Trojaner-Board - ZIP-Anhang eines angebliches Fritzbox-Faxes geöffnet

Hier die beiden Logfiles:

FRST:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 23-01-2014

Ran by Leitung (ATTENTION: The logged in user is not administrator) on KITA-DESKTOP on 23-01-2014 10:22:18

Running from C:\Users\Leitung\Desktop

Microsoft Windows 7 Professional  Service Pack 1 (X86) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 
 

==================== Processes (Whitelisted) ===================
 

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Avira Operations GmbH & Co. KG) C:\Avira\AntiVir Desktop\avgnt.exe

(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe

(Brother Industries, Ltd.) C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe

(MMSOFT Design Ltd.) C:\Program Files\PC Monitor\pcmontask.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(Microsoft Corporation) C:\Windows\System32\StikyNot.exe

(Intel Corporation) C:\Windows\System32\igfxsrvc.exe

(Brother Industries, Ltd.) C:\Program Files\Brother\ControlCenter3\BrccMCtl.exe

(Brother Industries, Ltd.) C:\Program Files\Brother\Brmfcmon\BrMfimon.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [avgnt] - C:\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-18] (Avira Operations GmbH & Co. KG)

HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-05-11] (Adobe Systems Incorporated)

HKLM\...\Run: [RtHDVCpl] - C:\Windows\RtHDVCpl.exe [3784704 2013-09-02] (Realtek Semiconductor)

HKLM\...\Run: [BrMfcWnd] - C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe [1159168 2009-05-26] (Brother Industries, Ltd.)

HKLM\...\Run: [ControlCenter3] - C:\Program Files\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.)

HKLM\...\Run: [PC Monitor Operations] - C:\Program Files\PC Monitor\pcmontask.exe [517592 2014-01-13] (MMSOFT Design Ltd.)

HKLM\...\RunOnce: [*WerKernelReporting] - %SYSTEMROOT%\SYSTEM32\WerFault.exe -k -rq [360448 2009-07-14] (Microsoft Corporation)

HKCU\...\Run: [RESTART_STICKY_NOTES] - C:\Windows\System32\StikyNot.exe [354304 2009-07-14] (Microsoft Corporation)
 

==================== Internet (Whitelisted) ====================
 

BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)

BHO: Avira SearchFree Toolbar plus Web Protection - {41564952-412D-5637-00A7-7A786E7484D7} - "C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" No File

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)

Toolbar: HKLM - Avira SearchFree Toolbar plus Web Protection - {41564952-412D-5637-00A7-7A786E7484D7} - "C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" No File

Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)

Winsock: Catalog9 01 C:\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 02 C:\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 03 C:\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 04 C:\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 05 C:\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 06 C:\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 07 C:\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 08 C:\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 19 C:\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)

Tcpip\Parameters: [DhcpNameServer] 195.50.140.116 195.50.140.246 192.168.5.1
 

FireFox:

========

FF ProfilePath: C:\Users\Leitung\AppData\Roaming\Mozilla\Firefox\Profiles\4cbljrur.default

FF Homepage: kindergruppe10.de

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()

FF Plugin: @microsoft.com/Lync,version=15.0 - C:\Program Files\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)

FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)

FF Extension: Noia 2.0 eXtreme OPT - C:\Users\Leitung\AppData\Roaming\Mozilla\Firefox\Profiles\4cbljrur.default\Extensions\noia2_option@kk.noia [2013-09-14]

FF Extension: Noia 2.0 (eXtreme) - C:\Users\Leitung\AppData\Roaming\Mozilla\Firefox\Profiles\4cbljrur.default\Extensions\{9f08cb5a-76b1-4bcf-aff9-90e1a5d60b1e} [2013-09-14]

FF Extension: Firefox Vista - C:\Users\Leitung\AppData\Roaming\Mozilla\Firefox\Profiles\4cbljrur.default\Extensions\{C1CCF2A6-D735-4817-866A-993A66CF9A3D} [2013-09-14]

FF StartMenuInternet: FIREFOX.EXE - C:\Mozilla Firefox\firefox.exe
 

========================== Services (Whitelisted) =================
 

R2 AntiVirSchedulerService; C:\Avira\AntiVir Desktop\sched.exe [440376 2013-12-18] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-26] (Avira Operations GmbH & Co. KG)

R2 AntiVirWebService; C:\Avira\AntiVir Desktop\AVWEBGRD.EXE [1011768 2013-12-18] (Avira Operations GmbH & Co. KG)

R2 Brother XP spl Service; C:\Windows\system32\brsvc01a.exe [57344 2004-06-13] (brother Industries Ltd)

R2 lmhosts; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)

R2 NlaSvc; C:\Windows\System32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)

R2 nsi; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)

R2 PC Monitor; C:\Program Files\PC Monitor\PCMonitorSrv.exe [696792 2014-01-13] (MMSOFT Design Ltd.)

R2 TeamViewer8; C:\TeamViewer\Version8\TeamViewer_Service.exe [5091168 2013-10-01] (TeamViewer GmbH)

S4 APNMCP; "C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe" [x]
 

==================== Drivers (Whitelisted) ====================
 

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [90400 2013-12-18] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135648 2013-12-18] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-26] (Avira Operations GmbH & Co. KG)

R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [243128 2013-09-02] (Disc Soft Ltd)

S3 Linksys_adapter_H; C:\Windows\System32\DRIVERS\AE1200w7.sys [1092160 2011-03-29] (Broadcom Corporation)

R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-09-02] (Avira GmbH)
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-01-23 10:22 - 2014-01-23 10:22 - 00007659 _____ C:\Users\Leitung\Desktop\FRST.txt

2014-01-23 10:20 - 2014-01-23 10:20 - 00000000 ____D C:\FRST

2014-01-23 09:00 - 2014-01-23 09:00 - 01222144 _____ (Farbar) C:\Users\Leitung\Desktop\FRST.exe

2014-01-23 07:19 - 2014-01-23 07:20 - 00000000 ____D C:\.Trash-999

2014-01-22 15:01 - 2014-01-22 15:00 - 04767744 _____ C:\Users\Leitung\Desktop\inSSIDer31-installer.msi

2014-01-16 16:05 - 2014-01-16 16:05 - 05137408 _____ C:\Users\Leitung\Desktop\K10 - Bewerber EA_2014.ppt

2014-01-08 10:57 - 2014-01-08 10:57 - 00002120 _____ C:\Users\Leitung\Desktop\K 10 Urschleim-Rezepte - Verknüpfung.lnk
 

==================== One Month Modified Files and Folders =======
 

2014-01-23 10:22 - 2014-01-23 10:22 - 00007659 _____ C:\Users\Leitung\Desktop\FRST.txt

2014-01-23 10:22 - 2009-07-14 05:34 - 00014752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-01-23 10:22 - 2009-07-14 05:34 - 00014752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-01-23 10:20 - 2014-01-23 10:20 - 00000000 ____D C:\FRST

2014-01-23 10:20 - 2013-09-02 21:21 - 00000000 ____D C:\TREBER Root

2014-01-23 10:18 - 2009-07-14 05:39 - 00024924 _____ C:\Windows\setupact.log

2014-01-23 10:16 - 2013-09-02 15:41 - 01956244 _____ C:\Windows\WindowsUpdate.log

2014-01-23 10:13 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2014-01-23 09:00 - 2014-01-23 09:00 - 01222144 _____ (Farbar) C:\Users\Leitung\Desktop\FRST.exe

2014-01-23 07:20 - 2014-01-23 07:19 - 00000000 ____D C:\.Trash-999

2014-01-22 22:14 - 2013-09-02 16:01 - 01612484 _____ C:\Windows\system32\PerfStringBackup.INI

2014-01-22 15:00 - 2014-01-22 15:01 - 04767744 _____ C:\Users\Leitung\Desktop\inSSIDer31-installer.msi

2014-01-22 14:56 - 2013-09-02 20:42 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-01-21 17:00 - 2013-09-13 19:55 - 00000000 ____D C:\Users\Leitung\Documents\BRECKERFELD

2014-01-17 13:47 - 2013-09-13 19:55 - 00000000 ____D C:\Users\Leitung\Desktop\ESSENSPLAN+ Einkaufsliste

2014-01-16 16:05 - 2014-01-16 16:05 - 05137408 _____ C:\Users\Leitung\Desktop\K10 - Bewerber EA_2014.ppt

2014-01-15 09:37 - 2013-09-18 15:39 - 00000000 ____D C:\Program Files\PC Monitor

2014-01-13 10:02 - 2013-11-22 10:42 - 00027136 _____ C:\Users\Leitung\Documents\Einschulung 2015.xls

2014-01-08 10:57 - 2014-01-08 10:57 - 00002120 _____ C:\Users\Leitung\Desktop\K 10 Urschleim-Rezepte - Verknüpfung.lnk

2014-01-07 16:23 - 2013-11-13 11:21 - 00000000 ____D C:\Users\Leitung\Documents\ADRESSENLISTE

2014-01-06 15:37 - 2013-09-13 19:57 - 00000000 ____D C:\Users\Leitung\Documents\DIENSTPLAN
 

Some content of TEMP:

====================

C:\Users\Leitung\AppData\Local\Temp\avgnt.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 

==================== End Of Log ============================

--- --- ---

--- --- ---

Addition:

Code:

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 23-01-2014

Ran by Leitung at 2014-01-23 10:23:10

Running from C:\Users\Leitung\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}

AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

Adobe Flash Player 11 Plugin (Version: 11.9.900.170 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.05) - Deutsch (Version: 11.0.05 - Adobe Systems Incorporated)

Avira Free Antivirus (Version: 14.0.2.286 - Avira)

Avira SearchFree Toolbar plus Web Protection (Version: 12.2.2.663 - Ask Partner Network)

Brother BRAdmin Light 1.24.0000 (Version: 1.24.0000 - Brother)

Brother MFL-Pro Suite MFC-820CW (Version: 1.0.1.0 - Brother Industries, Ltd.)

DAEMON Tools Lite (Version: 4.47.1.0337 - Disc Soft Ltd)

Definition Update for Microsoft Office 2013 (KB2760587) 32-Bit Edition (Version:  - Microsoft)

Intel(R) Graphics Media Accelerator Driver (Version: 8.15.10.1930 - Intel Corporation)

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden

Microsoft Access MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden

Microsoft DCF MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden

Microsoft Excel MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden

Microsoft Groove MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden

Microsoft InfoPath MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden

Microsoft Lync MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden

Microsoft Office Korrekturhilfen 2013 - Deutsch (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden

Microsoft Office OSM MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden

Microsoft Office OSM UX MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden

Microsoft Office Professional Plus 2013 (Version: 15.0.4420.1017 - Microsoft Corporation)

Microsoft Office Professional Plus 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden

Microsoft Office Proofing (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden

Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden

Microsoft Office Proofing Tools 2013 - Italiano (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden

Microsoft Office Shared MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden

Microsoft OneNote MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden

Microsoft Outlook MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden

Microsoft PowerPoint MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden

Microsoft Publisher MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Word MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden

Mozilla Firefox 23.0.1 (x86 de) (Version: 23.0.1 - Mozilla)

Mozilla Firefox 26.0 (x86 de) (HKCU Version: 26.0 - Mozilla)

Mozilla Thunderbird 17.0.8 (x86 de) (Version: 17.0.8 - Mozilla)

Mozilla Thunderbird 24.2.0 (x86 de) (HKCU Version: 24.2.0 - Mozilla)

Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden

PC Monitor (Version: 4.0.0 - MMSOFT Design)

Realtek High Definition Audio Driver (Version:  - )

TAB-AV KiBiz (Version:  - )

TeamViewer 8 Host (Version: 8.0.22298 - TeamViewer)

Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1 - Microsoft Corporation)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1 - Microsoft Corporation)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1 - Microsoft Corporation)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1 - Microsoft Corporation)

Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1 - Microsoft Corporation)

Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1 - Microsoft Corporation)

Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1 - Microsoft Corporation)

Update for Microsoft .NET Framework 4 Extended (KB2836939) (Version: 1 - Microsoft Corporation)

Update for Microsoft Access 2013 (KB2752093) 32-Bit Edition (Version:  - Microsoft)

Update for Microsoft Access 2013 (KB2760350) 32-Bit Edition (Version:  - Microsoft)

Update for Microsoft Lync 2013 (KB2817621) 32-Bit Edition (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2726954) 32-Bit Edition (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2726996) 32-Bit Edition (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2727096) 32-Bit Edition (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2737954) 32-Bit Edition (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2752025) 32-Bit Edition (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2760224) 32-Bit Edition (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2760267) 32-Bit Edition (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2760533) 32-Bit Edition (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2760538) 32-Bit Edition (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2760539) 32-Bit Edition (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2760553) 32-Bit Edition (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2760610) 32-Bit Edition (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2767845) 32-Bit Edition (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2767851) 32-Bit Edition (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2767860) 32-Bit Edition (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2768016) 32-Bit Edition (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2817311) 32-Bit Edition (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2817491) 32-Bit Edition (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2817493) 32-Bit Edition (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2817624) 32-Bit Edition (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2817626) 32-Bit Edition (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2817632) 32-Bit Edition (Version:  - Microsoft)

Update for Microsoft OneNote 2013 (KB2768011) 32-Bit Edition (Version:  - Microsoft)

Update for Microsoft OneNote 2013 (KB2817467) 32-Bit Edition (Version:  - Microsoft)

Update for Microsoft Outlook 2013 (KB2817629) 32-Bit Edition (Version:  - Microsoft)

Update for Microsoft PowerPoint 2013 (KB2726947) 32-Bit Edition (Version:  - Microsoft)

Update for Microsoft PowerPoint 2013 (KB2810006) 32-Bit Edition (Version:  - Microsoft)

Update for Microsoft SkyDrive Pro (KB2817622) 32-Bit Edition (Version:  - Microsoft)

Update for Microsoft Visio 2013 (KB2810008) 32-Bit Edition (Version:  - Microsoft)

Update for Microsoft Visio Viewer 2013 (KB2768338) 32-Bit Edition (Version:  - Microsoft)

Update for Microsoft Word 2013 (KB2767863) 32-Bit Edition (Version:  - Microsoft)

Update for Microsoft Word 2013 (KB2817308) 32-Bit Edition (Version:  - Microsoft)

Update for Microsoft Word 2013 (KB2817627) 32-Bit Edition (Version:  - Microsoft)

Winamp (Version: 5.65  - Nullsoft, Inc)

WinRAR 4.20 (32-Bit) (Version: 4.20.0 - win.rar GmbH)
 

==================== Restore Points  =========================
 

Could not list Restore Points. Check WMI.
 
 

==================== Hosts content: ==========================
 

2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => ?
 

==================== Loaded Modules (whitelisted) =============
 

2013-09-18 14:59 - 2009-02-27 15:38 - 00139264 ____R () C:\Program Files\Brother\BrUtilities\BrLogAPI.dll
 

==================== Alternate Data Streams (whitelisted) =========
 
 

==================== Safe Mode (whitelisted) ===================
 
 

==================== Faulty Device Manager Devices =============
 

Name: Standardtastatur (PS/2)

Description: Standardtastatur (PS/2)

Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}

Manufacturer: (Standardtastaturen)

Service: i8042prt

Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.

Devices stay in this state if they have been prepared for removal.

After you remove the device, this error disappears.Remove the device, and this error should be resolved.
 

Name: PS/2-kompatible Maus

Description: PS/2-kompatible Maus

Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: i8042prt

Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.

Devices stay in this state if they have been prepared for removal.

After you remove the device, this error disappears.Remove the device, and this error should be resolved.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (01/23/2014 10:23:05 AM) (Source: Brother BrLog) (User: )

Description: STI BrtSTI: [2014/01/23 10:23:05.904]: [00001836]: GetDeviceIpAddress: GetAddressByName [BRN_B3A5BC] Error
 

Error: (01/23/2014 10:22:35 AM) (Source: Brother BrLog) (User: )

Description: STI BrtSTI: [2014/01/23 10:22:35.858]: [00001836]: GetDeviceIpAddress: GetAddressByName [BRN_B3A5BC] Error
 

Error: (01/23/2014 10:22:05 AM) (Source: Brother BrLog) (User: )

Description: STI BrtSTI: [2014/01/23 10:22:05.812]: [00001836]: GetDeviceIpAddress: GetAddressByName [BRN_B3A5BC] Error
 

Error: (01/23/2014 10:21:35 AM) (Source: Brother BrLog) (User: )

Description: STI BrtSTI: [2014/01/23 10:21:35.767]: [00001836]: GetDeviceIpAddress: GetAddressByName [BRN_B3A5BC] Error
 

Error: (01/23/2014 10:21:05 AM) (Source: Brother BrLog) (User: )

Description: STI BrtSTI: [2014/01/23 10:21:05.721]: [00001836]: GetDeviceIpAddress: GetAddressByName [BRN_B3A5BC] Error
 

Error: (01/23/2014 10:20:35 AM) (Source: Brother BrLog) (User: )

Description: STI BrtSTI: [2014/01/23 10:20:35.689]: [00001836]: GetDeviceIpAddress: GetAddressByName [BRN_B3A5BC] Error
 

Error: (01/23/2014 10:20:05 AM) (Source: Brother BrLog) (User: )

Description: STI BrtSTI: [2014/01/23 10:20:05.652]: [00001836]: GetDeviceIpAddress: GetAddressByName [BRN_B3A5BC] Error
 

Error: (01/23/2014 10:19:35 AM) (Source: Brother BrLog) (User: )

Description: STI BrtSTI: [2014/01/23 10:19:35.613]: [00001836]: GetDeviceIpAddress: GetAddressByName [BRN_B3A5BC] Error
 

Error: (01/23/2014 10:19:05 AM) (Source: Brother BrLog) (User: )

Description: STI BrtSTI: [2014/01/23 10:19:05.572]: [00001836]: GetDeviceIpAddress: GetAddressByName [BRN_B3A5BC] Error
 

Error: (01/23/2014 10:18:35 AM) (Source: Brother BrLog) (User: )

Description: STI BrtSTI: [2014/01/23 10:18:35.527]: [00001836]: GetDeviceIpAddress: GetAddressByName [BRN_B3A5BC] Error
 
 

System errors:

=============

Error: (01/23/2014 10:18:30 AM) (Source: Microsoft-Windows-DriverFrameworks-UserMode) (User: NT-AUTORITÄT)

Description: Das Treiberpaket konnte nicht installiert werden. Der letzte Status war "258".
 

Error: (01/23/2014 10:17:56 AM) (Source: Disk) (User: )

Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.
 

Error: (01/22/2014 10:14:15 PM) (Source: Disk) (User: )

Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR2 gefunden.
 

Error: (01/22/2014 10:12:30 PM) (Source: Disk) (User: )

Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.
 

Error: (01/15/2014 04:31:50 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "UPnP-Gerätehost" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1069
 

Error: (01/15/2014 04:31:50 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "upnphost" konnte sich nicht als "NT AUTHORITY\LocalService" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 

%%50
 

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
 

Error: (01/15/2014 04:31:50 PM) (Source: DCOM) (User: )

Description: 1069upnphost{204810B9-73B2-11D4-BF42-00B0D0118B56}
 

Error: (11/08/2013 01:14:29 PM) (Source: BugCheck) (User: )

Description: 0x0000007e (0xc0000005, 0x82a8b415, 0x8cf2b7c0, 0x8cf2b3a0)C:\Windows\MEMORY.DMP110813-17690-01
 

Error: (11/08/2013 01:14:24 PM) (Source: EventLog) (User: )

Description: Das System wurde zuvor am ‎08.‎11.‎2013 um 12:40:54 unerwartet heruntergefahren.
 

Error: (10/15/2013 02:02:35 PM) (Source: BugCheck) (User: )

Description: 0x0000008e (0xc0000005, 0x82a89415, 0xb72c3324, 0x00000000)C:\Windows\MEMORY.DMP101513-17300-01
 
 

Microsoft Office Sessions:

=========================

Error: (01/23/2014 10:24:05 AM) (Source: Brother BrLog)(User: )

Description: STIBrtSTI: [2014/01/23 10:24:05.995]: [00001836]: GetDeviceIpAddress: GetAddressByName [BRN_B3A5BC] Error
 

Error: (01/23/2014 10:23:35 AM) (Source: Brother BrLog)(User: )

Description: STIBrtSTI: [2014/01/23 10:23:35.949]: [00001836]: GetDeviceIpAddress: GetAddressByName [BRN_B3A5BC] Error
 

Error: (01/23/2014 10:23:05 AM) (Source: Brother BrLog)(User: )

Description: STIBrtSTI: [2014/01/23 10:23:05.904]: [00001836]: GetDeviceIpAddress: GetAddressByName [BRN_B3A5BC] Error
 

Error: (01/23/2014 10:22:35 AM) (Source: Brother BrLog)(User: )

Description: STIBrtSTI: [2014/01/23 10:22:35.858]: [00001836]: GetDeviceIpAddress: GetAddressByName [BRN_B3A5BC] Error
 

Error: (01/23/2014 10:22:05 AM) (Source: Brother BrLog)(User: )

Description: STIBrtSTI: [2014/01/23 10:22:05.812]: [00001836]: GetDeviceIpAddress: GetAddressByName [BRN_B3A5BC] Error
 

Error: (01/23/2014 10:21:35 AM) (Source: Brother BrLog)(User: )

Description: STIBrtSTI: [2014/01/23 10:21:35.767]: [00001836]: GetDeviceIpAddress: GetAddressByName [BRN_B3A5BC] Error
 

Error: (01/23/2014 10:21:05 AM) (Source: Brother BrLog)(User: )

Description: STIBrtSTI: [2014/01/23 10:21:05.721]: [00001836]: GetDeviceIpAddress: GetAddressByName [BRN_B3A5BC] Error
 

Error: (01/23/2014 10:20:35 AM) (Source: Brother BrLog)(User: )

Description: STIBrtSTI: [2014/01/23 10:20:35.689]: [00001836]: GetDeviceIpAddress: GetAddressByName [BRN_B3A5BC] Error
 

Error: (01/23/2014 10:20:05 AM) (Source: Brother BrLog)(User: )

Description: STIBrtSTI: [2014/01/23 10:20:05.652]: [00001836]: GetDeviceIpAddress: GetAddressByName [BRN_B3A5BC] Error
 

Error: (01/23/2014 10:19:35 AM) (Source: Brother BrLog)(User: )

Description: STIBrtSTI: [2014/01/23 10:19:35.613]: [00001836]: GetDeviceIpAddress: GetAddressByName [BRN_B3A5BC] Error
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 27%

Total physical RAM: 3061.98 MB

Available physical RAM: 2205.61 MB

Total Pagefile: 6122.26 MB

Available Pagefile: 4974.68 MB

Total Virtual: 2047.88 MB

Available Virtual: 1906.29 MB
 

==================== Drives ================================
 

Drive c: (SYSTEM) (Fixed) (Total:232.88 GB) (Free:195.33 GB) NTFS ==>[System with boot components (obtained from reading drive)]
 

==================== MBR & Partition Table ==================
 

==================== End Of Log ============================

Zitat:

Zitat von schrauber (Beitrag 1237435)

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Hallo @schrauber. Habe ich das richtige Log eingefügt?
Was wäre der nächste Schritt?