| |
| |||||||
Log-Analyse und Auswertung: Falsche Telekom Rechnung geöffnet und Zip Datei gestartetWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
13.11.2014, 20:21
| #1 |
| |  Falsche Telekom Rechnung geöffnet und Zip Datei gestartet Hallo, ich habe dummerweise die Zip Datei gestartet. Microsoft Essentials wollte mich noch hindern, hab aber den Hinweis ignoriert. Das ganze ist auf meinem privatem Notebook passiert, der dummerweise gerade an meinem Netzwerk in meiner KFZ Werkstatt hing. Hab es mit EMISOFT probiert, bin mir aber nicht sicher, ob das reicht und ob mein Netz evtl. auch infiziert sein kann. Wir haben nur ein kleines Netzwerk mit einem Server und 5 Rechnern, IT-Abteilung kann ich mir nicht leisten ;-). FRST hätte ich schon gestartet, hier die Ergebnisse: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-11-2014
Ran by User (administrator) on BERNHARD on 13-11-2014 20:03:10
Running from C:\Users\User\Desktop
Loaded Profile: User (Available profiles: User)
Platform: Windows 8 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 10
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(DATEV eG) C:\DATEV\SYSTEM\Datev.Framework.RemoteServiceModel.GenericService2010.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10_50.DATEV_DBENGINE\MSSQL\Binn\sqlservr.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(DATEV eG) C:\DATEV\PROGRAMM\B0001442\PSNTServ.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(KYOCERA Document Solutions Inc.) C:\Program Files\KDService\bin\KDService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Star Finanz-Software Entwicklung und Vertriebs GmbH) C:\Program Files (x86)\StarMoney Business 6.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe
(Transaction Software, D 81737 Munich) C:\BMWgroup\ETKLokal\transbase\tbmux32.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10_50.DATEV_DBENGINE\MSSQL\Binn\fdlauncher.exe
(DATEV eG) C:\DATEV\SYSTEM\Datev.Framework.RemoteServiceModel.GenericService2010.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10_50.DATEV_DBENGINE\MSSQL\Binn\fdhost.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe
(Google Inc.) C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreamsDownloader.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Emsisoft GmbH) C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe
(Emsisoft GmbH) C:\Program Files (x86)\Emsisoft Anti-Malware\a2guard.exe
(Emsisoft GmbH) C:\Program Files (x86)\Emsisoft Anti-Malware\a2start.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2328360 2010-09-15] (Synaptics Incorporated)
HKLM\...\Run: [CECAPLF] => C:\Program Files (x86)\ChiconyCam\CECAPLF.exe [121456 2011-07-06] (Chicony)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [161984 2014-01-18] (IvoSoft)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43816 2014-07-31] (Apple Inc.)
HKLM-x32\...\Run: [SMB60StarMoneyRunEntry] => C:\Program Files (x86)\StarMoney Business 6.0 S-Edition\app\oflagent.exe [51856 2014-11-06] (Star Finanz-Software Entwicklung und Vertriebs GmbH)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-09-01] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)
HKLM-x32\...\Run: [emsisoft anti-malware] => c:\program files (x86)\emsisoft anti-malware\a2guard.exe [4873248 2014-10-14] (Emsisoft GmbH)
Winlogon\Notify\igfxcui: C:\Windows\SYSTEM32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1168562411-794110878-2825322068-1001\...\Run: [BrowserChoice] => C:\Windows\BrowserChoice\browserchoice.exe [86696 2012-08-15] (Microsoft Corporation)
HKU\S-1-5-21-1168562411-794110878-2825322068-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-1168562411-794110878-2825322068-1001\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-1168562411-794110878-2825322068-1001\...\Run: [com.apple.dav.bookmarks.daemon] => C:\Program Files (x86)\Common Files\Apple\Internet Services\BookmarkDAV_client.exe
HKU\S-1-5-21-1168562411-794110878-2825322068-1001\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [1093464 2013-08-15] (Garmin Ltd or its subsidiaries)
HKU\S-1-5-21-1168562411-794110878-2825322068-1001\...\Run: [AppleIEDAV] => C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe [1326408 2013-11-15] (Apple Inc.)
HKU\S-1-5-21-1168562411-794110878-2825322068-1001\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2014-06-18] (Google Inc.)
HKU\S-1-5-21-1168562411-794110878-2825322068-1001\...\Run: [kxtonnpl.exe] => C:\Users\User\AppData\Roaming\Identities\kxtonnpl.exe [151552 2012-09-20] ()
HKU\S-1-5-21-1168562411-794110878-2825322068-1001\...\Policies\Explorer: [DisallowRun] 1
HKU\S-1-5-21-1168562411-794110878-2825322068-1001\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 1
HKU\S-1-5-21-1168562411-794110878-2825322068-1001\...\MountPoints2: {6069982e-d279-11e2-be6c-806e6f6e6963} - "E:\FSetup.exe"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Basisschnittstelle Office Initialisierung.lnk
ShortcutTarget: Basisschnittstelle Office Initialisierung.lnk -> C:\DATEV\PROGRAMM\BSoffice\service\OfficeDiag.exe (DATEV eG)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CleanupPrintJobs.lnk
ShortcutTarget: CleanupPrintJobs.lnk -> C:\DATEV\PROGRAMM\B0001401\CleanupPrintJobs.exe (DATEV eG)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Hotkey.lnk
ShortcutTarget: Hotkey.lnk -> C:\Program Files (x86)\Hotkey\Hotkey.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SkyUserDevmode-Update.lnk
ShortcutTarget: SkyUserDevmode-Update.lnk -> C:\DATEV\PROGRAMM\B0001401\UpdateDevmode.exe (DATEV eG)
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\net.lnk
ShortcutTarget: net.lnk -> C:\Users\User\AppData\Roaming\Windows Net Data\net.exe (Windows Net)
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Ross-Tech VCDS DRV Updater-PCI.lnk
ShortcutTarget: Ross-Tech VCDS DRV Updater-PCI.lnk -> C:\PCI-Tuning\VCDS-PCI\VCDS.exe (Ross-Tech, LLC)
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Ross-Tech VCDS DRV Updater.lnk
ShortcutTarget: Ross-Tech VCDS DRV Updater.lnk -> C:\PCI-Tuning\VCDS-PCI\VCDS.exe (Ross-Tech, LLC)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://de.msn.com
SearchScopes: HKLM - {704B21DE-6290-4F89-BB33-3873882564BE} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASBJS
SearchScopes: HKLM-x32 - {704B21DE-6290-4F89-BB33-3873882564BE} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASBJS
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll (IvoSoft)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKU\S-1-5-21-1168562411-794110878-2825322068-1001 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\meuzrf0g.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_223.dll ()
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_223.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\ddg.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Amazon-Icon - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\meuzrf0g.default\Extensions\amazon-icon@winload.de [2013-09-17]
FF Extension: pricealarm - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\meuzrf0g.default\Extensions\EFGLQA@78ETGYN-0W7FN789T87.COM [2013-09-17]
FF Extension: SparPilot - Gutscheine & mehr... - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\meuzrf0g.default\Extensions\sparpilot@sparpilot.com [2014-09-30]
FF Extension: Garmin Communicator - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\meuzrf0g.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} [2013-11-19]
FF Extension: ZIP File Converter Plus - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\meuzrf0g.default\Extensions\{43af7f99-8daa-422b-8ac5-02e9efeb2d11}.xpi [2013-10-25]
FF Extension: {d40685c4-ed16-4e78-aa0f-c1b8995842f5} - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\meuzrf0g.default\Extensions\{d40685c4-ed16-4e78-aa0f-c1b8995842f5}.xpi [2013-09-30]
Chrome:
=======
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-06-18]
CHR Extension: (Google Drive) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-06-18]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-30]
CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-06-18]
CHR Extension: (Google-Suche) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-06-18]
CHR Extension: (Amazon-Icon) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkcedibhemacmilmkpndpkoidlnmgngg [2014-06-18]
CHR Extension: (Google Wallet) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-06-18]
CHR Extension: (Google Mail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-06-18]
CHR HKLM-x32\...\Chrome\Extension: [mkcedibhemacmilmkpndpkoidlnmgngg] - C:\Users\User\ChromeExtensions\mkcedibhemacmilmkpndpkoidlnmgngg\amazon.crx [2013-09-17]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 a2AntiMalware; C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe [4816568 2014-10-14] (Emsisoft GmbH)
S3 DATEV Update-Service; C:\DATEV\PROGRAMM\INSTALL\DvInesASDSvc.Exe [161320 2013-08-02] (DATEV eG)
S3 Datev.Database.Conserve; C:\DATEV\SYSTEM\Datev.Framework.RemoteServiceModel.GenericService2010.exe [7208 2013-12-05] (DATEV eG)
R2 Datev.Framework.RemoteServiceModel.EnablerService; C:\DATEV\SYSTEM\Datev.Framework.RemoteServiceModel.GenericService2010.exe [7208 2013-12-05] (DATEV eG)
R3 Datev.Framework.RemoteServices; C:\DATEV\SYSTEM\Datev.Framework.RemoteServiceModel.GenericService2010.exe [7208 2013-12-05] (DATEV eG)
S3 Datev.Irw.ServiceProvider.HostXcut.Server; C:\DATEV\SYSTEM\Datev.Framework.RemoteServiceModel.GenericService2010.exe [7208 2013-12-05] (DATEV eG)
R2 DatevPrintService; C:\DATEV\PROGRAMM\B0001442\PSNTSERV.EXE [185856 2013-09-02] (DATEV eG) [File not signed]
R2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [220504 2013-08-15] (Garmin Ltd or its subsidiaries)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-01-19] (Intel Corporation)
R2 KDService; C:\Program Files\KDService\bin\KDService.exe [441856 2013-10-24] (KYOCERA Document Solutions Inc.) [File not signed]
S3 KeyIso; C:\Windows\SysWOW64\keyiso.dll [43520 2012-07-26] (Microsoft Corporation)
R2 MSSQL$DATEV_DBENGINE; C:\Program Files\Microsoft SQL Server\MSSQL10_50.DATEV_DBENGINE\MSSQL\Binn\sqlservr.exe [62379184 2014-07-10] (Microsoft Corporation)
R3 MSSQLFDLauncher$DATEV_DBENGINE; C:\Program Files\Microsoft SQL Server\MSSQL10_50.DATEV_DBENGINE\MSSQL\Binn\fdlauncher.exe [42160 2014-07-10] (Microsoft Corporation)
S3 Netlogon; C:\Windows\SysWOW64\netlogon.dll [634368 2012-07-26] (Microsoft Corporation)
S4 SQLAgent$DATEV_DBENGINE; C:\Program Files\Microsoft SQL Server\MSSQL10_50.DATEV_DBENGINE\MSSQL\Binn\SQLAGENT.EXE [442536 2014-07-10] (Microsoft Corporation)
R2 StarMoney Business 6.0 OnlineUpdate; C:\Program Files (x86)\StarMoney Business 6.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe [697488 2014-07-04] (Star Finanz-Software Entwicklung und Vertriebs GmbH)
S3 StorSvc; C:\Windows\SysWOW64\storsvc.dll [18432 2012-07-26] (Microsoft Corporation)
R2 Transbase; C:\BMWgroup\ETKLokal\transbase\tbmux32.exe [385024 2004-08-05] (Transaction Software, D 81737 Munich) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16056 2014-03-29] (Microsoft Corporation)
S3 Datev.Unternehmen.SystemComponents.ServiceBus.V0300.PlugIn; Datev.Framework.RemoteServiceModel.GenericService2010.exe Datev.Unternehmen.SystemComponents.ServiceBus.V0300.PlugIn [X]
S3 Datev.Unternehmen.SystemComponents.ServiceBus.V0400.PlugIn; Datev.Framework.RemoteServiceModel.GenericService2010.exe Datev.Unternehmen.SystemComponents.ServiceBus.V0400.PlugIn [X]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R3 a2acc; C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\a2accx64.sys [71472 2014-05-12] (Emsisoft GmbH)
R1 A2DDA; C:\Program Files (x86)\Emsisoft Anti-Malware\a2ddax64.sys [26176 2013-03-28] (Emsisoft GmbH)
R1 a2injectiondriver; C:\Program Files (x86)\Emsisoft Anti-Malware\a2dix64.sys [45208 2013-09-30] (Emsisoft GmbH)
R1 a2util; C:\Program Files (x86)\Emsisoft Anti-Malware\a2util64.sys [23088 2014-05-12] (Emsisoft GmbH)
R3 cleanhlp; C:\Program Files (x86)\Emsisoft Anti-Malware\cleanhlp64.sys [57024 2013-12-04] (Emsisoft GmbH)
S4 RsFx0153; C:\Windows\System32\DRIVERS\RsFx0153.sys [322736 2014-07-10] (Microsoft Corporation)
S3 RT-USB; C:\Windows\system32\drivers\RT-USB64.SYS [70984 2010-06-16] (Ross-Tech LLC)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2012-12-13] (Apple, Inc.) [File not signed]
S3 cpuz136; \??\C:\Users\ADMINI~1\AppData\Local\Temp\cpuz136\cpuz136_x64.sys [X]
U0 dmboot; No ImagePath
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-11-13 20:03 - 2014-11-13 20:04 - 00021076 _____ () C:\Users\User\Desktop\FRST.txt
2014-11-13 20:02 - 2014-11-13 20:03 - 00000000 ____D () C:\FRST
2014-11-13 20:02 - 2014-11-13 19:31 - 02116608 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2014-11-13 12:56 - 2014-11-13 12:56 - 00000000 ____D () C:\ProgramData\Emsisoft
2014-11-13 12:40 - 2014-11-13 12:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OLXTools
2014-11-13 12:40 - 2014-11-13 12:40 - 00000000 ____D () C:\Program Files (x86)\OLXTools
2014-11-13 12:39 - 2014-11-13 12:39 - 00000000 ____D () C:\Users\User\AppData\Roaming\OLXTeam
2014-11-13 12:39 - 2013-11-29 17:56 - 00003120 _____ () C:\Windows\OLXTeam.lf
2014-11-13 12:34 - 2014-11-13 12:34 - 00001098 _____ () C:\Users\Public\Desktop\Emsisoft Anti-Malware.lnk
2014-11-13 12:34 - 2014-11-13 12:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware
2014-11-13 12:33 - 2014-11-13 19:40 - 00000000 ____D () C:\Program Files (x86)\Emsisoft Anti-Malware
2014-11-13 11:06 - 2014-11-13 11:06 - 01125200 _____ () C:\Users\User\Downloads\Emsisoft Anti Malware - CHIP-Installer.exe
2014-11-12 15:53 - 2014-11-13 11:03 - 00000000 ____D () C:\Users\User\AppData\Roaming\Nico Mak Computing
2014-11-12 15:51 - 2014-11-12 15:52 - 04892480 _____ (WinZip International LLC ) C:\Users\User\Downloads\wzmp_8.exe
2014-11-12 11:57 - 2014-11-12 11:57 - 00131141 _____ () C:\Users\User\Downloads\2014_11rechnung_K4768955881.zip
2014-11-12 11:19 - 2014-11-12 11:19 - 17926832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-11-03 17:03 - 2014-11-05 11:14 - 00000000 ____D () C:\Windows\system32\AutoUpdateLicense
2014-11-03 08:57 - 2014-10-22 04:34 - 00010777 _____ () C:\Windows\system32\AutoconfigV2.cab
2014-11-03 08:57 - 2014-10-22 04:33 - 00581016 _____ (Microsoft Corporation) C:\Windows\system32\AutoUpdate.exe
2014-11-03 08:57 - 2014-10-22 04:33 - 00462760 _____ (Microsoft Corporation) C:\Windows\system32\NotificationUI.exe
2014-11-03 08:57 - 2014-10-22 02:08 - 00568832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2014-11-03 08:57 - 2014-10-22 02:08 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-11-03 08:57 - 2014-10-22 02:01 - 00695808 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2014-11-03 08:57 - 2014-10-22 02:01 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2014-11-03 08:57 - 2014-10-22 02:01 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-11-03 08:57 - 2014-10-22 02:00 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2014-10-29 10:28 - 2014-10-29 10:28 - 00172457 _____ () C:\Users\User\Downloads\FRITZ.Box Fon WLAN 7390 84.06.04_01.01.70_0108.export
2014-10-27 12:17 - 2014-10-27 12:17 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-10-27 12:17 - 2014-10-27 12:17 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-10-27 12:17 - 2014-10-27 12:17 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-10-27 12:17 - 2014-10-27 12:17 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-10-27 12:17 - 2014-10-27 12:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-10-27 08:56 - 2014-11-10 15:30 - 00004719 _____ () C:\Windows\comsetup.log
2014-10-27 08:48 - 2014-11-10 15:40 - 00064773 _____ () C:\Windows\diagwrn.xml
2014-10-27 08:48 - 2014-11-10 15:40 - 00064773 _____ () C:\Windows\diagerr.xml
2014-10-20 15:53 - 2014-10-10 05:47 - 00693248 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-10-20 15:53 - 2014-10-10 05:47 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-10-20 15:53 - 2014-10-08 05:26 - 00556544 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-10-20 15:52 - 2014-09-18 00:24 - 02416128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-10-20 15:52 - 2014-09-17 23:56 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-10-20 10:34 - 2014-10-20 10:35 - 00473192 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-10-19 19:45 - 2014-09-29 23:49 - 00705480 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-10-19 19:45 - 2014-09-29 23:49 - 00104904 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-10-17 13:23 - 2014-09-13 06:29 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-10-17 13:23 - 2014-09-13 05:02 - 00068096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-10-17 13:22 - 2014-09-03 03:48 - 00510464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2014-10-17 13:22 - 2014-09-03 03:21 - 00585728 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-10-17 13:22 - 2014-07-12 05:41 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\KBDRUM.DLL
2014-10-17 13:22 - 2014-07-12 05:41 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-10-17 13:22 - 2014-07-12 05:41 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-10-17 13:22 - 2014-07-12 05:41 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-10-17 13:22 - 2014-07-12 05:41 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-10-17 13:22 - 2014-07-12 05:41 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-10-17 13:22 - 2014-07-12 05:16 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRUM.DLL
2014-10-17 13:22 - 2014-07-12 05:16 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2014-10-17 13:22 - 2014-07-12 05:16 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2014-10-17 13:22 - 2014-07-12 05:16 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2014-10-17 13:22 - 2014-07-12 05:16 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2014-10-17 13:22 - 2014-07-12 05:15 - 00006144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2014-10-17 13:22 - 2014-07-12 01:02 - 00478352 _____ () C:\Windows\SysWOW64\locale.nls
2014-10-17 13:22 - 2014-07-12 01:00 - 00478352 _____ () C:\Windows\system32\locale.nls
2014-10-17 13:22 - 2014-07-08 23:33 - 00181248 _____ (Microsoft Corp.) C:\Windows\system32\Defrag.exe
2014-10-17 13:22 - 2014-07-08 23:32 - 01539584 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll
2014-10-17 13:22 - 2014-07-08 23:32 - 00340480 _____ (Microsoft Corporation) C:\Windows\system32\defragsvc.dll
2014-10-17 13:22 - 2014-07-08 23:30 - 01220608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll
2014-10-17 13:22 - 2014-07-07 06:53 - 01125376 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-10-17 13:22 - 2014-07-07 06:52 - 03248128 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-10-17 13:22 - 2014-07-07 06:52 - 00724992 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-10-17 13:22 - 2014-07-07 06:52 - 00300544 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2014-10-17 13:22 - 2014-07-07 06:52 - 00263680 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll
2014-10-17 13:22 - 2014-07-07 06:52 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll
2014-10-17 13:22 - 2014-07-07 06:51 - 05982208 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-10-17 13:22 - 2014-07-07 05:01 - 01049600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-10-17 13:22 - 2014-07-07 05:01 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll
2014-10-17 13:22 - 2014-07-07 05:00 - 05095424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-10-17 13:22 - 2014-07-07 04:59 - 00269312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2014-10-17 13:22 - 2014-07-04 11:52 - 00328000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
2014-10-17 13:22 - 2014-07-03 02:59 - 01824784 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-10-17 13:22 - 2014-07-03 01:30 - 01408952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2014-10-17 13:22 - 2014-06-28 08:01 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2014-10-17 13:22 - 2014-06-28 07:57 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2014-10-17 13:22 - 2014-06-28 07:56 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2014-10-17 13:22 - 2014-06-25 08:09 - 00733184 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2014-10-17 13:22 - 2014-06-25 08:07 - 01023488 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2014-10-17 13:22 - 2014-06-18 00:27 - 02032640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-10-17 13:22 - 2014-06-18 00:23 - 02238464 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-10-17 13:22 - 2014-06-11 15:47 - 02842112 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2014-10-17 13:22 - 2014-06-11 05:40 - 02620928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2014-10-17 13:22 - 2014-06-10 23:44 - 01403896 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2014-10-17 13:22 - 2014-05-30 00:31 - 00323072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-10-17 13:22 - 2014-05-30 00:03 - 00419328 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-10-17 13:22 - 2014-02-04 11:57 - 01271664 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2014-10-17 13:21 - 2014-09-20 06:17 - 02236928 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-10-17 13:21 - 2014-09-20 06:17 - 01407488 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-10-17 13:21 - 2014-09-20 06:17 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2014-10-17 13:21 - 2014-09-20 06:16 - 19280896 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-10-17 13:21 - 2014-09-20 06:16 - 15399424 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-10-17 13:21 - 2014-09-20 06:16 - 02655232 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-10-17 13:21 - 2014-09-20 06:16 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-10-17 13:21 - 2014-09-20 06:16 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-10-17 13:21 - 2014-09-20 06:15 - 01508864 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-10-17 13:21 - 2014-09-20 06:15 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-10-17 13:21 - 2014-09-20 04:57 - 14368768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-10-17 13:21 - 2014-09-20 04:57 - 13757952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-10-17 13:21 - 2014-09-20 04:57 - 02861568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-10-17 13:21 - 2014-09-20 04:57 - 02055168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-10-17 13:21 - 2014-09-20 04:57 - 01762816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-10-17 13:21 - 2014-09-20 04:57 - 01180672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-10-17 13:21 - 2014-09-20 04:56 - 01440768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-10-17 13:20 - 2014-09-28 05:18 - 04068352 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-10-17 13:20 - 2014-09-20 06:18 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-10-17 13:20 - 2014-09-20 06:17 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2014-10-17 13:20 - 2014-09-20 06:16 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-10-17 13:20 - 2014-09-20 06:16 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-10-17 13:20 - 2014-09-20 06:16 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-10-17 13:20 - 2014-09-20 06:16 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-10-17 13:20 - 2014-09-20 06:16 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-10-17 13:20 - 2014-09-20 06:16 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-10-17 13:20 - 2014-09-20 06:16 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-10-17 13:20 - 2014-09-20 06:16 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-10-17 13:20 - 2014-09-20 06:15 - 00451584 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-10-17 13:20 - 2014-09-20 04:57 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-10-17 13:20 - 2014-09-20 04:57 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-10-17 13:20 - 2014-09-20 04:57 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-10-17 13:20 - 2014-09-20 04:57 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-10-17 13:20 - 2014-09-20 04:57 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-10-17 13:20 - 2014-09-20 04:57 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-10-17 13:20 - 2014-09-20 04:57 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-10-17 13:20 - 2014-09-20 04:57 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2014-10-17 13:20 - 2014-09-20 04:57 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-10-17 13:20 - 2014-09-20 04:57 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-10-17 13:20 - 2014-09-20 04:56 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-10-17 13:20 - 2014-09-20 04:56 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-10-17 13:20 - 2014-09-20 04:38 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-10-17 13:20 - 2014-09-20 04:33 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-10-17 13:20 - 2014-09-20 02:06 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2014-10-17 13:20 - 2014-08-30 06:48 - 10115072 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2014-10-17 13:20 - 2014-08-30 06:46 - 02306560 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-10-17 13:20 - 2014-08-30 05:05 - 08858112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2014-10-17 13:20 - 2014-08-30 05:03 - 02037760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-10-17 13:20 - 2014-06-13 00:34 - 00754176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2014-10-17 13:20 - 2014-06-13 00:29 - 02146304 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2014-10-17 13:19 - 2014-08-01 23:08 - 00388729 _____ () C:\Windows\system32\ApnDatabase.xml
2014-10-17 13:19 - 2014-07-24 14:50 - 00447296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2014-10-17 13:19 - 2014-07-17 00:28 - 00027648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sscore.dll
2014-10-17 13:19 - 2014-07-16 23:59 - 00305664 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll
2014-10-17 13:19 - 2014-07-16 23:59 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\sscore.dll
2014-10-17 13:19 - 2014-07-12 07:45 - 01549824 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll
2014-10-17 13:19 - 2014-07-12 05:36 - 00674304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2014-10-17 13:19 - 2014-07-12 05:36 - 00211456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2014-10-17 13:19 - 2014-07-12 05:34 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2014-10-17 13:19 - 2014-07-12 05:34 - 00250368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2014-10-17 13:19 - 2014-06-28 07:57 - 01341952 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2014-10-17 13:19 - 2014-06-28 03:23 - 01126400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2014-10-14 15:47 - 2014-10-14 15:47 - 00003026 _____ () C:\Windows\avmadd32.log
2014-10-14 15:47 - 2014-10-14 15:47 - 00002594 _____ () C:\Windows\avmadd321.log
2014-10-14 15:47 - 2014-10-14 15:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FRITZ!Box
2014-10-14 15:47 - 2014-10-14 15:47 - 00000000 ____D () C:\Program Files (x86)\FRITZ!BoxPrint
2014-10-14 15:47 - 2014-10-14 15:47 - 00000000 ____D () C:\Program Files (x86)\FRITZ!Box
2014-10-14 15:47 - 2006-12-14 12:42 - 00069120 ____R (AVM Berlin) C:\Windows\SysWOW64\avmadd32.dll
2014-10-14 15:47 - 2006-05-29 01:00 - 00016384 ____R (AVM Berlin GmbH) C:\Windows\SysWOW64\avmprmon.dll
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-11-13 19:31 - 2013-06-24 18:55 - 00000000 ____D () C:\Users\User\Documents\Outlook-Dateien
2014-11-13 19:25 - 2014-02-11 13:09 - 00000000 ____D () C:\Users\User\AppData\Roaming\ClassicShell
2014-11-13 19:22 - 2014-06-18 10:05 - 00001138 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-13 19:19 - 2014-03-17 10:36 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-11-13 19:00 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\system32\sru
2014-11-13 18:46 - 2013-06-24 20:30 - 00000000 ____D () C:\Users\User\AppData\Local\9D165EF7-30B1-4C7F-86D8-EF89922C1C48.aplzod
2014-11-13 14:16 - 2013-06-21 16:10 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1168562411-794110878-2825322068-1001
2014-11-13 11:38 - 2013-06-21 16:01 - 01219336 _____ () C:\Windows\WindowsUpdate.log
2014-11-13 11:24 - 2013-06-24 18:38 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-11-13 11:24 - 2012-07-26 08:59 - 00000000 ____D () C:\Windows\CbsTemp
2014-11-13 11:18 - 2013-08-14 16:20 - 00000000 ____D () C:\Windows\system32\MRT
2014-11-13 11:15 - 2013-06-24 07:15 - 103374192 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-11-12 12:19 - 2012-08-08 09:58 - 00858294 _____ () C:\Windows\system32\perfh00C.dat
2014-11-12 12:19 - 2012-08-08 09:58 - 00180706 _____ () C:\Windows\system32\perfc00C.dat
2014-11-12 12:19 - 2012-07-26 11:27 - 00822012 _____ () C:\Windows\system32\perfh007.dat
2014-11-12 12:19 - 2012-07-26 11:27 - 00181614 _____ () C:\Windows\system32\perfc007.dat
2014-11-12 12:19 - 2012-07-26 08:28 - 02978716 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-12 12:17 - 2012-07-26 08:21 - 01178432 _____ () C:\Windows\setupact.log
2014-11-12 11:56 - 2013-06-24 11:26 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-11-12 11:56 - 2013-06-24 11:26 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-11-12 11:19 - 2014-03-17 10:36 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-11-12 11:16 - 2014-06-18 10:05 - 00001134 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-12 11:15 - 2012-07-26 08:22 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-11 16:12 - 2013-06-24 21:09 - 00000000 ____D () C:\Program Files (x86)\StarMoney Business 6.0 S-Edition
2014-11-10 15:40 - 2012-07-26 06:26 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2014-11-10 15:34 - 2012-07-26 09:13 - 00005035 _____ () C:\Windows\DtcInstall.log
2014-11-10 15:30 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\Registration
2014-11-10 15:23 - 2014-09-24 16:19 - 00000000 ___HD () C:\$Windows.~BT
2014-11-10 15:14 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\AUInstallAgent
2014-11-05 11:36 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\rescache
2014-11-04 17:15 - 2012-07-26 06:26 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-11-03 17:03 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\WinStore
2014-11-03 10:09 - 2014-01-09 08:28 - 00000000 ____D () C:\temp
2014-10-30 16:24 - 2014-06-18 10:06 - 00002182 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-10-30 12:25 - 2013-06-24 07:09 - 00275080 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-10-27 12:17 - 2013-12-30 09:31 - 00000000 ____D () C:\ProgramData\Oracle
2014-10-27 08:16 - 2014-06-18 10:05 - 00004110 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-10-27 08:16 - 2014-06-18 10:05 - 00003874 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-10-22 17:12 - 2014-07-10 17:13 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-10-22 17:12 - 2012-07-26 09:12 - 00000000 ___RD () C:\Windows\ToastData
2014-10-21 09:14 - 2014-02-04 10:36 - 00004865 _____ () C:\Users\User\AppData\Local\EmptySettings.xml
2014-10-20 10:34 - 2013-05-28 01:40 - 00055538 _____ () C:\Windows\PFRO.log
2014-10-17 16:42 - 2012-07-26 09:12 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-10-16 09:18 - 2013-06-24 12:21 - 00000000 ____D () C:\Users\User\Documents\psv
2014-10-15 07:58 - 2013-06-24 12:22 - 00000000 ____D () C:\Users\User\Documents\Vorlagen
Files to move or delete:
====================
C:\Users\User\fw_start.bat
Some content of TEMP:
====================
C:\Users\User\AppData\Local\Temp\amazonicon.exe
C:\Users\User\AppData\Local\Temp\amazoninstallernircmdc.exe
C:\Users\User\AppData\Local\Temp\de_ww_Package.exe
C:\Users\User\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\User\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe
C:\Users\User\AppData\Local\Temp\OJ8500_A910_Basicx64_1315.exe
C:\Users\User\AppData\Local\Temp\sdanircmdc.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-11-03 09:01
==================== End Of Log ============================
FRST Additions Logfile: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-11-2014
Ran by User at 2014-11-13 20:05:39
Running from C:\Users\User\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Emsisoft Anti-Malware (Enabled - Up to date) {8504DEEF-CC04-1F76-2137-F1A5F4A659DA}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Emsisoft Anti-Malware (Enabled - Up to date) {3E653F0B-EA3E-10F8-1B87-CAD78F211367}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
.NET Framework Machine Code Access Security Policy (x32 Version: 1.0.2411.0 - Microsoft Corporation) Hidden
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.223 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.09) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)
Apple Application Support (HKLM-x32\...\{78002155-F025-4070-85B3-7C0453561701}) (Version: 3.0.6 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{B678797F-DF38-4556-8A31-8B818E261868}) (Version: 8.0.0.23 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Ashampoo Burning Studio 6 FREE v.6.84 (HKLM-x32\...\{91B33C97-3ED1-03EA-A67B-244AA4D7B559}_is1) (Version: 6.8.4 - Ashampoo GmbH & Co. KG)
AVM FRITZ!Box Dokumentation (HKLM-x32\...\AVMFBox) (Version: - AVM Berlin)
AVM FRITZ!Box Druckeranschluss (HKLM-x32\...\AVMFBoxPrinter) (Version: - AVM Berlin)
B1315AppGuid (x32 Version: 1.0.0 - DATEV eG) Hidden
BisonCam (HKLM-x32\...\{5BBC4803-C96E-4D3E-9D1D-2E43774C4062}) (Version: - BisonCam)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
ChiconyCam (HKLM-x32\...\{A2201542-DA80-457F-8BD9-6C9C90196481}) (Version: 1.0.47.0819 - Chicony Electronics Co.,Ltd.)
Classic Shell (HKLM\...\{2368907C-E8F6-4750-A023-254C3E2B5E8D}) (Version: 4.0.4 - IvoSoft)
Crystal Reports Runtime XI (x32 Version: 1.0.9 - DATEV eG) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DATEV Infragistics Runtime V.3.2 (x32 Version: 3.2.0 - Infragistics, Inc.) Hidden
DATEV Installation V.3.2 (HKLM-x32\...\DATEVB00000482.0) (Version: - )
DFL2010 ConfigDB (HKLM-x32\...\{46B1F595-EFB2-4463-B302-312A2C7B70A6}) (Version: 4.35.4339.0 - DATEV eG)
DFL2010 Microkernel (HKLM-x32\...\{063DF19F-5FE9-43D3-A961-944ABD050A4C}) (Version: 4.35.4339.0 - DATEV eG)
DVSE Updater (HKLM\...\{52167B0C-FB5D-43E7-BEC5-24EE6BEE2BA0}) (Version: 1.5.0.23257 - DVSE GmbH)
Elevated Installer (x32 Version: 2.2.20 - Garmin Ltd or its subsidiaries) Hidden
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 15.1.13904 - Landesfinanzdirektion Thüringen)
Emsisoft Anti-Malware (HKLM-x32\...\{5502032C-88C1-4303-99FE-B5CBD7684CEA}_is1) (Version: 9.0 - Emsisoft GmbH)
ETK (Lokal) (HKLM-x32\...\{EC17C160-E2F0-47CC-86D4-140AE22EC38E}) (Version: 2.00.095 - BMW AG)
Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Galería de fotos (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Galerie de photos (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Garmin Express (HKLM-x32\...\{bb5d5c67-2f14-4975-aa41-cecd5b5ddf9a}) (Version: 2.2.20 - Garmin Ltd or its subsidiaries)
Garmin Express (x32 Version: 2.2.20 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express Tray (x32 Version: 2.2.20 - Garmin Ltd or its subsidiaries) Hidden
Garmin Update Service (x32 Version: 2.2.20 - Garmin Ltd or its subsidiaries) Hidden
GDR 4033 für SQL Server 2008 R2 (KB2977320) (64-bit) (HKLM\...\KB2977320) (Version: 10.52.4033.0 - Microsoft Corporation)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 38.0.2125.111 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.25.5 - Google Inc.) Hidden
Hotkey 6.0030 (HKLM-x32\...\InstallShield_{164714B6-46BC-4649-9A30-A6ED32F03B5A}) (Version: 6.0030 - NoteBook)
Hotkey 6.0030 (x32 Version: 6.0030 - NoteBook) Hidden
HP Officejet Pro 8500 A910 - Grundlegende Software für das Gerät (HKLM\...\{0A8BEF69-0DD7-4A8F-9AED-0CB91BEBCB58}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
iCloud (HKLM\...\{81E20D41-C277-4526-934D-F2380AF91B78}) (Version: 3.1.0.40 - Apple Inc.)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.1.1399 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.2932 - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{538B98C3-773F-4F20-9C66-802D104DCBE2}) (Version: 1.23.219.2 - Intel Corporation)
iTunes (HKLM\...\{F46AA0F1-E284-4878-A462-5F11B9166C0E}) (Version: 11.4.0.18 - Apple Inc.)
Java 7 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle)
Kyocera Product Library (HKLM\...\Kyocera Product Library) (Version: 4.2.1909 - KYOCERA Document Solutions Inc.)
Microsoft Office 2010 Primary Interop Assemblies (HKLM-x32\...\{90140000-1105-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1024 - Microsoft Corporation)
Microsoft Office Home and Business 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft SkyDrive (HKU\S-1-5-21-1168562411-794110878-2825322068-1001\...\SkyDriveSetup.exe) (Version: 17.0.2010.0530 - Microsoft Corporation)
Microsoft SOAP Toolkit 3.0 (HKLM-x32\...\{BCB4C18A-ACA6-4383-8688-E19933A705DD}) (Version: 3.0.1325.4 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server 2008 R2 (64-bit) (HKLM\...\Microsoft SQL Server 2008 R2) (Version: - Microsoft Corporation)
Microsoft SQL Server 2008 R2 Native Client (HKLM\...\{E8F7904A-4780-4F3F-B153-21BE32857120}) (Version: 10.52.4033.0 - Microsoft Corporation)
Microsoft SQL Server 2008 R2 Setup (English) (HKLM\...\{1D4A3734-9328-440F-960C-42B4CE481EB4}) (Version: 10.52.4033.0 - Microsoft Corporation)
Microsoft SQL Server 2008 Setup Support Files (HKLM\...\{B40EE88B-400A-4266-A17B-E3DE64E94431}) (Version: 10.1.2731.0 - Microsoft Corporation)
Microsoft SQL Server Browser (HKLM-x32\...\{BF9BF038-FE03-429D-9B26-2FA0FD756052}) (Version: 10.52.4000.0 - Microsoft Corporation)
Microsoft SQL Server Native Client (HKLM\...\{9ACF3FDB-C8E6-444C-8C64-13A221F7BFFD}) (Version: 9.00.5000.00 - Microsoft Corporation)
Microsoft SQL Server VSS Writer (HKLM\...\{288D79EE-A2D1-42AF-9597-B0ADCC23A8ED}) (Version: 10.52.4000.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Mozilla Firefox 33.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 33.1 (x86 de)) (Version: 33.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
MSXML 4.0 SP2 Parser und SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
OLXTeam (HKLM-x32\...\{C30A8619-D7B0-45FA-B9F1-55142DC8989C}) (Version: 3.1.0 - GANGL Dienstleistungen (www.gangl.de))
Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.7601.27015 - Realtek Semiconductor Corp.)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
Service Pack 2 for SQL Server 2008 R2 (KB2630458) (64-bit) (HKLM\...\KB2630458) (Version: 10.52.4000.0 - Microsoft Corporation)
SQL Server 2008 R2 SP2 Common Files (Version: 10.52.4000.0 - Microsoft Corporation) Hidden
SQL Server 2008 R2 SP2 Database Engine Services (Version: 10.52.4000.0 - Microsoft Corporation) Hidden
SQL Server 2008 R2 SP2 Database Engine Shared (Version: 10.52.4000.0 - Microsoft Corporation) Hidden
SQL Server 2008 R2 SP2 Full text search (Version: 10.52.4000.0 - Microsoft Corporation) Hidden
Sql Server Customer Experience Improvement Program (Version: 10.50.1600.1 - Microsoft Corporation) Hidden
STAkis-S (HKLM\...\STAkis-S) (Version: 1.0.0.63 - DVSE GmbH)
StarMoney (x32 Version: 4.0.0.203 - StarFinanz) Hidden
StarMoney Business 6.0 S-Edition (HKLM-x32\...\{DDC8EAEE-8A33-4CD2-99D5-E295F2D273EE}) (Version: 6.0 - Star Finanz GmbH)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.1.14.0 - Synaptics Incorporated)
TorisWin32 (HKLM-x32\...\TorisWin32) (Version: - )
VCDS PCI 12.12 (HKLM-x32\...\VCDS PCI) (Version: PCI 12.12.3 - PCI Diagnosetechnik GmbH & Co. KG)
WebCam Installer (HKLM-x32\...\InstallShield_{2A14D7BC-1876-4B38-830B-18856C27F550}) (Version: 4.04 - WebCam)
WebCam Installer (x32 Version: 4.04 - WebCam) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)
Windows Utils (HKLM-x32\...\Windows Utils) (Version: - )
Windows-Treiberpaket - Intel (NETwLv64) net (10/07/2010 13.4.0.139) (HKLM\...\EA1C8ECD4E416637C38F0079F98C8C7B0A112265) (Version: 10/07/2010 13.4.0.139 - Intel)
Windows-Treiberpaket - Intel (NETwNs64) net (01/22/2012 14.3.2.1) (HKLM\...\CD88F0FADE1395C9F91302912FD35B13CF75C196) (Version: 01/22/2012 14.3.2.1 - Intel)
Windows-Treiberpaket - Intel (NETwNs64) net (09/30/2012 15.3.1.2) (HKLM\...\C4A0B98BB9B3537BFB45B8BA6177991FD0CADD3A) (Version: 09/30/2012 15.3.1.2 - Intel)
Windows-Treiberpaket - Intel net (09/30/2012 15.3.1.2) (HKLM\...\751A99B9D25B1127E0849AAA30110607FE2C6C32) (Version: 09/30/2012 15.3.1.2 - Intel)
Windows-Treiberpaket - Ross-Tech USB Driver Package (06/16/2010 2.06.02) (HKLM\...\F2D626F9A8E5C6126BED6EBD3E3504D0B2AB8443) (Version: 06/16/2010 2.06.02 - Ross-Tech)
Your Software Deals 1.0.0 (HKLM-x32\...\Your Software Deals_is1) (Version: 1.0.0 - Ashampoo GmbH & Co. KG)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-1168562411-794110878-2825322068-1001_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\User\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1168562411-794110878-2825322068-1001_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\User\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1168562411-794110878-2825322068-1001_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\User\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1168562411-794110878-2825322068-1001_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\User\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1168562411-794110878-2825322068-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\User\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530\amd64\FileSyncApi64.dll (Microsoft Corporation)
==================== Restore Points =========================
27-10-2014 07:18:51 Windows Update
03-11-2014 08:24:30 Geplanter Prüfpunkt
06-11-2014 16:18:44 Windows Update
10-11-2014 14:14:40 Windows Update
13-11-2014 11:39:47 OLXTeam wird installiert
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2012-07-26 06:26 - 2012-07-26 06:26 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {0FAB4CA9-87EA-4444-82C5-77C0CDD621FA} - System32\Tasks\Apple Diagnostics => C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe [2013-11-20] (Apple Inc.)
Task: {177C5A97-ED4C-4C41-A935-8030776EECA6} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2014-11-13] (Microsoft Corporation)
Task: {34984498-CCF4-4655-B1EA-4A84520B11DD} - System32\Tasks\DATEV eG\DATEV Update-Monitor => C:\DATEV\PROGRAMM\Install\DvInesASDMon.Exe [2013-08-02] (DATEV eG)
Task: {355FF86C-2504-42BE-94F9-47712D92FFB0} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-06-18] (Google Inc.)
Task: {37F5603D-D76D-4B50-9CC8-2F1B54396994} - System32\Tasks\DATEV eG\STDMSCHECK_LOCALHOST => C:\DATEV\PROGRAMM\DBMSTOOL\DVPCDBMSCheckConsole711.exe [2013-05-07] (DATEV eG)
Task: {3CB5B229-DD83-48A8-9904-F385DE299EE2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-06-18] (Google Inc.)
Task: {85656CAE-3207-42BD-9DB0-AC761DF5D019} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {C227189C-6A28-4CAD-BF0B-82510D0A3A1C} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-12] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2013-08-15 07:40 - 2013-08-15 07:40 - 00009728 _____ () C:\Program Files (x86)\Garmin\Express Tray\Garmin.Cartography.MapUpdate.Device.DataTypes.dll
2014-01-20 13:17 - 2014-01-20 13:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-01-20 13:16 - 2014-01-20 13:16 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-07-31 07:56 - 2011-01-13 09:44 - 00232800 _____ () C:\Program Files (x86)\StarMoney Business 6.0 S-Edition\ouservice\PATCHW32.dll
2013-09-14 00:51 - 2013-09-14 00:51 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\zlib1.dll
2013-09-14 00:50 - 2013-09-14 00:50 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\libxml2.dll
2013-05-28 02:05 - 2012-01-19 12:23 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2013-06-24 11:26 - 2014-11-12 11:56 - 03649648 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-11-13 12:33 - 2014-10-06 18:43 - 00775400 _____ () C:\Program Files (x86)\Emsisoft Anti-Malware\fw32.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp.sys => ""="Driver"
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
HKLM\...\StartupApproved\Run: => "HotKeysCmds"
HKLM\...\StartupApproved\Run: => "IgfxTray"
HKLM\...\StartupApproved\Run: => "Persistence"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKLM\...\StartupApproved\Run32: => "QuickTime Task"
HKCU\...\StartupApproved\StartupFolder: => "Ross-Tech VCDS DRV Updater.lnk"
HKCU\...\StartupApproved\StartupFolder: => "Ross-Tech VCDS DRV Updater-PCI.lnk"
HKCU\...\StartupApproved\StartupFolder: => "net.lnk"
HKCU\...\StartupApproved\Run: => "BrowserChoice"
HKCU\...\StartupApproved\Run: => "com.apple.dav.bookmarks.daemon"
========================= Accounts: ==========================
Administrator (S-1-5-21-1168562411-794110878-2825322068-500 - Administrator - Disabled)
Gast (S-1-5-21-1168562411-794110878-2825322068-501 - Limited - Disabled)
User (S-1-5-21-1168562411-794110878-2825322068-1001 - Administrator - Enabled) => C:\Users\User
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (11/13/2014 04:20:02 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: a2start.exe, Version: 9.0.0.4570, Zeitstempel: 0x543c0095
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.2.9200.16864, Zeitstempel: 0x531d2be6
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0001e894
ID des fehlerhaften Prozesses: 0x1460
Startzeit der fehlerhaften Anwendung: 0xa2start.exe0
Pfad der fehlerhaften Anwendung: a2start.exe1
Pfad des fehlerhaften Moduls: a2start.exe2
Berichtskennung: a2start.exe3
Vollständiger Name des fehlerhaften Pakets: a2start.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: a2start.exe5
Error: (11/13/2014 00:39:47 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.
System Error:
Falscher Parameter.
.
Error: (11/13/2014 00:39:42 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.
System Error:
Falscher Parameter.
.
Error: (11/13/2014 00:30:22 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: AppleIEDAV.exe, Version: 1.2.12.0, Zeitstempel: 0x52867716
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00fa5e61
ID des fehlerhaften Prozesses: 0x136c
Startzeit der fehlerhaften Anwendung: 0xAppleIEDAV.exe0
Pfad der fehlerhaften Anwendung: AppleIEDAV.exe1
Pfad des fehlerhaften Moduls: AppleIEDAV.exe2
Berichtskennung: AppleIEDAV.exe3
Vollständiger Name des fehlerhaften Pakets: AppleIEDAV.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: AppleIEDAV.exe5
Error: (11/13/2014 08:30:21 AM) (Source: Datev.Framework.RemoteServiceModel.EnablerService) (EventID: 0) (User: )
Description: 13.11.2014 08:30:21 13 Error Datev.Framework.RemoteServiceModel
**************************************************************************
Datev.Framework.RemoteServiceModel.GenericService2010.exe Exception - Message
13.11.2014 08:30:21 Platform Target: x86 de-DE
DFL 4.0.0.0(4.35.4339.0) .Net 4.0.30319.18449
#DFL00301
Es ist ein lokales Verbindungsproblem zur Adresse 'net.pipe://localhost/Datev/Framework/Messaging/CentralMessagingService' auf der Maschine 'BERNHARD' aufgetreten.
**************************************************************************
ExceptionType: Datev.Framework.RemoteServiceModel.RemoteServiceCommunicationException
#DFL00301
Es ist ein lokales Verbindungsproblem zur Adresse 'net.pipe://localhost/Datev/Framework/Messaging/CentralMessagingService' auf der Maschine 'BERNHARD' aufgetreten.
--------------------------------------------------------------------------
ExceptionSource
--------------------------------------------------------------------------
Datev.Framework.RemoteServiceModel.EnablerService
--------------------------------------------------------------------------
Details:
--------------------------------------------------------------------------
SecureMessageText: True
ReasonId: 0
Priority: High
--------------------------------------------------------------------------
ExceptionCollection RemoteServiceCommunicationException
**************************************************************************
Exception 1 in Collection:
--------------------------------------------------------------------------
ExceptionType: System.TimeoutException
#EXC1859616490
Dieser an net.pipe://localhost/Datev/Framework/Messaging/CentralMessagingService gesendete Anforderungsvorgang hat innerhalb des konfigurierten Zeitlimits (00:10:00) keine Antwort empfangen. Der für diesen Vorgang zugewiesene Zeitraum war möglicherweise ein Teil eines längeren Timeouts. Mögliche Ursachen: Der Dienst verarbeitet den Vorgang noch, oder der Dienst konnte keine Antwortnachricht senden. Erwägen Sie, das Zeitlimit für den Vorgang zu erhöhen (indem Sie den Kanal/Proxy in IContextChannel umwandeln und die OperationTimeout-Eigenschaft festlegen), und stellen Sie sicher, dass der Dienst eine Verbindung mit dem Client herstellen kann.
--------------------------------------------------------------------------
ExceptionSource
--------------------------------------------------------------------------
System.ServiceModel.Internals
--------------------------------------------------------------------------
TargetSite
--------------------------------------------------------------------------
TAsyncResult End[TAsyncResult](System.IAsyncResult)
--------------------------------------------------------------------------
StackTrace
--------------------------------------------------------------------------
bei System.Runtime.AsyncResult.End[TAsyncResult](IAsyncResult result)
bei System.ServiceModel.Channels.ServiceChannel.SendAsyncResult.End(SendAsyncResult result)
bei System.ServiceModel.Channels.ServiceChannel.EndCall(String action, Object[] outs, IAsyncResult result)
bei System.ServiceModel.Channels.ServiceChannelProxy.InvokeEndService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
bei System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)
----------------------------
Application Information
----------------------------
TimeStamp=Donnerstag, 13. November 2014, 08:30:21
EntryModule=C:\DATEV\SYSTEM\Datev.Framework.RemoteServiceModel.GenericService2010.exe, 05.12.2013 16:47:50
KernelModule=Datev.Framework.MicroKernel, 03.02.2014 18:12:11
--------------------------------------------------------------------------
Error: (11/12/2014 03:44:41 PM) (Source: Datev.Framework.RemoteServiceModel.EnablerService) (EventID: 0) (User: )
Description: 12.11.2014 15:44:38 13 Error Datev.Framework.RemoteServiceModel
**************************************************************************
Datev.Framework.RemoteServiceModel.GenericService2010.exe Exception - Message
12.11.2014 15:44:38 Platform Target: x86 de-DE
DFL 4.0.0.0(4.35.4339.0) .Net 4.0.30319.18449
#DFL00301
Es ist ein lokales Verbindungsproblem zur Adresse 'net.pipe://localhost/Datev/Framework/Messaging/CentralMessagingService' auf der Maschine 'BERNHARD' aufgetreten.
**************************************************************************
ExceptionType: Datev.Framework.RemoteServiceModel.RemoteServiceCommunicationException
#DFL00301
Es ist ein lokales Verbindungsproblem zur Adresse 'net.pipe://localhost/Datev/Framework/Messaging/CentralMessagingService' auf der Maschine 'BERNHARD' aufgetreten.
--------------------------------------------------------------------------
ExceptionSource
--------------------------------------------------------------------------
Datev.Framework.RemoteServiceModel.EnablerService
--------------------------------------------------------------------------
Details:
--------------------------------------------------------------------------
SecureMessageText: True
ReasonId: 0
Priority: High
--------------------------------------------------------------------------
ExceptionCollection RemoteServiceCommunicationException
**************************************************************************
Exception 1 in Collection:
--------------------------------------------------------------------------
ExceptionType: System.TimeoutException
#EXC1859616490
Dieser an net.pipe://localhost/Datev/Framework/Messaging/CentralMessagingService gesendete Anforderungsvorgang hat innerhalb des konfigurierten Zeitlimits (00:10:00) keine Antwort empfangen. Der für diesen Vorgang zugewiesene Zeitraum war möglicherweise ein Teil eines längeren Timeouts. Mögliche Ursachen: Der Dienst verarbeitet den Vorgang noch, oder der Dienst konnte keine Antwortnachricht senden. Erwägen Sie, das Zeitlimit für den Vorgang zu erhöhen (indem Sie den Kanal/Proxy in IContextChannel umwandeln und die OperationTimeout-Eigenschaft festlegen), und stellen Sie sicher, dass der Dienst eine Verbindung mit dem Client herstellen kann.
--------------------------------------------------------------------------
ExceptionSource
--------------------------------------------------------------------------
System.ServiceModel.Internals
--------------------------------------------------------------------------
TargetSite
--------------------------------------------------------------------------
TAsyncResult End[TAsyncResult](System.IAsyncResult)
--------------------------------------------------------------------------
StackTrace
--------------------------------------------------------------------------
bei System.Runtime.AsyncResult.End[TAsyncResult](IAsyncResult result)
bei System.ServiceModel.Channels.ServiceChannel.SendAsyncResult.End(SendAsyncResult result)
bei System.ServiceModel.Channels.ServiceChannel.EndCall(String action, Object[] outs, IAsyncResult result)
bei System.ServiceModel.Channels.ServiceChannelProxy.InvokeEndService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
bei System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)
----------------------------
Application Information
----------------------------
TimeStamp=Mittwoch, 12. November 2014, 15:44:40
EntryModule=C:\DATEV\SYSTEM\Datev.Framework.RemoteServiceModel.GenericService2010.exe, 05.12.2013 16:47:50
KernelModule=Datev.Framework.MicroKernel, 03.02.2014 18:12:11
--------------------------------------------------------------------------
Error: (11/12/2014 01:58:23 PM) (Source: Datev.Framework.RemoteServiceModel.EnablerService) (EventID: 0) (User: )
Description: 12.11.2014 13:58:21 13 Error Datev.Framework.RemoteServiceModel
**************************************************************************
Datev.Framework.RemoteServiceModel.GenericService2010.exe Exception - Message
12.11.2014 13:58:21 Platform Target: x86 de-DE
DFL 4.0.0.0(4.35.4339.0) .Net 4.0.30319.18449
#DFL00301
Es ist ein lokales Verbindungsproblem zur Adresse 'net.pipe://localhost/Datev/Framework/Messaging/CentralMessagingService' auf der Maschine 'BERNHARD' aufgetreten.
**************************************************************************
ExceptionType: Datev.Framework.RemoteServiceModel.RemoteServiceCommunicationException
#DFL00301
Es ist ein lokales Verbindungsproblem zur Adresse 'net.pipe://localhost/Datev/Framework/Messaging/CentralMessagingService' auf der Maschine 'BERNHARD' aufgetreten.
--------------------------------------------------------------------------
ExceptionSource
--------------------------------------------------------------------------
Datev.Framework.RemoteServiceModel.EnablerService
--------------------------------------------------------------------------
Details:
--------------------------------------------------------------------------
SecureMessageText: True
ReasonId: 0
Priority: High
--------------------------------------------------------------------------
ExceptionCollection RemoteServiceCommunicationException
**************************************************************************
Exception 1 in Collection:
--------------------------------------------------------------------------
ExceptionType: System.TimeoutException
#EXC1859616490
Dieser an net.pipe://localhost/Datev/Framework/Messaging/CentralMessagingService gesendete Anforderungsvorgang hat innerhalb des konfigurierten Zeitlimits (00:10:00) keine Antwort empfangen. Der für diesen Vorgang zugewiesene Zeitraum war möglicherweise ein Teil eines längeren Timeouts. Mögliche Ursachen: Der Dienst verarbeitet den Vorgang noch, oder der Dienst konnte keine Antwortnachricht senden. Erwägen Sie, das Zeitlimit für den Vorgang zu erhöhen (indem Sie den Kanal/Proxy in IContextChannel umwandeln und die OperationTimeout-Eigenschaft festlegen), und stellen Sie sicher, dass der Dienst eine Verbindung mit dem Client herstellen kann.
--------------------------------------------------------------------------
ExceptionSource
--------------------------------------------------------------------------
System.ServiceModel.Internals
--------------------------------------------------------------------------
TargetSite
--------------------------------------------------------------------------
TAsyncResult End[TAsyncResult](System.IAsyncResult)
--------------------------------------------------------------------------
StackTrace
--------------------------------------------------------------------------
bei System.Runtime.AsyncResult.End[TAsyncResult](IAsyncResult result)
bei System.ServiceModel.Channels.ServiceChannel.SendAsyncResult.End(SendAsyncResult result)
bei System.ServiceModel.Channels.ServiceChannel.EndCall(String action, Object[] outs, IAsyncResult result)
bei System.ServiceModel.Channels.ServiceChannelProxy.InvokeEndService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
bei System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)
----------------------------
Application Information
----------------------------
TimeStamp=Mittwoch, 12. November 2014, 13:58:22
EntryModule=C:\DATEV\SYSTEM\Datev.Framework.RemoteServiceModel.GenericService2010.exe, 05.12.2013 16:47:50
KernelModule=Datev.Framework.MicroKernel, 03.02.2014 18:12:11
--------------------------------------------------------------------------
Error: (11/12/2014 01:06:51 PM) (Source: Datev.Framework.RemoteServiceModel.EnablerService) (EventID: 0) (User: )
Description: 12.11.2014 13:06:37 13 Error Datev.Framework.RemoteServiceModel
**************************************************************************
Datev.Framework.RemoteServiceModel.GenericService2010.exe Exception - Message
12.11.2014 13:06:39 Platform Target: x86 de-DE
DFL 4.0.0.0(4.35.4339.0) .Net 4.0.30319.18449
#DFL00301
Es ist ein lokales Verbindungsproblem zur Adresse 'net.pipe://localhost/Datev/Framework/Messaging/CentralMessagingService' auf der Maschine 'BERNHARD' aufgetreten.
**************************************************************************
ExceptionType: Datev.Framework.RemoteServiceModel.RemoteServiceCommunicationException
#DFL00301
Es ist ein lokales Verbindungsproblem zur Adresse 'net.pipe://localhost/Datev/Framework/Messaging/CentralMessagingService' auf der Maschine 'BERNHARD' aufgetreten.
--------------------------------------------------------------------------
ExceptionSource
--------------------------------------------------------------------------
Datev.Framework.RemoteServiceModel.EnablerService
--------------------------------------------------------------------------
Details:
--------------------------------------------------------------------------
SecureMessageText: True
ReasonId: 0
Priority: High
--------------------------------------------------------------------------
ExceptionCollection RemoteServiceCommunicationException
**************************************************************************
Exception 1 in Collection:
--------------------------------------------------------------------------
ExceptionType: System.ArgumentException
#EXC485748116
Async End hat einen Aufruf auf dem falschen Kanal platziert.
Parametername: result
--------------------------------------------------------------------------
ExceptionSource
--------------------------------------------------------------------------
System.ServiceModel
--------------------------------------------------------------------------
TargetSite
--------------------------------------------------------------------------
System.Object EndCall(System.String, System.Object[], System.IAsyncResult)
--------------------------------------------------------------------------
Details:
--------------------------------------------------------------------------
ParamName: result
--------------------------------------------------------------------------
StackTrace
--------------------------------------------------------------------------
bei System.ServiceModel.Channels.ServiceChannel.EndCall(String action, Object[] outs, IAsyncResult result)
bei System.ServiceModel.Channels.ServiceChannelProxy.InvokeEndService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
bei System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)
----------------------------
Application Information
----------------------------
TimeStamp=Mittwoch, 12. November 2014, 13:06:40
EntryModule=C:\DATEV\SYSTEM\Datev.Framework.RemoteServiceModel.GenericService2010.exe, 05.12.2013 16:47:50
KernelModule=Datev.Framework.MicroKernel, 03.02.2014 18:12:11
--------------------------------------------------------------------------
Error: (11/11/2014 05:19:59 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005
Error: (11/11/2014 05:19:57 PM) (Source: Datev.Framework.RemoteServiceModel.EnablerService) (EventID: 0) (User: )
Description: 11.11.2014 17:19:54 9 Error Datev.Framework.RemoteServiceModel
**************************************************************************
Datev.Framework.RemoteServiceModel.GenericService2010.exe Exception - Message
11.11.2014 17:19:54 Platform Target: x86 de-DE
DFL 4.0.0.0(4.35.4339.0) .Net 4.0.30319.18449
#DFL00301
Es ist ein lokales Verbindungsproblem zur Adresse 'net.pipe://localhost/Datev/Framework/Messaging/CentralMessagingService' auf der Maschine 'BERNHARD' aufgetreten.
**************************************************************************
ExceptionType: Datev.Framework.RemoteServiceModel.RemoteServiceCommunicationException
#DFL00301
Es ist ein lokales Verbindungsproblem zur Adresse 'net.pipe://localhost/Datev/Framework/Messaging/CentralMessagingService' auf der Maschine 'BERNHARD' aufgetreten.
--------------------------------------------------------------------------
ExceptionSource
--------------------------------------------------------------------------
Datev.Framework.RemoteServiceModel.EnablerService
--------------------------------------------------------------------------
Details:
--------------------------------------------------------------------------
SecureMessageText: True
ReasonId: 0
Priority: High
--------------------------------------------------------------------------
ExceptionCollection RemoteServiceCommunicationException
**************************************************************************
Exception 1 in Collection:
--------------------------------------------------------------------------
ExceptionType: System.ArgumentException
#EXC485748116
Async End hat einen Aufruf auf dem falschen Kanal platziert.
Parametername: result
--------------------------------------------------------------------------
ExceptionSource
--------------------------------------------------------------------------
System.ServiceModel
--------------------------------------------------------------------------
TargetSite
--------------------------------------------------------------------------
System.Object EndCall(System.String, System.Object[], System.IAsyncResult)
--------------------------------------------------------------------------
Details:
--------------------------------------------------------------------------
ParamName: result
--------------------------------------------------------------------------
StackTrace
--------------------------------------------------------------------------
bei System.ServiceModel.Channels.ServiceChannel.EndCall(String action, Object[] outs, IAsyncResult result)
bei System.ServiceModel.Channels.ServiceChannelProxy.InvokeEndService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
bei System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)
----------------------------
Application Information
----------------------------
TimeStamp=Dienstag, 11. November 2014, 17:19:54
EntryModule=C:\DATEV\SYSTEM\Datev.Framework.RemoteServiceModel.GenericService2010.exe, 05.12.2013 16:47:50
KernelModule=Datev.Framework.MicroKernel, 03.02.2014 18:12:11
--------------------------------------------------------------------------
System errors:
=============
Error: (11/12/2014 11:15:31 AM) (Source: BTHUSB) (EventID: 30) (User: )
Description: Der lokale Adapter bietet keine Unterstützung für einen wichtigen Controllerstatus für energiearme Geräte. Die mindestens erforderliche unterstützte Statusmaske ist "0x1f7fffff", vorhanden ist jedoch "0x1f3fffff". Die Funktionalität für energiearme Geräte wird deaktiviert.
Error: (11/11/2014 05:22:42 PM) (Source: DCOM) (EventID: 10010) (User: BERNHARD)
Description: {FBA44040-BD27-4A09-ACC8-C08B7C723DCD}
Error: (11/11/2014 04:09:18 PM) (Source: BTHUSB) (EventID: 30) (User: )
Description: Der lokale Adapter bietet keine Unterstützung für einen wichtigen Controllerstatus für energiearme Geräte. Die mindestens erforderliche unterstützte Statusmaske ist "0x1f7fffff", vorhanden ist jedoch "0x1f3fffff". Die Funktionalität für energiearme Geräte wird deaktiviert.
Error: (11/10/2014 04:44:48 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0xc190010e fehlgeschlagen: German ESD Bundle Parent
Error: (11/10/2014 03:08:57 PM) (Source: BTHUSB) (EventID: 30) (User: )
Description: Der lokale Adapter bietet keine Unterstützung für einen wichtigen Controllerstatus für energiearme Geräte. Die mindestens erforderliche unterstützte Statusmaske ist "0x1f7fffff", vorhanden ist jedoch "0x1f3fffff". Die Funktionalität für energiearme Geräte wird deaktiviert.
Error: (11/07/2014 06:47:50 PM) (Source: DCOM) (EventID: 10010) (User: BERNHARD)
Description: {FBA44040-BD27-4A09-ACC8-C08B7C723DCD}
Error: (11/07/2014 08:23:41 AM) (Source: BTHUSB) (EventID: 30) (User: )
Description: Der lokale Adapter bietet keine Unterstützung für einen wichtigen Controllerstatus für energiearme Geräte. Die mindestens erforderliche unterstützte Statusmaske ist "0x1f7fffff", vorhanden ist jedoch "0x1f3fffff". Die Funktionalität für energiearme Geräte wird deaktiviert.
Error: (11/06/2014 05:42:09 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0xc190010a fehlgeschlagen: German ESD Bundle Parent
Error: (11/06/2014 02:07:42 PM) (Source: BTHUSB) (EventID: 30) (User: )
Description: Der lokale Adapter bietet keine Unterstützung für einen wichtigen Controllerstatus für energiearme Geräte. Die mindestens erforderliche unterstützte Statusmaske ist "0x1f7fffff", vorhanden ist jedoch "0x1f3fffff". Die Funktionalität für energiearme Geräte wird deaktiviert.
Error: (11/05/2014 05:32:00 PM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: Der Dienst Gruppenrichtlinienclient konnte nach dem Empfang eines Preshutdown-Steuerelements nicht richtig heruntergefahren werden.
Microsoft Office Sessions:
=========================
Error: (11/13/2014 04:20:02 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: a2start.exe9.0.0.4570543c0095KERNELBASE.dll6.2.9200.16864531d2be6c00000050001e894146001cfff3902e19aecC:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\a2start.exeC:\Windows\SYSTEM32\KERNELBASE.dll89814822-6b48-11e4-bfe8-6036dde32a14
Error: (11/13/2014 00:39:47 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description:
Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.
System Error:
Falscher Parameter.
Error: (11/13/2014 00:39:42 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description:
Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.
System Error:
Falscher Parameter.
Error: (11/13/2014 00:30:22 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: AppleIEDAV.exe1.2.12.052867716unknown0.0.0.000000000c000000500fa5e61136c01cfff3535cfcb6eC:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exeunknown73cfc9ff-6b28-11e4-bfe8-6036dde32a14
Error: (11/13/2014 08:30:21 AM) (Source: Datev.Framework.RemoteServiceModel.EnablerService) (EventID: 0) (User: )
Description: 13.11.2014 08:30:21 13 Error Datev.Framework.RemoteServiceModel
**************************************************************************
Datev.Framework.RemoteServiceModel.GenericService2010.exe Exception - Message
13.11.2014 08:30:21 Platform Target: x86 de-DE
DFL 4.0.0.0(4.35.4339.0) .Net 4.0.30319.18449
#DFL00301
Es ist ein lokales Verbindungsproblem zur Adresse 'net.pipe://localhost/Datev/Framework/Messaging/CentralMessagingService' auf der Maschine 'BERNHARD' aufgetreten.
**************************************************************************
ExceptionType: Datev.Framework.RemoteServiceModel.RemoteServiceCommunicationException
#DFL00301
Es ist ein lokales Verbindungsproblem zur Adresse 'net.pipe://localhost/Datev/Framework/Messaging/CentralMessagingService' auf der Maschine 'BERNHARD' aufgetreten.
--------------------------------------------------------------------------
ExceptionSource
--------------------------------------------------------------------------
Datev.Framework.RemoteServiceModel.EnablerService
--------------------------------------------------------------------------
Details:
--------------------------------------------------------------------------
SecureMessageText: True
ReasonId: 0
Priority: High
--------------------------------------------------------------------------
ExceptionCollection RemoteServiceCommunicationException
**************************************************************************
Exception 1 in Collection:
--------------------------------------------------------------------------
ExceptionType: System.TimeoutException
#EXC1859616490
Dieser an net.pipe://localhost/Datev/Framework/Messaging/CentralMessagingService gesendete Anforderungsvorgang hat innerhalb des konfigurierten Zeitlimits (00:10:00) keine Antwort empfangen. Der für diesen Vorgang zugewiesene Zeitraum war möglicherweise ein Teil eines längeren Timeouts. Mögliche Ursachen: Der Dienst verarbeitet den Vorgang noch, oder der Dienst konnte keine Antwortnachricht senden. Erwägen Sie, das Zeitlimit für den Vorgang zu erhöhen (indem Sie den Kanal/Proxy in IContextChannel umwandeln und die OperationTimeout-Eigenschaft festlegen), und stellen Sie sicher, dass der Dienst eine Verbindung mit dem Client herstellen kann.
--------------------------------------------------------------------------
ExceptionSource
--------------------------------------------------------------------------
System.ServiceModel.Internals
--------------------------------------------------------------------------
TargetSite
--------------------------------------------------------------------------
TAsyncResult End[TAsyncResult](System.IAsyncResult)
--------------------------------------------------------------------------
StackTrace
--------------------------------------------------------------------------
bei System.Runtime.AsyncResult.End[TAsyncResult](IAsyncResult result)
bei System.ServiceModel.Channels.ServiceChannel.SendAsyncResult.End(SendAsyncResult result)
bei System.ServiceModel.Channels.ServiceChannel.EndCall(String action, Object[] outs, IAsyncResult result)
bei System.ServiceModel.Channels.ServiceChannelProxy.InvokeEndService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
bei System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)
----------------------------
Application Information
----------------------------
TimeStamp=Donnerstag, 13. November 2014, 08:30:21
EntryModule=C:\DATEV\SYSTEM\Datev.Framework.RemoteServiceModel.GenericService2010.exe, 05.12.2013 16:47:50
KernelModule=Datev.Framework.MicroKernel, 03.02.2014 18:12:11
--------------------------------------------------------------------------
Error: (11/12/2014 03:44:41 PM) (Source: Datev.Framework.RemoteServiceModel.EnablerService) (EventID: 0) (User: )
Description: 12.11.2014 15:44:38 13 Error Datev.Framework.RemoteServiceModel
**************************************************************************
Datev.Framework.RemoteServiceModel.GenericService2010.exe Exception - Message
12.11.2014 15:44:38 Platform Target: x86 de-DE
DFL 4.0.0.0(4.35.4339.0) .Net 4.0.30319.18449
#DFL00301
Es ist ein lokales Verbindungsproblem zur Adresse 'net.pipe://localhost/Datev/Framework/Messaging/CentralMessagingService' auf der Maschine 'BERNHARD' aufgetreten.
**************************************************************************
ExceptionType: Datev.Framework.RemoteServiceModel.RemoteServiceCommunicationException
#DFL00301
Es ist ein lokales Verbindungsproblem zur Adresse 'net.pipe://localhost/Datev/Framework/Messaging/CentralMessagingService' auf der Maschine 'BERNHARD' aufgetreten.
--------------------------------------------------------------------------
ExceptionSource
--------------------------------------------------------------------------
Datev.Framework.RemoteServiceModel.EnablerService
--------------------------------------------------------------------------
Details:
--------------------------------------------------------------------------
SecureMessageText: True
ReasonId: 0
Priority: High
--------------------------------------------------------------------------
ExceptionCollection RemoteServiceCommunicationException
**************************************************************************
Exception 1 in Collection:
--------------------------------------------------------------------------
ExceptionType: System.TimeoutException
#EXC1859616490
Dieser an net.pipe://localhost/Datev/Framework/Messaging/CentralMessagingService gesendete Anforderungsvorgang hat innerhalb des konfigurierten Zeitlimits (00:10:00) keine Antwort empfangen. Der für diesen Vorgang zugewiesene Zeitraum war möglicherweise ein Teil eines längeren Timeouts. Mögliche Ursachen: Der Dienst verarbeitet den Vorgang noch, oder der Dienst konnte keine Antwortnachricht senden. Erwägen Sie, das Zeitlimit für den Vorgang zu erhöhen (indem Sie den Kanal/Proxy in IContextChannel umwandeln und die OperationTimeout-Eigenschaft festlegen), und stellen Sie sicher, dass der Dienst eine Verbindung mit dem Client herstellen kann.
--------------------------------------------------------------------------
ExceptionSource
--------------------------------------------------------------------------
System.ServiceModel.Internals
--------------------------------------------------------------------------
TargetSite
--------------------------------------------------------------------------
TAsyncResult End[TAsyncResult](System.IAsyncResult)
--------------------------------------------------------------------------
StackTrace
--------------------------------------------------------------------------
bei System.Runtime.AsyncResult.End[TAsyncResult](IAsyncResult result)
bei System.ServiceModel.Channels.ServiceChannel.SendAsyncResult.End(SendAsyncResult result)
bei System.ServiceModel.Channels.ServiceChannel.EndCall(String action, Object[] outs, IAsyncResult result)
bei System.ServiceModel.Channels.ServiceChannelProxy.InvokeEndService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
bei System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)
----------------------------
Application Information
----------------------------
TimeStamp=Mittwoch, 12. November 2014, 15:44:40
EntryModule=C:\DATEV\SYSTEM\Datev.Framework.RemoteServiceModel.GenericService2010.exe, 05.12.2013 16:47:50
KernelModule=Datev.Framework.MicroKernel, 03.02.2014 18:12:11
--------------------------------------------------------------------------
Error: (11/12/2014 01:58:23 PM) (Source: Datev.Framework.RemoteServiceModel.EnablerService) (EventID: 0) (User: )
Description: 12.11.2014 13:58:21 13 Error Datev.Framework.RemoteServiceModel
**************************************************************************
Datev.Framework.RemoteServiceModel.GenericService2010.exe Exception - Message
12.11.2014 13:58:21 Platform Target: x86 de-DE
DFL 4.0.0.0(4.35.4339.0) .Net 4.0.30319.18449
#DFL00301
Es ist ein lokales Verbindungsproblem zur Adresse 'net.pipe://localhost/Datev/Framework/Messaging/CentralMessagingService' auf der Maschine 'BERNHARD' aufgetreten.
**************************************************************************
ExceptionType: Datev.Framework.RemoteServiceModel.RemoteServiceCommunicationException
#DFL00301
Es ist ein lokales Verbindungsproblem zur Adresse 'net.pipe://localhost/Datev/Framework/Messaging/CentralMessagingService' auf der Maschine 'BERNHARD' aufgetreten.
--------------------------------------------------------------------------
ExceptionSource
--------------------------------------------------------------------------
Datev.Framework.RemoteServiceModel.EnablerService
--------------------------------------------------------------------------
Details:
--------------------------------------------------------------------------
SecureMessageText: True
ReasonId: 0
Priority: High
--------------------------------------------------------------------------
ExceptionCollection RemoteServiceCommunicationException
**************************************************************************
Exception 1 in Collection:
--------------------------------------------------------------------------
ExceptionType: System.TimeoutException
#EXC1859616490
Dieser an net.pipe://localhost/Datev/Framework/Messaging/CentralMessagingService gesendete Anforderungsvorgang hat innerhalb des konfigurierten Zeitlimits (00:10:00) keine Antwort empfangen. Der für diesen Vorgang zugewiesene Zeitraum war möglicherweise ein Teil eines längeren Timeouts. Mögliche Ursachen: Der Dienst verarbeitet den Vorgang noch, oder der Dienst konnte keine Antwortnachricht senden. Erwägen Sie, das Zeitlimit für den Vorgang zu erhöhen (indem Sie den Kanal/Proxy in IContextChannel umwandeln und die OperationTimeout-Eigenschaft festlegen), und stellen Sie sicher, dass der Dienst eine Verbindung mit dem Client herstellen kann.
--------------------------------------------------------------------------
ExceptionSource
--------------------------------------------------------------------------
System.ServiceModel.Internals
--------------------------------------------------------------------------
TargetSite
--------------------------------------------------------------------------
TAsyncResult End[TAsyncResult](System.IAsyncResult)
--------------------------------------------------------------------------
StackTrace
--------------------------------------------------------------------------
bei System.Runtime.AsyncResult.End[TAsyncResult](IAsyncResult result)
bei System.ServiceModel.Channels.ServiceChannel.SendAsyncResult.End(SendAsyncResult result)
bei System.ServiceModel.Channels.ServiceChannel.EndCall(String action, Object[] outs, IAsyncResult result)
bei System.ServiceModel.Channels.ServiceChannelProxy.InvokeEndService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
bei System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)
----------------------------
Application Information
----------------------------
TimeStamp=Mittwoch, 12. November 2014, 13:58:22
EntryModule=C:\DATEV\SYSTEM\Datev.Framework.RemoteServiceModel.GenericService2010.exe, 05.12.2013 16:47:50
KernelModule=Datev.Framework.MicroKernel, 03.02.2014 18:12:11
--------------------------------------------------------------------------
Error: (11/12/2014 01:06:51 PM) (Source: Datev.Framework.RemoteServiceModel.EnablerService) (EventID: 0) (User: )
Description: 12.11.2014 13:06:37 13 Error Datev.Framework.RemoteServiceModel
**************************************************************************
Datev.Framework.RemoteServiceModel.GenericService2010.exe Exception - Message
12.11.2014 13:06:39 Platform Target: x86 de-DE
DFL 4.0.0.0(4.35.4339.0) .Net 4.0.30319.18449
#DFL00301
Es ist ein lokales Verbindungsproblem zur Adresse 'net.pipe://localhost/Datev/Framework/Messaging/CentralMessagingService' auf der Maschine 'BERNHARD' aufgetreten.
**************************************************************************
ExceptionType: Datev.Framework.RemoteServiceModel.RemoteServiceCommunicationException
#DFL00301
Es ist ein lokales Verbindungsproblem zur Adresse 'net.pipe://localhost/Datev/Framework/Messaging/CentralMessagingService' auf der Maschine 'BERNHARD' aufgetreten.
--------------------------------------------------------------------------
ExceptionSource
--------------------------------------------------------------------------
Datev.Framework.RemoteServiceModel.EnablerService
--------------------------------------------------------------------------
Details:
--------------------------------------------------------------------------
SecureMessageText: True
ReasonId: 0
Priority: High
--------------------------------------------------------------------------
ExceptionCollection RemoteServiceCommunicationException
**************************************************************************
Exception 1 in Collection:
--------------------------------------------------------------------------
ExceptionType: System.ArgumentException
#EXC485748116
Async End hat einen Aufruf auf dem falschen Kanal platziert.
Parametername: result
--------------------------------------------------------------------------
ExceptionSource
--------------------------------------------------------------------------
System.ServiceModel
--------------------------------------------------------------------------
TargetSite
--------------------------------------------------------------------------
System.Object EndCall(System.String, System.Object[], System.IAsyncResult)
--------------------------------------------------------------------------
Details:
--------------------------------------------------------------------------
ParamName: result
--------------------------------------------------------------------------
StackTrace
--------------------------------------------------------------------------
bei System.ServiceModel.Channels.ServiceChannel.EndCall(String action, Object[] outs, IAsyncResult result)
bei System.ServiceModel.Channels.ServiceChannelProxy.InvokeEndService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
bei System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)
----------------------------
Application Information
----------------------------
TimeStamp=Mittwoch, 12. November 2014, 13:06:40
EntryModule=C:\DATEV\SYSTEM\Datev.Framework.RemoteServiceModel.GenericService2010.exe, 05.12.2013 16:47:50
KernelModule=Datev.Framework.MicroKernel, 03.02.2014 18:12:11
--------------------------------------------------------------------------
Error: (11/11/2014 05:19:59 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005
Error: (11/11/2014 05:19:57 PM) (Source: Datev.Framework.RemoteServiceModel.EnablerService) (EventID: 0) (User: )
Description: 11.11.2014 17:19:54 9 Error Datev.Framework.RemoteServiceModel
**************************************************************************
Datev.Framework.RemoteServiceModel.GenericService2010.exe Exception - Message
11.11.2014 17:19:54 Platform Target: x86 de-DE
DFL 4.0.0.0(4.35.4339.0) .Net 4.0.30319.18449
#DFL00301
Es ist ein lokales Verbindungsproblem zur Adresse 'net.pipe://localhost/Datev/Framework/Messaging/CentralMessagingService' auf der Maschine 'BERNHARD' aufgetreten.
**************************************************************************
ExceptionType: Datev.Framework.RemoteServiceModel.RemoteServiceCommunicationException
#DFL00301
Es ist ein lokales Verbindungsproblem zur Adresse 'net.pipe://localhost/Datev/Framework/Messaging/CentralMessagingService' auf der Maschine 'BERNHARD' aufgetreten.
--------------------------------------------------------------------------
ExceptionSource
--------------------------------------------------------------------------
Datev.Framework.RemoteServiceModel.EnablerService
--------------------------------------------------------------------------
Details:
--------------------------------------------------------------------------
SecureMessageText: True
ReasonId: 0
Priority: High
--------------------------------------------------------------------------
ExceptionCollection RemoteServiceCommunicationException
**************************************************************************
Exception 1 in Collection:
--------------------------------------------------------------------------
ExceptionType: System.ArgumentException
#EXC485748116
Async End hat einen Aufruf auf dem falschen Kanal platziert.
Parametername: result
--------------------------------------------------------------------------
ExceptionSource
--------------------------------------------------------------------------
System.ServiceModel
--------------------------------------------------------------------------
TargetSite
--------------------------------------------------------------------------
System.Object EndCall(System.String, System.Object[], System.IAsyncResult)
--------------------------------------------------------------------------
Details:
--------------------------------------------------------------------------
ParamName: result
--------------------------------------------------------------------------
StackTrace
--------------------------------------------------------------------------
bei System.ServiceModel.Channels.ServiceChannel.EndCall(String action, Object[] outs, IAsyncResult result)
bei System.ServiceModel.Channels.ServiceChannelProxy.InvokeEndService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
bei System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)
----------------------------
Application Information
----------------------------
TimeStamp=Dienstag, 11. November 2014, 17:19:54
EntryModule=C:\DATEV\SYSTEM\Datev.Framework.RemoteServiceModel.GenericService2010.exe, 05.12.2013 16:47:50
KernelModule=Datev.Framework.MicroKernel, 03.02.2014 18:12:11
--------------------------------------------------------------------------
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i3-3120M CPU @ 2.50GHz
Percentage of memory in use: 69%
Total physical RAM: 3986.69 MB
Available physical RAM: 1229.13 MB
Total Pagefile: 4690.69 MB
Available Pagefile: 1235.27 MB
Total Virtual: 8192 MB
Available Virtual: 8191.78 MB
==================== Drives ================================
Drive c: (Windows) (Fixed) (Total:465.38 GB) (Free:223.25 GB) NTFS
Drive d: () (Removable) (Total:1.88 GB) (Free:1.88 GB) FAT
Drive e: (FRITZ!Box 7390) (CDROM) (Total:0.12 GB) (Free:0 GB) CDFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 8F2C2B21)
Partition: GPT Partition Type.
========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 1.9 GB) (Disk ID: D116B940)
Partition 1: (Active) - (Size=1.9 GB) - (Type=06)
==================== End Of Log ============================
Ich hoffe, dass mir geholfen werden kann...Vielen Dank schon mal im Voraus! Viele Grüße Bernhard |
| Themen zu Falsche Telekom Rechnung geöffnet und Zip Datei gestartet |
| bonjour, converter, defender, device driver, explorer, fehlercode 0x0, fehlercode 0xc0000005, fehlercode windows, firefox, firefox 33.1, flash player, google, home, installation, microsoft essentials, mozilla, netzwerk, officejet, programm, registry, server, starmoney, svchost.exe, system, telekom mobilfunkrechnung trojaner, win32/emotet.ab, windows, windows xp, winlogon.exe, zip-anhang |
Baum-Darstellung