![]() |
|
Log-Analyse und Auswertung: AVG 2015 wurde durch eine Gruppenrichtlinie blockiertWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #1 |
| ![]() AVG 2015 wurde durch eine Gruppenrichtlinie blockiert Hallo Zusammen, mir ist beim Starten des IE aufgefallen, dass ich bei der Startseite (google.de) nach einem Sicherheitszertifikat gefragt werde. Dies kommt mir komisch vor, woraufhin ich nach meinen Virenscanner gesucht habe, und diesen nicht fand. Daraufhin habe ich mir den neuesten Virenscanner von AVG runtergeladen und wollte diesen danach zu einem Scan auffordern. Beim Versuch diesen zu starten kam entsprechende Fehlermeldung: Dieses Programm wurde durch eine Gruppenrichtlinie blockiert. Weitere Informationen erhalten Sie vom Systemadministrator. Es gab schon einen Post über genau dieses Thema und somit habe ich schon mal den FRST64-Scan durchgeführt. Hier mein Ergebnis: Zuerst der FSRT Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-11-2014 Ran by heide (administrator) on HEIDE-HP on 01-11-2014 14:04:39 Running from C:\Users\heide\Desktop\Scan Loaded Profile: heide (Available profiles: heide & Internetbenutzer) Platform: Windows 7 Home Premium (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 9 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AMD) C:\Windows\System32\atiesrxx.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (AMD) C:\Windows\System32\atieclxx.exe (Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe (AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanNetService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe (Hewlett-Packard Company) C:\Program Files (x86)\HP\HPBDSService\HPBDSService.exe (HP) C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe () C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe (Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe (Microsoft Corporation) C:\Windows\System32\vds.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanGUI.exe (Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe (Hewlett-Packard Company) C:\Program Files (x86)\HP\StatusAlerts\bin\HPStatusAlerts.exe (Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe (Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Realtek Semiconductor Corp.) C:\Program Files\Realtek\RtVOsd\RtVOsdService.exe (Realtek Semiconductor Corp.) C:\Program Files\Realtek\RtVOsd\RtVOsd.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe (Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2837288 2011-10-14] (Synaptics Incorporated) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6234144 2010-03-13] (Realtek Semiconductor) HKLM\...\Run: [HPWirelessAssistant] => C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe [363064 2010-06-18] (Hewlett-Packard Company) HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-04-13] (Intel Corporation) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-06-21] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [HP Quick Launch] => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [602680 2010-07-02] (Hewlett-Packard Company) HKLM-x32\...\Run: [Norton Online Backup] => C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-01] (Symantec Corporation) HKLM-x32\...\Run: [Easybits Recovery] => C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe HKLM-x32\...\Run: [AVMWlanClient] => C:\Program Files (x86)\avmwlanstick\wlangui.exe [2105344 2010-10-22] (AVM Berlin) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254696 2012-01-18] (Sun Microsystems, Inc.) HKLM-x32\...\Run: [VirtualCloneDrive] => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [85160 2009-06-17] (Elaborate Bytes AG) HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation) HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2015\avgui.exe [3649040 2014-10-16] (AVG Technologies CZ, s.r.o.) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.) HKLM-x32\...\Run: [StatusAlerts] => C:\Program Files (x86)\HP\StatusAlerts\bin\HPStatusAlerts.exe [313656 2013-04-18] (Hewlett-Packard Company) HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard) HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-09-12] (Adobe Systems Incorporated) HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.) HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.) HKLM\...\RunOnce: [NCPluginUpdater] => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe [21720 2014-10-21] (Hewlett-Packard) HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\f-secure <====== ATTENTION HKLM Group Policy restriction on software: C:\Program Files (x86)\AVG <====== ATTENTION HKLM Group Policy restriction on software: C:\Program Files (x86)\Symantec <====== ATTENTION HKLM Group Policy restriction on software: C:\Program Files (x86)\Common Files\Symantec Shared <====== ATTENTION HKLM Group Policy restriction on software: C:\Program Files (x86)\AVG <====== ATTENTION HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Symantec <====== ATTENTION Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1 HKU\S-1-5-21-2820322092-975309045-3320506811-1000\...\Run: [AnyDVD] => C:\Program Files (x86)\SlySoft\AnyDVD\AnyDVDtray.exe [1743808 2008-03-27] (SlySoft, Inc.) HKU\S-1-5-21-2820322092-975309045-3320506811-1000\...\Run: [AVG-Secure-Search-Update_0913b] => C:\Users\heide\AppData\Roaming\AVG 0913b Campaign\AVG-Secure-Search-Update-0913b.exe /PROMPT --mid 5ddd2a7b313f47d0b2de78305de7f80d-51310cfc73c1299fe39b6d3aa237e3959833559e --CMPID 0913b HKU\S-1-5-21-2820322092-975309045-3320506811-1000\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [43816 2014-08-07] (Apple Inc.) HKU\S-1-5-21-2820322092-975309045-3320506811-1000\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [43816 2014-08-14] (Apple Inc.) HKU\S-1-5-21-2820322092-975309045-3320506811-1000\...\Policies\system: [DisableLockWorkstation] 0 HKU\S-1-5-21-2820322092-975309045-3320506811-1000\...\Policies\system: [DisableChangePassword] 0 HKU\S-1-5-21-2820322092-975309045-3320506811-1000\...\MountPoints2: {12469843-0a08-11e2-aa9f-c594deec73ea} - G:\Startme.exe HKU\S-1-5-21-2820322092-975309045-3320506811-1000\...\MountPoints2: {725cc443-c4bd-11e3-9477-c0cb38318a75} - G:\LaunchU3.exe -a HKU\S-1-5-21-2820322092-975309045-3320506811-1000\...\MountPoints2: {cb879567-5d42-11e0-8ce2-c0cb38318a75} - G:\pushinst.exe HKU\S-1-5-21-2820322092-975309045-3320506811-1000\...\MountPoints2: {cbfb4db9-d532-11e3-9456-d92a6e6b13ee} - G:\Autorun.exe Startup: C:\Users\heide\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/ HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT/4 HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT/4 HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPNOT/4 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT/4 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPNOT/4 HKU\S-1-5-21-2820322092-975309045-3320506811-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM - {0026BDAC-1AE4-403F-9FF8-83073F95FE5E} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms} SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM - {80E655BE-56CF-40D2-8E83-D3D245BBAC9E} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF SearchScopes: HKLM-x32 - {0026BDAC-1AE4-403F-9FF8-83073F95FE5E} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms} SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 - {80E655BE-56CF-40D2-8E83-D3D245BBAC9E} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF SearchScopes: HKCU - {0026BDAC-1AE4-403F-9FF8-83073F95FE5E} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms} SearchScopes: HKCU - {49AC171F-8DCC-4FB7-A034-F1E5D1959E65} URL = hxxp://search.gmx.com/web?q={searchTerms}&origin=tb_splugin_ie SearchScopes: HKCU - {59B328C8-DC9C-4498-B0D8-24E6718E2F51} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?su={searchTerms} SearchScopes: HKCU - {695BC378-051D-4828-907F-EE11DBA5033A} URL = hxxp://go.gmx.net/tb/ie_searchplugin/?su={searchTerms} SearchScopes: HKCU - {80E655BE-56CF-40D2-8E83-D3D245BBAC9E} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF SearchScopes: HKCU - {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = hxxp://nortonsafe.search.ask.com/web?q={SEARCHTERMS}&o=15527&prt=NIS&chn=retail&geo=DE&ver=20&locale=de_DE&tpr=111 SearchScopes: HKCU - {E531B784-025F-46FC-B8D5-07C2CC434972} URL = hxxp://go.web.de/tb/ie_searchplugin/?su={searchTerms} BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard) BHO-x32: No Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} -> No File BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard) Toolbar: HKU\S-1-5-21-2820322092-975309045-3320506811-1000 -> No Name - {C424171E-592A-415A-9EB1-DFD6D95D3530} - No File Toolbar: HKU\S-1-5-21-2820322092-975309045-3320506811-1000 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File Toolbar: HKU\S-1-5-21-2820322092-975309045-3320506811-1000 -> No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File DPF: HKLM-x32 {82774781-8F4E-11D1-AB1C-0000F8773BF0} https://transfers.ds.microsoft.com/FTM/TransferSource/grTransferCtrl.cab Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation) Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\heide\AppData\Roaming\Mozilla\Firefox\Profiles\69134gbe.default FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll () FF Plugin: @microsoft.com/GENUINE -> disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.0.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @java.com/DTPlugin,version=1.6.0_35 -> C:\Windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.) FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8117.0416 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @nullsoft.com/winampDetector;version=1 -> C:\Program Files (x86)\Winamp Detect\npwachk.dll (Nullsoft, Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.0.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Users\heide\AppData\Roaming\mozilla\plugins\cgpcfg.dll (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Users\heide\AppData\Roaming\mozilla\plugins\CgpCore.dll (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Users\heide\AppData\Roaming\mozilla\plugins\confmgr.dll () FF Plugin ProgramFiles/Appdata: C:\Users\heide\AppData\Roaming\mozilla\plugins\ctxlogging.dll () FF Plugin ProgramFiles/Appdata: C:\Users\heide\AppData\Roaming\mozilla\plugins\ctxmui.dll (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Users\heide\AppData\Roaming\mozilla\plugins\icafile.dll (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Users\heide\AppData\Roaming\mozilla\plugins\icalogon.dll (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Users\heide\AppData\Roaming\mozilla\plugins\msvcm80.dll (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Users\heide\AppData\Roaming\mozilla\plugins\msvcp80.dll (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Users\heide\AppData\Roaming\mozilla\plugins\msvcr80.dll (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Users\heide\AppData\Roaming\mozilla\plugins\npicaN.dll () FF Plugin ProgramFiles/Appdata: C:\Users\heide\AppData\Roaming\mozilla\plugins\sslsdk_b.dll (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Users\heide\AppData\Roaming\mozilla\plugins\TcpPServ.dll (Citrix Systems, Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: DownloadHelper - C:\Users\heide\AppData\Roaming\Mozilla\Firefox\Profiles\69134gbe.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-05-24] FF Extension: All-in-One Sidebar - C:\Users\heide\AppData\Roaming\Mozilla\Firefox\Profiles\69134gbe.default\Extensions\{097d3191-e6fa-4728-9826-b533d755359d}.xpi [2012-09-23] FF Extension: NoScript - C:\Users\heide\AppData\Roaming\Mozilla\Firefox\Profiles\69134gbe.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2012-09-23] FF Extension: ReloadEvery - C:\Users\heide\AppData\Roaming\Mozilla\Firefox\Profiles\69134gbe.default\Extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}.xpi [2014-07-10] FF Extension: Easy YouTube Video Downloader - C:\Users\heide\AppData\Roaming\Mozilla\Firefox\Profiles\69134gbe.default\Extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}.xpi [2012-09-23] FF Extension: Adblock Plus - C:\Users\heide\AppData\Roaming\Mozilla\Firefox\Profiles\69134gbe.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-09-23] FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2014-10-24] Chrome: ======= ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe [3487248 2014-10-16] (AVG Technologies CZ, s.r.o.) R2 avgwd; C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe [298080 2014-10-16] (AVG Technologies CZ, s.r.o.) R2 AVM WLAN Connection Service; C:\Program Files (x86)\avmwlanstick\WlanNetService.exe [376832 2010-10-22] (AVM Berlin) [File not signed] R2 ezSharedSvc; C:\Windows\SysWOW64\ezSharedSvcHost.exe [514232 2010-04-23] (EasyBits Software AS) [File not signed] R2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1858048 2012-01-23] (MAGIX AG) [File not signed] S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2702848 2011-04-26] (MAGIX®) [File not signed] R2 HP DS Service; C:\Program Files (x86)\HP\HPBDSService\HPBDSService.exe [13824 2011-10-17] (Hewlett-Packard Company) [File not signed] R2 HP LaserJet Service; C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [174592 2012-12-04] (HP) [File not signed] R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [86528 2012-09-27] (Hewlett-Packard Company) [File not signed] R2 HPWMISVC; C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [27192 2010-07-02] () R2 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2010-05-19] (Hewlett-Packard Company) [File not signed] R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-01] (Symantec Corporation) R2 RtVOsdService; C:\Program Files\Realtek\RtVOsd\RtVOsdService.exe [315392 2010-06-17] (Realtek Semiconductor Corp.) [File not signed] S2 OO SSD Migration Kit; "C:\Program Files\OO Software\SSD Migration Kit\oosmkag.exe" [X] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [138400 2012-08-26] (SlySoft, Inc.) R3 AnyDVD; C:\Windows\SysWOW64\Drivers\AnyDVD.sys [138400 2012-08-26] (SlySoft, Inc.) R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [153368 2014-06-18] (AVG Technologies CZ, s.r.o.) R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [262424 2014-10-07] (AVG Technologies CZ, s.r.o.) R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [190744 2014-06-18] (AVG Technologies CZ, s.r.o.) R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [243480 2014-08-28] (AVG Technologies CZ, s.r.o.) R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [313624 2014-07-18] (AVG Technologies CZ, s.r.o.) R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [124184 2014-10-05] (AVG Technologies CZ, s.r.o.) R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31512 2014-06-18] (AVG Technologies CZ, s.r.o.) R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [274200 2014-10-10] (AVG Technologies CZ, s.r.o.) S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2010-10-22] (AVM Berlin) S3 busbcrw; C:\Windows\System32\Drivers\bucrw64.sys [25600 2006-10-27] (Brother Industries, Ltd.) S3 FWLANUSB; C:\Windows\System32\DRIVERS\fwlanusb.sys [460800 2010-10-22] (AVM GmbH) S3 HTCAND64; C:\Windows\System32\Drivers\ANDROIDUSB.sys [33736 2009-11-02] (HTC, Corporation) [File not signed] S3 RSUSBSTOR; C:\Windows\SysWOW64\Drivers\RtsUStor.sys [225280 2009-09-23] (Realtek Semiconductor Corp.) ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-11-01 14:22 - 2014-11-01 14:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\O&O Software 2014-11-01 14:22 - 2014-11-01 14:22 - 00000000 ____D () C:\Program Files\OO Software 2014-11-01 14:07 - 2014-11-01 14:07 - 00000941 _____ () C:\Users\Public\Desktop\AVG 2015.lnk 2014-11-01 14:07 - 2014-11-01 14:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG 2014-11-01 14:05 - 2014-11-01 14:08 - 00000000 ____D () C:\ProgramData\AVG2015 2014-11-01 14:05 - 2014-11-01 14:05 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\heide\Desktop\mbam-setup-2.0.3.1025.exe 2014-11-01 14:04 - 2014-11-01 14:04 - 00000000 ____D () C:\FRST 2014-11-01 14:03 - 2014-11-01 14:04 - 00000000 ____D () C:\Users\heide\Desktop\Scan 2014-11-01 14:02 - 2014-11-01 14:09 - 00000000 ____D () C:\Users\heide\AppData\Local\Avg2015 2014-11-01 13:34 - 2014-11-01 13:34 - 00000000 _____ () C:\Users\heide\cd 2014-10-24 20:12 - 2014-10-24 19:56 - 00000000 ____D () C:\Users\heide\Desktop\Danksagung 2014-10-24 19:52 - 2014-10-24 19:52 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-10-24 19:44 - 2014-10-24 19:44 - 00004089 _____ () C:\Users\heide\AppData\Local\recently-used.xbel 2014-10-24 19:40 - 2014-11-01 14:22 - 00000000 ____D () C:\ProgramData\OO Software 2014-10-24 19:05 - 2014-10-24 19:05 - 00000000 ____D () C:\Users\heide\AppData\Roaming\DxO Labs 2014-10-24 19:03 - 2014-10-24 19:05 - 00000000 ____D () C:\Users\heide\AppData\Local\DxO_Labs 2014-10-24 19:01 - 2014-11-01 13:50 - 00000000 ____D () C:\ProgramData\DxO Labs 2014-10-24 19:01 - 2009-09-04 16:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll 2014-10-22 20:34 - 2014-10-22 20:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud 2014-10-22 20:32 - 2014-10-22 20:32 - 00001805 _____ () C:\Users\Public\Desktop\QuickTime Player.lnk 2014-10-22 20:32 - 2014-10-22 20:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime 2014-10-22 20:32 - 2014-10-22 20:32 - 00000000 ____D () C:\Program Files (x86)\QuickTime 2014-10-22 20:30 - 2014-10-22 20:30 - 00001743 _____ () C:\Users\Public\Desktop\iTunes.lnk 2014-10-22 20:30 - 2014-10-22 20:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2014-10-22 20:29 - 2014-10-22 20:30 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7 2014-10-22 20:29 - 2014-10-22 20:30 - 00000000 ____D () C:\Program Files\iTunes 2014-10-22 20:29 - 2014-10-22 20:30 - 00000000 ____D () C:\Program Files (x86)\iTunes 2014-10-22 20:29 - 2014-10-22 20:29 - 00000000 ____D () C:\Program Files\iPod 2014-10-14 20:44 - 2014-10-10 02:53 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-10-14 20:44 - 2014-10-10 02:53 - 00276480 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2014-10-14 20:44 - 2014-10-10 02:47 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-10-14 20:44 - 2014-09-15 01:44 - 03195392 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-10-12 12:29 - 2014-10-12 12:30 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk 2014-10-12 12:29 - 2014-10-12 12:29 - 00001979 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk 2014-10-11 19:48 - 2014-10-11 19:55 - 00000000 ____D () C:\Users\heide\Desktop\Herz 2014-10-11 19:40 - 2014-10-11 19:45 - 00000000 ____D () C:\Users\heide\Desktop\Paris 2014-10-11 16:53 - 2014-10-12 13:37 - 00000000 ____D () C:\Users\heide\Desktop\Kleid 2014-10-10 15:14 - 2014-10-10 15:14 - 00274200 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgtdia.sys 2014-10-09 21:05 - 2014-10-09 21:05 - 00001134 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk 2014-10-09 21:05 - 2014-10-09 21:05 - 00001122 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk 2014-10-08 19:02 - 2014-10-08 19:02 - 00000330 _____ () C:\Users\heide\Desktop\link.txt 2014-10-07 21:43 - 2014-10-07 21:43 - 00262424 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdrivera.sys 2014-10-05 21:41 - 2014-10-05 21:41 - 00124184 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgmfx64.sys 2014-10-05 15:14 - 2014-10-05 16:04 - 00020584 _____ () C:\Users\heide\Desktop\Teilnehmer.xlsx 2014-10-05 14:53 - 2014-10-05 14:53 - 00000000 ____D () C:\Users\heide\AppData\Roaming\Dropbox 2014-10-05 14:48 - 2014-10-05 14:48 - 00016094 _____ () C:\Users\heide\Downloads\Teilnehmer.xlsx 2014-10-02 13:23 - 2014-10-02 13:23 - 00094208 _____ (Apple Inc.) C:\Windows\SysWOW64\QuickTimeVR.qtx 2014-10-02 13:23 - 2014-10-02 13:23 - 00069632 _____ (Apple Inc.) C:\Windows\SysWOW64\QuickTime.qts ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-11-01 14:43 - 2012-09-15 20:04 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-11-01 14:27 - 2013-02-20 20:34 - 00000000 ____D () C:\Users\heide\AppData\Roaming\vlc 2014-11-01 14:17 - 2012-03-30 13:28 - 01601746 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-11-01 14:14 - 2014-01-02 20:35 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-11-01 14:14 - 2014-01-02 20:35 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-11-01 14:14 - 2014-01-02 20:35 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-11-01 14:09 - 2013-05-28 19:37 - 00000000 ___HD () C:\$AVG 2014-11-01 14:07 - 2012-09-15 20:04 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-11-01 14:07 - 2012-09-15 20:04 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-11-01 14:07 - 2012-09-15 20:04 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-11-01 14:07 - 2011-11-05 19:16 - 00000000 ____D () C:\Users\heide\AppData\Local\Adobe 2014-11-01 14:04 - 2013-05-28 19:36 - 00000000 ____D () C:\Program Files (x86)\AVG 2014-11-01 14:03 - 2010-10-13 07:15 - 02077130 _____ () C:\Windows\WindowsUpdate.log 2014-11-01 14:01 - 2009-07-14 05:45 - 00023248 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-11-01 14:01 - 2009-07-14 05:45 - 00023248 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-11-01 13:59 - 2010-07-20 22:46 - 00701098 _____ () C:\Windows\system32\perfh007.dat 2014-11-01 13:59 - 2010-07-20 22:46 - 00149604 _____ () C:\Windows\system32\perfc007.dat 2014-11-01 13:59 - 2009-07-14 06:13 - 01623852 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-11-01 13:56 - 2011-04-02 17:07 - 00000000 ____D () C:\Users\heide\AppData\Local\CrashDumps 2014-11-01 13:55 - 2014-01-02 20:35 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-11-01 13:53 - 2012-09-30 20:45 - 00000332 _____ () C:\Windows\Tasks\HPCeeScheduleForheide.job 2014-11-01 13:53 - 2012-09-23 12:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-11-01 13:53 - 2011-04-01 12:32 - 00896728 _____ () C:\Windows\PFRO.log 2014-11-01 13:53 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-11-01 13:53 - 2009-07-14 05:51 - 00178910 _____ () C:\Windows\setupact.log 2014-11-01 13:52 - 2012-09-15 12:03 - 00000000 ____D () C:\ProgramData\MFAData 2014-11-01 13:48 - 2010-07-20 13:16 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-11-01 13:36 - 2011-04-02 17:08 - 00003930 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{7E309A3B-3D9E-47BC-9BCD-9DE555EEABE0} 2014-11-01 13:34 - 2012-09-30 20:45 - 00003186 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForheide 2014-11-01 13:34 - 2011-04-01 14:38 - 00000000 ____D () C:\Users\heide 2014-11-01 13:32 - 2013-04-07 11:50 - 00000000 _____ () C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt 2014-11-01 13:32 - 2012-09-30 19:11 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log 2014-11-01 13:20 - 2013-10-12 07:46 - 00000000 ____D () C:\temp 2014-10-24 19:45 - 2014-03-06 20:03 - 00000000 ____D () C:\Users\heide\.gimp-2.8 2014-10-24 19:44 - 2014-03-06 20:04 - 00000000 ____D () C:\Users\heide\AppData\Local\gtk-2.0 2014-10-24 19:31 - 2014-01-06 21:00 - 00000000 ____D () C:\Users\heide\Desktop\Hochzeit 2014-10-22 20:29 - 2014-09-15 15:03 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2014-10-22 20:29 - 2013-10-13 10:55 - 00000000 ____D () C:\Program Files\Common Files\Apple 2014-10-22 20:21 - 2014-07-03 19:21 - 00000000 ____D () C:\Users\heide\AppData\Local\50BA1FBF-C638-478E-8A6D-FE11BC6F04E0.aplzod 2014-10-14 21:16 - 2013-12-31 17:00 - 00000000 ____D () C:\Users\heide\Desktop\MP4 2014-10-14 21:13 - 2013-03-23 18:59 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-10-14 21:12 - 2013-08-17 10:55 - 00000000 ____D () C:\Windows\system32\MRT 2014-10-14 21:01 - 2013-08-21 07:35 - 00001396 _____ () C:\Users\heide\Desktop\Windows installieren.lnk 2014-10-14 21:01 - 2013-01-31 20:27 - 00001398 _____ () C:\Users\heide\AppData\Roaming\Microsoft\Windows\Start Menu\Windows installieren.lnk 2014-10-14 21:00 - 2012-12-30 13:28 - 00000000 ____D () C:\Users\heide\Desktop\Filme 2014-10-14 20:57 - 2011-11-05 19:18 - 103265616 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-10-14 20:46 - 2013-08-30 08:22 - 00000000 ____D () C:\Users\heide\Desktop\Baufinanzierung 2014-10-14 20:36 - 2009-07-14 05:45 - 00726296 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-10-14 20:35 - 2014-07-09 17:28 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-10-12 12:29 - 2010-07-20 14:45 - 00000000 ____D () C:\ProgramData\Adobe 2014-10-12 12:29 - 2010-07-20 14:45 - 00000000 ____D () C:\Program Files (x86)\Adobe 2014-10-09 21:09 - 2011-04-01 14:46 - 00228264 _____ () C:\Users\heide\AppData\Local\GDIPFONTCACHEV1.DAT 2014-10-09 21:05 - 2012-11-05 20:37 - 00000000 ____D () C:\Users\heide\AppData\Roaming\TeamViewer 2014-10-09 21:05 - 2012-11-05 19:26 - 00000000 ____D () C:\Program Files (x86)\TeamViewer 2014-10-03 17:34 - 2012-12-30 13:31 - 00000000 ____D () C:\Users\heide\Desktop\Sebastian Some content of TEMP: ==================== C:\Users\heide\AppData\Local\Temp\1sysconf.exe C:\Users\heide\AppData\Local\Temp\atuq.dll C:\Users\heide\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp6eaxvb.dll C:\Users\heide\AppData\Local\Temp\FileSystemView.dll C:\Users\heide\AppData\Local\Temp\fp_pl_pfs_installer.exe C:\Users\heide\AppData\Local\Temp\fscFAF1.tmp.exe C:\Users\heide\AppData\Local\Temp\HPHelpUpdater.exe C:\Users\heide\AppData\Local\Temp\HPQSi.exe C:\Users\heide\AppData\Local\Temp\jre-6u29-windows-i586-iftw-rv.exe C:\Users\heide\AppData\Local\Temp\jre-6u35-windows-i586-iftw.exe C:\Users\heide\AppData\Local\Temp\kmpd53iq.dlL C:\Users\heide\AppData\Local\Temp\kmsp53iq.dlL C:\Users\heide\AppData\Local\Temp\MSN1B9B.exe C:\Users\heide\AppData\Local\Temp\Resource.exe C:\Users\heide\AppData\Local\Temp\Setup.exe C:\Users\heide\AppData\Local\Temp\SkypeSetup.exe C:\Users\heide\AppData\Local\Temp\SP51865.exe C:\Users\heide\AppData\Local\Temp\SP52264.exe C:\Users\heide\AppData\Local\Temp\sp54620.exe C:\Users\heide\AppData\Local\Temp\SP54714.exe C:\Users\heide\AppData\Local\Temp\sp58915.exe C:\Users\heide\AppData\Local\Temp\UNINSTALL.EXE C:\Users\heide\AppData\Local\Temp\UninstallHPSA.exe C:\Users\heide\AppData\Local\Temp\UninstallHPTCA.exe C:\Users\heide\AppData\Local\Temp\vlc-2.0.4-win32.exe C:\Users\heide\AppData\Local\Temp\vlc-2.0.5-win32.exe C:\Users\heide\AppData\Local\Temp\WEB.DE_Sicherheitsupdate_Sep2012_Setup.exe C:\Users\heide\AppData\Local\Temp\_is367A.exe C:\Users\heide\AppData\Local\Temp\_isCCFE.exe C:\Users\heide\AppData\Local\Temp\_isE7EE.exe C:\Users\heide\AppData\Local\Temp\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}_NIS_15522.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-10-09 19:39 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-11-2014 Ran by heide at 2014-11-01 14:05:54 Running from C:\Users\heide\Desktop\Scan Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: AVG AntiVirus 2015 (Disabled - Out of date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: AVG AntiVirus 2015 (Disabled - Out of date) {B5F5C120-2089-702E-0001-553BB0D5A664} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.2.0.2070 - Adobe Systems Incorporated) Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.189 - Adobe Systems Incorporated) Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated) Adobe Reader XI (11.0.09) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated) Adobe Shockwave Player 11.5 (HKLM-x32\...\{9ECF7817-DB11-4FBA-9DF1-296A578D513A}) (Version: 11.5.7.609 - Adobe Systems, Inc) AnyDVD (HKLM-x32\...\AnyDVD) (Version: 7.0.9.0 - SlySoft) Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) ATI Catalyst Install Manager (HKLM\...\{1795BAA8-65EC-66D0-9DA4-D4B1FBE7700E}) (Version: 3.0.778.0 - ATI Technologies, Inc.) AVG 2015 (HKLM\...\AVG) (Version: 2015.0.5557 - AVG Technologies) AVG 2015 (Version: 15.0.4213 - AVG Technologies) Hidden AVG 2015 (Version: 15.0.5557 - AVG Technologies) Hidden AVM FRITZ!WLAN (HKLM-x32\...\AVMWLANCLI) (Version: - AVM Berlin) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) Broadcom 802.11 Wireless LAN Adapter (HKLM\...\Broadcom 802.11 Wireless LAN Adapter) (Version: 5.60.350.6 - Broadcom Corporation) CanoScan Toolbox Ver4.9 (HKLM-x32\...\{CA9BCD4D-B782-4637-8F1F-F9A328D3C244}) (Version: - ) ccc-core-static (x32 Version: 2010.0621.2137.36973 - Ihr Firmenname) Hidden Citrix XenApp Web Plugin (HKLM-x32\...\{EBFEEB3F-3E3B-4725-A4E0-376144CE4F76}) (Version: 11.0.0.5357 - Citrix Systems, Inc.) CloneDVD2 (HKLM-x32\...\CloneDVD2) (Version: - Elaborate Bytes) CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.0.2511 - CyberLink Corp.) Dell Photo AIO Printer 924 (HKLM-x32\...\Dell Photo AIO Printer 924) (Version: - Dell, Inc.) Designer 2.0 (HKLM-x32\...\Designer 2.0_is1) (Version: 7.9.4 - Fomanu AG) dm-Fotowelt (HKLM-x32\...\dm-Fotowelt) (Version: 5.1.2 - CEWE COLOR AG u Co. OHG) Dungeon Keeper Gold (HKLM-x32\...\GOGPACKDUNGEONKEEPER_is1) (Version: 2.0.0.4 - GOG.com) Energy Star Digital Logo (HKLM-x32\...\{BD1A34C9-4764-4F79-AE1F-112F8C89D3D4}) (Version: 1.0.1 - Hewlett-Packard) ESU for Microsoft Windows 7 (HKLM-x32\...\{3877C901-7B90-4727-A639-B6ED2DD59D43}) (Version: 1.0.0 - Hewlett-Packard) FastStone Capture 5.3 (HKLM-x32\...\FastStone Capture) (Version: 5.3 - FastStone Soft) Firebird SQL Server - MAGIX Edition (HKLM-x32\...\{39AB2E37-1A55-4292-A5D3-971E9F70D0F8}) (Version: 2.1.32.0 - MAGIX AG) FormatFactory 2.96 (HKLM-x32\...\FormatFactory) (Version: 2.96 - Free Time) Free 3GP Video Converter version 3.7.23.324 (HKLM-x32\...\Free 3GP Video Converter_is1) (Version: - DVDVideoSoft Limited.) Free Video Dub version 1.8.10.324 (HKLM-x32\...\Free Video Dub_is1) (Version: - DVDVideoSoft Limited.) GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team) Google Update Helper (x32 Version: 1.3.25.5 - Google Inc.) Hidden Hewlett-Packard ACLM.NET v1.2.1.1 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden HP Advisor (HKLM-x32\...\{40FB8D7C-6FF8-4AF2-BC8B-0B1DB32AF04B}) (Version: 3.4.10262.3295 - Hewlett-Packard) HP Color LaserJet Pro MFP M176 (HKLM-x32\...\{7ef5f914-a8e1-4f35-8b91-5f5a3ea16c55}) (Version: 8.0.13171.911 - Hewlett-Packard) HP Documentation (HKLM-x32\...\{B360E24A-BF25-4353-AA79-1B54F509024A}) (Version: 1.0.0.0 - Hewlett-Packard) HP Power Manager (HKLM-x32\...\{4B156358-CE9C-4E9F-8CAD-79AE86A68C60}) (Version: 1.0.3 - Hewlett-Packard Company) HP Quick Launch (HKLM-x32\...\{E342D296-DB9D-4FC7-ACB0-39926C0BFA16}) (Version: 2.1.5 - Hewlett-Packard Company) HP Setup (HKLM-x32\...\{72D90DB3-A16A-4545-B555-868471101833}) (Version: 8.1.4186.3400 - Hewlett-Packard) HP Software Framework (HKLM-x32\...\{62BD9D85-46D9-400E-95F1-A09B667CB57F}) (Version: 3.5.23.1 - Hewlett-Packard Company) HP Support Assistant (HKLM-x32\...\{EE202411-2C26-49E8-9784-1BC1DBF7DE96}) (Version: 7.0.39.15 - Hewlett-Packard Company) HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard) HP Wireless Assistant (HKLM\...\{E342EC6B-5F25-47FE-B92C-DE616149B430}) (Version: 4.0.9.0 - Hewlett-Packard) hpbDSService (x32 Version: 002.002.07399 - Hewlett-Packard) Hidden hpbM176DSService (x32 Version: 001.001.08254 - Hewlett-Packard) Hidden HPCLJProMFPM176 (HKLM-x32\...\{2663273A-8322-4041-BDBB-29A09DC75147}) (Version: 1.00.0000 - Hewlett-Packard) HPDXP (x32 Version: 3.0.26.40 - HP) Hidden HPLJDXPHelper (x32 Version: 060.048.005 - HP) Hidden HPLJUTCore (x32 Version: 008.000.0001 - HP) Hidden HPLJUTM176 (x32 Version: 008.000.0001 - HP) Hidden hppLaserJetService (x32 Version: 009.033.00905 - Hewlett-Packard) Hidden hppM176LaserJetService (x32 Version: 001.032.00682 - Hewlett-Packard) Hidden hpStatusAlerts (x32 Version: 080.040.00171 - Hewlett Packard) Hidden hpStatusAlertsM176 (x32 Version: 080.046.00111 - Hewlett-Packard) Hidden iCloud (HKLM\...\{6096C0CC-7E19-4355-87F0-627EC5AA146D}) (Version: 4.0.3.56 - Apple Inc.) Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.6.2.1001 - Intel Corporation) iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.) Java(TM) 6 Update 20 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86416020FF}) (Version: 6.0.200 - Sun Microsystems, Inc.) Java(TM) 6 Update 35 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216035FF}) (Version: 6.0.350 - Oracle) Junk Mail filter update (x32 Version: 14.0.8117.416 - Microsoft Corporation) Hidden KONZ-Steuer-2014 (HKLM-x32\...\InstallShield_{20F1078B-E3B6-4DA1-9570-003DE110890A}) (Version: 1.00.0000 - USM) KONZ-Steuer-2014 (x32 Version: 1.00.0000 - USM) Hidden LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.2907 - CyberLink Corp.) LabelPrint (x32 Version: 2.5.2907 - CyberLink Corp.) Hidden LightScribe System Software (HKLM-x32\...\{46BA053F-57B3-4153-BDB6-D37EEC8B12D7}) (Version: 1.18.15.1 - LightScribe) LJDXPHelperUI (x32 Version: 060.048.005 - HP) Hidden Loopmaster Samples version 1.0 (HKLM-x32\...\{EF29801F-C87A-481B-B4D1-6D1FBDEA954B}_is1) (Version: 1.0 - Serato LP INC) MAGIX Speed burnR (MSI) (HKLM-x32\...\MAGIX_{051FDF38-8B93-4622-ABA0-EDA90711048B}) (Version: 7.0.2.6 - MAGIX AG) MAGIX Speed burnR (MSI) (Version: 7.0.2.6 - MAGIX AG) Hidden MAGIX Video deluxe 2014 Plus (HKLM-x32\...\MX.{9E2FEB28-7407-4009-9DC4-203EF2EF6BB7}) (Version: 13.0.0.28 - MAGIX AG) MAGIX Video deluxe 2014 Plus (Version: 13.0.0.28 - MAGIX AG) Hidden Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation) Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Mozilla Firefox 31.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 31.0 (x86 de)) (Version: 31.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla) MSVC90_x64 (Version: 1.0.1.2 - Nokia) Hidden MSVC90_x86 (x32 Version: 1.0.1.2 - Nokia) Hidden MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation) MyPhoneExplorer (HKLM-x32\...\MPE) (Version: 1.8.4 - F.J. Wechselberger) Nokia Connectivity Cable Driver (HKLM-x32\...\{A57025CC-5F2E-4D01-B387-06DB10500D43}) (Version: 7.1.78.0 - Nokia) Nokia PC Suite (HKLM-x32\...\Nokia PC Suite) (Version: 7.1.180.94 - Nokia) Nokia PC Suite (x32 Version: 7.1.180.94 - Nokia) Hidden Norton Online Backup (HKLM-x32\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.1.17869 - Symantec Corporation) O&O SSD Migration Kit (HKLM\...\{C0A813B0-3764-4D77-B4F0-DFB130D8C215}) (Version: 6.0.473 - O&O Software GmbH) OpenOffice.org 3.4.1 (HKLM-x32\...\{2303AEEA-0FA8-4AFD-80A9-8F86BA4B44D2}) (Version: 3.41.9593 - Apache Software Foundation) PC Connectivity Solution (HKLM-x32\...\{644F4910-E812-49AD-93EC-86828CB81A0D}) (Version: 12.0.27.0 - Nokia) PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 0.9.8 - Frank Heindörfer, Philip Chinery) PE-DESIGN Lite (HKLM-x32\...\{5E1CD233-C3C2-4A43-B8D9-67559041D5BA}) (Version: 1.00.0000 - Brother Industries, Ltd.) PE-DESIGN Lite_2 (C:\Program Files (x86)\Brother\PE-DESIGN Lite_2) (HKLM-x32\...\{A10EA0B1-D65F-4D81-AC9F-208BD86E882D}) (Version: 1.00.0000 - Brother Industries, Ltd.) PE-DESIGN Lite_3 (C:\Program Files (x86)\Brother\PE-DESIGN Lite_3) (HKLM-x32\...\{E71F923F-69BC-4C57-A724-1953C8216017}) (Version: 1.00.0000 - Brother Industries, Ltd.) PhotoNow! (HKLM-x32\...\InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE}) (Version: 1.1.6904 - CyberLink Corp.) PhotoNow! (x32 Version: 1.1.6904 - CyberLink Corp.) Hidden Pioneer DDJ_SX Driver (HKLM-x32\...\Pioneer DDJ_SX ASIO) (Version: 1.000.000.001 - Pioneer Corporation.) Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.4204 - CyberLink Corp.) Power2Go (x32 Version: 6.1.4204 - CyberLink Corp.) Hidden PowerDirector (HKLM-x32\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 8.0.3003 - CyberLink Corp.) PowerDirector (x32 Version: 8.0.3003 - CyberLink Corp.) Hidden PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.) Realtek Ethernet Controller Driver For Windows 7 (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.21.531.2010 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6066 - Realtek Semiconductor Corp.) Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30105 - Realtek Semiconductor Corp.) Recovery Manager (x32 Version: 5.5.3023 - CyberLink Corp.) Hidden Rossmann Fotowelt Software 4.13 (HKLM-x32\...\Rossmann Fotowelt Software) (Version: 4.13 - ORWO Net) RtVOsd (HKLM\...\{F3D7AC17-1FF4-41A8-BB18-3FC39C65AEB9}) (Version: 1.0.3 - Realtek Semiconductor Corp.) schobuk 2.1 (HKLM-x32\...\schobuk_is1) (Version: schobuk 2.1 - ) Serato DJ (HKLM-x32\...\{e6afba24-0532-4bf3-a35d-3a85effdf5cf}) (Version: 1.5.0.46 - ) Serato DJ (x32 Version: 1.5.0.46 - Serato) Hidden Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft) Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.) Steuer 2013 (HKLM-x32\...\{05AEF487-8926-48A9-B5BA-9BED72BC6B1C}) (Version: 21.00.8480 - Buhl Data Service GmbH) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.3.29.0 - Synaptics Incorporated) TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.32494 - TeamViewer) Uninstall 1.0.0.1 (HKLM-x32\...\Uninstall_is1) (Version: - ) UTAX TA Product Library (HKLM\...\UTAX TA Product Library) (Version: 2.0.0713 - Kyocera Mita Corporation) VirtualCloneDrive (HKLM-x32\...\VirtualCloneDrive) (Version: - Elaborate Bytes) Visual Studio 2010 x64 Redistributables (HKLM\...\{21B133D6-5979-47F0-BE1C-F6A6B304693F}) (Version: 13.0.0.1 - AVG Technologies) Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies) Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.) VLC media player 2.0.2 (HKLM\...\VLC media player) (Version: 2.0.2 - VideoLAN) VLC media player 2.0.5 (HKLM-x32\...\VLC media player) (Version: 2.0.5 - VideoLAN) Winamp (HKLM-x32\...\Winamp) (Version: 5.65 - Nullsoft, Inc) Winamp Erkennungs-Plug-in (HKU\S-1-5-21-2820322092-975309045-3320506811-1000\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc) Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8117.0416 - Microsoft Corporation) Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation) Windows Live Sync (HKLM-x32\...\{586509F0-350D-48B5-B763-9CC2F8D96C4C}) (Version: 14.0.8117.416 - Microsoft Corporation) Windows Live-Uploadtool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation) Windows-Treiberpaket - Nokia Modem (02/25/2011 4.7) (HKLM\...\E0AC723A3DE3A04256288CADBBB011B112AED454) (Version: 02/25/2011 4.7 - Nokia) Windows-Treiberpaket - Nokia Modem (02/25/2011 7.01.0.9) (HKLM\...\72A50F48CC5601190B9C4E74D81161693133E7F7) (Version: 02/25/2011 7.01.0.9 - Nokia) Windows-Treiberpaket - Nokia pccsmcfd LegacyDriver (05/31/2012 7.1.2.0) (HKLM\...\62BBD193ADFDBB228C7E1ADB56463F5732FF7F6F) (Version: 05/31/2012 7.1.2.0 - Nokia) WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-2820322092-975309045-3320506811-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\heide\AppData\Roaming\Dropbox\bin\Dropbox.exe /autoplay No File ==================== Restore Points ========================= 24-10-2014 18:04:09 Windows Update 24-10-2014 18:40:42 O&O SSD Migration Kit wird installiert 24-10-2014 18:46:03 Installiert Samsung Data Migration 01-11-2014 12:22:25 Installiert Samsung Data Migration 01-11-2014 12:48:15 Entfernt Samsung Data Migration 01-11-2014 12:49:06 O&O SSD Migration Kit wird entfernt 01-11-2014 12:50:03 Removed DxO Optics Pro 8 01-11-2014 13:04:21 Installed AVG 2015 01-11-2014 13:05:40 Installed AVG 2015 01-11-2014 13:08:12 Windows Update 01-11-2014 13:22:01 O&O SSD Migration Kit wurde installiert. ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {0E85C35D-32EA-4886-812D-1F24D2C84EAF} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HPSAObjUtilTask => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\UtilTask.exe [2014-10-21] (Microsoft) Task: {19B3111A-E4CC-4737-BCF1-11C6F2E6B432} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-01] (Adobe Systems Incorporated) Task: {2B2FE4B2-0653-4F97-8C47-D85BC1488223} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-01-02] (Google Inc.) Task: {32D95E1E-0986-4D0D-9B18-52CC7383D3A4} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2014-09-22] (Hewlett-Packard) Task: {4A8FC0A6-9022-4188-A6CF-D55B2659AF07} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company) Task: {616B6F77-8F7A-4715-824A-A49EA1355C1A} - System32\Tasks\Norton Internet Security CBE\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.3.1.22\SymErr.exe Task: {618B1987-79ED-41D5-A238-6C7D93E54EA1} - System32\Tasks\Launch HTC Sync Loader => C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe Task: {69248576-FFC1-4EBE-8E93-F91A891D6883} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-01-02] (Google Inc.) Task: {8694AE65-70DD-4FFA-A4E7-9264151B1FCA} - System32\Tasks\{357A0AC3-B05A-4654-A89B-22989A7772C4} => C:\Program Files (x86)\SlySoft\AnyDVD\AnyDVD.exe [2012-09-20] (SlySoft, Inc.) Task: {899C0B3B-5E0D-4C90-A647-1ABA93404D57} - System32\Tasks\{E23AFE94-ECA3-4525-8293-E23AB1F0485E} => Iexplore.exe hxxp://ui.skype.com/ui/0/6.0.59.126/de/abandoninstall?page=tsPlugin Task: {99D03144-ABEF-463F-A6DF-F62007F9B8E2} - System32\Tasks\Registration => C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe [2010-05-25] () Task: {A9CBBEBE-24D1-487B-A54E-02C53D41CE2E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company) Task: {AC4DA3DF-FC51-4242-B523-49F63CB7479E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2014-05-12] (Hewlett-Packard Company) Task: {AE2310E7-45A0-4ADC-B93D-04F35C5C6BCC} - System32\Tasks\HPCeeScheduleForheide => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-01-05] (Hewlett-Packard) Task: {B1B30B16-F32C-48D4-9F0B-DF2403B06847} - System32\Tasks\{1B0FB230-F4B6-4B85-A60C-A310200C7248} => Iexplore.exe hxxp://ui.skype.com/ui/0/6.3.59.105/de/abandoninstall?page=tsProgressBar Task: {B777BFBB-5CA5-4BC9-9753-9445C4695991} - System32\Tasks\Norton Internet Security CBE\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.3.1.22\SymErr.exe Task: {B78B9AC9-AB4B-4138-B324-CB5D2FFD9DF5} - System32\Tasks\{DFD2E9C4-61B0-4AA8-AE84-4DC731D99A9C} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.5.0.119.259/de/abandoninstall?source=lightinstaller&page=tsProblems&LastError=12007&installinfo=google-toolbar:offered-notinstalled,google-chrome:notoffered;toolbaroffered Task: {BA04FF60-6362-4BCE-AD86-29F680AC95BF} - System32\Tasks\HPLJCustParticipation => C:\Program Files (x86)\HP\HPLJUT\HPLJUTSCH.exe [2013-01-28] (Hewlett Packard) Task: {E16CA678-6866-45A6-844F-55FB61D70A6E} - System32\Tasks\RecoveryCDWin7 => C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe [2010-05-25] () Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\HPCeeScheduleForheide.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe ==================== Loaded Modules (whitelisted) ============= 2012-09-25 18:05 - 2005-03-12 00:07 - 00087040 _____ () C:\Windows\System32\pdfcmnnt.dll 2010-07-02 10:51 - 2010-07-02 10:51 - 00027192 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe 2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF 2010-06-18 15:26 - 2010-06-18 15:26 - 00267832 _____ () C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPCommon.XmlSerializers.dll 2010-06-10 16:12 - 2010-06-10 16:12 - 00016384 ____R () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll 2010-06-21 20:36 - 2010-06-21 20:36 - 00270336 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll 2010-06-18 15:26 - 2010-06-18 15:26 - 00030264 _____ () C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_LogicLayer.dll 2010-06-18 15:26 - 2010-06-18 15:26 - 00052280 _____ () C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HardwareAccess.dll 2014-04-23 15:05 - 2014-04-23 15:05 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2014-10-11 12:05 - 2014-10-11 12:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2014-10-24 19:43 - 2014-10-24 19:43 - 00170496 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\9e5dc5d1c75de12100f8c1d8c65de002\IsdiInterop.ni.dll 2010-10-13 07:18 - 2010-04-13 08:52 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll 2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) MSCONFIG\startupfolder: C:^Users^heide^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.4.1.lnk => C:\Windows\pss\OpenOffice.org 3.4.1.lnk.Startup MSCONFIG\startupreg: HPAdvisorDock => C:\Program Files (x86)\Hewlett-Packard\HP Advisor\Dock\HPAdvisorDock.exe ========================= Accounts: ========================== Administrator (S-1-5-21-2820322092-975309045-3320506811-500 - Administrator - Disabled) Gast (S-1-5-21-2820322092-975309045-3320506811-501 - Limited - Disabled) heide (S-1-5-21-2820322092-975309045-3320506811-1000 - Administrator - Enabled) => C:\Users\heide HomeGroupUser$ (S-1-5-21-2820322092-975309045-3320506811-1003 - Limited - Enabled) Internetbenutzer (S-1-5-21-2820322092-975309045-3320506811-1001 - Limited - Enabled) => C:\Users\Internetbenutzer ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (11/01/2014 02:04:39 PM) (Source: CVHSVC) (EventID: 100) (User: ) Description: Nur zur Information. Error: HTTP-Status 404: Die angeforderte URL ist auf diesem Server nicht vorhanden. ErrorCode: 14007(0x36b7). Error: (11/01/2014 01:55:31 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: AnyDVDtray.exe, Version: 6.4.0.3, Zeitstempel: 0x47ebbb5e Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7600.16915, Zeitstempel: 0x4ec49d10 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0002dfe4 ID des fehlerhaften Prozesses: 0xec8 Startzeit der fehlerhaften Anwendung: 0xAnyDVDtray.exe0 Pfad der fehlerhaften Anwendung: AnyDVDtray.exe1 Pfad des fehlerhaften Moduls: AnyDVDtray.exe2 Berichtskennung: AnyDVDtray.exe3 Error: (11/01/2014 02:04:22 PM) (Source: CVHSVC) (EventID: 100) (User: ) Description: Nur zur Information. Error: HTTP-Status 404: Die angeforderte URL ist auf diesem Server nicht vorhanden. ErrorCode: 14007(0x36b7). Error: (11/01/2014 01:54:21 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: AnyDVDtray.exe, Version: 6.4.0.3, Zeitstempel: 0x47ebbb5e Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7600.16915, Zeitstempel: 0x4ec49d10 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0002dfe4 ID des fehlerhaften Prozesses: 0x1020 Startzeit der fehlerhaften Anwendung: 0xAnyDVDtray.exe0 Pfad der fehlerhaften Anwendung: AnyDVDtray.exe1 Pfad des fehlerhaften Moduls: AnyDVDtray.exe2 Berichtskennung: AnyDVDtray.exe3 Error: (11/01/2014 02:04:35 PM) (Source: CVHSVC) (EventID: 100) (User: ) Description: Nur zur Information. Error: HTTP-Status 404: Die angeforderte URL ist auf diesem Server nicht vorhanden. ErrorCode: 14007(0x36b7). Error: (11/01/2014 01:54:28 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: AnyDVDtray.exe, Version: 6.4.0.3, Zeitstempel: 0x47ebbb5e Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7600.16915, Zeitstempel: 0x4ec49d10 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0002dfe4 ID des fehlerhaften Prozesses: 0x12cc Startzeit der fehlerhaften Anwendung: 0xAnyDVDtray.exe0 Pfad der fehlerhaften Anwendung: AnyDVDtray.exe1 Pfad des fehlerhaften Moduls: AnyDVDtray.exe2 Berichtskennung: AnyDVDtray.exe3 Error: (11/01/2014 01:54:30 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: AnyDVDtray.exe, Version: 6.4.0.3, Zeitstempel: 0x47ebbb5e Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7600.16915, Zeitstempel: 0x4ec49d10 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0002dfe4 ID des fehlerhaften Prozesses: 0x136c Startzeit der fehlerhaften Anwendung: 0xAnyDVDtray.exe0 Pfad der fehlerhaften Anwendung: AnyDVDtray.exe1 Pfad des fehlerhaften Moduls: AnyDVDtray.exe2 Berichtskennung: AnyDVDtray.exe3 Error: (11/01/2014 01:54:58 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: AnyDVDtray.exe, Version: 6.4.0.3, Zeitstempel: 0x47ebbb5e Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7600.16915, Zeitstempel: 0x4ec49d10 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0002dfe4 ID des fehlerhaften Prozesses: 0x12a8 Startzeit der fehlerhaften Anwendung: 0xAnyDVDtray.exe0 Pfad der fehlerhaften Anwendung: AnyDVDtray.exe1 Pfad des fehlerhaften Moduls: AnyDVDtray.exe2 Berichtskennung: AnyDVDtray.exe3 Error: (11/01/2014 01:54:34 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: AnyDVDtray.exe, Version: 6.4.0.3, Zeitstempel: 0x47ebbb5e Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7600.16915, Zeitstempel: 0x4ec49d10 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0002dfe4 ID des fehlerhaften Prozesses: 0x10ac Startzeit der fehlerhaften Anwendung: 0xAnyDVDtray.exe0 Pfad der fehlerhaften Anwendung: AnyDVDtray.exe1 Pfad des fehlerhaften Moduls: AnyDVDtray.exe2 Berichtskennung: AnyDVDtray.exe3 Error: (11/01/2014 01:54:22 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: AnyDVDtray.exe, Version: 6.4.0.3, Zeitstempel: 0x47ebbb5e Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7600.16915, Zeitstempel: 0x4ec49d10 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0002dfe4 ID des fehlerhaften Prozesses: 0x1360 Startzeit der fehlerhaften Anwendung: 0xAnyDVDtray.exe0 Pfad der fehlerhaften Anwendung: AnyDVDtray.exe1 Pfad des fehlerhaften Moduls: AnyDVDtray.exe2 Berichtskennung: AnyDVDtray.exe3 System errors: ============= Error: (11/01/2014 01:54:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "OO SSD Migration Kit" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (11/01/2014 01:53:52 PM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: Der Dienst "AVGIDSAgent" wurde mit folgendem dienstspezifischem Fehler beendet: %%-536753636. Error: (11/01/2014 02:08:44 PM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: Der Dienst "AVGIDSAgent" wurde mit folgendem dienstspezifischem Fehler beendet: %%-536753635. Error: (11/01/2014 02:08:34 PM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: Der Dienst "AVGIDSAgent" wurde mit folgendem dienstspezifischem Fehler beendet: %%-536753635. Error: (11/01/2014 02:08:33 PM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: Der Dienst "AVGIDSAgent" wurde mit folgendem dienstspezifischem Fehler beendet: %%-536753635. Error: (11/01/2014 02:08:31 PM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: Der Dienst "AVGIDSAgent" wurde mit folgendem dienstspezifischem Fehler beendet: %%-536753635. Error: (11/01/2014 02:08:30 PM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: Der Dienst "AVGIDSAgent" wurde mit folgendem dienstspezifischem Fehler beendet: %%-536753635. Error: (11/01/2014 02:08:29 PM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: Der Dienst "AVGIDSAgent" wurde mit folgendem dienstspezifischem Fehler beendet: %%-536753635. Error: (11/01/2014 02:08:27 PM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: Der Dienst "AVGIDSAgent" wurde mit folgendem dienstspezifischem Fehler beendet: %%-536753635. Error: (11/01/2014 02:08:26 PM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: Der Dienst "AVGIDSAgent" wurde mit folgendem dienstspezifischem Fehler beendet: %%-536753635. Microsoft Office Sessions: ========================= Error: (11/01/2014 02:04:39 PM) (Source: CVHSVC) (EventID: 100) (User: ) Description: Error: HTTP-Status 404: Die angeforderte URL ist auf diesem Server nicht vorhanden. ErrorCode: 14007(0x36b7). Error: (11/01/2014 01:55:31 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: AnyDVDtray.exe6.4.0.347ebbb5entdll.dll6.1.7600.169154ec49d10c00000050002dfe4ec801cff5d3193485bdC:\Program Files (x86)\SlySoft\AnyDVD\AnyDVDtray.exeC:\Windows\SysWOW64\ntdll.dll5c0eef16-61c6-11e4-98e3-e651713677e2 Error: (11/01/2014 02:04:22 PM) (Source: CVHSVC) (EventID: 100) (User: ) Description: Error: HTTP-Status 404: Die angeforderte URL ist auf diesem Server nicht vorhanden. ErrorCode: 14007(0x36b7). Error: (11/01/2014 01:54:21 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: AnyDVDtray.exe6.4.0.347ebbb5entdll.dll6.1.7600.169154ec49d10c00000050002dfe4102001cff5d2eeb17259C:\Program Files (x86)\SlySoft\AnyDVD\AnyDVDtray.exeC:\Windows\SysWOW64\ntdll.dll32373ec5-61c6-11e4-9b0a-e1c51ad458ec Error: (11/01/2014 02:04:35 PM) (Source: CVHSVC) (EventID: 100) (User: ) Description: Error: HTTP-Status 404: Die angeforderte URL ist auf diesem Server nicht vorhanden. ErrorCode: 14007(0x36b7). Error: (11/01/2014 01:54:28 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: AnyDVDtray.exe6.4.0.347ebbb5entdll.dll6.1.7600.169154ec49d10c00000050002dfe412cc01cff5d2f773c29bC:\Program Files (x86)\SlySoft\AnyDVD\AnyDVDtray.exeC:\Windows\SysWOW64\ntdll.dll36dd6ece-61c6-11e4-b352-dae2758149ed Error: (11/01/2014 01:54:30 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: AnyDVDtray.exe6.4.0.347ebbb5entdll.dll6.1.7600.169154ec49d10c00000050002dfe4136c01cff5d2f73d2a05C:\Program Files (x86)\SlySoft\AnyDVD\AnyDVDtray.exeC:\Windows\SysWOW64\ntdll.dll377d1211-61c6-11e4-965d-f6df81969dee Error: (11/01/2014 01:54:58 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: AnyDVDtray.exe6.4.0.347ebbb5entdll.dll6.1.7600.169154ec49d10c00000050002dfe412a801cff5d3076b0462C:\Program Files (x86)\SlySoft\AnyDVD\AnyDVDtray.exeC:\Windows\SysWOW64\ntdll.dll486497c3-61c6-11e4-96b7-a9dbf2bc4bef Error: (11/01/2014 01:54:34 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: AnyDVDtray.exe6.4.0.347ebbb5entdll.dll6.1.7600.169154ec49d10c00000050002dfe410ac01cff5d2f22bb4ffC:\Program Files (x86)\SlySoft\AnyDVD\AnyDVDtray.exeC:\Windows\SysWOW64\ntdll.dll3a19f4be-61c6-11e4-b539-a8376ddf88ec Error: (11/01/2014 01:54:22 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: AnyDVDtray.exe6.4.0.347ebbb5entdll.dll6.1.7600.169154ec49d10c00000050002dfe4136001cff5d2f30dd7b9C:\Program Files (x86)\SlySoft\AnyDVD\AnyDVDtray.exeC:\Windows\SysWOW64\ntdll.dll32c61156-61c6-11e4-98ce-b5365c59fdee ==================== Memory info =========================== Processor: Intel(R) Core(TM) i3 CPU M 350 @ 2.27GHz Percentage of memory in use: 44% Total physical RAM: 3893.86 MB Available physical RAM: 2167.6 MB Total Pagefile: 7785.86 MB Available Pagefile: 5723.89 MB Total Virtual: 8192 MB Available Virtual: 8191.81 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:449.65 GB) (Free:64.38 GB) NTFS ==>[System with boot components (obtained from reading drive)] Drive d: (RECOVERY) (Fixed) (Total:15.82 GB) (Free:2.28 GB) NTFS ==>[System with boot components (obtained from reading drive)] ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 465.8 GB) (Disk ID: CB9E9924) Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=449.6 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=15.8 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=103 MB) - (Type=0C) ==================== End Of Log ============================ ![]() Schon mal ein ![]() |
Themen zu AVG 2015 wurde durch eine Gruppenrichtlinie blockiert |
adware, antivirus, avg 2015, avg2015, blockiert, branding, converter, desktop, device driver, downloader, fehlercode 0x0, fehlercode 0xc0000005, fehlercode 14007(0x36b7), fehlermeldung, flash player, gruppenrichtlinie blockiert, gruppenrichtlinie gesperrt, home, iexplore.exe, installation, launch, programm, realtek, registry, security, software, starten, stick, symantec, windows |