![]() |
|
Log-Analyse und Auswertung: Windows Vista Pro 32Bit: Internet (insb. Downloads) funktioniert nicht mehrWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #1 |
![]() | ![]() Windows Vista Pro 32Bit: Internet (insb. Downloads) funktioniert nicht mehr Hallo zusammen, ich habe Probleme mit meinem Laptop, Lenovo Thinkpad X200, Windows Vista Professional 32Bit. Das Gerät habe ich mit in einen längeren Urlaub genommen, das bedeutet, das ich zurzeit nur über verschiedene öffentliche WLANS in das Internet komme. Ich habe die (geniale) Idee gehabt, hier aus dem Urlaub noch schnell das Programm FritzFernzugriff zu installieren, um über eine VPN-Verbindung halbwegs sicher zu kommunizieren. Gleichzeitig hat wohl Thunderbird im Hintergrund ein Update gefahren und der Virenscanner Avast auch. Fazit: Es funktionierte nichts mehr. Ich habe daraufhin mit der Systemwiederherstellung das System zurückgesetzt. Das Internet funktioniert nun teilweise wieder, Spiegel.de kann ich z.B. aufrufen, Downloads mit einer Größe über 100 KB funktionieren (weder in IE noch Firefox) nicht, er hält einfach an, wenn ich auf Pause und neustarten gehe, lädt er ein paar KB nach. Am WLAN liegt es nicht, mit den IOS-Geräten kann ich surfen. Die Internet-Sicherheitseinstellungen in der Systemsteuerung habe ich bereits angepasst. Wie gesagt, Antivirus ist deinstalliert. Aufgrund des Posts "www.trojaner-board.de/69066-hilfe-downloaden-geht.html#post408522 habe ich die dort genannte Datei heruntergeladen und ausgeführt. Nach Neustart konnte ich Winsock resetten, die firewall läuft aber nicht und lässt sich auch nicht über das Sicherheitscenter starten. Im Ergebnis surfe ich gerade ohne Firwall und Virenscanner. Ich habe jetzt defogger ausgeführt, mit mehreren Pausen FRST geladen. GMER kann ich gar nicht runterladen, liegt vielleicht an den wechselnden Dateinamen. FRST-Log s.u. Avast hatte vor Deinstallation nichts gefunden. Wie gesagt, bin gerade in (längerem, unbezahlten) Urlaub und der Laptop war ein Draht zur Heimat... Danke! Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1) Log created at 12:02 on 06/05/2014 (admin) Checking for autostart values... HKCU\~\Run values retrieved. HKLM\~\Run values retrieved. Checking for services/drivers... -=E.O.F=- Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:06-05-2014 Ran by admin (administrator) on ADMIN-PC on 06-05-2014 12:30:10 Running from C:\Users\admin\Downloads Microsoft® Windows Vista™ Business Service Pack 2 (X86) OS Language: German Standard Internet Explorer Version 9 Boot Mode: Safe Mode (with Networking) The only official download link for FRST: Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (Lenovo Group Limited) C:\Program Files\ThinkPad\Utilities\PWMUIAux.EXE (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-18] (Microsoft Corporation) HKLM\...\Run: [TVT Scheduler Proxy] => C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe [487424 2008-03-04] (Lenovo Group Limited) HKLM\...\Run: [] => [X] HKLM\...\Run: [TpShocks] => C:\Windows\system32\TpShocks.exe [338216 2013-06-20] (Lenovo.) HKLM\...\Run: [RotateImage] => C:\Program Files\RotateImage\RCIMGDIR.exe [31744 2008-10-30] (Ricoh co.,Ltd.) HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SAIICpl.exe [307768 2010-04-28] () HKLM\...\Run: [FingerPrintSoftware] => C:\Program Files\Lenovo Fingerprint Software\fpapp.exe [1582920 2011-05-31] (AuthenTec) HKLM\...\Run: [FingerPrintSoftwareSplashScreen] => C:\Program Files\Lenovo Fingerprint Software\SplashScreen.exe [102400 2011-05-31] (AuthenTec, Inc.) HKLM\...\Run: [LPManager] => C:\Program Files\ThinkVantage\PrdCtr\LPMGR.EXE [185688 2009-07-23] (Lenovo Group Limited) HKLM\...\Run: [LPMailChecker] => C:\Program Files\ThinkVantage\PrdCtr\LPMLCHK.EXE [124248 2009-07-23] (Lenovo Group Limited) HKLM\...\Run: [AMSG] => C:\Program Files\ThinkVantage\AMSG\Amsg.exe [436800 2009-09-03] (LENOVO) HKLM\...\Run: [PWMTRV] => C:\Program Files\ThinkPad\Utilities\PWMTR32V.DLL [4452648 2013-06-26] (Lenovo Group Limited) HKLM\...\Run: [EZEJMNAP] => C:\Program Files\ThinkPad\Utilities\EZEJMNAP.EXE [256576 2009-12-01] (Lenovo Group Ltd.) HKLM\...\Run: [cssauth] => C:\Program Files\Lenovo\Client Security Solution\cssauth.exe [3093816 2009-03-04] (Lenovo Group Limited) HKLM\...\Run: [TrackPointSrv] => C:\Program Files\Lenovo\TrackPoint\tp4serv.exe [95264 2011-11-01] (Lenovo Group Limited) HKLM\...\Run: [ACTray] => C:\Program Files\ThinkPad\ConnectUtilities\ACTray.exe [433248 2012-05-30] (Lenovo) HKLM\...\Run: [ACWlIcon] => C:\Program Files\ThinkPad\ConnectUtilities\ACWlIcon.exe [195680 2012-05-30] (Lenovo) HKLM\...\Run: [picon] => C:\Program Files\Common Files\Intel\Privacy Icon\PIconStartup.exe [111640 2010-02-04] () HKLM\...\Run: [TPKMAPHELPER] => C:\Program Files\ThinkPad\Utilities\TpKmapAp.exe [992816 2007-02-26] (Lenovo) HKLM\...\Run: [TPFNF7] => C:\Program Files\Lenovo\NPDIRECT\TPFNF7SP.exe [62312 2010-03-26] (Lenovo Group Limited) HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter HKU\S-1-5-21-1471904081-4208774288-2156754060-1000\...\Run: [WMPNSCFG] => C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-18] (Microsoft Corporation) HKU\S-1-5-21-1471904081-4208774288-2156754060-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [20922016 2014-02-10] (Skype Technologies S.A.) Lsa: [Notification Packages] scecli ACGina Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk ShortcutTarget: Bluetooth.lnk -> C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe (Broadcom Corporation.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Digital Line Detect.lnk ShortcutTarget: Digital Line Detect.lnk -> C:\Program Files\Digital Line Detect\DLG.exe (Avanquest Software ) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xD0D0A6549868CF01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: IePasswordManagerHelper Class - {BF468356-BB7E-42D7-9F15-4F3B9BCFCED2} - C:\Program Files\Lenovo\Client Security Solution\tvtpwm_ie_com.dll (Lenovo Group Limited) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 188.135.143.246 188.135.200.246 FireFox: ======== FF ProfilePath: C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\lx74gymb.default FF DefaultSearchEngine: Bing FF SelectedSearchEngine: Bing FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_182.dll () FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.1.3 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Flash Video Downloader - Full HD Download - C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\lx74gymb.default\Extensions\artur.dubovoy@gmail.com [2014-04-26] FF Extension: NoScript - C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\lx74gymb.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-03-16] FF Extension: Adblock Plus - C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\lx74gymb.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-03-16] FF Extension: DownThemAll! - C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\lx74gymb.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2014-04-06] FF Extension: Greasemonkey - C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\lx74gymb.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2014-04-06] FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [] ========================== Services (Whitelisted) ================= S3 ADMonitor; C:\Windows\system32\ADMonitor.exe [106496 2011-05-31] () S2 avmike; C:\Program Files\FRITZ!Fernzugang\avmike.exe [255904 2012-11-28] (AVM Berlin) S2 certsrv; C:\Program Files\FRITZ!Fernzugang\certsrv.exe [122272 2012-11-28] (AVM Berlin) S2 dtsvc; C:\Windows\system32\DTS.exe [98304 2011-05-31] () S2 FoxitCloudUpdateService; C:\Program Files\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe [239680 2014-02-19] (Foxit Corporation) S2 JedoxSuiteMolapService; C:\Program Files\Jedox\Jedox Suite\olap\palo.exe [11264 2014-03-05] (Jedox OLAP AG) S2 LENOVO.CAMMUTE; C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe [44024 2013-05-29] (Lenovo Group Limited) S2 LENOVO.MICMUTE; C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe [127072 2012-08-24] (Lenovo Group Limited) S2 nwtsrv; C:\Program Files\FRITZ!Fernzugang\nwtsrv.exe [155488 2013-06-10] (AVM Berlin) S2 PwmEWSvc; C:\Program Files\ThinkPad\Utilities\PWMEWSVC.EXE [1664808 2013-06-26] (Lenovo Group Limited) S2 SUService; C:\Program Files\Lenovo\System Update\SUService.exe [28672 2013-07-10] (Lenovo Group Limited) S2 TPHKLOAD; C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe [116216 2013-05-23] (Lenovo Group Limited) S2 TSSCoreService; C:\Program Files\Lenovo\Client Security Solution\tvttcsd.exe [779576 2009-03-04] (Lenovo) S2 TVT Scheduler; C:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe [1122304 2008-03-04] (Lenovo Group Limited) S2 UNS; C:\Program Files\Common Files\Intel\Privacy Icon\UNS\UNS.exe [2058776 2010-02-04] (Intel Corporation) S2 TVT_UpdateMonitor; C:\Program Files\Lenovo\Rescue and Recovery\UpdateMonitor.exe [X] ==================== Drivers (Whitelisted) ==================== S3 5U875UVC; C:\Windows\System32\DRIVERS\RCUVCMNP.sys [187776 2009-10-23] (Ricoh co.,Ltd.) S3 lnvobus; C:\Windows\System32\DRIVERS\lnvobus.sys [282880 2008-12-16] (MCCI Corporation) S3 lnvocard; C:\Windows\System32\DRIVERS\lnvocard.sys [356480 2008-12-16] (MCCI Corporation) S3 lnvogps; C:\Windows\System32\DRIVERS\lnvogps.sys [77864 2008-10-23] (Ericsson AB) S3 lnvomdfl; C:\Windows\System32\DRIVERS\lnvomdfl.sys [15104 2008-12-16] (MCCI Corporation) S3 lnvomdfl2; C:\Windows\System32\DRIVERS\lnvomdfl2.sys [15104 2008-12-16] (MCCI Corporation) S3 lnvomdm; C:\Windows\System32\DRIVERS\lnvomdm.sys [365056 2008-12-16] (MCCI Corporation) S3 lnvomdm2; C:\Windows\System32\DRIVERS\lnvomdm2.sys [408960 2008-12-16] (MCCI Corporation) S3 lnvond5; C:\Windows\System32\DRIVERS\lnvond5.sys [25984 2008-12-16] (MCCI Corporation) S3 lnvounic; C:\Windows\System32\DRIVERS\lnvounic.sys [375424 2008-12-16] (MCCI Corporation) R3 NETwNv32; C:\Windows\System32\DRIVERS\NETwNv32.sys [6959616 2010-10-18] (Intel Corporation) R3 NWIM; C:\Windows\System32\DRIVERS\avmnwim.sys [334712 2011-07-05] (AVM Berlin) S3 Ser2plx86; C:\Windows\System32\DRIVERS\ser2pl.sys [132608 2012-07-26] (Prolific Technology Inc.) S3 Sony_EricssonWWSC; C:\Windows\System32\DRIVERS\lnvoscard.sys [24232 2008-07-08] (Sony Ericsson) R3 Tp4Track; C:\Windows\System32\DRIVERS\tp4track.sys [24872 2011-11-01] (Lenovo Group Limited) S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [X] S3 IpInIp; system32\DRIVERS\ipinip.sys [X] S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X] S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-05-06 12:30 - 2014-05-06 12:30 - 00011867 _____ () C:\Users\admin\Downloads\FRST.txt 2014-05-06 12:30 - 2014-05-06 12:30 - 00000000 ____D () C:\FRST 2014-05-06 12:26 - 2014-05-06 12:27 - 00020171 _____ () C:\Users\admin\Downloads\e0f3bu76.exe.part 2014-05-06 12:15 - 2014-05-06 12:24 - 01053184 _____ (Farbar) C:\Users\admin\Downloads\FRST.exe 2014-05-06 12:02 - 2014-05-06 12:03 - 00000472 _____ () C:\Users\admin\Desktop\defogger_disable.log 2014-05-06 12:02 - 2014-05-06 12:02 - 00000000 _____ () C:\Users\admin\defogger_reenable 2014-05-06 12:01 - 2014-05-06 12:01 - 00046011 _____ () C:\Users\admin\Downloads\0wzupnm0.exe.part 2014-05-06 11:58 - 2014-05-06 11:58 - 00050477 _____ () C:\Users\admin\Desktop\Defogger.exe 2014-05-06 11:56 - 2014-05-06 12:03 - 00145220 _____ () C:\Users\admin\Downloads\mseinstall.exe.part 2014-05-06 11:37 - 2014-05-06 11:37 - 00001098 _____ () C:\Users\admin\Downloads\sharedaccess.zip 2014-05-06 10:56 - 2014-05-06 10:56 - 00000000 __RSH () C:\MSDOS.SYS 2014-05-06 10:56 - 2014-05-06 10:56 - 00000000 __RSH () C:\IO.SYS 2014-05-06 10:49 - 2014-05-06 10:49 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FRITZ!Fernzugang 2014-05-06 10:48 - 2014-05-06 10:48 - 00000000 ____D () C:\Program Files\Common Files\Wise Installation Wizard 2014-05-06 00:15 - 2014-05-06 00:16 - 1048576000 _____ () C:\Users\admin\****** 2014-05-05 23:25 - 2014-05-05 23:40 - 00000000 ____D () C:\Users\admin\AppData\Roaming\TrueCrypt 2014-05-05 21:26 - 2014-05-05 21:27 - 00000000 ____D () C:\Program Files\Google 2014-05-05 21:26 - 2014-05-05 21:26 - 00000000 ____D () C:\Users\admin\AppData\Local\Google 2014-05-04 23:51 - 2014-04-29 12:28 - 12347392 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-05-04 23:51 - 2014-04-29 12:07 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-05-04 23:17 - 2014-05-04 23:23 - 00493263 _____ (Microsoft Corporation) C:\Users\admin\Downloads\mseinstall (1).exe.klkye69.partial 2014-05-02 23:16 - 2014-05-02 23:16 - 00000000 ____D () C:\Users\admin\AppData\Roaming\AVM 2014-05-02 22:38 - 2014-05-02 22:38 - 00004307 _____ () C:\Users\admin\Documents\******.txt 2014-05-02 21:14 - 2014-05-02 22:38 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird(99) 2014-05-01 19:24 - 2014-05-01 19:24 - 00000000 __SHD () C:\found.000 2014-05-01 19:05 - 2014-05-01 19:05 - 00000875 _____ () C:\Users\admin\Documents\****** .txt 2014-05-01 18:58 - 2014-05-06 10:49 - 00000000 ____D () C:\Program Files\FRITZ!Fernzugang 2014-05-01 18:58 - 2014-05-01 18:58 - 00000000 ____D () C:\ProgramData\AVM 2014-05-01 18:54 - 2014-05-01 18:55 - 12995204 _____ () C:\Users\admin\Downloads\Fritz_Fernzugang_VPN_1.3.1.0.zip 2014-05-01 18:43 - 2014-05-01 18:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenVPN 2014-05-01 18:43 - 2014-05-01 18:45 - 00000000 ____D () C:\Program Files\OpenVPN 2014-05-01 18:43 - 2014-05-01 18:44 - 00000000 ____D () C:\Program Files\TAP-Windows 2014-04-28 22:32 - 2014-04-28 22:32 - 00000218 _____ () C:\Users\admin\.recently-used.xbel 2014-04-28 21:49 - 2014-04-28 21:49 - 00108253 _____ () C:\Users\admin\Documents\*****.xps 2014-04-28 21:48 - 2014-04-28 21:48 - 00557138 ____N () C:\Users\admin\Documents\*****.TIF 2014-04-27 23:19 - 2014-04-27 23:19 - 00000000 ____D () C:\Users\admin\Downloads\ADAC_TourSet_Venedig 2014-04-26 00:36 - 2014-04-26 00:36 - 00003640 _____ () C:\Users\admin\Desktop\*****.htm 2014-04-24 21:46 - 2014-04-24 22:29 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Q-Dir 2014-04-24 21:46 - 2014-04-24 21:46 - 00001620 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Q-Dir.lnk 2014-04-24 21:46 - 2014-04-24 21:46 - 00000000 ____D () C:\Users\admin\Documents\Favorites_Q_Dir 2014-04-24 21:46 - 2014-04-24 21:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Q-Dir 2014-04-24 21:46 - 2014-04-24 21:46 - 00000000 ____D () C:\Program Files\Q-Dir 2014-04-24 21:45 - 2014-04-24 22:29 - 00021862 _____ () C:\Windows\Q-Dir.ini 2014-04-24 21:06 - 2014-04-28 22:10 - 00000000 ____D () C:\Users\admin\Desktop\KMZ 2014-04-22 23:57 - 2014-04-22 23:57 - 00002711 _____ () C:\Users\admin\Desktop\IMG_0131.jpg.out.pp3 2014-04-22 23:56 - 2014-04-22 23:56 - 00002711 _____ () C:\Users\admin\Desktop.jpg.out.pp3 2014-04-22 23:44 - 2014-05-02 20:43 - 00000000 ____D () C:\Users\admin\Desktop\Sicher 2014-04-22 23:43 - 2014-04-22 23:43 - 00000000 ____D () C:\Users\admin\AppData\Local\RawTherapee3.0.1 2014-04-22 23:42 - 2014-04-22 23:42 - 00000000 ____D () C:\Users\admin\Downloads\RawTherapee_WinXP_32_3.0.1 2014-04-22 23:42 - 2014-04-22 23:42 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RawTherapee 3.0.1 2014-04-22 23:42 - 2014-04-22 23:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RawTherapee 3.0.1 2014-04-22 23:42 - 2014-04-22 23:42 - 00000000 ____D () C:\Program Files\RawTherapee3.0.1 2014-04-22 22:52 - 2014-04-22 22:54 - 11869198 _____ () C:\Users\admin\Downloads\RawTherapee_WinXP_32_3.0.1.zip 2014-04-21 11:08 - 2014-05-06 11:57 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Skype 2014-04-21 11:08 - 2014-04-21 11:08 - 00001880 _____ () C:\Users\Public\Desktop\Skype.lnk 2014-04-21 11:08 - 2014-04-21 11:08 - 00000000 ___RD () C:\Program Files\Skype 2014-04-21 11:08 - 2014-04-21 11:08 - 00000000 ____D () C:\Users\admin\AppData\Local\Skype 2014-04-21 11:08 - 2014-04-21 11:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2014-04-21 11:08 - 2014-04-21 11:08 - 00000000 ____D () C:\Program Files\Common Files\Skype 2014-04-21 11:07 - 2014-04-21 11:08 - 00000000 ____D () C:\ProgramData\Skype 2014-04-21 11:07 - 2014-04-21 11:07 - 01678496 _____ (Skype Technologies S.A.) C:\Users\admin\Downloads\SkypeSetup.exe 2014-04-21 00:09 - 2014-05-05 23:35 - 00000000 ____D () C:\Users\admin\AppData\Roaming\vlc 2014-04-21 00:05 - 2014-04-21 00:05 - 00000859 _____ () C:\Users\Public\Desktop\VLC media player.lnk ***** ==================== One Month Modified Files and Folders ======= 2014-05-06 12:30 - 2014-05-06 12:30 - 00011867 _____ () C:\Users\admin\Downloads\FRST.txt 2014-05-06 12:30 - 2014-05-06 12:30 - 00000000 ____D () C:\FRST 2014-05-06 12:27 - 2014-05-06 12:26 - 00020171 _____ () C:\Users\admin\Downloads\e0f3bu76.exe.part 2014-05-06 12:24 - 2014-05-06 12:15 - 01053184 _____ (Farbar) C:\Users\admin\Downloads\FRST.exe 2014-05-06 12:07 - 2013-08-11 15:55 - 00001356 _____ () C:\Users\admin\AppData\Local\d3d9caps.dat 2014-05-06 12:03 - 2014-05-06 12:02 - 00000472 _____ () C:\Users\admin\Desktop\defogger_disable.log 2014-05-06 12:03 - 2014-05-06 11:56 - 00145220 _____ () C:\Users\admin\Downloads\mseinstall.exe.part 2014-05-06 12:02 - 2014-05-06 12:02 - 00000000 _____ () C:\Users\admin\defogger_reenable 2014-05-06 12:02 - 2013-08-11 15:55 - 00000000 ____D () C:\Users\admin 2014-05-06 12:02 - 2006-11-02 14:52 - 01090744 _____ () C:\Windows\WindowsUpdate.log 2014-05-06 12:01 - 2014-05-06 12:01 - 00046011 _____ () C:\Users\admin\Downloads\0wzupnm0.exe.part 2014-05-06 11:58 - 2014-05-06 11:58 - 00050477 _____ () C:\Users\admin\Desktop\Defogger.exe 2014-05-06 11:57 - 2014-04-21 11:08 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Skype 2014-05-06 11:54 - 2006-11-02 15:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-05-06 11:54 - 2006-11-02 14:47 - 00005168 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 2014-05-06 11:54 - 2006-11-02 14:47 - 00005168 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 2014-05-06 11:53 - 2014-04-06 17:56 - 101599160 _____ () C:\Windows\system32\ICAutoUpdate.log 2014-05-06 11:53 - 2013-08-11 15:46 - 00000012 _____ () C:\Windows\bthservsdp.dat 2014-05-06 11:53 - 2006-11-02 15:01 - 00018986 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-05-06 11:37 - 2014-05-06 11:37 - 00001098 _____ () C:\Users\admin\Downloads\sharedaccess.zip 2014-05-06 11:02 - 2006-11-02 12:33 - 01564930 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-05-06 10:56 - 2014-05-06 10:56 - 00000000 __RSH () C:\MSDOS.SYS 2014-05-06 10:56 - 2014-05-06 10:56 - 00000000 __RSH () C:\IO.SYS 2014-05-06 10:55 - 2014-04-06 17:51 - 00000000 ____D () C:\ProgramData\AVAST Software 2014-05-06 10:55 - 2006-11-02 15:00 - 00599310 _____ () C:\Windows\PFRO.log 2014-05-06 10:49 - 2014-05-06 10:49 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FRITZ!Fernzugang 2014-05-06 10:49 - 2014-05-01 18:58 - 00000000 ____D () C:\Program Files\FRITZ!Fernzugang 2014-05-06 10:48 - 2014-05-06 10:48 - 00000000 ____D () C:\Program Files\Common Files\Wise Installation Wizard 2014-05-06 00:16 - 2014-05-06 00:15 - 1048576000 _____ () C:\Users\admin\****** 2014-05-05 23:40 - 2014-05-05 23:25 - 00000000 ____D () C:\Users\admin\AppData\Roaming\TrueCrypt 2014-05-05 23:35 - 2014-04-21 00:09 - 00000000 ____D () C:\Users\admin\AppData\Roaming\vlc 2014-05-05 21:27 - 2014-05-05 21:26 - 00000000 ____D () C:\Program Files\Google 2014-05-05 21:26 - 2014-05-05 21:26 - 00000000 ____D () C:\Users\admin\AppData\Local\Google 2014-05-05 00:09 - 2014-03-17 21:36 - 00000393 _____ () C:\Users\Public\Documents\BluetoothLog.html 2014-05-04 23:40 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\Msdtc 2014-05-04 23:39 - 2006-11-02 12:22 - 39583744 _____ () C:\Windows\system32\config\components_previous 2014-05-04 23:39 - 2006-11-02 12:22 - 35389440 _____ () C:\Windows\system32\config\software_previous 2014-05-04 23:39 - 2006-11-02 12:22 - 28311552 _____ () C:\Windows\system32\config\system_previous 2014-05-04 23:39 - 2006-11-02 12:22 - 00262144 _____ () C:\Windows\system32\config\security_previous 2014-05-04 23:39 - 2006-11-02 12:22 - 00262144 _____ () C:\Windows\system32\config\sam_previous 2014-05-04 23:39 - 2006-11-02 12:22 - 00262144 _____ () C:\Windows\system32\config\default_previous 2014-05-04 23:34 - 2014-04-07 23:41 - 00000000 ____D () C:\Users\admin\AppData\Roaming\XnView 2014-05-04 23:34 - 2014-03-18 20:40 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird 2014-05-04 23:34 - 2014-03-16 11:31 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service 2014-05-04 23:34 - 2013-08-12 01:25 - 00000000 ____D () C:\ProgramData\Lenovo 2014-05-04 23:34 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\spool 2014-05-04 23:34 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\registration 2014-05-04 23:23 - 2014-05-04 23:17 - 00493263 _____ (Microsoft Corporation) C:\Users\admin\Downloads\mseinstall (1).exe.klkye69.partial 2014-05-02 23:16 - 2014-05-02 23:16 - 00000000 ____D () C:\Users\admin\AppData\Roaming\AVM 2014-05-02 22:38 - 2014-05-02 22:38 - 00004307 _____ () ************** 2014-05-02 22:38 - 2014-05-02 21:14 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird(99) 2014-05-02 20:43 - 2014-04-22 23:44 - 00000000 ____D () C:\Users\admin\Desktop\Sicher 2014-05-02 20:29 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\NDF 2014-05-01 19:24 - 2014-05-01 19:24 - 00000000 __SHD () C:\found.000 2014-05-01 19:06 - 2014-04-20 21:43 - 00000000 ____D () C:\Users\admin\AppData\Roaming\S3Browser 2014-05-01 19:05 - 2014-05-01 19:05 - 00000875 _____ () *************** 2014-05-01 18:58 - 2014-05-01 18:58 - 00000000 ____D () C:\ProgramData\AVM 2014-05-01 18:55 - 2014-05-01 18:54 - 12995204 _____ () C:\Users\admin\Downloads\Fritz_Fernzugang_VPN_1.3.1.0.zip 2014-05-01 18:50 - 2013-08-11 15:55 - 00000000 ____D () C:\Users\admin\AppData\Local\VirtualStore 2014-05-01 18:45 - 2014-05-01 18:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenVPN 2014-05-01 18:45 - 2014-05-01 18:43 - 00000000 ____D () C:\Program Files\OpenVPN 2014-05-01 18:44 - 2014-05-01 18:43 - 00000000 ____D () C:\Program Files\TAP-Windows 2014-04-30 19:25 - 2014-03-18 20:41 - 00000000 ____D () C:\Users\admin\AppData\Local\Thunderbird 2014-04-29 12:28 - 2014-05-04 23:51 - 12347392 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-04-29 12:07 - 2014-05-04 23:51 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-04-28 22:32 - 2014-04-28 22:32 - 00000218 _____ () C:\Users\admin\.recently-used.xbel 2014-04-28 22:10 - 2014-04-24 21:06 - 00000000 ____D () C:\Users\admin\Desktop\KMZ 2014-04-28 21:49 - 2014-04-28 21:49 - 00108253 _____ () C:\Users\admin\Documents\venedig.xps 2014-04-28 21:48 - 2014-04-28 21:48 - 00557138 ____N () C:\Users\admin\Documents\venedig.TIF 2014-04-27 23:20 - 2006-11-02 14:52 - 00035877 _____ () C:\Windows\setupact.log 2014-04-27 23:19 - 2014-04-27 23:19 - 00000000 ____D () C:\Users\admin\Downloads\ADAC_TourSet_Venedig 2014-04-26 00:36 - 2014-04-26 00:36 - 00003640 _____ () *********.htm 2014-04-24 22:29 - 2014-04-24 21:46 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Q-Dir 2014-04-24 22:29 - 2014-04-24 21:45 - 00021862 _____ () C:\Windows\Q-Dir.ini 2014-04-24 21:46 - 2014-04-24 21:46 - 00001620 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Q-Dir.lnk 2014-04-24 21:46 - 2014-04-24 21:46 - 00000000 ____D () C:\Users\admin\Documents\Favorites_Q_Dir 2014-04-24 21:46 - 2014-04-24 21:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Q-Dir 2014-04-24 21:46 - 2014-04-24 21:46 - 00000000 ____D () C:\Program Files\Q-Dir 2014-04-23 09:34 - 2014-04-14 14:54 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Mp3tag 2014-04-22 23:57 - 2014-04-22 23:57 - 00002711 _____ () C:\Users\admin\Desktop\IMG_0131.jpg.out.pp3 2014-04-22 23:56 - 2014-04-22 23:56 - 00002711 _____ () C:\Users\admin\Desktop.jpg.out.pp3 2014-04-22 23:43 - 2014-04-22 23:43 - 00000000 ____D () C:\Users\admin\AppData\Local\RawTherapee3.0.1 2014-04-22 23:42 - 2014-04-22 23:42 - 00000000 ____D () C:\Users\admin\Downloads\RawTherapee_WinXP_32_3.0.1 2014-04-22 23:42 - 2014-04-22 23:42 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RawTherapee 3.0.1 2014-04-22 23:42 - 2014-04-22 23:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RawTherapee 3.0.1 2014-04-22 23:42 - 2014-04-22 23:42 - 00000000 ____D () C:\Program Files\RawTherapee3.0.1 2014-04-22 22:54 - 2014-04-22 22:52 - 11869198 _____ () C:\Users\admin\Downloads\RawTherapee_WinXP_32_3.0.1.zip 2014-04-21 11:08 - 2014-04-21 11:08 - 00001880 _____ () C:\Users\Public\Desktop\Skype.lnk 2014-04-21 11:08 - 2014-04-21 11:08 - 00000000 ___RD () C:\Program Files\Skype 2014-04-21 11:08 - 2014-04-21 11:08 - 00000000 ____D () C:\Users\admin\AppData\Local\Skype 2014-04-21 11:08 - 2014-04-21 11:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2014-04-21 11:08 - 2014-04-21 11:08 - 00000000 ____D () C:\Program Files\Common Files\Skype 2014-04-21 11:08 - 2014-04-21 11:07 - 00000000 ____D () C:\ProgramData\Skype 2014-04-21 11:07 - 2014-04-21 11:07 - 01678496 _____ (Skype Technologies S.A.) C:\Users\admin\Downloads\SkypeSetup.exe 2014-04-21 00:05 - 2014-04-21 00:05 - 00000859 _____ () C:\Users\Public\Desktop\VLC media player.lnk 2014-04-21 00:05 - 2014-04-21 00:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN 2014-04-21 00:05 - 2014-04-21 00:05 - 00000000 ____D () C:\Program Files\VideoLAN 2014-04-20 23:54 - 2014-04-20 23:34 - 00000000 ____D () C:\Users\admin\Desktop\Mp3 2014-04-20 23:52 - 2014-04-20 23:51 - 24677393 _____ () C:\Users\admin\Downloads\vlc-2.1.3-win32(1).exe ***** Some content of TEMP: ==================== C:\Users\admin\AppData\Local\Temp\avgnt.exe C:\Users\admin\AppData\Local\Temp\Foxit Reader Updater.exe C:\Users\admin\AppData\Local\Temp\ICReinstall_AdobeFlashPlayer.exe C:\Users\admin\AppData\Local\Temp\xerces-c_2_5_0.dll C:\Users\admin\AppData\Local\Temp\xmlDeployer.exe C:\Users\admin\AppData\Local\Temp\xmlUpdater.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\system32\winlogon.exe => MD5 is legit C:\Windows\system32\wininit.exe => MD5 is legit C:\Windows\system32\svchost.exe => MD5 is legit C:\Windows\system32\services.exe => MD5 is legit C:\Windows\system32\User32.dll => MD5 is legit C:\Windows\system32\userinit.exe => MD5 is legit C:\Windows\system32\rpcss.dll => MD5 is legit C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-05-06 12:20 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version:06-05-2014 Ran by admin at 2014-05-06 12:32:04 Running from C:\Users\admin\Downloads Boot Mode: Safe Mode (with Networking) ========================================================== ==================== Security Center ======================== AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== Adobe Flash Player 13 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 13.0.0.182 - Adobe Systems Incorporated) Anzeige am Bildschirm (HKLM\...\OnScreenDisplay) (Version: 6.70.00 - ) AVM FRITZ!Fernzugang (HKLM\...\{F2B03BB1-D679-4FFF-951D-3058A669A823}) (Version: 1.3.1 - AVM Berlin) Cisco EAP-FAST Module (HKLM\...\{415B2719-AD3A-4944-B404-C472DB6085B3}) (Version: 2.1.6 - Cisco Systems, Inc.) Cisco LEAP Module (HKLM\...\{83770D14-21B9-44B3-8689-F7B523F94560}) (Version: 1.0.12 - Cisco Systems, Inc.) Cisco PEAP Module (HKLM\...\{669C7BD8-DAA2-49B6-966C-F1E2AAE6B17E}) (Version: 1.0.13 - Cisco Systems, Inc.) Client Security - Password Manager (HKLM\...\{44E9D4C2-946C-4378-9354-558803C47A68}) (Version: 8.21.0006.00 - Lenovo Group Limited) Conexant 20561 SmartAudio HD (HKLM\...\CNXT_AUDIO_HDA) (Version: 4.92.15.0 - Conexant) CSVed 2.3.0 (HKLM\...\CSVed_is1) (Version: 2.3.0 - Sam Francke) Dienstprogramm 'ThinkPad-Tastaturanpassung' (HKLM\...\{2111B23F-7FDA-4A41-8309-E5A1663CA296}) (Version: 1.0.01 - ) ElsterFormular (HKLM\...\ElsterFormular) (Version: 15.0.20140212 - Landesfinanzdirektion Thüringen) Energie-Manager (HKLM\...\{DAC01CEE-5BAE-42D5-81FC-B687E84E8405}) (Version: 6.55 - ) Ergänzung zu Productivity Center für ThinkPad (HKLM\...\{D728E945-256D-4477-B377-6BBA693714AC}) (Version: 3.00b - ) Ericsson Wireless Module Core (HKLM\...\{64211D43-D195-413C-A7E7-666C10B53E1F}) (Version: 1.0.1046.229 - Lenovo) FastGlacier version 2.2.9 (HKLM\...\FastGlacier_is1) (Version: 2.2.9.0 - NetSDK Software, LLC) FDRTools Basic 2.6.1 (HKLM\...\{307232B6-D24C-4F7E-A1A4-5F6EFB81CB24}) (Version: 2.6.1 - AGS Technik) FormsForWeb® Filler 3.2.4 (HKLM\...\{510E2ADB-37E1-4752-9D13-67077FC53D43}) (Version: 3.2.4 - Lucom GmbH) Foxit Cloud (HKLM\...\{41914D8B-9D6E-4764-A1F9-BC43FB6782C1}_is1) (Version: 1.2.75.126 - Foxit Corporation) Foxit Reader (HKLM\...\Foxit Reader_is1) (Version: 6.1.4.217 - Foxit Corporation) GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team) Help Center (HKLM\...\{986F64DC-FF15-449D-998F-EE3BCEC6666A}) (Version: 2.00n - ) Hugin 2013.0.0 (HKLM\...\Hugin) (Version: 2013.0.0 hg_0d404a7088e6 - The Hugin Development Team) Integrated Camera Driver Installer Package Ver.1.32.500.0 (HKLM\...\{82EB6CEA-749A-410F-8AD2-372A286BA3BE}) (Version: 1.32.500.0 - RICOH) Intel PROSet Wireless (Version: - ) Hidden Intel(R) Control Center (HKLM\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation) Intel(R) Graphics Media Accelerator Driver (HKLM\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2555 - Intel Corporation) Intel(R) Management Engine Interface (HKLM\...\HECI) (Version: - Intel Corporation) Intel(R) Network Connections Drivers (HKLM\...\PROSet) (Version: 16.1 - Intel) Intel(R) PROSet/Wireless WiFi-Software (HKLM\...\{F8F28729-B336-492C-B4FD-53A9BBDF0482}) (Version: 13.04.0000 - Intel Corporation) Intel® Active-Management-Technologie (HKLM\...\MESOL) (Version: - Intel Corporation) Java 7 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle) Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden Jedox Base 5.0 SR3 (HKLM\...\{995E8B3D-F78A-4525-80C2-E0E3ADCE1B0B}_is1) (Version: 5.0.0.32454 - Jedox AG) Lenovo Fingerprint Software (HKLM\...\{3D8994A3-02A8-45B5-B955-53E608BC69ED}) (Version: 3.3.2.50 - AuthenTec, Inc.) Lenovo Patch Utility (HKLM\...\{6E6E7725-C7BC-4C39-8B3F-14B67331A120}) (Version: 1.3.0.9 - Lenovo Group Limited) Lenovo Power Management Driver (HKLM\...\Power Management Driver) (Version: 1.67.03.13 - ) Lenovo System Interface Driver (HKLM\...\LENOVO.SMIIF) (Version: 1.05 - ) Message Center (HKLM\...\{E7E836B8-4BDD-454F-82E6-5FEA17C83AD4}) (Version: 2.01g - ) Microsoft .NET Framework 3.5 Language Pack SP1 - DEU (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - deu) (Version: - Microsoft Corporation) Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729 - Microsoft Corporation) Hidden Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation) Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation) Microsoft Office Standard Edition 2003 (HKLM\...\{91120407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Mozilla Firefox 28.0 (x86 de) (HKLM\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla) Mozilla Thunderbird 24.4.0 (x86 de) (HKLM\...\Mozilla Thunderbird 24.4.0 (x86 de)) (Version: 24.4.0 - Mozilla) Mp3tag v2.58 (HKLM\...\Mp3tag) (Version: v2.58 - Florian Heidenreich) MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) MyDriveConnect 3.3.0.1502 (HKLM\...\MyDriveConnect) (Version: 3.3.0.1502 - TomTom) Notepad++ (HKLM\...\Notepad++) (Version: 6.5.5 - Notepad++ Team) NTRIP (HKLM\...\{4AAD21AD-EE06-46C9-8B57-28D53DF9FB06}_is1) (Version: - NTRIP) OpenOffice 4.0.0 (HKLM\...\{55E61709-D7D4-43C0-B45D-BFAF5C09A02D}) (Version: 4.00.9702 - Apache Software Foundation) PL-2303 USB-to-Serial (HKLM\...\{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}) (Version: 1.7.0 - Prolific Technology INC) Präsentationsdirektor (HKLM\...\{65706020-7B6F-41F2-8047-FC69579E386A}) (Version: 4.08 - ) Q-Dir (HKLM\...\Q-Dir) (Version: - ) RawTherapee 3.0.1 (HKLM\...\RawTherapee 3.0.1) (Version: 3.0.1.0 - RT Team) Registry patch for Windows Vista USB S3 PM Enablement (HKLM\...\USBPMon) (Version: 1.00 - ) Registry Patch of Enabling Device Initiated Power Management(DIPM) on SATA for Windows Vista (HKLM\...\Dipmon) (Version: 1.01 - ) Registry patch to improve USB device detection on resume from sleep for Windows Vista (HKLM\...\{4AB5764A-3894-49A2-BAA8-C4665F74CD4C}) (Version: 1.01.0000 - Lenovo Group Limited) S3 Browser version 4.3.1 (HKLM\...\S3 Browser_is1) (Version: 4.3.1.0 - NetSDK Software, LLC) Skype™ 6.14 (HKLM\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.) System Migration Assistant (HKLM\...\{8A4DB1CA-8206-4ADC-805C-66ACF1611DA3}) (Version: 6.00.0009 - Lenovo Group Limited.) System Requirements Lab for Intel (HKLM\...\{53C63F43-B827-42D9-8886-4698D91EA33B}) (Version: 4.5.15.0 - Husdawg, LLC) System Update (HKLM\...\{8675339C-128C-44DD-83BF-0A5D6ABD8297}) (Version: 3.16.0006 - Lenovo) ThinkPad Bluetooth with Enhanced Data Rate Software (HKLM\...\{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}) (Version: 6.2.1.3100 - Broadcom Corporation) ThinkPad FullScreen Magnifier (HKLM\...\ThinkPad FullScreen Magnifier) (Version: 2.40 - ) ThinkPad Mobility Center Customization (HKLM\...\{90FABD40-E741-446F-839D-CEAE905D63BE}) (Version: 1.50.0000 - Lenovo) ThinkPad Modem Adapter (HKLM\...\CNXT_MODEM_HDA_HSF) (Version: 7.80.5.50 - Conexant Systems) ThinkPad TrackPoint Driver (HKLM\...\TrackPoint) (Version: 4.73.1.0 - Lenovo) Thinkpad Wireless LAN Adapters Software (11a/b/g/n) (HKLM\...\{8485F313-4B62-42F3-ADD8-0DE34A4DDAEF}) (Version: 7.7.0.498b - Atheros) ThinkPad-Dienstprogramm 'EasyEject' (HKLM\...\{1297C681-92D7-40EF-93BF-03F66EC5105C}) (Version: 2.39 - ) ThinkVantage Access Connections (HKLM\...\{4D828D53-4443-45C6-86DE-23B1562107FE}) (Version: 5.90 - Lenovo) ThinkVantage Communications Utility (HKLM\...\{88C6A6D9-324C-46E8-BA87-563D14021442}_is1) (Version: 2.11.0.0 - Lenovo) ThinkVantage Productivity Center (HKLM\...\{CF5737AF-8550-4546-A69B-0EA9EF5A9B55}) (Version: 3.11 - Lenovo) ThinkVantage System für aktiven Festplattenschutz (HKLM\...\{46A84694-59EC-48F0-964C-7E76E9F8A2ED}) (Version: 1.77.0.26 - Lenovo) TrueCrypt (HKLM\...\TrueCrypt) (Version: 7.1a - TrueCrypt Foundation) Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (HKLM\...\{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707) (Version: 1 - Microsoft Corporation) Vim 7.4 (self-installing) (HKLM\...\Vim 7.4) (Version: - ) Visual Studio C++ 10.0 Runtime (HKLM\...\{4412F224-3849-4461-A3E9-DEEF8D252790}) (Version: 10.0.0 - TomTom International B.V.) VLC media player 2.1.3 (HKLM\...\VLC media player) (Version: 2.1.3 - VideoLAN) Windows Driver Package - Broadcom (BTHUSB) Bluetooth (04/08/2010 6.3.5.430) (HKLM\...\2004BB9EB6CEA02846881BEF1F51C11F7A90C9D6) (Version: 04/08/2010 6.3.5.430 - Broadcom) Windows Driver Package - Broadcom HIDClass (07/28/2009 6.2.0.9800) (HKLM\...\BF20603967CFDCB2BBF91950E8A56DFBC5C833FE) (Version: 07/28/2009 6.2.0.9800 - Broadcom) Windows-Treiberpaket - AuthenTec Inc. (ATSwpWDF) Biometric (07/02/2010 8.6.0.29) (HKLM\...\05FBE63CF9C9B3424152207E7278CD6DA193C56C) (Version: 07/02/2010 8.6.0.29 - AuthenTec Inc.) XnView 2.22 (HKLM\...\XnView_is1) (Version: 2.22 - Gougelet Pierre-e) ==================== Restore Points ========================= 22-04-2014 20:29:37 Windows Update 26-04-2014 13:32:29 Windows Update 29-04-2014 16:26:33 avast! antivirus system restore point 29-04-2014 16:32:29 Gerätetreiber-Paketinstallation: ALWIL Software Netzwerkdienst 29-04-2014 20:22:41 Windows Update 30-04-2014 18:19:06 Geplanter Prüfpunkt 01-05-2014 16:43:39 Gerätetreiber-Paketinstallation: TAP-Windows Provider V9 Netzwerkadapter 01-05-2014 16:57:41 AVM FRITZ!Fernzugang wird installiert 01-05-2014 16:58:44 Gerätetreiber-Paketinstallation: AVM Berlin Netzwerkdienst 01-05-2014 21:28:10 avast! antivirus system restore point 02-05-2014 20:49:01 AVM FRITZ!Fernzugang wird installiert 02-05-2014 20:49:49 Gerätetreiber-Paketinstallation: AVM Berlin Netzwerkdienst 02-05-2014 21:13:57 FRITZ!Box-Fernzugang einrichten wird installiert 02-05-2014 21:21:24 Windows Update 02-05-2014 21:31:25 Windows Update 04-05-2014 09:03:33 Wiederherstellungsvorgang 04-05-2014 09:27:38 Windows Update 04-05-2014 21:24:34 Wiederherstellungsvorgang 04-05-2014 21:42:26 avast! antivirus system restore point 04-05-2014 21:49:55 Windows Update 05-05-2014 22:00:16 avast! antivirus system restore point 06-05-2014 08:49:17 AVM FRITZ!Fernzugang wird installiert 06-05-2014 08:49:59 Gerätetreiber-Paketinstallation: AVM Berlin Netzwerkdienst ==================== Hosts content: ========================== 2006-11-02 12:23 - 2006-09-18 23:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ::1 localhost ==================== Scheduled Tasks (whitelisted) ============= Task: {0CAB7B68-718C-40E0-B83B-89DDF7007DC8} - System32\Tasks\Microsoft\Windows\PLA\System\ConvertLogEntries => Rundll32.exe %windir%\system32\pla.dll,PlaConvertLogEntries Task: {155723BA-60E2-4354-93AF-84EAC8D3C2D8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2013-08-11] () Task: {2DE18FE4-6467-484F-8431-206702EC5546} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-18] (Microsoft Corporation) Task: {2E5B7D97-F14C-4CFF-864E-620AABA892D1} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages Task: {37B890C1-D0AD-4DDC-957C-15536381D8C4} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\VistaSP1CEIP => C:\Windows\servicing\vsp1ceip.exe [2008-01-18] (Microsoft Corporation) Task: {4D72741E-769C-45DB-8604-CB8EBDADAA29} - System32\Tasks\Microsoft\Windows\MobilePC\TMM Task: {50504FCA-61DD-43C4-BFB6-5B09D039AE26} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI Task: {767ED996-C38E-4F1A-9F8E-E5A25698CB50} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\netsh.exe [2006-11-02] (Microsoft Corporation) Task: {FD9AB704-1A96-42CE-BBDD-F7412DBA4C58} - System32\Tasks\JedoxManager => C:\Program Files\Jedox\Jedox Suite\xladdin\Manager.exe [2014-01-21] (Jedox AG) ==================== Loaded Modules (whitelisted) ============= 2013-08-12 01:29 - 2013-06-26 06:55 - 00095232 ____N () C:\Program Files\ThinkPad\Utilities\GR\PWMRT32V.DLL 2013-08-12 01:29 - 2013-06-26 06:55 - 00114176 ____N () C:\Program Files\ThinkPad\Utilities\GR\PWMROV.DLL 2014-04-06 23:49 - 2014-04-06 23:49 - 03642480 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="2" ==================== EXE Association (whitelisted) ============= ==================== Disabled items from MSCONFIG ============== ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (05/06/2014 00:07:46 PM) (Source: SideBySide) (User: ) (EventID: 33) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1". Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (05/06/2014 00:07:44 PM) (Source: SideBySide) (User: ) (EventID: 33) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1". Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (05/06/2014 00:07:44 PM) (Source: SideBySide) (User: ) (EventID: 33) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1". Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (05/06/2014 00:07:44 PM) (Source: SideBySide) (User: ) (EventID: 33) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1". Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (05/06/2014 00:07:44 PM) (Source: SideBySide) (User: ) (EventID: 33) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1". Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (05/06/2014 00:07:28 PM) (Source: SideBySide) (User: ) (EventID: 33) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1". Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (05/06/2014 00:07:28 PM) (Source: SideBySide) (User: ) (EventID: 33) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1". Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (05/06/2014 00:07:26 PM) (Source: EventSystem) (User: ) (EventID: 4609) Description: d:\longhorn\com\complus\src\events\tier1\eventsystemobj.cpp458007043c Error: (05/06/2014 11:53:33 AM) (Source: EventSystem) (User: ) (EventID: 4621) Description: 80070005EventSystem.EventSubscription{F6FE5592-FCBC-44AD-A836-D37F5085ED5B}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000} Error: (05/06/2014 11:38:42 AM) (Source: EventSystem) (User: ) (EventID: 4621) Description: 80070005EventSystem.EventSubscription{F6FE5592-FCBC-44AD-A836-D37F5085ED5B}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000} System errors: ============= Error: (05/06/2014 00:12:45 PM) (Source: Service Control Manager) (User: ) (EventID: 7024) Description: Windows-Firewall5 (0x5) Error: (05/06/2014 00:07:39 PM) (Source: DCOM) (User: ) (EventID: 10005) Description: 1084WSearch{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39} Error: (05/06/2014 00:07:38 PM) (Source: DCOM) (User: ) (EventID: 10005) Description: 1084WSearch{9E175B6D-F52A-11D8-B9A5-505054503030} Error: (05/06/2014 00:07:26 PM) (Source: DCOM) (User: ) (EventID: 10005) Description: 1084EventSystem{1BE1F766-5536-11D1-B726-00C04FB926AF} Error: (05/06/2014 00:06:29 PM) (Source: Service Control Manager) (User: ) (EventID: 7026) Description: cdrom lenovo.smi spldr TPPWRIF truecrypt tvtumon Wanarpv6 Error: (05/06/2014 00:06:29 PM) (Source: Service Control Manager) (User: ) (EventID: 7024) Description: Windows-Firewall5 (0x5) Error: (05/06/2014 00:06:29 PM) (Source: Service Control Manager) (User: ) (EventID: 7001) Description: ComputerbrowserServer%%1068 Error: (05/06/2014 00:05:41 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (User: NT-AUTORITÄT) (EventID: 10000) Description: C:\Windows\System32\IWMSSvc.dll21 Error: (05/06/2014 00:05:40 PM) (Source: DCOM) (User: ) (EventID: 10005) Description: 1084ShellHWDetection{DD522ACC-F821-461A-A407-50B198B896DC} Error: (05/06/2014 00:05:15 PM) (Source: EventLog) (User: ) (EventID: 6008) Description: Das System wurde zuvor am 06.05.2014 um 12:03:22 unerwartet heruntergefahren. Microsoft Office Sessions: ========================= Error: (05/06/2014 00:07:46 PM) (Source: SideBySide) (User: ) (EventID: 33) Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\Hugin\bin\hugin.exe Error: (05/06/2014 00:07:44 PM) (Source: SideBySide) (User: ) (EventID: 33) Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\Hugin\bin\calibrate_lens_gui.exe Error: (05/06/2014 00:07:44 PM) (Source: SideBySide) (User: ) (EventID: 33) Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\Hugin\bin\calibrate_lens_gui.exe Error: (05/06/2014 00:07:44 PM) (Source: SideBySide) (User: ) (EventID: 33) Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\Hugin\bin\PTBatcherGUI.exe Error: (05/06/2014 00:07:44 PM) (Source: SideBySide) (User: ) (EventID: 33) Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\Hugin\bin\PTBatcherGUI.exe Error: (05/06/2014 00:07:28 PM) (Source: SideBySide) (User: ) (EventID: 33) Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\Hugin\bin\hugin.exe Error: (05/06/2014 00:07:28 PM) (Source: SideBySide) (User: ) (EventID: 33) Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\Hugin\bin\hugin.exe Error: (05/06/2014 00:07:26 PM) (Source: EventSystem) (User: ) (EventID: 4609) Description: d:\longhorn\com\complus\src\events\tier1\eventsystemobj.cpp458007043c Error: (05/06/2014 11:53:33 AM) (Source: EventSystem) (User: ) (EventID: 4621) Description: 80070005EventSystem.EventSubscription{F6FE5592-FCBC-44AD-A836-D37F5085ED5B}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000} Error: (05/06/2014 11:38:42 AM) (Source: EventSystem) (User: ) (EventID: 4621) Description: 80070005EventSystem.EventSubscription{F6FE5592-FCBC-44AD-A836-D37F5085ED5B}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000} CodeIntegrity Errors: =================================== Date: 2014-04-10 10:52:42.088 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-04-10 10:52:41.995 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-04-10 10:52:41.901 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-04-10 10:52:41.792 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-04-10 10:52:41.667 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Memory info =========================== Percentage of memory in use: 40% Total physical RAM: 1991.27 MB Available physical RAM: 1176.89 MB Total Pagefile: 4219.54 MB Available Pagefile: 3568.74 MB Total Virtual: 2047.88 MB Available Virtual: 1920.5 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:149.05 GB) (Free:79.84 GB) NTFS ==>[Drive with boot components (obtained from BCD)] ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 149 GB) (Disk ID: 889170F6) Partition 1: (Active) - (Size=149 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
Themen zu Windows Vista Pro 32Bit: Internet (insb. Downloads) funktioniert nicht mehr |
antivirus, association, avg, bildschirm, browser, desktop, downloader, fcupdateservice.exe, fehler, festplatte, firefox, flash player, funktioniert nicht mehr, icreinstall, internet, mozilla, mp3, programm, proxy, registry, rundll, scan, schutz, security, services.exe, software, svchost.exe, vista, windows |