| leistikowg | 31.03.2015 15:50 |
Addition
FRST Additions Logfile: Code:
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 11-03-2015
Ran by ralf at 2015-03-31 16:40:46
Running from C:\Users\ralf\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
32 Bit HP CIO Components Installer (Version: 7.1.8 - Hewlett-Packard) Hidden
4500_G510af_Help (Version: 1.00.0000 - Hewlett-Packard) Hidden
4500_G510gm_Help (Version: 1.00.0000 - Hewlett-Packard) Hidden
4500G510af (Version: 140.0.001.000 - Hewlett-Packard) Hidden
4500G510af_Software_Min (Version: 140.0.001.000 - Hewlett-Packard) Hidden
4500G510gm (Version: 140.0.001.000 - Hewlett-Packard) Hidden
4500G510gm_Software_Min (Version: 140.0.001.000 - Hewlett-Packard) Hidden
Acronis Drive Monitor (HKLM\...\{706AE61D-40A4-4F50-8359-FE8F6F7FA461}) (Version: 1.0.566 - Acronis)
Adobe Acrobat 7.0 Professional - English, Français, Deutsch (HKLM\...\Adobe Acrobat 7.0 Professional - English, Français, Deutsch - V) (Version: 7.0.0 - Adobe Systems)
Adobe Flash Player 16 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe GoLive CS2 Deutsch (HKLM\...\Adobe GoLive CS2 Deutsch) (Version: 8.0 - Ihr Firmenname)
Adobe Illustrator CS2 (HKLM\...\Adobe Illustrator CS2) (Version: 12.000.000 - Adobe Systems Inc.)
Adobe InCopy CS2 (HKLM\...\Adobe InCopy CS2 - {C35B3785-531C-4D00-9EFA-44A130BFF73F}) (Version: 004.000.000 - Adobe Systems Incorporated)
Adobe InDesign CS2 (HKLM\...\Adobe InDesign CS2 - {7F4C8163-F259-49A0-A018-2857A90578BC}) (Version: 004.000.000 - Adobe Systems Incorporated)
Adobe Photoshop CS2 (HKLM\...\Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0407-1E257A25E34D}) (Version: 9.0 - Adobe Systems, Inc.)
Adobe Reader XI (11.0.10) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Adobe SVG Viewer 3.0 (HKLM\...\Adobe SVG Viewer) (Version: 3.0 - Adobe Systems, Inc.)
Avery Wizard 4.0 (HKLM\...\{F5D84887-8A6F-4993-8560-B3AA44CB620D}) (Version: 4.0.201 - Avery)
Avira (HKLM\...\{bd538030-07d4-4999-a525-7fafa2483f56}) (Version: 1.1.30.21727 - Avira Operations & Co. KG)
Avira (Version: 1.1.30.21727 - Avira Operations & Co. KG) Hidden
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 15.0.8.656 - Avira)
Bing Bar (HKLM\...\{3365E735-48A6-4194-9988-CE59AC5AE503}) (Version: 7.3.132.0 - Microsoft Corporation)
Blend for Visual Studio 2012 (Version: 5.0.30709.0 - Microsoft Corporation) Hidden
Blend for Visual Studio 2012 DEU resources (Version: 5.0.30709.0 - Microsoft Corporation) Hidden
BufferChm (Version: 140.0.298.000 - Hewlett-Packard) Hidden
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.2.4291 - CDBurnerXP)
Destinations (Version: 140.0.253.000 - Hewlett-Packard) Hidden
DeviceDiscovery (Version: 140.0.298.000 - Hewlett-Packard) Hidden
dm-Fotowelt (HKLM\...\dm-Fotowelt) (Version: 5.1.6 - CEWE Stiftung u Co. KGaA)
DocProc (Version: 140.0.185.000 - Hewlett-Packard) Hidden
Fax (Version: 140.0.307.000 - Hewlett-Packard) Hidden
Firebird 2.0.1 (HKLM\...\FBDBServer_2_0_is1) (Version: - Firebird Project)
GIMP 2.8.4 (HKLM\...\GIMP-2_is1) (Version: 2.8.4 - The GIMP Team)
GlassFish Server Open Source Edition 3.1.2.2 (HKLM\...\nbi-glassfish-mod-3.1.2.23.2) (Version: - )
GPBaseService2 (Version: 140.0.297.000 - Hewlett-Packard) Hidden
HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP Officejet 4500 G510a-f 14.0 Rel. 6 (HKLM\...\{A49C5804-8F24-433C-99B2-9F9F541090C7}) (Version: 14.0 - HP)
HP Officejet 4500 G510g-m 14.0 Rel. 6 (HKLM\...\{C55BF64E-60E1-494C-B1EB-97A008141A55}) (Version: 14.0 - HP)
HP Precisionscan Pro 3.1 (HKLM\...\{6B36DEBF-27D0-4B1E-858D-D397091C6C7D}) (Version: 3.1.4.0000 - Hewlett-Packard)
HP Share-to-Web (HKLM\...\{748F4870-8350-11D3-B0BF-080009FB4A19}) (Version: - )
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Support Solutions Framework (HKLM\...\{96D12EC9-720B-45FB-904C-36D6307A1C76}) (Version: 11.51.0048 - Hewlett-Packard Company)
HP Update (HKLM\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPDiagnosticAlert (Version: 1.00.0000 - Microsoft) Hidden
HPPhotoGadget (Version: 140.0.524.000 - Hewlett-Packard) Hidden
HPProductAssistant (Version: 140.0.298.000 - Hewlett-Packard) Hidden
HPSSupply (Version: 140.0.297.000 - Hewlett-Packard) Hidden
IntelliJ IDEA 12.0.2 (HKLM\...\IntelliJ IDEA 12.0.2) (Version: 123.123 - JetBrains s.r.o.)
Java 7 Update 21 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217017FF}) (Version: 7.0.210 - Oracle)
Java SE Development Kit 7 Update 9 (HKLM\...\{32A3A4F4-B792-11D6-A78A-00B0D0170090}) (Version: 1.7.0.90 - Oracle)
Lexmark 7100 Series (HKLM\...\Lexmark 7100 Series) (Version: - Lexmark International, Inc.)
Lexware Info Service (HKLM\...\{85BF9FDB-BD5B-407C-9CAE-3542E5164783}) (Version: 4.00.00.0075 - Haufe-Lexware GmbH & Co.KG)
MarketResearch (Version: 140.0.212.000 - Hewlett-Packard) Hidden
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)
Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM\...\{5CBFF3F3-2D40-34EE-BCA5-A95BC19E400D}) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5 SDK - DEU Lang Pack (HKLM\...\{98B45D1C-6EB1-460D-A87D-2B60678DC105}) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5 SDK (HKLM\...\{1948E039-EC79-4591-951D-9867A8C14C90}) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft Help Viewer 2.0 (HKLM\...\Microsoft Help Viewer 2.0) (Version: 2.0.50727 - Microsoft Corporation)
Microsoft Help Viewer 2.0 Language Pack - DEU (HKLM\...\Microsoft Help Viewer 2.0 Language Pack - DEU) (Version: 2.0.50727 - Microsoft Corporation)
Microsoft Office Home and Student 2010 (HKLM\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 DEU (HKLM\...\{7CC4FADE-70AC-4560-9418-639D71A4767C}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x86) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio Express 2012 für Windows 8 - DEU (HKLM\...\{9846a706-1070-48d4-9d9a-d5df9dc5fd4b}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft-Maus- und Tastatur-Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.3.188.0 - Microsoft Corporation)
MozBackup 1.5.1 (HKLM\...\MozBackup) (Version: - Pavel Cvrcek)
Mozilla Firefox 16.0.2 (x86 de) (HKLM\...\Mozilla Firefox 16.0.2 (x86 de)) (Version: 16.0.2 - Mozilla)
Mozilla Firefox 36.0.4 (x86 de) (HKU\S-1-5-21-839686267-2604676734-1348665701-1001\...\Mozilla Firefox 36.0.4 (x86 de)) (Version: 36.0.4 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 17.0.8 - Mozilla)
Mozilla Thunderbird 17.0.8 (x86 de) (HKLM\...\Mozilla Thunderbird 17.0.8 (x86 de)) (Version: 17.0.8 - Mozilla)
MyPC Backup (HKLM\...\MyPC Backup) (Version: - MyPC Backup) <==== ATTENTION
NetBeans IDE 7.2.1 (HKLM\...\nbi-nb-base-7.2.1.0.201210100934) (Version: 7.2.1 - NetBeans.org)
Network (Version: 140.0.306.000 - Hewlett-Packard) Hidden
OCR Software by I.R.I.S. 14.0 (HKLM\...\HPOCR) (Version: 14.0 - HP)
OpenOffice.org 3.4.1 (HKLM\...\{2303AEEA-0FA8-4AFD-80A9-8F86BA4B44D2}) (Version: 3.41.9593 - Apache Software Foundation)
QuickSteuer 2012 (HKLM\...\{39AF5C9F-9673-438F-BBF9-47690B989F7F}) (Version: 18.10.00.0006 - Haufe-Lexware GmbH & Co.KG)
QuickSteuer 2013 (HKLM\...\{500342C9-CCD5-4335-89AE-C8A65C0A153B}) (Version: 19.08.00.0004 - Haufe-Lexware GmbH & Co.KG)
QuickSteuer 2014 (HKLM\...\{52DD1288-FA17-4062-8280-532C89A7E2F2}) (Version: 20.06.00.0001 - Haufe-Lexware GmbH & Co.KG)
RehaCom 6.2.1.0 (HKLM\...\RehaCom_is1) (Version: 6.2.1.0 - HASOMED GmbH)
RehaCom Pult-Treiber 1.0.3 (HKLM\...\{A806C6C7-3ECC-447B-978B-3A7590EA3E3D}_is1) (Version: - HASOMED GmbH)
Scan (Version: 140.0.253.000 - Hewlett-Packard) Hidden
Sentinel Protection Installer 7.6.3 (HKLM\...\{954D9E32-BE47-43F4-9BFF-6DB46F17EAF2}) (Version: 7.6.3 - SafeNet, Inc.)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)
Skype Click to Call (HKLM\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype™ 6.11 (HKLM\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
SolutionCenter (Version: 140.0.299.000 - Hewlett-Packard) Hidden
Speed Test 127 (HKLM\...\Speed Test 127) (Version: 3.0.0.0 - BestOffers) <==== ATTENTION
Status (Version: 140.0.342.000 - Hewlett-Packard) Hidden
Toolbox (Version: 140.0.596.000 - Hewlett-Packard) Hidden
TrayApp (Version: 140.0.297.000 - Hewlett-Packard) Hidden
Visual Site Designer (HKLM\...\{5FA08EAD-6532-4609-9E78-DBBEBE9AE6D2}) (Version: 7.0.82 - CoffeeCup Software)
WebReg (Version: 140.0.297.017 - Hewlett-Packard) Hidden
Xvid MPEG-4 Video Codec (HKLM\...\xvid) (Version: - Xvid Development Team)
X-WIN 7.01 (HKLM\...\X-WIN_is1) (Version: - REHAWARE)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
==================== Restore Points =========================
13-03-2015 20:15:23 DCInstallRestorePoint
21-03-2015 07:20:49 Geplanter Prüfpunkt
25-03-2015 10:43:06 Installed HP Update.
30-03-2015 15:39:54 Removed Visual Site Designer
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2013-08-22 08:13 - 2013-08-22 08:13 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {060ACF84-D312-448C-9F8B-ECF603A83742} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-04] (Adobe Systems Incorporated)
Task: {0A180899-C49E-40D9-9950-09ED30C14EB1} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2014-03-19] (Microsoft)
Task: {0CB5DEB9-905E-49DC-A7C0-0B8F3F13841C} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-03-11] (Microsoft Corporation)
Task: {10896612-685F-4233-BE89-7BA98F4F01B4} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation)
Task: {672C650B-7A6A-43A6-B068-0116477BE6D8} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation)
Task: {76F15CA7-421B-49AC-9E0D-B16B66B4FA11} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation)
Task: {94B1F1C4-9235-4DED-8DB2-853F0AB4F49D} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {C973100D-52C9-4BA4-99C3-A9612F10383D} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {DA510330-47DD-407E-88E6-A54A683E958F} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Loaded Modules (whitelisted) ==============
2004-12-14 04:28 - 2004-12-14 04:28 - 01212416 _____ () E:\Program Files\Adobe\Acrobat 7.0\Distillr\AdistRes.DEU
2014-11-13 11:59 - 2014-11-13 11:57 - 00270336 _____ () C:\Program Files\MyPC Backup\AlphaFS.dll
2014-11-13 11:59 - 2014-11-13 11:57 - 00060928 _____ () C:\Program Files\MyPC Backup\LinqBridge.dll
2014-11-13 11:59 - 2014-11-13 11:58 - 00012288 _____ () C:\Program Files\MyPC Backup\GetText.dll
2014-11-13 11:59 - 2014-11-13 11:57 - 00065536 _____ () C:\Program Files\MyPC Backup\BplusDotNet.dll
2013-05-19 15:17 - 2001-07-03 09:17 - 00024576 _____ () C:\Program Files\Hewlett-Packard\HP Share-to-Web\HPGS2WNFPS.DLL
2013-05-19 15:17 - 2001-07-03 09:17 - 00065536 _____ () C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
2013-09-26 13:20 - 2013-09-26 13:20 - 00176168 _____ () C:\Program Files\Lexware\Update Manager\Haufe.Core.Diagnostics.Logging.Targets.Etw.dll
2013-09-26 13:20 - 2013-09-26 13:20 - 00043048 _____ () C:\Program Files\Lexware\Update Manager\Haufe.Core.Diagnostics.Etw.dll
2011-02-24 19:07 - 2011-02-24 19:07 - 00470120 _____ () D:\Programme\DriveMonitor\adm_tray.exe
2011-02-24 18:39 - 2011-02-24 18:39 - 00012128 _____ () C:\Program Files\Common Files\Acronis\DriveMonitor\Common\icudt38.dll
2015-02-04 23:20 - 2015-02-04 23:20 - 16852144 _____ () C:\WINDOWS\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (whitelisted) ===============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-839686267-2604676734-1348665701-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Theme2\img10.jpg
DNS Servers: 192.168.0.1
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-839686267-2604676734-1348665701-1001\...\StartupApproved\StartupFolder: => "OpenOffice.org 3.4.1.lnk"
HKU\S-1-5-21-839686267-2604676734-1348665701-1001\...\StartupApproved\Run: => "Skype"
==================== Accounts: =============================
Administrator (S-1-5-21-839686267-2604676734-1348665701-500 - Administrator - Disabled)
Gast (S-1-5-21-839686267-2604676734-1348665701-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-839686267-2604676734-1348665701-1014 - Limited - Enabled)
ralf (S-1-5-21-839686267-2604676734-1348665701-1001 - Administrator - Enabled) => C:\Users\ralf
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (03/30/2015 09:02:02 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Acrobat.exe, Version: 7.0.0.1333, Zeitstempel: 0x41bee038
Name des fehlerhaften Moduls: Multimedia.api, Version: 7.0.0.1333, Zeitstempel: 0x41bedef3
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00064aa2
ID des fehlerhaften Prozesses: 0x7f4
Startzeit der fehlerhaften Anwendung: 0xAcrobat.exe0
Pfad der fehlerhaften Anwendung: Acrobat.exe1
Pfad des fehlerhaften Moduls: Acrobat.exe2
Berichtskennung: Acrobat.exe3
Vollständiger Name des fehlerhaften Pakets: Acrobat.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Acrobat.exe5
Error: (03/30/2015 08:51:35 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Acrobat.exe, Version: 7.0.0.1333, Zeitstempel: 0x41bee038
Name des fehlerhaften Moduls: Multimedia.api, Version: 7.0.0.1333, Zeitstempel: 0x41bedef3
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00064aa2
ID des fehlerhaften Prozesses: 0x1078
Startzeit der fehlerhaften Anwendung: 0xAcrobat.exe0
Pfad der fehlerhaften Anwendung: Acrobat.exe1
Pfad des fehlerhaften Moduls: Acrobat.exe2
Berichtskennung: Acrobat.exe3
Vollständiger Name des fehlerhaften Pakets: Acrobat.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Acrobat.exe5
Error: (03/30/2015 08:37:12 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm Explorer.EXE, Version 6.3.9600.17667 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 1334
Startzeit: 01d06aeea92945e8
Endzeit: 54165
Anwendungspfad: C:\WINDOWS\Explorer.EXE
Berichts-ID: a6eb64cb-d70b-11e4-b225-00251179ea50
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (03/30/2015 08:35:13 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm Acrobat.exe, Version 7.0.0.1333 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 418
Startzeit: 01d06b180f5bb0ce
Endzeit: 62
Anwendungspfad: E:\Program Files\Adobe\Acrobat 7.0\Acrobat\Acrobat.exe
Berichts-ID: 6e81024e-d70b-11e4-b225-00251179ea50
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (03/30/2015 03:54:43 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (03/30/2015 03:52:48 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (03/30/2015 03:52:43 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (03/30/2015 03:52:29 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (03/30/2015 03:40:00 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
System Error:
Zugriff verweigert
.
Error: (03/30/2015 02:51:24 PM) (Source: Avira Service Host) (EventID: 0) (User: )
Description: Fehler beim Verarbeiten von Sitzungsänderung. System.NullReferenceException: Der Objektverweis wurde nicht auf eine Objektinstanz festgelegt.
bei Avira.OE.ServiceHost.ServiceHost.OnSessionChange(SessionChangeDescription changeDescription)
bei System.ServiceProcess.ServiceBase.DeferredSessionChange(Int32 eventType, Int32 sessionId)
System errors:
=============
Error: (03/31/2015 04:05:39 PM) (Source: DCOM) (EventID: 10010) (User: AZ1)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
Error: (03/31/2015 03:48:13 PM) (Source: DCOM) (EventID: 10000) (User: NT-AUTORITÄT)
Description: C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL -Embedding193{10DA4F3C-CC99-4190-BE4D-58330754E882}
Error: (03/31/2015 03:48:13 PM) (Source: DCOM) (EventID: 10000) (User: NT-AUTORITÄT)
Description: C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL -Embedding193{10DA4F3C-CC99-4190-BE4D-58330754E882}
Error: (03/31/2015 03:48:13 PM) (Source: DCOM) (EventID: 10000) (User: NT-AUTORITÄT)
Description: C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL -Embedding193{10DA4F3C-CC99-4190-BE4D-58330754E882}
Error: (03/31/2015 03:48:12 PM) (Source: DCOM) (EventID: 10000) (User: NT-AUTORITÄT)
Description: C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL -Embedding193{10DA4F3C-CC99-4190-BE4D-58330754E882}
Error: (03/31/2015 03:48:11 PM) (Source: DCOM) (EventID: 10000) (User: NT-AUTORITÄT)
Description: C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL -Embedding193{10DA4F3C-CC99-4190-BE4D-58330754E882}
Error: (03/31/2015 03:48:11 PM) (Source: DCOM) (EventID: 10000) (User: NT-AUTORITÄT)
Description: C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL -Embedding193{10DA4F3C-CC99-4190-BE4D-58330754E882}
Error: (03/31/2015 03:48:10 PM) (Source: DCOM) (EventID: 10000) (User: NT-AUTORITÄT)
Description: C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL -Embedding193{10DA4F3C-CC99-4190-BE4D-58330754E882}
Error: (03/30/2015 09:16:00 PM) (Source: DCOM) (EventID: 10000) (User: NT-AUTORITÄT)
Description: C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL -Embedding193{10DA4F3C-CC99-4190-BE4D-58330754E882}
Error: (03/30/2015 08:59:17 PM) (Source: DCOM) (EventID: 10000) (User: NT-AUTORITÄT)
Description: C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL -Embedding193{10DA4F3C-CC99-4190-BE4D-58330754E882}
Microsoft Office Sessions:
=========================
Error: (03/30/2015 09:02:02 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Acrobat.exe7.0.0.133341bee038Multimedia.api7.0.0.133341bedef3c000000500064aa27f401d06b1b99fcd429E:\Program Files\Adobe\Acrobat 7.0\Acrobat\Acrobat.exeE:\Program Files\Adobe\Acrobat 7.0\Acrobat\plug_ins\Multimedia.api3f4ab898-d70f-11e4-b225-00251179ea50
Error: (03/30/2015 08:51:35 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Acrobat.exe7.0.0.133341bee038Multimedia.api7.0.0.133341bedef3c000000500064aa2107801d06b188e8065eeE:\Program Files\Adobe\Acrobat 7.0\Acrobat\Acrobat.exeE:\Program Files\Adobe\Acrobat 7.0\Acrobat\plug_ins\Multimedia.apic9c5abbc-d70d-11e4-b225-00251179ea50
Error: (03/30/2015 08:37:12 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Explorer.EXE6.3.9600.17667133401d06aeea92945e854165C:\WINDOWS\Explorer.EXEa6eb64cb-d70b-11e4-b225-00251179ea50
Error: (03/30/2015 08:35:13 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Acrobat.exe7.0.0.133341801d06b180f5bb0ce62E:\Program Files\Adobe\Acrobat 7.0\Acrobat\Acrobat.exe6e81024e-d70b-11e4-b225-00251179ea50
Error: (03/30/2015 03:54:43 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\HP\digital imaging\{c55bf64e-60e1-494c-b1eb-97a008141a55}\setup\devinstanceeraser40.exe
Error: (03/30/2015 03:52:48 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\speed test 127\BackgroundHost64.exe
Error: (03/30/2015 03:52:43 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\HP\digital imaging\{a49c5804-8f24-433c-99b2-9f9f541090c7}\setup\devinstanceeraser40.exe
Error: (03/30/2015 03:52:29 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"e:\program files\jetbrains\intellij idea 12.0.2\bin\idea64.exe
Error: (03/30/2015 03:40:00 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description:
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
System Error:
Zugriff verweigert
Error: (03/30/2015 02:51:24 PM) (Source: Avira Service Host) (EventID: 0) (User: )
Description: Fehler beim Verarbeiten von Sitzungsänderung. System.NullReferenceException: Der Objektverweis wurde nicht auf eine Objektinstanz festgelegt.
bei Avira.OE.ServiceHost.ServiceHost.OnSessionChange(SessionChangeDescription changeDescription)
bei System.ServiceProcess.ServiceBase.DeferredSessionChange(Int32 eventType, Int32 sessionId)
CodeIntegrity Errors:
===================================
Date: 2015-03-30 14:19:49.801
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-03-30 14:19:49.332
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-03-30 14:06:10.368
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-03-30 14:06:09.962
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-03-30 12:28:27.566
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-03-27 05:15:39.479
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-03-21 06:20:06.506
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-03-21 06:20:06.506
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-03-21 06:20:06.162
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-03-21 06:20:06.162
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Memory info ===========================
Processor: AMD Athlon(tm) II X2 250 Processor
Percentage of memory in use: 40%
Total physical RAM: 3327.3 MB
Available physical RAM: 1966.92 MB
Total Pagefile: 3903.3 MB
Available Pagefile: 2129.06 MB
Total Virtual: 2047.88 MB
Available Virtual: 1855.05 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:244.14 GB) (Free:200.06 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Volume) (Fixed) (Total:24.41 GB) (Free:7.9 GB) NTFS
Drive e: (Volume) (Fixed) (Total:662.96 GB) (Free:578.75 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: D769902F)
Partition 1: (Active) - (Size=244.1 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=24.4 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=663 GB) - (Type=07 NTFS)
==================== End Of Log ============================
--- --- ---
Bei anderen Malware-Detektoren gab es keine Funde, die ich dir schicken könnte. |
FRST 32-Bit | FRST 64-Bit
Lesestoff:
Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
AdwCleaner auf deinen Desktop.
dann auf 
und dann auf 
. 