Danke Schrauber für die schnelle Antwort!
Hier FRST.txt:
FRST Logfile:
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 06-09-2014
Ran by Andreas (ATTENTION: The logged in user is not administrator) on DELL-PC on 06-09-2014 17:35:25
Running from H:\Dokumente und Einstellungen\Andreas\Desktop
Platform: Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 6
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Microsoft Corporation) H:\WINDOWS\system32\wscntfy.exe
(Realtek Semiconductor Corp.) H:\WINDOWS\RTHDCPL.exe
(Dell Inc.) H:\WINDOWS\system32\WLTRAY.EXE
(Hewlett-Packard) H:\Programme\HP\HP Software Update\hpwuSchd2.exe
(ScanSoft, Inc) C:\Programme\opware32.exe
(Apple Computer, Inc.) H:\Programme\QuickTime\qttask.exe
() H:\Programme\Unlocker\UnlockerAssistant.exe
(Citrix Systems, Inc.) H:\Dokumente und Einstellungen\Andreas\Lokale Einstellungen\Anwendungsdaten\Citrix\ICA Client\concentr.exe
() H:\Dokumente und Einstellungen\Andreas\Lokale Einstellungen\Anwendungsdaten\Amazon Music\Amazon Music Helper.exe
(Citrix Systems, Inc.) H:\Dokumente und Einstellungen\Andreas\Lokale Einstellungen\Anwendungsdaten\Program Files\Citrix\Receiver\Receiver.exe
(Citrix Systems, Inc.) H:\Dokumente und Einstellungen\Andreas\Lokale Einstellungen\Anwendungsdaten\Citrix\ICA Client\wfcrun32.exe
(Microsoft Corporation) H:\Programme\Microsoft Office\Office14\OUTLOOK.EXE
(Mozilla Corporation) H:\Programme\Mozilla Firefox\firefox.exe
(Mozilla Corporation) H:\Programme\Mozilla Firefox\plugin-container.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RTHDCPL] => H:\WINDOWS\RTHDCPL.EXE [16859648 2008-01-09] (Realtek Semiconductor Corp.)
HKLM\...\Run: [Alcmtr] => H:\WINDOWS\ALCMTR.EXE [69632 2005-05-03] (Realtek Semiconductor Corp.)
HKLM\...\Run: [Broadcom Wireless Manager UI] => H:\WINDOWS\system32\WLTRAY.exe [2183168 2007-10-09] (Dell Inc.)
HKLM\...\Run: [HP Software Update] => H:\Programme\HP\HP Software Update\HPWuSchd2.exe [49152 2007-10-14] (Hewlett-Packard)
HKLM\...\Run: [Omnipage] => C:\Programme\opware32.exe [49152 2002-02-20] (ScanSoft, Inc)
HKLM\...\Run: [SunJavaUpdateSched] => H:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [QuickTime Task] => H:\Programme\QuickTime\qttask.exe [282624 2007-02-16] (Apple Computer, Inc.)
HKLM\...\Run: [UnlockerAssistant] => H:\Programme\Unlocker\UnlockerAssistant.exe [17408 2010-07-04] ()
HKLM\...\Run: [WinZip Malware Protector_startup] => H:\Programme\WinZip Malware Protector\WinZipMalwareProtector.exe [6390448 2013-07-15] (Nico Mak Computing)
Winlogon\Notify\AtiExtEvent: H:\WINDOWS\system32\Ati2evxx.dll (ATI Technologies Inc.)
HKU\S-1-5-21-527237240-630328440-1801674531-1004\...\Run: [CitrixReceiver] => "H:\Dokumente und Einstellungen\Andreas\Startmenü\Programme\Citrix\Receiver Updater.lnk"
HKU\S-1-5-21-527237240-630328440-1801674531-1004\...\Run: [ConnectionCenter] => H:\Dokumente und Einstellungen\Andreas\Lokale Einstellungen\Anwendungsdaten\Citrix\ICA Client\concentr.exe [395656 2013-06-14] (Citrix Systems, Inc.)
HKU\S-1-5-21-527237240-630328440-1801674531-1004\...\Run: [Amazon Music] => H:\Dokumente und Einstellungen\Andreas\Lokale Einstellungen\Anwendungsdaten\Amazon Music\Amazon Music Helper.exe [3162944 2014-06-24] ()
HKU\S-1-5-21-527237240-630328440-1801674531-1004\...\Run: [QuickTime Task] => H:\Programme\QuickTime\qttask.exe [282624 2007-02-16] (Apple Computer, Inc.)
HKU\S-1-5-21-527237240-630328440-1801674531-1004\...\RunOnce: [{B486C56D-F5DA-3F40-A945-82985CA4BECE}] => H:\Dokumente und Einstellungen\Andreas\Anwendungsdaten\Ygzadi\awbak.exe [283136 2014-07-06] ( )
HKU\S-1-5-21-527237240-630328440-1801674531-1004\...\MountPoints2: {4cbd23d6-2124-11e3-ac8f-00242b65e1e0} - J:\
Startup: H:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Adobe Reader - Schnellstart.lnk
ShortcutTarget: Adobe Reader - Schnellstart.lnk -> C:\Programme\Adobe\Reader\Reader\reader_sl.exe (Adobe Systems Incorporated)
Startup: H:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Adobe Reader Synchronizer.lnk
ShortcutTarget: Adobe Reader Synchronizer.lnk -> C:\Programme\Adobe\Reader\Reader\AdobeCollabSync.exe ()
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
BHO: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> H:\Programme\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO: Adobe PDF Reader -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> H:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> H:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: No Name -> {84FF7BD6-B47F-46F8-9130-01B2696B36CB} -> No File
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> H:\Programme\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> H:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> H:\Programme\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKCU - &Adresse - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - H:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
Toolbar: HKCU - &Links - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - H:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation)
Handler: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - H:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - H:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - H:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - H:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - H:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - H:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
Handler: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - H:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - H:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\MSDAIPP.DLL (Microsoft Corporation)
Filter: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - No File
Filter: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - No File
Filter: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - No File
Filter: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - No File
Filter: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - No File
Filter: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - No File
Filter: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - No File
Filter: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - No File
Filter: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - No File
Filter: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - No File
Filter: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - No File
Filter: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - No File
Filter: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - No File
Filter: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - No File
Filter: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - No File
Filter: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - No File
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
FireFox:
========
FF ProfilePath: H:\Dokumente und Einstellungen\Andreas\Anwendungsdaten\Mozilla\Firefox\Profiles\xhjnu317.default
FF Homepage: hxxp://www.google.de/
FF Plugin: @adobe.com/FlashPlayer -> H:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.55.2 -> H:\Programme\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.55.2 -> H:\Programme\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> H:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> H:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> H:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin HKCU: @Citrix.com/npican -> H:\Dokumente und Einstellungen\Andreas\Lokale Einstellungen\Anwendungsdaten\Citrix\ICA Client\npicaN.dll (Citrix Systems, Inc.)
FF SearchPlugin: H:\Programme\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: H:\Programme\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: H:\Programme\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: H:\Programme\mozilla firefox\browser\searchplugins\yahoo-de.xml
Chrome:
=======
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
Locked "TlntSvr" service could not be unlocked. <===== ATTENTION
Locked "WmiApRpl" service could not be unlocked. <===== ATTENTION
S2 ATI Smart; H:\WINDOWS\system32\ati2sgag.exe [593920 2008-04-09] () [File not signed]
S3 hpqcxs08; H:\Programme\HP\Digital Imaging\bin\hpqcxs08.dll [217088 2007-11-06] (Hewlett-Packard Co.) [File not signed]
S3 idsvc; H:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [864256 2007-10-11] (Microsoft Corporation) [File not signed]
R2 JavaQuickStarterService; H:\Programme\Java\jre7\bin\jqs.exe [182696 2014-04-19] (Oracle Corporation)
S3 MozillaMaintenance; H:\Programme\Mozilla Maintenance Service\maintenanceservice.exe [114288 2014-08-26] (Mozilla Foundation)
R2 Net Driver HPZ12; H:\WINDOWS\system32\HPZinw12.dll [43520 2006-11-08] (Hewlett-Packard) [File not signed]
S4 NetTcpPortSharing; H:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [122880 2007-10-11] (Microsoft Corporation) [File not signed]
S3 ose; H:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE [149352 2010-01-09] (Microsoft Corporation)
R3 osppsvc; H:\Programme\Gemeinsame Dateien\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [4640000 2010-01-09] (Microsoft Corporation)
R2 Pml Driver HPZ12; H:\WINDOWS\system32\HPZipm12.dll [53248 2006-11-08] (Hewlett-Packard) [File not signed]
R2 wltrysvc; H:\WINDOWS\System32\bcmwltry.exe [1921024 2007-10-09] (Dell Inc.) [File not signed]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R3 BCM43XX; H:\WINDOWS\System32\DRIVERS\bcmwl5.sys [1123328 2007-10-09] (Broadcom Corp.)
S3 HPZid412; H:\WINDOWS\System32\DRIVERS\HPZid412.sys [49920 2007-01-17] (HP)
S3 HPZipr12; H:\WINDOWS\System32\DRIVERS\HPZipr12.sys [16496 2007-01-17] (HP)
S3 HPZius12; H:\WINDOWS\System32\DRIVERS\HPZius12.sys [21568 2007-01-17] (HP)
S0 cerc6; No ImagePath
S4 IntelIde; No ImagePath
U5 UnlockerDriver5; H:\Programme\Unlocker\UnlockerDriver5.sys [4096 2010-07-04] () [File not signed]
U1 WS2IFSL; No ImagePath
U3 kxtdapod; \??\H:\DOKUME~1\PROMAS~1\LOKALE~1\Temp\kxtdapod.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-09-06 17:35 - 2014-09-06 17:35 - 00014161 _____ () H:\Dokumente und Einstellungen\Andreas\Desktop\FRST.txt
2014-09-06 17:35 - 2014-09-06 17:35 - 00000000 ____D () H:\FRST
2014-09-06 17:34 - 2014-09-06 17:34 - 01096704 _____ (Farbar) H:\Dokumente und Einstellungen\Andreas\Desktop\FRST.exe
2014-09-06 17:33 - 2014-09-06 17:33 - 00000000 _____ () H:\END
2014-09-06 17:32 - 2014-09-06 17:32 - 00000000 ____D () H:\Dokumente und Einstellungen\Administrator
2014-09-06 17:31 - 2014-09-06 17:31 - 00269176 _____ (Software Installer ) H:\Dokumente und Einstellungen\Andreas\Desktop\Setup.exe
2014-09-06 13:12 - 2011-05-13 12:16 - 00493056 _____ ( datenhaus GmbH) H:\WINDOWS\system32\dhRichClient3.dll
2014-09-06 13:12 - 2011-03-25 20:42 - 00338432 _____ () H:\WINDOWS\system32\sqlite36_engine.dll
2014-09-06 10:23 - 2014-09-06 10:23 - 00000000 ____D () H:\Dokumente und Einstellungen\Andreas\Anwendungsdaten\Nico Mak Computing
2014-09-06 10:08 - 2014-09-06 10:43 - 00000000 ____D () H:\Programme\WinZip Malware Protector
2014-09-06 10:08 - 2014-09-06 10:21 - 00000000 ____D () H:\Dokumente und Einstellungen\All Users\Startmenü\Programme\WinZip Malware Protector
2014-09-06 10:08 - 2014-09-06 10:08 - 00000836 _____ () H:\Dokumente und Einstellungen\All Users\Desktop\WinZip Malware Protector.lnk
2014-09-06 10:08 - 2014-09-06 10:08 - 00000000 ____D () H:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Nico Mak Computing
2014-09-06 10:08 - 2013-03-15 17:01 - 00016384 _____ () H:\WINDOWS\system32\wsusnative32.exe
2014-09-06 08:53 - 2014-09-06 08:53 - 00000000 ____D () H:\Programme\Unlocker
2014-09-06 08:53 - 2014-09-06 08:53 - 00000000 ____D () H:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Babylon
2014-09-06 08:44 - 2014-09-06 08:44 - 00000702 _____ () H:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Mozilla Firefox.lnk
2014-09-06 08:44 - 2014-09-06 08:44 - 00000696 _____ () H:\Dokumente und Einstellungen\All Users\Desktop\Mozilla Firefox.lnk
2014-09-06 08:44 - 2014-09-06 08:44 - 00000000 ____D () H:\Programme\Mozilla Maintenance Service
2014-09-06 08:44 - 2014-09-06 08:44 - 00000000 ____D () H:\Programme\Mozilla Firefox
2014-08-18 21:32 - 2014-08-27 19:45 - 00000000 ____D () H:\Dokumente und Einstellungen\Andreas\Anwendungsdaten\Vecus
2014-08-18 21:32 - 2014-08-18 21:32 - 00000000 ____D () H:\Dokumente und Einstellungen\Andreas\Anwendungsdaten\Ygzadi
2014-08-10 18:00 - 2014-08-10 18:00 - 00000000 ____D () H:\Dokumente und Einstellungen\Andreas\Lokale Einstellungen\Anwendungsdaten\WMTools Downloaded Files
2014-08-10 17:48 - 2014-08-10 17:48 - 00000000 ____D () H:\Dokumente und Einstellungen\Andreas\Anwendungsdaten\Apple Computer
2014-08-10 17:42 - 2014-08-10 17:42 - 00054156 ____H () H:\WINDOWS\QTFont.qfn
2014-08-10 17:42 - 2014-08-10 17:42 - 00001409 _____ () H:\WINDOWS\QTFont.for
2014-08-10 17:41 - 2014-08-10 17:41 - 00001584 _____ () H:\Dokumente und Einstellungen\All Users\Desktop\QuickTime Player.lnk
2014-08-10 17:41 - 2014-08-10 17:41 - 00000000 ____D () H:\Programme\QuickTime
2014-08-10 17:41 - 2014-08-10 17:41 - 00000000 ____D () H:\Dokumente und Einstellungen\All Users\Startmenü\Programme\QuickTime
2014-08-10 17:41 - 2014-08-10 17:41 - 00000000 ____D () H:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Apple Computer
2014-08-10 17:38 - 2014-08-10 17:38 - 00000000 ____D () H:\Programme\IrfanView
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-09-06 17:35 - 2014-09-06 17:35 - 00014161 _____ () H:\Dokumente und Einstellungen\Andreas\Desktop\FRST.txt
2014-09-06 17:35 - 2014-09-06 17:35 - 00000000 ____D () H:\FRST
2014-09-06 17:35 - 2013-09-03 19:46 - 00000000 ____D () H:\Dokumente und Einstellungen\Andreas\Lokale Einstellungen\Temp
2014-09-06 17:34 - 2014-09-06 17:34 - 01096704 _____ (Farbar) H:\Dokumente und Einstellungen\Andreas\Desktop\FRST.exe
2014-09-06 17:33 - 2014-09-06 17:33 - 00000000 _____ () H:\END
2014-09-06 17:33 - 2013-09-02 22:26 - 00000261 _____ () H:\WINDOWS\wiadebug.log
2014-09-06 17:32 - 2014-09-06 17:32 - 00000000 ____D () H:\Dokumente und Einstellungen\Administrator
2014-09-06 17:31 - 2014-09-06 17:31 - 00269176 _____ (Software Installer ) H:\Dokumente und Einstellungen\Andreas\Desktop\Setup.exe
2014-09-06 15:16 - 2013-09-02 22:23 - 00384775 _____ () H:\WINDOWS\setupapi.log
2014-09-06 14:38 - 2014-06-23 17:25 - 00000562 _____ () H:\WINDOWS\Tasks\Amazon Music Helper.job
2014-09-06 14:38 - 2013-09-02 21:54 - 00389667 _____ () H:\WINDOWS\WindowsUpdate.log
2014-09-06 14:37 - 2013-09-07 10:23 - 00000000 ____D () H:\Dokumente und Einstellungen\ProMaster
2014-09-06 13:17 - 2013-09-03 19:45 - 00000006 ____H () H:\WINDOWS\Tasks\SA.DAT
2014-09-06 13:17 - 2013-09-02 22:26 - 00000050 _____ () H:\WINDOWS\wiaservc.log
2014-09-06 13:14 - 2013-09-07 10:31 - 00131072 _____ () H:\WINDOWS\system32\config\OAlerts.evt
2014-09-06 13:14 - 2013-09-03 19:46 - 00000190 ___SH () H:\Dokumente und Einstellungen\Andreas\ntuser.ini
2014-09-06 13:14 - 2013-09-03 19:45 - 00028816 _____ () H:\WINDOWS\SchedLgU.Txt
2014-09-06 10:43 - 2014-09-06 10:08 - 00000000 ____D () H:\Programme\WinZip Malware Protector
2014-09-06 10:27 - 2013-09-03 19:46 - 00000000 ____D () H:\Dokumente und Einstellungen\Andreas
2014-09-06 10:23 - 2014-09-06 10:23 - 00000000 ____D () H:\Dokumente und Einstellungen\Andreas\Anwendungsdaten\Nico Mak Computing
2014-09-06 10:21 - 2014-09-06 10:08 - 00000000 ____D () H:\Dokumente und Einstellungen\All Users\Startmenü\Programme\WinZip Malware Protector
2014-09-06 10:08 - 2014-09-06 10:08 - 00000836 _____ () H:\Dokumente und Einstellungen\All Users\Desktop\WinZip Malware Protector.lnk
2014-09-06 10:08 - 2014-09-06 10:08 - 00000000 ____D () H:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Nico Mak Computing
2014-09-06 10:08 - 2013-09-02 22:24 - 00000000 ___RD () H:\Programme
2014-09-06 10:08 - 2013-09-02 22:23 - 00000000 ____D () H:\Dokumente und Einstellungen\All Users\Startmenü\Programme
2014-09-06 09:03 - 2013-09-16 12:22 - 00000000 ____D () H:\Dokumente und Einstellungen\All Users\Startmenü\Programme\HP
2014-09-06 09:00 - 2013-09-02 22:23 - 00000000 ___RD () H:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart
2014-09-06 08:56 - 2013-09-03 21:07 - 00000000 ___HD () H:\Programme\InstallShield Installation Information
2014-09-06 08:53 - 2014-09-06 08:53 - 00000000 ____D () H:\Programme\Unlocker
2014-09-06 08:53 - 2014-09-06 08:53 - 00000000 ____D () H:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Babylon
2014-09-06 08:44 - 2014-09-06 08:44 - 00000702 _____ () H:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Mozilla Firefox.lnk
2014-09-06 08:44 - 2014-09-06 08:44 - 00000696 _____ () H:\Dokumente und Einstellungen\All Users\Desktop\Mozilla Firefox.lnk
2014-09-06 08:44 - 2014-09-06 08:44 - 00000000 ____D () H:\Programme\Mozilla Maintenance Service
2014-09-06 08:44 - 2014-09-06 08:44 - 00000000 ____D () H:\Programme\Mozilla Firefox
2014-08-27 19:45 - 2014-08-18 21:32 - 00000000 ____D () H:\Dokumente und Einstellungen\Andreas\Anwendungsdaten\Vecus
2014-08-18 21:32 - 2014-08-18 21:32 - 00000000 ____D () H:\Dokumente und Einstellungen\Andreas\Anwendungsdaten\Ygzadi
2014-08-10 22:42 - 2014-05-25 18:59 - 00019968 _____ () H:\Dokumente und Einstellungen\Andreas\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-08-10 18:00 - 2014-08-10 18:00 - 00000000 ____D () H:\Dokumente und Einstellungen\Andreas\Lokale Einstellungen\Anwendungsdaten\WMTools Downloaded Files
2014-08-10 17:48 - 2014-08-10 17:48 - 00000000 ____D () H:\Dokumente und Einstellungen\Andreas\Anwendungsdaten\Apple Computer
2014-08-10 17:42 - 2014-08-10 17:42 - 00054156 ____H () H:\WINDOWS\QTFont.qfn
2014-08-10 17:42 - 2014-08-10 17:42 - 00001409 _____ () H:\WINDOWS\QTFont.for
2014-08-10 17:41 - 2014-08-10 17:41 - 00001584 _____ () H:\Dokumente und Einstellungen\All Users\Desktop\QuickTime Player.lnk
2014-08-10 17:41 - 2014-08-10 17:41 - 00000000 ____D () H:\Programme\QuickTime
2014-08-10 17:41 - 2014-08-10 17:41 - 00000000 ____D () H:\Dokumente und Einstellungen\All Users\Startmenü\Programme\QuickTime
2014-08-10 17:41 - 2014-08-10 17:41 - 00000000 ____D () H:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Apple Computer
2014-08-10 17:38 - 2014-08-10 17:38 - 00000000 ____D () H:\Programme\IrfanView
Some content of TEMP:
====================
H:\Dokumente und Einstellungen\Andreas\Lokale Einstellungen\Temp\cdo61167202.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
H:\WINDOWS\explorer.exe => File is digitally signed
H:\WINDOWS\system32\winlogon.exe => File is digitally signed
H:\WINDOWS\system32\svchost.exe => File is digitally signed
H:\WINDOWS\system32\services.exe => File is digitally signed
H:\WINDOWS\system32\User32.dll => File is digitally signed
H:\WINDOWS\system32\userinit.exe => File is digitally signed
H:\WINDOWS\system32\rpcss.dll => File is digitally signed
H:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
==================== End Of Log ============================
--- --- ---
--- --- ---
Und Addition.txt: Code:
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 06-09-2014
Ran by Andreas at 2014-09-06 17:35:40
Running from H:\Dokumente und Einstellungen\Andreas\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
2.0 (HKLM\...\Free Video to GIF Converter_is1) (Version: 2.0 - www.video-gif-converter.com)
32 Bit HP CIO Components Installer (Version: 1.0.0 - Hewlett-Packard) Hidden
4500_Help (Version: 1.00.0000 - Hewlett-Packard) Hidden
Adobe Flash Player 11 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Reader 8 - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-A80000000002}) (Version: 8.0.0 - Adobe Systems Incorporated)
Amazon Music (HKCU\...\Amazon Amazon Music) (Version: 3.0.5.567 - Amazon Services LLC)
ATI - Dienstprogramm zur Deinstallation der Software (HKLM\...\All ATI Software) (Version: 6.14.10.1021 - )
ATI Display Driver (HKLM\...\ATI Display Driver) (Version: 8.49-080409a-063306C-Dell - )
BPD_HPSU (Version: 1.00.0000 - Hewlett-Packard) Hidden
bpd_scan (Version: 3.00.0000 - Hewlett-Packard) Hidden
BPDSoftware (Version: 50.0.165.000 - Hewlett-Packard) Hidden
BPDSoftware_Ini (Version: 1.00.0000 - Hewlett-Packard) Hidden
BufferChm (Version: 100.0.170.000 - Hewlett-Packard) Hidden
Canon CanoScan Toolbox 4.0 (HKLM\...\Canon CanoScan Toolbox 4.0) (Version: - )
Citrix Authentication Manager (Version: 5.0.0.60597 - Citrix Systems, Inc.) Hidden
Citrix Receiver (DV) (Version: 14.0.0.91 - Citrix Systems, Inc.) Hidden
Citrix Receiver (HDX Flash-Umleitung) (Version: 14.0.0.91 - Citrix Systems, Inc.) Hidden
Citrix Receiver (HKCU\...\CitrixOnlinePluginPackWeb) (Version: 14.0.0.91 - Citrix Systems, Inc.)
Citrix Receiver Inside (Version: 3.4.0.45902 - Citrix Systems, Inc.) Hidden
Citrix Receiver Updater (Version: 4.0.0.45893 - Citrix Systems, Inc.) Hidden
Citrix Receiver(Aero) (Version: 14.0.0.91 - Citrix Systems, Inc.) Hidden
Cliqz (HKLM\...\{5A0C0737-6AFE-4DC6-A8B4-6DFE509ACD75}_is1) (Version: 0.5.22 - Cliqz.com)
Definition update for Microsoft Office 2010 (KB982726) (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{E14AE329-F210-4EDD-B775-290821C66C1F}) (Version: - Microsoft)
Dell Resource CD (HKLM\...\{42929F0F-CE14-47AF-9FC7-FF297A603021}) (Version: 1.00.0000 - Ihr Firmenname)
Dell Wireless WLAN Karte (HKLM\...\Broadcom 802.11b Network Adapter) (Version: 4.170.25.12 - Dell Inc.)
DocProc (Version: 11.0.0.0 - Hewlett-Packard) Hidden
DocProcQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden
eSupportQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden
Fax (Version: 100.0.187.000 - Hewlett-Packard) Hidden
Free MP3 Recorder 1.0 (HKLM\...\{AE84E7FF-4DEC-48EC-BBA9-9A808E48DF8E}_is1) (Version: 1.0 - WordAddin Studio)
GoodSync (HKLM\...\{B26B00DA-2E5D-4CF2-83C5-911198C0F009}) (Version: - Siber Systems)
GPBaseService (Version: 100.0.187.000 - Hewlett-Packard) Hidden
HP Officejet J4500 Series (HKLM\...\{CD0773D5-C18E-495c-B39B-21A96415EDD5}) (Version: 1.0 - HP)
HP Smart Web Printing (HKLM\...\HP Smart Web Printing) (Version: 3.5 - HP)
HP Solution Center 10.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 10.0 - HP)
HPProductAssistant (Version: 100.0.170.000 - Hewlett-Packard) Hidden
IrfanView (remove only) (HKLM\...\IrfanView) (Version: - )
J4500 (Version: 50.0.165.000 - Ihr Firmenname) Hidden
Java 7 Update 55 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217055FF}) (Version: 7.0.550 - Oracle)
Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Microsoft .NET Framework 2.0 Service Pack 1 (HKLM\...\{B508B3F1-A24A-32C0-B310-85786919EF28}) (Version: 2.1.21022 - Microsoft Corporation)
Microsoft .NET Framework 2.0 Service Pack 1 Language Pack - DEU (HKLM\...\{9309DD7E-EBFE-3C95-8B47-30D3A012F606}) (Version: 2.1.21022 - Microsoft Corporation)
Microsoft .NET Framework 3.0 Service Pack 1 (HKLM\...\{2BA00471-0328-3743-93BD-FA813353A783}) (Version: 3.1.21022 - Microsoft Corporation)
Microsoft .NET Framework 3.0 Service Pack 1 Language Pack - DEU (HKLM\...\{A1071AEB-B0EF-3F5F-BC84-83A270EBE496}) (Version: 3.1.21022 - Microsoft Corporation)
Microsoft .NET Framework 3.5 (HKLM\...\Microsoft .NET Framework 3.5) (Version: - Microsoft Corporation)
Microsoft .NET Framework 3.5 (Version: 3.5.21022 - Microsoft Corporation) Hidden
Microsoft .NET Framework 3.5 Language Pack - DEU (HKLM\...\Microsoft .NET Framework 3.5 Language Pack - deu) (Version: - Microsoft Corporation)
Microsoft .NET Framework 3.5 Language Pack - deu (Version: 3.5.21022 - Microsoft Corporation) Hidden
Microsoft Office 2010 Service Pack 1 (SP1) (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{047B0968-E622-4FAA-9B4B-121FA109EDDE}) (Version: - Microsoft)
Microsoft Office 2010 Service Pack 1 (SP1) (Version: - Microsoft) Hidden
Microsoft Office Access MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional 2010 (HKLM\...\Office14.SingleImage) (Version: 14.0.6029.1000 - Microsoft Corporation)
Microsoft Office Proof (English) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Software Update for Web Folders (German) 14 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Mozilla Firefox 30.0 (x86 de) (HKCU\...\Mozilla Firefox 30.0 (x86 de)) (Version: 30.0 - Mozilla)
Mozilla Firefox 32.0 (x86 de) (HKLM\...\Mozilla Firefox 32.0 (x86 de)) (Version: 32.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 32.0 - Mozilla)
OCR Software by I.R.I.S. 10.0 (HKLM\...\HPOCR) (Version: 10.0 - HP)
OmniPage SE (HKLM\...\{6249C22D-E6A8-407B-BA8B-40298848ED94}) (Version: 11.00.0001 - ScanSoft, Inc.)
Online Plug-in (Version: 14.0.0.91 - Citrix Systems, Inc.) Hidden
ProductContext (Version: 50.0.165.000 - Hewlett-Packard) Hidden
QuickTime (HKLM\...\{5E863175-E85D-44A6-8968-82507D34AE7F}) (Version: 7.1.5.120 - Apple Computer, Inc.)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 5.10.0.5548 - Realtek Semiconductor Corp.)
Scan (Version: 10.1.0.0 - Hewlett-Packard) Hidden
SmartWebPrintingOC (Version: 100.0.189.000 - Hewlett-Packard) Hidden
SolutionCenter (Version: 100.0.175.000 - Hewlett-Packard) Hidden
Toolbox (Version: 100.0.170.000 - Hewlett-Packard) Hidden
Unlocker 1.9.2 (HKLM\...\Unlocker) (Version: 1.9.2 - Cedrick Collomb)
WebFldrs XP (Version: 9.50.7523 - Microsoft Corporation) Hidden
WebReg (Version: 100.0.170.000 - Hewlett-Packard) Hidden
WinZip Malware Protector (HKLM\...\WinZip Malware Protector_is1) (Version: 2.1.1000.10798 - WinZip International LLC)
XML Paper Specification Shared Components Language Pack 1.0 (Version: - Microsoft Corporation) Hidden
XML Paper Specification Shared Components Pack 1.0 (Version: - Microsoft Corporation) Hidden
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
==================== Restore Points =========================
Could not list Restore Points. Check "winmgmt" service or repair WMI.
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2008-04-14 14:00 - 2008-04-14 14:00 - 00000820 ____A H:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: H:\WINDOWS\Tasks\Amazon Music Helper.job => H:\Dokumente und Einstellungen\Andreas\Lokale Einstellungen\Anwendungsdaten\Amazon Music\Amazon Music Helper.exe
==================== Loaded Modules (whitelisted) =============
2010-07-04 23:32 - 2010-07-04 23:32 - 00004608 _____ () H:\Programme\Unlocker\UnlockerHook.dll
2013-09-03 21:12 - 2007-10-09 19:17 - 00139264 _____ () H:\WINDOWS\system32\preflib.dll
2010-07-04 21:51 - 2010-07-04 21:51 - 00017408 _____ () H:\Programme\Unlocker\UnlockerAssistant.exe
2014-06-23 17:25 - 2014-06-24 23:24 - 03162944 _____ () H:\Dokumente und Einstellungen\Andreas\Lokale Einstellungen\Anwendungsdaten\Amazon Music\Amazon Music Helper.exe
2011-03-17 00:11 - 2011-03-17 00:11 - 04297568 _____ () H:\Programme\Gemeinsame Dateien\Microsoft Shared\office14\Cultures\office.odf
2010-12-21 01:15 - 2010-12-21 01:15 - 01041248 _____ () H:\Programme\Microsoft Office\Office14\ADDINS\UmOutlookAddin.dll
2014-09-06 08:44 - 2014-08-26 10:14 - 03715184 _____ () H:\Programme\Mozilla Firefox\mozjs.dll
2014-01-12 21:04 - 2014-01-12 21:04 - 16242056 _____ () H:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\22299402.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\22299402.sys => ""="Driver"
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
==================== Faulty Device Manager Devices =============
Name: Ethernet-Controller
Description: Ethernet-Controller
Class Guid: {4D36E97E-E325-11CE-BFC1-08002BE10318}
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (09/06/2014 08:58:15 AM) (Source: MsiInstaller) (EventID: 11905) (User: DELL-PC)
Description: Product: DocMgr -- Error 1905. Module H:\Programme\HP\Digital Imaging\help\hpqdummy.dll failed to unregister. HRESULT -2147220472. Contact your support personnel.
Error: (09/06/2014 08:58:15 AM) (Source: MsiInstaller) (EventID: 11905) (User: DELL-PC)
Description: Product: DocMgr -- Error 1905. Module H:\Programme\HP\Digital Imaging\help\UT_MANAGEDOCUMENTS.chm failed to unregister. HRESULT -2147220474. Contact your support personnel.
Error: (08/29/2014 07:20:29 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlgeschlagene Anwendung plugin-container.exe, Version 30.0.0.5269, fehlgeschlagenes Modul mozalloc.dll, Version 30.0.0.5269, Fehleradresse 0x0000141b.
Das medienspezifische Ereignis für [plugin-container.exe!ws!] wird verarbeitet.
Error: (08/27/2014 09:49:02 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlgeschlagene Anwendung plugin-container.exe, Version 30.0.0.5269, fehlgeschlagenes Modul mozalloc.dll, Version 30.0.0.5269, Fehleradresse 0x0000141b.
Das medienspezifische Ereignis für [plugin-container.exe!ws!] wird verarbeitet.
System errors:
=============
Error: (09/06/2014 02:32:59 PM) (Source: 0) (EventID: 9) (User: )
Description: \Device\Ide\IdePort0
Error: (09/06/2014 02:26:24 PM) (Source: 0) (EventID: 9) (User: )
Description: \Device\Ide\IdePort0
Error: (09/06/2014 02:24:25 PM) (Source: 0) (EventID: 9) (User: )
Description: \Device\Ide\IdePort0
Error: (09/06/2014 02:24:05 PM) (Source: 0) (EventID: 9) (User: )
Description: \Device\Ide\IdePort0
Error: (09/06/2014 02:24:02 PM) (Source: 0) (EventID: 9) (User: )
Description: \Device\Ide\IdePort0
Error: (09/06/2014 02:23:55 PM) (Source: 0) (EventID: 9) (User: )
Description: \Device\Ide\IdePort0
Error: (09/06/2014 02:23:40 PM) (Source: 0) (EventID: 9) (User: )
Description: \Device\Ide\IdePort0
Error: (09/06/2014 02:23:31 PM) (Source: 0) (EventID: 9) (User: )
Description: \Device\Ide\IdePort0
Error: (09/06/2014 02:22:58 PM) (Source: 0) (EventID: 9) (User: )
Description: \Device\Ide\IdePort0
Error: (09/06/2014 02:22:07 PM) (Source: 0) (EventID: 9) (User: )
Description: \Device\Ide\IdePort0
Microsoft Office Sessions:
=========================
Error: (09/06/2014 08:58:15 AM) (Source: MsiInstaller) (EventID: 11905) (User: DELL-PC)
Description: Product: DocMgr -- Error 1905. Module H:\Programme\HP\Digital Imaging\help\hpqdummy.dll failed to unregister. HRESULT -2147220472. Contact your support personnel.(NULL)(NULL)(NULL)
Error: (09/06/2014 08:58:15 AM) (Source: MsiInstaller) (EventID: 11905) (User: DELL-PC)
Description: Product: DocMgr -- Error 1905. Module H:\Programme\HP\Digital Imaging\help\UT_MANAGEDOCUMENTS.chm failed to unregister. HRESULT -2147220474. Contact your support personnel.(NULL)(NULL)(NULL)
Error: (08/29/2014 07:20:29 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-container.exe30.0.0.5269mozalloc.dll30.0.0.52690000141b
Error: (08/27/2014 09:49:02 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-container.exe30.0.0.5269mozalloc.dll30.0.0.52690000141b
==================== Memory info ===========================
Processor: Pentium(R) Dual-Core CPU E5200 @ 2.50GHz
Percentage of memory in use: 36%
Total physical RAM: 2046.1 MB
Available physical RAM: 1305.47 MB
Total Pagefile: 3938.94 MB
Available Pagefile: 3375.59 MB
Total Virtual: 2047.88 MB
Available Virtual: 1949.59 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:100.01 GB) (Free:51.94 GB) NTFS ==>[Drive with boot components (Windows XP)]
Drive h: () (Fixed) (Total:48.92 GB) (Free:36.43 GB) NTFS
==================== MBR & Partition Table ==================
==================== End Of Log ============================
Zitat:
Zitat von schrauber
(Beitrag 1354883)
hi,
1)
Geldgeschäfte mit XP. Mutig......
2)
Hoffentlich nicht bezahlt, das Programm ist Fake.
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
- Starte jetzt FRST.
- Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
- Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
- Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)
| Leider doch - aber es soll mir eine Leere sein... :pfeiff: |
Malwarebytes Anti-Malware 
AdwCleaner auf deinen Desktop.
WARNUNG an die MITLESER: 