FRST Logfile:
FRST Logfile:
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 04-07-2013
Ran by Schline (administrator) on 08-07-2013 08:48:14
Running from C:\Users\Schline\Downloads
Microsoft Windows 7 Enterprise (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkUserAgent.exe
(Check Point Software Technologies) C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
() C:\Windows\system32\dmwu.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(Iminent) C:\Program Files\Common Files\Umbrella\umbrella.exe
(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkUI.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Geek Software GmbH) C:\Program Files\PDF24\pdf24.exe
(Elaborate Bytes AG) C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
() C:\Users\Schline\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
() C:\Windows\System32\jmdp\stij.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
(Adobe Systems Incorporated) C:\Program Files\Adobe\Reader 10.0\Reader\AcroRd32.exe
(Adobe Systems Incorporated) C:\Program Files\Adobe\Reader 10.0\Reader\AcroRd32.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [ZoneAlarm] "C:\Program Files\CheckPoint\ZoneAlarm\zatray.exe" [73392 2012-08-29] (Check Point Software Technologies LTD)
HKLM\...\Run: [NVHotkey] rundll32.exe C:\Windows\system32\nvHotkey.dll,Start [487232 2011-10-15] (NVIDIA Corporation)
HKLM\...\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min [348664 2012-07-18] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [ISW] [x]
HKLM\...\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" [253816 2013-03-12] (Oracle Corporation)
HKLM\...\Run: [PDFPrint] C:\Program Files\PDF24\pdf24.exe [162856 2013-03-20] (Geek Software GmbH)
HKLM\...\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s [88984 2013-03-10] (Elaborate Bytes AG)
HKLM\...\Run: [Iminent] C:\Program Files\Iminent\Iminent.exe /warmup "F77F87E5-A6BD-4922-A530-EDF63D7E9F8C" [x]
HKLM\...\Run: [IminentMessenger] C:\Program Files\Iminent\Iminent.Messengers.exe [x]
HKCU\...\Run: [AmazonMP3DownloaderHelper] C:\Users\Schline\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-09] ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.certified-toolbar.com?si=46364&st=home&tid=3869&ver=3.2&ts=1373094065492&tguid=46364-3869-1373094065492-9E43A7F4C96C9D053367360F98EB5B90
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://search.certified-toolbar.com?si=46364&st=chrome&tid=3869&ver=3.2&ts=1373094065492&tguid=46364-3869-1373094065492-9E43A7F4C96C9D053367360F98EB5B90&q=
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.certified-toolbar.com?si=46364&st=chrome&tid=3869&ver=3.2&ts=1373094065492&tguid=46364-3869-1373094065492-9E43A7F4C96C9D053367360F98EB5B90&q=
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.certified-toolbar.com?si=46364&st=home&tid=3869&ver=3.2&ts=1373094065492&tguid=46364-3869-1373094065492-9E43A7F4C96C9D053367360F98EB5B90
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://search.certified-toolbar.com?si=46364&st=chrome&tid=3869&ver=3.2&ts=1373094065492&tguid=46364-3869-1373094065492-9E43A7F4C96C9D053367360F98EB5B90&q=
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.certified-toolbar.com?si=46364&st=chrome&tid=3869&ver=3.2&ts=1373094065492&tguid=46364-3869-1373094065492-9E43A7F4C96C9D053367360F98EB5B90&q=
URLSearchHook: (No Name) - {fc2b76fc-2132-4d80-a9a3-1f5c6e49066b} - No File
HKLM SearchScopes: DefaultScope {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.certified-toolbar.com?si=46364&st=bs&tid=3869&ver=3.2&ts=1373094065492&tguid=46364-3869-1373094065492-9E43A7F4C96C9D053367360F98EB5B90&q={searchTerms}
SearchScopes: HKLM - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.certified-toolbar.com?si=46364&st=bs&tid=3869&ver=3.2&ts=1373094065492&tguid=46364-3869-1373094065492-9E43A7F4C96C9D053367360F98EB5B90&q={searchTerms}
HKCU SearchScopes: DefaultScope {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = hxxp://search.certified-toolbar.com?si=46364&st=bs&tid=3869&ver=3.2&ts=1373094065492&tguid=46364-3869-1373094065492-9E43A7F4C96C9D053367360F98EB5B90&q={searchTerms}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.delta-search.com/?q={searchTerms}&affID=119816&babsrc=SP_ss&mntrId=881C00225FAA001A
SearchScopes: HKCU - {5AE53F70-D31B-44F6-891B-6B8D5462430F} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=kw&q={searchTerms}&locale=&apn_ptnrs=U3&apn_dtid=OSJ000YYDE&apn_uid=CF081B5A-EE3D-4BED-BA39-2D72013AECA9&apn_sauid=CE42DC4E-FD1A-485E-B3D6-DD3506BD1E1B
SearchScopes: HKCU - {6180AD11-423A-4499-85F0-8A4CD03AD39B} URL = hxxp://search.zonealarm.com/search?Source=Browser&oemCode=ZLN24853501879801-1001&toolbarId=base&affiliateId=1025&Lan=de&utid=881c726e00000000000000225faa001a&q={searchTerms}&r=452
SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.certified-toolbar.com?si=46364&st=bs&tid=3869&ver=3.2&ts=1373094065492&tguid=46364-3869-1373094065492-9E43A7F4C96C9D053367360F98EB5B90&q={searchTerms}
SearchScopes: HKCU - {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = hxxp://search.certified-toolbar.com?si=46364&st=bs&tid=3869&ver=3.2&ts=1373094065492&tguid=46364-3869-1373094065492-9E43A7F4C96C9D053367360F98EB5B90&q={searchTerms}
BHO: Lyrics Monkey - {18CAEA74-C7E8-4D37-967F-1D01351BA398} - C:\Program Files\LyricsMonkey\lyricsmonkey.dll (MNDi Software)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: ZoneAlarm Security Engine Registrar - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
BHO: IMinent WebBooster (BHO) - {A09AB6EB-31B5-454C-97EC-9B294D92EE2A} - C:\Program Files\Iminent\Iminent.WebBooster.InternetExplorer.dll No File
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
Toolbar: HKCU -ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
FireFox:
========
FF ProfilePath: C:\Users\Schline\AppData\Roaming\Mozilla\Firefox\Profiles\pi1aqhek.default
FF user.js: detected! => C:\Users\Schline\AppData\Roaming\Mozilla\Firefox\Profiles\pi1aqhek.default\user.js
FF NewTab: hxxp://search.certified-toolbar.com?si=46364&st=newtab&tid=3869&ver=3.2&ts=1373094065492&tguid=46364-3869-1373094065492-9E43A7F4C96C9D053367360F98EB5B90
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.de/
FF Keyword.URL: hxxp://search.certified-toolbar.com?si=46364&st=chrome&tid=3869&ver=3.2&ts=1373094065492&tguid=46364-3869-1373094065492-9E43A7F4C96C9D053367360F98EB5B90&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin: @checkpoint.com/FFApi - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\npFFApi.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\Schline\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)
FF SearchPlugin: C:\Users\Schline\AppData\Roaming\Mozilla\Firefox\Profiles\pi1aqhek.default\searchplugins\askcom.xml
FF SearchPlugin: C:\Users\Schline\AppData\Roaming\Mozilla\Firefox\Profiles\pi1aqhek.default\searchplugins\delta.xml
FF SearchPlugin: C:\Users\Schline\AppData\Roaming\Mozilla\Firefox\Profiles\pi1aqhek.default\searchplugins\MyStart Search.xml
FF SearchPlugin: C:\Users\Schline\AppData\Roaming\Mozilla\Firefox\Profiles\pi1aqhek.default\searchplugins\Web Search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\babylon.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\Web Search.xml
FF Extension: translator - C:\Users\Schline\AppData\Roaming\Mozilla\Firefox\Profiles\pi1aqhek.default\Extensions\translator@zoli.bod.xpi
FF Extension: No Name - C:\Users\Schline\AppData\Roaming\Mozilla\Firefox\Profiles\pi1aqhek.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF Extension: Default - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] C:\Program Files\Web Assistant\Firefox
FF HKLM\...\Firefox\Extensions: [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}] C:\Program Files\CheckPoint\ZAForceField\TrustChecker
FF Extension: ZoneAlarm Security Engine - C:\Program Files\CheckPoint\ZAForceField\TrustChecker
FF HKLM\...\Firefox\Extensions: [{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}] C:\Program Files\Web Assistant\Firefox
FF HKCU\...\Firefox\Extensions: [lyricsmonkey@mendoni.net] C:\Program Files\LyricsMonkey\FF\
FF Extension: No Name - C:\Program Files\LyricsMonkey\FF\
========================== Services (Whitelisted) =================
S2 ANSYS, Inc. License Manager; C:\Program Files\ANSYS Inc\Shared Files\Licensing\win32\ansysli_server.exe [3949056 2012-09-24] (ANSYS, Inc.)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [86224 2012-07-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [110032 2012-07-18] (Avira Operations GmbH & Co. KG)
R2 DisplayLinkService; C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe [4707688 2009-10-10] (DisplayLink Corp.)
R2 IBUpdaterService; C:\Windows\system32\dmwu.exe [1156400 2013-04-07] ()
R2 IswSvc; C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe [497320 2012-08-30] (Check Point Software Technologies)
R2 nvUpdatusService; C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2253120 2011-10-15] (NVIDIA Corporation)
R2 Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3064000 2012-10-02] (Skype Technologies S.A.)
R2 SProtection; C:\Program Files\Common Files\Umbrella\umbrella.exe [2729512 2013-07-02] (Iminent)
S2 vsmon; C:\Program Files\CheckPoint\ZoneAlarm\vsmon.exe [2445880 2012-08-29] (Check Point Software Technologies LTD)
==================== Drivers (Whitelisted) ====================
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [83392 2012-07-18] (Avira GmbH)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [137928 2012-07-18] (Avira GmbH)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [36000 2012-07-18] (Avira GmbH)
R3 dlkmd; C:\Windows\system32\drivers\dlkmd.sys [164976 2009-10-10] (DisplayLink Corp.)
R0 dlkmdldr; C:\Windows\System32\drivers\dlkmdldr.sys [13936 2009-10-10] (DisplayLink Corp.)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [242240 2013-03-28] (DT Soft Ltd)
R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [30616 2013-03-04] (Elaborate Bytes AG)
R2 ISWKL; C:\Program Files\CheckPoint\ZAForceField\ISWKL.sys [27056 2012-08-30] (Check Point Software Technologies)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2010-06-17] (Avira GmbH)
R1 Vsdatant; C:\Windows\System32\DRIVERS\vsdatant.sys [455256 2011-05-07] (Check Point Software Technologies LTD)
U3 kwtdqkod; \??\C:\Users\Schline\AppData\Local\Temp\kwtdqkod.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-07-08 08:48 - 2013-07-08 08:48 - 00000000 ____D C:\FRST
2013-07-08 08:45 - 2013-07-08 08:45 - 01373373 ____A (Farbar) C:\Users\Schline\Downloads\FRST.exe
2013-07-08 08:16 - 2013-07-08 08:16 - 00088276 ____A C:\Users\Schline\Desktop\log-files.zip
2013-07-08 07:46 - 2013-07-08 07:46 - 01478342 ____A C:\Users\Schline\Desktop\Gmer.txt
2013-07-07 10:49 - 2013-07-07 10:48 - 00377856 ____A C:\Users\Schline\Desktop\gmer_2.1.19163.exe
2013-07-07 10:48 - 2013-07-07 10:48 - 00377856 ____A C:\Users\Schline\Downloads\gmer_2.1.19163.exe
2013-07-07 10:40 - 2013-07-07 10:40 - 00064966 ____A C:\Users\Schline\Desktop\Extras.Txt
2013-07-07 10:36 - 2013-07-07 10:36 - 00080356 ____A C:\Users\Schline\Desktop\OTL.Txt
2013-07-07 10:28 - 2013-07-07 10:28 - 00000546 ____A C:\Users\Schline\Desktop\defogger_disable.log
2013-07-07 10:28 - 2013-07-07 10:28 - 00000156 ____A C:\Users\Schline\defogger_reenable
2013-07-07 10:26 - 2013-07-07 10:26 - 00602112 ____A (OldTimer Tools) C:\Users\Schline\Downloads\OTL.exe
2013-07-07 10:26 - 2013-07-07 10:26 - 00602112 ____A (OldTimer Tools) C:\Users\Schline\Desktop\OTL.exe
2013-07-07 10:26 - 2013-07-07 10:26 - 00050477 ____A C:\Users\Schline\Downloads\Defogger.exe
2013-07-07 10:26 - 2013-07-07 10:26 - 00050477 ____A C:\Users\Schline\Desktop\Defogger.exe
2013-07-06 09:06 - 2013-07-06 09:06 - 00000611 ____A C:\Windows\System32\InstallUtil.InstallLog
2013-07-06 09:06 - 2013-07-06 09:06 - 00000000 ____D C:\Users\Schline\AppData\Roaming\Iminent
2013-07-06 09:06 - 2013-07-06 09:06 - 00000000 ____D C:\Users\Schline\AppData\Roaming\igdhbblpcellaljokkpfhcjlagemhgjl
2013-07-06 09:06 - 2013-07-06 09:06 - 00000000 ____D C:\ProgramData\Iminent
2013-07-06 09:06 - 2013-07-06 09:06 - 00000000 ____D C:\Program Files\Common Files\Umbrella
2013-07-06 09:03 - 2013-07-06 09:03 - 00000000 ____D C:\Users\Schline\AppData\Local\TubeBox
2013-07-06 09:02 - 2013-05-13 05:52 - 00023624 ____A C:\Windows\Launcher.exe
2013-07-06 09:01 - 2013-07-06 09:01 - 00000000 ____D C:\Users\Schline\Documents\TubeBox
2013-07-06 09:01 - 2013-07-06 09:01 - 00000000 ____D C:\Users\Schline\AppData\Local\Freetec
2013-07-06 09:00 - 2013-07-06 09:01 - 00000000 ____D C:\Program Files\SoftwareUpdater
2013-07-06 08:59 - 2013-07-06 08:59 - 00000000 ____D C:\Users\Schline\AppData\Local\DownloadGuide
2013-07-06 08:58 - 2013-07-06 08:58 - 00445032 ____A C:\Users\Schline\Downloads\TubeBox_Setup.exe
2013-07-05 20:12 - 2013-07-05 20:12 - 00022052 ____A C:\Users\Schline\AppData\Roaming\Kommagetrennte Werte (DOS).ADR
2013-07-05 20:00 - 2013-07-05 20:00 - 00017564 ____A C:\Users\Schline\Downloads\WLMContacts.csv
2013-07-05 18:23 - 2013-07-05 18:23 - 02450809 ____A C:\Users\Schline\Downloads\AW Micro.zip
2013-07-05 13:15 - 2013-07-05 13:15 - 00000218 ____A C:\Users\Schline\.recently-used.xbel
2013-06-30 17:11 - 2013-06-30 17:12 - 02848404 ____A C:\Users\Schline\Downloads\Outlook(1).zip
2013-06-28 12:20 - 2013-06-28 12:20 - 00000000 ____D C:\Users\Schline\Desktop\Unfall
2013-06-28 06:24 - 2013-06-28 06:25 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-06-25 15:05 - 2013-06-25 15:05 - 00019342 ____A C:\Users\Schline\AppData\Local\recently-used.xbel
2013-06-21 12:33 - 2013-06-21 12:33 - 00000000 ____D C:\Users\Schline\AppData\Local\PDF24
2013-06-20 20:23 - 2013-06-12 21:48 - 00094632 ____A (Oracle Corporation) C:\Windows\System32\WindowsAccessBridge.dll
2013-06-20 20:23 - 2013-06-12 21:43 - 00263592 ____A (Oracle Corporation) C:\Windows\System32\javaws.exe
2013-06-20 20:23 - 2013-06-12 21:43 - 00175016 ____A (Oracle Corporation) C:\Windows\System32\javaw.exe
2013-06-20 20:23 - 2013-06-12 21:43 - 00175016 ____A (Oracle Corporation) C:\Windows\System32\java.exe
2013-06-20 20:22 - 2013-06-20 20:23 - 00004932 ____A C:\Windows\System32\jupdate-1.7.0_25-b16.log
2013-06-20 20:20 - 2013-06-20 20:20 - 00903592 ____A (Oracle Corporation) C:\Users\Schline\Downloads\jxpiinstall.exe
2013-06-20 15:24 - 2013-06-27 11:02 - 00000000 ____D C:\Users\Schline\Documents\Zitate_Artikel
2013-06-16 10:00 - 2013-06-16 10:00 - 00000000 ____D C:\Users\Schline\Downloads\QuickLook
2013-06-13 09:41 - 2013-06-13 09:41 - 00001027 ____A C:\Users\Schline\Downloads\BAHN_Fahrplan_20130726.ics
2013-06-10 22:58 - 2013-06-10 22:58 - 00161410 ____A C:\Users\Schline\Downloads\_Antragsbestätigung_779032686.pdf_
2013-06-10 22:58 - 2013-06-10 22:58 - 00161410 ____A C:\Users\Schline\Downloads\_Antragsbestätigung_779032686(1).pdf_
==================== One Month Modified Files and Folders ========
2013-07-08 08:48 - 2013-07-08 08:48 - 00000000 ____D C:\FRST
2013-07-08 08:46 - 2012-09-18 06:38 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-08 08:45 - 2013-07-08 08:45 - 01373373 ____A (Farbar) C:\Users\Schline\Downloads\FRST.exe
2013-07-08 08:16 - 2013-07-08 08:16 - 00088276 ____A C:\Users\Schline\Desktop\log-files.zip
2013-07-08 07:46 - 2013-07-08 07:46 - 01478342 ____A C:\Users\Schline\Desktop\Gmer.txt
2013-07-08 06:10 - 2013-04-23 06:18 - 00000392 ____A C:\Windows\Tasks\Lyrics Monkey Update.job
2013-07-07 13:31 - 2011-12-03 15:52 - 01548149 ____A C:\Windows\WindowsUpdate.log
2013-07-07 10:56 - 2009-07-14 06:34 - 00012256 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-07 10:56 - 2009-07-14 06:34 - 00012256 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-07 10:48 - 2013-07-07 10:49 - 00377856 ____A C:\Users\Schline\Desktop\gmer_2.1.19163.exe
2013-07-07 10:48 - 2013-07-07 10:48 - 00377856 ____A C:\Users\Schline\Downloads\gmer_2.1.19163.exe
2013-07-07 10:44 - 2009-07-14 06:53 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-07-07 10:43 - 2012-02-04 14:06 - 00000000 ____D C:\ProgramData\NVIDIA
2013-07-07 10:43 - 2009-07-14 06:39 - 00099052 ____A C:\Windows\setupact.log
2013-07-07 10:40 - 2013-07-07 10:40 - 00064966 ____A C:\Users\Schline\Desktop\Extras.Txt
2013-07-07 10:36 - 2013-07-07 10:36 - 00080356 ____A C:\Users\Schline\Desktop\OTL.Txt
2013-07-07 10:28 - 2013-07-07 10:28 - 00000546 ____A C:\Users\Schline\Desktop\defogger_disable.log
2013-07-07 10:28 - 2013-07-07 10:28 - 00000156 ____A C:\Users\Schline\defogger_reenable
2013-07-07 10:28 - 2011-12-03 15:51 - 00000000 ____D C:\users\Schline
2013-07-07 10:26 - 2013-07-07 10:26 - 00602112 ____A (OldTimer Tools) C:\Users\Schline\Downloads\OTL.exe
2013-07-07 10:26 - 2013-07-07 10:26 - 00602112 ____A (OldTimer Tools) C:\Users\Schline\Desktop\OTL.exe
2013-07-07 10:26 - 2013-07-07 10:26 - 00050477 ____A C:\Users\Schline\Downloads\Defogger.exe
2013-07-07 10:26 - 2013-07-07 10:26 - 00050477 ____A C:\Users\Schline\Desktop\Defogger.exe
2013-07-06 10:00 - 2010-09-14 20:52 - 01611160 ____A C:\Windows\System32\PerfStringBackup.INI
2013-07-06 09:06 - 2013-07-06 09:06 - 00000611 ____A C:\Windows\System32\InstallUtil.InstallLog
2013-07-06 09:06 - 2013-07-06 09:06 - 00000000 ____D C:\Users\Schline\AppData\Roaming\Iminent
2013-07-06 09:06 - 2013-07-06 09:06 - 00000000 ____D C:\Users\Schline\AppData\Roaming\igdhbblpcellaljokkpfhcjlagemhgjl
2013-07-06 09:06 - 2013-07-06 09:06 - 00000000 ____D C:\ProgramData\Iminent
2013-07-06 09:06 - 2013-07-06 09:06 - 00000000 ____D C:\Program Files\Common Files\Umbrella
2013-07-06 09:03 - 2013-07-06 09:03 - 00000000 ____D C:\Users\Schline\AppData\Local\TubeBox
2013-07-06 09:01 - 2013-07-06 09:01 - 00000000 ____D C:\Users\Schline\Documents\TubeBox
2013-07-06 09:01 - 2013-07-06 09:01 - 00000000 ____D C:\Users\Schline\AppData\Local\Freetec
2013-07-06 09:01 - 2013-07-06 09:00 - 00000000 ____D C:\Program Files\SoftwareUpdater
2013-07-06 08:59 - 2013-07-06 08:59 - 00000000 ____D C:\Users\Schline\AppData\Local\DownloadGuide
2013-07-06 08:58 - 2013-07-06 08:58 - 00445032 ____A C:\Users\Schline\Downloads\TubeBox_Setup.exe
2013-07-05 20:12 - 2013-07-05 20:12 - 00022052 ____A C:\Users\Schline\AppData\Roaming\Kommagetrennte Werte (DOS).ADR
2013-07-05 20:00 - 2013-07-05 20:00 - 00017564 ____A C:\Users\Schline\Downloads\WLMContacts.csv
2013-07-05 18:23 - 2013-07-05 18:23 - 02450809 ____A C:\Users\Schline\Downloads\AW Micro.zip
2013-07-05 13:15 - 2013-07-05 13:15 - 00000218 ____A C:\Users\Schline\.recently-used.xbel
2013-07-04 12:51 - 2011-12-15 20:48 - 00000000 ____D C:\Users\Schline\Documents\Briefrohlinge
2013-06-30 17:12 - 2013-06-30 17:11 - 02848404 ____A C:\Users\Schline\Downloads\Outlook(1).zip
2013-06-28 13:46 - 2012-05-06 08:21 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-06-28 12:20 - 2013-06-28 12:20 - 00000000 ____D C:\Users\Schline\Desktop\Unfall
2013-06-28 06:25 - 2013-06-28 06:24 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-06-27 11:02 - 2013-06-20 15:24 - 00000000 ____D C:\Users\Schline\Documents\Zitate_Artikel
2013-06-27 07:01 - 2013-03-28 18:39 - 00000000 ____D C:\Users\Schline\Documents\privat
2013-06-25 15:50 - 2012-06-04 20:22 - 00000000 ____D C:\Users\Schline\.gimp-2.8
2013-06-25 15:05 - 2013-06-25 15:05 - 00019342 ____A C:\Users\Schline\AppData\Local\recently-used.xbel
2013-06-24 16:31 - 2013-03-28 18:48 - 00000000 ____D C:\Users\Schline\Documents\AbcProjekte
2013-06-21 20:30 - 2012-12-30 21:37 - 00000000 ____D C:\Users\Schline\AppData\Roaming\dvdcss
2013-06-21 20:08 - 2011-12-03 18:58 - 00000000 ____D C:\Users\Schline\AppData\Roaming\vlc
2013-06-21 12:33 - 2013-06-21 12:33 - 00000000 ____D C:\Users\Schline\AppData\Local\PDF24
2013-06-20 20:23 - 2013-06-20 20:22 - 00004932 ____A C:\Windows\System32\jupdate-1.7.0_25-b16.log
2013-06-20 20:23 - 2012-10-04 07:58 - 00000000 ____D C:\Program Files\Java
2013-06-20 20:20 - 2013-06-20 20:20 - 00903592 ____A (Oracle Corporation) C:\Users\Schline\Downloads\jxpiinstall.exe
2013-06-16 10:00 - 2013-06-16 10:00 - 00000000 ____D C:\Users\Schline\Downloads\QuickLook
2013-06-13 09:43 - 2013-04-09 21:32 - 00000000 ____D C:\Users\Schline\Documents\AbHongKong
2013-06-13 09:41 - 2013-06-13 09:41 - 00001027 ____A C:\Users\Schline\Downloads\BAHN_Fahrplan_20130726.ics
2013-06-12 21:48 - 2013-06-20 20:23 - 00094632 ____A (Oracle Corporation) C:\Windows\System32\WindowsAccessBridge.dll
2013-06-12 21:48 - 2012-06-24 13:10 - 00867240 ____A (Oracle Corporation) C:\Windows\System32\npDeployJava1.dll
2013-06-12 21:48 - 2012-06-24 13:10 - 00789416 ____A (Oracle Corporation) C:\Windows\System32\deployJava1.dll
2013-06-12 21:43 - 2013-06-20 20:23 - 00263592 ____A (Oracle Corporation) C:\Windows\System32\javaws.exe
2013-06-12 21:43 - 2013-06-20 20:23 - 00175016 ____A (Oracle Corporation) C:\Windows\System32\javaw.exe
2013-06-12 21:43 - 2013-06-20 20:23 - 00175016 ____A (Oracle Corporation) C:\Windows\System32\java.exe
2013-06-12 11:02 - 2013-03-28 18:55 - 00000000 ____D C:\Users\Schline\AppData\Roaming\Ansys
2013-06-12 05:46 - 2012-05-06 20:18 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerApp.exe
2013-06-12 05:46 - 2011-12-03 18:45 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerCPLApp.cpl
2013-06-10 22:58 - 2013-06-10 22:58 - 00161410 ____A C:\Users\Schline\Downloads\_Antragsbestätigung_779032686.pdf_
2013-06-10 22:58 - 2013-06-10 22:58 - 00161410 ____A C:\Users\Schline\Downloads\_Antragsbestätigung_779032686(1).pdf_
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-07-03 08:32
==================== End Of Log ============================
--- --- ---
--- --- ---
--- --- --- Code:
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 04-07-2013
Ran by Schline at 2013-07-08 08:49:49
Running from C:\Users\Schline\Downloads
Boot Mode: Normal
==========================================================
==================== Installed Programs =======================
Update for Microsoft Office 2007 (KB2508958)
7-Zip 9.20
Adobe Flash Player 11 ActiveX (Version: 11.7.700.224)
Adobe Flash Player 11 Plugin (Version: 11.7.700.224)
Adobe Reader X (10.1.7) - Deutsch (Version: 10.1.7)
Amazon MP3-Downloader 1.0.18 (HKCU Version: 1.0.18)
Avira Free Antivirus (Version: 12.1.9.2400)
Bundled software uninstaller
Chinese Simplified Fonts Support For Adobe Reader X (Version: 10.0.0)
DAEMON Tools Lite (Version: 4.47.1.0333)
DisplayLink Core Software (Version: 5.2.21555.0)
DriverTuner 3.0.1.0 (Version: 3.0.0.1)
ElsterFormular (Version: 12.4.1.7699p)
ElsterFormular (Version: 13.0.0.8055p)
FILSHtray (Version: 0.12)
GIMP 2.8.0 (Version: 2.8.0)
IB Updater Service (Version: 3.0.4.6)
Iminent (Version: 6.27.21.0)
Interaktive Sprachreise - Sprachkurs 1 English
Java 7 Update 25 (Version: 7.0.250)
Java Auto Updater (Version: 2.1.9.5)
Laptop Integrated Webcam Driver (1.04.01.1011)
Lyrics Monkey
MATLAB R2011b (Version: 7.13)
maxdome - Online Videothek (Version: 1.0)
Microsoft – Speichern als PDF oder XPS – Add-In für 2007 Microsoft Office-Programme (Version: 12.0.4518.1014)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Access MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Enterprise 2007 (Version: 12.0.6612.1000)
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Groove MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office InfoPath MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Silverlight (Version: 4.1.10329.0)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (Version: 9.0.30411)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
MiKTeX 2.9 (Version: 2.9)
Mozilla Firefox 22.0 (x86 de) (Version: 22.0)
Mozilla Maintenance Service (Version: 22.0)
NVIDIA 3D Vision Treiber 285.62 (Version: 285.62)
NVIDIA Grafiktreiber 285.62 (Version: 285.62)
NVIDIA Install Application (Version: 2.1002.46.235)
NVIDIA PhysX (Version: 9.11.0621)
NVIDIA PhysX-Systemsoftware 9.11.0621 (Version: 9.11.0621)
NVIDIA Stereoscopic 3D Driver (Version: 7.17.12.8562)
NVIDIA Systemsteuerung 285.62 (Version: 285.62)
NVIDIA Update 1.5.20 (Version: 1.5.20)
NVIDIA Update Components (Version: 1.5.20)
OpenOffice.org 3.4 (Version: 3.4.9590)
OpenProj (Version: 1.4.0)
Origin8 (Version: 8.00.000)
OriginPro 8G (Version: 8.00.000)
PDF24 Creator 5.4.0
RICOH R5U8xx Media Driver ver.3.62.02 (Version: 3.62.02)
Samsung UbiSync Monitor (Version: 5.2.21675.0)
Skype Click to Call (Version: 6.3.11079)
Skype™ 5.10 (Version: 5.10.116)
Sweet Home 3D version 3.7
TexMakerX 2.1 (Version: 2.1)
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2687267) 32-Bit Edition
Update für Microsoft Office Excel 2007 Help (KB963678)
Update für Microsoft Office Outlook 2007 Help (KB963677)
Update für Microsoft Office Powerpoint 2007 Help (KB963669)
Update für Microsoft Office Word 2007 Help (KB963665)
VC 9.0 Runtime (Version: 1.0.0)
VirtualCloneDrive
VLC media player 1.1.11 (Version: 1.1.11)
Winamp (Version: 5.622 )
Windows Media Player Firefox Plugin (Version: 1.0.0.8)
ZoneAlarm Firewall (Version: 10.2.078.000)
ZoneAlarm Free Firewall (Version: 10.2.074.000)
ZoneAlarm LTD Toolbar
ZoneAlarm Security (Version: 10.2.078.000)
==================== Restore Points =========================
02-06-2013 10:00:12 Installed Windows Media Player Firefox Plugin
09-06-2013 11:25:27 Geplanter Prüfpunkt
17-06-2013 10:12:45 Geplanter Prüfpunkt
20-06-2013 18:22:20 Installed Java 7 Update 25
30-06-2013 08:26:34 Geplanter Prüfpunkt
06-07-2013 07:00:05 TubeBox
06-07-2013 07:08:27 TubeBox
==================== Hosts content: ==========================
2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {09B580B2-957E-4E9A-BE2B-0D43CB2262DE} - System32\Tasks\Microsoft\Windows\MobilePC\DisplayLink TMM Control
Task: {5089E1BE-C10B-46BE-874D-4C9609B0FEDC} - System32\Tasks\Lyrics Monkey Update => C:\Program Files\LyricsMonkey\LyricsMonkeyUpdater.exe [2013-04-21] (MNDi Software)
Task: {51759ACA-782E-4BC3-BC03-676F28BCCE7A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-12] (Adobe Systems Incorporated)
Task: {561D0952-F220-424A-AF41-8549B3DE9EEB} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe [2010-08-04] (Microsoft Corporation)
Task: {BB810A76-4C39-4788-BE7E-6C9F3E6320A0} - System32\Tasks\FinishInstall igdhbblpcellaljokkpfhcjlagemhgjl => C:\Users\Schline\AppData\Roaming\igdhbblpcellaljokkpfhcjlagemhgjl\MinibarChrome.exe [2013-07-06] (Sien SA)
Task: {CBEF1AAF-5CE6-4F57-A916-DD1A48868F01} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-11] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\Lyrics Monkey Update.job => C:\Program Files\LyricsMonkey\LyricsMonkeyUpdater.exe
==================== Faulty Device Manager Devices =============
Name: TouchChip Fingerprint Coprocessor (WBF advanced mode)
Description: TouchChip Fingerprint Coprocessor (WBF advanced mode)
Class Guid: {53d29ef7-377c-4d14-864b-eb3a85769359}
Manufacturer: UPEK
Service: WUDFRd
Problem: : Windows has stopped this device because it has reported problems. (Code 43)
Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation.
==================== Event log errors: =========================
Application errors:
==================
Error: (07/08/2013 04:21:22 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (07/07/2013 10:55:57 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: gmer_2.1.19163.exe, Version: 2.1.19163.0, Zeitstempel: 0x515d31f0
Name des fehlerhaften Moduls: gmer_2.1.19163.exe, Version: 2.1.19163.0, Zeitstempel: 0x515d31f0
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00012288
ID des fehlerhaften Prozesses: 0xa8
Startzeit der fehlerhaften Anwendung: 0xgmer_2.1.19163.exe0
Pfad der fehlerhaften Anwendung: gmer_2.1.19163.exe1
Pfad des fehlerhaften Moduls: gmer_2.1.19163.exe2
Berichtskennung: gmer_2.1.19163.exe3
Error: (07/06/2013 01:18:59 PM) (Source: Iminent) (User: )
Description: Unexpected exception.
System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.NullReferenceException: Der Objektverweis wurde nicht auf eine Objektinstanz festgelegt.
bei Iminent.Mediator.Server.ApplicationService.<>c__DisplayClassa.<WarmUp>b__9(Composite composite)
--- Ende der internen Ausnahmestapelüberwachung ---
bei System.RuntimeMethodHandle._InvokeMethodFast(IRuntimeMethodInfo method, Object target, Object[] arguments, SignatureStruct& sig, MethodAttributes methodAttributes, RuntimeType typeOwner)
bei System.RuntimeMethodHandle.InvokeMethodFast(IRuntimeMethodInfo method, Object target, Object[] arguments, Signature sig, MethodAttributes methodAttributes, RuntimeType typeOwner)
bei System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture, Boolean skipVisibilityChecks)
bei System.Delegate.DynamicInvokeImpl(Object[] args)
bei System.Windows.Threading.ExceptionWrapper.InternalRealCall(Delegate callback, Object args, Int32 numArgs)
bei MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(Object source, Delegate method, Object args, Int32 numArgs, Delegate catchHandler)
Error: (07/06/2013 09:47:50 AM) (Source: Iminent) (User: )
Description: Unexpected exception.
System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.NullReferenceException: Der Objektverweis wurde nicht auf eine Objektinstanz festgelegt.
bei Iminent.Mediator.Server.ApplicationService.<>c__DisplayClassa.<WarmUp>b__9(Composite composite)
--- Ende der internen Ausnahmestapelüberwachung ---
bei System.RuntimeMethodHandle._InvokeMethodFast(IRuntimeMethodInfo method, Object target, Object[] arguments, SignatureStruct& sig, MethodAttributes methodAttributes, RuntimeType typeOwner)
bei System.RuntimeMethodHandle.InvokeMethodFast(IRuntimeMethodInfo method, Object target, Object[] arguments, Signature sig, MethodAttributes methodAttributes, RuntimeType typeOwner)
bei System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture, Boolean skipVisibilityChecks)
bei System.Delegate.DynamicInvokeImpl(Object[] args)
bei System.Windows.Threading.ExceptionWrapper.InternalRealCall(Delegate callback, Object args, Int32 numArgs)
bei MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(Object source, Delegate method, Object args, Int32 numArgs, Delegate catchHandler)
Error: (07/06/2013 09:08:45 AM) (Source: Iminent) (User: )
Description: Unexpected exception.
System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.NullReferenceException: Der Objektverweis wurde nicht auf eine Objektinstanz festgelegt.
bei Iminent.Mediator.Server.ApplicationService.<>c__DisplayClassa.<WarmUp>b__9(Composite composite)
--- Ende der internen Ausnahmestapelüberwachung ---
bei System.RuntimeMethodHandle._InvokeMethodFast(IRuntimeMethodInfo method, Object target, Object[] arguments, SignatureStruct& sig, MethodAttributes methodAttributes, RuntimeType typeOwner)
bei System.RuntimeMethodHandle.InvokeMethodFast(IRuntimeMethodInfo method, Object target, Object[] arguments, Signature sig, MethodAttributes methodAttributes, RuntimeType typeOwner)
bei System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture, Boolean skipVisibilityChecks)
bei System.Delegate.DynamicInvokeImpl(Object[] args)
bei System.Windows.Threading.ExceptionWrapper.InternalRealCall(Delegate callback, Object args, Int32 numArgs)
bei MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(Object source, Delegate method, Object args, Int32 numArgs, Delegate catchHandler)
Error: (07/06/2013 08:14:29 AM) (Source: MsiInstaller) (User: NT-AUTORITÄT)
Description: Product: Skype Click to Call -- Error 1609. An error occurred while applying security settings. Users is not a valid user or group. This could be a problem with the package, or a problem connecting to a domain controller on the network. Check your network connection and click Retry, or Cancel to end the install. Unable to locate the user's SID, system error 1332(NULL)(NULL)(NULL)(NULL)(NULL)
Error: (06/30/2013 05:08:45 PM) (Source: Application Hang) (User: )
Description: Programm firefox.exe, Version 22.0.0.4917 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 1378
Startzeit: 01ce755fed9c7dfd
Endzeit: 150
Anwendungspfad: C:\Program Files\Mozilla Firefox\firefox.exe
Berichts-ID: f1618c22-e196-11e2-8442-00219bd7df31
Error: (06/30/2013 10:24:18 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (06/28/2013 11:28:19 AM) (Source: MsiInstaller) (User: NT-AUTORITÄT)
Description: Product: Skype Click to Call -- Error 1609. An error occurred while applying security settings. Users is not a valid user or group. This could be a problem with the package, or a problem connecting to a domain controller on the network. Check your network connection and click Retry, or Cancel to end the install. Unable to locate the user's SID, system error 1332(NULL)(NULL)(NULL)(NULL)(NULL)
Error: (06/22/2013 11:42:19 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: firefox.exe, Version: 21.0.0.4879, Zeitstempel: 0x518ec3cc
Name des fehlerhaften Moduls: xul.dll, Version: 21.0.0.4879, Zeitstempel: 0x518ec306
Ausnahmecode: 0xc0000005
Fehleroffset: 0x001c9789
ID des fehlerhaften Prozesses: 0x3cc
Startzeit der fehlerhaften Anwendung: 0xfirefox.exe0
Pfad der fehlerhaften Anwendung: firefox.exe1
Pfad des fehlerhaften Moduls: firefox.exe2
Berichtskennung: firefox.exe3
System errors:
=============
Error: (07/07/2013 10:44:19 AM) (Source: Service Control Manager) (User: )
Description: Dienst "ANSYS, Inc. License Manager" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (07/07/2013 09:32:52 AM) (Source: Service Control Manager) (User: )
Description: Dienst "ANSYS, Inc. License Manager" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (07/06/2013 01:38:55 PM) (Source: BROWSER) (User: )
Description: Das Einlesen der Sicherungsliste durch den Suchdienst schlug auf Transport "\Device\NetBT_Tcpip_{A1FB7EC3-FF7E-463A-9F2C-8ACF9A6BBFF9}" zu oft fehl.
Der Sicherungssuchdienst wird beendet.
Error: (07/06/2013 01:18:31 PM) (Source: Service Control Manager) (User: )
Description: Dienst "ANSYS, Inc. License Manager" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (07/06/2013 09:46:06 AM) (Source: Service Control Manager) (User: )
Description: Dienst "ANSYS, Inc. License Manager" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (07/06/2013 09:06:19 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "SProtection" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
Error: (07/06/2013 08:13:55 AM) (Source: Service Control Manager) (User: )
Description: Dienst "ANSYS, Inc. License Manager" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (07/05/2013 11:19:23 AM) (Source: Service Control Manager) (User: )
Description: Dienst "ANSYS, Inc. License Manager" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (07/05/2013 08:11:09 AM) (Source: Service Control Manager) (User: )
Description: Dienst "ANSYS, Inc. License Manager" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (07/04/2013 11:27:50 AM) (Source: Service Control Manager) (User: )
Description: Dienst "ANSYS, Inc. License Manager" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Microsoft Office Sessions:
=========================
Error: (04/14/2013 11:14:30 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6611.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 14271 seconds with 9360 seconds of active time. This session ended with a crash.
Error: (09/29/2012 10:33:44 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6661.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 3336 seconds with 360 seconds of active time. This session ended with a crash.
Error: (09/06/2012 09:01:12 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 3, Application Name: Microsoft Office PowerPoint, Application Version: 12.0.6600.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 4337 seconds with 2700 seconds of active time. This session ended with a crash.
Error: (08/06/2012 00:03:04 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6661.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 33176 seconds with 1140 seconds of active time. This session ended with a crash.
Error: (08/05/2012 03:45:41 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6611.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 29181 seconds with 1560 seconds of active time. This session ended with a crash.
Error: (08/04/2012 08:32:05 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6611.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 737 seconds with 480 seconds of active time. This session ended with a crash.
Error: (08/04/2012 08:19:09 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6611.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 8681 seconds with 2040 seconds of active time. This session ended with a crash.
Error: (07/29/2012 08:46:02 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6661.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 7512 seconds with 1020 seconds of active time. This session ended with a crash.
Error: (07/26/2012 07:30:25 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6611.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 13227 seconds with 9240 seconds of active time. This session ended with a crash.
Error: (07/13/2012 05:32:34 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6611.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 1938 seconds with 180 seconds of active time. This session ended with a crash.
CodeIntegrity Errors:
===================================
Date: 2013-07-08 07:43:49.196
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-07-08 02:22:55.213
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-07-07 11:34:33.364
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-07-07 11:05:55.633
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-07-07 10:40:57.699
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-07-06 08:35:40.187
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-07-05 11:39:25.313
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-07-03 16:56:38.838
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-07-02 22:56:57.330
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-07-02 10:19:08.067
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Percentage of memory in use: 56%
Total physical RAM: 3582.06 MB
Available physical RAM: 1561.01 MB
Total Pagefile: 7162.4 MB
Available Pagefile: 5104.15 MB
Total Virtual: 2047.88 MB
Available Virtual: 1883.48 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:297.99 GB) (Free:104.34 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 0006AD88)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=298 GB) - (Type=07 NTFS)
==================== End Of Log ============================
|
FRST 32-Bit | FRST 64-Bit
So funktioniert es:
AdwCleaner auf deinen Desktop.
SecurityCheck und:
