Smart Guard - überhaupt nichts geht mehr - Forensuche bereits genuz

Soonic · 19.03.2014, 07:25

Guten Morgen, wenn ich mich hier nun melde, entspricht das hoffentlich den Satuten des Forums > Tag 3 wie in den Verhaltensregeln angegeben - ist was meine Problemstellung betrifft heute.

Nervpotential möchte ich nicht haben, alle gehen einer geregelten Arbeit nach und haben auch Familie etc. Ich weiß.

Trotzdem frage ich höflichst nach Hilfe weil ich seit Sonntag Zwangsurlaub habe da ich ja an meinem Rechner nicht arbeiten kann. Ich schreibe hier von dem Notebook meiner Mutter (73 Jahre) - also einem Gerät das leider nicht als alternatives Arbeitswerkzeug herhält zumal meine ganzen Daten auf meinem Rechner liegen.

Wenn jemand heute Zeit hat, wäre ich sehr dankbar.

Soonic · 19.03.2014, 18:24

Zitat:

Zitat von Soonic

Guten Morgen, wenn ich mich hier nun melde, entspricht das hoffentlich den Satuten des Forums > Tag 3 wie in den Verhaltensregeln angegeben - ist was meine Problemstellung betrifft heute.

Nervpotential möchte ich nicht haben, alle gehen einer geregelten Arbeit nach und haben auch Familie etc. Ich weiß.

Trotzdem frage ich höflichst nach Hilfe weil ich seit Sonntag Zwangsurlaub habe da ich ja an meinem Rechner nicht arbeiten kann. Ich schreibe hier von dem Notebook meiner Mutter (73 Jahre) - also einem Gerät das leider nicht als alternatives Arbeitswerkzeug herhält zumal meine ganzen Daten auf meinem Rechner liegen.

Wenn jemand heute Zeit hat, wäre ich sehr dankbar.

Hoffentlich habe ich den richtigen Button angeklickt. Bitte, mein Probem ist nicht ansatzweise gebessert. Bitte setzen Sie mich nicht auf abgearbeitet:

Wenn ich den Rechner im normalen Modus starte kann ich weder ein Programm starten wie z.b. FRST, ich kann auch keine Datei öffnen oder einen Internetbrowser starten. Ich kann nur zuschauen, wie Smart Guard scannt und Bedrohungen anzeigt.

Im abgesicherten Modus habe ich FRST durchlaufen lassen aber Smart Guard ist noch da.

Was mach ich nur? Was kann ich tun, was soll ich tun???? Wie soll es nur weitergehen?

Im abgesicherten Modus habe ich die neue Anleitung durchführen können. Die Ergebnisse:

1. FRST.txt

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-03-2014  01
Ran by Kerstin (administrator) on USER1011-PC on 19-03-2014 18:28:44
Running from C:\Users\Kerstin\Desktop
Microsoft Windows 7 Professional  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Safe Mode (minimal)


==================== Processes (Whitelisted) =================



==================== Registry (Whitelisted) ==================

HKLM\...\Run: [NUSB3MON] - C:\Program Files\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [106496 2009-11-20] (NEC Electronics Corporation)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [AVMWlanClient] - C:\Program Files\avmwlanstick\FRITZWLANMini.exe [283136 2007-02-02] (AVM Berlin)
HKLM\...\Run: [BrMfcWnd] - C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe [1159168 2009-05-26] (Brother Industries, Ltd.)
HKLM\...\Run: [ControlCenter3] - C:\Program Files\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [AS2014] - C:\ProgramData\9npDa3aa\9npDa3aa.exe [783376 2014-03-16] ()
HKLM\...\Policies\Explorer: [TaskbarNoNotification] 1
HKLM\...\Policies\Explorer: [HideSCAHealth] 1
HKU\S-1-5-21-3467251772-538213018-3341465458-1001\...\RunOnce: [AS2014] - C:\ProgramData\9npDa3aa\9npDa3aa.exe [783376 2014-03-16] ()
HKU\S-1-5-21-3467251772-538213018-3341465458-1001\...\Policies\Explorer: [TaskbarNoNotification] 1
Startup: C:\Users\Kerstin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x17D757FD83F2CC01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {AFF5BEFB-01AB-4CF5-9CB1-6B3AF075A3F7} URL = hxxp://www.ant.com/search?s=browser&q={searchTerms}
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Kerstin\AppData\Roaming\Mozilla\Firefox\Profiles\638uagaz.default
FF NewTab: about:blank
FF SearchEngineOrder.1: SuchMaschine
FF Homepage: hxxp://www.google.de
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: bebomedia.com/OfferMosquitoIEHelper - C:\Users\Kerstin\AppData\Local\ext_offermosquito\npOfferMosquitoIEHelper.dll No File
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npwachk.dll (Nullsoft, Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Preispilot - C:\Users\Kerstin\AppData\Roaming\Mozilla\Firefox\Profiles\638uagaz.default\Extensions\extension@preispilot.com.xpi [2012-12-21]
FF Extension: Firebug - C:\Users\Kerstin\AppData\Roaming\Mozilla\Firefox\Profiles\638uagaz.default\Extensions\firebug@software.joehewitt.com.xpi [2012-12-17]

Chrome: 
=======
CHR Extension: (Google Docs) - C:\Users\Kerstin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-27]
CHR Extension: (Google Drive) - C:\Users\Kerstin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-27]
CHR Extension: (YouTube) - C:\Users\Kerstin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-27]
CHR Extension: (Google-Suche) - C:\Users\Kerstin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-27]
CHR Extension: (Google Wallet) - C:\Users\Kerstin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-27]
CHR Extension: (Google Mail) - C:\Users\Kerstin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-27]

========================== Services (Whitelisted) =================

S2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
S2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
S2 Fabs; C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe [1840128 2011-05-24] (MAGIX AG)
S3 FirebirdServerMAGIXInstance; C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe [2702848 2011-04-26] (MAGIX®)
S2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S2 PDFProFiltSrv; C:\Program Files\Nuance\PDF Professional 8\PDFProFiltSrv.exe [X]

==================== Drivers (Whitelisted) ====================

S2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [90400 2013-12-17] (Avira Operations GmbH & Co. KG)
S1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135648 2013-12-17] (Avira Operations GmbH & Co. KG)
S1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-12-17] (Avira Operations GmbH & Co. KG)
S3 FWLANUSB; C:\Windows\System32\DRIVERS\fwlanusb.sys [264704 2006-04-06] (AVM GmbH)
R0 gfibto; C:\Windows\System32\drivers\gfibto.sys [13560 2012-12-07] (GFI Software)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
S1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-02-11] (Avira GmbH)
S3 catchme; \??\C:\Users\Kerstin\AppData\Local\Temp\catchme.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-19 18:27 - 2014-03-19 18:28 - 00008519 _____ () C:\Users\Kerstin\Desktop\FRST.txt
2014-03-17 10:43 - 2014-03-17 10:42 - 00388608 _____ (Trend Micro Inc.) C:\HijackThis.exe
2014-03-17 10:42 - 2014-03-17 10:42 - 00388608 _____ (Trend Micro Inc.) C:\Users\Kerstin\Desktop\HijackThis.exe
2014-03-17 10:39 - 2014-03-16 17:02 - 01145856 _____ (Farbar) C:\Users\Kerstin\Desktop\FRST.exe
2014-03-17 10:02 - 2014-03-17 10:02 - 00010801 _____ () C:\ComboFix.txt
2014-03-17 09:49 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-03-17 09:49 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-03-17 09:49 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-03-17 09:49 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-03-17 09:49 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-03-17 09:49 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe
2014-03-17 09:49 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe
2014-03-17 09:49 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe
2014-03-17 08:20 - 2014-03-17 08:20 - 00001067 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-17 08:20 - 2014-03-17 08:20 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware
2014-03-17 08:20 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-17 08:16 - 2014-03-17 08:17 - 00000000 ____D () C:\Users\Kerstin\Desktop\Neuer Ordner (3)
2014-03-17 08:16 - 2014-03-17 08:16 - 00005114 _____ () C:\hijackthis.log
2014-03-17 08:13 - 2014-03-17 10:02 - 00000000 ____D () C:\Qoobox
2014-03-17 08:13 - 2014-03-17 10:01 - 00000000 ____D () C:\Windows\erdnt
2014-03-17 08:09 - 2014-03-17 08:05 - 10285040 _____ (Malwarebytes Corporation ) C:\mbam-setup-1.75.0.1300.exe
2014-03-17 08:09 - 2014-03-17 08:05 - 01950720 _____ () C:\adwcleaner.exe
2014-03-17 08:09 - 2014-03-17 08:05 - 01037734 _____ (Thisisu) C:\JRT.exe
2014-03-17 08:09 - 2014-03-17 08:01 - 05190594 ____R (Swearware) C:\ComboFix.exe
2014-03-17 08:09 - 2014-03-16 16:20 - 01933048 _____ (Bleeping Computer, LLC) C:\rkill.com
2014-03-17 08:08 - 2014-03-17 08:05 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\mbam-setup-1.75.0.1300 (1).exe
2014-03-17 08:08 - 2014-03-17 08:05 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Kerstin\Desktop\mbam-setup-1.75.0.1300.exe
2014-03-17 08:08 - 2014-03-17 08:05 - 01950720 _____ () C:\Users\Kerstin\Desktop\adwcleaner.exe
2014-03-17 08:08 - 2014-03-17 08:05 - 01950720 _____ () C:\Users\adwcleaner.exe
2014-03-17 08:08 - 2014-03-17 08:05 - 01037734 _____ (Thisisu) C:\Users\Kerstin\Desktop\JRT.exe
2014-03-17 08:08 - 2014-03-17 08:05 - 01037734 _____ (Thisisu) C:\Users\JRT.exe
2014-03-17 08:08 - 2014-03-17 08:01 - 05190594 ____R (Swearware) C:\Users\Kerstin\Desktop\ComboFix.exe
2014-03-17 08:08 - 2014-03-17 08:01 - 05190594 _____ (Swearware) C:\Users\ComboFix.exe
2014-03-17 07:43 - 2014-03-16 16:20 - 01933048 _____ (Bleeping Computer, LLC) C:\Users\Kerstin\Desktop\rkill.com
2014-03-16 21:11 - 2014-03-16 21:11 - 00388608 _____ (Trend Micro Inc.) C:\HiJackThis204.exe
2014-03-16 18:03 - 2014-03-17 10:04 - 00030433 _____ () C:\FRST.txt
2014-03-16 17:53 - 2014-03-16 17:02 - 02157056 _____ (Farbar) C:\FRST64.exe
2014-03-16 17:53 - 2014-03-16 17:02 - 01145856 _____ (Farbar) C:\FRST.exe
2014-03-16 15:11 - 2014-03-19 18:15 - 00001666 _____ () C:\Users\Kerstin\Desktop\Smart Guard Protection.lnk
2014-03-16 15:11 - 2014-03-19 18:15 - 00000112 _____ () C:\Users\Kerstin\Desktop\Smart Guard Protection support.url
2014-03-16 15:11 - 2014-03-16 15:11 - 00000000 ____D () C:\Users\Kerstin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Smart Guard Protection
2014-03-16 12:24 - 2014-03-16 12:24 - 00145765 _____ () C:\Users\Kerstin\AppData\Local\recently-used.xbel
2014-03-16 08:59 - 2014-03-16 08:59 - 00003637 _____ () C:\Users\Kerstin\Desktop\plg_fshare30.zip
2014-03-16 07:31 - 2014-03-16 07:31 - 01950720 _____ () C:\Users\Kerstin\Downloads\adwcleaner_3.022.exe
2014-03-15 10:19 - 2014-03-15 10:19 - 00000000 ____D () C:\Users\Kerstin\Desktop\mod_mail_this_page_J25
2014-03-14 09:01 - 2014-03-14 09:01 - 01575363 _____ () C:\Users\Kerstin\Desktop\mod_slideshowck.zip
2014-03-14 09:00 - 2014-03-14 09:00 - 00000000 ____D () C:\Users\Kerstin\Desktop\mod_slideshowck
2014-03-14 08:25 - 2014-03-14 08:25 - 00000000 ____D () C:\Users\Kerstin\Desktop\as002062free
2014-03-14 07:28 - 2014-03-14 07:28 - 01033322 _____ () C:\Users\Kerstin\Desktop\as002062free.zip
2014-03-14 07:25 - 2014-03-14 07:28 - 00000000 ____D () C:\Users\Kerstin\Desktop\Joomla_3.1.6-Stable-Full_Package
2014-03-14 07:25 - 2014-03-14 07:25 - 00000000 ____D () C:\Users\Kerstin\Desktop\de-DE_joomla_lang_full_3.2.2v1
2014-03-14 06:14 - 2014-03-01 05:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-14 06:14 - 2014-03-01 05:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-14 06:14 - 2014-03-01 05:10 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-14 06:14 - 2014-03-01 04:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-14 06:14 - 2014-03-01 04:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-14 06:14 - 2014-03-01 04:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-14 06:14 - 2014-03-01 04:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-14 06:14 - 2014-03-01 04:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-14 06:14 - 2014-03-01 04:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-14 06:14 - 2014-03-01 04:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-14 06:14 - 2014-03-01 04:38 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-14 06:14 - 2014-03-01 04:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-14 06:14 - 2014-03-01 04:31 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-14 06:14 - 2014-03-01 04:25 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-14 06:14 - 2014-03-01 04:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-14 06:14 - 2014-03-01 04:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-14 06:14 - 2014-03-01 04:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-14 06:14 - 2014-03-01 04:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-14 06:14 - 2014-03-01 03:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-14 06:14 - 2014-03-01 03:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-14 06:14 - 2014-03-01 03:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-14 06:14 - 2014-03-01 03:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-14 06:14 - 2014-02-04 03:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-14 06:13 - 2014-02-07 02:07 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-14 06:13 - 2014-02-04 03:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-14 06:13 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-14 06:13 - 2014-01-28 03:07 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-03-13 12:52 - 2014-03-13 12:52 - 00004302 _____ () C:\Users\Kerstin\Desktop\plg_fcomment30.zip
2014-03-13 12:40 - 2014-03-13 12:40 - 00009902 _____ () C:\Users\Kerstin\Desktop\mod_mail_this_page_J25.zip
2014-03-12 10:53 - 2014-03-12 10:53 - 01343632 _____ () C:\Users\Kerstin\Downloads\iPhoney_1.2.zip
2014-03-11 08:00 - 2014-03-13 08:25 - 00000000 ____D () C:\Users\Kerstin\Desktop\Profilarchiv
2014-03-09 11:16 - 2014-03-09 11:19 - 102531963 _____ () C:\Users\Kerstin\Downloads\Frankfurt_kocht_kreativ.mp4
2014-03-09 10:10 - 2014-03-17 22:14 - 00000000 ____D () C:\Users\Kerstin\AppData\Roaming\Fifth
2014-03-09 10:09 - 2014-03-09 10:09 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Adobe
2014-03-09 10:09 - 2014-03-09 10:09 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Adobe
2014-03-09 10:08 - 2014-03-16 08:36 - 00000000 ____D () C:\Users\Kerstin\AppData\Roaming\Common
2014-03-09 10:01 - 2014-03-09 10:01 - 00401824 _____ (Softonic ) C:\Users\Kerstin\Downloads\SoftonicDownloader_fuer_ant-com-video-downloader-video-player.exe
2014-03-09 09:56 - 2014-03-09 09:56 - 00614816 _____ () C:\Users\Kerstin\Downloads\flv-grabber-2-3.exe
2014-03-09 09:55 - 2014-03-09 09:55 - 01381918 _____ () C:\Users\Kerstin\Downloads\FVD213.dmg
2014-03-07 10:03 - 2014-03-07 10:03 - 00082139 ____H () C:\Users\Kerstin\Desktop\~WRL1956.tmp
2014-03-06 10:46 - 2014-03-13 11:50 - 00000000 ____D () C:\Users\Kerstin\Desktop\heute
2014-03-05 10:19 - 2014-03-05 10:19 - 00000649 _____ () C:\Users\Kerstin\Downloads\qr_code_ohne_logo_plus_informationsmappe(10).zip
2014-03-05 10:19 - 2014-03-05 10:19 - 00000000 ____D () C:\Users\Kerstin\Downloads\qr_code_ohne_logo_plus_informationsmappe(10)
2014-02-28 08:44 - 2014-02-28 08:44 - 00347679 _____ () C:\Users\Kerstin\Desktop\de-DE_joomla_lang_full_3.2.2v1.zip
2014-02-27 12:22 - 2014-03-09 14:44 - 00000000 ____D () C:\Users\Kerstin\Desktop\Frau Schäfer
2014-02-26 06:30 - 2014-02-26 06:30 - 00418398 _____ () C:\Users\Kerstin\Downloads\loggianred(1).zip
2014-02-25 12:15 - 2014-02-25 12:15 - 00438784 ____H () C:\Users\Kerstin\Desktop\~WRL1084.tmp
2014-02-25 12:04 - 2014-02-25 12:04 - 00064000 ____H () C:\Users\Kerstin\Desktop\~WRL3141.tmp
2014-02-23 19:59 - 2014-03-13 12:44 - 00000000 ____D () C:\Users\Kerstin\Desktop\Neuer Ordner (2)

==================== One Month Modified Files and Folders =======

2014-03-19 18:28 - 2014-03-19 18:27 - 00008519 _____ () C:\Users\Kerstin\Desktop\FRST.txt
2014-03-19 18:28 - 2013-12-15 10:10 - 00000000 ____D () C:\FRST
2014-03-19 18:23 - 2009-07-14 05:34 - 00013760 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-19 18:23 - 2009-07-14 05:34 - 00013760 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-19 18:21 - 2011-09-17 15:05 - 01629372 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-19 18:15 - 2014-03-16 15:11 - 00001666 _____ () C:\Users\Kerstin\Desktop\Smart Guard Protection.lnk
2014-03-19 18:15 - 2014-03-16 15:11 - 00000112 _____ () C:\Users\Kerstin\Desktop\Smart Guard Protection support.url
2014-03-19 18:14 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-19 18:14 - 2009-07-14 05:39 - 00459954 _____ () C:\Windows\setupact.log
2014-03-17 22:14 - 2014-03-09 10:10 - 00000000 ____D () C:\Users\Kerstin\AppData\Roaming\Fifth
2014-03-17 12:10 - 2013-12-16 12:42 - 00000000 ____D () C:\AdwCleaner
2014-03-17 11:08 - 2012-02-23 23:17 - 00000000 ____D () C:\Users\Kerstin\Desktop\Office Interim
2014-03-17 10:42 - 2014-03-17 10:43 - 00388608 _____ (Trend Micro Inc.) C:\HijackThis.exe
2014-03-17 10:42 - 2014-03-17 10:42 - 00388608 _____ (Trend Micro Inc.) C:\Users\Kerstin\Desktop\HijackThis.exe
2014-03-17 10:13 - 2011-09-17 16:03 - 00508906 _____ () C:\Windows\PFRO.log
2014-03-17 10:04 - 2014-03-16 18:03 - 00030433 _____ () C:\FRST.txt
2014-03-17 10:02 - 2014-03-17 10:02 - 00010801 _____ () C:\ComboFix.txt
2014-03-17 10:02 - 2014-03-17 08:13 - 00000000 ____D () C:\Qoobox
2014-03-17 10:02 - 2009-07-14 03:37 - 00000000 __RHD () C:\Users\Default
2014-03-17 10:02 - 2009-07-14 03:37 - 00000000 ___RD () C:\Users\Public
2014-03-17 10:01 - 2014-03-17 08:13 - 00000000 ____D () C:\Windows\erdnt
2014-03-17 10:00 - 2009-07-14 03:04 - 00000215 _____ () C:\Windows\system.ini
2014-03-17 09:46 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\AppCompat
2014-03-17 08:20 - 2014-03-17 08:20 - 00001067 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-17 08:20 - 2014-03-17 08:20 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware
2014-03-17 08:17 - 2014-03-17 08:16 - 00000000 ____D () C:\Users\Kerstin\Desktop\Neuer Ordner (3)
2014-03-17 08:16 - 2014-03-17 08:16 - 00005114 _____ () C:\hijackthis.log
2014-03-17 08:11 - 2012-04-18 07:12 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-17 08:05 - 2014-03-17 08:09 - 10285040 _____ (Malwarebytes Corporation ) C:\mbam-setup-1.75.0.1300.exe
2014-03-17 08:05 - 2014-03-17 08:09 - 01950720 _____ () C:\adwcleaner.exe
2014-03-17 08:05 - 2014-03-17 08:09 - 01037734 _____ (Thisisu) C:\JRT.exe
2014-03-17 08:05 - 2014-03-17 08:08 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\mbam-setup-1.75.0.1300 (1).exe
2014-03-17 08:05 - 2014-03-17 08:08 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Kerstin\Desktop\mbam-setup-1.75.0.1300.exe
2014-03-17 08:05 - 2014-03-17 08:08 - 01950720 _____ () C:\Users\Kerstin\Desktop\adwcleaner.exe
2014-03-17 08:05 - 2014-03-17 08:08 - 01950720 _____ () C:\Users\adwcleaner.exe
2014-03-17 08:05 - 2014-03-17 08:08 - 01037734 _____ (Thisisu) C:\Users\Kerstin\Desktop\JRT.exe
2014-03-17 08:05 - 2014-03-17 08:08 - 01037734 _____ (Thisisu) C:\Users\JRT.exe
2014-03-17 08:01 - 2014-03-17 08:09 - 05190594 ____R (Swearware) C:\ComboFix.exe
2014-03-17 08:01 - 2014-03-17 08:08 - 05190594 ____R (Swearware) C:\Users\Kerstin\Desktop\ComboFix.exe
2014-03-17 08:01 - 2014-03-17 08:08 - 05190594 _____ (Swearware) C:\Users\ComboFix.exe
2014-03-16 21:11 - 2014-03-16 21:11 - 00388608 _____ (Trend Micro Inc.) C:\HiJackThis204.exe
2014-03-16 17:09 - 2013-12-09 11:22 - 00000000 ____D () C:\ProgramData\9npDa3aa
2014-03-16 17:02 - 2014-03-17 10:39 - 01145856 _____ (Farbar) C:\Users\Kerstin\Desktop\FRST.exe
2014-03-16 17:02 - 2014-03-16 17:53 - 02157056 _____ (Farbar) C:\FRST64.exe
2014-03-16 17:02 - 2014-03-16 17:53 - 01145856 _____ (Farbar) C:\FRST.exe
2014-03-16 16:57 - 2011-09-17 14:55 - 01364756 _____ () C:\Windows\WindowsUpdate.log
2014-03-16 16:20 - 2014-03-17 08:09 - 01933048 _____ (Bleeping Computer, LLC) C:\rkill.com
2014-03-16 16:20 - 2014-03-17 07:43 - 01933048 _____ (Bleeping Computer, LLC) C:\Users\Kerstin\Desktop\rkill.com
2014-03-16 15:11 - 2014-03-16 15:11 - 00000000 ____D () C:\Users\Kerstin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Smart Guard Protection
2014-03-16 15:11 - 2013-05-16 09:12 - 00000000 ____D () C:\Users\Kerstin\.gimp-2.8
2014-03-16 15:06 - 2012-02-23 18:32 - 00000000 ____D () C:\Users\Kerstin
2014-03-16 12:24 - 2014-03-16 12:24 - 00145765 _____ () C:\Users\Kerstin\AppData\Local\recently-used.xbel
2014-03-16 08:59 - 2014-03-16 08:59 - 00003637 _____ () C:\Users\Kerstin\Desktop\plg_fshare30.zip
2014-03-16 08:41 - 2012-12-07 18:58 - 00000000 ____D () C:\Users\Kerstin\AppData\Roaming\FileZilla
2014-03-16 08:40 - 2014-01-08 10:18 - 00000000 ____D () C:\Program Files\Faktura
2014-03-16 08:40 - 2012-05-08 09:08 - 00000000 ____D () C:\Program Files\Google
2014-03-16 08:39 - 2012-05-08 09:08 - 00000000 ____D () C:\Users\Kerstin\AppData\Local\Google
2014-03-16 08:36 - 2014-03-09 10:08 - 00000000 ____D () C:\Users\Kerstin\AppData\Roaming\Common
2014-03-16 07:31 - 2014-03-16 07:31 - 01950720 _____ () C:\Users\Kerstin\Downloads\adwcleaner_3.022.exe
2014-03-15 10:19 - 2014-03-15 10:19 - 00000000 ____D () C:\Users\Kerstin\Desktop\mod_mail_this_page_J25
2014-03-15 06:28 - 2009-07-14 05:33 - 00520312 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-14 17:59 - 2012-02-23 18:10 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-03-14 09:01 - 2014-03-14 09:01 - 01575363 _____ () C:\Users\Kerstin\Desktop\mod_slideshowck.zip
2014-03-14 09:00 - 2014-03-14 09:00 - 00000000 ____D () C:\Users\Kerstin\Desktop\mod_slideshowck
2014-03-14 08:25 - 2014-03-14 08:25 - 00000000 ____D () C:\Users\Kerstin\Desktop\as002062free
2014-03-14 07:28 - 2014-03-14 07:28 - 01033322 _____ () C:\Users\Kerstin\Desktop\as002062free.zip
2014-03-14 07:28 - 2014-03-14 07:25 - 00000000 ____D () C:\Users\Kerstin\Desktop\Joomla_3.1.6-Stable-Full_Package
2014-03-14 07:25 - 2014-03-14 07:25 - 00000000 ____D () C:\Users\Kerstin\Desktop\de-DE_joomla_lang_full_3.2.2v1
2014-03-13 15:12 - 2012-04-18 07:12 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-03-13 15:12 - 2012-02-13 22:15 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-03-13 12:52 - 2014-03-13 12:52 - 00004302 _____ () C:\Users\Kerstin\Desktop\plg_fcomment30.zip
2014-03-13 12:44 - 2014-02-23 19:59 - 00000000 ____D () C:\Users\Kerstin\Desktop\Neuer Ordner (2)
2014-03-13 12:40 - 2014-03-13 12:40 - 00009902 _____ () C:\Users\Kerstin\Desktop\mod_mail_this_page_J25.zip
2014-03-13 11:50 - 2014-03-06 10:46 - 00000000 ____D () C:\Users\Kerstin\Desktop\heute
2014-03-13 08:25 - 2014-03-11 08:00 - 00000000 ____D () C:\Users\Kerstin\Desktop\Profilarchiv
2014-03-12 17:08 - 2013-01-21 18:40 - 00000000 ____D () C:\Users\Kerstin\Desktop\privat
2014-03-12 10:53 - 2014-03-12 10:53 - 01343632 _____ () C:\Users\Kerstin\Downloads\iPhoney_1.2.zip
2014-03-09 14:44 - 2014-02-27 12:22 - 00000000 ____D () C:\Users\Kerstin\Desktop\Frau Schäfer
2014-03-09 11:19 - 2014-03-09 11:16 - 102531963 _____ () C:\Users\Kerstin\Downloads\Frankfurt_kocht_kreativ.mp4
2014-03-09 10:29 - 2013-10-17 08:37 - 00000000 ____D () C:\Users\Kerstin\AppData\Roaming\vlc
2014-03-09 10:09 - 2014-03-09 10:09 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Adobe
2014-03-09 10:09 - 2014-03-09 10:09 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Adobe
2014-03-09 10:01 - 2014-03-09 10:01 - 00401824 _____ (Softonic ) C:\Users\Kerstin\Downloads\SoftonicDownloader_fuer_ant-com-video-downloader-video-player.exe
2014-03-09 09:56 - 2014-03-09 09:56 - 00614816 _____ () C:\Users\Kerstin\Downloads\flv-grabber-2-3.exe
2014-03-09 09:55 - 2014-03-09 09:55 - 01381918 _____ () C:\Users\Kerstin\Downloads\FVD213.dmg
2014-03-07 10:03 - 2014-03-07 10:03 - 00082139 ____H () C:\Users\Kerstin\Desktop\~WRL1956.tmp
2014-03-05 10:19 - 2014-03-05 10:19 - 00000649 _____ () C:\Users\Kerstin\Downloads\qr_code_ohne_logo_plus_informationsmappe(10).zip
2014-03-05 10:19 - 2014-03-05 10:19 - 00000000 ____D () C:\Users\Kerstin\Downloads\qr_code_ohne_logo_plus_informationsmappe(10)
2014-03-01 19:54 - 2009-07-14 05:53 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-03-01 05:30 - 2014-03-14 06:14 - 17074688 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-01 05:11 - 2014-03-14 06:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-01 05:10 - 2014-03-14 06:14 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-01 04:52 - 2014-03-14 06:14 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-01 04:51 - 2014-03-14 06:14 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-01 04:47 - 2014-03-14 06:14 - 02168320 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-01 04:43 - 2014-03-14 06:14 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-01 04:43 - 2014-03-14 06:14 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-01 04:40 - 2014-03-14 06:14 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-01 04:38 - 2014-03-14 06:14 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-01 04:38 - 2014-03-14 06:14 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-01 04:37 - 2014-03-14 06:14 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-01 04:31 - 2014-03-14 06:14 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-01 04:25 - 2014-03-14 06:14 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-01 04:16 - 2014-03-14 06:14 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-01 04:14 - 2014-03-14 06:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-01 04:03 - 2014-03-14 06:14 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-01 04:00 - 2014-03-14 06:14 - 01964032 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-01 03:57 - 2014-03-14 06:14 - 11266048 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-01 03:32 - 2014-03-14 06:14 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-01 03:27 - 2014-03-14 06:14 - 01156096 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-01 03:25 - 2014-03-14 06:14 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-28 08:44 - 2014-02-28 08:44 - 00347679 _____ () C:\Users\Kerstin\Desktop\de-DE_joomla_lang_full_3.2.2v1.zip
2014-02-27 06:47 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-02-26 06:30 - 2014-02-26 06:30 - 00418398 _____ () C:\Users\Kerstin\Downloads\loggianred(1).zip
2014-02-25 12:15 - 2014-02-25 12:15 - 00438784 ____H () C:\Users\Kerstin\Desktop\~WRL1084.tmp
2014-02-25 12:04 - 2014-02-25 12:04 - 00064000 ____H () C:\Users\Kerstin\Desktop\~WRL3141.tmp
2014-02-21 12:29 - 2012-03-01 17:45 - 00000000 ____D () C:\Users\Kerstin\AppData\Local\CrashDumps
2014-02-18 17:51 - 2014-01-29 10:16 - 00000000 ____D () C:\Users\Kerstin\Desktop\Wirtz
2014-02-18 11:56 - 2012-03-01 17:37 - 00000000 ____D () C:\Program Files\FileZilla FTP Client

Some content of TEMP:
====================
C:\Users\Kerstin\AppData\Local\temp\avgnt.exe
C:\Users\Kerstin\AppData\Local\temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-10 07:31

==================== End Of Log ============================

--- --- ---

2. Addition.txt

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 13-03-2014  01
Ran by Kerstin at 2014-03-19 18:29:08
Running from C:\Users\Kerstin\Desktop
Boot Mode: Safe Mode (minimal)
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

 Update for Microsoft Office 2007 (KB2508958) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version:  - Microsoft)
7-Zip 9.20 (HKLM\...\7-Zip) (Version:  - )
Adobe Flash Player 12 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Reader X (10.1.7) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.7 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM\...\Adobe Shockwave Player) (Version: 12.0.2.122 - Adobe Systems, Inc.)
Audacity 2.0.3 (HKLM\...\Audacity_is1) (Version: 2.0.3 - Audacity Team)
Avery Wizard 3.1 (HKLM\...\{77077FFF-8831-470F-9627-E86F06A50CCD}) (Version: 3.1.8 - Avery)
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
BurnAware Professional 6.2 (HKLM\...\BurnAware Professional_is1) (Version:  - Burnaware)
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.1.4003 - CDBurnerXP)
CIB pdf brewer (HKLM\...\{461A4763-28B5-425A-AE3D-B9B54EDF0F21}) (Version: 2.6.0047 - CIB software GmbH)
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Document Trace Remover v3.6 (HKLM\...\Document Trace Remover_is1) (Version: 3.6 - Smart PC Solutions)
Exif Tag Remover 2.0 (HKLM\...\Exif Tag Remover_is1) (Version:  - RL Vision)
FileViewPro (HKLM\...\{29938C06-6962-4C27-A94C-25E4F424A665}_is1) (Version: 1.5 - Solvusoft Corporation)
FileZilla Client 3.7.4.1 (HKLM\...\FileZilla Client) (Version: 3.7.4.1 - Tim Kosse)
Firebird SQL Server - MAGIX Edition (HKLM\...\{6C5F8503-55D2-4398-858C-362B7A7AF51C}) (Version: 2.1.31.0 - MAGIX AG)
Fotogalerie (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
GIMP 2.8.4 (HKLM\...\GIMP-2_is1) (Version: 2.8.4 - The GIMP Team)
GPL Ghostscript (HKLM\...\GPL Ghostscript 9.04) (Version: 9.04 - Artifex Software Inc.)
Hex-Editor MX (HKLM\...\{7FC7AD70-1DF3-4B84-9AA2-4FB680F45572}_is1) (Version: 6.0 - NEXT-Soft)
Java 7 Update 40 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217040FF}) (Version: 7.0.400 - Oracle)
Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
JavaFX 2.1.1 (HKLM\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)
LAME v3.99.3 (for Windows) (HKLM\...\LAME_is1) (Version:  - )
MAGIX Content und Soundpools (HKLM\...\MAGIX_GlobalContent) (Version: 1.0.0.0 - MAGIX AG)
MAGIX Goya burnR (MSI) (HKLM\...\MAGIX_{B332E15B-243F-4F40-8530-1524F84230A0}) (Version: 4.3.2.0 - MAGIX AG)
MAGIX Goya burnR (MSI) (Version: 4.3.2.0 - MAGIX AG) Hidden
MAGIX Music Maker 2013 (HKLM\...\MAGIX_{3F5C2BC0-B7D7-4114-B273-3B1460B2452B}) (Version: 19.0.3.47 - MAGIX AG)
MAGIX Music Maker 2013 (Version: 19.0.3.47 - MAGIX AG) Hidden
MAGIX Music Maker 2013 Trial Soundpools (Version: 1.0.0.0 - MAGIX AG) Hidden
Malwarebytes Anti-Malware Version 1.75.0.1300 (HKLM\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (Version:  - Microsoft) Hidden
Microsoft Office Access MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Groove MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (Version:  - Microsoft) Hidden
Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft_VC100_CRT_SP1_x86 (Version: 10.0.40219.1 - Nokia) Hidden
Movie Maker (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Mozilla Firefox 27.0.1 (x86 de) (HKLM\...\Mozilla Firefox 27.0.1 (x86 de)) (Version: 27.0.1 - Mozilla)
Mp3tag v2.55a (HKLM\...\Mp3tag) (Version: v2.55a - Florian Heidenreich)
MSVC80_x86_v2 (Version: 1.0.3.0 - Nokia) Hidden
MSVC90_x86 (Version: 1.0.1.2 - Nokia) Hidden
MSVCRT (Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (Version: 16.4.1108.0727 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
NEC Electronics USB 3.0 Host Controller Driver (HKLM\...\InstallShield_{D7BF9739-8A68-4335-BBEE-37752AD9E86B}) (Version: 1.0.18.0 - NEC Electronics Corporation)
NEC Electronics USB 3.0 Host Controller Driver (Version: 1.0.18.0 - NEC Electronics Corporation) Hidden
Norton Internet Security (Version: 18.1.0.37 - Symantec Corporation) Hidden
Notepad++ (HKLM\...\Notepad++) (Version: 6.4.1 - Notepad++ Team)
Photo Common (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Photo Gallery (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
RedMon - Redirection Port Monitor (HKLM\...\Redirection Port Monitor) (Version:  - )
Resource Hacker Version 3.6.0 (HKLM\...\ResourceHacker_is1) (Version:  - )
Sagede.Shared.Elster.Setup (Version: 1.0.0.0.28 - Sage Software GmbH) Hidden
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TeamViewer 8 (HKLM\...\TeamViewer 8) (Version: 8.0.20935 - TeamViewer)
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6FAA03BD-2B51-4029-9AD9-64A3B8E3C84C}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2878234) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{EC1934B0-AE0F-4BBD-8955-54BB3247ED9E}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
VLC media player 2.1.0 (HKLM\...\VLC media player) (Version: 2.1.0 - VideoLAN)
Winamp (HKLM\...\Winamp) (Version: 5.63  - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKCU\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Windows Live Communications Platform (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)
Windows Live Essentials (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Photo Common (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live SOXE (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live UX Platform (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
XNResourceEditor 3.0.0.1 (HKLM\...\XN Resource Editor_is1) (Version:  - Colin Wilson)
Yahoo! Detect (HKLM\...\YTdetect) (Version:  - )

==================== Restore Points  =========================

04-03-2014 09:36:20 Windows Update
08-03-2014 03:58:15 Windows Update
09-03-2014 09:06:02 Installed Ant.com IE add-on
14-03-2014 05:08:07 Windows Update
14-03-2014 16:57:42 Windows Update
16-03-2014 07:38:39 Removed Google Chrome Frame
16-03-2014 14:45:00 Hamburg

==================== Hosts content: ==========================

2009-07-14 03:04 - 2014-03-17 10:00 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {4E01776C-30F4-4803-B09F-BED5962006D0} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-13] (Adobe Systems Incorporated)
Task: {818A2820-CAEC-4D7A-9FEF-8993CA496303} - System32\Tasks\Fifth => C:\Users\Kerstin\AppData\Roaming\Fifth\Fifth.exe [2014-03-04] () <==== ATTENTION
Task: {8806CE8D-40A8-4496-808A-6011FEF64F8C} - System32\Tasks\plushd8.1-validator => C:\Program Files\plushd8.1\plushd8.1-validator.exe
Task: {E64C9AAF-C9DD-4C6B-9C15-B96656946D56} - System32\Tasks\OMESupervisor => C:\Users\Kerstin\AppData\Local\omesuperv.exe <==== ATTENTION
Task: {EA049CB8-C3D5-4BF8-B7A6-45AFB1EEC814} - System32\Tasks\SomotoUpdateCheckerAutoStart => C:\Users\Kerstin\AppData\Local\FilesFrog Update Checker\update_checker.exe <==== ATTENTION
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2014-02-11 20:29 - 2014-02-11 20:29 - 00093696 _____ () C:\Program Files\FileZilla FTP Client\fzshellext.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\TEMP:18262EDA
AlternateDataStreams: C:\ProgramData\TEMP:66D2723C
AlternateDataStreams: C:\ProgramData\TEMP:6CC0D09A

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="1"

==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk => C:\Windows\pss\McAfee Security Scan Plus.lnk.CommonStartup
MSCONFIG\startupreg: GrooveMonitor => "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
MSCONFIG\startupreg: SpybotSD TeaTimer => C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

==================== Faulty Device Manager Devices =============

Name: Security Processor Loader Driver
Description: Security Processor Loader Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: spldr
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (03/19/2014 03:23:57 PM) (Source: Outlook) (User: )
Description: Fehler beim Bestimmen, ob sich der Speicher im Crawlbereich befindet (Fehler=0x8007043c).

Error: (03/19/2014 03:23:57 PM) (Source: Outlook) (User: )
Description: Fehler beim Abrufen des Crawlbereichs-Managers. Fehler=0x8007043c.

Error: (03/19/2014 03:23:55 PM) (Source: Outlook) (User: )
Description: Fehler beim Bestimmen, ob sich der Speicher im Crawlbereich befindet (Fehler=0x8007043c).

Error: (03/19/2014 03:23:55 PM) (Source: Outlook) (User: )
Description: Fehler beim Abrufen des Crawlbereichs-Managers. Fehler=0x8007043c.

Error: (03/18/2014 08:11:21 AM) (Source: Outlook) (User: )
Description: Fehler beim Bestimmen, ob sich der Speicher im Crawlbereich befindet (Fehler=0x8007043c).

Error: (03/18/2014 08:11:21 AM) (Source: Outlook) (User: )
Description: Fehler beim Abrufen des Crawlbereichs-Managers. Fehler=0x8007043c.

Error: (03/18/2014 08:11:18 AM) (Source: Outlook) (User: )
Description: Fehler beim Bestimmen, ob sich der Speicher im Crawlbereich befindet (Fehler=0x8007043c).

Error: (03/18/2014 08:11:18 AM) (Source: Outlook) (User: )
Description: Fehler beim Abrufen des Crawlbereichs-Managers. Fehler=0x8007043c.

Error: (03/17/2014 11:35:24 PM) (Source: Outlook) (User: )
Description: Fehler beim Bestimmen, ob sich der Speicher im Crawlbereich befindet (Fehler=0x8007043c).

Error: (03/17/2014 11:35:24 PM) (Source: Outlook) (User: )
Description: Fehler beim Abrufen des Crawlbereichs-Managers. Fehler=0x8007043c.


System errors:
=============
Error: (03/19/2014 06:26:05 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (03/19/2014 06:26:05 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (03/19/2014 06:26:05 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (03/19/2014 06:26:05 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (03/19/2014 06:26:05 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (03/19/2014 06:26:05 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (03/19/2014 06:26:02 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (03/19/2014 06:26:02 PM) (Source: DCOM) (User: )
Description: 1084WSearch{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}

Error: (03/19/2014 06:26:02 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (03/19/2014 06:26:02 PM) (Source: DCOM) (User: )
Description: 1068netprofm{A47979D2-C419-11D9-A5B4-001185AD2B89}


Microsoft Office Sessions:
=========================
Error: (03/05/2014 08:09:06 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 2378 seconds with 420 seconds of active time.  This session ended with a crash.

Error: (01/12/2014 00:06:57 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 8572 seconds with 5400 seconds of active time.  This session ended with a crash.

Error: (11/24/2013 01:46:18 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 1 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (09/17/2013 07:58:24 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6679.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 40101 seconds with 540 seconds of active time.  This session ended with a crash.

Error: (08/28/2013 06:05:05 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 958 seconds with 240 seconds of active time.  This session ended with a crash.

Error: (08/13/2013 07:25:18 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 19809 seconds with 2160 seconds of active time.  This session ended with a crash.

Error: (08/12/2013 00:59:19 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 2170 seconds with 660 seconds of active time.  This session ended with a crash.

Error: (06/26/2013 04:15:02 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 12 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (06/26/2013 04:14:36 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 17 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (06/26/2013 04:14:07 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 29678 seconds with 6000 seconds of active time.  This session ended with a crash.


==================== Memory info =========================== 

Percentage of memory in use: 27%
Total physical RAM: 3293.24 MB
Available physical RAM: 2377.48 MB
Total Pagefile: 6584.77 MB
Available Pagefile: 5686.16 MB
Total Virtual: 2047.88 MB
Available Virtual: 1929.26 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:465.66 GB) (Free:380.65 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 069AB8B9)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=466 GB) - (Type=07 NTFS)

==================== End Of Log ============================

Smart Guard - überhaupt nichts geht mehr - Forensuche bereits genuz

Plagegeister aller Art und deren Bekämpfung: Smart Guard - überhaupt nichts geht mehr - Forensuche bereits genuz

Smart Guard - überhaupt nichts geht mehr - Forensuche bereits genuz

Smart Guard - überhaupt nichts geht mehr - Forensuche bereits genuz

Ähnliche Themen: Smart Guard - überhaupt nichts geht mehr - Forensuche bereits genuz