|
Plagegeister aller Art und deren Bekämpfung: Script-Host konnte nicht initialisiert werdenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
13.12.2014, 12:56 | #1 |
| Script-Host konnte nicht initialisiert werden Hi ihr Lieben, nach langen Problemen mit einer wenig legal beschafften Version von Sony Vegas 10 habe ich mich beschlossen, einen großen Batzen Erspartes für die ehrliche Kaufversion 11.0 auszugeben. Tatsächlich erhalte ich mit der aber genau den gleichen Fehler, wie mit Vegas 10 - so dass ich mir vermutlich die zig Taler hätte sparen können. Bevor ich nun traurig den kompletten Kram zurücksende und nie wieder Videos schneiden kann, weil nichts klappt, vielleicht könnt ihr mir helfen. Ich erhalte die Fehlermeldung 0x80070002 (Meldung fehlt) Unter Details finde ich dann "Script Host konnte nicht initialisiert werden." Nun scheint das Sony nicht neu zu sein. Von A bis Z habe ich diese Fehlerbehebungsseite befolgt: https://www.custcenter.com/app/answers/detail/a_id/4388 Mit dem haargenau gleichen Ergebnis wie zuvor. Hier ist zwar kein Trojaner am Werk, vermute ich (da letztens einer von euch schon ganz prima geholfen hat, alle Schadsoftware von meinem Rechner runterzuschmeißen, thanks again!), aber vielleicht habt ihr als Profis ja trotzdem noch einen Tipp, wie sich das lösen lässt. Ich danke euch! |
13.12.2014, 13:57 | #2 |
/// the machine /// TB-Ausbilder | Script-Host konnte nicht initialisiert werden hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
13.12.2014, 17:10 | #3 |
| Script-Host konnte nicht initialisiert werden Ah, hi schrauber Du hast mich letztes Mal ja schon gerettet.
__________________Hier sind die beiden Files: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-12-2014 Ran by Sarah (administrator) on SARAH-PC on 13-12-2014 14:13:00 Running from C:\Users\Sarah\Desktop Loaded Profiles: Sarah & UpdatusUser & Administrator (Available profiles: Sarah & UpdatusUser & Administrator) Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AVAST Software) C:\Program Files\AVAST Software\Avast1\AvastSvc.exe (Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe (AVAST Software) C:\Program Files\AVAST Software\Avast1\avastui.exe (Avast Software) C:\Program Files\AVAST Software\Avast1\ng\vbox\AvastVBoxSVC.exe (AVAST Software) C:\Program Files\AVAST Software\Avast1\ng\ngservice.exe (Dropbox, Inc.) C:\Users\Sarah\AppData\Roaming\Dropbox\bin\Dropbox.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast1\AvastUI.exe [5223016 2014-11-15] (AVAST Software) HKU\S-1-5-21-2397675965-2088753291-856571785-1000\...\Policies\Explorer: [NoCDBurning] 1 Startup: C:\Users\Sarah\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Sarah\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast1\ashShA64.dll (AVAST Software) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKU\S-1-5-21-2397675965-2088753291-856571785-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome HKU\S-1-5-21-2397675965-2088753291-856571785-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\S-1-5-21-2397675965-2088753291-856571785-500\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/ StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> No File BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\Root\Office15\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM-x32 - No Name - {3C6301ED-0F78-4AF2-8150-D9C052361A8E} - No File Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\Root\Office15\MSOSB.DLL (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\Sarah\AppData\Roaming\Mozilla\Firefox\Profiles\14nr1zgo.default FF SelectedSearchEngine: Google FF Homepage: mail.yahoo.de FF NetworkProxy: "ftp", "proxyus.stealthy.co" FF NetworkProxy: "ftp_port", 3128 FF NetworkProxy: "http", "proxyus.stealthy.co" FF NetworkProxy: "http_port", 3128 FF NetworkProxy: "no_proxies_on", "localhost, 127.0.0.1, stealthy.co" FF NetworkProxy: "share_proxy_settings", true FF NetworkProxy: "socks", "proxyus.stealthy.co" FF NetworkProxy: "socks_port", 3128 FF NetworkProxy: "ssl", "proxyus.stealthy.co" FF NetworkProxy: "ssl_port", 3128 FF NetworkProxy: "type", 0 FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_223.dll () FF Plugin: @microsoft.com/GENUINE -> disabled No File FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_223.dll () FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\Root\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 -> C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 -> C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer) FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader) FF Plugin-x32: @videolan.org/vlc,version=1.1.11 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (the VideoLAN Team) FF Extension: Avira Browser Safety - C:\Users\Sarah\AppData\Roaming\Mozilla\Firefox\Profiles\14nr1zgo.default\Extensions\abs@avira.com [2014-11-19] FF Extension: DownloadHelper - C:\Users\Sarah\AppData\Roaming\Mozilla\Firefox\Profiles\14nr1zgo.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-10-05] FF Extension: Adblock Plus - C:\Users\Sarah\AppData\Roaming\Mozilla\Firefox\Profiles\14nr1zgo.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-09-12] FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-09-15] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast1\WebRep\FF FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast1\WebRep\FF [2014-11-15] FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext FF Extension: No Name - wrc@avast.com [Not Found] Chrome: ======= CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast1\WebRep\Chrome\aswWebRepChromeSp.crx [2014-11-15] CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast1\WebRep\Chrome\aswWebRepChrome.crx [2014-11-15] CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2013-08-14] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast1\AvastSvc.exe [50344 2014-11-15] (AVAST Software) R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast1\ng\vbox\AvastVBoxSVC.exe [4012248 2014-11-15] (Avast Software) R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2443960 2014-10-30] (Microsoft Corporation) S4 Giraffic; C:\Program Files (x86)\Giraffic\Veoh_GirafficWatchdog.exe [2245232 2013-05-13] (Giraffic) S4 LVSrvLauncher; C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe [173344 2007-02-06] (Logitech Inc.) S4 lxdpCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\x64\3\\lxdpserv.exe [29184 2009-04-28] (Lexmark International, Inc.) S4 lxdp_device; C:\Windows\system32\lxdpcoms.exe [1039872 2007-11-19] ( ) S4 lxdp_device; C:\Windows\SysWOW64\lxdpcoms.exe [589824 2007-11-19] ( ) S4 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] () S4 TuneUp.Defrag; C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe [607048 2011-11-13] (TuneUp Software) S4 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe [1353544 2009-10-30] (TuneUp Software) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S3 ASPI; C:\Windows\SysWOW64\DRIVERS\ASPI32.sys [84832 2002-07-17] (Adaptec) [File not signed] R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-11-15] () R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-11-15] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-11-15] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-11-15] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-11-21] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-11-15] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-11-15] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-11-15] () R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [279616 2011-11-13] (DT Soft Ltd) S3 hitmanpro37; C:\Windows\system32\drivers\hitmanpro37.sys [43664 2014-11-15] () S3 LVcKap64; C:\Windows\System32\DRIVERS\LVcKap64.sys [1013024 2007-02-06] (Logitech Inc.) S3 LVMVDrv; C:\Windows\System32\DRIVERS\LVMVDrv.sys [2346016 2007-02-06] (Logitech Inc.) S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2Mon.sys [31520 2007-02-06] () S3 lvsels64; C:\Windows\System32\DRIVERS\lvsels64.sys [38944 2007-02-03] (Logitech Inc.) S3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesDriver64.sys [11856 2009-10-14] (TuneUp Software) R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast1\ng\vbox\VBoxAswDrv.sys [270728 2014-11-15] (Avast Software) U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [59904 2009-07-14] (Microsoft Corporation) S3 catchme; \??\C:\ComboFix\catchme.sys [X] S3 gdrv; \??\C:\Windows\gdrv.sys [X] S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-12-13 14:13 - 2014-12-13 14:13 - 00013395 _____ () C:\Users\Sarah\Desktop\FRST.txt 2014-12-13 14:12 - 2014-12-13 14:13 - 00000000 ___DC () C:\FRST 2014-12-13 14:12 - 2014-12-13 14:12 - 02119168 _____ (Farbar) C:\Users\Sarah\Desktop\FRST64.exe 2014-12-13 13:24 - 2014-12-13 13:24 - 00060563 _____ () C:\Users\Sarah\AppData\Local\recently-used.xbel 2014-12-13 12:52 - 2014-12-13 12:52 - 01005568 _____ (Microsoft Corporation) C:\Users\Sarah\Downloads\dotNetFx45_Full_setup.exe 2014-12-13 12:41 - 2014-12-13 12:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony 2014-12-13 12:40 - 2014-12-13 12:42 - 00000000 ____D () C:\Users\Sarah\AppData\Roaming\Sony 2014-12-13 12:40 - 2014-12-13 12:40 - 00000000 ___DC () C:\Program Files\Sony 2014-12-13 12:40 - 2014-12-13 12:40 - 00000000 ____D () C:\ProgramData\Sony 2014-12-13 12:40 - 2014-12-13 12:40 - 00000000 ____D () C:\Program Files (x86)\Sony 2014-12-13 12:34 - 2014-12-13 12:40 - 219788016 _____ (Sony Creative Software Inc.) C:\Users\Sarah\Downloads\vegaspro11.0.701_64bit.exe 2014-12-10 18:59 - 2014-12-13 12:20 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-12-09 19:05 - 2014-12-09 19:05 - 00001474 _____ () C:\Users\Public\Desktop\ElsterFormular.lnk 2014-12-09 19:05 - 2014-12-09 19:05 - 00000000 ____D () C:\Users\Sarah\AppData\Roaming\elsterformular 2014-12-09 19:05 - 2014-12-09 19:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsterFormular 2014-12-09 19:05 - 2014-12-09 19:05 - 00000000 ____D () C:\ProgramData\elsterformular 2014-12-09 19:05 - 2014-12-09 19:05 - 00000000 ____D () C:\Program Files (x86)\ElsterFormular 2014-11-15 22:10 - 2014-11-21 20:22 - 00000000 ____D () C:\Windows\erdnt 2014-11-15 22:09 - 2014-11-15 22:09 - 00000000 ___DC () C:\OETemp 2014-11-15 22:06 - 2014-11-15 22:06 - 00000000 ____D () C:\Users\Sarah\AppData\Roaming\AVAST Software 2014-11-15 22:00 - 2014-11-21 20:23 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group 2014-11-15 20:10 - 2014-12-09 21:14 - 00000000 ____D () C:\Users\Sarah\Desktop\OUAT - Season III 2014-11-15 16:27 - 2014-11-15 16:27 - 00000249 _____ () C:\Windows\system32\2014-11-15-15-27-15.006-aswFe.exe-6040.log 2014-11-15 16:25 - 2014-11-15 16:25 - 00000199 _____ () C:\Windows\system32\2014-11-15-15-25-26.090-AvastVBoxSVC.exe-5768.log 2014-11-15 15:47 - 2014-11-15 15:47 - 00000249 _____ () C:\Windows\system32\2014-11-15-14-47-29.083-aswFe.exe-4996.log 2014-11-15 15:45 - 2014-11-15 15:45 - 00000199 _____ () C:\Windows\system32\2014-11-15-14-45-57.088-AvastVBoxSVC.exe-2392.log 2014-11-15 15:44 - 2014-11-15 15:44 - 00000249 _____ () C:\Windows\system32\2014-11-15-14-44-25.005-aswFe.exe-2392.log 2014-11-15 15:42 - 2014-11-15 15:42 - 00000249 _____ () C:\Windows\system32\2014-11-15-14-42-22.002-aswFe.exe-3392.log 2014-11-15 15:42 - 2014-11-15 15:42 - 00000199 _____ () C:\Windows\system32\2014-11-15-14-42-11.042-AvastVBoxSVC.exe-4504.log 2014-11-15 15:38 - 2014-11-15 15:38 - 00000000 ____D () C:\Windows\SysWOW64\vbox 2014-11-15 15:38 - 2014-11-15 15:38 - 00000000 ____D () C:\Windows\system32\vbox 2014-11-15 15:35 - 2014-11-21 20:23 - 00001078 ____C () C:\DelFix.txt 2014-11-15 15:35 - 2014-11-21 20:20 - 01050432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys 2014-11-15 15:35 - 2014-11-16 18:56 - 00000000 ____D () C:\Windows\ERUNT 2014-11-15 15:35 - 2014-11-15 22:06 - 00083280 _____ (AVAST Software) C:\Windows\system32\Drivers\aswmonflt.sys 2014-11-15 15:35 - 2014-11-15 15:35 - 00436624 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2014-11-15 15:35 - 2014-11-15 15:35 - 00364512 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2014-11-15 15:35 - 2014-11-15 15:35 - 00267632 _____ () C:\Windows\system32\Drivers\aswVmm.sys 2014-11-15 15:35 - 2014-11-15 15:35 - 00116728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys 2014-11-15 15:35 - 2014-11-15 15:35 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2014-11-15 15:35 - 2014-11-15 15:35 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys 2014-11-15 15:35 - 2014-11-15 15:35 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2014-11-15 15:35 - 2014-11-15 15:35 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys 2014-11-15 15:35 - 2014-11-15 15:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software 2014-11-15 15:26 - 2014-11-15 15:26 - 00043664 _____ () C:\Windows\system32\Drivers\hitmanpro37.sys 2014-11-15 15:25 - 2014-11-15 15:25 - 00002036 _____ () C:\Windows\system32\.crusader 2014-11-15 15:16 - 2014-11-15 15:16 - 00003128 _____ () C:\Windows\System32\Tasks\{F46D68C4-ABB1-4CD7-BF8A-52CA4230D7B9} ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-12-13 14:11 - 2011-11-13 07:30 - 01651599 _____ () C:\Windows\WindowsUpdate.log 2014-12-13 13:25 - 2014-10-05 10:20 - 00000000 ____D () C:\Users\Sarah\.gimp-2.8 2014-12-13 13:24 - 2014-10-05 12:07 - 00000000 ____D () C:\Users\Sarah\AppData\Local\gtk-2.0 2014-12-13 13:15 - 2013-04-19 20:37 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-12-13 12:59 - 2014-10-05 11:56 - 00000000 ___DC () C:\KMPlayer 2014-12-13 12:57 - 2013-12-09 14:25 - 01594156 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-12-13 12:57 - 2009-07-14 18:58 - 00699462 _____ () C:\Windows\system32\perfh007.dat 2014-12-13 12:57 - 2009-07-14 18:58 - 00149602 _____ () C:\Windows\system32\perfc007.dat 2014-12-13 12:57 - 2009-07-14 06:13 - 01594156 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-12-13 12:48 - 2013-05-09 11:53 - 00000000 ___RD () C:\Users\Sarah\Dropbox 2014-12-13 12:48 - 2013-05-09 11:48 - 00000000 ____D () C:\Users\Sarah\AppData\Roaming\Dropbox 2014-12-13 12:46 - 2011-11-13 07:32 - 00117584 _____ () C:\Users\Sarah\AppData\Local\GDIPFONTCACHEV1.DAT 2014-12-13 12:35 - 2009-07-14 05:45 - 00013760 _____ () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-12-13 12:35 - 2009-07-14 05:45 - 00013760 _____ () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-12-13 12:28 - 2012-01-14 15:07 - 00269090 _____ () C:\Windows\PFRO.log 2014-12-13 12:28 - 2011-11-24 18:12 - 00115988 _____ () C:\Windows\setupact.log 2014-12-13 12:28 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-12-13 12:28 - 2009-07-14 05:45 - 00464048 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-12-13 12:20 - 2014-09-09 22:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 2014-12-13 12:20 - 2014-09-09 22:33 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office 2014-12-13 12:20 - 2011-11-13 02:39 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-12-13 12:20 - 2009-07-14 04:20 - 00000000 ___DC () C:\Program Files\Common Files\Microsoft Shared 2014-12-12 23:47 - 2014-10-29 14:02 - 00011264 _____ () C:\Users\Sarah\Desktop\To Do+To watch.xls 2014-12-12 23:04 - 2013-09-19 19:31 - 00003850 _____ () C:\Windows\System32\Tasks\Real Networks Scheduler 2014-12-12 20:59 - 2013-05-09 11:48 - 00000000 ____D () C:\Users\Sarah\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-12-11 22:08 - 2012-05-09 09:09 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-12-09 19:06 - 2011-11-13 07:28 - 00000000 ____D () C:\Users\Sarah 2014-12-07 14:33 - 2011-12-06 13:55 - 00000000 ____D () C:\Users\Sarah\AppData\Local\Last.fm 2014-12-07 13:23 - 2013-08-24 10:43 - 00000000 ____D () C:\ProgramData\lx_Cats 2014-11-27 23:54 - 2013-12-09 12:57 - 00000000 ____D () C:\Users\Sarah\Documents\Calibre-Bibliothek 2014-11-27 23:46 - 2014-11-03 21:26 - 00002398 _____ () C:\Users\Sarah\Desktop\Fanfic-Liste.txt 2014-11-27 16:40 - 2011-11-13 01:04 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-11-23 13:09 - 2014-10-25 13:45 - 00000000 ___DC () C:\Program Files\Microsoft Office 15 2014-11-15 22:20 - 2009-07-14 04:20 - 00000000 ___RD () C:\Users\Default 2014-11-15 22:18 - 2009-07-14 03:34 - 00000215 ____C () C:\Windows\system.ini 2014-11-15 22:17 - 2013-08-28 08:02 - 00000000 ____D () C:\ProgramData\Avira 2014-11-15 22:17 - 2013-08-28 08:02 - 00000000 ____D () C:\Program Files (x86)\Avira 2014-11-15 22:07 - 2014-05-29 19:52 - 00000000 ____D () C:\Program Files (x86)\ATLAS V14 2014-11-15 15:34 - 2014-08-25 23:18 - 00000000 ___DC () C:\Program Files\AVAST Software 2014-11-15 15:26 - 2013-10-23 21:15 - 00003362 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2397675965-2088753291-856571785-1000 2014-11-15 15:26 - 2013-10-23 21:15 - 00003228 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2397675965-2088753291-856571785-1000 2014-11-15 15:09 - 2013-04-19 20:37 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-11-15 15:09 - 2012-05-09 09:09 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-11-15 15:09 - 2011-11-25 23:05 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-11-15 15:06 - 2014-11-11 18:54 - 00000000 ____D () C:\ProgramData\MaquGzup Some content of TEMP: ==================== C:\Users\Sarah\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpyuje80.dll C:\Users\Sarah\AppData\Local\Temp\Quarantine.exe C:\Users\Sarah\AppData\Local\Temp\sqlite3.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-12-05 21:53 ==================== End Of Log ============================ --- --- --- Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-12-2014 Ran by Sarah at 2014-12-13 14:13:31 Running from C:\Users\Sarah\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Adobe Flash Player 11 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 11.8.800.94 - Adobe Systems Incorporated) Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.223 - Adobe Systems Incorporated) Amazon MP3-Downloader 1.0.9 (HKLM-x32\...\Amazon MP3-Downloader) (Version: - ) Any Video Converter 3.3.9 (HKLM-x32\...\Any Video Converter_is1) (Version: - Any-Video-Converter.com) Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) ATLAS Translation Standard V14.0 Trial Version (HKLM-x32\...\{6652750B-AA69-49B7-9D09-C0A28B6FFC9F}) (Version: 14.00.2000 - FUJITSU LIMITED) ATLAS V14.0 L10 Update Pack U004 (x32 Version: 14.04.0000 - FUJITSU LIMITED) Hidden Audacity 2.0 (HKLM-x32\...\Audacity_is1) (Version: - Audacity Team) Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.0.2206 - AVAST Software) calibre 64bit (HKLM\...\{C7B9E1F1-45A6-4AF8-A800-0FE9A2B8F30C}) (Version: 1.14.0 - Kovid Goyal) DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.45.1.0236 - DT Soft Ltd) Die Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.67.2 - Electronic Arts) Die Sims™ 3 Einfach tierisch (HKLM-x32\...\{C12631C6-804D-4B32-B0DD-8A496462F106}) (Version: 10.0.96 - Electronic Arts) Die Sims™ 3 Jahreszeiten (HKLM-x32\...\{3DE92282-CB49-434F-81BF-94E5B380E889}) (Version: 16.0.136 - Electronic Arts) Die Sims™ 3 Late Night (HKLM-x32\...\{45057FCE-5784-48BE-8176-D9D00AF56C3C}) (Version: 6.0.81 - Electronic Arts) Die Sims™ 3 Lebensfreude (HKLM-x32\...\{E6B88BD6-E4B2-4701-A648-B6DAC6E491CC}) (Version: 8.0.152 - Electronic Arts) Die Sims™ 3 Showtime (HKLM-x32\...\{3BBFD444-5FAB-49F6-98B1-A1954E831399}) (Version: 12.0.273 - Electronic Arts) Die Sims™ 3 Supernatural (HKLM-x32\...\{B37DAFA5-717D-41F8-BDFB-3A4B68C0B3A1}) (Version: 15.0.135 - Electronic Arts) Die Sims™ 3 Traumkarrieren (HKLM-x32\...\{910F4A29-1134-49E0-AD8B-56E4A3152BD1}) (Version: 4.0.87 - Electronic Arts) Dropbox (HKU\S-1-5-21-2397675965-2088753291-856571785-1000\...\Dropbox) (Version: 3.0.3 - Dropbox, Inc.) ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 15.1.13904 - Landesfinanzdirektion Thüringen) EMDB 2.03 (HKLM-x32\...\EMDB_is1) (Version: - Wicked & Wild Inc.) Explorer Suite IV (HKLM\...\Explorer Suite_is1) (Version: - ) f.lux (HKU\S-1-5-21-2397675965-2088753291-856571785-1000\...\Flux) (Version: - ) Foxit Reader 5.1 (HKLM-x32\...\Foxit Reader_is1) (Version: 5.1.3.1201 - Foxit Corporation) Free WMA to MP3 Converter 1.16 (HKLM-x32\...\Free WMA to MP3 Converter_is1) (Version: - Jodix Technologies Ltd.) GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team) Java 7 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.450 - Oracle) Katawa Shoujo (HKLM-x32\...\Katawa Shoujo) (Version: - ) KMPlayer (remove only) (HKLM-x32\...\The KMPlayer) (Version: 3.9.0.128 - PandoraTV) LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - ) Last.fm Scrobbler 2.1.36 (HKLM-x32\...\LastFM_is1) (Version: - Last.fm) Lexmark Z2300 Series (HKLM\...\Lexmark Z2300 Series) (Version: - Lexmark International, Inc.) Logitech QuickCam (HKLM\...\{192E85C6-2B8A-4217-AD30-ECA5CE19DB23}) (Version: 10.51.2029 - Logitech Inc.) Logitech® Camera-Treiber (HKLM-x32\...\QcDrv) (Version: - ) Meka MP3 Album Artwork Tool (HKLM-x32\...\{566D66BF-BF53-4FA7-91C5-F419A37F7248}) (Version: 1.0.0 - DroidSDK Software) Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation) Microsoft .NET Framework 4.5 DEU Language Pack (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50709 - Microsoft Corporation) Microsoft Games for Windows - LIVE (HKLM-x32\...\{B45FABE7-D101-4D99-A671-E16DA40AF7F0}) (Version: 3.0.86.0 - Microsoft Corporation) Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{B578C85A-A84C-4230-A177-C5B2AF565B8C}) (Version: 3.0.17.0 - Microsoft Corporation) Microsoft Office 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 15.0.4667.1002 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-2397675965-2088753291-856571785-1000\...\OneDriveSetup.exe) (Version: 17.3.1171.0714 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.) Mozilla Firefox 34.0.5 (x86 de) (HKLM-x32\...\Mozilla Firefox 34.0.5 (x86 de)) (Version: 34.0.5 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 32.0.1 - Mozilla) MP3-Tag-Editor 3.10 (HKLM-x32\...\{12FCEE02-33A5-478A-A0B1-219E07BA0B47}) (Version: 3.10.0 - Gisbert Müller) MSVCRT Redists (Version: 1.0 - Sony Creative Software Inc.) Hidden MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) MVisn64 (Version: 10.51.2027 - Logitech Inc.) Hidden MyDriveConnect 3.3.0.1756 (HKLM-x32\...\MyDriveConnect) (Version: 3.3.0.1756 - TomTom) NVIDIA 3D Vision Controller-Treiber 314.22 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 314.22 - NVIDIA Corporation) NVIDIA 3D Vision Treiber 314.22 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 314.22 - NVIDIA Corporation) NVIDIA Grafiktreiber 314.22 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 314.22 - NVIDIA Corporation) NVIDIA HD-Audiotreiber 1.3.23.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.23.1 - NVIDIA Corporation) NVIDIA PhysX-Systemsoftware 9.12.1031 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.1031 - NVIDIA Corporation) NVIDIA Update 1.12.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.12.12 - NVIDIA Corporation) Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4667.1002 - Microsoft Corporation) Hidden Office 15 Click-to-Run Licensing Component (Version: 15.0.4667.1002 - Microsoft Corporation) Hidden Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4667.1002 - Microsoft Corporation) Hidden OpenOffice.org 3.3 (HKLM-x32\...\{4286716B-1287-48E7-9078-3DC8248DBA96}) (Version: 3.3.9567 - OpenOffice.org) Origin (HKLM-x32\...\Origin) (Version: 8.6.0.357 - Electronic Arts, Inc.) pdfsam (HKU\S-1-5-21-2397675965-2088753291-856571785-1000\...\pdfsam) (Version: 2.2.1 - ) Photo Pos Pro (HKLM-x32\...\Photo Pos Pro) (Version: 1.89 - PowerOfSoftware Ltd.) PhotoScape (HKLM-x32\...\PhotoScape) (Version: - ) RealDownloader (x32 Version: 1.3.3 - RealNetworks, Inc.) Hidden RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0 - RealNetworks, Inc) Hidden RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0 - RealNetworks, Inc) Hidden RealPlayer (HKLM-x32\...\RealPlayer 16.0) (Version: 16.0.3 - RealNetworks) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.38.113.2011 - Realtek) RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) Hidden RPG Maker VX RTP (HKLM-x32\...\RPG Maker VX RTP_is1) (Version: 1.02 - Enterbrain) ScummVM 1.5.0 (HKLM-x32\...\ScummVM_is1) (Version: - The ScummVM Team) Skype™ 6.21 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.21.104 - Skype Technologies S.A.) Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation) TuneUp Utilities (HKLM-x32\...\TuneUp Utilities) (Version: 9.0.2000.15 - TuneUp Software) TuneUp Utilities (x32 Version: 9.0.2000.15 - TuneUp Software) Hidden TuneUp Utilities Language Pack (de-DE) (x32 Version: 9.0.2000.15 - TuneUp Software) Hidden Unigine Heaven Benchmark v2.1 (HKLM-x32\...\{38468127-9E6F-4FC9-B5F7-42D4AD437D96}) (Version: 2.1 - Unigine Corp.) Vegas Pro 11.0 (64-bit) (HKLM\...\{7E3B2D0F-029B-11E2-BD68-F04DA23A5C58}) (Version: 11.0.701 - Sony) Veoh Giraffic Video Accelerator (HKLM-x32\...\Giraffic) (Version: 0.86.412.230 - Giraffic) Veoh Web Player (HKLM-x32\...\Veoh Web Player Beta) (Version: 1.1.2.0000 - Veoh Networks, Inc.) Visual Studio C++ 10.0 Runtime (HKLM-x32\...\{4412F224-3849-4461-A3E9-DEEF8D252790}) (Version: 10.0.0 - TomTom International B.V.) VLC media player 1.1.11 (HKLM-x32\...\VLC media player) (Version: 1.1.11 - VideoLAN) Winamp (HKLM-x32\...\Winamp) (Version: 5.622 - Nullsoft, Inc) WinRAR 4.00 beta 7 (64-bit) (HKLM\...\WinRAR archiver) (Version: 4.00.7 - win.rar GmbH) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-2397675965-2088753291-856571785-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Sarah\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2397675965-2088753291-856571785-1000_Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InprocServer32 -> C:\Windows\system32\shell32.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-2397675965-2088753291-856571785-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Sarah\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64\SkyDriveShell64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-2397675965-2088753291-856571785-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Sarah\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64\SkyDriveShell64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-2397675965-2088753291-856571785-1000_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Sarah\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64\SkyDriveShell64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-2397675965-2088753291-856571785-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Sarah\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64\SkyDriveShell64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-2397675965-2088753291-856571785-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Sarah\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64\FileSyncApi64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-2397675965-2088753291-856571785-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Sarah\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2397675965-2088753291-856571785-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Sarah\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2397675965-2088753291-856571785-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Sarah\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2397675965-2088753291-856571785-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Sarah\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2397675965-2088753291-856571785-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Sarah\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2397675965-2088753291-856571785-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Sarah\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2397675965-2088753291-856571785-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Sarah\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2397675965-2088753291-856571785-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Sarah\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) ==================== Restore Points ========================= 21-11-2014 19:23:21 Ende der Bereinigung 28-11-2014 20:53:33 Geplanter Prüfpunkt 05-12-2014 21:00:52 Geplanter Prüfpunkt 13-12-2014 11:01:14 Removed Vegas Pro 10.0 13-12-2014 11:18:46 Removed Vegas Pro 11.0 (64-bit) 13-12-2014 11:19:50 Removed Microsoft Lync Basic 2013 13-12-2014 11:19:58 LYNCENTRY 13-12-2014 11:21:31 Microsoft Visual C++ 2005 Redistributable wird entfernt ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2014-11-16 16:05 - 2014-11-16 16:05 - 00000056 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost 127.0.0.1 player.kmpmedia.net ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {0134E7C6-E4A3-4514-A98D-3537C8AE88C8} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2397675965-2088753291-856571785-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.) Task: {07D80477-0FB3-441E-B661-1F257C559C3E} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2397675965-2088753291-856571785-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-08-14] (RealNetworks, Inc.) Task: {08207192-DE1C-463B-882D-8810520E59DA} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2397675965-2088753291-856571785-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.) Task: {0E6EC90A-3F22-44A7-AA60-AA3094E96A9B} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-20] (Microsoft Corporation) Task: {162BA24E-20C0-4676-BE87-EBD0287D8F9D} - System32\Tasks\{11B678D5-DA0B-46C9-876B-FCBB589FC909} => C:\Program Files\Sony\Vegas Pro 11.0\vegas110.exe [2012-09-24] (Sony Creative Software Inc.) Task: {39B7D925-3B4B-42E1-9F00-CA1BF8D180D9} - System32\Tasks\Automatische Problemsuche => C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpSystemStatusCheck.exe [2009-10-30] (TuneUp Software) Task: {3E14DC2F-7C29-4FF9-B50D-DD3501175797} - System32\Tasks\RunAsStdUser Task for VeohWebPlayer => C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\veohwebplayer.exe [2012-01-02] (Veoh Networks) Task: {3E371B71-04BB-4F97-8057-B3799D45B6FA} - System32\Tasks\{774B3D5D-5249-4FAE-89E3-1E6A562F440F} => pcalua.exe -a C:\Users\Sarah\AppData\Local\Temp\InstallFlashPlayer.exe -d "C:\Program Files (x86)\Mozilla Firefox" Task: {4895C3C8-91BE-4293-9DE5-5EDC0F167BB2} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2014-10-22] (Microsoft Corporation) Task: {4C7EF4CE-232D-4E4E-9A85-F26D6393FEB8} - System32\Tasks\Real Networks Scheduler => C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe [2013-09-15] (RealNetworks, Inc.) Task: {73AF88A5-69F5-46EB-B27D-C60B2B8458C7} - System32\Tasks\Installation App Launcher => C:\Program Files (x86)\Lexmark Z2300 Series\ezprint.exe [2010-02-04] (Lexmark International Inc.) Task: {7D907370-3496-4C17-8FB6-46935B17300D} - System32\Tasks\{8952B92F-3650-4AE0-8B94-E533532D6EB8} => pcalua.exe -a C:\Users\Sarah\Desktop\tbrusha_open1724_studio.exe -d C:\Users\Sarah\Desktop Task: {8D49CA1D-E81E-4210-8263-63B1551AE686} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2397675965-2088753291-856571785-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-08-14] (RealNetworks, Inc.) Task: {8E60F172-A434-4ACA-B350-0DE596C54517} - System32\Tasks\{F46D68C4-ABB1-4CD7-BF8A-52CA4230D7B9} => pcalua.exe -a "C:\Program Files (x86)\Avira\AntiVir Desktop\setup.exe" -c /REMOVE Task: {9CEEB410-BE40-445C-A0A1-37E07401CE58} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc Task: {9DCD1660-3AE1-4A88-82C0-78933714F936} - System32\Tasks\{A7772DA1-7E4F-46B4-BEA5-EE4AC197AA38} => pcalua.exe -a D:\setup.exe -d D:\ Task: {A178FF79-34D0-4D5F-A8B8-099F4C8C0BDF} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-2397675965-2088753291-856571785-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe [2013-08-14] (RealNetworks, Inc.) Task: {A3E0048E-C642-4359-8839-7B8EF71AD62A} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2014-10-07] (Microsoft Corporation) Task: {B39F3CBD-3374-4C9F-BCC3-761610F6F6E1} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance => C:\Program Files (x86)\TuneUp Utilities 2010\OneClick.exe [2009-10-30] (TuneUp Software) Task: {B65286D9-5CD0-4B2C-AED9-42D7F053E184} - System32\Tasks\{4E8C7CF6-3975-4E2C-ADEB-9EE15569D1C3} => C:\Program Files\Sony\Vegas Pro 11.0\vegas110.exe [2012-09-24] (Sony Creative Software Inc.) Task: {CBD2892E-387F-4EC4-80A9-4C19CD6AF791} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation) Task: {FE244C6E-C3B2-4FCE-947A-C0C9BC50A1F9} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-15] (Adobe Systems Incorporated) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Loaded Modules (whitelisted) ============= 2013-08-28 10:44 - 2009-08-13 06:06 - 00177152 _____ () C:\Windows\system32\spool\PRTPROCS\x64\lxdpdrpp.dll 2014-10-25 13:45 - 2014-05-20 09:19 - 00105640 ____C () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll 2014-11-15 15:35 - 2014-11-15 15:35 - 00388208 ____C () C:\Program Files\AVAST Software\Avast1\ng\vbox\VBoxDDU.dll 2014-11-15 15:35 - 2014-11-15 15:35 - 05846160 ____C () C:\Program Files\AVAST Software\Avast1\ng\vbox\VBoxRT.dll 2014-12-13 11:47 - 2014-12-13 11:47 - 02908160 ____C () C:\Program Files\AVAST Software\Avast1\defs\14121300\algo.dll 2014-11-15 15:35 - 2014-11-15 15:35 - 04491192 ____C () C:\Program Files\AVAST Software\Avast1\ng\vbox\x86\VBoxRT-x86.dll 2014-11-15 15:35 - 2014-11-15 15:35 - 38561576 ____C () C:\Program Files\AVAST Software\Avast1\libcef.dll 2014-10-22 01:22 - 2014-10-22 01:22 - 00750080 _____ () C:\Users\Sarah\AppData\Roaming\Dropbox\bin\libGLESv2.dll 2014-12-13 12:48 - 2014-12-13 12:48 - 00043008 _____ () c:\users\sarah\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpyuje80.dll 2014-10-22 01:22 - 2014-10-22 01:22 - 00047616 _____ () C:\Users\Sarah\AppData\Roaming\Dropbox\bin\libEGL.dll 2014-10-22 01:22 - 2014-10-22 01:22 - 00863744 _____ () C:\Users\Sarah\AppData\Roaming\Dropbox\bin\plugins\platforms\qwindows.dll 2014-10-22 01:22 - 2014-10-22 01:22 - 00200704 _____ () C:\Users\Sarah\AppData\Roaming\Dropbox\bin\plugins\imageformats\qjpeg.dll 2014-12-10 18:59 - 2014-12-10 18:59 - 03758192 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) AlternateDataStreams: C:\ProgramData\TEMP:EBAA0CD9 AlternateDataStreams: C:\ProgramData\TEMP:EC77041F ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3 MSCONFIG\Services: Apple Mobile Device => 2 MSCONFIG\Services: Giraffic => 2 MSCONFIG\Services: LVPrcS64 => 2 MSCONFIG\Services: LVSrvLauncher => 2 MSCONFIG\Services: lxdpCATSCustConnectService => 2 MSCONFIG\Services: lxdp_device => 2 MSCONFIG\Services: MozillaMaintenance => 3 MSCONFIG\Services: nvsvc => 2 MSCONFIG\Services: nvUpdatusService => 2 MSCONFIG\Services: RealNetworks Downloader Resolver Service => 2 MSCONFIG\Services: SkypeUpdate => 2 MSCONFIG\Services: Steam Client Service => 3 MSCONFIG\Services: Stereo Service => 2 MSCONFIG\Services: TuneUp.Defrag => 3 MSCONFIG\Services: TuneUp.UtilitiesSvc => 2 MSCONFIG\startupfolder: C:^Users^Sarah^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" MSCONFIG\startupreg: avgnt => "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min MSCONFIG\startupreg: Avira Systray => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun MSCONFIG\startupreg: EzPrint => "C:\Program Files (x86)\Lexmark Z2300 Series\ezprint.exe" MSCONFIG\startupreg: f.lux => "C:\Users\Sarah\AppData\Local\FluxSoftware\Flux\flux.exe" /noshow MSCONFIG\startupreg: Logitech Download Assistant => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch MSCONFIG\startupreg: lxdpmon.exe => "C:\Program Files (x86)\Lexmark Z2300 Series\lxdpmon.exe" MSCONFIG\startupreg: MaquGzup => regsvr32.exe "C:\ProgramData\MaquGzup\MaquGzup.dat" MSCONFIG\startupreg: MyDriveConnect.exe => "C:\Program Files (x86)\MyDrive Connect\MyDriveConnect.exe" ========================= Accounts: ========================== Administrator (S-1-5-21-2397675965-2088753291-856571785-500 - Administrator - Enabled) => C:\Users\Administrator Gast (S-1-5-21-2397675965-2088753291-856571785-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-2397675965-2088753291-856571785-1007 - Limited - Enabled) Sarah (S-1-5-21-2397675965-2088753291-856571785-1000 - Administrator - Enabled) => C:\Users\Sarah UpdatusUser (S-1-5-21-2397675965-2088753291-856571785-1001 - Limited - Enabled) => C:\Users\UpdatusUser ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (12/13/2014 00:23:39 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Failed to compile: System.Runtime.Remoting, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x80131040 Error: (12/13/2014 00:23:39 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Failed to compile: System.Dynamic, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a . Error code = 0x80070002 Error: (12/13/2014 00:23:39 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Failed to compile: System.Configuration.Install, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a . Error code = 0x80131040 Error: (12/13/2014 00:23:39 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Failed to compile: Microsoft.CSharp, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a . Error code = 0x80070002 Error: (12/07/2014 01:23:28 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: LXDPwbgw.exe, Version: 1.93.0.0, Zeitstempel: 0x4743d828 Name des fehlerhaften Moduls: LXDPuldr.dll, Version: 1.88.0.0, Zeitstempel: 0x49f6d364 Ausnahmecode: 0xc0000005 Fehleroffset: 0x000000000000dc0c ID des fehlerhaften Prozesses: 0x11f0 Startzeit der fehlerhaften Anwendung: 0xLXDPwbgw.exe0 Pfad der fehlerhaften Anwendung: LXDPwbgw.exe1 Pfad des fehlerhaften Moduls: LXDPwbgw.exe2 Berichtskennung: LXDPwbgw.exe3 Error: (12/07/2014 01:22:45 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: LXDPwbgw.exe, Version: 1.93.0.0, Zeitstempel: 0x4743d828 Name des fehlerhaften Moduls: LXDPuldr.dll, Version: 1.88.0.0, Zeitstempel: 0x49f6d364 Ausnahmecode: 0xc0000005 Fehleroffset: 0x000000000000dc0c ID des fehlerhaften Prozesses: 0x1324 Startzeit der fehlerhaften Anwendung: 0xLXDPwbgw.exe0 Pfad der fehlerhaften Anwendung: LXDPwbgw.exe1 Pfad des fehlerhaften Moduls: LXDPwbgw.exe2 Berichtskennung: LXDPwbgw.exe3 Error: (12/05/2014 09:54:56 PM) (Source: SideBySide) (EventID: 33) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"1". Die abhängige Assemblierung "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (12/05/2014 09:54:27 PM) (Source: SideBySide) (EventID: 33) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.CRT,processorArchitecture="x86",type="win32",version="8.0.50727.762"1". Die abhängige Assemblierung "Microsoft.VC80.CRT,processorArchitecture="x86",type="win32",version="8.0.50727.762"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (12/05/2014 09:54:27 PM) (Source: SideBySide) (EventID: 33) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.CRT,processorArchitecture="x86",type="win32",version="8.0.50727.762"1". Die abhängige Assemblierung "Microsoft.VC80.CRT,processorArchitecture="x86",type="win32",version="8.0.50727.762"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (12/01/2014 07:00:06 PM) (Source: Windows Backup) (EventID: 4103) (User: ) Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "K:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)" System errors: ============= Error: (12/13/2014 00:28:23 PM) (Source: volmgr) (EventID: 46) (User: ) Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen. Error: (12/13/2014 00:28:23 PM) (Source: volmgr) (EventID: 46) (User: ) Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen. Error: (12/13/2014 00:28:16 PM) (Source: volmgr) (EventID: 46) (User: ) Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen. Error: (12/13/2014 00:28:16 PM) (Source: volmgr) (EventID: 46) (User: ) Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen. Error: (12/13/2014 00:28:16 PM) (Source: volmgr) (EventID: 46) (User: ) Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen. Error: (12/13/2014 00:27:07 PM) (Source: Service Control Manager) (EventID: 7006) (User: ) Description: Der Aufruf "ScRegSetValueExW" ist für "Start" aufgrund folgenden Fehlers fehlgeschlagen: %%5 Error: (12/13/2014 00:27:07 PM) (Source: Service Control Manager) (EventID: 7006) (User: ) Description: Der Aufruf "ScRegSetValueExW" ist für "Start" aufgrund folgenden Fehlers fehlgeschlagen: %%5 Error: (12/13/2014 00:03:57 PM) (Source: DCOM) (EventID: 10000) (User: ) Description: C:\Windows\System32\wisptis.exe -Embedding740{A5B020FD-E04B-4E67-B65A-E7DEED25B2CF} Error: (12/13/2014 11:47:05 AM) (Source: volmgr) (EventID: 46) (User: ) Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen. Error: (12/13/2014 11:47:05 AM) (Source: volmgr) (EventID: 46) (User: ) Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen. Microsoft Office Sessions: ========================= Error: (12/13/2014 00:23:39 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Failed to compile: System.Runtime.Remoting, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x80131040 System.Runtime.Remoting, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 Error: (12/13/2014 00:23:39 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Failed to compile: System.Dynamic, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a . Error code = 0x80070002 System.Dynamic, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a Error: (12/13/2014 00:23:39 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Failed to compile: System.Configuration.Install, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a . Error code = 0x80131040 System.Configuration.Install, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a Error: (12/13/2014 00:23:39 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Failed to compile: Microsoft.CSharp, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a . Error code = 0x80070002 Microsoft.CSharp, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a Error: (12/07/2014 01:23:28 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: LXDPwbgw.exe1.93.0.04743d828LXDPuldr.dll1.88.0.049f6d364c0000005000000000000dc0c11f001d012189ac89494C:\Windows\system32\spool\DRIVERS\x64\3\LXDPwbgw.exeC:\Windows\system32\spool\DRIVERS\x64\3\LXDPuldr.dlld8c91cb8-7e0b-11e4-b9b3-1c6f65be9f80 Error: (12/07/2014 01:22:45 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: LXDPwbgw.exe1.93.0.04743d828LXDPuldr.dll1.88.0.049f6d364c0000005000000000000dc0c132401d01218809ef652C:\Windows\system32\spool\DRIVERS\x64\3\LXDPwbgw.exeC:\Windows\system32\spool\DRIVERS\x64\3\LXDPuldr.dllbf682896-7e0b-11e4-b9b3-1c6f65be9f80 Error: (12/05/2014 09:54:56 PM) (Source: SideBySide) (EventID: 33) (User: ) Description: rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"C:\Windows\Installer\{C8E8D2E3-EF6A-4B1D-A09E-7B27EBE2F3CE}\recordingmanager.exe Error: (12/05/2014 09:54:27 PM) (Source: SideBySide) (EventID: 33) (User: ) Description: Microsoft.VC80.CRT,processorArchitecture="x86",type="win32",version="8.0.50727.762"c:\program files (x86)\Last.fm\ext_skypenotify.dll Error: (12/05/2014 09:54:27 PM) (Source: SideBySide) (EventID: 33) (User: ) Description: Microsoft.VC80.CRT,processorArchitecture="x86",type="win32",version="8.0.50727.762"c:\program files (x86)\Last.fm\ext_messengernotify.dll Error: (12/01/2014 07:00:06 PM) (Source: Windows Backup) (EventID: 4103) (User: ) Description: K:\Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006) CodeIntegrity Errors: =================================== Date: 2014-11-15 22:16:54.795 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-11-15 22:16:54.483 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. ==================== Memory info =========================== Processor: AMD Phenom(tm) II X4 955 Processor Percentage of memory in use: 49% Total physical RAM: 4093.55 MB Available physical RAM: 2051.87 MB Total Pagefile: 8591.73 MB Available Pagefile: 6424.21 MB Total Virtual: 8192 MB Available Virtual: 8191.82 MB ==================== Drives ================================ Drive c: (System SSD) (Fixed) (Total:111.69 GB) (Free:26.57 GB) NTFS Drive f: (Daten HDD) (Fixed) (Total:76.32 GB) (Free:35.84 GB) NTFS Drive g: (System-reserviert) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[System with boot components (obtained from reading drive)] ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 76.3 GB) (Disk ID: 4A7D4A7E) Partition 1: (Active) - (Size=76.3 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: D0A07874) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=111.7 GB) - (Type=07 NTFS) ==================== End Of Log ============================ Dafür funktioniert Firefox nicht mehr und stürzt prompt beim Start ab, aber das sollte ich irgendwie alleine hinkriegen. DAnke, schrauber! |
14.12.2014, 11:35 | #4 |
/// the machine /// TB-Ausbilder | Script-Host konnte nicht initialisiert werden Schalte mal die Hardwarebeschleunigung ab in FF.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
14.12.2014, 12:07 | #5 |
| Script-Host konnte nicht initialisiert werden Ah, interessanter Tipp, den kannte ich noch nicht. Hat allerdings keine Auswirkungen. Na, zum Geier mit Firefox und seinen Mätzchen, es ist an der Zeit auf Chrome umzusteigen. |
14.12.2014, 18:20 | #6 |
/// the machine /// TB-Ausbilder | Script-Host konnte nicht initialisiert werden Firefox is irgendwie zickig im Moment.
__________________ --> Script-Host konnte nicht initialisiert werden |
Themen zu Script-Host konnte nicht initialisiert werden |
ergebnis, erhalte, fehler, fehlercode 0x80070002, fehlercode 0x81000006, fehlercode 0xc0000005, fehlercode windows, fehlermeldung, initialisiert, komplette, konnte, lieben, nichts, prima, probleme, profis, rechner, script, thanks, traurig, trojaner, vermutlich, version, videos |