| |
| |||||||
Log-Analyse und Auswertung: Windows Vista Pro 32Bit: Internet (insb. Downloads) funktioniert nicht mehrWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
06.05.2014, 11:48
| #1 |
 |  Windows Vista Pro 32Bit: Internet (insb. Downloads) funktioniert nicht mehr Hallo zusammen, ich habe Probleme mit meinem Laptop, Lenovo Thinkpad X200, Windows Vista Professional 32Bit. Das Gerät habe ich mit in einen längeren Urlaub genommen, das bedeutet, das ich zurzeit nur über verschiedene öffentliche WLANS in das Internet komme. Ich habe die (geniale) Idee gehabt, hier aus dem Urlaub noch schnell das Programm FritzFernzugriff zu installieren, um über eine VPN-Verbindung halbwegs sicher zu kommunizieren. Gleichzeitig hat wohl Thunderbird im Hintergrund ein Update gefahren und der Virenscanner Avast auch. Fazit: Es funktionierte nichts mehr. Ich habe daraufhin mit der Systemwiederherstellung das System zurückgesetzt. Das Internet funktioniert nun teilweise wieder, Spiegel.de kann ich z.B. aufrufen, Downloads mit einer Größe über 100 KB funktionieren (weder in IE noch Firefox) nicht, er hält einfach an, wenn ich auf Pause und neustarten gehe, lädt er ein paar KB nach. Am WLAN liegt es nicht, mit den IOS-Geräten kann ich surfen. Die Internet-Sicherheitseinstellungen in der Systemsteuerung habe ich bereits angepasst. Wie gesagt, Antivirus ist deinstalliert. Aufgrund des Posts "www.trojaner-board.de/69066-hilfe-downloaden-geht.html#post408522 habe ich die dort genannte Datei heruntergeladen und ausgeführt. Nach Neustart konnte ich Winsock resetten, die firewall läuft aber nicht und lässt sich auch nicht über das Sicherheitscenter starten. Im Ergebnis surfe ich gerade ohne Firwall und Virenscanner. Ich habe jetzt defogger ausgeführt, mit mehreren Pausen FRST geladen. GMER kann ich gar nicht runterladen, liegt vielleicht an den wechselnden Dateinamen. FRST-Log s.u. Avast hatte vor Deinstallation nichts gefunden. Wie gesagt, bin gerade in (längerem, unbezahlten) Urlaub und der Laptop war ein Draht zur Heimat... Danke! Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1)
Log created at 12:02 on 06/05/2014 (admin)
Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
Checking for services/drivers...
-=E.O.F=-
Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:06-05-2014
Ran by admin (administrator) on ADMIN-PC on 06-05-2014 12:30:10
Running from C:\Users\admin\Downloads
Microsoft® Windows Vista™ Business Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Safe Mode (with Networking)
The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(Lenovo Group Limited) C:\Program Files\ThinkPad\Utilities\PWMUIAux.EXE
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-18] (Microsoft Corporation)
HKLM\...\Run: [TVT Scheduler Proxy] => C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe [487424 2008-03-04] (Lenovo Group Limited)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [TpShocks] => C:\Windows\system32\TpShocks.exe [338216 2013-06-20] (Lenovo.)
HKLM\...\Run: [RotateImage] => C:\Program Files\RotateImage\RCIMGDIR.exe [31744 2008-10-30] (Ricoh co.,Ltd.)
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SAIICpl.exe [307768 2010-04-28] ()
HKLM\...\Run: [FingerPrintSoftware] => C:\Program Files\Lenovo Fingerprint Software\fpapp.exe [1582920 2011-05-31] (AuthenTec)
HKLM\...\Run: [FingerPrintSoftwareSplashScreen] => C:\Program Files\Lenovo Fingerprint Software\SplashScreen.exe [102400 2011-05-31] (AuthenTec, Inc.)
HKLM\...\Run: [LPManager] => C:\Program Files\ThinkVantage\PrdCtr\LPMGR.EXE [185688 2009-07-23] (Lenovo Group Limited)
HKLM\...\Run: [LPMailChecker] => C:\Program Files\ThinkVantage\PrdCtr\LPMLCHK.EXE [124248 2009-07-23] (Lenovo Group Limited)
HKLM\...\Run: [AMSG] => C:\Program Files\ThinkVantage\AMSG\Amsg.exe [436800 2009-09-03] (LENOVO)
HKLM\...\Run: [PWMTRV] => C:\Program Files\ThinkPad\Utilities\PWMTR32V.DLL [4452648 2013-06-26] (Lenovo Group Limited)
HKLM\...\Run: [EZEJMNAP] => C:\Program Files\ThinkPad\Utilities\EZEJMNAP.EXE [256576 2009-12-01] (Lenovo Group Ltd.)
HKLM\...\Run: [cssauth] => C:\Program Files\Lenovo\Client Security Solution\cssauth.exe [3093816 2009-03-04] (Lenovo Group Limited)
HKLM\...\Run: [TrackPointSrv] => C:\Program Files\Lenovo\TrackPoint\tp4serv.exe [95264 2011-11-01] (Lenovo Group Limited)
HKLM\...\Run: [ACTray] => C:\Program Files\ThinkPad\ConnectUtilities\ACTray.exe [433248 2012-05-30] (Lenovo)
HKLM\...\Run: [ACWlIcon] => C:\Program Files\ThinkPad\ConnectUtilities\ACWlIcon.exe [195680 2012-05-30] (Lenovo)
HKLM\...\Run: [picon] => C:\Program Files\Common Files\Intel\Privacy Icon\PIconStartup.exe [111640 2010-02-04] ()
HKLM\...\Run: [TPKMAPHELPER] => C:\Program Files\ThinkPad\Utilities\TpKmapAp.exe [992816 2007-02-26] (Lenovo)
HKLM\...\Run: [TPFNF7] => C:\Program Files\Lenovo\NPDIRECT\TPFNF7SP.exe [62312 2010-03-26] (Lenovo Group Limited)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-21-1471904081-4208774288-2156754060-1000\...\Run: [WMPNSCFG] => C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-18] (Microsoft Corporation)
HKU\S-1-5-21-1471904081-4208774288-2156754060-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [20922016 2014-02-10] (Skype Technologies S.A.)
Lsa: [Notification Packages] scecli ACGina
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Digital Line Detect.lnk
ShortcutTarget: Digital Line Detect.lnk -> C:\Program Files\Digital Line Detect\DLG.exe (Avanquest Software )
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xD0D0A6549868CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: IePasswordManagerHelper Class - {BF468356-BB7E-42D7-9F15-4F3B9BCFCED2} - C:\Program Files\Lenovo\Client Security Solution\tvtpwm_ie_com.dll (Lenovo Group Limited)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 188.135.143.246 188.135.200.246
FireFox:
========
FF ProfilePath: C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\lx74gymb.default
FF DefaultSearchEngine: Bing
FF SelectedSearchEngine: Bing
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_182.dll ()
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.3 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Flash Video Downloader - Full HD Download - C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\lx74gymb.default\Extensions\artur.dubovoy@gmail.com [2014-04-26]
FF Extension: NoScript - C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\lx74gymb.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-03-16]
FF Extension: Adblock Plus - C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\lx74gymb.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-03-16]
FF Extension: DownThemAll! - C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\lx74gymb.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2014-04-06]
FF Extension: Greasemonkey - C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\lx74gymb.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2014-04-06]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ []
========================== Services (Whitelisted) =================
S3 ADMonitor; C:\Windows\system32\ADMonitor.exe [106496 2011-05-31] ()
S2 avmike; C:\Program Files\FRITZ!Fernzugang\avmike.exe [255904 2012-11-28] (AVM Berlin)
S2 certsrv; C:\Program Files\FRITZ!Fernzugang\certsrv.exe [122272 2012-11-28] (AVM Berlin)
S2 dtsvc; C:\Windows\system32\DTS.exe [98304 2011-05-31] ()
S2 FoxitCloudUpdateService; C:\Program Files\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe [239680 2014-02-19] (Foxit Corporation)
S2 JedoxSuiteMolapService; C:\Program Files\Jedox\Jedox Suite\olap\palo.exe [11264 2014-03-05] (Jedox OLAP AG)
S2 LENOVO.CAMMUTE; C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe [44024 2013-05-29] (Lenovo Group Limited)
S2 LENOVO.MICMUTE; C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe [127072 2012-08-24] (Lenovo Group Limited)
S2 nwtsrv; C:\Program Files\FRITZ!Fernzugang\nwtsrv.exe [155488 2013-06-10] (AVM Berlin)
S2 PwmEWSvc; C:\Program Files\ThinkPad\Utilities\PWMEWSVC.EXE [1664808 2013-06-26] (Lenovo Group Limited)
S2 SUService; C:\Program Files\Lenovo\System Update\SUService.exe [28672 2013-07-10] (Lenovo Group Limited)
S2 TPHKLOAD; C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe [116216 2013-05-23] (Lenovo Group Limited)
S2 TSSCoreService; C:\Program Files\Lenovo\Client Security Solution\tvttcsd.exe [779576 2009-03-04] (Lenovo)
S2 TVT Scheduler; C:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe [1122304 2008-03-04] (Lenovo Group Limited)
S2 UNS; C:\Program Files\Common Files\Intel\Privacy Icon\UNS\UNS.exe [2058776 2010-02-04] (Intel Corporation)
S2 TVT_UpdateMonitor; C:\Program Files\Lenovo\Rescue and Recovery\UpdateMonitor.exe [X]
==================== Drivers (Whitelisted) ====================
S3 5U875UVC; C:\Windows\System32\DRIVERS\RCUVCMNP.sys [187776 2009-10-23] (Ricoh co.,Ltd.)
S3 lnvobus; C:\Windows\System32\DRIVERS\lnvobus.sys [282880 2008-12-16] (MCCI Corporation)
S3 lnvocard; C:\Windows\System32\DRIVERS\lnvocard.sys [356480 2008-12-16] (MCCI Corporation)
S3 lnvogps; C:\Windows\System32\DRIVERS\lnvogps.sys [77864 2008-10-23] (Ericsson AB)
S3 lnvomdfl; C:\Windows\System32\DRIVERS\lnvomdfl.sys [15104 2008-12-16] (MCCI Corporation)
S3 lnvomdfl2; C:\Windows\System32\DRIVERS\lnvomdfl2.sys [15104 2008-12-16] (MCCI Corporation)
S3 lnvomdm; C:\Windows\System32\DRIVERS\lnvomdm.sys [365056 2008-12-16] (MCCI Corporation)
S3 lnvomdm2; C:\Windows\System32\DRIVERS\lnvomdm2.sys [408960 2008-12-16] (MCCI Corporation)
S3 lnvond5; C:\Windows\System32\DRIVERS\lnvond5.sys [25984 2008-12-16] (MCCI Corporation)
S3 lnvounic; C:\Windows\System32\DRIVERS\lnvounic.sys [375424 2008-12-16] (MCCI Corporation)
R3 NETwNv32; C:\Windows\System32\DRIVERS\NETwNv32.sys [6959616 2010-10-18] (Intel Corporation)
R3 NWIM; C:\Windows\System32\DRIVERS\avmnwim.sys [334712 2011-07-05] (AVM Berlin)
S3 Ser2plx86; C:\Windows\System32\DRIVERS\ser2pl.sys [132608 2012-07-26] (Prolific Technology Inc.)
S3 Sony_EricssonWWSC; C:\Windows\System32\DRIVERS\lnvoscard.sys [24232 2008-07-08] (Sony Ericsson)
R3 Tp4Track; C:\Windows\System32\DRIVERS\tp4track.sys [24872 2011-11-01] (Lenovo Group Limited)
S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-05-06 12:30 - 2014-05-06 12:30 - 00011867 _____ () C:\Users\admin\Downloads\FRST.txt
2014-05-06 12:30 - 2014-05-06 12:30 - 00000000 ____D () C:\FRST
2014-05-06 12:26 - 2014-05-06 12:27 - 00020171 _____ () C:\Users\admin\Downloads\e0f3bu76.exe.part
2014-05-06 12:15 - 2014-05-06 12:24 - 01053184 _____ (Farbar) C:\Users\admin\Downloads\FRST.exe
2014-05-06 12:02 - 2014-05-06 12:03 - 00000472 _____ () C:\Users\admin\Desktop\defogger_disable.log
2014-05-06 12:02 - 2014-05-06 12:02 - 00000000 _____ () C:\Users\admin\defogger_reenable
2014-05-06 12:01 - 2014-05-06 12:01 - 00046011 _____ () C:\Users\admin\Downloads\0wzupnm0.exe.part
2014-05-06 11:58 - 2014-05-06 11:58 - 00050477 _____ () C:\Users\admin\Desktop\Defogger.exe
2014-05-06 11:56 - 2014-05-06 12:03 - 00145220 _____ () C:\Users\admin\Downloads\mseinstall.exe.part
2014-05-06 11:37 - 2014-05-06 11:37 - 00001098 _____ () C:\Users\admin\Downloads\sharedaccess.zip
2014-05-06 10:56 - 2014-05-06 10:56 - 00000000 __RSH () C:\MSDOS.SYS
2014-05-06 10:56 - 2014-05-06 10:56 - 00000000 __RSH () C:\IO.SYS
2014-05-06 10:49 - 2014-05-06 10:49 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FRITZ!Fernzugang
2014-05-06 10:48 - 2014-05-06 10:48 - 00000000 ____D () C:\Program Files\Common Files\Wise Installation Wizard
2014-05-06 00:15 - 2014-05-06 00:16 - 1048576000 _____ () C:\Users\admin\******
2014-05-05 23:25 - 2014-05-05 23:40 - 00000000 ____D () C:\Users\admin\AppData\Roaming\TrueCrypt
2014-05-05 21:26 - 2014-05-05 21:27 - 00000000 ____D () C:\Program Files\Google
2014-05-05 21:26 - 2014-05-05 21:26 - 00000000 ____D () C:\Users\admin\AppData\Local\Google
2014-05-04 23:51 - 2014-04-29 12:28 - 12347392 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-04 23:51 - 2014-04-29 12:07 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-04 23:17 - 2014-05-04 23:23 - 00493263 _____ (Microsoft Corporation) C:\Users\admin\Downloads\mseinstall (1).exe.klkye69.partial
2014-05-02 23:16 - 2014-05-02 23:16 - 00000000 ____D () C:\Users\admin\AppData\Roaming\AVM
2014-05-02 22:38 - 2014-05-02 22:38 - 00004307 _____ () C:\Users\admin\Documents\******.txt
2014-05-02 21:14 - 2014-05-02 22:38 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird(99)
2014-05-01 19:24 - 2014-05-01 19:24 - 00000000 __SHD () C:\found.000
2014-05-01 19:05 - 2014-05-01 19:05 - 00000875 _____ () C:\Users\admin\Documents\******
.txt
2014-05-01 18:58 - 2014-05-06 10:49 - 00000000 ____D () C:\Program Files\FRITZ!Fernzugang
2014-05-01 18:58 - 2014-05-01 18:58 - 00000000 ____D () C:\ProgramData\AVM
2014-05-01 18:54 - 2014-05-01 18:55 - 12995204 _____ () C:\Users\admin\Downloads\Fritz_Fernzugang_VPN_1.3.1.0.zip
2014-05-01 18:43 - 2014-05-01 18:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenVPN
2014-05-01 18:43 - 2014-05-01 18:45 - 00000000 ____D () C:\Program Files\OpenVPN
2014-05-01 18:43 - 2014-05-01 18:44 - 00000000 ____D () C:\Program Files\TAP-Windows
2014-04-28 22:32 - 2014-04-28 22:32 - 00000218 _____ () C:\Users\admin\.recently-used.xbel
2014-04-28 21:49 - 2014-04-28 21:49 - 00108253 _____ () C:\Users\admin\Documents\*****.xps
2014-04-28 21:48 - 2014-04-28 21:48 - 00557138 ____N () C:\Users\admin\Documents\*****.TIF
2014-04-27 23:19 - 2014-04-27 23:19 - 00000000 ____D () C:\Users\admin\Downloads\ADAC_TourSet_Venedig
2014-04-26 00:36 - 2014-04-26 00:36 - 00003640 _____ () C:\Users\admin\Desktop\*****.htm
2014-04-24 21:46 - 2014-04-24 22:29 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Q-Dir
2014-04-24 21:46 - 2014-04-24 21:46 - 00001620 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Q-Dir.lnk
2014-04-24 21:46 - 2014-04-24 21:46 - 00000000 ____D () C:\Users\admin\Documents\Favorites_Q_Dir
2014-04-24 21:46 - 2014-04-24 21:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Q-Dir
2014-04-24 21:46 - 2014-04-24 21:46 - 00000000 ____D () C:\Program Files\Q-Dir
2014-04-24 21:45 - 2014-04-24 22:29 - 00021862 _____ () C:\Windows\Q-Dir.ini
2014-04-24 21:06 - 2014-04-28 22:10 - 00000000 ____D () C:\Users\admin\Desktop\KMZ
2014-04-22 23:57 - 2014-04-22 23:57 - 00002711 _____ () C:\Users\admin\Desktop\IMG_0131.jpg.out.pp3
2014-04-22 23:56 - 2014-04-22 23:56 - 00002711 _____ () C:\Users\admin\Desktop.jpg.out.pp3
2014-04-22 23:44 - 2014-05-02 20:43 - 00000000 ____D () C:\Users\admin\Desktop\Sicher
2014-04-22 23:43 - 2014-04-22 23:43 - 00000000 ____D () C:\Users\admin\AppData\Local\RawTherapee3.0.1
2014-04-22 23:42 - 2014-04-22 23:42 - 00000000 ____D () C:\Users\admin\Downloads\RawTherapee_WinXP_32_3.0.1
2014-04-22 23:42 - 2014-04-22 23:42 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RawTherapee 3.0.1
2014-04-22 23:42 - 2014-04-22 23:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RawTherapee 3.0.1
2014-04-22 23:42 - 2014-04-22 23:42 - 00000000 ____D () C:\Program Files\RawTherapee3.0.1
2014-04-22 22:52 - 2014-04-22 22:54 - 11869198 _____ () C:\Users\admin\Downloads\RawTherapee_WinXP_32_3.0.1.zip
2014-04-21 11:08 - 2014-05-06 11:57 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Skype
2014-04-21 11:08 - 2014-04-21 11:08 - 00001880 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-04-21 11:08 - 2014-04-21 11:08 - 00000000 ___RD () C:\Program Files\Skype
2014-04-21 11:08 - 2014-04-21 11:08 - 00000000 ____D () C:\Users\admin\AppData\Local\Skype
2014-04-21 11:08 - 2014-04-21 11:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-04-21 11:08 - 2014-04-21 11:08 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-04-21 11:07 - 2014-04-21 11:08 - 00000000 ____D () C:\ProgramData\Skype
2014-04-21 11:07 - 2014-04-21 11:07 - 01678496 _____ (Skype Technologies S.A.) C:\Users\admin\Downloads\SkypeSetup.exe
2014-04-21 00:09 - 2014-05-05 23:35 - 00000000 ____D () C:\Users\admin\AppData\Roaming\vlc
2014-04-21 00:05 - 2014-04-21 00:05 - 00000859 _____ () C:\Users\Public\Desktop\VLC media player.lnk
*****
==================== One Month Modified Files and Folders =======
2014-05-06 12:30 - 2014-05-06 12:30 - 00011867 _____ () C:\Users\admin\Downloads\FRST.txt
2014-05-06 12:30 - 2014-05-06 12:30 - 00000000 ____D () C:\FRST
2014-05-06 12:27 - 2014-05-06 12:26 - 00020171 _____ () C:\Users\admin\Downloads\e0f3bu76.exe.part
2014-05-06 12:24 - 2014-05-06 12:15 - 01053184 _____ (Farbar) C:\Users\admin\Downloads\FRST.exe
2014-05-06 12:07 - 2013-08-11 15:55 - 00001356 _____ () C:\Users\admin\AppData\Local\d3d9caps.dat
2014-05-06 12:03 - 2014-05-06 12:02 - 00000472 _____ () C:\Users\admin\Desktop\defogger_disable.log
2014-05-06 12:03 - 2014-05-06 11:56 - 00145220 _____ () C:\Users\admin\Downloads\mseinstall.exe.part
2014-05-06 12:02 - 2014-05-06 12:02 - 00000000 _____ () C:\Users\admin\defogger_reenable
2014-05-06 12:02 - 2013-08-11 15:55 - 00000000 ____D () C:\Users\admin
2014-05-06 12:02 - 2006-11-02 14:52 - 01090744 _____ () C:\Windows\WindowsUpdate.log
2014-05-06 12:01 - 2014-05-06 12:01 - 00046011 _____ () C:\Users\admin\Downloads\0wzupnm0.exe.part
2014-05-06 11:58 - 2014-05-06 11:58 - 00050477 _____ () C:\Users\admin\Desktop\Defogger.exe
2014-05-06 11:57 - 2014-04-21 11:08 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Skype
2014-05-06 11:54 - 2006-11-02 15:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-06 11:54 - 2006-11-02 14:47 - 00005168 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-06 11:54 - 2006-11-02 14:47 - 00005168 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-06 11:53 - 2014-04-06 17:56 - 101599160 _____ () C:\Windows\system32\ICAutoUpdate.log
2014-05-06 11:53 - 2013-08-11 15:46 - 00000012 _____ () C:\Windows\bthservsdp.dat
2014-05-06 11:53 - 2006-11-02 15:01 - 00018986 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-05-06 11:37 - 2014-05-06 11:37 - 00001098 _____ () C:\Users\admin\Downloads\sharedaccess.zip
2014-05-06 11:02 - 2006-11-02 12:33 - 01564930 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-06 10:56 - 2014-05-06 10:56 - 00000000 __RSH () C:\MSDOS.SYS
2014-05-06 10:56 - 2014-05-06 10:56 - 00000000 __RSH () C:\IO.SYS
2014-05-06 10:55 - 2014-04-06 17:51 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-05-06 10:55 - 2006-11-02 15:00 - 00599310 _____ () C:\Windows\PFRO.log
2014-05-06 10:49 - 2014-05-06 10:49 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FRITZ!Fernzugang
2014-05-06 10:49 - 2014-05-01 18:58 - 00000000 ____D () C:\Program Files\FRITZ!Fernzugang
2014-05-06 10:48 - 2014-05-06 10:48 - 00000000 ____D () C:\Program Files\Common Files\Wise Installation Wizard
2014-05-06 00:16 - 2014-05-06 00:15 - 1048576000 _____ () C:\Users\admin\******
2014-05-05 23:40 - 2014-05-05 23:25 - 00000000 ____D () C:\Users\admin\AppData\Roaming\TrueCrypt
2014-05-05 23:35 - 2014-04-21 00:09 - 00000000 ____D () C:\Users\admin\AppData\Roaming\vlc
2014-05-05 21:27 - 2014-05-05 21:26 - 00000000 ____D () C:\Program Files\Google
2014-05-05 21:26 - 2014-05-05 21:26 - 00000000 ____D () C:\Users\admin\AppData\Local\Google
2014-05-05 00:09 - 2014-03-17 21:36 - 00000393 _____ () C:\Users\Public\Documents\BluetoothLog.html
2014-05-04 23:40 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\Msdtc
2014-05-04 23:39 - 2006-11-02 12:22 - 39583744 _____ () C:\Windows\system32\config\components_previous
2014-05-04 23:39 - 2006-11-02 12:22 - 35389440 _____ () C:\Windows\system32\config\software_previous
2014-05-04 23:39 - 2006-11-02 12:22 - 28311552 _____ () C:\Windows\system32\config\system_previous
2014-05-04 23:39 - 2006-11-02 12:22 - 00262144 _____ () C:\Windows\system32\config\security_previous
2014-05-04 23:39 - 2006-11-02 12:22 - 00262144 _____ () C:\Windows\system32\config\sam_previous
2014-05-04 23:39 - 2006-11-02 12:22 - 00262144 _____ () C:\Windows\system32\config\default_previous
2014-05-04 23:34 - 2014-04-07 23:41 - 00000000 ____D () C:\Users\admin\AppData\Roaming\XnView
2014-05-04 23:34 - 2014-03-18 20:40 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird
2014-05-04 23:34 - 2014-03-16 11:31 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-05-04 23:34 - 2013-08-12 01:25 - 00000000 ____D () C:\ProgramData\Lenovo
2014-05-04 23:34 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\spool
2014-05-04 23:34 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\registration
2014-05-04 23:23 - 2014-05-04 23:17 - 00493263 _____ (Microsoft Corporation) C:\Users\admin\Downloads\mseinstall (1).exe.klkye69.partial
2014-05-02 23:16 - 2014-05-02 23:16 - 00000000 ____D () C:\Users\admin\AppData\Roaming\AVM
2014-05-02 22:38 - 2014-05-02 22:38 - 00004307 _____ () **************
2014-05-02 22:38 - 2014-05-02 21:14 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird(99)
2014-05-02 20:43 - 2014-04-22 23:44 - 00000000 ____D () C:\Users\admin\Desktop\Sicher
2014-05-02 20:29 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\NDF
2014-05-01 19:24 - 2014-05-01 19:24 - 00000000 __SHD () C:\found.000
2014-05-01 19:06 - 2014-04-20 21:43 - 00000000 ____D () C:\Users\admin\AppData\Roaming\S3Browser
2014-05-01 19:05 - 2014-05-01 19:05 - 00000875 _____ () ***************
2014-05-01 18:58 - 2014-05-01 18:58 - 00000000 ____D () C:\ProgramData\AVM
2014-05-01 18:55 - 2014-05-01 18:54 - 12995204 _____ () C:\Users\admin\Downloads\Fritz_Fernzugang_VPN_1.3.1.0.zip
2014-05-01 18:50 - 2013-08-11 15:55 - 00000000 ____D () C:\Users\admin\AppData\Local\VirtualStore
2014-05-01 18:45 - 2014-05-01 18:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenVPN
2014-05-01 18:45 - 2014-05-01 18:43 - 00000000 ____D () C:\Program Files\OpenVPN
2014-05-01 18:44 - 2014-05-01 18:43 - 00000000 ____D () C:\Program Files\TAP-Windows
2014-04-30 19:25 - 2014-03-18 20:41 - 00000000 ____D () C:\Users\admin\AppData\Local\Thunderbird
2014-04-29 12:28 - 2014-05-04 23:51 - 12347392 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-29 12:07 - 2014-05-04 23:51 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-28 22:32 - 2014-04-28 22:32 - 00000218 _____ () C:\Users\admin\.recently-used.xbel
2014-04-28 22:10 - 2014-04-24 21:06 - 00000000 ____D () C:\Users\admin\Desktop\KMZ
2014-04-28 21:49 - 2014-04-28 21:49 - 00108253 _____ () C:\Users\admin\Documents\venedig.xps
2014-04-28 21:48 - 2014-04-28 21:48 - 00557138 ____N () C:\Users\admin\Documents\venedig.TIF
2014-04-27 23:20 - 2006-11-02 14:52 - 00035877 _____ () C:\Windows\setupact.log
2014-04-27 23:19 - 2014-04-27 23:19 - 00000000 ____D () C:\Users\admin\Downloads\ADAC_TourSet_Venedig
2014-04-26 00:36 - 2014-04-26 00:36 - 00003640 _____ () *********.htm
2014-04-24 22:29 - 2014-04-24 21:46 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Q-Dir
2014-04-24 22:29 - 2014-04-24 21:45 - 00021862 _____ () C:\Windows\Q-Dir.ini
2014-04-24 21:46 - 2014-04-24 21:46 - 00001620 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Q-Dir.lnk
2014-04-24 21:46 - 2014-04-24 21:46 - 00000000 ____D () C:\Users\admin\Documents\Favorites_Q_Dir
2014-04-24 21:46 - 2014-04-24 21:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Q-Dir
2014-04-24 21:46 - 2014-04-24 21:46 - 00000000 ____D () C:\Program Files\Q-Dir
2014-04-23 09:34 - 2014-04-14 14:54 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Mp3tag
2014-04-22 23:57 - 2014-04-22 23:57 - 00002711 _____ () C:\Users\admin\Desktop\IMG_0131.jpg.out.pp3
2014-04-22 23:56 - 2014-04-22 23:56 - 00002711 _____ () C:\Users\admin\Desktop.jpg.out.pp3
2014-04-22 23:43 - 2014-04-22 23:43 - 00000000 ____D () C:\Users\admin\AppData\Local\RawTherapee3.0.1
2014-04-22 23:42 - 2014-04-22 23:42 - 00000000 ____D () C:\Users\admin\Downloads\RawTherapee_WinXP_32_3.0.1
2014-04-22 23:42 - 2014-04-22 23:42 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RawTherapee 3.0.1
2014-04-22 23:42 - 2014-04-22 23:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RawTherapee 3.0.1
2014-04-22 23:42 - 2014-04-22 23:42 - 00000000 ____D () C:\Program Files\RawTherapee3.0.1
2014-04-22 22:54 - 2014-04-22 22:52 - 11869198 _____ () C:\Users\admin\Downloads\RawTherapee_WinXP_32_3.0.1.zip
2014-04-21 11:08 - 2014-04-21 11:08 - 00001880 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-04-21 11:08 - 2014-04-21 11:08 - 00000000 ___RD () C:\Program Files\Skype
2014-04-21 11:08 - 2014-04-21 11:08 - 00000000 ____D () C:\Users\admin\AppData\Local\Skype
2014-04-21 11:08 - 2014-04-21 11:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-04-21 11:08 - 2014-04-21 11:08 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-04-21 11:08 - 2014-04-21 11:07 - 00000000 ____D () C:\ProgramData\Skype
2014-04-21 11:07 - 2014-04-21 11:07 - 01678496 _____ (Skype Technologies S.A.) C:\Users\admin\Downloads\SkypeSetup.exe
2014-04-21 00:05 - 2014-04-21 00:05 - 00000859 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-04-21 00:05 - 2014-04-21 00:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-04-21 00:05 - 2014-04-21 00:05 - 00000000 ____D () C:\Program Files\VideoLAN
2014-04-20 23:54 - 2014-04-20 23:34 - 00000000 ____D () C:\Users\admin\Desktop\Mp3
2014-04-20 23:52 - 2014-04-20 23:51 - 24677393 _____ () C:\Users\admin\Downloads\vlc-2.1.3-win32(1).exe
*****
Some content of TEMP:
====================
C:\Users\admin\AppData\Local\Temp\avgnt.exe
C:\Users\admin\AppData\Local\Temp\Foxit Reader Updater.exe
C:\Users\admin\AppData\Local\Temp\ICReinstall_AdobeFlashPlayer.exe
C:\Users\admin\AppData\Local\Temp\xerces-c_2_5_0.dll
C:\Users\admin\AppData\Local\Temp\xmlDeployer.exe
C:\Users\admin\AppData\Local\Temp\xmlUpdater.exe
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-05-06 12:20
==================== End Of Log ============================
Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version:06-05-2014
Ran by admin at 2014-05-06 12:32:04
Running from C:\Users\admin\Downloads
Boot Mode: Safe Mode (with Networking)
==========================================================
==================== Security Center ========================
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
Adobe Flash Player 13 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 13.0.0.182 - Adobe Systems Incorporated)
Anzeige am Bildschirm (HKLM\...\OnScreenDisplay) (Version: 6.70.00 - )
AVM FRITZ!Fernzugang (HKLM\...\{F2B03BB1-D679-4FFF-951D-3058A669A823}) (Version: 1.3.1 - AVM Berlin)
Cisco EAP-FAST Module (HKLM\...\{415B2719-AD3A-4944-B404-C472DB6085B3}) (Version: 2.1.6 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM\...\{83770D14-21B9-44B3-8689-F7B523F94560}) (Version: 1.0.12 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM\...\{669C7BD8-DAA2-49B6-966C-F1E2AAE6B17E}) (Version: 1.0.13 - Cisco Systems, Inc.)
Client Security - Password Manager (HKLM\...\{44E9D4C2-946C-4378-9354-558803C47A68}) (Version: 8.21.0006.00 - Lenovo Group Limited)
Conexant 20561 SmartAudio HD (HKLM\...\CNXT_AUDIO_HDA) (Version: 4.92.15.0 - Conexant)
CSVed 2.3.0 (HKLM\...\CSVed_is1) (Version: 2.3.0 - Sam Francke)
Dienstprogramm 'ThinkPad-Tastaturanpassung' (HKLM\...\{2111B23F-7FDA-4A41-8309-E5A1663CA296}) (Version: 1.0.01 - )
ElsterFormular (HKLM\...\ElsterFormular) (Version: 15.0.20140212 - Landesfinanzdirektion Thüringen)
Energie-Manager (HKLM\...\{DAC01CEE-5BAE-42D5-81FC-B687E84E8405}) (Version: 6.55 - )
Ergänzung zu Productivity Center für ThinkPad (HKLM\...\{D728E945-256D-4477-B377-6BBA693714AC}) (Version: 3.00b - )
Ericsson Wireless Module Core (HKLM\...\{64211D43-D195-413C-A7E7-666C10B53E1F}) (Version: 1.0.1046.229 - Lenovo)
FastGlacier version 2.2.9 (HKLM\...\FastGlacier_is1) (Version: 2.2.9.0 - NetSDK Software, LLC)
FDRTools Basic 2.6.1 (HKLM\...\{307232B6-D24C-4F7E-A1A4-5F6EFB81CB24}) (Version: 2.6.1 - AGS Technik)
FormsForWeb® Filler 3.2.4 (HKLM\...\{510E2ADB-37E1-4752-9D13-67077FC53D43}) (Version: 3.2.4 - Lucom GmbH)
Foxit Cloud (HKLM\...\{41914D8B-9D6E-4764-A1F9-BC43FB6782C1}_is1) (Version: 1.2.75.126 - Foxit Corporation)
Foxit Reader (HKLM\...\Foxit Reader_is1) (Version: 6.1.4.217 - Foxit Corporation)
GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team)
Help Center (HKLM\...\{986F64DC-FF15-449D-998F-EE3BCEC6666A}) (Version: 2.00n - )
Hugin 2013.0.0 (HKLM\...\Hugin) (Version: 2013.0.0 hg_0d404a7088e6 - The Hugin Development Team)
Integrated Camera Driver Installer Package Ver.1.32.500.0 (HKLM\...\{82EB6CEA-749A-410F-8AD2-372A286BA3BE}) (Version: 1.32.500.0 - RICOH)
Intel PROSet Wireless (Version: - ) Hidden
Intel(R) Control Center (HKLM\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Graphics Media Accelerator Driver (HKLM\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2555 - Intel Corporation)
Intel(R) Management Engine Interface (HKLM\...\HECI) (Version: - Intel Corporation)
Intel(R) Network Connections Drivers (HKLM\...\PROSet) (Version: 16.1 - Intel)
Intel(R) PROSet/Wireless WiFi-Software (HKLM\...\{F8F28729-B336-492C-B4FD-53A9BBDF0482}) (Version: 13.04.0000 - Intel Corporation)
Intel® Active-Management-Technologie (HKLM\...\MESOL) (Version: - Intel Corporation)
Java 7 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Jedox Base 5.0 SR3 (HKLM\...\{995E8B3D-F78A-4525-80C2-E0E3ADCE1B0B}_is1) (Version: 5.0.0.32454 - Jedox AG)
Lenovo Fingerprint Software (HKLM\...\{3D8994A3-02A8-45B5-B955-53E608BC69ED}) (Version: 3.3.2.50 - AuthenTec, Inc.)
Lenovo Patch Utility (HKLM\...\{6E6E7725-C7BC-4C39-8B3F-14B67331A120}) (Version: 1.3.0.9 - Lenovo Group Limited)
Lenovo Power Management Driver (HKLM\...\Power Management Driver) (Version: 1.67.03.13 - )
Lenovo System Interface Driver (HKLM\...\LENOVO.SMIIF) (Version: 1.05 - )
Message Center (HKLM\...\{E7E836B8-4BDD-454F-82E6-5FEA17C83AD4}) (Version: 2.01g - )
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - deu) (Version: - Microsoft Corporation)
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Standard Edition 2003 (HKLM\...\{91120407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 28.0 (x86 de) (HKLM\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)
Mozilla Thunderbird 24.4.0 (x86 de) (HKLM\...\Mozilla Thunderbird 24.4.0 (x86 de)) (Version: 24.4.0 - Mozilla)
Mp3tag v2.58 (HKLM\...\Mp3tag) (Version: v2.58 - Florian Heidenreich)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MyDriveConnect 3.3.0.1502 (HKLM\...\MyDriveConnect) (Version: 3.3.0.1502 - TomTom)
Notepad++ (HKLM\...\Notepad++) (Version: 6.5.5 - Notepad++ Team)
NTRIP (HKLM\...\{4AAD21AD-EE06-46C9-8B57-28D53DF9FB06}_is1) (Version: - NTRIP)
OpenOffice 4.0.0 (HKLM\...\{55E61709-D7D4-43C0-B45D-BFAF5C09A02D}) (Version: 4.00.9702 - Apache Software Foundation)
PL-2303 USB-to-Serial (HKLM\...\{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}) (Version: 1.7.0 - Prolific Technology INC)
Präsentationsdirektor (HKLM\...\{65706020-7B6F-41F2-8047-FC69579E386A}) (Version: 4.08 - )
Q-Dir (HKLM\...\Q-Dir) (Version: - )
RawTherapee 3.0.1 (HKLM\...\RawTherapee 3.0.1) (Version: 3.0.1.0 - RT Team)
Registry patch for Windows Vista USB S3 PM Enablement (HKLM\...\USBPMon) (Version: 1.00 - )
Registry Patch of Enabling Device Initiated Power Management(DIPM) on SATA for Windows Vista (HKLM\...\Dipmon) (Version: 1.01 - )
Registry patch to improve USB device detection on resume from sleep for Windows Vista (HKLM\...\{4AB5764A-3894-49A2-BAA8-C4665F74CD4C}) (Version: 1.01.0000 - Lenovo Group Limited)
S3 Browser version 4.3.1 (HKLM\...\S3 Browser_is1) (Version: 4.3.1.0 - NetSDK Software, LLC)
Skype™ 6.14 (HKLM\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.)
System Migration Assistant (HKLM\...\{8A4DB1CA-8206-4ADC-805C-66ACF1611DA3}) (Version: 6.00.0009 - Lenovo Group Limited.)
System Requirements Lab for Intel (HKLM\...\{53C63F43-B827-42D9-8886-4698D91EA33B}) (Version: 4.5.15.0 - Husdawg, LLC)
System Update (HKLM\...\{8675339C-128C-44DD-83BF-0A5D6ABD8297}) (Version: 3.16.0006 - Lenovo)
ThinkPad Bluetooth with Enhanced Data Rate Software (HKLM\...\{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}) (Version: 6.2.1.3100 - Broadcom Corporation)
ThinkPad FullScreen Magnifier (HKLM\...\ThinkPad FullScreen Magnifier) (Version: 2.40 - )
ThinkPad Mobility Center Customization (HKLM\...\{90FABD40-E741-446F-839D-CEAE905D63BE}) (Version: 1.50.0000 - Lenovo)
ThinkPad Modem Adapter (HKLM\...\CNXT_MODEM_HDA_HSF) (Version: 7.80.5.50 - Conexant Systems)
ThinkPad TrackPoint Driver (HKLM\...\TrackPoint) (Version: 4.73.1.0 - Lenovo)
Thinkpad Wireless LAN Adapters Software (11a/b/g/n) (HKLM\...\{8485F313-4B62-42F3-ADD8-0DE34A4DDAEF}) (Version: 7.7.0.498b - Atheros)
ThinkPad-Dienstprogramm 'EasyEject' (HKLM\...\{1297C681-92D7-40EF-93BF-03F66EC5105C}) (Version: 2.39 - )
ThinkVantage Access Connections (HKLM\...\{4D828D53-4443-45C6-86DE-23B1562107FE}) (Version: 5.90 - Lenovo)
ThinkVantage Communications Utility (HKLM\...\{88C6A6D9-324C-46E8-BA87-563D14021442}_is1) (Version: 2.11.0.0 - Lenovo)
ThinkVantage Productivity Center (HKLM\...\{CF5737AF-8550-4546-A69B-0EA9EF5A9B55}) (Version: 3.11 - Lenovo)
ThinkVantage System für aktiven Festplattenschutz (HKLM\...\{46A84694-59EC-48F0-964C-7E76E9F8A2ED}) (Version: 1.77.0.26 - Lenovo)
TrueCrypt (HKLM\...\TrueCrypt) (Version: 7.1a - TrueCrypt Foundation)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (HKLM\...\{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707) (Version: 1 - Microsoft Corporation)
Vim 7.4 (self-installing) (HKLM\...\Vim 7.4) (Version: - )
Visual Studio C++ 10.0 Runtime (HKLM\...\{4412F224-3849-4461-A3E9-DEEF8D252790}) (Version: 10.0.0 - TomTom International B.V.)
VLC media player 2.1.3 (HKLM\...\VLC media player) (Version: 2.1.3 - VideoLAN)
Windows Driver Package - Broadcom (BTHUSB) Bluetooth (04/08/2010 6.3.5.430) (HKLM\...\2004BB9EB6CEA02846881BEF1F51C11F7A90C9D6) (Version: 04/08/2010 6.3.5.430 - Broadcom)
Windows Driver Package - Broadcom HIDClass (07/28/2009 6.2.0.9800) (HKLM\...\BF20603967CFDCB2BBF91950E8A56DFBC5C833FE) (Version: 07/28/2009 6.2.0.9800 - Broadcom)
Windows-Treiberpaket - AuthenTec Inc. (ATSwpWDF) Biometric (07/02/2010 8.6.0.29) (HKLM\...\05FBE63CF9C9B3424152207E7278CD6DA193C56C) (Version: 07/02/2010 8.6.0.29 - AuthenTec Inc.)
XnView 2.22 (HKLM\...\XnView_is1) (Version: 2.22 - Gougelet Pierre-e)
==================== Restore Points =========================
22-04-2014 20:29:37 Windows Update
26-04-2014 13:32:29 Windows Update
29-04-2014 16:26:33 avast! antivirus system restore point
29-04-2014 16:32:29 Gerätetreiber-Paketinstallation: ALWIL Software Netzwerkdienst
29-04-2014 20:22:41 Windows Update
30-04-2014 18:19:06 Geplanter Prüfpunkt
01-05-2014 16:43:39 Gerätetreiber-Paketinstallation: TAP-Windows Provider V9 Netzwerkadapter
01-05-2014 16:57:41 AVM FRITZ!Fernzugang wird installiert
01-05-2014 16:58:44 Gerätetreiber-Paketinstallation: AVM Berlin Netzwerkdienst
01-05-2014 21:28:10 avast! antivirus system restore point
02-05-2014 20:49:01 AVM FRITZ!Fernzugang wird installiert
02-05-2014 20:49:49 Gerätetreiber-Paketinstallation: AVM Berlin Netzwerkdienst
02-05-2014 21:13:57 FRITZ!Box-Fernzugang einrichten wird installiert
02-05-2014 21:21:24 Windows Update
02-05-2014 21:31:25 Windows Update
04-05-2014 09:03:33 Wiederherstellungsvorgang
04-05-2014 09:27:38 Windows Update
04-05-2014 21:24:34 Wiederherstellungsvorgang
04-05-2014 21:42:26 avast! antivirus system restore point
04-05-2014 21:49:55 Windows Update
05-05-2014 22:00:16 avast! antivirus system restore point
06-05-2014 08:49:17 AVM FRITZ!Fernzugang wird installiert
06-05-2014 08:49:59 Gerätetreiber-Paketinstallation: AVM Berlin Netzwerkdienst
==================== Hosts content: ==========================
2006-11-02 12:23 - 2006-09-18 23:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
::1 localhost
==================== Scheduled Tasks (whitelisted) =============
Task: {0CAB7B68-718C-40E0-B83B-89DDF7007DC8} - System32\Tasks\Microsoft\Windows\PLA\System\ConvertLogEntries => Rundll32.exe %windir%\system32\pla.dll,PlaConvertLogEntries
Task: {155723BA-60E2-4354-93AF-84EAC8D3C2D8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2013-08-11] ()
Task: {2DE18FE4-6467-484F-8431-206702EC5546} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-18] (Microsoft Corporation)
Task: {2E5B7D97-F14C-4CFF-864E-620AABA892D1} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {37B890C1-D0AD-4DDC-957C-15536381D8C4} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\VistaSP1CEIP => C:\Windows\servicing\vsp1ceip.exe [2008-01-18] (Microsoft Corporation)
Task: {4D72741E-769C-45DB-8604-CB8EBDADAA29} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {50504FCA-61DD-43C4-BFB6-5B09D039AE26} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {767ED996-C38E-4F1A-9F8E-E5A25698CB50} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\netsh.exe [2006-11-02] (Microsoft Corporation)
Task: {FD9AB704-1A96-42CE-BBDD-F7412DBA4C58} - System32\Tasks\JedoxManager => C:\Program Files\Jedox\Jedox Suite\xladdin\Manager.exe [2014-01-21] (Jedox AG)
==================== Loaded Modules (whitelisted) =============
2013-08-12 01:29 - 2013-06-26 06:55 - 00095232 ____N () C:\Program Files\ThinkPad\Utilities\GR\PWMRT32V.DLL
2013-08-12 01:29 - 2013-06-26 06:55 - 00114176 ____N () C:\Program Files\ThinkPad\Utilities\GR\PWMROV.DLL
2014-04-06 23:49 - 2014-04-06 23:49 - 03642480 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="2"
==================== EXE Association (whitelisted) =============
==================== Disabled items from MSCONFIG ==============
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (05/06/2014 00:07:46 PM) (Source: SideBySide) (User: ) (EventID: 33)
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (05/06/2014 00:07:44 PM) (Source: SideBySide) (User: ) (EventID: 33)
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (05/06/2014 00:07:44 PM) (Source: SideBySide) (User: ) (EventID: 33)
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (05/06/2014 00:07:44 PM) (Source: SideBySide) (User: ) (EventID: 33)
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (05/06/2014 00:07:44 PM) (Source: SideBySide) (User: ) (EventID: 33)
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (05/06/2014 00:07:28 PM) (Source: SideBySide) (User: ) (EventID: 33)
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (05/06/2014 00:07:28 PM) (Source: SideBySide) (User: ) (EventID: 33)
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (05/06/2014 00:07:26 PM) (Source: EventSystem) (User: ) (EventID: 4609)
Description: d:\longhorn\com\complus\src\events\tier1\eventsystemobj.cpp458007043c
Error: (05/06/2014 11:53:33 AM) (Source: EventSystem) (User: ) (EventID: 4621)
Description: 80070005EventSystem.EventSubscription{F6FE5592-FCBC-44AD-A836-D37F5085ED5B}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}
Error: (05/06/2014 11:38:42 AM) (Source: EventSystem) (User: ) (EventID: 4621)
Description: 80070005EventSystem.EventSubscription{F6FE5592-FCBC-44AD-A836-D37F5085ED5B}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}
System errors:
=============
Error: (05/06/2014 00:12:45 PM) (Source: Service Control Manager) (User: ) (EventID: 7024)
Description: Windows-Firewall5 (0x5)
Error: (05/06/2014 00:07:39 PM) (Source: DCOM) (User: ) (EventID: 10005)
Description: 1084WSearch{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
Error: (05/06/2014 00:07:38 PM) (Source: DCOM) (User: ) (EventID: 10005)
Description: 1084WSearch{9E175B6D-F52A-11D8-B9A5-505054503030}
Error: (05/06/2014 00:07:26 PM) (Source: DCOM) (User: ) (EventID: 10005)
Description: 1084EventSystem{1BE1F766-5536-11D1-B726-00C04FB926AF}
Error: (05/06/2014 00:06:29 PM) (Source: Service Control Manager) (User: ) (EventID: 7026)
Description: cdrom
lenovo.smi
spldr
TPPWRIF
truecrypt
tvtumon
Wanarpv6
Error: (05/06/2014 00:06:29 PM) (Source: Service Control Manager) (User: ) (EventID: 7024)
Description: Windows-Firewall5 (0x5)
Error: (05/06/2014 00:06:29 PM) (Source: Service Control Manager) (User: ) (EventID: 7001)
Description: ComputerbrowserServer%%1068
Error: (05/06/2014 00:05:41 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (User: NT-AUTORITÄT) (EventID: 10000)
Description: C:\Windows\System32\IWMSSvc.dll21
Error: (05/06/2014 00:05:40 PM) (Source: DCOM) (User: ) (EventID: 10005)
Description: 1084ShellHWDetection{DD522ACC-F821-461A-A407-50B198B896DC}
Error: (05/06/2014 00:05:15 PM) (Source: EventLog) (User: ) (EventID: 6008)
Description: Das System wurde zuvor am 06.05.2014 um 12:03:22 unerwartet heruntergefahren.
Microsoft Office Sessions:
=========================
Error: (05/06/2014 00:07:46 PM) (Source: SideBySide) (User: ) (EventID: 33)
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\Hugin\bin\hugin.exe
Error: (05/06/2014 00:07:44 PM) (Source: SideBySide) (User: ) (EventID: 33)
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\Hugin\bin\calibrate_lens_gui.exe
Error: (05/06/2014 00:07:44 PM) (Source: SideBySide) (User: ) (EventID: 33)
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\Hugin\bin\calibrate_lens_gui.exe
Error: (05/06/2014 00:07:44 PM) (Source: SideBySide) (User: ) (EventID: 33)
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\Hugin\bin\PTBatcherGUI.exe
Error: (05/06/2014 00:07:44 PM) (Source: SideBySide) (User: ) (EventID: 33)
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\Hugin\bin\PTBatcherGUI.exe
Error: (05/06/2014 00:07:28 PM) (Source: SideBySide) (User: ) (EventID: 33)
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\Hugin\bin\hugin.exe
Error: (05/06/2014 00:07:28 PM) (Source: SideBySide) (User: ) (EventID: 33)
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\Hugin\bin\hugin.exe
Error: (05/06/2014 00:07:26 PM) (Source: EventSystem) (User: ) (EventID: 4609)
Description: d:\longhorn\com\complus\src\events\tier1\eventsystemobj.cpp458007043c
Error: (05/06/2014 11:53:33 AM) (Source: EventSystem) (User: ) (EventID: 4621)
Description: 80070005EventSystem.EventSubscription{F6FE5592-FCBC-44AD-A836-D37F5085ED5B}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}
Error: (05/06/2014 11:38:42 AM) (Source: EventSystem) (User: ) (EventID: 4621)
Description: 80070005EventSystem.EventSubscription{F6FE5592-FCBC-44AD-A836-D37F5085ED5B}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}
CodeIntegrity Errors:
===================================
Date: 2014-04-10 10:52:42.088
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-04-10 10:52:41.995
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-04-10 10:52:41.901
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-04-10 10:52:41.792
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-04-10 10:52:41.667
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Percentage of memory in use: 40%
Total physical RAM: 1991.27 MB
Available physical RAM: 1176.89 MB
Total Pagefile: 4219.54 MB
Available Pagefile: 3568.74 MB
Total Virtual: 2047.88 MB
Available Virtual: 1920.5 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:149.05 GB) (Free:79.84 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 149 GB) (Disk ID: 889170F6)
Partition 1: (Active) - (Size=149 GB) - (Type=07 NTFS)
==================== End Of Log ============================
|
| Themen zu Windows Vista Pro 32Bit: Internet (insb. Downloads) funktioniert nicht mehr |
| antivirus, association, avg, bildschirm, browser, desktop, downloader, fcupdateservice.exe, fehler, festplatte, firefox, flash player, funktioniert nicht mehr, icreinstall, internet, mozilla, mp3, programm, proxy, registry, rundll, scan, schutz, security, services.exe, software, svchost.exe, vista, windows |
Baum-Darstellung