bin befallen von rootkits/HKLM/ npGoogleUpdate3.detc./npvlc.dll Kann da eventuell mal jemand

	
Code: 

Alles auswählenAufklappen 
ATTFilter

  
	
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:31-08-2014 02
Ran by ---- (administrator) on TERRORCOMPUTER on 01-09-2014 02:47:41
Running from C:\Users\----\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 8
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Smart Security\egui.exe [5075104 2014-02-24] (ESET)
HKU\S-1-5-19\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-20\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://de.yahoo.com?fr=hp-avast&type=avastbcl
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x9839810ACC55CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://de.yahoo.com?fr=hp-avast&type=avastbcl
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://de.yahoo.com?fr=hp-avast&type=avastbcl
SearchScopes: HKLM - {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKCU - {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\----\AppData\Roaming\Mozilla\Firefox\Profiles\rhfk705j.default-1409467192460
FF Homepage: https://www.google.de/?gfe_rd=cr&ei=ypEDVMDcFsOF8QevloAw
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_179.dll ()
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\----\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll No File
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2014-08-31]
FF StartMenuInternet: FIREFOX.EXE - C:\Program Files\Aurora\firefox.exe

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter}
CHR CustomProfile: C:\Users\----\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\----\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-08-31]
CHR Extension: (Google Drive) - C:\Users\----\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-08-31]
CHR Extension: (YouTube) - C:\Users\----\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-08-31]
CHR Extension: (Google-Suche) - C:\Users\----\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-08-31]
CHR Extension: (Google Wallet) - C:\Users\----\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-08-31]
CHR Extension: (Google Mail) - C:\Users\----\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-08-31]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [1343408 2014-02-24] (ESET)
R2 MBAMScheduler; C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 aswTap; C:\Windows\System32\DRIVERS\aswTap.sys [38984 2014-08-02] (The OpenVPN Project)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [188808 2013-09-17] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [134248 2013-09-17] (ESET)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [174400 2013-09-17] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [37416 2013-09-17] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [49240 2013-09-17] (ESET)
R3 KMWDFILTERx86; C:\Windows\System32\DRIVERS\KMWDFILTER.sys [25088 2009-04-29] (Windows (R) Codename Longhorn DDK provider)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-05-12] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2014-05-12] (Malwarebytes Corporation)

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-01 02:43 - 2014-09-01 02:43 - 00027322 _____ () C:\Users\----\Downloads\FRST.txt
2014-09-01 02:23 - 2014-09-01 02:47 - 00007911 _____ () C:\Users\----\Desktop\FRST.txt
2014-09-01 02:17 - 2014-09-01 02:18 - 00000470 _____ () C:\Users\----\Downloads\defogger_disable.log
2014-09-01 02:17 - 2014-09-01 02:17 - 00000000 _____ () C:\Users\----\defogger_reenable
2014-09-01 02:15 - 2014-09-01 02:16 - 00050477 _____ () C:\Users\----\Downloads\Defogger.exe
2014-08-31 23:59 - 2014-09-01 02:47 - 00000000 ____D () C:\FRST
2014-08-31 23:56 - 2014-08-31 23:56 - 01096704 _____ (Farbar) C:\Users\----\Desktop\FRST.exe
2014-08-31 22:41 - 2014-08-31 22:41 - 00000000 ____D () C:\Users\----\AppData\Roaming\vlc
2014-08-31 12:31 - 2014-08-31 12:31 - 00000000 ____D () C:\Users\----\AppData\Local\VirtualStore
2014-08-31 11:16 - 2014-08-31 11:27 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-08-31 10:48 - 2014-08-31 10:48 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware
2014-08-31 10:40 - 2014-08-31 10:40 - 00001535 _____ () C:\world of viring.txt
2014-08-31 10:26 - 2014-09-01 01:09 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-31 10:25 - 2014-08-31 11:15 - 00075480 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-08-31 10:25 - 2014-08-31 10:48 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-31 10:25 - 2014-08-31 10:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-08-31 10:25 - 2014-08-31 10:25 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-08-31 10:25 - 2014-05-12 07:26 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-08-31 10:25 - 2014-05-12 07:25 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-08-31 10:15 - 2014-08-31 10:15 - 00000000 ____D () C:\Users\----\AppData\Local\Secunia PSI
2014-08-31 10:15 - 2014-08-31 10:15 - 00000000 ____D () C:\Program Files\Secunia
2014-08-31 09:19 - 2014-08-31 23:18 - 00000000 ____D () C:\Users\----\Desktop\anti V
2014-08-31 09:12 - 2014-08-31 09:12 - 00058016 _____ () C:\Users\----\AppData\Local\GDIPFONTCACHEV1.DAT
2014-08-31 08:59 - 2014-08-31 08:59 - 00675206 _____ () C:\Windows\PFRO.log
2014-08-31 08:55 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll
2014-08-31 08:52 - 2014-08-31 08:55 - 00000000 ____D () C:\AdwCleaner
2014-08-31 07:42 - 2014-08-31 07:42 - 00000000 ____D () C:\Users\----\AppData\Roaming\ESET
2014-08-31 07:42 - 2014-08-31 07:42 - 00000000 ____D () C:\Users\----\AppData\Local\ESET
2014-08-31 07:38 - 2014-08-31 13:43 - 00000000 ____D () C:\Program Files\ESET
2014-08-31 07:38 - 2014-08-31 07:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2014-08-31 07:38 - 2014-08-31 07:38 - 00000000 ____D () C:\ProgramData\ESET
2014-08-31 07:23 - 2014-08-31 07:23 - 00000000 ____D () C:\Users\----\AppData\Roaming\Mozilla
2014-08-31 07:23 - 2014-08-31 07:23 - 00000000 ____D () C:\Users\----\AppData\Roaming\Macromedia
2014-08-31 07:23 - 2014-08-31 07:23 - 00000000 ____D () C:\Users\----\AppData\Roaming\Adobe
2014-08-31 07:23 - 2014-08-31 07:23 - 00000000 ____D () C:\Users\----\AppData\Local\Mozilla
2014-08-31 07:23 - 2014-08-31 07:23 - 00000000 ____D () C:\Users\----\AppData\Local\Macromedia
2014-08-31 07:21 - 2014-08-31 07:21 - 00000000 ____D () C:\Users\----\AppData\Local\Google
2014-08-31 07:02 - 2014-08-31 07:02 - 00011776 ___SH () C:\Users\----\Downloads\Thumbs.db
2014-08-31 06:35 - 2014-08-31 06:35 - 00000000 ____D () C:\Users\----\AppData\Roaming\TuneUp Software
2014-08-31 05:10 - 2014-08-31 05:10 - 00000000 ____D () C:\Users\----\Desktop\☣☣
2014-08-30 22:32 - 2014-09-01 02:20 - 00000224 _____ () C:\Windows\setupact.log
2014-08-30 22:32 - 2014-08-30 22:32 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-30 22:31 - 2014-08-30 22:32 - 00267160 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-30 19:06 - 2014-08-30 19:06 - 00000984 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-08-28 14:11 - 2014-08-23 03:46 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-28 14:11 - 2014-08-23 02:42 - 02352640 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-24 02:34 - 2014-08-31 23:18 - 00000000 ____D () C:\Users\----\Desktop\☣
2014-08-21 09:36 - 2014-08-21 09:43 - 00000038 _____ () C:\Users\----\Desktop\arbeitsamt kndnr.txt
2014-08-19 09:35 - 2014-05-14 18:23 - 00054240 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-08-19 09:35 - 2014-05-14 18:23 - 00045536 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-08-19 09:34 - 2014-05-14 18:23 - 01973728 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-08-19 09:34 - 2014-05-14 18:17 - 02425856 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-08-19 09:33 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-08-19 09:33 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-08-19 09:33 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-08-19 09:32 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-08-19 09:32 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-08-14 10:01 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-08-14 10:01 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-14 10:01 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-08-14 10:01 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-08-13 06:15 - 2014-07-29 11:33 - 01265664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-08-13 06:15 - 2014-07-29 11:33 - 00981504 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-08-13 06:15 - 2014-07-29 11:33 - 00132096 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-08-13 06:15 - 2014-07-29 11:32 - 11018240 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-08-13 06:15 - 2014-07-29 11:32 - 06046720 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-13 06:15 - 2014-07-29 11:32 - 02085888 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-13 06:15 - 2014-07-29 11:32 - 00627712 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-08-13 06:15 - 2014-07-29 11:32 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-08-13 06:15 - 2014-07-29 11:32 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-08-13 06:15 - 2014-07-29 11:32 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-08-13 06:15 - 2014-07-29 11:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-08-13 06:15 - 2014-07-29 11:32 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-08-13 06:15 - 2014-07-29 11:32 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-08-13 06:15 - 2014-07-29 11:31 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-13 06:15 - 2014-07-29 11:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-08-13 06:15 - 2014-07-29 11:31 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-08-13 06:15 - 2014-07-29 11:30 - 01466368 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-08-13 06:15 - 2014-07-29 08:15 - 01638912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-08-13 06:15 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-08-13 06:15 - 2014-07-14 03:42 - 00654336 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-08-13 06:15 - 2014-06-16 03:44 - 00730048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-08-13 06:15 - 2014-06-16 03:44 - 00219072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2014-08-13 06:15 - 2014-06-16 03:40 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2014-08-13 06:14 - 2014-08-07 03:43 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-13 06:14 - 2014-08-07 03:39 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-13 06:14 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-08-13 06:14 - 2014-07-09 03:29 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-08-13 06:14 - 2014-07-09 00:30 - 00419992 _____ () C:\Windows\system32\locale.nls
2014-08-13 06:14 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-08-13 06:14 - 2014-06-03 11:30 - 00101824 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-08-13 06:14 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-08-13 06:14 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-08-13 06:14 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-08-13 06:13 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-08-13 06:13 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-08-13 06:13 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-08-03 22:54 - 2014-08-03 22:54 - 00000000 ____D () C:\Users\Default\AppData\Roaming\AVAST Software
2014-08-03 22:54 - 2014-08-03 22:54 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\AVAST Software
2014-08-02 14:48 - 2014-08-02 14:48 - 00038984 _____ (The OpenVPN Project) C:\Windows\system32\Drivers\aswTap.sys

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-01 02:48 - 2014-09-01 02:23 - 00007911 _____ () C:\Users\----\Desktop\FRST.txt
2014-09-01 02:47 - 2014-08-31 23:59 - 00000000 ____D () C:\FRST
2014-09-01 02:43 - 2014-09-01 02:43 - 00027322 _____ () C:\Users\----\Downloads\FRST.txt
2014-09-01 02:27 - 2009-07-14 06:34 - 00022240 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-01 02:27 - 2009-07-14 06:34 - 00022240 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-01 02:20 - 2014-08-30 22:32 - 00000224 _____ () C:\Windows\setupact.log
2014-09-01 02:20 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-01 02:19 - 2014-04-11 22:21 - 01474730 _____ () C:\Windows\WindowsUpdate.log
2014-09-01 02:18 - 2014-09-01 02:17 - 00000470 _____ () C:\Users\----\Downloads\defogger_disable.log
2014-09-01 02:17 - 2014-09-01 02:17 - 00000000 _____ () C:\Users\----\defogger_reenable
2014-09-01 02:17 - 2014-04-11 23:19 - 00000000 ____D () C:\Users\----
2014-09-01 02:16 - 2014-09-01 02:15 - 00050477 _____ () C:\Users\----\Downloads\Defogger.exe
2014-09-01 02:03 - 2014-04-17 16:00 - 00001900 _____ () C:\Users\----\Desktop\Aurora.lnk
2014-09-01 01:59 - 2014-04-17 19:16 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-01 01:09 - 2014-08-31 10:26 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-09-01 01:04 - 2009-07-14 04:37 - 00000000 __RHD () C:\Users\Public\Libraries
2014-08-31 23:56 - 2014-08-31 23:56 - 01096704 _____ (Farbar) C:\Users\----\Desktop\FRST.exe
2014-08-31 23:18 - 2014-08-31 09:19 - 00000000 ____D () C:\Users\----\Desktop\anti V
2014-08-31 23:18 - 2014-08-24 02:34 - 00000000 ____D () C:\Users\----\Desktop\☣
2014-08-31 22:41 - 2014-08-31 22:41 - 00000000 ____D () C:\Users\----\AppData\Roaming\vlc
2014-08-31 13:43 - 2014-08-31 07:38 - 00000000 ____D () C:\Program Files\ESET
2014-08-31 12:31 - 2014-08-31 12:31 - 00000000 ____D () C:\Users\----\AppData\Local\VirtualStore
2014-08-31 11:27 - 2014-08-31 11:16 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-08-31 11:15 - 2014-08-31 10:25 - 00075480 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-08-31 10:48 - 2014-08-31 10:48 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware
2014-08-31 10:48 - 2014-08-31 10:25 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-31 10:40 - 2014-08-31 10:40 - 00001535 _____ () C:\world of viring.txt
2014-08-31 10:25 - 2014-08-31 10:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-08-31 10:25 - 2014-08-31 10:25 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-08-31 10:15 - 2014-08-31 10:15 - 00000000 ____D () C:\Users\----\AppData\Local\Secunia PSI
2014-08-31 10:15 - 2014-08-31 10:15 - 00000000 ____D () C:\Program Files\Secunia
2014-08-31 09:12 - 2014-08-31 09:12 - 00058016 _____ () C:\Users\----\AppData\Local\GDIPFONTCACHEV1.DAT
2014-08-31 08:59 - 2014-08-31 08:59 - 00675206 _____ () C:\Windows\PFRO.log
2014-08-31 08:59 - 2014-04-13 13:38 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-08-31 08:55 - 2014-08-31 08:52 - 00000000 ____D () C:\AdwCleaner
2014-08-31 08:47 - 2014-04-11 23:29 - 00000000 ____D () C:\Program Files\CCleaner
2014-08-31 07:42 - 2014-08-31 07:42 - 00000000 ____D () C:\Users\----\AppData\Roaming\ESET
2014-08-31 07:42 - 2014-08-31 07:42 - 00000000 ____D () C:\Users\----\AppData\Local\ESET
2014-08-31 07:38 - 2014-08-31 07:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2014-08-31 07:38 - 2014-08-31 07:38 - 00000000 ____D () C:\ProgramData\ESET
2014-08-31 07:23 - 2014-08-31 07:23 - 00000000 ____D () C:\Users\----\AppData\Roaming\Mozilla
2014-08-31 07:23 - 2014-08-31 07:23 - 00000000 ____D () C:\Users\----\AppData\Roaming\Macromedia
2014-08-31 07:23 - 2014-08-31 07:23 - 00000000 ____D () C:\Users\----\AppData\Roaming\Adobe
2014-08-31 07:23 - 2014-08-31 07:23 - 00000000 ____D () C:\Users\----\AppData\Local\Mozilla
2014-08-31 07:23 - 2014-08-31 07:23 - 00000000 ____D () C:\Users\----\AppData\Local\Macromedia
2014-08-31 07:21 - 2014-08-31 07:21 - 00000000 ____D () C:\Users\----\AppData\Local\Google
2014-08-31 07:02 - 2014-08-31 07:02 - 00011776 ___SH () C:\Users\----\Downloads\Thumbs.db
2014-08-31 06:35 - 2014-08-31 06:35 - 00000000 ____D () C:\Users\----\AppData\Roaming\TuneUp Software
2014-08-31 06:30 - 2014-04-11 23:19 - 00000000 ___RD () C:\Users\----\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-08-31 06:30 - 2014-04-11 23:19 - 00000000 ___RD () C:\Users\----\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-08-31 05:10 - 2014-08-31 05:10 - 00000000 ____D () C:\Users\----\Desktop\☣☣
2014-08-31 05:09 - 2014-07-19 21:52 - 00000000 ____D () C:\Users\----\Desktop\bilder
2014-08-31 05:02 - 2014-06-20 11:32 - 00000000 ____D () C:\Users\----\Desktop\mukke rap
2014-08-30 22:32 - 2014-08-30 22:32 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-30 22:32 - 2014-08-30 22:31 - 00267160 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-30 21:48 - 2009-07-14 04:03 - 31457280 _____ () C:\Windows\system32\config\SOFTWARE_tureg_old
2014-08-30 21:48 - 2009-07-14 04:03 - 14942208 _____ () C:\Windows\system32\config\SYSTEM_tureg_old
2014-08-30 21:48 - 2009-07-14 04:03 - 00024576 _____ () C:\Windows\system32\config\SECURITY_tureg_old
2014-08-30 21:46 - 2009-07-14 04:03 - 31719424 _____ () C:\Windows\system32\config\COMPONENTS_tureg_old
2014-08-30 21:46 - 2009-07-14 04:03 - 00262144 _____ () C:\Windows\system32\config\DEFAULT_tureg_old
2014-08-30 21:46 - 2009-07-14 04:03 - 00024576 _____ () C:\Windows\system32\config\SAM_tureg_old
2014-08-30 19:06 - 2014-08-30 19:06 - 00000984 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-08-30 19:06 - 2014-04-12 06:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-08-30 19:01 - 2014-04-17 19:16 - 00699568 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-08-30 19:01 - 2014-04-17 19:16 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-08-30 13:00 - 2014-07-16 21:54 - 00000000 ____D () C:\Program Files\Common Files\BioWare
2014-08-30 13:00 - 2009-07-14 06:52 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-08-26 19:22 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\LogFiles
2014-08-23 03:46 - 2014-08-28 14:11 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-23 02:42 - 2014-08-28 14:11 - 02352640 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-21 09:43 - 2014-08-21 09:36 - 00000038 _____ () C:\Users\----\Desktop\arbeitsamt kndnr.txt
2014-08-20 16:47 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-08-20 15:38 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-08-17 20:42 - 2014-04-15 13:07 - 00000000 ____D () C:\Users\----\Desktop\WOW
2014-08-14 10:44 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-08-14 10:27 - 2014-05-06 22:33 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-08-14 10:11 - 2014-04-12 02:42 - 00000000 ____D () C:\Windows\system32\MRT
2014-08-14 10:06 - 2014-04-12 02:42 - 96303304 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-08-07 03:43 - 2014-08-13 06:14 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-07 03:39 - 2014-08-13 06:14 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-05 09:20 - 2014-04-12 04:54 - 00231584 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-08-03 22:54 - 2014-08-03 22:54 - 00000000 ____D () C:\Users\Default\AppData\Roaming\AVAST Software
2014-08-03 22:54 - 2014-08-03 22:54 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\AVAST Software
2014-08-02 14:48 - 2014-08-02 14:48 - 00038984 _____ (The OpenVPN Project) C:\Windows\system32\Drivers\aswTap.sys

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-08-31 19:26

==================== End Of Log ============================
         
 
 

Additional scan result of Farbar Recovery Scan Tool (x86) Version:31-08-2014 02
Ran by ---- at 2014-09-01 00:01:10
Running from C:\Users\----\Desktop\downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: ESET Smart Security 7.0 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET Smart Security 7.0 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
FW: ESET Personal Firewall (Enabled) {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 14 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 14.0.0.176 - Adobe Systems Incorporated)
Adobe Flash Player 14 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 14.0.0.179 - Adobe Systems Incorporated)
Aurora 32.0a2 (x86 de) (HKLM\...\Aurora 32.0a2 (x86 de)) (Version: 32.0a2 - Mozilla)
ESET Online Scanner v3 (HKLM\...\ESET Online Scanner) (Version:  - )
ESET Smart Security (HKLM\...\{171F1D47-1647-427D-8980-ADCE7100F9A7}) (Version: 7.0.317.4 - ESET, spol s r. o.)
Facebook Video Calling 3.1.0.521 (HKLM\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited)
Feature Update Service (YFD) (HKCU\...\YourFileDownloaderUpdater) (Version: 1.4.0 - ) <==== ATTENTION
Google Chrome (HKLM\...\Google Chrome) (Version: 35.0.1916.153 - Google Inc.)
Google Update Helper (Version: 1.3.24.15 - Google Inc.) Hidden
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.15.10.1892 - Intel Corporation)
Intel(R) TV Wizard (HKLM\...\TVWiz) (Version:  - Intel Corporation)
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 30.0a2 - Mozilla)
StarCraft II (HKLM\...\StarCraft II) (Version:  - Blizzard Entertainment)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
WinRAR 5.10 beta 2 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.10.2 - win.rar GmbH)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-4216661017-2105493501-294966950-1001_Classes\CLSID\{1FD1FE74-9E3C-4C1C-AEEB-AAB592AD770F}\localserver32 -> "C:\Users\----\AppData\Local\Facebook\Update\FacebookUpdate.exe" No File
CustomCLSID: HKU\S-1-5-21-4216661017-2105493501-294966950-1001_Classes\CLSID\{5E71E4F3-E8C7-4906-9626-973E418762B6}\InprocServer32 -> C:\Users\----\AppData\Local\Facebook\Update\1.2.205.0\goopdate.dll No File
CustomCLSID: HKU\S-1-5-21-4216661017-2105493501-294966950-1001_Classes\CLSID\{8B9F5BF4-0407-4BB2-9FED-4C0372DABD00}\localserver32 -> C:\Users\----\AppData\Local\Facebook\Video\Skype\FacebookVideoCallingProxy.exe No File
CustomCLSID: HKU\S-1-5-21-4216661017-2105493501-294966950-1001_Classes\CLSID\{CBE9C57E-FFA9-4123-8354-AD360D6DD3CC}\InprocServer32 -> C:\Users\----\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll No File

==================== Restore Points  =========================

30-08-2014 15:43:36 Uniblue SpeedUpMyPC installation
30-08-2014 17:10:48 Gerätetreiber-Paketinstallation: TAP-Windows Provider V9 Netzwerkadapter
30-08-2014 18:09:56 Uniblue DriverScanner installation
31-08-2014 05:34:24 avast! antivirus system restore point
31-08-2014 06:48:23 TuneUp Utilities 2014 wird entfernt
31-08-2014 06:50:18 TuneUp Utilities 2014 (de-DE) wird entfernt

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {15A72E37-1160-4624-86AC-986ED0C777FC} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-08-30] (Adobe Systems Incorporated)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2014-06-29 14:07 - 2014-06-29 14:07 - 03873904 _____ () C:\Program Files\Aurora\mozjs.dll
2014-08-30 19:01 - 2014-08-30 19:01 - 17048240 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_179.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (08/31/2014 08:50:40 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddLegacyDriverFiles: Unable to back up image of binary avast! VM Monitor.

System Error:
Das System kann die angegebene Datei nicht finden.
.

Error: (08/31/2014 08:50:40 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddLegacyDriverFiles: Unable to back up image of binary aswStm.

System Error:
Das System kann die angegebene Datei nicht finden.
.

Error: (08/31/2014 08:50:40 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddLegacyDriverFiles: Unable to back up image of binary aswSP.

System Error:
Das System kann die angegebene Datei nicht finden.
.

Error: (08/31/2014 08:50:40 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddLegacyDriverFiles: Unable to back up image of binary aswSnx.

System Error:
Das System kann die angegebene Datei nicht finden.
.

Error: (08/31/2014 08:50:40 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddLegacyDriverFiles: Unable to back up image of binary avast! Revert.

System Error:
Das System kann die angegebene Datei nicht finden.
.

Error: (08/31/2014 08:50:40 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddLegacyDriverFiles: Unable to back up image of binary aswRdr.

System Error:
Das System kann die angegebene Datei nicht finden.
.

Error: (08/31/2014 08:50:40 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddLegacyDriverFiles: Unable to back up image of binary aswMonFlt.

System Error:
Das System kann die angegebene Datei nicht finden.
.

Error: (08/31/2014 08:48:32 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddLegacyDriverFiles: Unable to back up image of binary avast! VM Monitor.

System Error:
Das System kann die angegebene Datei nicht finden.
.

Error: (08/31/2014 08:48:32 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddLegacyDriverFiles: Unable to back up image of binary aswStm.

System Error:
Das System kann die angegebene Datei nicht finden.
.

Error: (08/31/2014 08:48:32 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddLegacyDriverFiles: Unable to back up image of binary aswSP.

System Error:
Das System kann die angegebene Datei nicht finden.
.


System errors:
=============
Error: (08/31/2014 00:30:46 PM) (Source: Application Popup) (EventID: 877) (User: )
Description: Fehler [DATABASE OPEN FAILED] beim Verarbeiten der Treiberdatenbank.

Error: (08/31/2014 00:30:46 PM) (Source: Application Popup) (EventID: 877) (User: )
Description: Fehler [DATABASE NOT LOADED] beim Verarbeiten der Treiberdatenbank.

Error: (08/31/2014 08:58:55 AM) (Source: Application Popup) (EventID: 877) (User: )
Description: Fehler [DATABASE OPEN FAILED] beim Verarbeiten der Treiberdatenbank.

Error: (08/31/2014 08:58:55 AM) (Source: Application Popup) (EventID: 877) (User: )
Description: Fehler [DATABASE NOT LOADED] beim Verarbeiten der Treiberdatenbank.

Error: (08/31/2014 07:39:51 AM) (Source: Application Popup) (EventID: 877) (User: )
Description: Fehler [DATABASE OPEN FAILED] beim Verarbeiten der Treiberdatenbank.

Error: (08/31/2014 07:39:03 AM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "ESET Service" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.

Error: (08/30/2014 10:32:47 PM) (Source: WMPNetworkSvc) (EventID: 14332) (User: )
Description: WMPNetworkSvc0x80004005

Error: (08/30/2014 09:48:29 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen.

Error: (08/30/2014 06:58:29 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst NlaSvc erreicht.

Error: (08/30/2014 06:58:29 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst Wlansvc erreicht.


Microsoft Office Sessions:
=========================
Error: (08/31/2014 08:50:40 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: 
Details:
AddLegacyDriverFiles: Unable to back up image of binary avast! VM Monitor.

System Error:
Das System kann die angegebene Datei nicht finden.

Error: (08/31/2014 08:50:40 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: 
Details:
AddLegacyDriverFiles: Unable to back up image of binary aswStm.

System Error:
Das System kann die angegebene Datei nicht finden.

Error: (08/31/2014 08:50:40 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: 
Details:
AddLegacyDriverFiles: Unable to back up image of binary aswSP.

System Error:
Das System kann die angegebene Datei nicht finden.

Error: (08/31/2014 08:50:40 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: 
Details:
AddLegacyDriverFiles: Unable to back up image of binary aswSnx.

System Error:
Das System kann die angegebene Datei nicht finden.

Error: (08/31/2014 08:50:40 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: 
Details:
AddLegacyDriverFiles: Unable to back up image of binary avast! Revert.

System Error:
Das System kann die angegebene Datei nicht finden.

Error: (08/31/2014 08:50:40 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: 
Details:
AddLegacyDriverFiles: Unable to back up image of binary aswRdr.

System Error:
Das System kann die angegebene Datei nicht finden.

Error: (08/31/2014 08:50:40 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: 
Details:
AddLegacyDriverFiles: Unable to back up image of binary aswMonFlt.

System Error:
Das System kann die angegebene Datei nicht finden.

Error: (08/31/2014 08:48:32 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: 
Details:
AddLegacyDriverFiles: Unable to back up image of binary avast! VM Monitor.

System Error:
Das System kann die angegebene Datei nicht finden.

Error: (08/31/2014 08:48:32 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: 
Details:
AddLegacyDriverFiles: Unable to back up image of binary aswStm.

System Error:
Das System kann die angegebene Datei nicht finden.

Error: (08/31/2014 08:48:32 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: 
Details:
AddLegacyDriverFiles: Unable to back up image of binary aswSP.

System Error:
Das System kann die angegebene Datei nicht finden.


CodeIntegrity Errors:
===================================
  Date: 2014-04-17 18:36:22.629
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\ProgramData\MicroWorld\eScanBD\avcuf32.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-04-17 16:34:57.023
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\ProgramData\MicroWorld\eScanBD\avcuf32.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Processor: Genuine Intel(R) CPU 585 @ 2.16GHz
Percentage of memory in use: 90%
Total physical RAM: 952.87 MB
Available physical RAM: 88.11 MB
Total Pagefile: 2511.43 MB
Available Pagefile: 1236.97 MB
Total Virtual: 2047.88 MB
Available Virtual: 1897.7 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:148.95 GB) (Free:79 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 149.1 GB) (Disk ID: 4FC7FE03)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=149 GB) - (Type=07 NTFS)

==================== End Of Log ============================