![]() |
|
Plagegeister aller Art und deren Bekämpfung: Windows 7 möglicher Trojaner befall nach gefälschter Telekom-MailWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() | #1 |
| ![]() Windows 7 möglicher Trojaner befall nach gefälschter Telekom-Mail Hallo, nach dem öffnen eines Anhags einer gefälschten Telekom-Mail(das wurde mir erst danach klar ![]() Beim öfnnen des Anhangs ist Firefox abgestürzt und lies sich nicht mehr öffnen. Dies wurde dann von mir deinstalliert und wieder neu aufgespielt. Danach funktionierte es wieder und Fragte mich dann ob es den vorher angeklickten Anhang öffnen soll was von mir natürlich abgebrochen wurde. Da auf dem Rechner Online-Banking und Einkäufe über Amazon usw. getätigt werden bin ich mir jetzt nicht mehr sicher ob dies noch ohne gefährdung möglich ist. Meine Frage ist nun wie kann ich das überprüfen. Nach einer Prüfung mit ESET Smart Security wurde eine Art von Kryptik.BRDA Trojaner gefunden. Leider finde ich den Log dazu nicht mehr. GMER hat bei mir nicht funktioniert. Die anderen Logs habe ich angehängt. Gruß und Danke im vorraus für die Hilfe Hier defrogger_disable Log: Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1) Log created at 18:03 on 19/01/2014 (Simon) Checking for autostart values... HKCU\~\Run values retrieved. HKLM\~\Run values retrieved. Checking for services/drivers... -=E.O.F=- Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-01-2014 03 Ran by Simon (administrator) on SIMON-PC on 19-01-2014 18:06:22 Running from C:\Users\Simon\Desktop Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE () C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe () C:\Windows\SysWOW64\srvany.exe () C:\Windows\KMService.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [egui] - C:\Program Files\ESET\ESET Smart Security\egui.exe [5618456 2013-09-12] (ESET) HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2011-04-14] (Renesas Electronics Corporation) HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2010-06-09] (Hewlett-Packard) HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40312 2013-12-18] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.) HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation) HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.) HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.) HKCU\...\Run: [MobileDocuments] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe HKCU\...\Run: [OfficeSyncProcess] - C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE [720064 2013-04-22] (Microsoft Corporation) HKCU\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x00000000 MountPoints2: {9dd48cb8-1e8d-11e1-a6d2-8c89a55787e3} - K:\setup.exe Startup: C:\Users\Simon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation) Startup: C:\Users\Simon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SolidWorks Taskplaner Engine.lnk ShortcutTarget: SolidWorks Taskplaner Engine.lnk -> C:\Program Files\SolidWorks\swScheduler\swBOEngine.exe (Dassault Systèmes SolidWorks Corp.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.avira.com/?l=dis&o=APN10395&gct=hp&dc=EU&locale=de_DE HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xEF94FD8796B2CC01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de SearchScopes: HKCU - {F4D83B40-9ED3-450F-BF78-433EC444C9FD} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-3&o=APN10395&src=kw&q={searchTerms}&locale=de_DE&apn_ptnrs=^ABT&apn_dtid=^YYYYYY^YY^DE&apn_uid=d468250a-78b3-4697-a0fb-f4e238a40252&apn_sauid=387A6E24-080C-4C0E-95DD-55F19A398B06 BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\Simon\AppData\Roaming\Mozilla\Firefox\Profiles\qebdlhtz.default FF DefaultSearchEngine: Ask.com FF SearchEngineOrder.1: Ask.com FF SelectedSearchEngine: Ask.com FF Homepage: hxxp://www.google.de FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll () FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Users\Simon\AppData\Roaming\Mozilla\Firefox\Profiles\qebdlhtz.default\searchplugins\askcom.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2014-01-18] FF HKLM-x32\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\virtualKeyboard@kaspersky.ru FF HKLM-x32\...\Firefox\Extensions: [KavAntiBanner@Kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\KavAntiBanner@kaspersky.ru FF HKLM-x32\...\Firefox\Extensions: [linkfilter@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\linkfilter@kaspersky.ru FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2014-01-18] ==================== Services (Whitelisted) ================= R2 AAV UpdateService; C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [128296 2008-10-24] () S3 CoordinatorServiceHost; C:\Program Files\SolidWorks\swScheduler\DTSCoordinatorService.exe [79144 2008-09-09] (Dassault Systèmes SolidWorks Corp.) R2 ekrn; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [1337752 2013-09-12] (ESET) R2 KMService; C:\Windows\SysWOW64\srvany.exe [8192 2003-04-18] () R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-21] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2011-12-06] () R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [270912 2011-12-04] (DT Soft Ltd) R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [239320 2013-09-17] (ESET) R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [168256 2013-09-17] (ESET) R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [220232 2013-09-17] (ESET) R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [44120 2013-09-17] (ESET) R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [62136 2013-09-17] (ESET) R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2011-12-06] () U5 edevmon; C:\Windows\System32\Drivers\edevmon.sys [239296 2013-09-17] (ESET) S3 VGPU; System32\drivers\rdvgkmd.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-19 18:06 - 2014-01-19 18:06 - 00011466 _____ C:\Users\Simon\Desktop\FRST.txt 2014-01-19 18:06 - 2014-01-19 18:06 - 00000000 ____D C:\FRST 2014-01-19 18:04 - 2014-01-19 18:04 - 02076672 _____ (Farbar) C:\Users\Simon\Desktop\FRST64.exe 2014-01-19 18:03 - 2014-01-19 18:03 - 00000472 _____ C:\Users\Simon\Desktop\defogger_disable.log 2014-01-19 18:03 - 2014-01-19 18:03 - 00000000 _____ C:\Users\Simon\defogger_reenable 2014-01-19 18:00 - 2014-01-19 18:00 - 00050477 _____ C:\Users\Simon\Desktop\Defogger.exe 2014-01-19 11:36 - 2014-01-19 11:36 - 02347384 _____ (ESET) C:\Users\Simon\Downloads\esetsmartinstaller_enu.exe 2014-01-18 17:45 - 2014-01-18 17:45 - 00000000 ____D C:\Users\Simon\AppData\Local\ESET 2014-01-18 17:44 - 2014-01-18 17:44 - 00000000 ____D C:\Program Files\ESET 2014-01-18 17:26 - 2014-01-18 17:26 - 00293192 _____ C:\Windows\Minidump\011814-6224-01.dmp 2014-01-18 15:38 - 2014-01-18 15:42 - 00000000 ___HD C:\Users\Simon\AppData\Roaming\F738DC84 2014-01-16 22:27 - 2014-01-16 22:27 - 00284344 _____ C:\Windows\Minidump\011614-5662-01.dmp 2014-01-16 20:47 - 2014-01-16 20:47 - 00283640 _____ C:\Windows\Minidump\011614-6130-01.dmp 2014-01-16 19:49 - 2014-01-16 19:49 - 00002019 _____ C:\Users\Public\Desktop\Adobe Reader X.lnk 2014-01-15 21:41 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2014-01-15 21:41 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2014-01-15 21:41 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2014-01-15 21:41 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2014-01-15 21:41 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2014-01-15 21:41 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2014-01-15 21:41 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2014-01-15 21:41 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2014-01-15 21:41 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-01-12 15:11 - 2014-01-12 15:11 - 00003231 _____ C:\Users\Simon\Desktop\Microsoft Outlook 2010.lnk 2014-01-12 15:10 - 2014-01-12 15:10 - 00003047 _____ C:\Users\Simon\Desktop\Microsoft Excel 2010.lnk 2014-01-12 15:10 - 2014-01-12 15:10 - 00003029 _____ C:\Users\Simon\Desktop\Microsoft Word 2010.lnk 2014-01-12 15:10 - 2014-01-12 15:10 - 00002965 _____ C:\Users\Simon\Desktop\Microsoft Access 2010.lnk 2014-01-11 15:28 - 2014-01-11 15:28 - 00000632 _____ C:\Users\Simon\Desktop\SIMON.lnk 2014-01-07 16:56 - 2014-01-07 16:59 - 00000001 ____R C:\Users\Simon\serverport 2014-01-05 16:41 - 2014-01-07 12:06 - 00000657 _____ C:\Users\Simon\Desktop\FINANZEN.lnk 2014-01-05 16:16 - 2014-01-05 16:16 - 00283496 _____ C:\Windows\Minidump\010514-6286-01.dmp 2014-01-05 14:46 - 2014-01-05 14:46 - 00297384 _____ C:\Windows\Minidump\010514-5694-01.dmp 2014-01-05 13:21 - 2014-01-18 18:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-12-31 15:48 - 2014-01-07 19:57 - 00000692 _____ C:\Users\Simon\Desktop\BRÜCKENSTRAE.lnk ==================== One Month Modified Files and Folders ======= 2014-01-19 18:06 - 2014-01-19 18:06 - 00011466 _____ C:\Users\Simon\Desktop\FRST.txt 2014-01-19 18:06 - 2014-01-19 18:06 - 00000000 ____D C:\FRST 2014-01-19 18:04 - 2014-01-19 18:04 - 02076672 _____ (Farbar) C:\Users\Simon\Desktop\FRST64.exe 2014-01-19 18:03 - 2014-01-19 18:03 - 00000472 _____ C:\Users\Simon\Desktop\defogger_disable.log 2014-01-19 18:03 - 2014-01-19 18:03 - 00000000 _____ C:\Users\Simon\defogger_reenable 2014-01-19 18:03 - 2011-12-04 15:33 - 00000000 ____D C:\Users\Simon 2014-01-19 18:00 - 2014-01-19 18:00 - 00050477 _____ C:\Users\Simon\Desktop\Defogger.exe 2014-01-19 17:48 - 2013-12-10 21:26 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-01-19 12:14 - 2009-07-14 05:45 - 00021280 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-19 12:14 - 2009-07-14 05:45 - 00021280 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-19 11:36 - 2014-01-19 11:36 - 02347384 _____ (ESET) C:\Users\Simon\Downloads\esetsmartinstaller_enu.exe 2014-01-19 11:10 - 2011-12-04 15:33 - 01200917 _____ C:\Windows\WindowsUpdate.log 2014-01-19 11:02 - 2010-11-21 07:50 - 00771258 _____ C:\Windows\system32\perfh007.dat 2014-01-19 11:02 - 2010-11-21 07:50 - 00174336 _____ C:\Windows\system32\perfc007.dat 2014-01-19 11:02 - 2009-07-14 06:13 - 01794936 _____ C:\Windows\system32\PerfStringBackup.INI 2014-01-19 10:57 - 2011-12-04 15:52 - 00000000 ____D C:\ProgramData\NVIDIA 2014-01-19 10:57 - 2011-02-27 17:40 - 00052827 _____ C:\Windows\setupact.log 2014-01-19 10:57 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2014-01-18 19:17 - 2010-11-21 04:47 - 00253796 _____ C:\Windows\PFRO.log 2014-01-18 18:11 - 2014-01-05 13:21 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2014-01-18 17:54 - 2012-05-26 18:32 - 00000000 ____D C:\ProgramData\Avira 2014-01-18 17:45 - 2014-01-18 17:45 - 00000000 ____D C:\Users\Simon\AppData\Local\ESET 2014-01-18 17:44 - 2014-01-18 17:44 - 00000000 ____D C:\Program Files\ESET 2014-01-18 17:26 - 2014-01-18 17:26 - 00293192 _____ C:\Windows\Minidump\011814-6224-01.dmp 2014-01-18 17:26 - 2012-02-03 18:32 - 713526072 _____ C:\Windows\MEMORY.DMP 2014-01-18 17:26 - 2012-02-03 18:32 - 00000000 ____D C:\Windows\Minidump 2014-01-18 15:42 - 2014-01-18 15:38 - 00000000 ___HD C:\Users\Simon\AppData\Roaming\F738DC84 2014-01-16 22:27 - 2014-01-16 22:27 - 00284344 _____ C:\Windows\Minidump\011614-5662-01.dmp 2014-01-16 20:47 - 2014-01-16 20:47 - 00283640 _____ C:\Windows\Minidump\011614-6130-01.dmp 2014-01-16 19:49 - 2014-01-16 19:49 - 00002019 _____ C:\Users\Public\Desktop\Adobe Reader X.lnk 2014-01-16 19:45 - 2009-07-14 05:45 - 00437712 _____ C:\Windows\system32\FNTCACHE.DAT 2014-01-15 22:03 - 2013-08-15 07:42 - 00000000 ____D C:\Windows\system32\MRT 2014-01-15 22:02 - 2011-12-04 17:36 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-01-13 21:22 - 2012-11-03 19:51 - 00000751 _____ C:\Users\Simon\Desktop\Access.lnk 2014-01-12 15:25 - 2013-06-25 14:13 - 00000000 _____ C:\Users\Simon\AppData\Local\Temptable.xml 2014-01-12 15:24 - 2011-12-04 18:01 - 00002511 _____ C:\Users\Public\Desktop\SolidWorks 2009 x64 Edition SP0.0.lnk 2014-01-12 15:24 - 2011-12-04 17:33 - 00000000 ____D C:\Users\Simon\AppData\Roaming\SolidWorks 2014-01-12 15:11 - 2014-01-12 15:11 - 00003231 _____ C:\Users\Simon\Desktop\Microsoft Outlook 2010.lnk 2014-01-12 15:10 - 2014-01-12 15:10 - 00003047 _____ C:\Users\Simon\Desktop\Microsoft Excel 2010.lnk 2014-01-12 15:10 - 2014-01-12 15:10 - 00003029 _____ C:\Users\Simon\Desktop\Microsoft Word 2010.lnk 2014-01-12 15:10 - 2014-01-12 15:10 - 00002965 _____ C:\Users\Simon\Desktop\Microsoft Access 2010.lnk 2014-01-12 14:48 - 2013-07-23 18:33 - 00000774 _____ C:\Users\Simon\Desktop\FEUERWEHR.lnk 2014-01-11 20:11 - 2009-07-14 06:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2014-01-11 15:28 - 2014-01-11 15:28 - 00000632 _____ C:\Users\Simon\Desktop\SIMON.lnk 2014-01-11 15:27 - 2013-03-31 13:21 - 00000641 _____ C:\Users\Simon\Desktop\FRANZI.lnk 2014-01-07 19:57 - 2013-12-31 15:48 - 00000692 _____ C:\Users\Simon\Desktop\BRÜCKENSTRAE.lnk 2014-01-07 16:59 - 2014-01-07 16:56 - 00000001 ____R C:\Users\Simon\serverport 2014-01-07 12:06 - 2014-01-05 16:41 - 00000657 _____ C:\Users\Simon\Desktop\FINANZEN.lnk 2014-01-06 21:52 - 2013-05-23 17:29 - 00001146 _____ C:\Users\Simon\Desktop\Access-Videotraining.lnk 2014-01-06 21:50 - 2013-01-13 17:21 - 00000994 _____ C:\Users\Simon\Desktop\fsp pneumatik - Verknüpfung.lnk 2014-01-06 20:45 - 2012-11-24 14:10 - 00360448 _____ C:\Users\Simon\Documents\Database1.accdb 2014-01-05 16:43 - 2011-12-04 16:49 - 00000000 ____D C:\Users\Simon\AppData\Local\Microsoft Help 2014-01-05 16:16 - 2014-01-05 16:16 - 00283496 _____ C:\Windows\Minidump\010514-6286-01.dmp 2014-01-05 14:46 - 2014-01-05 14:46 - 00297384 _____ C:\Windows\Minidump\010514-5694-01.dmp 2013-12-30 19:41 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD Some content of TEMP: ==================== C:\Users\Simon\AppData\Local\Temp\AcDeltree.exe C:\Users\Simon\AppData\Local\Temp\AskSLib.dll C:\Users\Simon\AppData\Local\Temp\avgnt.exe C:\Users\Simon\AppData\Local\Temp\MSN9FC9.exe C:\Users\Simon\AppData\Local\Temp\nvStInst.exe C:\Users\Simon\AppData\Local\Temp\ose00000.exe C:\Users\Simon\AppData\Local\Temp\setup.exe C:\Users\Simon\AppData\Local\Temp\swinstres.dll C:\Users\Simon\AppData\Local\Temp\swsetup.exe C:\Users\Simon\AppData\Local\Temp\Uni000.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-01-19 13:58 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 19-01-2014 03 Ran by Simon at 2014-01-19 18:06:57 Running from C:\Users\Simon\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: ESET Smart Security 7.0 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: ESET Smart Security 7.0 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834} FW: ESET Personal Firewall (Enabled) {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2} ==================== Installed Programs ====================== AAVUpdateManager (x32 Version: 18.00.0000 - Wolters Kluwer Deutschland GmbH) Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170 - Adobe Systems Incorporated) Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated) Adobe Reader X (10.1.9) MUI (x32 Version: 10.1.9 - Adobe Systems Incorporated) AMD APP SDK Runtime (Version: 2.4.650.9 - Advanced Micro Devices Inc.) Hidden Anno 1404 (x32 Version: 1.00.0000 - Ubisoft) Hidden ANNO 1404 (x32 Version: 1.03.0000 - Ubisoft) Apple Application Support (x32 Version: 2.3.6 - Apple Inc.) Apple Mobile Device Support (Version: 7.0.0.117 - Apple Inc.) Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.) ATI Catalyst Install Manager (Version: 3.0.829.0 - ATI Technologies, Inc.) Autodesk Material Library 2014 (x32 Version: 4.0.19.0 - Autodesk) Autodesk Material Library Base Resolution Image Library 2014 (x32 Version: 4.0.19.0 - Autodesk) Autodesk Navisworks Freedom 2014 (Version: 11.4.1017.63 - Autodesk) Autodesk Navisworks Freedom 2014 (Version: 11.4.1017.63 - Autodesk) Hidden Autodesk Navisworks Freedom 2014 Deutsch (German) Language Pack (Version: 11.0.973.51 - Autodesk) Autodesk Navisworks Freedom 2014 Deutsch (German) Language Pack (Version: 11.0.973.51 - Autodesk) Hidden Bonjour (Version: 3.0.0.10 - Apple Inc.) DAEMON Tools Lite (x32 Version: 4.41.3.0173 - DT Soft Ltd) Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32 Version: - Microsoft) ESET Smart Security (Version: 7.0.302.26 - ESET, spol s r. o.) Exact Audio Copy 1.0beta3 (x32 Version: 1.0beta3 - Andre Wiethoff) HP Officejet 6500 E710n-z - Grundlegende Software für das Gerät (Version: 22.50.231.0 - Hewlett-Packard Co.) HP Officejet 6500 E710n-z Hilfe (x32 Version: 140.0.2.2 - Hewlett Packard) HP Update (x32 Version: 5.002.006.003 - Hewlett-Packard) I.R.I.S. OCR (x32 Version: 12.3.4.0 - HP) iCloud (Version: 3.0.2.163 - Apple Inc.) iTunes (Version: 11.1.3.8 - Apple Inc.) K-Lite Codec Pack 6.4.0 (Full) (x32 Version: 6.4.0 - ) Microsoft .NET Framework 4.5 (Version: 4.5.50709 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5 DEU Language Pack (Version: 4.5.50709 - Microsoft Corporation) Microsoft .NET Framework 4.5 DEU Language Pack (Version: 4.5.50709 - Microsoft Corporation) Hidden Microsoft Office 2003 Web Components (x32 Version: 12.0.6213.1000 - Microsoft Corporation) Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1 - Microsoft Corporation) Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio 2005 Tools for Applications - ENU (x32 Version: - Microsoft Corporation) Microsoft Visual Studio 2005 Tools for Applications - ENU (x32 Version: 8.0.50727.146 - Microsoft Corporation) Hidden Mozilla Firefox 8.0.1 (x86 de) (x32 Version: 8.0.1 - Mozilla) MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation) NVIDIA 3D Vision Controller-Treiber 310.70 (Version: 310.70 - NVIDIA Corporation) NVIDIA 3D Vision Treiber 311.06 (Version: 311.06 - NVIDIA Corporation) NVIDIA Grafiktreiber 311.06 (Version: 311.06 - NVIDIA Corporation) NVIDIA HD-Audiotreiber 1.3.18.0 (Version: 1.3.18.0 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.108.688 - NVIDIA Corporation) Hidden NVIDIA PhysX (x32 Version: 9.12.1031 - NVIDIA Corporation) Hidden NVIDIA PhysX-Systemsoftware 9.12.1031 (Version: 9.12.1031 - NVIDIA Corporation) NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.1106 - NVIDIA Corporation) Hidden NVIDIA Systemsteuerung 311.06 (Version: 311.06 - NVIDIA Corporation) Hidden NVIDIA Update 1.11.3 (Version: 1.11.3 - NVIDIA Corporation) NVIDIA Update Components (Version: 1.11.3 - NVIDIA Corporation) Hidden PDFCreator (x32 Version: 1.2.3 - Frank Heindörfer, Philip Chinery) QuickTime (x32 Version: 7.74.80.86 - Apple Inc.) Realtek Ethernet Controller Driver (x32 Version: 7.45.516.2011 - Realtek) Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.1.16.0 - Renesas Electronics Corporation) Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.1.16.0 - Renesas Electronics Corporation) Hidden Rome - Total War(TM) (x32 Version: 1.0 - Ihr Firmenname) Rome - Total War(TM) (x32 Version: 1.0 - Ihr Firmenname) Hidden Safari (x32 Version: 5.34.57.2 - Apple Inc.) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version: - Microsoft) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version: - Microsoft) Hidden SolidWorks 2009 x64 Edition SP0 (Version: 17.21.0003 - SolidWorks) Steuer-Spar-Erklärung 2013 (x32 Version: 18.01 - Wolters Kluwer Deutschland GmbH) Studie zur Verbesserung von HP Officejet 6500 E710n-z Produkten (Version: 22.50.231.0 - Hewlett-Packard Co.) TIPP10 Version 2.1.0 (x32 Version: - (c) 2006-2011, Tom Thielicke IT Solutions) Update for Microsoft .NET Framework 4.5 (KB2750147) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4.5 (KB2805221) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4.5 (KB2805226) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (x32 Version: - Microsoft) Windows XP Mode (Version: 1.3.7600.16422 - Microsoft Corporation) Winfunktion Mathematik plus 17 (x32 Version: 1.00.0000 - bhv Software GmbH & Co. KG) XMedia Recode Version 3.1.0.0 (x32 Version: 3.1.0.0 - XMedia Recode) ==================== Restore Points ========================= 10-01-2014 16:02:18 Windows Update 15-01-2014 20:41:31 Windows Update 15-01-2014 21:02:50 Windows Update ==================== Hosts content: ========================== 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {5C75F6CA-FFB6-46AB-8815-D02684EE42B7} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {82033470-52CA-4965-BCC5-2F900AA6FCBF} - System32\Tasks\HPCustParticipation HP Officejet 6500 E710n-z => C:\Program Files\HP\HP Officejet 6500 E710n-z\Bin\HPCustPartic.exe [2010-11-16] (Hewlett-Packard Co.) Task: {8C07A112-8CF4-43A7-AAF1-B535D8651511} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-16] (Adobe Systems Incorporated) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Loaded Modules (whitelisted) ============= 2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF 2011-12-04 16:03 - 2010-03-15 11:28 - 00166400 _____ () C:\Program Files\WinRAR\rarext.dll 2012-02-20 20:29 - 2012-02-20 20:29 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2012-02-20 20:28 - 2012-02-20 20:28 - 01242472 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2014-01-18 18:11 - 2011-11-21 05:21 - 01989592 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll 2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\Users\Simon\Downloads\OriginalMail.eml:OECustomProperty ==================== Safe Mode (whitelisted) =================== ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (01/19/2014 06:01:43 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (01/19/2014 02:00:34 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (01/19/2014 11:36:27 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (01/19/2014 11:36:22 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (01/19/2014 10:59:50 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (01/18/2014 07:19:21 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (01/18/2014 05:28:27 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (01/18/2014 03:55:17 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (01/18/2014 03:46:05 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (01/18/2014 03:42:45 PM) (Source: Application Hang) (User: ) Description: Programm firefox.exe, Version 26.0.0.5087 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: d78 Startzeit: 01cf145b75d44454 Endzeit: 15 Anwendungspfad: C:\Program Files (x86)\Mozilla Firefox\firefox.exe Berichts-ID: c4b9dff0-804e-11e3-b18f-8c89a55787e3 System errors: ============= Error: (01/19/2014 11:00:04 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: %%1069 Error: (01/19/2014 11:00:04 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: %%1330 Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC). Error: (01/19/2014 10:58:41 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Superfetch" wurde mit folgendem Fehler beendet: %%2 Error: (01/18/2014 07:19:36 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: %%1069 Error: (01/18/2014 07:19:36 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: %%1330 Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC). Error: (01/18/2014 07:18:12 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Superfetch" wurde mit folgendem Fehler beendet: %%2 Error: (01/18/2014 07:17:45 PM) (Source: NetBT) (User: ) Description: Der Name "SIMON-PC :20" konnte nicht auf der Schnittstelle mit IP-Adresse 192.168.2.101 registriert werden. Der Computer mit IP-Adresse 192.168.2.100 hat nicht zugelassen, dass dieser Computer diesen Namen verwendet. Error: (01/18/2014 07:17:45 PM) (Source: NetBT) (User: ) Description: Der Name "SIMON-PC :0" konnte nicht auf der Schnittstelle mit IP-Adresse 192.168.2.101 registriert werden. Der Computer mit IP-Adresse 192.168.2.100 hat nicht zugelassen, dass dieser Computer diesen Namen verwendet. Error: (01/18/2014 07:17:45 PM) (Source: Server) (User: ) Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{BB1487B5-BBBD-42B7-AF43-0569E1D6E76D} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden. Error: (01/18/2014 06:17:58 PM) (Source: NetBT) (User: ) Description: Der Name "SIMON-PC :0" konnte nicht auf der Schnittstelle mit IP-Adresse 192.168.2.101 registriert werden. Der Computer mit IP-Adresse 192.168.2.100 hat nicht zugelassen, dass dieser Computer diesen Namen verwendet. Microsoft Office Sessions: ========================= Error: (01/19/2014 06:01:43 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Simon\Downloads\esetsmartinstaller_enu.exe Error: (01/19/2014 02:00:34 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\program files (x86)\ESET\eset online scanner\ESETSmartInstaller.exe Error: (01/19/2014 11:36:27 AM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Simon\Downloads\esetsmartinstaller_enu.exe Error: (01/19/2014 11:36:22 AM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Simon\Downloads\esetsmartinstaller_enu.exe Error: (01/19/2014 10:59:50 AM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (01/18/2014 07:19:21 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (01/18/2014 05:28:27 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (01/18/2014 03:55:17 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (01/18/2014 03:46:05 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (01/18/2014 03:42:45 PM) (Source: Application Hang)(User: ) Description: firefox.exe26.0.0.5087d7801cf145b75d4445415C:\Program Files (x86)\Mozilla Firefox\firefox.exec4b9dff0-804e-11e3-b18f-8c89a55787e3 CodeIntegrity Errors: =================================== Date: 2013-03-29 14:05:08.674 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-03-29 14:05:08.612 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. ==================== Memory info =========================== Percentage of memory in use: 44% Total physical RAM: 4088.14 MB Available physical RAM: 2262.53 MB Total Pagefile: 8174.45 MB Available Pagefile: 6414.27 MB Total Virtual: 8192 MB Available Virtual: 8191.82 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:111.69 GB) (Free:45.23 GB) NTFS Drive d: (Volume) (Fixed) (Total:292.97 GB) (Free:287.57 GB) NTFS Drive e: (FAT_4df5) (Removable) (Total:14.91 GB) (Free:8.86 GB) NTFS Drive f: (Volume) (Fixed) (Total:638.54 GB) (Free:563.95 GB) NTFS Drive i: () (Removable) (Total:3.69 GB) (Free:1.37 GB) FAT32 ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 2BD2C32A) Partition 1: (Not Active) - (Size=293 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=639 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 112 GB) (Disk ID: 6FE6F79E) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=112 GB) - (Type=07 NTFS) ======================================================== Disk: 3 (Size: 4 GB) (Disk ID: 00000000) Partition 1: (Not Active) - (Size=4 GB) - (Type=0B) ======================================================== Disk: 5 (Size: 15 GB) (Disk ID: 00000000) Partition 1: (Not Active) - (Size=15 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
Themen zu Windows 7 möglicher Trojaner befall nach gefälschter Telekom-Mail |
adobe, avg, bonjour, browser, defender, e-banking, excel, explorer, fehler, firefox, flash player, frage, homepage, logfile, minidump, mozilla, netzwerk, officejet, registry, richtlinie, scan, security, services.exe, software, system, temp, trojaner, usb, windows |