So, heute wieder ein Stück weiter...
Hier also der Text aus der FRST:
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 25-06-2013 01
Ran by *** (administrator) on 26-06-2013 19:11:46
Running from C:\Users\***\Desktop
Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
(ATI Technologies Inc.) C:\Windows\system32\Ati2evxx.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(ATI Technologies Inc.) C:\Windows\system32\Ati2evxx.exe
(Avira GmbH) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Agere Systems) C:\Windows\system32\agrsmsvc.exe
(Avira GmbH) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(G DATA Software AG) C:\Program Files\Common Files\G DATA\AVKProxy\AVKProxy.exe
() C:\Program Files\Anti-Virus Profi-Paket\AVK\AVKService.exe
(G DATA Software AG) C:\Program Files\Anti-Virus Profi-Paket\AVK\AVKWCtl.exe
(TOSHIBA CORPORATION) C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
(Toshiba Europe GmbH) C:\Program Files\Toshiba TEMPRO\TempoSVC.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe
(TOSHIBA Corporation) C:\Windows\system32\TODDSrv.exe
(TOSHIBA Corporation) c:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
(TOSHIBA Corporation) c:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe
(Ulead Systems, Inc.) C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
(Toshiba) C:\Program Files\TOSHIBA\SmartFaceV\SmartFaceVWatchSrv.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(TOSHIBA CORPORATION) C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
(Toshiba Europe GmbH) C:\Program Files\Toshiba TEMPRO\Toshiba.Tempo.UI.TrayApplication.exe
(Chicony) C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
(Avira GmbH) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
() C:\Program Files\Camera Assistant Software for Toshiba\CEC_MAIN.exe
(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe
(TOSHIBA) C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(TOSHIBA CORPORATION) C:\Program Files\TOSHIBA\ConfigFree\CFSwMgr.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\system32\wuauclt.exe
(Microsoft Corporation.) C:\Program Files\Microsoft\BingBar\7.1.355.0\SeaPort.exe
(Tandem Verlag) C:\Program Files\Anti-Virus Profi-Paket\AVK\AVK.exe
(Microsoft Corporation) C:\Windows\system32\conime.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [61440 2008-01-21] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [RtHDVCpl] RtHDVCpl.exe [x]
HKLM\...\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1029416 2007-12-06] (Synaptics, Inc.)
HKLM\...\Run: [NDSTray.exe] NDSTray.exe [x]
HKLM\...\Run: [cfFncEnabler.exe] cfFncEnabler.exe [x]
HKLM\...\Run: [Toshiba TEMPO] C:\Program Files\Toshiba TEMPRO\Toshiba.Tempo.UI.TrayApplication.exe [103824 2008-08-26] (Toshiba Europe GmbH)
HKLM\...\Run: [Camera Assistant Software] "C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe" /start [417792 2008-04-29] (Chicony)
HKLM\...\Run: [TPwrMain] %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE [431456 2008-01-17] (TOSHIBA Corporation)
HKLM\...\Run: [HSON] %ProgramFiles%\TOSHIBA\TBS\HSON.exe [54608 2007-10-31] (TOSHIBA Corporation)
HKLM\...\Run: [SmoothView] %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe [509816 2008-01-25] (TOSHIBA Corporation)
HKLM\...\Run: [00TCrdMain] %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe [716800 2008-03-19] (TOSHIBA Corporation)
HKLM\...\Run: [Skytel] Skytel.exe [x]
HKLM\...\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min [209153 2009-03-02] (Avira GmbH)
HKLM\...\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM\...\Run: [] [x]
HKCU\...\Run: [TOSCDSPD] TOSCDSPD.EXE [x]
HKCU\...\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKU\Default\...\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe [ 2008-04-24] (TOSHIBA)
HKU\Default User\...\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe [ 2008-04-24] (TOSHIBA)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=TSEE&bmod=TSEE;
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/ig/redirectdomain?brand=TSEE&bmod=TSEE
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=TSEE&bmod=TSEE;
SearchScopes: HKCU - {70D46D94-BF1E-45ED-B567-48701376298E} URL = hxxp://127.0.0.1:4664/search&s=y_wcGk8i4j4i0iIyeU2YWtkT_SA?q={searchTerms}
BHO: G DATA WebFilter - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Program Files\Anti-Virus Profi-Paket\Webfilter\AVKWebIE.dll ()
BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll (Sun Microsystems, Inc.)
BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\7.1.355.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM - G DATA WebFilter - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Program Files\Anti-Virus Profi-Paket\Webfilter\AVKWebIE.dll ()
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files\Microsoft\BingBar\7.1.355.0\BingExt.dll" No File
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\587m9k43.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin: @google.com/npPicasa2,version=2.0.0 - C:\Program Files\Picasa2\npPicasa2.dll No File
FF Plugin: @google.com/npPicasa3,version=3.0.0 - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Extension: Bitdefender QuickScan - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\587m9k43.default\Extensions\{e001c731-5e37-4538-a5cb-8168736a2360}
FF Extension: No Name - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\587m9k43.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}.xpi
========================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [108289 2009-05-13] (Avira GmbH)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [185089 2009-07-21] (Avira GmbH)
R2 AVKProxy; C:\Program Files\Common Files\G DATA\AVKProxy\AVKProxy.exe [1089608 2008-12-18] (G DATA Software AG)
R2 AVKService; C:\Program Files\Anti-Virus Profi-Paket\AVK\AVKService.exe [386120 2008-12-18] ()
R2 AVKWCtl; C:\Program Files\Anti-Virus Profi-Paket\AVK\AVKWCtl.exe [1185496 2008-09-08] (G DATA Software AG)
R2 ConfigFree Service; C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe [40960 2008-04-17] (TOSHIBA CORPORATION)
S3 GoogleDesktopManager-110309-193829; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [30192 2009-11-21] (Google)
R3 SmartFaceVWatchSrv; C:\Program Files\TOSHIBA\SmartFaceV\SmartFaceVWatchSrv.exe [73728 2008-04-24] (Toshiba)
R2 TempoMonitoringService; C:\Program Files\Toshiba TEMPRO\TempoSVC.exe [99720 2008-08-26] (Toshiba Europe GmbH)
R2 TOSHIBA SMART Log Service; c:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe [126976 2007-12-03] (TOSHIBA Corporation)
R2 UleadBurningHelper; C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [49152 2006-08-23] (Ulead Systems, Inc.)
==================== Drivers (Whitelisted) ====================
R1 avgio; C:\Program Files\Avira\AntiVir Desktop\avgio.sys [11608 2009-02-13] (Avira GmbH)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [56816 2010-02-19] (Avira GmbH)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [96104 2009-03-30] (Avira GmbH)
R3 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [48712 2009-03-15] (G DATA Software AG)
R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd32.sys [40392 2009-03-15] (G DATA Software AG)
R1 GRD; C:\Windows\system32\drivers\GRD.sys [29128 2009-03-16] (G DATA Software)
R3 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [32200 2009-03-15] (G DATA Software AG)
S3 RTHDMIAzAudService; C:\Windows\System32\drivers\RtHDMIV.sys [141408 2008-02-27] (Realtek Semiconductor Corp.)
R3 RTL8187B; C:\Windows\System32\DRIVERS\RTL8187B.sys [290304 2007-12-26] (Realtek Semiconductor Corporation )
R1 RtlProt; C:\Windows\System32\DRIVERS\rtlprot.sys [25896 2007-04-23] (Windows (R) Codename Longhorn DDK provider)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2009-05-11] (Avira GmbH)
R3 UVCFTR; C:\Windows\System32\Drivers\UVCFTR_S.SYS [18432 2007-12-17] (Chicony Electronics Co., Ltd.)
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-06-26 19:11 - 2013-06-26 19:11 - 00000000 ____D C:\FRST
2013-06-25 12:35 - 2013-05-03 00:03 - 03603832 ____A (Microsoft Corporation) C:\Windows\System32\ntkrnlpa.exe
2013-06-25 12:35 - 2013-05-03 00:03 - 03551096 ____A (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2013-06-25 12:25 - 2013-06-25 12:25 - 01370263 ____A (Farbar) C:\Users\***\Downloads\FRST(1).exe
2013-06-25 12:21 - 2013-06-25 12:21 - 01370263 ____A (Farbar) C:\Users\***\Desktop\FRST.exe
2013-06-25 10:37 - 2013-05-17 01:08 - 12329984 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-25 10:37 - 2013-05-17 00:49 - 09738752 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-25 10:37 - 2013-05-17 00:39 - 01800704 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-25 10:37 - 2013-05-17 00:28 - 01129472 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-25 10:37 - 2013-05-17 00:28 - 01104384 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-25 10:37 - 2013-05-17 00:27 - 01427968 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-06-25 10:37 - 2013-05-17 00:26 - 00231936 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-06-25 10:37 - 2013-05-17 00:23 - 00065024 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-25 10:37 - 2013-05-17 00:21 - 00717824 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-25 10:37 - 2013-05-17 00:21 - 00142848 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-06-25 10:37 - 2013-05-17 00:20 - 00420864 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-06-25 10:37 - 2013-05-17 00:19 - 00607744 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-25 10:37 - 2013-05-17 00:17 - 01796096 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-25 10:37 - 2013-05-17 00:17 - 00073216 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-06-25 10:37 - 2013-05-17 00:16 - 02382848 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-25 10:37 - 2013-05-17 00:12 - 00176640 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-20 00:46 - 2013-06-20 00:46 - 00032504 ____A C:\Users\***\Desktop\AVSCAN-20130619-223541-8EE56B93.LOG
2013-06-19 21:21 - 2013-06-19 21:21 - 00000000 ____D C:\Users\***\AppData\Roaming\QuickScan
2013-06-19 21:17 - 2013-06-19 21:17 - 00000000 ____D C:\Program Files\ESET
2013-06-19 12:25 - 2013-05-08 06:37 - 00905576 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-06-19 12:25 - 2013-05-02 06:04 - 00443904 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-06-19 12:25 - 2013-05-02 06:03 - 00037376 ____A (Microsoft Corporation) C:\Windows\System32\printcom.dll
2013-06-19 12:25 - 2013-04-24 06:00 - 00985600 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-06-19 12:25 - 2013-04-24 06:00 - 00133120 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-06-19 12:25 - 2013-04-24 06:00 - 00098304 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-06-19 12:25 - 2013-04-24 06:00 - 00041984 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll
2013-06-19 12:25 - 2013-04-24 03:46 - 00812544 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-06-19 12:24 - 2013-04-17 14:30 - 00024576 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll
2013-06-12 12:21 - 2013-06-12 12:21 - 00000911 ____A C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-06-12 12:21 - 2013-06-12 12:21 - 00000000 ____D C:\Users\***\AppData\Roaming\Malwarebytes
2013-06-12 12:21 - 2013-06-12 12:21 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-06-12 12:21 - 2013-06-12 12:21 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-06-12 12:21 - 2013-04-04 14:50 - 00022856 ____A (Malwarebytes Corporation) C:\Windows\System32\Drivers\mbam.sys
2013-06-10 16:20 - 2013-06-10 16:20 - 00001793 ____A C:\Users\Public\Desktop\HP Photo Creations.lnk
2013-06-10 16:20 - 2013-06-10 16:20 - 00000000 ____D C:\ProgramData\Visan
2013-06-10 16:20 - 2013-06-10 16:20 - 00000000 ____D C:\ProgramData\HP Photo Creations
2013-06-10 16:20 - 2013-06-10 16:20 - 00000000 ____D C:\Program Files\HP Photo Creations
2013-06-10 16:19 - 2013-06-19 12:15 - 00000000 ____D C:\Users\***\AppData\Roaming\HpUpdate
2013-06-10 16:19 - 2013-06-10 16:19 - 00002180 ____A C:\Users\Public\Desktop\HP Deskjet 1000 J110 series.lnk
2013-06-10 16:19 - 2013-06-10 16:19 - 00001102 ____A C:\Users\Public\Desktop\Shop für Zubehör - HP Deskjet 1000 J110 series.lnk
2013-06-10 16:17 - 2013-06-10 16:17 - 00000000 ____D C:\ProgramData\HP
2013-06-10 16:16 - 2013-06-10 16:19 - 00000000 ____D C:\Program Files\HP
2013-06-10 16:16 - 2013-06-10 16:16 - 00000057 ____A C:\ProgramData\Ament.ini
2013-06-10 16:15 - 2013-06-10 16:24 - 00000000 ____D C:\Users\***\AppData\Local\HP
==================== One Month Modified Files and Folders ========
2013-06-26 19:11 - 2013-06-26 19:11 - 00000000 ____D C:\FRST
2013-06-26 18:20 - 2012-11-17 21:55 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-06-26 17:51 - 2009-02-10 22:02 - 01431381 ____A C:\Windows\WindowsUpdate.log
2013-06-26 17:50 - 2009-02-11 20:15 - 00163840 ____A C:\Users\***\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-06-26 17:45 - 2006-11-02 15:01 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-06-26 17:45 - 2006-11-02 14:47 - 00003216 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-06-26 17:45 - 2006-11-02 14:47 - 00003216 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-06-26 03:18 - 2006-11-02 15:01 - 00032534 ____A C:\Windows\Tasks\SCHEDLGU.TXT
2013-06-25 16:11 - 2008-01-21 09:16 - 01475854 ____A C:\Windows\System32\PerfStringBackup.INI
2013-06-25 12:41 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\Microsoft.NET
2013-06-25 12:25 - 2013-06-25 12:25 - 01370263 ____A (Farbar) C:\Users\***\Downloads\FRST(1).exe
2013-06-25 12:21 - 2013-06-25 12:21 - 01370263 ____A (Farbar) C:\Users\***\Desktop\FRST.exe
2013-06-25 12:14 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\rescache
2013-06-25 11:02 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\System32\de-DE
2013-06-25 10:40 - 2008-10-08 10:03 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-06-20 00:46 - 2013-06-20 00:46 - 00032504 ____A C:\Users\***\Desktop\AVSCAN-20130619-223541-8EE56B93.LOG
2013-06-20 00:46 - 2006-11-02 13:18 - 00000000 ___RD C:\users\Public
2013-06-19 22:23 - 2010-02-16 15:04 - 00000000 ____D C:\Users\***\AppData\Roaming\Mozilla
2013-06-19 22:17 - 2008-10-07 15:21 - 00000000 ____D C:\Windows\Panther
2013-06-19 21:21 - 2013-06-19 21:21 - 00000000 ____D C:\Users\***\AppData\Roaming\QuickScan
2013-06-19 21:17 - 2013-06-19 21:17 - 00000000 ____D C:\Program Files\ESET
2013-06-19 12:20 - 2012-11-17 21:55 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerApp.exe
2013-06-19 12:20 - 2012-11-17 21:55 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerCPLApp.cpl
2013-06-19 12:15 - 2013-06-10 16:19 - 00000000 ____D C:\Users\***\AppData\Roaming\HpUpdate
2013-06-12 12:21 - 2013-06-12 12:21 - 00000911 ____A C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-06-12 12:21 - 2013-06-12 12:21 - 00000000 ____D C:\Users\***\AppData\Roaming\Malwarebytes
2013-06-12 12:21 - 2013-06-12 12:21 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-06-12 12:21 - 2013-06-12 12:21 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-06-12 12:11 - 2009-05-21 10:16 - 00000680 ____A C:\Users\***\AppData\Local\d3d9caps.dat
2013-06-10 21:28 - 2009-09-08 22:30 - 00000000 ____D C:\Users\***\Desktop\Susannes Dokumente
2013-06-10 16:24 - 2013-06-10 16:15 - 00000000 ____D C:\Users\***\AppData\Local\HP
2013-06-10 16:20 - 2013-06-10 16:20 - 00001793 ____A C:\Users\Public\Desktop\HP Photo Creations.lnk
2013-06-10 16:20 - 2013-06-10 16:20 - 00000000 ____D C:\ProgramData\Visan
2013-06-10 16:20 - 2013-06-10 16:20 - 00000000 ____D C:\ProgramData\HP Photo Creations
2013-06-10 16:20 - 2013-06-10 16:20 - 00000000 ____D C:\Program Files\HP Photo Creations
2013-06-10 16:19 - 2013-06-10 16:19 - 00002180 ____A C:\Users\Public\Desktop\HP Deskjet 1000 J110 series.lnk
2013-06-10 16:19 - 2013-06-10 16:19 - 00001102 ____A C:\Users\Public\Desktop\Shop für Zubehör - HP Deskjet 1000 J110 series.lnk
2013-06-10 16:19 - 2013-06-10 16:16 - 00000000 ____D C:\Program Files\HP
2013-06-10 16:19 - 2009-02-10 23:35 - 00000000 ____D C:\users\***
2013-06-10 16:17 - 2013-06-10 16:17 - 00000000 ____D C:\ProgramData\HP
2013-06-10 16:16 - 2013-06-10 16:16 - 00000057 ____A C:\ProgramData\Ament.ini
2013-05-27 18:25 - 2012-06-30 22:56 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-06-26 17:53
==================== End Of Log ============================ --- --- ---
Und hier von der Addition: Code:
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 25-06-2013 01
Ran by *** at 2013-06-26 19:13:18
Running from C:\Users\***\Desktop
Boot Mode: Normal
==========================================================
==================== Installed Programs =======================
Update for Microsoft Office 2007 (KB2508958)
Adobe Flash Player 10 ActiveX (Version: 10.0.32.18)
Adobe Flash Player 11 Plugin (Version: 11.7.700.224)
Adobe Reader 8.1.2 - Deutsch (Version: 8.1.2)
Anti-Virus Profi-Paket (Version: 19.0.0.51)
ATI Catalyst Install Manager (Version: 3.0.664.0)
Avira AntiVir Personal - Free Antivirus
Bing Bar (Version: 7.1.355.0)
Camera Assistant Software for Toshiba (Version: 1.7.193.0508L)
Catalyst Control Center - Branding (Version: 1.00.0000)
Catalyst Control Center Core Implementation (Version: 2008.0422.2139.36895)
Catalyst Control Center Graphics Full Existing (Version: 2008.0422.2139.36895)
Catalyst Control Center Graphics Full New (Version: 2008.0422.2139.36895)
Catalyst Control Center Graphics Light (Version: 2008.0422.2139.36895)
Catalyst Control Center Graphics Previews Vista (Version: 2008.0422.2139.36895)
Catalyst Control Center Localization Chinese Standard (Version: 2008.0422.2139.36895)
Catalyst Control Center Localization Chinese Traditional (Version: 2008.0422.2139.36895)
Catalyst Control Center Localization Czech (Version: 2008.0422.2139.36895)
Catalyst Control Center Localization Danish (Version: 2008.0422.2139.36895)
Catalyst Control Center Localization Dutch (Version: 2008.0422.2139.36895)
Catalyst Control Center Localization Finnish (Version: 2008.0422.2139.36895)
Catalyst Control Center Localization French (Version: 2008.0422.2139.36895)
Catalyst Control Center Localization German (Version: 2008.0422.2139.36895)
Catalyst Control Center Localization Greek (Version: 2008.0422.2139.36895)
Catalyst Control Center Localization Hungarian (Version: 2008.0422.2139.36895)
Catalyst Control Center Localization Italian (Version: 2008.0422.2139.36895)
Catalyst Control Center Localization Japanese (Version: 2008.0422.2139.36895)
Catalyst Control Center Localization Korean (Version: 2008.0422.2139.36895)
Catalyst Control Center Localization Norwegian (Version: 2008.0422.2139.36895)
Catalyst Control Center Localization Polish (Version: 2008.0422.2139.36895)
Catalyst Control Center Localization Portuguese (Version: 2008.0422.2139.36895)
Catalyst Control Center Localization Russian (Version: 2008.0422.2139.36895)
Catalyst Control Center Localization Spanish (Version: 2008.0422.2139.36895)
Catalyst Control Center Localization Swedish (Version: 2008.0422.2139.36895)
Catalyst Control Center Localization Thai (Version: 2008.0422.2139.36895)
Catalyst Control Center Localization Turkish (Version: 2008.0422.2139.36895)
CCC Help Chinese Standard (Version: 2008.0422.2138.36895)
CCC Help Chinese Traditional (Version: 2008.0422.2138.36895)
CCC Help Czech (Version: 2008.0422.2138.36895)
CCC Help Danish (Version: 2008.0422.2138.36895)
CCC Help Dutch (Version: 2008.0422.2138.36895)
CCC Help English (Version: 2008.0422.2138.36895)
CCC Help Finnish (Version: 2008.0422.2138.36895)
CCC Help French (Version: 2008.0422.2138.36895)
CCC Help German (Version: 2008.0422.2138.36895)
CCC Help Greek (Version: 2008.0422.2138.36895)
CCC Help Hungarian (Version: 2008.0422.2138.36895)
CCC Help Italian (Version: 2008.0422.2138.36895)
CCC Help Japanese (Version: 2008.0422.2138.36895)
CCC Help Korean (Version: 2008.0422.2138.36895)
CCC Help Norwegian (Version: 2008.0422.2138.36895)
CCC Help Polish (Version: 2008.0422.2138.36895)
CCC Help Portuguese (Version: 2008.0422.2138.36895)
CCC Help Russian (Version: 2008.0422.2138.36895)
CCC Help Spanish (Version: 2008.0422.2138.36895)
CCC Help Swedish (Version: 2008.0422.2138.36895)
CCC Help Thai (Version: 2008.0422.2138.36895)
CCC Help Turkish (Version: 2008.0422.2138.36895)
ccc-core-static (Version: 2008.0422.2139.36895)
ccc-utility (Version: 2008.0422.2139.36895)
CD/DVD Drive Acoustic Silencer (Version: 2.02.03)
DVD MovieFactory for TOSHIBA (Version: 5.51)
ESET Online Scanner v3
Google Desktop (Version: 5.9.0911.03589)
HP Deskjet 1000 J110 series - Grundlegende Software für das Gerät (Version: 28.0.1313.0)
HP Deskjet 1000 J110 series Hilfe (Version: 140.0.65.65)
HP Photo Creations (Version: 1.0.0.7702)
HP Update (Version: 5.003.003.001)
Java(TM) 6 Update 3 (Version: 1.6.0.30)
Kidizoom™ PC Anwendungen
Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Access MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office InfoPath MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1)
Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Professional Plus 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (Version: 9.0.30729.5570)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Works (Version: 9.7.0621)
Microsoft XML Parser (Version: 8.20.8730.4)
Mozilla Firefox 21.0 (x86 de) (Version: 21.0)
Mozilla Maintenance Service (Version: 21.0)
MSXML 4.0 SP2 (KB941833) (Version: 4.20.9849.0)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
myphotobook 3.6 (Version: 3.6)
Picasa 3 (Version: 3.8)
Realtek 8169 8168 8101E 8102E Ethernet Driver (Version: 1.00.0000)
Realtek High Definition Audio Driver (Version: 6.0.1.5599)
REALTEK RTL8187B Wireless LAN Driver (Version: Package:1.00.0026 Driver:6.1116.1226.2007)
Realtek USB 2.0 Card Reader (Version: )
Realtek WiFi Protected Setup Library (Version: Package:1.00.0026)
Skins (Version: 2008.0422.2139.36895)
Skype Toolbars (Version: 1.0.4051)
Studie zur Verbesserung von HP Deskjet 1000 J110 series Produkten (Version: 28.0.1313.0)
Synaptics Pointing Device Driver (Version: 10.1.8.0)
TOSHIBA Assist (Version: 2.01.04)
TOSHIBA Benutzerhandbücher (Version: 7.40)
TOSHIBA ConfigFree (Version: 7.2.13)
TOSHIBA Disc Creator (Version: 2.0.1.3)
TOSHIBA DVD PLAYER (Version: 1.30.12)
TOSHIBA Extended Tiles for Windows Mobility Center (Version: 1.01.00)
TOSHIBA Face Recognition (Version: 2.0.2.32)
TOSHIBA Hardware Setup (Version: 2.00.08)
Toshiba Online Product Information (Version: 1.00.0012)
TOSHIBA Recovery Disc Creator (Version: 2.0.0.1b)
TOSHIBA Software Modem (Version: 2.1.77 (SM2177ALD04))
TOSHIBA Supervisor Password (Version: 2.00.04)
Toshiba TEMPRO (Version: 1.2)
TOSHIBA Value Added Package (Version: 1.1.19)
TRDCReminder (Version: 1.00.0015)
TRORDCLauncher (Version: 1.0.0.1)
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 3.5 SP1 (KB2836940) (Version: 1)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596802) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2817327) 32-Bit Edition
Update für Microsoft Office Excel 2007 Help (KB963678)
Update für Microsoft Office Outlook 2007 Help (KB963677)
Update für Microsoft Office Powerpoint 2007 Help (KB963669)
Update für Microsoft Office Word 2007 Help (KB963665)
Urmel aus dem Eis
Windows Media Encoder 9-Reihe
Windows Media Encoder 9-Reihe (Version: 9.00.3374)
Zauberhaus
==================== Restore Points =========================
24-05-2013 21:04:19 Windows Update
27-05-2013 16:30:01 Windows Update
28-05-2013 18:35:19 Windows Update
29-05-2013 12:59:17 Windows Update
30-05-2013 07:47:46 Windows Update
31-05-2013 17:28:39 Windows Update
01-06-2013 09:09:55 Windows Update
02-06-2013 16:18:19 Windows Update
03-06-2013 12:54:52 Windows Update
04-06-2013 15:41:11 Windows Update
05-06-2013 16:09:59 Windows Update
06-06-2013 05:18:06 Windows Update
07-06-2013 05:22:11 Windows Update
09-06-2013 12:27:04 Windows Update
10-06-2013 13:40:38 Windows Update
10-06-2013 14:17:48 Gerätetreiber-Paketinstallation: HP Drucker
10-06-2013 14:18:41 Gerätetreiber-Paketinstallation: Hewlett-Packard USB-Controller
12-06-2013 04:50:24 Windows Update
19-06-2013 10:15:40 Windows Update
25-06-2013 08:29:12 Windows Update
25-06-2013 14:12:18 Windows-Sicherung
26-06-2013 01:00:33 Windows Update
==================== Scheduled Tasks (whitelisted) =============
Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {2ADC51EF-E6DB-44F1-9500-2497FC2ACD6E} - System32\Tasks\HPCustParticipation HP Deskjet 1000 J110 series => C:\Program Files\HP\HP Deskjet 1000 J110 series\Bin\HPCustPartic.exe [2012-10-02] (Hewlett-Packard Co.)
Task: {2FC46D3E-B0A6-495D-8B5A-4A3CB82C30F6} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2008-01-21] (Microsoft Corporation)
Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-21] (Microsoft Corporation)
Task: {58261D03-0D1E-44A8-9F10-FE225277DCB3} - System32\Tasks\Microsoft\Windows\WindowsBackup\CheckFull => C:\Windows\System32\sdclt.exe [2010-12-14] (Microsoft Corporation)
Task: {6C066353-1365-44F3-B1F0-55C88A22391C} - System32\Tasks\{C0397F89-C174-4C81-8854-A164A1FBCEB3} => C:\Program Files\Skype\Phone\Skype.exe No File
Task: {6E813717-4575-4245-A6C7-1BD767CB7887} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-19] (Adobe Systems Incorporated)
Task: {702BCF0D-06AD-4CAA-BE09-F686F8CB28BE} - System32\Tasks\{DBBBA1A2-92CC-4E61-9649-9189FA2D4342} => c:\program files\mozilla firefox\firefox.exe [2013-05-26] (Mozilla Corporation)
Task: {9B2EE208-59D8-430D-9CE9-C5A6B305CA6E} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\schtasks.exe [2008-01-21] (Microsoft Corporation)
Task: {A61555D3-7840-45C1-A5A9-0D49851DE37A} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\OptinNotification => C:\Windows\System32\wsqmcons.exe [2008-01-21] (Microsoft Corporation)
Task: {BD931483-7829-4347-A132-BDC1ED366401} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\System32\sdclt.exe [2010-12-14] (Microsoft Corporation)
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-21] ()
Task: {E823EEE7-E9A0-4CF0-BEF0-73ED12B6C161} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\system32\rundll32.exe [2006-11-02] (Microsoft Corporation)
Task: {F44F4D35-CA23-4A1E-A19B-262D9C5D43DC} - System32\Tasks\Microsoft\Windows\WindowsCalendar\Reminders - *** => C:\Program Files\Windows Calendar\WinCal.exe [2009-04-11] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (06/26/2013 05:46:18 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/26/2013 03:21:12 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/25/2013 11:05:11 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/19/2013 10:13:42 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (06/19/2013 00:11:12 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/12/2013 11:58:16 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/12/2013 06:57:30 AM) (Source: EventSystem) (User: )
Description: 80070005EventSystem.EventSubscription{CEB8B221-89C5-41A8-98CE-79B413BF150B}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}
Error: (06/12/2013 06:47:03 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/10/2013 09:35:41 PM) (Source: EventSystem) (User: )
Description: 80070005EventSystem.EventSubscription{CEB8B221-89C5-41A8-98CE-79B413BF150B}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}
Error: (06/10/2013 09:01:57 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
System errors:
=============
Error: (06/26/2013 07:07:26 PM) (Source: Service Control Manager) (User: )
Description: 30000TrkWks
Error: (06/26/2013 05:45:29 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am 26.06.2013 um 04:01:33 unerwartet heruntergefahren.
Error: (06/26/2013 03:18:09 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: 0x80070643Windows-Tool zum Entfernen bösartiger Software - Juni 2013 (KB890830){00C12B5E-51ED-47B2-ADC7-644FCA66B584}200
Error: (06/25/2013 00:35:47 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: 0x80070643Definition Update for Windows Defender - KB915597 (Definition 1.153.562.0){14A60DD2-D67E-48AF-9C78-ADDD89784EBC}200
Error: (06/25/2013 00:35:46 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: 0x80070643Definition Update for Windows Defender - KB915597 (Definition 1.153.562.0){14A60DD2-D67E-48AF-9C78-ADDD89784EBC}200
Error: (06/25/2013 10:31:46 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: 0x80070643Windows-Tool zum Entfernen bösartiger Software - Juni 2013 (KB890830){00C12B5E-51ED-47B2-ADC7-644FCA66B584}200
Error: (06/25/2013 10:23:47 AM) (Source: DCOM) (User: )
Description: {6295DF2D-35EE-11D1-8707-00C04FD93327}
Error: (06/22/2013 03:00:59 AM) (Source: DCOM) (User: )
Description: {6295DF2D-35EE-11D1-8707-00C04FD93327}
Error: (06/19/2013 09:05:20 PM) (Source: Dhcp) (User: )
Description: Diesem Computer konnte keine Netzwerkadresse durch den DHCP-Server für die Netzwerkkarte mit der Netzwerkadresse 001E3386E1E1 zugeteilt werden. Der folgende Fehler ist aufgetreten:
%%1223. Es wird weiterhin im Hintergrund versucht, eine Adresse vom Netzwerkadressserver (DHCP) zugeteilt zu bekommen.
Error: (06/19/2013 09:04:54 PM) (Source: Dhcp) (User: )
Description: Die IP-Adresslease 192.168.1.177 für die Netzwerkkarte mit der Netzwerkadresse 001E3386E1E1 wurde durch den DHCP-Server 192.168.1.1 abgelehnt (der DHCP-Server hat eine DHCPNACK-Meldung gesendet).
Microsoft Office Sessions:
=========================
CodeIntegrity Errors:
===================================
Date: 2013-06-19 19:43:13.321
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-06-19 19:43:12.760
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-06-19 19:43:12.151
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-06-19 19:43:11.590
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-06-19 19:43:10.903
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-06-19 19:43:10.123
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-06-19 19:43:09.172
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22636_none_b38d4a937f96be60\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-06-19 19:43:08.563
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22636_none_b38d4a937f96be60\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-06-19 19:43:07.877
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22636_none_b38d4a937f96be60\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-06-19 19:43:07.284
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22636_none_b38d4a937f96be60\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Percentage of memory in use: 52%
Total physical RAM: 2813.1 MB
Available physical RAM: 1326.23 MB
Total Pagefile: 5856.73 MB
Available Pagefile: 4084.27 MB
Total Virtual: 2047.88 MB
Available Virtual: 1909.4 MB
==================== Drives ================================
Drive c: (Vista) (Fixed) (Total:148.89 GB) (Free:44.31 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive e: (Data) (Fixed) (Total:147.73 GB) (Free:141.45 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 298 GB) (Disk ID: E43EEFE7)
Partition 1: (Not Active) - (Size=1 GB) - (Type=27)
Partition 2: (Active) - (Size=149 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=148 GB) - (Type=07 NTFS)
==================== End Of Log ============================ Hab mir erlaubt in beiden Dateien den Computernamen durch *** zu ersetzen. ;-)
Nun hoffe ich, dass es tatsächlich ein Fehlalarm war...
LG Kitty |