Trojaner-Board - TR/Spy.ZBot.ZZ.2 in 'C:\Users\Reichardt\Pictures\CONVAR61.jpg' gefunden

Crack? Was meinst du denn damit?
Ist deine Anleitung zum Löschen gedacht oder muss ich vorher noch was löschen?

Ähm, da steht etwas von Sexlinks in der Liste.... Das heisst nichts Gutes, oder?

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 29-09-2014

Ran by Reichardt (administrator) on User-PC on 30-09-2014 11:09:11

Running from C:\Users\User\Downloads

Loaded Profile: User(Available profiles: Reichardt)

Platform: Microsoft® Windows Vista™ Home Basic  (X86) OS Language: Deutsch (Deutschland)

Internet Explorer Version 8

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe

(Microsoft Corporation) C:\Windows\System32\SLsvc.exe

(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe

(Dell Inc.) C:\Program Files\Dell Printers\Additional Color Laser Software\Status Monitor\dlsdbnt.exe

(Foxit Corporation) C:\Program Files\Foxit Software\FOXIT READER\Foxit Cloud\FCUpdateService.exe

(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe

(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe

(Dell Inc.) C:\Program Files\Dell Printers\Additional Color Laser Software\Status Monitor\dlpwdnt.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe

(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe

(Microsoft Corporation) C:\Windows\System32\mobsync.exe

(Mozilla Corporation) C:\Program Files\Mozilla Thunderbird\thunderbird.exe

(Google Inc.) C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Windows\System32\conime.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [751184 2014-08-05] (Avira Operations GmbH & Co. KG)

HKLM\...\Run: [SDTray] => C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)

Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]

HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter

HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter

HKU\S-1-5-21-2526855927-2486895076-2278319084-1000\...\MountPoints2: {eba448c3-2219-11e4-9bd6-001bfc44c46a} - ContentManager\ContentManagerStarter.exe

ShellIconOverlayIdentifiers: GDriveBlacklistedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)

ShellIconOverlayIdentifiers: GDriveSharedEditOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)

ShellIconOverlayIdentifiers: GDriveSharedViewOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)

ShellIconOverlayIdentifiers: GDriveSyncedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)

ShellIconOverlayIdentifiers: GDriveSyncingOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)

BootExecute: autocheck autochk * sdnclean.exe
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.ebay.de/

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x3E0B5D3C0B75CF01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

SearchScopes: HKLM - DefaultScope {EC7D97C7-CEEB-432C-A29C-769720A5B07B} URL = hxxp://www.sm.de/?q={searchTerms}

SearchScopes: HKLM - {EC7D97C7-CEEB-432C-A29C-769720A5B07B} URL = hxxp://www.sm.de/?q={searchTerms}

SearchScopes: HKCU - DefaultScope {EC7D97C7-CEEB-432C-A29C-769720A5B07B} URL = hxxp://www.sm.de/?q={searchTerms}

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKCU - {EC7D97C7-CEEB-432C-A29C-769720A5B07B} URL = hxxp://www.sm.de/?q={searchTerms}

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
 

FireFox:

========

FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\PROGRAM FILES\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)

FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\PROGRAM FILES\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)

FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin HKCU: @tools.google.com/Google Update;version=3 -> C:\Users\Reichardt\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin HKCU: @tools.google.com/Google Update;version=9 -> C:\Users\Reichardt\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension

FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2014-04-24]
 

Chrome: 

=======

CHR CustomProfile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Docs) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-04-22]

CHR Extension: (Google Drive) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-04-22]

CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-07]

CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-04-22]

CHR Extension: (Google Search) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-04-22]

CHR Extension: (Avira Browser Safety) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-07-28]

CHR Extension: (Google Wallet) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-22]

CHR Extension: (Gmail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-04-22]
 

========================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [430160 2014-08-05] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-05] (Avira Operations GmbH & Co. KG)

R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [160048 2014-08-27] (Avira Operations GmbH & Co. KG)

R2 FoxitCloudUpdateService; C:\PROGRAM FILES\FOXIT SOFTWARE\FOXIT READER\Foxit Cloud\FCUpdateService.exe [242216 2014-06-17] (Foxit Corporation)

R2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)

R2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)

R2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [121000 2014-04-24] (SlySoft, Inc.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [97648 2014-07-01] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-05-27] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2014-02-25] (Avira Operations GmbH & Co. KG)

R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [30616 2013-03-04] (Elaborate Bytes AG)

S4 JRAID; C:\Windows\system32\drivers\jraid.sys [48640 2007-05-09] (JMicron Technology Corp.)

R3 KMWDFILTER; C:\Windows\System32\DRIVERS\KMWDFILTER.sys [17408 2008-10-09] (Windows (R) Codename Longhorn DDK provider)

R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2014-02-25] (Avira GmbH)

S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [X]

S3 IntcAzAudAddService; system32\drivers\RTKVHDA.sys [X]

S3 IpInIp; system32\DRIVERS\ipinip.sys [X]

S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]

S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-09-30 11:09 - 2014-09-30 11:09 - 00010974 _____ () C:\Users\User\Downloads\FRST.txt

2014-09-30 11:07 - 2014-09-30 11:09 - 00000000 ____D () C:\FRST

2014-09-30 11:05 - 2014-09-30 11:05 - 01100288 _____ (Farbar) C:\Users\User\Downloads\FRST.exe

2014-09-29 15:47 - 2014-09-29 15:48 - 00005580 _____ () C:\Users\User\Documents\Avira Ereignisse.txt

2014-09-29 14:39 - 2014-09-29 14:39 - 00000931 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Inspector smart recovery.lnk

2014-09-29 14:39 - 2014-09-29 14:39 - 00000919 _____ () C:\Users\Public\Desktop\PC Inspector smart recovery.lnk

2014-09-29 14:39 - 2014-09-29 14:39 - 00000000 ____D () C:\Program Files\Convar

2014-09-29 14:39 - 2002-04-12 13:19 - 00028672 _____ () C:\Windows\system32\DartWeb.oca

2014-09-29 14:39 - 2002-02-28 09:46 - 00217088 _____ (Dart Communications) C:\Windows\system32\DartSock.dll

2014-09-29 14:39 - 2002-02-21 10:12 - 00118784 _____ (Dart Communications) C:\Windows\system32\DartWeb.dll

2014-09-29 14:39 - 2002-02-04 02:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\msxml4a.dll

2014-09-29 14:39 - 2000-10-02 12:27 - 00125712 _____ (Microsoft Corporation) C:\Windows\system32\VB6DE.DLL

2014-09-29 14:39 - 2000-05-22 00:00 - 00140488 _____ (Microsoft Corporation) C:\Windows\system32\COMDLG32.OCX

2014-09-29 14:39 - 1998-06-13 22:53 - 00044544 _____ () C:\Windows\system32\Gif89.dll

2014-09-29 14:33 - 2014-09-29 14:34 - 06415389 _____ (InstallShield Software Corporation) C:\Users\User\Downloads\pci_de_smartrecovery (2).exe

2014-09-28 18:39 - 2014-09-28 18:39 - 00000000 ____D () C:\Users\User\Documents\Steuer

2014-09-27 19:24 - 2014-09-27 19:24 - 00000000 ____D () C:\Windows\system32\Visagesoft

2014-09-27 19:24 - 2014-09-27 19:24 - 00000000 ____D () C:\Windows\system32\AIM

2014-09-27 19:24 - 2003-12-04 15:58 - 00000696 _____ () C:\Windows\system32\jetodbc.rsp

2014-09-27 19:24 - 2002-12-11 19:12 - 00760968 _____ (Microsoft Corporation) C:\Windows\system32\WMSDMOD.DLL

2014-09-27 19:24 - 2002-12-11 19:12 - 00316040 _____ (Microsoft Corporation) C:\Windows\system32\MP43DMOD.DLL

2014-09-27 19:24 - 2002-12-11 19:10 - 00816264 _____ (Microsoft Corporation) C:\Windows\system32\WMVDMOD.DLL

2014-09-27 19:24 - 2002-12-11 17:34 - 00241664 _____ (Microsoft Corporation) C:\Windows\system32\MPG4DMOD.DLL

2014-09-27 19:24 - 2002-12-11 15:16 - 00384512 _____ (Microsoft Corporation) C:\Windows\system32\MP4SDMOD.DLL

2014-09-27 19:24 - 2002-08-29 03:43 - 00278559 _____ (Microsoft Corporation) C:\Windows\system32\WMV8DS32.AX

2014-09-27 19:24 - 2002-08-29 03:43 - 00258048 _____ (Microsoft Corporation) C:\Windows\system32\WMVDS32.AX

2014-09-27 19:24 - 2002-08-29 03:43 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\MSADDS32.AX

2014-09-27 19:24 - 2002-04-29 19:47 - 00121160 _____ (Microsoft Corporation) C:\Windows\system32\mscal.ocx

2014-09-27 19:24 - 2000-06-13 00:00 - 01046288 _____ (Microsoft Corporation) C:\Windows\system32\MSJET35.DLL

2014-09-27 19:24 - 2000-06-13 00:00 - 00415504 _____ (Microsoft Corporation) C:\Windows\system32\MSREPL35.DLL

2014-09-27 19:24 - 1999-03-05 22:15 - 00074000 _____ (Microsoft Corporation) C:\Windows\system32\msrclr40.dll

2014-09-27 19:24 - 1999-03-05 22:15 - 00028944 _____ (Microsoft Corporation) C:\Windows\system32\msrecr40.dll

2014-09-27 19:24 - 1998-04-24 00:00 - 00368912 _____ (Microsoft Corporation) C:\Windows\system32\VBAR332.DLL

2014-09-27 19:24 - 1998-04-24 00:00 - 00148240 _____ (Microsoft Corporation) C:\Windows\system32\MSJINT35.DLL

2014-09-27 19:24 - 1997-07-01 10:45 - 00250128 _____ (Microsoft Corporation) C:\Windows\system32\MSEXCL35.DLL

2014-09-27 19:24 - 1997-06-23 09:06 - 00330000 _____ (Microsoft Corporation) C:\Windows\system32\MSEXCH35.DLL

2014-09-27 19:24 - 1997-06-23 09:06 - 00287504 _____ (Microsoft Corporation) C:\Windows\system32\MSXBSE35.DLL

2014-09-27 19:24 - 1997-06-23 09:06 - 00252176 _____ (Microsoft Corporation) C:\Windows\system32\MSRD2X35.DLL

2014-09-27 19:24 - 1997-06-23 09:06 - 00250128 _____ (Microsoft Corporation) C:\Windows\system32\MSPDOX35.DLL

2014-09-27 19:24 - 1997-06-23 09:06 - 00166160 _____ (Microsoft Corporation) C:\Windows\system32\MSLTUS35.DLL

2014-09-27 19:24 - 1997-06-23 09:06 - 00165648 _____ (Microsoft Corporation) C:\Windows\system32\MSTEXT35.DLL

2014-09-27 19:24 - 1997-06-23 09:06 - 00024848 _____ (Microsoft Corporation) C:\Windows\system32\MSJTER35.DLL

2014-09-27 19:23 - 2014-09-27 19:23 - 00001706 _____ () C:\Users\User\Desktop\Steuer 2013.lnk

2014-09-27 18:21 - 2014-09-27 18:21 - 00001838 _____ () C:\Users\Public\Desktop\KONZ-Steuer-2014.lnk

2014-09-27 18:21 - 2014-09-27 18:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KONZ

2014-09-27 18:21 - 2014-09-27 18:21 - 00000000 ____D () C:\Program Files\USM

2014-09-27 18:15 - 2014-09-27 18:15 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steuer 2013

2014-09-27 18:13 - 2014-09-27 21:13 - 00000000 ____D () C:\Program Files\Steuer 2013

2014-09-27 18:13 - 2014-09-27 18:13 - 00000000 ____D () C:\Users\User\AppData\Roaming\InstallShield Installation Information

2014-09-26 21:22 - 2014-09-26 21:22 - 00000000 ____D () C:\Users\User\AppData\Roaming\Buhl Data Service

2014-09-26 21:21 - 2014-09-26 21:21 - 00000000 ____D () C:\Users\User\AppData\Local\Buhl Data Service

2014-09-26 21:20 - 2014-09-27 21:13 - 00000598 _____ () C:\Windows\wiso.ini

2014-09-26 21:20 - 2014-09-27 19:23 - 00000000 ____D () C:\Users\User\AppData\Local\Buhl

2014-09-26 20:58 - 2014-09-27 21:14 - 00000000 ____D () C:\ProgramData\Buhl Data Service GmbH

2014-09-26 10:14 - 2014-09-26 10:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive

2014-09-26 10:11 - 2014-09-30 10:16 - 00000892 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-09-26 10:11 - 2014-09-30 10:16 - 00000888 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-09-23 15:12 - 2006-12-20 08:03 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\msshsq.dll

2014-09-23 11:50 - 2006-09-18 23:41 - 00000761 _____ () C:\Windows\system32\Drivers\etc\hosts.20140923-115042.backup

2014-09-23 11:49 - 2006-09-18 23:41 - 00000761 _____ () C:\Windows\system32\Drivers\etc\hosts.20140923-114912.backup

2014-09-23 11:48 - 2006-09-18 23:41 - 00000761 _____ () C:\Windows\system32\Drivers\etc\hosts.20140923-114836.backup

2014-09-23 11:47 - 2006-09-18 23:41 - 00000761 _____ () C:\Windows\system32\Drivers\etc\hosts.20140923-114730.backup

2014-09-23 11:34 - 2006-09-18 23:41 - 00000761 _____ () C:\Windows\system32\Drivers\etc\hosts.20140923-113434.backup

2014-09-23 11:30 - 2006-09-18 23:41 - 00000761 _____ () C:\Windows\system32\Drivers\etc\hosts.20140923-113011.backup

2014-09-20 22:50 - 2014-09-30 10:01 - 00000644 _____ () C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job

2014-09-20 22:50 - 2014-09-21 12:37 - 00000616 _____ () C:\Windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job

2014-09-20 22:50 - 2014-09-21 12:37 - 00000446 _____ () C:\Windows\Tasks\Scan the system (Spybot - Search & Destroy).job

2014-09-20 22:50 - 2014-09-20 22:50 - 00001970 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk

2014-09-20 22:50 - 2014-09-20 22:50 - 00001958 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk

2014-09-20 22:50 - 2014-09-20 22:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2

2014-09-20 22:49 - 2014-09-23 12:06 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy

2014-09-20 22:49 - 2014-09-23 11:56 - 00000000 ____D () C:\Program Files\Spybot - Search & Destroy 2

2014-09-20 22:49 - 2013-09-20 10:49 - 00018968 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean.exe

2014-09-14 18:20 - 2014-09-14 18:20 - 00000000 ____D () C:\Users\User\AppData\Roaming\dvdcss

2014-09-13 23:53 - 1998-06-18 00:00 - 00089360 _____ (Microsoft Corporation) C:\Windows\system32\VB5DB.DLL

2014-09-10 10:30 - 2014-09-10 10:30 - 00000804 _____ () C:\Users\Public\Desktop\CCleaner.lnk

2014-09-10 10:30 - 2014-09-10 10:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner

2014-09-10 10:30 - 2014-09-10 10:30 - 00000000 ____D () C:\Program Files\CCleaner

2014-09-10 09:49 - 2014-09-10 09:49 - 00001002 _____ () C:\Users\Public\Desktop\Avira.lnk

2014-09-10 09:49 - 2014-09-10 09:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-09-30 11:06 - 2014-04-22 19:43 - 00001136 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2526855927-2486895076-2278319084-1000UA.job

2014-09-30 10:59 - 2006-11-02 14:45 - 00003552 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0

2014-09-30 10:59 - 2006-11-02 14:45 - 00003552 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0

2014-09-30 10:41 - 2014-08-08 09:17 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-09-30 10:03 - 2006-11-02 14:49 - 01574641 _____ () C:\Windows\WindowsUpdate.log

2014-09-30 09:59 - 2006-11-02 14:58 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-09-30 07:51 - 2006-11-02 14:58 - 00032620 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-09-29 22:36 - 2014-04-22 19:43 - 00001084 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2526855927-2486895076-2278319084-1000Core.job

2014-09-29 14:43 - 2006-11-02 12:33 - 01488240 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-09-29 14:39 - 2014-04-23 12:09 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information

2014-09-28 19:29 - 2014-04-27 21:34 - 00104960 _____ () C:\Users\User\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2014-09-27 19:24 - 2014-05-21 13:05 - 00000000 ____D () C:\Windows\system32\Macromed

2014-09-26 17:23 - 2014-05-19 12:46 - 00000000 ____D () C:\Program Files\CDBurnerXP

2014-09-26 13:19 - 2014-07-11 13:13 - 00001684 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDBurnerXP.lnk

2014-09-26 10:14 - 2014-05-10 23:08 - 00000000 ____D () C:\Program Files\Google

2014-09-26 10:14 - 2014-04-22 19:43 - 00000000 ____D () C:\Users\User\AppData\Local\Google

2014-09-26 08:51 - 2014-04-25 19:16 - 00002631 _____ () C:\Users\User\Desktop\Microsoft Office Word 2007.lnk

2014-09-25 15:37 - 2014-05-10 23:18 - 00000000 ____D () C:\Users\User\AppData\Roaming\PhotoScape

2014-09-25 12:06 - 2014-04-22 16:19 - 00000000 ____D () C:\Users\User

2014-09-25 12:03 - 2006-11-02 12:22 - 35127296 _____ () C:\Windows\system32\config\SOFTWARE_BAK_13543

2014-09-25 12:03 - 2006-11-02 12:22 - 21233664 _____ () C:\Windows\system32\config\COMPONENTS_BAK_30501

2014-09-25 12:03 - 2006-11-02 12:22 - 15990784 _____ () C:\Windows\system32\config\SYSTEM_BAK_37290

2014-09-25 12:03 - 2006-11-02 12:22 - 04980736 _____ () C:\Windows\system32\config\DEFAULT_BAK_49680

2014-09-25 12:03 - 2006-11-02 12:22 - 00053248 _____ () C:\Windows\system32\config\SAM_BAK_49007

2014-09-25 12:03 - 2006-11-02 12:22 - 00020480 _____ () C:\Windows\system32\config\SECURITY_BAK_98167

2014-09-25 08:16 - 2014-04-22 19:47 - 00002054 _____ () C:\Users\User\Desktop\Google Chrome.lnk

2014-09-24 11:41 - 2014-05-21 13:05 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe

2014-09-24 11:41 - 2014-05-21 13:05 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

2014-09-21 19:45 - 2014-06-17 21:55 - 00000000 ____D () C:\output

2014-09-14 18:21 - 2014-04-27 23:00 - 00000000 ____D () C:\Users\User\AppData\Roaming\vlc

2014-09-14 17:12 - 2014-07-27 15:38 - 00000125 ___SH () C:\ProgramData\.zreglib

2014-09-12 17:20 - 2014-04-23 13:18 - 00000412 _____ () C:\Windows\Tasks\1-Klick-Wartung.job

2014-09-11 09:12 - 2014-04-25 19:10 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-09-11 09:11 - 2014-04-24 20:07 - 00000000 ____D () C:\Windows\system32\MRT

2014-09-10 10:44 - 2014-04-23 01:58 - 00000000 ____D () C:\Windows\PANTHER

2014-09-10 09:49 - 2014-04-22 16:41 - 00000000 ____D () C:\ProgramData\Package Cache

2014-09-10 09:48 - 2014-04-22 17:06 - 00000000 ____D () C:\Program Files\Avira
 

Some content of TEMP:

====================

C:\Users\User\AppData\Local\Temp\avgnt.exe

C:\Users\User\AppData\Local\Temp\Foxit Reader Updater.exe
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\system32\winlogon.exe => File is digitally signed

C:\Windows\system32\wininit.exe => File is digitally signed

C:\Windows\system32\svchost.exe => File is digitally signed

C:\Windows\system32\services.exe => File is digitally signed

C:\Windows\system32\User32.dll => File is digitally signed

C:\Windows\system32\userinit.exe => File is digitally signed

C:\Windows\system32\rpcss.dll => File is digitally signed

C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2014-09-30 10:06
 

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

--- --- ---

Code:

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 29-09-2014

Ran by Reichardt at 2014-09-30 11:10:11

Running from C:\Users\Reichardt\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

Adobe Flash Player 15 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 15.0.0.167 - Adobe Systems Incorporated)

AnyDVD (HKLM\...\AnyDVD) (Version: 7.4.9.0 - SlySoft)

Apple Application Support (HKLM\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)

Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

ATI Catalyst Install Manager (HKLM\...\{CC516453-9703-ABF9-201F-58A5EC567292}) (Version: 3.0.642.0 - ATI Technologies, Inc.)

Avira (HKLM\...\{70e83cd8-4bd5-4039-ab5a-6b94a8abb641}) (Version: 1.1.21.25162 - Avira Operations GmbH & Co. KG)

Avira (Version: 1.1.21.25162 - Avira Operations GmbH & Co. KG) Hidden

Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.6.570 - Avira)

Canon CanoScan Toolbox 4.0 (HKLM\...\Canon CanoScan Toolbox 4.0) (Version:  - )

Catalyst Control Center Core Implementation (Version: 2007.0821.2146.36991 - ATI) Hidden

Catalyst Control Center Graphics Full Existing (Version: 2007.0821.2146.36991 - ATI) Hidden

Catalyst Control Center Graphics Full New (Version: 2007.0821.2146.36991 - ATI) Hidden

Catalyst Control Center Graphics Light (Version: 2007.0821.2146.36991 - ATI) Hidden

Catalyst Control Center Graphics Previews Common (Version: 2007.0821.2146.36991 - ATI) Hidden

Catalyst Control Center Graphics Previews Vista (Version: 2007.0821.2146.36991 - ATI) Hidden

Catalyst Control Center Localization Czech (Version: 2007.0821.2146.36991 - ATI) Hidden

Catalyst Control Center Localization Danish (Version: 2007.0821.2146.36991 - ATI) Hidden

Catalyst Control Center Localization Dutch (Version: 2007.0821.2146.36991 - ATI) Hidden

Catalyst Control Center Localization Finnish (Version: 2007.0821.2146.36991 - ATI) Hidden

Catalyst Control Center Localization French (Version: 2007.0821.2146.36991 - ATI) Hidden

Catalyst Control Center Localization German (Version: 2007.0821.2146.36991 - ATI) Hidden

Catalyst Control Center Localization Greek (Version: 2007.0821.2146.36991 - ATI) Hidden

Catalyst Control Center Localization Hungarian (Version: 2007.0821.2146.36991 - ATI) Hidden

Catalyst Control Center Localization Italian (Version: 2007.0821.2146.36991 - ATI) Hidden

Catalyst Control Center Localization Norwegian (Version: 2007.0821.2146.36991 - ATI) Hidden

Catalyst Control Center Localization Polish (Version: 2007.0821.2146.36991 - ATI) Hidden

Catalyst Control Center Localization Portuguese (Version: 2007.0821.2146.36991 - ATI) Hidden

Catalyst Control Center Localization Russian (Version: 2007.0821.2146.36991 - ATI) Hidden

Catalyst Control Center Localization Spanish (Version: 2007.0821.2146.36991 - ATI) Hidden

Catalyst Control Center Localization Swedish (Version: 2007.0821.2146.36991 - ATI) Hidden

Catalyst Control Center Localization Turkish (Version: 2007.0821.2146.36991 - ATI) Hidden

CCC Help English (Version: 2007.0821.2145.36991 - ATI) Hidden

ccc-core-static (Version: 2007.0821.2146.36991 - Ihr Firmenname) Hidden

ccc-utility (Version: 2007.0821.2146.36991 - ATI) Hidden

CCleaner (HKLM\...\CCleaner) (Version: 4.17 - Piriform)

CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.4.5067 - CDBurnerXP)

Dell-Druckersoftware (HKLM\...\{105F3CE5-FE55-408E-BF30-E78F85BA0B12}) (Version: 1.00.000 - Dell Inc.)

Foxit Cloud (HKLM\...\{41914D8B-9D6E-4764-A1F9-BC43FB6782C1}_is1) (Version: 1.5.129.617 - Foxit Corporation)

Foxit Reader (HKLM\...\Foxit Reader_is1) (Version: 6.1.5.624 - Foxit Corporation)

Free Video Flip and Rotate version 2.1.9.827 (HKLM\...\Free Video Flip and Rotate_is1) (Version: 2.1.9.827 - DVDVideoSoft Ltd.)

Google Chrome (HKCU\...\Google Chrome) (Version: 37.0.2062.124 - Google Inc.)

Google Drive (HKLM\...\{C6640705-7479-4EE5-BC86-879F05F65E74}) (Version: 1.17.7290.4094 - Google, Inc.)

Google Update Helper (Version: 1.3.24.15 - Google Inc.) Hidden

KONZ-Steuer-2014 (HKLM\...\InstallShield_{20F1078B-E3B6-4DA1-9570-003DE110890A}) (Version: 1.00.0000 - USM)

KONZ-Steuer-2014 (Version: 1.00.0000 - USM) Hidden

Microsoft .NET Framework 3.5 Language Pack SP1 - DEU (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - deu) (Version:  - Microsoft Corporation)

Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729 - Microsoft Corporation) Hidden

Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version:  - Microsoft Corporation)

Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden

Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)

Microsoft Office 2007 Service Pack 3 (SP3) (Version:  - Microsoft) Hidden

Microsoft Office Access MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office InfoPath MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Professional Plus 2007 (HKLM\...\PROPLUS) (Version: 12.0.6612.1000 - Microsoft Corporation)

Microsoft Office Professional Plus 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden

Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (Version:  - Microsoft) Hidden

Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

MozBackup 1.5.1 (HKLM\...\MozBackup) (Version:  - Pavel Cvrcek)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)

Mozilla Thunderbird 24.6.0 (x86 de) (HKLM\...\Mozilla Thunderbird 24.6.0 (x86 de)) (Version: 24.6.0 - Mozilla)

MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB973685) (HKLM\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)

PC Inspector smart recovery (HKLM\...\{C9A87D86-FDFD-418B-BF96-EF09320973B3}) (Version: 4.50 - )

PhotoScape (HKLM\...\PhotoScape) (Version:  - )

QuickTime 7 (HKLM\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)

Revo Uninstaller 1.95 (HKLM\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)

Shared Add-in Extensibility Update for Microsoft .NET Framework 2.0 (KB908002) (HKLM\...\{09959E11-AD5D-408E-96AF-E3346954D6B8}) (Version: 1.0.0 - Microsoft)

Shared Add-in Support Update for Microsoft .NET Framework 2.0 (KB908002) (HKLM\...\{64F3B15C-24C7-4B2B-9B72-65CCBBD7F06B}) (Version: 1.0.0 - Microsoft)

Skins (Version: 2007.0821.2146.36991 - ATI) Hidden

Spybot - Search & Destroy (HKLM\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)

Steuer 2013 (HKCU\...\{05AEF487-8926-48A9-B5BA-9BED72BC6B1C}) (Version: 21.00.8480 - Buhl Data Service GmbH)

TuneUp Utilities 2007 (HKLM\...\{C8BB4912-12D9-42AE-B571-E580D8CD1B5B}) (Version: 6.0.2311 - TuneUp Software)

Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)

Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (HKLM\...\{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707) (Version: 1 - Microsoft Corporation)

Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version:  - Microsoft)

Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_PROPLUS_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version:  - Microsoft)

Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version:  - Microsoft)

Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2889914) 32-Bit Edition (HKLM\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{F3F83933-75FC-4B60-84F2-3F8FA63D042E}) (Version:  - Microsoft)

Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0407-0000-0000000FF1CE}_PROPLUS_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)

Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_PROPLUS_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)

Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0407-0000-0000000FF1CE}_PROPLUS_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)

Update für Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0407-0000-0000000FF1CE}_PROPLUS_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)

VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)

WinRAR 5.10 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH)
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 

CustomCLSID: HKU\S-1-5-21-2526855927-2486895076-2278319084-1000_Classes\CLSID\{022105BD-948A-40C9-AB42-A3300DDF097F}\localserver32 -> C:\Users\Reichardt\AppData\Local\Google\Update\GoogleUpdate.exe (Google Inc.)

CustomCLSID: HKU\S-1-5-21-2526855927-2486895076-2278319084-1000_Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43}\localserver32 -> C:\Users\Reichardt\AppData\Local\Google\Update\1.3.24.15\GoogleUpdateOnDemand.exe (Google Inc.)

CustomCLSID: HKU\S-1-5-21-2526855927-2486895076-2278319084-1000_Classes\CLSID\{2F0E2680-9FF5-43C0-B76E-114A56E93598}\localserver32 -> C:\Users\Reichardt\AppData\Local\Google\Update\1.3.24.15\GoogleUpdateOnDemand.exe (Google Inc.)

CustomCLSID: HKU\S-1-5-21-2526855927-2486895076-2278319084-1000_Classes\CLSID\{51F9E8EF-59D7-475B-A106-C7EA6F30C119}\localserver32 -> C:\Users\Reichardt\AppData\Local\Google\Update\1.3.24.15\GoogleUpdateOnDemand.exe (Google Inc.)

CustomCLSID: HKU\S-1-5-21-2526855927-2486895076-2278319084-1000_Classes\CLSID\{5C65F4B0-3651-4514-B207-D10CB699B14B}\localserver32 -> C:\Users\Reichardt\AppData\Local\Google\Chrome\Application\37.0.2062.124\delegate_execute.exe (Google Inc.)

CustomCLSID: HKU\S-1-5-21-2526855927-2486895076-2278319084-1000_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Reichardt\AppData\Local\Google\Update\1.3.24.15\psuser.dll (Google Inc.)

CustomCLSID: HKU\S-1-5-21-2526855927-2486895076-2278319084-1000_Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\InprocServer32 -> C:\Users\Reichardt\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

CustomCLSID: HKU\S-1-5-21-2526855927-2486895076-2278319084-1000_Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\InprocServer32 -> C:\Users\Reichardt\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

CustomCLSID: HKU\S-1-5-21-2526855927-2486895076-2278319084-1000_Classes\CLSID\{E67BE843-BBBE-4484-95FB-05271AE86750}\localserver32 -> C:\Users\Reichardt\AppData\Local\Google\Update\1.3.24.15\GoogleUpdateOnDemand.exe (Google Inc.)

CustomCLSID: HKU\S-1-5-21-2526855927-2486895076-2278319084-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Reichardt\AppData\Local\Google\Update\1.3.24.15\psuser.dll (Google Inc.)
 

==================== Restore Points  =========================
 

27-09-2014 16:13:43 Installiert Steuer 2013

28-09-2014 15:39:47 Geplanter Prüfpunkt

29-09-2014 05:54:16 Geplanter Prüfpunkt

29-09-2014 12:38:42 Installiert PC Inspector smart recovery
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2006-11-02 12:23 - 2014-09-23 11:50 - 00450628 ____R C:\Windows\system32\Drivers\etc\hosts

127.0.0.1        localhost

127.0.0.1        www.007guard.com

127.0.0.1        007guard.com

127.0.0.1        008i.com

127.0.0.1        www.008k.com

127.0.0.1        008k.com

127.0.0.1        www.00hq.com

127.0.0.1        00hq.com

127.0.0.1        010402.com

127.0.0.1        www.032439.com

127.0.0.1        032439.com

127.0.0.1        www.0scan.com

127.0.0.1        0scan.com

127.0.0.1        1000gratisproben.com

127.0.0.1        www.1000gratisproben.com

127.0.0.1        1001namen.com

127.0.0.1        www.1001namen.com

127.0.0.1        100888290cs.com

127.0.0.1        www.100888290cs.com

127.0.0.1        www.100sexlinks.com

127.0.0.1        100sexlinks.com

127.0.0.1        10sek.com

127.0.0.1        www.10sek.com

127.0.0.1        www.1-2005-search.com

127.0.0.1        1-2005-search.com

127.0.0.1        123fporn.info

127.0.0.1        www.123fporn.info

127.0.0.1        123haustiereundmehr.com

127.0.0.1        www.123haustiereundmehr.com
 

There are 1000 more lines.
 
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {04BEF807-DFBB-47D8-AA8A-849E2C94CBB6} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-09-26] (Google Inc.)

Task: {18DFD9FC-082E-4E9B-8285-5F21D2B4EDAE} - System32\Tasks\Microsoft\Windows\MobilePC\TMM

Task: {214953C9-A450-4AF9-8889-9F4B5511DEE2} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2526855927-2486895076-2278319084-1000Core => C:\Users\Reichardt\AppData\Local\Google\Update\GoogleUpdate.exe [2014-04-22] (Google Inc.)

Task: {582B1CF9-B986-4D3B-AD1B-B63EF4179752} - System32\Tasks\Check for updates (Spybot - Search & Destroy) => C:\Program Files\Spybot - Search &amp; Destroy 2\SDUpdate.exe

Task: {5916F864-469C-4391-8604-E4EA141A2699} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2006-11-02] ()

Task: {5AFDC8EC-0467-4BF8-809F-305EAD20EA06} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-24] (Adobe Systems Incorporated)

Task: {5CE55444-F18E-4436-83FA-A64607BA8584} - System32\Tasks\Driver Booster SkipUAC (Reichardt) => C:\Program Files\IObit\Driver Booster\DriverBooster.exe

Task: {5DF31D79-A659-4780-93DB-F615987DAF51} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {6F97C93E-F704-4227-90BF-21D183424C6F} - System32\Tasks\Driver Booster Update => C:\Program Files\IObit\Driver Booster\AutoUpdate.exe

Task: {83E7D2C6-81A3-4AEF-AC81-0A07F961E303} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2526855927-2486895076-2278319084-1000UA => C:\Users\Reichardt\AppData\Local\Google\Update\GoogleUpdate.exe [2014-04-22] (Google Inc.)

Task: {8B0E6FAB-F43A-4988-AF0A-A21646C212F0} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages

Task: {95EF6009-4DC6-43A4-9279-9418B06E774C} - System32\Tasks\Refresh immunization (Spybot - Search & Destroy) => C:\Program Files\Spybot - Search &amp; Destroy 2\SDImmunize.exe

Task: {9ED703A9-5FFD-40D5-895A-4385EE1509DE} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2006-11-02] (Microsoft Corporation)

Task: {A482EDB5-81D9-49FA-9414-33FC1EC5210E} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-08-21] (Piriform Ltd)

Task: {BB77FC21-63DE-4565-8D73-D0CE2828D7DB} - System32\Tasks\Scan the system (Spybot - Search & Destroy) => C:\Program Files\Spybot - Search &amp; Destroy 2\SDScan.exe

Task: {CE1D3249-045F-4098-B171-7E681E6BA07C} - System32\Tasks\Driver Booster Scan => C:\Program Files\IObit\Driver Booster\Scheduler.exe

Task: {D6F76011-8BAA-40B6-8C01-6EDA1F5D9D32} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-09-26] (Google Inc.)

Task: {D782183D-299F-4CED-AAE0-92FFA2A8B4A5} - System32\Tasks\1-Klick-Wartung => C:\Program Files\TuneUp Utilities 2007\SystemOptimizer.exe [2007-08-02] (TuneUp Software GmbH)

Task: {DDCBD8CE-E4BA-4FEC-AF33-13DAD0B55BD9} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
 

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 

Task: C:\Windows\Tasks\1-Klick-Wartung.job => C:\Program Files\TuneUp Utilities 2007\SystemOptimizer.exe

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job => C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2526855927-2486895076-2278319084-1000Core.job => C:\Users\Reichardt\AppData\Local\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2526855927-2486895076-2278319084-1000UA.job => C:\Users\Reichardt\AppData\Local\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job => C:\Program Files\Spybot - Search & Destroy 2\SDImmunize.exe

Task: C:\Windows\Tasks\Scan the system (Spybot - Search & Destroy).job => C:\Program Files\Spybot - Search & Destroy 2\SDScan.exe
 

==================== Loaded Modules (whitelisted) =============
 

2014-09-20 22:49 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlThirdParty150.bpl

2014-09-20 22:49 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files\Spybot - Search & Destroy 2\DEC150.bpl

2014-09-20 22:49 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlFileFormats150.bpl

2014-09-20 22:49 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files\Spybot - Search & Destroy 2\sqlite3.dll

2014-09-20 22:49 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files\Spybot - Search & Destroy 2\av\BDSmartDB.dll

2014-08-27 15:00 - 2014-08-27 15:00 - 00139056 _____ () C:\Program Files\Avira\My Avira\Avira.OE.NativeCore.dll

2014-08-27 15:00 - 2014-08-27 15:00 - 00066864 _____ () C:\Program Files\Avira\My Avira\Avira.OE.AvConnectorNative.dll

2014-04-22 17:19 - 2014-08-27 15:00 - 00052472 _____ () C:\Users\Reichardt\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll

2006-11-02 12:25 - 2007-08-22 03:56 - 00159744 _____ () C:\Windows\system32\atitmmxx.dll

2014-06-11 20:52 - 2014-06-11 20:53 - 03022960 _____ () C:\Program Files\Mozilla Thunderbird\mozjs.dll

2014-06-11 20:52 - 2014-06-11 20:53 - 00158832 _____ () C:\Program Files\Mozilla Thunderbird\NSLDAP32V60.dll

2014-06-11 20:52 - 2014-06-11 20:53 - 00023152 _____ () C:\Program Files\Mozilla Thunderbird\NSLDAPPR32V60.dll

2014-09-25 08:16 - 2014-09-23 06:07 - 08577864 _____ () C:\Users\Reichardt\AppData\Local\Google\Chrome\Application\37.0.2062.124\pdf.dll

2014-09-25 08:16 - 2014-09-23 06:07 - 00331592 _____ () C:\Users\Reichardt\AppData\Local\Google\Chrome\Application\37.0.2062.124\ppGoogleNaClPluginChrome.dll

2014-09-25 08:16 - 2014-09-23 06:06 - 01660232 _____ () C:\Users\Reichardt\AppData\Local\Google\Chrome\Application\37.0.2062.124\ffmpegsumo.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
 

==================== EXE Association (whitelisted) =============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 

==================== MSCONFIG/TASK MANAGER disabled items =========
 

(Currently there is no automatic fix for this section.)
 
 

========================= Accounts: ==========================
 

Administrator (S-1-5-21-2526855927-2486895076-2278319084-500 - Administrator - Disabled)

Gast (S-1-5-21-2526855927-2486895076-2278319084-501 - Limited - Disabled)

Reichardt (S-1-5-21-2526855927-2486895076-2278319084-1000 - Administrator - Enabled) => C:\Users\Reichardt
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (09/29/2014 10:36:39 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm avcenter.exe, Version 14.0.6.524 arbeitet nicht mehr mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen über das Problem zu suchen.

Prozess-ID: 148c

Anfangszeit: 01cfdbf33acfeec9

Zeitpunkt der Beendigung: 0
 

Error: (09/29/2014 02:38:34 PM) (Source: VSS) (EventID: 8194) (User: )

Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005.

Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.
 
 

Vorgang:

   Generatordaten werden gesammelt
 

Kontext:

   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}

   Generatorname: System Writer

   Generatorinstanz-ID: {7326d132-6f53-42cf-8c77-afef53f38f2b}
 

Error: (09/27/2014 06:07:27 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Fehlerhafte Anwendung chrome.exe, Version 37.0.2062.124, Zeitstempel 0x5420d868, fehlerhaftes Modul chrome.dll, Version 37.0.2062.124, Zeitstempel 0x5420d5a6, Ausnahmecode 0x80000003, Fehleroffset 0x004f49a4,

Prozess-ID 0xcc0, Anwendungsstartzeit chrome.exe0.
 

Error: (09/27/2014 05:14:34 PM) (Source: VSS) (EventID: 8194) (User: )

Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005.

Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.
 
 

Vorgang:

   Generatordaten werden gesammelt
 

Kontext:

   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}

   Generatorname: System Writer

   Generatorinstanz-ID: {478ca593-8b14-4b51-a2f4-424304b898ed}
 

Error: (09/27/2014 05:07:17 PM) (Source: VSS) (EventID: 8194) (User: )

Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005.

Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.
 
 

Vorgang:

   Generatordaten werden gesammelt
 

Kontext:

   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}

   Generatorname: System Writer

   Generatorinstanz-ID: {478ca593-8b14-4b51-a2f4-424304b898ed}
 

Error: (09/26/2014 08:57:21 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Fehlerhafte Anwendung chrome.exe, Version 37.0.2062.124, Zeitstempel 0x5420d868, fehlerhaftes Modul chrome.dll, Version 37.0.2062.124, Zeitstempel 0x5420d5a6, Ausnahmecode 0x80000003, Fehleroffset 0x004f49a4,

Prozess-ID 0xf50, Anwendungsstartzeit chrome.exe0.
 

Error: (09/26/2014 02:31:03 PM) (Source: EventSystem) (EventID: 4621) (User: )

Description: 80070005EventSystem.EventSubscription{CEB8B221-89C5-41A8-98CE-79B413BF150B}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}
 

Error: (09/25/2014 04:58:31 PM) (Source: VSS) (EventID: 8194) (User: )

Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005.

Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.
 
 

Vorgang:

   Generatordaten werden gesammelt
 

Kontext:

   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}

   Generatorname: System Writer

   Generatorinstanz-ID: {4d1e03ff-e2e2-4c08-806f-faea0f70d6db}
 

Error: (09/25/2014 04:51:04 PM) (Source: VSS) (EventID: 8194) (User: )

Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005.

Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.
 
 

Vorgang:

   Generatordaten werden gesammelt
 

Kontext:

   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}

   Generatorname: System Writer

   Generatorinstanz-ID: {4d1e03ff-e2e2-4c08-806f-faea0f70d6db}
 

Error: (09/25/2014 04:49:17 PM) (Source: VSS) (EventID: 8194) (User: )

Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005.

Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.
 
 

Vorgang:

   Generatordaten werden gesammelt
 

Kontext:

   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}

   Generatorname: System Writer

   Generatorinstanz-ID: {4d1e03ff-e2e2-4c08-806f-faea0f70d6db}
 
 

System errors:

=============

Error: (09/30/2014 09:59:22 AM) (Source: Ntfs) (EventID: 137) (User: )

Description: Der Transaktionsressourcen-Manager auf Volume "E:" konnte aufgrund eines nicht wiederholbaren Fehlers nicht gestartet werden. Der Fehlercode ist in den Daten enthalten.
 

Error: (09/30/2014 07:30:21 AM) (Source: Ntfs) (EventID: 137) (User: )

Description: Der Transaktionsressourcen-Manager auf Volume "E:" konnte aufgrund eines nicht wiederholbaren Fehlers nicht gestartet werden. Der Fehlercode ist in den Daten enthalten.
 

Error: (09/29/2014 07:08:14 AM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: 30000Avira Service Host
 

Error: (09/29/2014 07:07:09 AM) (Source: Ntfs) (EventID: 137) (User: )

Description: Der Transaktionsressourcen-Manager auf Volume "E:" konnte aufgrund eines nicht wiederholbaren Fehlers nicht gestartet werden. Der Fehlercode ist in den Daten enthalten.
 

Error: (09/28/2014 05:06:38 PM) (Source: bowser) (EventID: 8003) (User: )

Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",

der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{09D5F0F9-34E6-404A-A862-263B46A710-Transport zu sein scheint.

Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
 

Error: (09/28/2014 04:48:36 PM) (Source: bowser) (EventID: 8003) (User: )

Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",

der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{09D5F0F9-34E6-404A-A862-263B46A710-Transport zu sein scheint.

Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
 

Error: (09/28/2014 04:45:36 PM) (Source: bowser) (EventID: 8003) (User: )

Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",

der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{09D5F0F9-34E6-404A-A862-263B46A710-Transport zu sein scheint.

Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
 

Error: (09/28/2014 01:38:50 PM) (Source: Ntfs) (EventID: 137) (User: )

Description: Der Transaktionsressourcen-Manager auf Volume "E:" konnte aufgrund eines nicht wiederholbaren Fehlers nicht gestartet werden. Der Fehlercode ist in den Daten enthalten.
 

Error: (09/27/2014 05:01:15 PM) (Source: bowser) (EventID: 8003) (User: )

Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",

der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{09D5F0F9-34E6-404A-A862-263B46A710-Transport zu sein scheint.

Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
 

Error: (09/27/2014 09:54:17 AM) (Source: Ntfs) (EventID: 137) (User: )

Description: Der Transaktionsressourcen-Manager auf Volume "E:" konnte aufgrund eines nicht wiederholbaren Fehlers nicht gestartet werden. Der Fehlercode ist in den Daten enthalten.
 
 

Microsoft Office Sessions:

=========================

Error: (07/28/2014 10:09:53 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6514.5001, Microsoft Office Version: 12.0.4518.1014. This session lasted 507 seconds with 60 seconds of active time.  This session ended with a crash.
 
 

CodeIntegrity Errors:

===================================

  Date: 2014-09-25 12:28:33.562

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\atiumdag.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-09-25 12:28:33.502

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\atiumdag.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-08-05 15:24:20.114

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\atiumdag.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-08-05 15:24:20.073

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\atiumdag.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-08-05 15:04:57.979

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\atiumdag.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-08-05 15:04:57.923

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\atiumdag.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 
 

==================== Memory info =========================== 
 

Processor: Intel(R) Pentium(R) Dual CPU E2140 @ 1.60GHz

Percentage of memory in use: 66%

Total physical RAM: 1278.69 MB

Available physical RAM: 425.39 MB

Total Pagefile: 2805.23 MB

Available Pagefile: 1399.53 MB

Total Virtual: 2047.88 MB

Available Virtual: 1933.46 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:48.83 GB) (Free:20.44 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

Drive e: () (Fixed) (Total:0.01 GB) (Free:0.01 GB) NTFS

Drive p: () (Removable) (Total:14.83 GB) (Free:14.68 GB) FAT32
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 232.9 GB) (Disk ID: 09FBC8C6)

Partition 1: (Active) - (Size=48.8 GB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=184 GB) - (Type=OF Extended)

Partition 3: (Not Active) - (Size=9 MB) - (Type=07 NTFS)
 

========================================================

Disk: 8 (Size: 14.8 GB) (Disk ID: 00000000)
 

Partition: GPT Partition Type.
 

==================== End Of Log ============================

Konntest du vielleicht bereits etwas erkennen? Der Rechner ist auch in den letzten Tagen so langsam und hängt sich so oft auf.