![]() |
|
Plagegeister aller Art und deren Bekämpfung: JDownloaderWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() |
|
![]() | #1 |
/// the machine /// TB-Ausbilder ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() | ![]() JDownloader hi, Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: ![]() (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
![]() | #2 | |
![]() ![]() | ![]() JDownloaderCode:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 19-11-2014 Ran by Jan at 2014-11-20 19:13:42 Running from C:\Users\Jan\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Kaspersky Internet Security (Disabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886} AS: Kaspersky Internet Security (Disabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0} FW: Kaspersky Internet Security (Disabled) {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.223 - Adobe Systems Incorporated) Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve) Curse Client (HKU\S-1-5-21-921174533-1726928877-1964100986-1000\...\101a9f93b8f0bb6f) (Version: 5.1.1.820 - Curse) Curse Client (HKU\S-1-5-21-921174533-1726928877-1964100986-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\101a9f93b8f0bb6f) (Version: 5.1.1.820 - Curse) Free YouTube to MP3 Converter version 3.12.50.1111 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.50.1111 - DVDVideoSoft Ltd.) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 38.0.2125.122 - Google Inc.) Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.3.214 - Intel Corporation) Java 7 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.710 - Oracle) JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH) Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{8ED07EBD-22AD-415A-B71E-C1AD86862C2E}) (Version: 15.0.1.415 - Kaspersky Lab) Kaspersky Internet Security (x32 Version: 15.0.1.415 - Kaspersky Lab) Hidden Logitech Gaming Software 8.57 (HKLM\...\Logitech Gaming Software) (Version: 8.57.145 - Logitech Inc.) Malwarebytes Anti-Malware Version 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation) Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Mozilla Firefox 33.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 33.1 (x86 de)) (Version: 33.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 33.1 - Mozilla) MSI Afterburner 4.0.0 (HKLM-x32\...\Afterburner) (Version: 4.0.0 - MSI Co., LTD) NVIDIA 3D Vision Controller-Treiber 344.75 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 344.75 - NVIDIA Corporation) NVIDIA 3D Vision Treiber 344.75 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 344.75 - NVIDIA Corporation) NVIDIA GeForce Experience 2.1.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.4 - NVIDIA Corporation) NVIDIA Grafiktreiber 344.75 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 344.75 - NVIDIA Corporation) NVIDIA HD-Audiotreiber 1.3.32.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.32.1 - NVIDIA Corporation) NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.50.1123.2011 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6564 - Realtek Semiconductor Corp.) SHIELD Streaming (Version: 3.1.2000 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (Version: 16.13.65 - NVIDIA Corporation) Hidden Speccy (HKLM\...\Speccy) (Version: 1.26 - Piriform) Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH) VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN) WinRAR 5.11 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-921174533-1726928877-1964100986-1000_Classes\CLSID\{2dee0256-4ef1-4c31-a698-ca66b150564c}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation) ==================== Restore Points ========================= 16-11-2014 19:04:51 DirectX wurde installiert 16-11-2014 19:45:00 DirectX wurde installiert 17-11-2014 16:47:16 Windows Update 18-11-2014 02:00:11 Windows Update 18-11-2014 03:56:55 Windows Update 18-11-2014 04:32:27 Windows Update 19-11-2014 19:13:01 Windows Update 20-11-2014 17:41:01 Windows-Sicherung ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 03:34 - 2014-11-15 00:45 - 00450713 ____R C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 www.007guard.com 127.0.0.1 007guard.com 127.0.0.1 008i.com 127.0.0.1 www.008k.com 127.0.0.1 008k.com 127.0.0.1 www.00hq.com 127.0.0.1 00hq.com 127.0.0.1 010402.com 127.0.0.1 www.032439.com 127.0.0.1 032439.com 127.0.0.1 www.0scan.com 127.0.0.1 0scan.com 127.0.0.1 1000gratisproben.com 127.0.0.1 www.1000gratisproben.com 127.0.0.1 1001namen.com 127.0.0.1 www.1001namen.com 127.0.0.1 100888290cs.com 127.0.0.1 www.100888290cs.com 127.0.0.1 www.100sexlinks.com 127.0.0.1 100sexlinks.com 127.0.0.1 10sek.com 127.0.0.1 www.10sek.com 127.0.0.1 www.1-2005-search.com 127.0.0.1 1-2005-search.com 127.0.0.1 123fporn.info 127.0.0.1 www.123fporn.info 127.0.0.1 123haustiereundmehr.com 127.0.0.1 www.123haustiereundmehr.com 127.0.0.1 123moviedownload.com There are 1000 more lines. ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {047EE7B9-638C-41BA-8B86-B2D5A4ADC5A3} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-14] (Adobe Systems Incorporated) Task: {465F9D55-55C1-42C2-9470-21C489FACCAA} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-11-14] (Google Inc.) Task: {624C8488-7567-415D-8666-A7A1B995E8A0} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe Task: {723EB197-4A0A-418D-8AE2-3C627C2CA267} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe Task: {77813A82-509B-4A14-ADD9-2A63C8802272} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-11-14] (Google Inc.) Task: {9B5DAD89-78C9-4755-85EF-9FF84C524FF2} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2014-11-14 18:40 - 2014-11-12 22:56 - 00118080 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2014-09-18 08:23 - 2014-09-18 08:23 - 00866584 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll 2014-10-14 19:51 - 2014-10-14 19:51 - 01050904 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll 2014-09-18 08:23 - 2014-09-18 08:23 - 00059160 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll 2014-10-14 19:51 - 2014-10-14 19:51 - 00242456 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll 2014-11-15 00:33 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl 2014-11-15 00:33 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl 2014-11-15 00:33 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl 2014-11-15 00:33 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll 2014-11-15 00:33 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll 2014-11-14 20:34 - 2014-11-06 00:56 - 01042760 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.122\libglesv2.dll 2014-11-14 20:34 - 2014-11-06 00:56 - 00211272 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.122\libegl.dll 2014-11-14 20:34 - 2014-11-06 00:57 - 08911176 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.122\pdf.dll 2014-11-14 20:34 - 2014-11-06 00:56 - 01681224 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.122\ffmpegsumo.dll 2014-11-19 18:31 - 2014-11-19 18:31 - 26065408 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5293\libcef.dll 2014-11-19 18:31 - 2014-11-19 18:31 - 00739840 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5293\libGLESv2.dll 2014-11-19 18:31 - 2014-11-19 18:31 - 00907264 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5293\platforms\qwindows.dll 2014-11-19 18:31 - 2014-11-19 18:31 - 00130048 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5293\libEGL.dll 2014-11-19 18:31 - 2014-11-19 18:31 - 00020992 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5293\imageformats\qgif.dll 2014-11-19 18:31 - 2014-11-19 18:31 - 00021504 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5293\imageformats\qico.dll 2014-11-19 18:31 - 2014-11-19 18:31 - 00205312 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5293\imageformats\qjpeg.dll 2014-11-19 18:31 - 2014-11-19 18:31 - 00225792 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5293\imageformats\qmng.dll 2014-11-19 18:31 - 2014-11-19 18:31 - 00015872 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5293\imageformats\qsvg.dll 2014-11-19 18:31 - 2014-11-19 18:31 - 00312832 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5293\imageformats\qtiff.dll 2014-11-19 18:31 - 2014-11-19 18:31 - 00010240 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5293\qml\QtQuick.2\qtquick2plugin.dll 2014-11-19 18:31 - 2014-11-19 18:31 - 00054272 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5293\qml\QtQuick\Layouts\qquicklayoutsplugin.dll 2014-11-19 18:31 - 2014-11-19 18:31 - 00010240 _____ () C:\Program Files (x86)\Battle.net\Battle.net.5293\qml\QtQml\Models.2\modelsplugin.dll 2014-11-14 21:37 - 2014-11-14 21:37 - 16840880 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_223.dll 2014-11-14 20:34 - 2014-11-06 00:57 - 14910280 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.122\PepperFlash\pepflashplayer.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) MSCONFIG\startupfolder: C:^Users^Jan^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^CurseClientStartup.ccip => C:\Windows\pss\CurseClientStartup.ccip.Startup MSCONFIG\startupreg: SDTray => "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe" MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" ========================= Accounts: ========================== Administrator (S-1-5-21-921174533-1726928877-1964100986-500 - Administrator - Disabled) Gast (S-1-5-21-921174533-1726928877-1964100986-501 - Limited - Disabled) Jan (S-1-5-21-921174533-1726928877-1964100986-1000 - Administrator - Enabled) => C:\Users\Jan Server-1 (S-1-5-21-921174533-1726928877-1964100986-1001 - Limited - Enabled) ==================== Faulty Device Manager Devices ============= Name: Description: Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (11/19/2014 10:53:32 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (11/19/2014 10:34:47 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (11/19/2014 08:56:41 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (11/19/2014 08:33:55 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (11/19/2014 05:33:54 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: FC.4_GE_Incl.UPD1_M2.exe, Version: 0.0.0.0, Zeitstempel: 0x2a425e19 Name des fehlerhaften Moduls: FC.4_GE_Incl.UPD1_M2.exe, Version: 0.0.0.0, Zeitstempel: 0x2a425e19 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0001259e ID des fehlerhaften Prozesses: 0x1c80 Startzeit der fehlerhaften Anwendung: 0xFC.4_GE_Incl.UPD1_M2.exe0 Pfad der fehlerhaften Anwendung: FC.4_GE_Incl.UPD1_M2.exe1 Pfad des fehlerhaften Moduls: FC.4_GE_Incl.UPD1_M2.exe2 Berichtskennung: FC.4_GE_Incl.UPD1_M2.exe3 Error: (11/19/2014 05:00:31 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: FC.4_GE_Incl.UPD1_M2.exe, Version: 0.0.0.0, Zeitstempel: 0x2a425e19 Name des fehlerhaften Moduls: FC.4_GE_Incl.UPD1_M2.exe, Version: 0.0.0.0, Zeitstempel: 0x2a425e19 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0001259e ID des fehlerhaften Prozesses: 0xe88 Startzeit der fehlerhaften Anwendung: 0xFC.4_GE_Incl.UPD1_M2.exe0 Pfad der fehlerhaften Anwendung: FC.4_GE_Incl.UPD1_M2.exe1 Pfad des fehlerhaften Moduls: FC.4_GE_Incl.UPD1_M2.exe2 Berichtskennung: FC.4_GE_Incl.UPD1_M2.exe3 Error: (11/19/2014 04:59:42 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: FC.4_GE_Incl.UPD1_M2.exe, Version: 0.0.0.0, Zeitstempel: 0x2a425e19 Name des fehlerhaften Moduls: FC.4_GE_Incl.UPD1_M2.exe, Version: 0.0.0.0, Zeitstempel: 0x2a425e19 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0001259e ID des fehlerhaften Prozesses: 0x1500 Startzeit der fehlerhaften Anwendung: 0xFC.4_GE_Incl.UPD1_M2.exe0 Pfad der fehlerhaften Anwendung: FC.4_GE_Incl.UPD1_M2.exe1 Pfad des fehlerhaften Moduls: FC.4_GE_Incl.UPD1_M2.exe2 Berichtskennung: FC.4_GE_Incl.UPD1_M2.exe3 Error: (11/19/2014 04:58:26 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: FC.4_GE_Incl.UPD1_M2.exe, Version: 0.0.0.0, Zeitstempel: 0x2a425e19 Name des fehlerhaften Moduls: FC.4_GE_Incl.UPD1_M2.exe, Version: 0.0.0.0, Zeitstempel: 0x2a425e19 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0001259e ID des fehlerhaften Prozesses: 0x1cf0 Startzeit der fehlerhaften Anwendung: 0xFC.4_GE_Incl.UPD1_M2.exe0 Pfad der fehlerhaften Anwendung: FC.4_GE_Incl.UPD1_M2.exe1 Pfad des fehlerhaften Moduls: FC.4_GE_Incl.UPD1_M2.exe2 Berichtskennung: FC.4_GE_Incl.UPD1_M2.exe3 Error: (11/18/2014 04:57:56 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (11/18/2014 03:15:49 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 System errors: ============= Error: (11/20/2014 11:30:01 AM) (Source: KLIF) (EventID: 0) (User: ) Description: Ñonnection is not established Error: (11/20/2014 11:30:01 AM) (Source: KLIF) (EventID: 0) (User: ) Description: Ñonnection is not established Error: (11/19/2014 10:53:33 PM) (Source: Service Control Manager) (EventID: 7026) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: cdrom Error: (11/19/2014 10:34:48 PM) (Source: Service Control Manager) (EventID: 7026) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: cdrom Error: (11/19/2014 08:56:42 PM) (Source: Service Control Manager) (EventID: 7026) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: cdrom Error: (11/19/2014 08:33:55 PM) (Source: Service Control Manager) (EventID: 7026) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: cdrom Error: (11/18/2014 06:54:19 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Definition Update for Windows Defender - KB915597 (Definition 1.189.72.0) Error: (11/18/2014 04:57:56 AM) (Source: Service Control Manager) (EventID: 7026) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: cdrom Error: (11/18/2014 04:57:08 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070308 fehlgeschlagen: Update für Windows 7 für x64-basierte Systeme (KB2923545) Error: (11/18/2014 04:57:07 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070308 fehlgeschlagen: Sicherheitsupdate für Windows 7 für x64-basierte Systeme (KB2984981) Microsoft Office Sessions: ========================= Error: (11/19/2014 10:53:32 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (11/19/2014 10:34:47 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (11/19/2014 08:56:41 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (11/19/2014 08:33:55 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (11/19/2014 05:33:54 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: FC.4_GE_Incl.UPD1_M2.exe0.0.0.02a425e19FC.4_GE_Incl.UPD1_M2.exe0.0.0.02a425e19c00000050001259e1c8001d0041685bfad4fG:\Far Cry 4\FC.4_GE_Incl.UPD1_M2\Far Cry 4 Gold Edition Incl. Update 1 MULTi2\FC.4_GE_Incl.UPD1_M2.exeG:\Far Cry 4\FC.4_GE_Incl.UPD1_M2\Far Cry 4 Gold Edition Incl. Update 1 MULTi2\FC.4_GE_Incl.UPD1_M2.exed96e73f7-7009-11e4-8242-8c89a5ca3dd3 Error: (11/19/2014 05:00:31 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: FC.4_GE_Incl.UPD1_M2.exe0.0.0.02a425e19FC.4_GE_Incl.UPD1_M2.exe0.0.0.02a425e19c00000050001259ee8801d00411e993ebb1G:\Far Cry 4\FC.4_GE_M2\Far Cry 4 Gold Edition MULTi2\FC.4_GE_Incl.UPD1_M2.exeG:\Far Cry 4\FC.4_GE_M2\Far Cry 4 Gold Edition MULTi2\FC.4_GE_Incl.UPD1_M2.exe2f9f2229-7005-11e4-8242-8c89a5ca3dd3 Error: (11/19/2014 04:59:42 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: FC.4_GE_Incl.UPD1_M2.exe0.0.0.02a425e19FC.4_GE_Incl.UPD1_M2.exe0.0.0.02a425e19c00000050001259e150001d00411cd5632b5G:\Far Cry 4\FC.4_GE_M2\Far Cry 4 Gold Edition MULTi2\FC.4_GE_Incl.UPD1_M2.exeG:\Far Cry 4\FC.4_GE_M2\Far Cry 4 Gold Edition MULTi2\FC.4_GE_Incl.UPD1_M2.exe1240d9c3-7005-11e4-8242-8c89a5ca3dd3 Error: (11/19/2014 04:58:26 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: FC.4_GE_Incl.UPD1_M2.exe0.0.0.02a425e19FC.4_GE_Incl.UPD1_M2.exe0.0.0.02a425e19c00000050001259e1cf001d00411732ee005G:\Far Cry 4\FC.4_GE_M2\Far Cry 4 Gold Edition MULTi2\FC.4_GE_Incl.UPD1_M2.exeG:\Far Cry 4\FC.4_GE_M2\Far Cry 4 Gold Edition MULTi2\FC.4_GE_Incl.UPD1_M2.exee5267993-7004-11e4-8242-8c89a5ca3dd3 Error: (11/18/2014 04:57:56 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (11/18/2014 03:15:49 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 CodeIntegrity Errors: =================================== Date: 2014-11-20 19:12:26.395 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-11-20 19:12:26.394 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-11-20 19:12:26.393 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-11-20 19:09:57.165 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-11-20 19:09:57.164 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-11-20 19:09:57.162 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-11-19 22:39:13.124 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-11-19 22:39:13.124 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-11-19 22:39:13.108 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-11-19 22:36:31.334 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Memory info =========================== Processor: Intel(R) Core(TM) i7-3770K CPU @ 3.50GHz Percentage of memory in use: 29% Total physical RAM: 16334.92 MB Available physical RAM: 11470.52 MB Total Pagefile: 32668.02 MB Available Pagefile: 26866.51 MB Total Virtual: 8192 MB Available Virtual: 8191.78 MB ==================== Drives ================================ Drive c: (Windows 7) (Fixed) (Total:232.79 GB) (Free:176.41 GB) NTFS Drive d: (HDD Musik) (Fixed) (Total:488.28 GB) (Free:210.07 GB) NTFS Drive e: (HDD Daten) (Fixed) (Total:488.28 GB) (Free:488.06 GB) NTFS Drive f: (HDD Diverses) (Fixed) (Total:443.23 GB) (Free:436.06 GB) NTFS Drive g: (HDD Games) (Fixed) (Total:488.28 GB) (Free:448.38 GB) NTFS Drive h: (SSD) (Fixed) (Total:55.67 GB) (Free:55.55 GB) NTFS Drive i: (HDD Cinema) (Fixed) (Total:886.45 GB) (Free:692.34 GB) NTFS Drive j: (HDD ) (Fixed) (Total:931.51 GB) (Free:550.2 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 48BE9A27) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=232.8 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 16CDA452) Partition 1: (Not Active) - (Size=488.3 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=488.3 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=886.5 GB) - (Type=07 NTFS) ======================================================== Disk: 2 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: E315B32D) Partition 1: (Not Active) - (Size=488.3 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=443.2 GB) - (Type=07 NTFS) ======================================================== Disk: 3 (Size: 55.9 GB) (Disk ID: E315B311) Partition: GPT Partition Type. ======================================================== Disk: 4 (Size: 931.5 GB) (Disk ID: 7A2804B8) Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS) ==================== End Of Log ============================ Zitat:
__________________ Geändert von xNato (20.11.2014 um 19:40 Uhr) Grund: Anhang |
![]() | #3 |
![]() ![]() | ![]() JDownloader Im Anhang
__________________
__________________ |
![]() | #4 | |
![]() ![]() | ![]() JDownloader Push
__________________ Zitat:
|
![]() |