sporadische Bluescreens + snap.do + keine Windows-Updates

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 07:21 on 26/12/2013 (Schmiedler)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-12-2013
Ran by Schmiedler (administrator) on PC004 on 26-12-2013 07:24:59
Running from C:\Users\Schmiedler\Downloads
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe
() C:\Program Files (x86)\1&1 Surf-Stick\AssistantServices.exe
(VMware, Inc.) C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe
(VMware, Inc.) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version5\TeamViewer.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Dropbox, Inc.) C:\Users\windsaat\AppData\Roaming\Dropbox\bin\Dropbox.exe
(VMware, Inc.) C:\Program Files (x86)\VMware\VMware Player\hqtray.exe
(AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastUI.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
() C:\Program Files (x86)\1&1 Surf-Stick\UIExec.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe

==================== Registry (Whitelisted) ==================

HKLM-x32\...\Run: [VMware hqtray] - C:\Program Files (x86)\VMware\VMware Player\hqtray.exe [64048 2009-10-22] (VMware, Inc.)
HKLM-x32\...\Run: [avast] - C:\Program Files\Alwil Software\Avast5\AvastUI.exe [4858968 2013-05-09] (AVAST Software)
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe [49208 2011-03-24] (Hewlett-Packard)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [UIExec] - C:\Program Files (x86)\1&1 Surf-Stick\UIExec.exe [156448 2012-05-04] ()
HKLM-x32\...\Run: [20131121] - C:\Program Files\Alwil Software\Avast5\Setup\emupdate\e2b2e20b-b875-4e7c-9701-3b245e60e08a.exe [180184 2013-11-23] (AVAST Software)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [19875432 2013-06-21] (Skype Technologies S.A.)
Startup: C:\Users\Schmiedler\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\windsaat\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Schmiedler\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
Startup: C:\Users\windsaat\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Schmiedler\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\windsaat\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x1D5862E4219CCA01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://home.sweetim.com/?crg=3.1010006.10031&barid={870C7C8D-5E1F-11E2-8128-005056C00008}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM-x32 - DefaultScope {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010006.10031&barid={870C7C8D-5E1F-11E2-8128-005056C00008}
SearchScopes: HKLM-x32 - {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010006.10031&barid={870C7C8D-5E1F-11E2-8128-005056C00008}
SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snap.do/?publisher=QuickObrw&dpid=QuickObrw&co=DE&userid=55f2c2dd-8270-4719-bc9a-b41188f5be35&searchtype=ds&q={searchTerms}&installDate=23/11/2013
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snap.do/?publisher=QuickObrw&dpid=QuickObrw&co=DE&userid=55f2c2dd-8270-4719-bc9a-b41188f5be35&searchtype=ds&q={searchTerms}&installDate=23/11/2013
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll (AVAST Software)
BHO: QuickShare WidgetEngine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM - QuickShare Widget - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - QuickShare Widget - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\\SysWOW64\mscoree.dll (Microsoft Corporation)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
DPF: HKLM-x32 {4871A87A-BFDD-4106-8153-FFDE2BAC2967} hxxp://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.5.0.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog9 11 C:\Program Files (x86)\VMware\VMware Player\vsocklib.dll [338480] (VMware, Inc.)
Winsock: Catalog9 12 C:\Program Files (x86)\VMware\VMware Player\vsocklib.dll [338480] (VMware, Inc.)
Winsock: Catalog9-x64 11 C:\Program Files (x86)\VMware\VMware Server\x64\vsocklib.dll File Not found ()
Winsock: Catalog9-x64 12 C:\Program Files (x86)\VMware\VMware Server\x64\vsocklib.dll File Not found ()
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Schmiedler\AppData\Roaming\Mozilla\Firefox\Profiles\aqu8c6ix.default
FF NewTab: hxxp://feed.snap.do/?publisher=QuickObrw&dpid=QuickObrw&co=DE&userid=55f2c2dd-8270-4719-bc9a-b41188f5be35&searchtype=nt&installDate=23/11/2013
FF Homepage: hxxp://feed.snap.do/?publisher=QuickObrw&dpid=QuickObrw&co=DE&userid=55f2c2dd-8270-4719-bc9a-b41188f5be35&searchtype=hp&installDate=23/11/2013
FF Keyword.URL: hxxp://feed.snap.do/?publisher=QuickObrw&dpid=QuickObrw&co=DE&userid=55f2c2dd-8270-4719-bc9a-b41188f5be35&searchtype=ds&installDate=23/11/2013&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pack.google.com/Google Updater;version=14 - C:\Program Files (x86)\Google\Google Updater\2.4.1851.5542\npCIDetect14.dll (Google)
FF Plugin-x32: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 - C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll (RocketLife, LLP)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Users\Schmiedler\AppData\Roaming\Mozilla\Firefox\Profiles\aqu8c6ix.default\searchplugins\Web Search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: QuickShare Widget - C:\Users\Schmiedler\AppData\Roaming\Mozilla\Firefox\Profiles\aqu8c6ix.default\Extensions\{55f2c2dd-8270-4719-bc9a-b41188f5be35}
FF Extension: SweetPacks Toolbar for Firefox - C:\Users\Schmiedler\AppData\Roaming\Mozilla\Firefox\Profiles\aqu8c6ix.default\Extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\Alwil Software\Avast5\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\Alwil Software\Avast5\WebRep\FF

Chrome: 
=======
CHR HomePage: hxxp://feed.snap.do/?publisher=QuickObrw&dpid=QuickObrw&co=DE&userid=55f2c2dd-8270-4719-bc9a-b41188f5be35&searchtype=hp&installDate=23/11/2013
CHR RestoreOnStartup: "hxxp://feed.snap.do/?publisher=QuickObrw&dpid=QuickObrw&co=DE&userid=55f2c2dd-8270-4719-bc9a-b41188f5be35&searchtype=hp&installDate=23/11/2013"
CHR Extension: (QuickShare Widget) - C:\Users\Schmiedler\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0
CHR Extension: (Google Docs) - C:\Users\Schmiedler\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Schmiedler\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Schmiedler\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Schmiedler\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Google Wallet) - C:\Users\Schmiedler\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0
CHR Extension: (Gmail) - C:\Users\Schmiedler\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
S3 ufad-ws60; C:\Program Files (x86)\VMware\VMware Player\vmware-ufad.exe [191024 2009-10-12] (VMware, Inc.)
R2 UI Assistant Service; C:\Program Files (x86)\1&1 Surf-Stick\AssistantServices.exe [274208 2012-05-04] ()

==================== Drivers (Whitelisted) ====================

R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-06-28] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-06-28] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-06-28] ()
S3 nmserial; C:\Windows\System32\DRIVERS\nmserial.sys [75264 2012-01-12] (Windows (R) Win 7 DDK provider)
R1 vmm; C:\Windows\system32\Treiber\vmm.sys [296816 2007-02-18] (Microsoft Corporation)
R2 vstor2-ws60; C:\Program Files (x86)\VMware\VMware Player\vstor2-ws60.sys [32816 2009-10-12] (VMware, Inc.)
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]
S3 tsusbhub; system32\drivers\tsusbhub.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-26 07:24 - 2013-12-26 07:25 - 00013852 _____ C:\Users\Schmiedler\Downloads\FRST.txt
2013-12-26 07:24 - 2013-12-26 07:24 - 00000000 ____D C:\FRST
2013-12-26 07:23 - 2013-12-26 07:24 - 01928716 _____ (Farbar) C:\Users\Schmiedler\Downloads\FRST64.exe
2013-12-26 07:21 - 2013-12-26 07:21 - 00000482 _____ C:\Users\Schmiedler\Downloads\defogger_disable.log
2013-12-26 07:21 - 2013-12-26 07:21 - 00000000 _____ C:\Users\Schmiedler\defogger_reenable
2013-12-26 07:19 - 2013-12-26 07:19 - 00050477 _____ C:\Users\Schmiedler\Downloads\Defogger.exe
2013-12-23 10:30 - 2013-12-23 10:46 - 00013689 _____ C:\Users\windsaat\Documents\Veränderte Öffnungszeiten_7.odt
2013-12-23 09:09 - 2013-12-23 09:09 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-22 12:50 - 2013-12-22 12:50 - 00287224 _____ C:\Windows\Minidump\122213-22807-01.dmp
2013-12-20 17:05 - 2013-12-20 17:05 - 00288200 _____ C:\Windows\Minidump\122013-45848-01.dmp
2013-12-20 13:07 - 2013-12-20 13:07 - 00286888 _____ C:\Windows\Minidump\122013-56129-01.dmp
2013-12-19 15:39 - 2013-12-19 15:39 - 00289144 _____ C:\Windows\Minidump\121913-103319-01.dmp
2013-12-18 15:59 - 2013-12-18 15:59 - 00290928 _____ C:\Windows\Minidump\121813-44772-01.dmp
2013-12-17 18:10 - 2013-12-17 18:10 - 00289672 _____ C:\Windows\Minidump\121713-19874-01.dmp
2013-12-17 12:29 - 2013-12-17 12:29 - 00288744 _____ C:\Windows\Minidump\121713-51277-01.dmp
2013-12-07 13:15 - 2013-12-07 13:15 - 00285992 _____ C:\Windows\Minidump\120713-54413-01.dmp
2013-12-03 15:35 - 2013-12-03 15:35 - 00286904 _____ C:\Windows\Minidump\120313-97781-01.dmp
2013-11-30 13:27 - 2013-11-30 13:27 - 00012583 _____ C:\Users\windsaat\Desktop\zuSalm_Mail.odt
2013-11-29 16:18 - 2013-11-29 16:18 - 00286680 _____ C:\Windows\Minidump\112913-58718-01.dmp
2013-11-26 15:04 - 2013-11-26 15:04 - 00285768 _____ C:\Windows\Minidump\112613-180555-01.dmp
2013-11-26 08:17 - 2013-11-26 08:17 - 00283576 _____ C:\Windows\Minidump\112613-22354-01.dmp
2013-11-26 07:47 - 2013-11-26 07:47 - 00282936 _____ C:\Windows\Minidump\112613-28828-01.dmp
2013-11-26 07:45 - 2013-11-26 07:45 - 00000000 __SHD C:\found.000

==================== One Month Modified Files and Folders =======

2013-12-26 07:25 - 2013-12-26 07:24 - 00013852 _____ C:\Users\Schmiedler\Downloads\FRST.txt
2013-12-26 07:24 - 2013-12-26 07:24 - 00000000 ____D C:\FRST
2013-12-26 07:24 - 2013-12-26 07:23 - 01928716 _____ (Farbar) C:\Users\Schmiedler\Downloads\FRST64.exe
2013-12-26 07:21 - 2013-12-26 07:21 - 00000482 _____ C:\Users\Schmiedler\Downloads\defogger_disable.log
2013-12-26 07:21 - 2013-12-26 07:21 - 00000000 _____ C:\Users\Schmiedler\defogger_reenable
2013-12-26 07:21 - 2009-12-28 15:17 - 00000000 ____D C:\Users\Schmiedler
2013-12-26 07:20 - 2010-01-23 15:04 - 00000000 ____D C:\Users\Schmiedler\AppData\Roaming\Skype
2013-12-26 07:19 - 2013-12-26 07:19 - 00050477 _____ C:\Users\Schmiedler\Downloads\Defogger.exe
2013-12-26 07:18 - 2013-10-11 11:58 - 00000348 _____ C:\Windows\Tasks\HP Photo Creations Communicator.job
2013-12-26 07:18 - 2009-07-14 05:45 - 00015120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-26 07:18 - 2009-07-14 05:45 - 00015120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-26 07:10 - 2009-07-14 18:58 - 00658404 _____ C:\Windows\system32\perfh007.dat
2013-12-26 07:10 - 2009-07-14 18:58 - 00131842 _____ C:\Windows\system32\perfc007.dat
2013-12-26 07:10 - 2009-07-14 06:13 - 01506624 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-26 07:09 - 2009-12-28 15:10 - 01669742 _____ C:\Windows\WindowsUpdate.log
2013-12-26 07:08 - 2010-01-23 13:33 - 00004140 _____ C:\Windows\System32\Tasks\Google Software Updater
2013-12-26 07:08 - 2010-01-23 13:33 - 00001034 _____ C:\Windows\Tasks\Google Software Updater.job
2013-12-26 07:07 - 2013-01-02 05:44 - 00000000 ___RD C:\Users\Schmiedler\Dropbox
2013-12-26 07:07 - 2013-01-02 05:40 - 00000000 ____D C:\Users\Schmiedler\AppData\Roaming\Dropbox
2013-12-26 07:06 - 2010-01-23 13:33 - 00001118 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-26 07:06 - 2010-01-23 13:33 - 00001114 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-26 07:05 - 2010-02-04 14:48 - 00000000 ____D C:\ProgramData\VMware
2013-12-26 07:05 - 2009-12-28 15:37 - 00000000 ____D C:\ProgramData\NVIDIA
2013-12-26 07:05 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-26 07:05 - 2009-07-14 05:51 - 00047408 _____ C:\Windows\setupact.log
2013-12-24 13:39 - 2013-01-02 04:59 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-24 09:42 - 2013-01-14 10:16 - 00000000 ____D C:\JposNetz
2013-12-24 09:19 - 2013-02-25 07:58 - 00000000 ___RD C:\Users\windsaat\Dropbox
2013-12-24 09:19 - 2013-02-25 07:55 - 00000000 ____D C:\Users\windsaat\AppData\Roaming\Dropbox
2013-12-24 09:18 - 2013-01-02 05:35 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-23 10:46 - 2013-12-23 10:30 - 00013689 _____ C:\Users\windsaat\Documents\Veränderte Öffnungszeiten_7.odt
2013-12-23 09:09 - 2013-12-23 09:09 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-22 12:50 - 2013-12-22 12:50 - 00287224 _____ C:\Windows\Minidump\122213-22807-01.dmp
2013-12-22 12:50 - 2013-01-02 21:22 - 00000000 ____D C:\Windows\Minidump
2013-12-20 17:05 - 2013-12-20 17:05 - 00288200 _____ C:\Windows\Minidump\122013-45848-01.dmp
2013-12-20 13:07 - 2013-12-20 13:07 - 00286888 _____ C:\Windows\Minidump\122013-56129-01.dmp
2013-12-19 15:39 - 2013-12-19 15:39 - 00289144 _____ C:\Windows\Minidump\121913-103319-01.dmp
2013-12-18 15:59 - 2013-12-18 15:59 - 00290928 _____ C:\Windows\Minidump\121813-44772-01.dmp
2013-12-17 18:10 - 2013-12-17 18:10 - 00289672 _____ C:\Windows\Minidump\121713-19874-01.dmp
2013-12-17 12:29 - 2013-12-17 12:29 - 00288744 _____ C:\Windows\Minidump\121713-51277-01.dmp
2013-12-17 09:50 - 2009-12-28 15:44 - 00324260 _____ C:\Windows\PFRO.log
2013-12-14 10:07 - 2013-03-27 09:18 - 00002261 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-12-14 10:07 - 2010-01-23 13:33 - 00000000 ____D C:\Program Files (x86)\Google
2013-12-12 18:19 - 2013-08-06 10:04 - 00000000 ____D C:\Users\windsaat\Documents\Plakat-Dokumente
2013-12-11 18:39 - 2013-01-02 04:59 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-11 18:39 - 2013-01-02 04:59 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-11 18:39 - 2013-01-02 04:59 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-07 14:01 - 2010-01-23 13:33 - 00004114 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-07 14:01 - 2010-01-23 13:33 - 00003862 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-07 13:15 - 2013-12-07 13:15 - 00285992 _____ C:\Windows\Minidump\120713-54413-01.dmp
2013-12-05 15:02 - 2013-04-19 08:30 - 00002224 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-12-04 11:37 - 2009-07-14 06:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-12-03 15:35 - 2013-12-03 15:35 - 00286904 _____ C:\Windows\Minidump\120313-97781-01.dmp
2013-11-30 14:56 - 2013-11-11 15:29 - 00000000 ____D C:\Users\windsaat\Documents\KIRCHE
2013-11-30 13:27 - 2013-11-30 13:27 - 00012583 _____ C:\Users\windsaat\Desktop\zuSalm_Mail.odt
2013-11-29 16:18 - 2013-11-29 16:18 - 00286680 _____ C:\Windows\Minidump\112913-58718-01.dmp
2013-11-28 18:56 - 2013-05-07 14:11 - 00028182 _____ C:\Users\windsaat\Documents\BRIEFE.odt
2013-11-26 15:04 - 2013-11-26 15:04 - 00285768 _____ C:\Windows\Minidump\112613-180555-01.dmp
2013-11-26 08:17 - 2013-11-26 08:17 - 00283576 _____ C:\Windows\Minidump\112613-22354-01.dmp
2013-11-26 07:47 - 2013-11-26 07:47 - 00282936 _____ C:\Windows\Minidump\112613-28828-01.dmp
2013-11-26 07:45 - 2013-11-26 07:45 - 00000000 __SHD C:\found.000

Some content of TEMP:
====================
C:\Users\Schmiedler\AppData\Local\Temp\aswV5Hlp.dll
C:\Users\Schmiedler\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\Schmiedler\AppData\Local\Temp\GenericUninstall.exe
C:\Users\Schmiedler\AppData\Local\Temp\msxml6-KB927977-enu-amd64.exe
C:\Users\Schmiedler\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Schmiedler\AppData\Local\Temp\nvStInst.exe
C:\Users\Schmiedler\AppData\Local\Temp\SIMEEIInstaller.exe
C:\Users\Schmiedler\AppData\Local\Temp\uninstaller.exe
C:\Users\windsaat\AppData\Local\Temp\SkypeSetup.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-20 09:57

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 25-12-2013
Ran by Schmiedler at 2013-12-26 07:25:29
Running from C:\Users\Schmiedler\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Out of date) {2B2D1395-420B-D5C9-657E-930FE358FC3C}
AS: avast! Antivirus (Enabled - Out of date) {904CF271-6431-DA47-5FCE-A87D98DFB681}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

1&1 Surf-Stick (x32 Version: 1.0.0.2)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170)
avast! Free Antivirus (x32 Version: 8.0.1489.0)
Citrix XenCenter (x32 Version: 5.5.0)
Dropbox (HKCU Version: 1.6.18)
EtikettenAssistent 4.2 (x32 Version: 4.2.1)
Google Chrome (x32 Version: 31.0.1650.63)
Google Earth (x32 Version: 7.1.2.2041)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0)
Google Toolbar for Internet Explorer (x32 Version: 7.5.4805.320)
Google Update Helper (x32 Version: 1.3.22.3)
Google Updater (x32 Version: 2.4.1851.5542)
HP Officejet 6600 - Grundlegende Software für das Gerät (Version: 25.0.619.0)
HP Officejet 6600 Hilfe (x32 Version: 140.0.2.2)
HP Photo Creations (x32 Version: 1.0.0.12412)
HP Update (x32 Version: 5.003.000.004)
I.R.I.S. OCR (x32 Version: 12.3.4.0)
IrfanView (remove only) (x32 Version: 4.36)
KeePass Password Safe 1.24 (x32 Version: 1.24)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Silverlight (x32 Version: 4.1.10329.0)
Microsoft Virtual PC 2007 (Version: 6.0.156.0)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0)
Mozilla Maintenance Service (x32 Version: 26.0)
NVIDIA 3D Vision Controller-Treiber 310.90 (Version: 310.90)
NVIDIA 3D Vision Treiber 310.90 (Version: 310.90)
NVIDIA Grafiktreiber 310.90 (Version: 310.90)
NVIDIA Install Application (Version: 2.1002.95.599)
NVIDIA PhysX (x32 Version: 9.12.1031)
NVIDIA PhysX-Systemsoftware 9.12.1031 (Version: 9.12.1031)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.1090)
NVIDIA Systemsteuerung 310.90 (Version: 310.90)
NVIDIA Update 1.11.3 (Version: 1.11.3)
NVIDIA Update Components (Version: 1.11.3)
OpenOffice.org 3.4.1 (x32 Version: 3.41.9593)
PVSonyDll (Version: 1.00.0001)
QuickShare (x32 Version: 1.146.60.12450) <==== ATTENTION
Shared Add-in Extensibility Update for Microsoft .NET Framework 2.0 (KB908002) (x32 Version: 1.0.0)
Shared Add-in Support Update for Microsoft .NET Framework 2.0 (KB908002) (x32 Version: 1.0.0)
Skype™ 6.6 (x32 Version: 6.6.106)
SweetIM for Messenger 3.7 (x32 Version: 3.7.0007) <==== ATTENTION
Sweetpacks Bundle Uninstaller (x32 Version: 1.0.0.0) <==== ATTENTION
TeamViewer 5 (x32 Version: 5.1.15822 )
tools-linux (x32 Version: 8.1.4.11056)
tools-windows (x32 Version: 8.1.3.9911)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
VMware Player (x32 Version: 3.0.0.9911)

==================== Restore Points  =========================


==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {0C4B50C4-FF19-4108-9984-647FB62F04F9} - System32\Tasks\avast! Emergency Update => C:\Program Files\Alwil Software\Avast5\AvastEmUpdate.exe [2013-05-09] (AVAST Software)
Task: {3F2A7ACA-2B47-455E-9046-60DC6393C33B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-01-23] (Google Inc.)
Task: {4DEF35C9-834D-4B58-B59B-3D762FA22FB4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-01-23] (Google Inc.)
Task: {5D0D1590-5583-423A-83BF-EDB5B62CF6AF} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11] (Adobe Systems Incorporated)
Task: {C4CE80E4-57A9-4398-AC8F-DAD827A891AE} - System32\Tasks\Google Software Updater => C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2013-04-19] (Google)
Task: {FDD8EB6C-20A1-4D48-B744-6B2E07E5D3BA} - System32\Tasks\HP Photo Creations Communicator => C:\ProgramData\HP Photo Creations\Communicator.exe [2011-09-20] ()
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\Google Software Updater.job => C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HP Photo Creations Communicator.job => C:\ProgramData\HP Photo Creations\Communicator.exe

==================== Loaded Modules (whitelisted) =============

2013-11-08 12:13 - 2013-11-06 00:05 - 02107904 _____ () C:\Program Files\Alwil Software\Avast5\defs\13110702\algo.dll
2009-10-22 04:43 - 2009-10-22 04:43 - 00970288 _____ () C:\Program Files (x86)\VMware\VMware Player\libxml2.dll
2009-10-22 04:43 - 2009-10-22 04:43 - 00068656 _____ () C:\Program Files (x86)\VMware\VMware Player\zlib1.dll
2013-03-13 21:48 - 2013-03-13 21:48 - 24978944 _____ () C:\Users\windsaat\AppData\Roaming\Dropbox\bin\libcef.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
2013-12-23 09:09 - 2013-12-23 09:09 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2013-12-11 18:39 - 2013-12-11 18:39 - 16242056 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Users\windsaat\Desktop\2013-01-24 16.38.48.jpg:com.dropbox.attributes

==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (12/26/2013 07:13:07 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: TrustedInstaller.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7989b
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec4aa8e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000003074a
ID des fehlerhaften Prozesses: 0x474
Startzeit der fehlerhaften Anwendung: 0xTrustedInstaller.exe0
Pfad der fehlerhaften Anwendung: TrustedInstaller.exe1
Pfad des fehlerhaften Moduls: TrustedInstaller.exe2
Berichtskennung: TrustedInstaller.exe3

Error: (12/26/2013 07:09:05 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: TrustedInstaller.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7989b
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec4aa8e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000003074a
ID des fehlerhaften Prozesses: 0x758
Startzeit der fehlerhaften Anwendung: 0xTrustedInstaller.exe0
Pfad der fehlerhaften Anwendung: TrustedInstaller.exe1
Pfad des fehlerhaften Moduls: TrustedInstaller.exe2
Berichtskennung: TrustedInstaller.exe3

Error: (12/26/2013 07:08:05 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: TrustedInstaller.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7989b
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec4aa8e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000003074a
ID des fehlerhaften Prozesses: 0xf28
Startzeit der fehlerhaften Anwendung: 0xTrustedInstaller.exe0
Pfad der fehlerhaften Anwendung: TrustedInstaller.exe1
Pfad des fehlerhaften Moduls: TrustedInstaller.exe2
Berichtskennung: TrustedInstaller.exe3

Error: (12/26/2013 07:06:03 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: TrustedInstaller.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7989b
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec4aa8e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000003074a
ID des fehlerhaften Prozesses: 0x438
Startzeit der fehlerhaften Anwendung: 0xTrustedInstaller.exe0
Pfad der fehlerhaften Anwendung: TrustedInstaller.exe1
Pfad des fehlerhaften Moduls: TrustedInstaller.exe2
Berichtskennung: TrustedInstaller.exe3

Error: (12/24/2013 01:43:06 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: TrustedInstaller.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7989b
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec4aa8e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000003074a
ID des fehlerhaften Prozesses: 0x608
Startzeit der fehlerhaften Anwendung: 0xTrustedInstaller.exe0
Pfad der fehlerhaften Anwendung: TrustedInstaller.exe1
Pfad des fehlerhaften Moduls: TrustedInstaller.exe2
Berichtskennung: TrustedInstaller.exe3

Error: (12/24/2013 00:45:19 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe_SysMain, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc3c1
Name des fehlerhaften Moduls: sysmain.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7c9db
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000544fd
ID des fehlerhaften Prozesses: 0x760
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe_SysMain0
Pfad der fehlerhaften Anwendung: svchost.exe_SysMain1
Pfad des fehlerhaften Moduls: svchost.exe_SysMain2
Berichtskennung: svchost.exe_SysMain3

Error: (12/24/2013 09:25:39 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: TrustedInstaller.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7989b
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec4aa8e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000003074a
ID des fehlerhaften Prozesses: 0x1234
Startzeit der fehlerhaften Anwendung: 0xTrustedInstaller.exe0
Pfad der fehlerhaften Anwendung: TrustedInstaller.exe1
Pfad des fehlerhaften Moduls: TrustedInstaller.exe2
Berichtskennung: TrustedInstaller.exe3

Error: (12/24/2013 09:21:36 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: TrustedInstaller.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7989b
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec4aa8e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000003074a
ID des fehlerhaften Prozesses: 0x1214
Startzeit der fehlerhaften Anwendung: 0xTrustedInstaller.exe0
Pfad der fehlerhaften Anwendung: TrustedInstaller.exe1
Pfad des fehlerhaften Moduls: TrustedInstaller.exe2
Berichtskennung: TrustedInstaller.exe3

Error: (12/24/2013 09:20:37 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: TrustedInstaller.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7989b
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec4aa8e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000003074a
ID des fehlerhaften Prozesses: 0x830
Startzeit der fehlerhaften Anwendung: 0xTrustedInstaller.exe0
Pfad der fehlerhaften Anwendung: TrustedInstaller.exe1
Pfad des fehlerhaften Moduls: TrustedInstaller.exe2
Berichtskennung: TrustedInstaller.exe3

Error: (12/24/2013 09:18:35 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: TrustedInstaller.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7989b
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec4aa8e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000003074a
ID des fehlerhaften Prozesses: 0x434
Startzeit der fehlerhaften Anwendung: 0xTrustedInstaller.exe0
Pfad der fehlerhaften Anwendung: TrustedInstaller.exe1
Pfad des fehlerhaften Moduls: TrustedInstaller.exe2
Berichtskennung: TrustedInstaller.exe3


System errors:
=============
Error: (12/26/2013 07:13:07 AM) (Source: Service Control Manager) (User: )
Description: Dienst "Windows Modules Installer" wurde unerwartet beendet. Dies ist bereits 4 Mal passiert.

Error: (12/26/2013 07:09:34 AM) (Source: DCOM) (User: )
Description: {752073A1-23F2-4396-85F0-8FDB879ED0ED}

Error: (12/26/2013 07:09:05 AM) (Source: Service Control Manager) (User: )
Description: Dienst "Windows Modules Installer" wurde unerwartet beendet. Dies ist bereits 3 Mal passiert.

Error: (12/26/2013 07:08:05 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Modules Installer" wurde unerwartet beendet. Dies ist bereits 2 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 300000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (12/26/2013 07:07:59 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (12/26/2013 07:07:59 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (12/26/2013 07:06:03 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Modules Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (12/24/2013 01:43:06 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Modules Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (12/24/2013 00:45:19 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Superfetch" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (12/24/2013 09:25:39 AM) (Source: Service Control Manager) (User: )
Description: Dienst "Windows Modules Installer" wurde unerwartet beendet. Dies ist bereits 4 Mal passiert.


Microsoft Office Sessions:
=========================
Error: (12/26/2013 07:13:07 AM) (Source: Application Error)(User: )
Description: TrustedInstaller.exe6.1.7601.175144ce7989bntdll.dll6.1.7601.177254ec4aa8ec0000005000000000003074a47401cf02018a29f400C:\Windows\servicing\TrustedInstaller.exeC:\Windows\SYSTEM32\ntdll.dllc8e6dd90-6df4-11e3-8178-005056c00008

Error: (12/26/2013 07:09:05 AM) (Source: Application Error)(User: )
Description: TrustedInstaller.exe6.1.7601.175144ce7989bntdll.dll6.1.7601.177254ec4aa8ec0000005000000000003074a75801cf0200faba6d70C:\Windows\servicing\TrustedInstaller.exeC:\Windows\SYSTEM32\ntdll.dll38f5cae1-6df4-11e3-8178-005056c00008

Error: (12/26/2013 07:08:05 AM) (Source: Application Error)(User: )
Description: TrustedInstaller.exe6.1.7601.175144ce7989bntdll.dll6.1.7601.177254ec4aa8ec0000005000000000003074af2801cf0200d62503d2C:\Windows\servicing\TrustedInstaller.exeC:\Windows\SYSTEM32\ntdll.dll14f19533-6df4-11e3-8178-005056c00008

Error: (12/26/2013 07:06:03 AM) (Source: Application Error)(User: )
Description: TrustedInstaller.exe6.1.7601.175144ce7989bntdll.dll6.1.7601.177254ec4aa8ec0000005000000000003074a43801cf02008083d3b0C:\Windows\servicing\TrustedInstaller.exeC:\Windows\SYSTEM32\ntdll.dllcc2bef50-6df3-11e3-8178-005056c00008

Error: (12/24/2013 01:43:06 PM) (Source: Application Error)(User: )
Description: TrustedInstaller.exe6.1.7601.175144ce7989bntdll.dll6.1.7601.177254ec4aa8ec0000005000000000003074a60801cf00a5aff5b168C:\Windows\servicing\TrustedInstaller.exeC:\Windows\SYSTEM32\ntdll.dlleeed1b8e-6c98-11e3-b7ff-005056c00008

Error: (12/24/2013 00:45:19 PM) (Source: Application Error)(User: )
Description: svchost.exe_SysMain6.1.7600.163854a5bc3c1sysmain.dll6.1.7601.175144ce7c9dbc000000500000000000544fd76001cf0080b40bdeddC:\Windows\system32\svchost.exec:\windows\system32\sysmain.dlldc7249e0-6c90-11e3-b7ff-005056c00008

Error: (12/24/2013 09:25:39 AM) (Source: Application Error)(User: )
Description: TrustedInstaller.exe6.1.7601.175144ce7989bntdll.dll6.1.7601.177254ec4aa8ec0000005000000000003074a123401cf0081b9135a25C:\Windows\servicing\TrustedInstaller.exeC:\Windows\SYSTEM32\ntdll.dllf7cce084-6c74-11e3-b7ff-005056c00008

Error: (12/24/2013 09:21:36 AM) (Source: Application Error)(User: )
Description: TrustedInstaller.exe6.1.7601.175144ce7989bntdll.dll6.1.7601.177254ec4aa8ec0000005000000000003074a121401cf008129173db2C:\Windows\servicing\TrustedInstaller.exeC:\Windows\SYSTEM32\ntdll.dll675039c2-6c74-11e3-b7ff-005056c00008

Error: (12/24/2013 09:20:37 AM) (Source: Application Error)(User: )
Description: TrustedInstaller.exe6.1.7601.175144ce7989bntdll.dll6.1.7601.177254ec4aa8ec0000005000000000003074a83001cf008105140c2dC:\Windows\servicing\TrustedInstaller.exeC:\Windows\SYSTEM32\ntdll.dll43de3c2e-6c74-11e3-b7ff-005056c00008

Error: (12/24/2013 09:18:35 AM) (Source: Application Error)(User: )
Description: TrustedInstaller.exe6.1.7601.175144ce7989bntdll.dll6.1.7601.177254ec4aa8ec0000005000000000003074a43401cf0080b0533b79C:\Windows\servicing\TrustedInstaller.exeC:\Windows\SYSTEM32\ntdll.dllfb17d4d0-6c73-11e3-b7ff-005056c00008


CodeIntegrity Errors:
===================================
  Date: 2013-03-06 15:03:36.832
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 16%
Total physical RAM: 12285.46 MB
Available physical RAM: 10303.89 MB
Total Pagefile: 24569.1 MB
Available Pagefile: 22530.52 MB
Total Virtual: 8192 MB
Available Virtual: 8191.78 MB

==================== Drives ================================

Drive c: (System) (Fixed) (Total:97.56 GB) (Free:11.1 GB) NTFS
Drive d: () (Fixed) (Total:833.86 GB) (Free:799.92 GB) NTFS
Drive e: (KURSBUCH_SYS_TRA) (CDROM) (Total:0.05 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 7A319A46)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=98 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=834 GB) - (Type=07 NTFS)

==================== End Of Log ============================