Ah, hi schrauber :) Du hast mich letztes Mal ja schon gerettet.
Hier sind die beiden Files:
FRST Logfile:
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-12-2014
Ran by Sarah (administrator) on SARAH-PC on 13-12-2014 14:13:00
Running from C:\Users\Sarah\Desktop
Loaded Profiles: Sarah & UpdatusUser & Administrator (Available profiles: Sarah & UpdatusUser & Administrator)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AVAST Software) C:\Program Files\AVAST Software\Avast1\AvastSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast1\avastui.exe
(Avast Software) C:\Program Files\AVAST Software\Avast1\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast1\ng\ngservice.exe
(Dropbox, Inc.) C:\Users\Sarah\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast1\AvastUI.exe [5223016 2014-11-15] (AVAST Software)
HKU\S-1-5-21-2397675965-2088753291-856571785-1000\...\Policies\Explorer: [NoCDBurning] 1
Startup: C:\Users\Sarah\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Sarah\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast1\ashShA64.dll (AVAST Software)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\S-1-5-21-2397675965-2088753291-856571785-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-2397675965-2088753291-856571785-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-2397675965-2088753291-856571785-500\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> No File
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\Root\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - No Name - {3C6301ED-0F78-4AF2-8150-D9C052361A8E} - No File
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\Root\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\Sarah\AppData\Roaming\Mozilla\Firefox\Profiles\14nr1zgo.default
FF SelectedSearchEngine: Google
FF Homepage: mail.yahoo.de
FF NetworkProxy: "ftp", "proxyus.stealthy.co"
FF NetworkProxy: "ftp_port", 3128
FF NetworkProxy: "http", "proxyus.stealthy.co"
FF NetworkProxy: "http_port", 3128
FF NetworkProxy: "no_proxies_on", "localhost, 127.0.0.1, stealthy.co"
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks", "proxyus.stealthy.co"
FF NetworkProxy: "socks_port", 3128
FF NetworkProxy: "ssl", "proxyus.stealthy.co"
FF NetworkProxy: "ssl_port", 3128
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_223.dll ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_223.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\Root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 -> C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 -> C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: @videolan.org/vlc,version=1.1.11 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (the VideoLAN Team)
FF Extension: Avira Browser Safety - C:\Users\Sarah\AppData\Roaming\Mozilla\Firefox\Profiles\14nr1zgo.default\Extensions\abs@avira.com [2014-11-19]
FF Extension: DownloadHelper - C:\Users\Sarah\AppData\Roaming\Mozilla\Firefox\Profiles\14nr1zgo.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-10-05]
FF Extension: Adblock Plus - C:\Users\Sarah\AppData\Roaming\Mozilla\Firefox\Profiles\14nr1zgo.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-09-12]
FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-09-15]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast1\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast1\WebRep\FF [2014-11-15]
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: No Name - wrc@avast.com [Not Found]
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast1\WebRep\Chrome\aswWebRepChromeSp.crx [2014-11-15]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast1\WebRep\Chrome\aswWebRepChrome.crx [2014-11-15]
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2013-08-14]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast1\AvastSvc.exe [50344 2014-11-15] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast1\ng\vbox\AvastVBoxSVC.exe [4012248 2014-11-15] (Avast Software)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2443960 2014-10-30] (Microsoft Corporation)
S4 Giraffic; C:\Program Files (x86)\Giraffic\Veoh_GirafficWatchdog.exe [2245232 2013-05-13] (Giraffic)
S4 LVSrvLauncher; C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe [173344 2007-02-06] (Logitech Inc.)
S4 lxdpCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\x64\3\\lxdpserv.exe [29184 2009-04-28] (Lexmark International, Inc.)
S4 lxdp_device; C:\Windows\system32\lxdpcoms.exe [1039872 2007-11-19] ( )
S4 lxdp_device; C:\Windows\SysWOW64\lxdpcoms.exe [589824 2007-11-19] ( )
S4 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()
S4 TuneUp.Defrag; C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe [607048 2011-11-13] (TuneUp Software)
S4 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe [1353544 2009-10-30] (TuneUp Software)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S3 ASPI; C:\Windows\SysWOW64\DRIVERS\ASPI32.sys [84832 2002-07-17] (Adaptec) [File not signed]
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-11-15] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-11-15] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-11-15] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-11-15] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-11-21] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-11-15] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-11-15] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-11-15] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [279616 2011-11-13] (DT Soft Ltd)
S3 hitmanpro37; C:\Windows\system32\drivers\hitmanpro37.sys [43664 2014-11-15] ()
S3 LVcKap64; C:\Windows\System32\DRIVERS\LVcKap64.sys [1013024 2007-02-06] (Logitech Inc.)
S3 LVMVDrv; C:\Windows\System32\DRIVERS\LVMVDrv.sys [2346016 2007-02-06] (Logitech Inc.)
S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2Mon.sys [31520 2007-02-06] ()
S3 lvsels64; C:\Windows\System32\DRIVERS\lvsels64.sys [38944 2007-02-03] (Logitech Inc.)
S3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesDriver64.sys [11856 2009-10-14] (TuneUp Software)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast1\ng\vbox\VBoxAswDrv.sys [270728 2014-11-15] (Avast Software)
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [59904 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 gdrv; \??\C:\Windows\gdrv.sys [X]
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-12-13 14:13 - 2014-12-13 14:13 - 00013395 _____ () C:\Users\Sarah\Desktop\FRST.txt
2014-12-13 14:12 - 2014-12-13 14:13 - 00000000 ___DC () C:\FRST
2014-12-13 14:12 - 2014-12-13 14:12 - 02119168 _____ (Farbar) C:\Users\Sarah\Desktop\FRST64.exe
2014-12-13 13:24 - 2014-12-13 13:24 - 00060563 _____ () C:\Users\Sarah\AppData\Local\recently-used.xbel
2014-12-13 12:52 - 2014-12-13 12:52 - 01005568 _____ (Microsoft Corporation) C:\Users\Sarah\Downloads\dotNetFx45_Full_setup.exe
2014-12-13 12:41 - 2014-12-13 12:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2014-12-13 12:40 - 2014-12-13 12:42 - 00000000 ____D () C:\Users\Sarah\AppData\Roaming\Sony
2014-12-13 12:40 - 2014-12-13 12:40 - 00000000 ___DC () C:\Program Files\Sony
2014-12-13 12:40 - 2014-12-13 12:40 - 00000000 ____D () C:\ProgramData\Sony
2014-12-13 12:40 - 2014-12-13 12:40 - 00000000 ____D () C:\Program Files (x86)\Sony
2014-12-13 12:34 - 2014-12-13 12:40 - 219788016 _____ (Sony Creative Software Inc.) C:\Users\Sarah\Downloads\vegaspro11.0.701_64bit.exe
2014-12-10 18:59 - 2014-12-13 12:20 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-12-09 19:05 - 2014-12-09 19:05 - 00001474 _____ () C:\Users\Public\Desktop\ElsterFormular.lnk
2014-12-09 19:05 - 2014-12-09 19:05 - 00000000 ____D () C:\Users\Sarah\AppData\Roaming\elsterformular
2014-12-09 19:05 - 2014-12-09 19:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsterFormular
2014-12-09 19:05 - 2014-12-09 19:05 - 00000000 ____D () C:\ProgramData\elsterformular
2014-12-09 19:05 - 2014-12-09 19:05 - 00000000 ____D () C:\Program Files (x86)\ElsterFormular
2014-11-15 22:10 - 2014-11-21 20:22 - 00000000 ____D () C:\Windows\erdnt
2014-11-15 22:09 - 2014-11-15 22:09 - 00000000 ___DC () C:\OETemp
2014-11-15 22:06 - 2014-11-15 22:06 - 00000000 ____D () C:\Users\Sarah\AppData\Roaming\AVAST Software
2014-11-15 22:00 - 2014-11-21 20:23 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-11-15 20:10 - 2014-12-09 21:14 - 00000000 ____D () C:\Users\Sarah\Desktop\OUAT - Season III
2014-11-15 16:27 - 2014-11-15 16:27 - 00000249 _____ () C:\Windows\system32\2014-11-15-15-27-15.006-aswFe.exe-6040.log
2014-11-15 16:25 - 2014-11-15 16:25 - 00000199 _____ () C:\Windows\system32\2014-11-15-15-25-26.090-AvastVBoxSVC.exe-5768.log
2014-11-15 15:47 - 2014-11-15 15:47 - 00000249 _____ () C:\Windows\system32\2014-11-15-14-47-29.083-aswFe.exe-4996.log
2014-11-15 15:45 - 2014-11-15 15:45 - 00000199 _____ () C:\Windows\system32\2014-11-15-14-45-57.088-AvastVBoxSVC.exe-2392.log
2014-11-15 15:44 - 2014-11-15 15:44 - 00000249 _____ () C:\Windows\system32\2014-11-15-14-44-25.005-aswFe.exe-2392.log
2014-11-15 15:42 - 2014-11-15 15:42 - 00000249 _____ () C:\Windows\system32\2014-11-15-14-42-22.002-aswFe.exe-3392.log
2014-11-15 15:42 - 2014-11-15 15:42 - 00000199 _____ () C:\Windows\system32\2014-11-15-14-42-11.042-AvastVBoxSVC.exe-4504.log
2014-11-15 15:38 - 2014-11-15 15:38 - 00000000 ____D () C:\Windows\SysWOW64\vbox
2014-11-15 15:38 - 2014-11-15 15:38 - 00000000 ____D () C:\Windows\system32\vbox
2014-11-15 15:35 - 2014-11-21 20:23 - 00001078 ____C () C:\DelFix.txt
2014-11-15 15:35 - 2014-11-21 20:20 - 01050432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2014-11-15 15:35 - 2014-11-16 18:56 - 00000000 ____D () C:\Windows\ERUNT
2014-11-15 15:35 - 2014-11-15 22:06 - 00083280 _____ (AVAST Software) C:\Windows\system32\Drivers\aswmonflt.sys
2014-11-15 15:35 - 2014-11-15 15:35 - 00436624 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-11-15 15:35 - 2014-11-15 15:35 - 00364512 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-11-15 15:35 - 2014-11-15 15:35 - 00267632 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-11-15 15:35 - 2014-11-15 15:35 - 00116728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-11-15 15:35 - 2014-11-15 15:35 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-11-15 15:35 - 2014-11-15 15:35 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-11-15 15:35 - 2014-11-15 15:35 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-11-15 15:35 - 2014-11-15 15:35 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-11-15 15:35 - 2014-11-15 15:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2014-11-15 15:26 - 2014-11-15 15:26 - 00043664 _____ () C:\Windows\system32\Drivers\hitmanpro37.sys
2014-11-15 15:25 - 2014-11-15 15:25 - 00002036 _____ () C:\Windows\system32\.crusader
2014-11-15 15:16 - 2014-11-15 15:16 - 00003128 _____ () C:\Windows\System32\Tasks\{F46D68C4-ABB1-4CD7-BF8A-52CA4230D7B9}
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-12-13 14:11 - 2011-11-13 07:30 - 01651599 _____ () C:\Windows\WindowsUpdate.log
2014-12-13 13:25 - 2014-10-05 10:20 - 00000000 ____D () C:\Users\Sarah\.gimp-2.8
2014-12-13 13:24 - 2014-10-05 12:07 - 00000000 ____D () C:\Users\Sarah\AppData\Local\gtk-2.0
2014-12-13 13:15 - 2013-04-19 20:37 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-12-13 12:59 - 2014-10-05 11:56 - 00000000 ___DC () C:\KMPlayer
2014-12-13 12:57 - 2013-12-09 14:25 - 01594156 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-12-13 12:57 - 2009-07-14 18:58 - 00699462 _____ () C:\Windows\system32\perfh007.dat
2014-12-13 12:57 - 2009-07-14 18:58 - 00149602 _____ () C:\Windows\system32\perfc007.dat
2014-12-13 12:57 - 2009-07-14 06:13 - 01594156 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-12-13 12:48 - 2013-05-09 11:53 - 00000000 ___RD () C:\Users\Sarah\Dropbox
2014-12-13 12:48 - 2013-05-09 11:48 - 00000000 ____D () C:\Users\Sarah\AppData\Roaming\Dropbox
2014-12-13 12:46 - 2011-11-13 07:32 - 00117584 _____ () C:\Users\Sarah\AppData\Local\GDIPFONTCACHEV1.DAT
2014-12-13 12:35 - 2009-07-14 05:45 - 00013760 _____ () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-12-13 12:35 - 2009-07-14 05:45 - 00013760 _____ () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-12-13 12:28 - 2012-01-14 15:07 - 00269090 _____ () C:\Windows\PFRO.log
2014-12-13 12:28 - 2011-11-24 18:12 - 00115988 _____ () C:\Windows\setupact.log
2014-12-13 12:28 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-12-13 12:28 - 2009-07-14 05:45 - 00464048 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-12-13 12:20 - 2014-09-09 22:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-12-13 12:20 - 2014-09-09 22:33 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-12-13 12:20 - 2011-11-13 02:39 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-12-13 12:20 - 2009-07-14 04:20 - 00000000 ___DC () C:\Program Files\Common Files\Microsoft Shared
2014-12-12 23:47 - 2014-10-29 14:02 - 00011264 _____ () C:\Users\Sarah\Desktop\To Do+To watch.xls
2014-12-12 23:04 - 2013-09-19 19:31 - 00003850 _____ () C:\Windows\System32\Tasks\Real Networks Scheduler
2014-12-12 20:59 - 2013-05-09 11:48 - 00000000 ____D () C:\Users\Sarah\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-12-11 22:08 - 2012-05-09 09:09 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-12-09 19:06 - 2011-11-13 07:28 - 00000000 ____D () C:\Users\Sarah
2014-12-07 14:33 - 2011-12-06 13:55 - 00000000 ____D () C:\Users\Sarah\AppData\Local\Last.fm
2014-12-07 13:23 - 2013-08-24 10:43 - 00000000 ____D () C:\ProgramData\lx_Cats
2014-11-27 23:54 - 2013-12-09 12:57 - 00000000 ____D () C:\Users\Sarah\Documents\Calibre-Bibliothek
2014-11-27 23:46 - 2014-11-03 21:26 - 00002398 _____ () C:\Users\Sarah\Desktop\Fanfic-Liste.txt
2014-11-27 16:40 - 2011-11-13 01:04 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-11-23 13:09 - 2014-10-25 13:45 - 00000000 ___DC () C:\Program Files\Microsoft Office 15
2014-11-15 22:20 - 2009-07-14 04:20 - 00000000 ___RD () C:\Users\Default
2014-11-15 22:18 - 2009-07-14 03:34 - 00000215 ____C () C:\Windows\system.ini
2014-11-15 22:17 - 2013-08-28 08:02 - 00000000 ____D () C:\ProgramData\Avira
2014-11-15 22:17 - 2013-08-28 08:02 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-11-15 22:07 - 2014-05-29 19:52 - 00000000 ____D () C:\Program Files (x86)\ATLAS V14
2014-11-15 15:34 - 2014-08-25 23:18 - 00000000 ___DC () C:\Program Files\AVAST Software
2014-11-15 15:26 - 2013-10-23 21:15 - 00003362 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2397675965-2088753291-856571785-1000
2014-11-15 15:26 - 2013-10-23 21:15 - 00003228 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2397675965-2088753291-856571785-1000
2014-11-15 15:09 - 2013-04-19 20:37 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-11-15 15:09 - 2012-05-09 09:09 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-11-15 15:09 - 2011-11-25 23:05 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-11-15 15:06 - 2014-11-11 18:54 - 00000000 ____D () C:\ProgramData\MaquGzup
Some content of TEMP:
====================
C:\Users\Sarah\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpyuje80.dll
C:\Users\Sarah\AppData\Local\Temp\Quarantine.exe
C:\Users\Sarah\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-12-05 21:53
==================== End Of Log ============================
--- --- ---
--- --- --- Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-12-2014
Ran by Sarah at 2014-12-13 14:13:31
Running from C:\Users\Sarah\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe Flash Player 11 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 11.8.800.94 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.223 - Adobe Systems Incorporated)
Amazon MP3-Downloader 1.0.9 (HKLM-x32\...\Amazon MP3-Downloader) (Version: - )
Any Video Converter 3.3.9 (HKLM-x32\...\Any Video Converter_is1) (Version: - Any-Video-Converter.com)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ATLAS Translation Standard V14.0 Trial Version (HKLM-x32\...\{6652750B-AA69-49B7-9D09-C0A28B6FFC9F}) (Version: 14.00.2000 - FUJITSU LIMITED)
ATLAS V14.0 L10 Update Pack U004 (x32 Version: 14.04.0000 - FUJITSU LIMITED) Hidden
Audacity 2.0 (HKLM-x32\...\Audacity_is1) (Version: - Audacity Team)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.0.2206 - AVAST Software)
calibre 64bit (HKLM\...\{C7B9E1F1-45A6-4AF8-A800-0FE9A2B8F30C}) (Version: 1.14.0 - Kovid Goyal)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.45.1.0236 - DT Soft Ltd)
Die Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.67.2 - Electronic Arts)
Die Sims™ 3 Einfach tierisch (HKLM-x32\...\{C12631C6-804D-4B32-B0DD-8A496462F106}) (Version: 10.0.96 - Electronic Arts)
Die Sims™ 3 Jahreszeiten (HKLM-x32\...\{3DE92282-CB49-434F-81BF-94E5B380E889}) (Version: 16.0.136 - Electronic Arts)
Die Sims™ 3 Late Night (HKLM-x32\...\{45057FCE-5784-48BE-8176-D9D00AF56C3C}) (Version: 6.0.81 - Electronic Arts)
Die Sims™ 3 Lebensfreude (HKLM-x32\...\{E6B88BD6-E4B2-4701-A648-B6DAC6E491CC}) (Version: 8.0.152 - Electronic Arts)
Die Sims™ 3 Showtime (HKLM-x32\...\{3BBFD444-5FAB-49F6-98B1-A1954E831399}) (Version: 12.0.273 - Electronic Arts)
Die Sims™ 3 Supernatural (HKLM-x32\...\{B37DAFA5-717D-41F8-BDFB-3A4B68C0B3A1}) (Version: 15.0.135 - Electronic Arts)
Die Sims™ 3 Traumkarrieren (HKLM-x32\...\{910F4A29-1134-49E0-AD8B-56E4A3152BD1}) (Version: 4.0.87 - Electronic Arts)
Dropbox (HKU\S-1-5-21-2397675965-2088753291-856571785-1000\...\Dropbox) (Version: 3.0.3 - Dropbox, Inc.)
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 15.1.13904 - Landesfinanzdirektion Thüringen)
EMDB 2.03 (HKLM-x32\...\EMDB_is1) (Version: - Wicked & Wild Inc.)
Explorer Suite IV (HKLM\...\Explorer Suite_is1) (Version: - )
f.lux (HKU\S-1-5-21-2397675965-2088753291-856571785-1000\...\Flux) (Version: - )
Foxit Reader 5.1 (HKLM-x32\...\Foxit Reader_is1) (Version: 5.1.3.1201 - Foxit Corporation)
Free WMA to MP3 Converter 1.16 (HKLM-x32\...\Free WMA to MP3 Converter_is1) (Version: - Jodix Technologies Ltd.)
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
Java 7 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.450 - Oracle)
Katawa Shoujo (HKLM-x32\...\Katawa Shoujo) (Version: - )
KMPlayer (remove only) (HKLM-x32\...\The KMPlayer) (Version: 3.9.0.128 - PandoraTV)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - )
Last.fm Scrobbler 2.1.36 (HKLM-x32\...\LastFM_is1) (Version: - Last.fm)
Lexmark Z2300 Series (HKLM\...\Lexmark Z2300 Series) (Version: - Lexmark International, Inc.)
Logitech QuickCam (HKLM\...\{192E85C6-2B8A-4217-AD30-ECA5CE19DB23}) (Version: 10.51.2029 - Logitech Inc.)
Logitech® Camera-Treiber (HKLM-x32\...\QcDrv) (Version: - )
Meka MP3 Album Artwork Tool (HKLM-x32\...\{566D66BF-BF53-4FA7-91C5-F419A37F7248}) (Version: 1.0.0 - DroidSDK Software)
Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5 DEU Language Pack (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft Games for Windows - LIVE (HKLM-x32\...\{B45FABE7-D101-4D99-A671-E16DA40AF7F0}) (Version: 3.0.86.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{B578C85A-A84C-4230-A177-C5B2AF565B8C}) (Version: 3.0.17.0 - Microsoft Corporation)
Microsoft Office 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 15.0.4667.1002 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2397675965-2088753291-856571785-1000\...\OneDriveSetup.exe) (Version: 17.3.1171.0714 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Mozilla Firefox 34.0.5 (x86 de) (HKLM-x32\...\Mozilla Firefox 34.0.5 (x86 de)) (Version: 34.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 32.0.1 - Mozilla)
MP3-Tag-Editor 3.10 (HKLM-x32\...\{12FCEE02-33A5-478A-A0B1-219E07BA0B47}) (Version: 3.10.0 - Gisbert Müller)
MSVCRT Redists (Version: 1.0 - Sony Creative Software Inc.) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MVisn64 (Version: 10.51.2027 - Logitech Inc.) Hidden
MyDriveConnect 3.3.0.1756 (HKLM-x32\...\MyDriveConnect) (Version: 3.3.0.1756 - TomTom)
NVIDIA 3D Vision Controller-Treiber 314.22 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 314.22 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 314.22 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 314.22 - NVIDIA Corporation)
NVIDIA Grafiktreiber 314.22 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 314.22 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.23.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.23.1 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.12.1031 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.1031 - NVIDIA Corporation)
NVIDIA Update 1.12.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.12.12 - NVIDIA Corporation)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4667.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4667.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4667.1002 - Microsoft Corporation) Hidden
OpenOffice.org 3.3 (HKLM-x32\...\{4286716B-1287-48E7-9078-3DC8248DBA96}) (Version: 3.3.9567 - OpenOffice.org)
Origin (HKLM-x32\...\Origin) (Version: 8.6.0.357 - Electronic Arts, Inc.)
pdfsam (HKU\S-1-5-21-2397675965-2088753291-856571785-1000\...\pdfsam) (Version: 2.2.1 - )
Photo Pos Pro (HKLM-x32\...\Photo Pos Pro) (Version: 1.89 - PowerOfSoftware Ltd.)
PhotoScape (HKLM-x32\...\PhotoScape) (Version: - )
RealDownloader (x32 Version: 1.3.3 - RealNetworks, Inc.) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0 - RealNetworks, Inc) Hidden
RealPlayer (HKLM-x32\...\RealPlayer 16.0) (Version: 16.0.3 - RealNetworks)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.38.113.2011 - Realtek)
RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) Hidden
RPG Maker VX RTP (HKLM-x32\...\RPG Maker VX RTP_is1) (Version: 1.02 - Enterbrain)
ScummVM 1.5.0 (HKLM-x32\...\ScummVM_is1) (Version: - The ScummVM Team)
Skype™ 6.21 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.21.104 - Skype Technologies S.A.)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
TuneUp Utilities (HKLM-x32\...\TuneUp Utilities) (Version: 9.0.2000.15 - TuneUp Software)
TuneUp Utilities (x32 Version: 9.0.2000.15 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (x32 Version: 9.0.2000.15 - TuneUp Software) Hidden
Unigine Heaven Benchmark v2.1 (HKLM-x32\...\{38468127-9E6F-4FC9-B5F7-42D4AD437D96}) (Version: 2.1 - Unigine Corp.)
Vegas Pro 11.0 (64-bit) (HKLM\...\{7E3B2D0F-029B-11E2-BD68-F04DA23A5C58}) (Version: 11.0.701 - Sony)
Veoh Giraffic Video Accelerator (HKLM-x32\...\Giraffic) (Version: 0.86.412.230 - Giraffic)
Veoh Web Player (HKLM-x32\...\Veoh Web Player Beta) (Version: 1.1.2.0000 - Veoh Networks, Inc.)
Visual Studio C++ 10.0 Runtime (HKLM-x32\...\{4412F224-3849-4461-A3E9-DEEF8D252790}) (Version: 10.0.0 - TomTom International B.V.)
VLC media player 1.1.11 (HKLM-x32\...\VLC media player) (Version: 1.1.11 - VideoLAN)
Winamp (HKLM-x32\...\Winamp) (Version: 5.622 - Nullsoft, Inc)
WinRAR 4.00 beta 7 (64-bit) (HKLM\...\WinRAR archiver) (Version: 4.00.7 - win.rar GmbH)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-2397675965-2088753291-856571785-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Sarah\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2397675965-2088753291-856571785-1000_Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InprocServer32 -> C:\Windows\system32\shell32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2397675965-2088753291-856571785-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Sarah\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2397675965-2088753291-856571785-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Sarah\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2397675965-2088753291-856571785-1000_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Sarah\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2397675965-2088753291-856571785-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Sarah\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2397675965-2088753291-856571785-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Sarah\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64\FileSyncApi64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2397675965-2088753291-856571785-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Sarah\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2397675965-2088753291-856571785-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Sarah\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2397675965-2088753291-856571785-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Sarah\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2397675965-2088753291-856571785-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Sarah\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2397675965-2088753291-856571785-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Sarah\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2397675965-2088753291-856571785-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Sarah\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2397675965-2088753291-856571785-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Sarah\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2397675965-2088753291-856571785-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Sarah\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
==================== Restore Points =========================
21-11-2014 19:23:21 Ende der Bereinigung
28-11-2014 20:53:33 Geplanter Prüfpunkt
05-12-2014 21:00:52 Geplanter Prüfpunkt
13-12-2014 11:01:14 Removed Vegas Pro 10.0
13-12-2014 11:18:46 Removed Vegas Pro 11.0 (64-bit)
13-12-2014 11:19:50 Removed Microsoft Lync Basic 2013
13-12-2014 11:19:58 LYNCENTRY
13-12-2014 11:21:31 Microsoft Visual C++ 2005 Redistributable wird entfernt
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2014-11-16 16:05 - 2014-11-16 16:05 - 00000056 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
127.0.0.1 player.kmpmedia.net
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {0134E7C6-E4A3-4514-A98D-3537C8AE88C8} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2397675965-2088753291-856571785-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {07D80477-0FB3-441E-B661-1F257C559C3E} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2397675965-2088753291-856571785-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {08207192-DE1C-463B-882D-8810520E59DA} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2397675965-2088753291-856571785-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {0E6EC90A-3F22-44A7-AA60-AA3094E96A9B} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-20] (Microsoft Corporation)
Task: {162BA24E-20C0-4676-BE87-EBD0287D8F9D} - System32\Tasks\{11B678D5-DA0B-46C9-876B-FCBB589FC909} => C:\Program Files\Sony\Vegas Pro 11.0\vegas110.exe [2012-09-24] (Sony Creative Software Inc.)
Task: {39B7D925-3B4B-42E1-9F00-CA1BF8D180D9} - System32\Tasks\Automatische Problemsuche => C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpSystemStatusCheck.exe [2009-10-30] (TuneUp Software)
Task: {3E14DC2F-7C29-4FF9-B50D-DD3501175797} - System32\Tasks\RunAsStdUser Task for VeohWebPlayer => C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\veohwebplayer.exe [2012-01-02] (Veoh Networks)
Task: {3E371B71-04BB-4F97-8057-B3799D45B6FA} - System32\Tasks\{774B3D5D-5249-4FAE-89E3-1E6A562F440F} => pcalua.exe -a C:\Users\Sarah\AppData\Local\Temp\InstallFlashPlayer.exe -d "C:\Program Files (x86)\Mozilla Firefox"
Task: {4895C3C8-91BE-4293-9DE5-5EDC0F167BB2} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2014-10-22] (Microsoft Corporation)
Task: {4C7EF4CE-232D-4E4E-9A85-F26D6393FEB8} - System32\Tasks\Real Networks Scheduler => C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe [2013-09-15] (RealNetworks, Inc.)
Task: {73AF88A5-69F5-46EB-B27D-C60B2B8458C7} - System32\Tasks\Installation App Launcher => C:\Program Files (x86)\Lexmark Z2300 Series\ezprint.exe [2010-02-04] (Lexmark International Inc.)
Task: {7D907370-3496-4C17-8FB6-46935B17300D} - System32\Tasks\{8952B92F-3650-4AE0-8B94-E533532D6EB8} => pcalua.exe -a C:\Users\Sarah\Desktop\tbrusha_open1724_studio.exe -d C:\Users\Sarah\Desktop
Task: {8D49CA1D-E81E-4210-8263-63B1551AE686} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2397675965-2088753291-856571785-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {8E60F172-A434-4ACA-B350-0DE596C54517} - System32\Tasks\{F46D68C4-ABB1-4CD7-BF8A-52CA4230D7B9} => pcalua.exe -a "C:\Program Files (x86)\Avira\AntiVir Desktop\setup.exe" -c /REMOVE
Task: {9CEEB410-BE40-445C-A0A1-37E07401CE58} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {9DCD1660-3AE1-4A88-82C0-78933714F936} - System32\Tasks\{A7772DA1-7E4F-46B4-BEA5-EE4AC197AA38} => pcalua.exe -a D:\setup.exe -d D:\
Task: {A178FF79-34D0-4D5F-A8B8-099F4C8C0BDF} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-2397675965-2088753291-856571785-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe [2013-08-14] (RealNetworks, Inc.)
Task: {A3E0048E-C642-4359-8839-7B8EF71AD62A} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2014-10-07] (Microsoft Corporation)
Task: {B39F3CBD-3374-4C9F-BCC3-761610F6F6E1} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance => C:\Program Files (x86)\TuneUp Utilities 2010\OneClick.exe [2009-10-30] (TuneUp Software)
Task: {B65286D9-5CD0-4B2C-AED9-42D7F053E184} - System32\Tasks\{4E8C7CF6-3975-4E2C-ADEB-9EE15569D1C3} => C:\Program Files\Sony\Vegas Pro 11.0\vegas110.exe [2012-09-24] (Sony Creative Software Inc.)
Task: {CBD2892E-387F-4EC4-80A9-4C19CD6AF791} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)
Task: {FE244C6E-C3B2-4FCE-947A-C0C9BC50A1F9} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-15] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Loaded Modules (whitelisted) =============
2013-08-28 10:44 - 2009-08-13 06:06 - 00177152 _____ () C:\Windows\system32\spool\PRTPROCS\x64\lxdpdrpp.dll
2014-10-25 13:45 - 2014-05-20 09:19 - 00105640 ____C () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2014-11-15 15:35 - 2014-11-15 15:35 - 00388208 ____C () C:\Program Files\AVAST Software\Avast1\ng\vbox\VBoxDDU.dll
2014-11-15 15:35 - 2014-11-15 15:35 - 05846160 ____C () C:\Program Files\AVAST Software\Avast1\ng\vbox\VBoxRT.dll
2014-12-13 11:47 - 2014-12-13 11:47 - 02908160 ____C () C:\Program Files\AVAST Software\Avast1\defs\14121300\algo.dll
2014-11-15 15:35 - 2014-11-15 15:35 - 04491192 ____C () C:\Program Files\AVAST Software\Avast1\ng\vbox\x86\VBoxRT-x86.dll
2014-11-15 15:35 - 2014-11-15 15:35 - 38561576 ____C () C:\Program Files\AVAST Software\Avast1\libcef.dll
2014-10-22 01:22 - 2014-10-22 01:22 - 00750080 _____ () C:\Users\Sarah\AppData\Roaming\Dropbox\bin\libGLESv2.dll
2014-12-13 12:48 - 2014-12-13 12:48 - 00043008 _____ () c:\users\sarah\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpyuje80.dll
2014-10-22 01:22 - 2014-10-22 01:22 - 00047616 _____ () C:\Users\Sarah\AppData\Roaming\Dropbox\bin\libEGL.dll
2014-10-22 01:22 - 2014-10-22 01:22 - 00863744 _____ () C:\Users\Sarah\AppData\Roaming\Dropbox\bin\plugins\platforms\qwindows.dll
2014-10-22 01:22 - 2014-10-22 01:22 - 00200704 _____ () C:\Users\Sarah\AppData\Roaming\Dropbox\bin\plugins\imageformats\qjpeg.dll
2014-12-10 18:59 - 2014-12-10 18:59 - 03758192 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
AlternateDataStreams: C:\ProgramData\TEMP:EBAA0CD9
AlternateDataStreams: C:\ProgramData\TEMP:EC77041F
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: Apple Mobile Device => 2
MSCONFIG\Services: Giraffic => 2
MSCONFIG\Services: LVPrcS64 => 2
MSCONFIG\Services: LVSrvLauncher => 2
MSCONFIG\Services: lxdpCATSCustConnectService => 2
MSCONFIG\Services: lxdp_device => 2
MSCONFIG\Services: MozillaMaintenance => 3
MSCONFIG\Services: nvsvc => 2
MSCONFIG\Services: nvUpdatusService => 2
MSCONFIG\Services: RealNetworks Downloader Resolver Service => 2
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: Steam Client Service => 3
MSCONFIG\Services: Stereo Service => 2
MSCONFIG\Services: TuneUp.Defrag => 3
MSCONFIG\Services: TuneUp.UtilitiesSvc => 2
MSCONFIG\startupfolder: C:^Users^Sarah^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: avgnt => "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
MSCONFIG\startupreg: Avira Systray => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: EzPrint => "C:\Program Files (x86)\Lexmark Z2300 Series\ezprint.exe"
MSCONFIG\startupreg: f.lux => "C:\Users\Sarah\AppData\Local\FluxSoftware\Flux\flux.exe" /noshow
MSCONFIG\startupreg: Logitech Download Assistant => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
MSCONFIG\startupreg: lxdpmon.exe => "C:\Program Files (x86)\Lexmark Z2300 Series\lxdpmon.exe"
MSCONFIG\startupreg: MaquGzup => regsvr32.exe "C:\ProgramData\MaquGzup\MaquGzup.dat"
MSCONFIG\startupreg: MyDriveConnect.exe => "C:\Program Files (x86)\MyDrive Connect\MyDriveConnect.exe"
========================= Accounts: ==========================
Administrator (S-1-5-21-2397675965-2088753291-856571785-500 - Administrator - Enabled) => C:\Users\Administrator
Gast (S-1-5-21-2397675965-2088753291-856571785-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2397675965-2088753291-856571785-1007 - Limited - Enabled)
Sarah (S-1-5-21-2397675965-2088753291-856571785-1000 - Administrator - Enabled) => C:\Users\Sarah
UpdatusUser (S-1-5-21-2397675965-2088753291-856571785-1001 - Limited - Enabled) => C:\Users\UpdatusUser
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (12/13/2014 00:23:39 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Failed to compile: System.Runtime.Remoting, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x80131040
Error: (12/13/2014 00:23:39 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Failed to compile: System.Dynamic, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a . Error code = 0x80070002
Error: (12/13/2014 00:23:39 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Failed to compile: System.Configuration.Install, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a . Error code = 0x80131040
Error: (12/13/2014 00:23:39 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Failed to compile: Microsoft.CSharp, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a . Error code = 0x80070002
Error: (12/07/2014 01:23:28 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: LXDPwbgw.exe, Version: 1.93.0.0, Zeitstempel: 0x4743d828
Name des fehlerhaften Moduls: LXDPuldr.dll, Version: 1.88.0.0, Zeitstempel: 0x49f6d364
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000000dc0c
ID des fehlerhaften Prozesses: 0x11f0
Startzeit der fehlerhaften Anwendung: 0xLXDPwbgw.exe0
Pfad der fehlerhaften Anwendung: LXDPwbgw.exe1
Pfad des fehlerhaften Moduls: LXDPwbgw.exe2
Berichtskennung: LXDPwbgw.exe3
Error: (12/07/2014 01:22:45 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: LXDPwbgw.exe, Version: 1.93.0.0, Zeitstempel: 0x4743d828
Name des fehlerhaften Moduls: LXDPuldr.dll, Version: 1.88.0.0, Zeitstempel: 0x49f6d364
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000000dc0c
ID des fehlerhaften Prozesses: 0x1324
Startzeit der fehlerhaften Anwendung: 0xLXDPwbgw.exe0
Pfad der fehlerhaften Anwendung: LXDPwbgw.exe1
Pfad des fehlerhaften Moduls: LXDPwbgw.exe2
Berichtskennung: LXDPwbgw.exe3
Error: (12/05/2014 09:54:56 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"1".
Die abhängige Assemblierung "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (12/05/2014 09:54:27 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.CRT,processorArchitecture="x86",type="win32",version="8.0.50727.762"1".
Die abhängige Assemblierung "Microsoft.VC80.CRT,processorArchitecture="x86",type="win32",version="8.0.50727.762"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (12/05/2014 09:54:27 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.CRT,processorArchitecture="x86",type="win32",version="8.0.50727.762"1".
Die abhängige Assemblierung "Microsoft.VC80.CRT,processorArchitecture="x86",type="win32",version="8.0.50727.762"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (12/01/2014 07:00:06 PM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "K:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)"
System errors:
=============
Error: (12/13/2014 00:28:23 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen.
Error: (12/13/2014 00:28:23 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen.
Error: (12/13/2014 00:28:16 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen.
Error: (12/13/2014 00:28:16 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen.
Error: (12/13/2014 00:28:16 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen.
Error: (12/13/2014 00:27:07 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Start" aufgrund folgenden Fehlers fehlgeschlagen:
%%5
Error: (12/13/2014 00:27:07 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Start" aufgrund folgenden Fehlers fehlgeschlagen:
%%5
Error: (12/13/2014 00:03:57 PM) (Source: DCOM) (EventID: 10000) (User: )
Description: C:\Windows\System32\wisptis.exe -Embedding740{A5B020FD-E04B-4E67-B65A-E7DEED25B2CF}
Error: (12/13/2014 11:47:05 AM) (Source: volmgr) (EventID: 46) (User: )
Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen.
Error: (12/13/2014 11:47:05 AM) (Source: volmgr) (EventID: 46) (User: )
Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen.
Microsoft Office Sessions:
=========================
Error: (12/13/2014 00:23:39 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Failed to compile: System.Runtime.Remoting, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x80131040
System.Runtime.Remoting, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
Error: (12/13/2014 00:23:39 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Failed to compile: System.Dynamic, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a . Error code = 0x80070002
System.Dynamic, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
Error: (12/13/2014 00:23:39 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Failed to compile: System.Configuration.Install, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a . Error code = 0x80131040
System.Configuration.Install, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
Error: (12/13/2014 00:23:39 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Failed to compile: Microsoft.CSharp, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a . Error code = 0x80070002
Microsoft.CSharp, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
Error: (12/07/2014 01:23:28 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: LXDPwbgw.exe1.93.0.04743d828LXDPuldr.dll1.88.0.049f6d364c0000005000000000000dc0c11f001d012189ac89494C:\Windows\system32\spool\DRIVERS\x64\3\LXDPwbgw.exeC:\Windows\system32\spool\DRIVERS\x64\3\LXDPuldr.dlld8c91cb8-7e0b-11e4-b9b3-1c6f65be9f80
Error: (12/07/2014 01:22:45 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: LXDPwbgw.exe1.93.0.04743d828LXDPuldr.dll1.88.0.049f6d364c0000005000000000000dc0c132401d01218809ef652C:\Windows\system32\spool\DRIVERS\x64\3\LXDPwbgw.exeC:\Windows\system32\spool\DRIVERS\x64\3\LXDPuldr.dllbf682896-7e0b-11e4-b9b3-1c6f65be9f80
Error: (12/05/2014 09:54:56 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"C:\Windows\Installer\{C8E8D2E3-EF6A-4B1D-A09E-7B27EBE2F3CE}\recordingmanager.exe
Error: (12/05/2014 09:54:27 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.VC80.CRT,processorArchitecture="x86",type="win32",version="8.0.50727.762"c:\program files (x86)\Last.fm\ext_skypenotify.dll
Error: (12/05/2014 09:54:27 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.VC80.CRT,processorArchitecture="x86",type="win32",version="8.0.50727.762"c:\program files (x86)\Last.fm\ext_messengernotify.dll
Error: (12/01/2014 07:00:06 PM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: K:\Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)
CodeIntegrity Errors:
===================================
Date: 2014-11-15 22:16:54.795
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-11-15 22:16:54.483
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Processor: AMD Phenom(tm) II X4 955 Processor
Percentage of memory in use: 49%
Total physical RAM: 4093.55 MB
Available physical RAM: 2051.87 MB
Total Pagefile: 8591.73 MB
Available Pagefile: 6424.21 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB
==================== Drives ================================
Drive c: (System SSD) (Fixed) (Total:111.69 GB) (Free:26.57 GB) NTFS
Drive f: (Daten HDD) (Fixed) (Total:76.32 GB) (Free:35.84 GB) NTFS
Drive g: (System-reserviert) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[System with boot components (obtained from reading drive)]
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 76.3 GB) (Disk ID: 4A7D4A7E)
Partition 1: (Active) - (Size=76.3 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: D0A07874)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=111.7 GB) - (Type=07 NTFS)
==================== End Of Log ============================
Okay, Pfiff zurück. Habe mal zwei Stunden lang Windows upgedated. Nun öffnet sich Sony Vegas. =)
Dafür funktioniert Firefox nicht mehr und stürzt prompt beim Start ab, aber das sollte ich irgendwie alleine hinkriegen.
DAnke, schrauber! |
FRST 32-Bit | FRST 64-Bit