Source: RasClient)(User: )
Description: {45C20273-62D7-403F-9825-F885D29B3F1B}\*************.-PC\*************Breitbandverbindung815
Error: (03/17/2014 06:04:04 PM) (Source: RasClient)(User: )
Description: {67AEA7A4-2F3D-412E-B60A-EC2CA17E8157}\*************.-PC\*************Breitbandverbindung815
Error: (03/08/2014 00:16:04 AM) (Source: Application Hang)(User: )
Description: _iu14D2N.tmp51.52.0.014b401cf3a51aa1b0f4316
CodeIntegrity Errors:
===================================
Date: 2014-04-09 19:56:09.384
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\6523067.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-04-09 19:56:08.588
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\6523067.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-04-09 19:56:07.746
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\6523067.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-04-09 19:56:06.950
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\6523067.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-04-09 19:56:00.258
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\avgidshx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-04-09 19:55:59.447
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\avgidshx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-04-09 19:55:58.635
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\avgidshx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-04-09 19:55:57.840
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\avgidshx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-04-09 19:55:56.951
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\avgidsdriverx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-04-09 19:55:56.155
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\avgidsdriverx.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Percentage of memory in use: 91%
Total physical RAM: 1013.75 MB
Available physical RAM: 81.71 MB
Total Pagefile: 2289.8 MB
Available Pagefile: 1059.72 MB
Total Virtual: 2047.88 MB
Available Virtual: 1898.64 MB
==================== Drives ================================
Drive c: (SW_Preload) (Fixed) (Total:69.46 GB) (Free:15.04 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 75 GB) (Disk ID: 78A3ECC3)
Partition 1: (Not Active) - (Size=5 GB) - (Type=27)
Partition 2: (Active) - (Size=69 GB) - (Type=07 NTFS)
==================== End Of Log ============================
Addition.txt ********** ENDE gmer.txt ********** STARTGMER Logfile: Code:
ATTFilter GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-04-09 20:58:24
Windows 6.0.6002 Service Pack 2 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-0 HITACHI_ rev.SB2I 74,53GB
Running: Gmer-19357.exe; Driver: C:\Users\**********~1\AppData\Local\Temp\axldiaoc.sys
---- System - GMER 2.1 ----
SSDT \SystemRoot\system32\DRIVERS\avgidsshimx.sys ZwNotifyChangeKey [0x8CCEF6E0]
SSDT \SystemRoot\system32\DRIVERS\avgidsshimx.sys ZwNotifyChangeMultipleKeys [0x8CCEF800]
SSDT \SystemRoot\system32\DRIVERS\avgidsshimx.sys ZwOpenProcess [0x8CCEF010]
SSDT \SystemRoot\system32\DRIVERS\avgidsshimx.sys ZwOpenThread [0x8CCEF4D0]
SSDT \SystemRoot\system32\DRIVERS\avgidsshimx.sys ZwSuspendProcess [0x8CCEF300]
SSDT \SystemRoot\system32\DRIVERS\avgidsshimx.sys ZwSuspendThread [0x8CCEF3E0]
SSDT \SystemRoot\system32\DRIVERS\avgidsshimx.sys ZwTerminateProcess [0x8CCEF120]
SSDT \SystemRoot\system32\DRIVERS\avgidsshimx.sys ZwTerminateThread [0x8CCEF210]
SSDT \SystemRoot\system32\DRIVERS\avgidsshimx.sys ZwWriteVirtualMemory [0x8CCEF5E0]
---- Kernel code sections - GMER 2.1 ----
.text ntkrnlpa.exe!KeSetEvent + 3BD 82AE8A08 8 Bytes [E0, F6, CE, 8C, 00, F8, CE, ...]
.text ntkrnlpa.exe!KeSetEvent + 3F1 82AE8A3C 4 Bytes [10, F0, CE, 8C]
.text ntkrnlpa.exe!KeSetEvent + 40D 82AE8A58 4 Bytes [D0, F4, CE, 8C]
.text ntkrnlpa.exe!KeSetEvent + 611 82AE8C5C 8 Bytes [00, F3, CE, 8C, E0, F3, CE, ...]
.text ntkrnlpa.exe!KeSetEvent + 621 82AE8C6C 8 Bytes [20, F1, CE, 8C, 10, F2, CE, ...]
.text ...
---- Devices - GMER 2.1 ----
AttachedDevice \Driver\tdx \Device\Tcp avgtdix.sys
AttachedDevice \Driver\tdx \Device\Udp avgtdix.sys
AttachedDevice \Driver\tdx \Device\RawIp avgtdix.sys
---- Disk sectors - GMER 2.1 ----
Disk \Device\Harddisk0\DR0 unknown MBR code
---- EOF - GMER 2.1 ----
gmer.txt ********** ENDE |
|
10.04.2014, 06:06
| #2 |
| /// the machine /// TB-Ausbilder    | AVG 2014 Update schlägt fehl und meldet "allgemeiner Fehler" Hi,
__________________wenn der Rechner hier bereinigt wurde müsstest Du folgendes wissen: Finger weg von Tuning Scheiss! NIEMALS 2 AV programme nutzen. Lade dir bitte Emsisoft MBR Master herunter und speichere es auf den Desktop.
__________________ |
|
10.04.2014, 13:45
| #3 |
| | AVG 2014 Update schlägt fehl und meldet "allgemeiner Fehler" Hi Schrauber,
__________________danke für die Antwort. Wieso 2 AV Programme? Soweit ich weiß habe ich nur AVG Free 2014. Steht in den Logs ich hätte noch eins? Sag Bescheid falls ja, damit ich das loswerden kann. Tuning - hatte ich leider vergessen. Hier die zwei Dateien nach welchen Du gefragt hast. Viele Grüße, threeColors MBRMastr_2014.04.10_14.38.24.txt ********** START Code:
ATTFilter Detected Windows version: 6.0 Build 6002 Service Pack 2
Installing direct disk access driver ...
Driver connection handle: 0x000000D4
1 valid drive(s) found.
Details for Disk 0 - HITACHI HTS541680J9S Rev SB2I:
Device name : \\.\PhysicalDrive0
Geometry (C/H/S) : 10337/240/63
Boot loader reputation : Unknown
Cross view comparison : Passed
Partition table integrity: Passed
Boot loader hashes
SHA-1 : 3524133AEC872A9E348B4BAC7FEDAEA86B3E2BBD
MD5 : 20EDD5E10C6CFD32D67CEF7A61D5AE99
Anhang 66102 |
|
11.04.2014, 06:42
| #4 |
| /// the machine /// TB-Ausbilder | AVG 2014 Update schlägt fehl und meldet "allgemeiner Fehler"
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
11.04.2014, 11:10
| #5 |
| | AVG 2014 Update schlägt fehl und meldet "allgemeiner Fehler" Habe beide Dateien scannen lassen - virustotal Ergebnisse: Dateiname: emsi.zip Erkennungsrate: 0 / 51 Analyse-Datum: 2014-04-11 09:10:40 UTC ( vor 0 Minuten ) Dateiname: emsi.mbr Erkennungsrate: 0 / 51 Analyse-Datum: 2014-04-11 09:11:40 UTC ( vor 0 Minuten ) An welcher Stelle hast Du das mit Kapersky gefunden? Ich seh in den Logs nichts was "Kaper.." heißt, unter welchem Namen muß/sollte ich nachsehen? Auch auf meinem System sehe ich nichts was mit Kapersky zu tun hat - kein Icon rechts unten, kein Eintrag unter Systemsteuerung>Programme und Funktionen, nichts im Task Manager unter laufenden Prozessen oder Diensten. Ich bin neugierig herauszufinden was da los ist. Ergänzung: Wegen Kapersky: Ich habe soeben nachgeschaut mit dem KAV Removal Tool von hxxp://support.kaspersky.com/de/common/service Das findet einen "AVP Tool Driver" - soll ich den vom Tool löschen lassen, oder soll ich denn drauflassen? Ich hatte vor ein paar Jahren AV-Programme ausprobiert und möglicherweise auch Kapersky AV getestet - vermutlich ist das davon. Geändert von threeColors (11.04.2014 um 11:20 Uhr) |
|
13.04.2014, 14:02
| #6 |
| /// the machine /// TB-Ausbilder | AVG 2014 Update schlägt fehl und meldet "allgemeiner Fehler" Löschen. Ansonsten ist alles sauber.
__________________ --> AVG 2014 Update schlägt fehl und meldet "allgemeiner Fehler" |
|
| Themen zu AVG 2014 Update schlägt fehl und meldet "allgemeiner Fehler" |
| 4d36e972-e325-11ce-bfc1-08002be10318, antivirus, avg 2014, avg antivirus, avg free, bildschirm, bonjour, bootmgr, desktop, error, fehler, firefox, flash player, frage, helper, homepage, kaspersky, microsoft-6zu4-adapter, mozilla, msiinstaller, object, problem, registry, required, scan, security, senden, software, svchost, svchost.exe, system, update schlägt fehl, viele prozesse, windows |
Linear-Darstellung
