Hi
Habe in Steam ein Tauschangebot bekommen.
Eine vermeintliche Bilddatei runtergeladen, die eine *.scr Datei war.
Windows hat das ausführen verhindert.
Ich habe die Datei daraufhin gelöscht.
Bin ich jetzt trotzdem in Gefahr schon einen Trojaner oder ähnliches zu haben?

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

FRST


FRST Logfile:

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-01-2015 01
Ran by Manu (administrator) on MEINZ on 25-01-2015 13:11:40
Running from C:\Users\Manu\Downloads
Loaded Profiles: Manu & UpdatusUser (Available profiles: Manu & UpdatusUser)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
() C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Realtek Semiconductor Corporation) C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\utility.exe
(Greenshot) C:\Program Files\Greenshot\Greenshot.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avscan.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\livecomm.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Nvtmru] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2014-12-02] (NVIDIA Corporation)
HKLM\...\Run: [BtServer] => C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe [216064 2014-01-06] (Realtek Semiconductor Corporation)
HKLM\...\Run: [Energy Manager] => C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe [15813616 2014-12-03] (Lenovo(beijing) Limited)
HKLM\...\Run: [Lenovo Utility] => C:\Program Files (x86)\Lenovo\Energy Manager\Utility.exe [80880 2014-12-03] (Lenovo(beijing) Limited)
HKLM\...\Run: [Greenshot] => C:\Program Files\Greenshot\Greenshot.exe [536576 2014-12-29] (Greenshot)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [126200 2014-11-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [702768 2014-12-16] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-2647887144-2414811117-607621015-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-2647887144-2414811117-607621015-1001\...\Run: [AmazonMP3DownloaderHelper] => C:\Users\Manu\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()
HKU\S-1-5-21-2647887144-2414811117-607621015-1001\...\Run: [Akamai NetSession Interface] => "C:\Users\Manu\AppData\Local\Akamai\netsession_win.exe"
HKU\S-1-5-21-2647887144-2414811117-607621015-1001\...\MountPoints2: {2b4477dc-82ab-11e4-8256-0071cc469d6c} - "E:\Autorun.exe" 
HKU\S-1-5-21-2647887144-2414811117-607621015-1001\...\MountPoints2: {40bf9dbd-7af0-11e4-824f-806e6f6e6963} - "D:\autorun.exe" 

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-2647887144-2414811117-607621015-1001\Software\Microsoft\Internet Explorer\Main,Start Page = Google
HKU\S-1-5-21-2647887144-2414811117-607621015-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = MSN Deutschland
URLSearchHook: [S-1-5-21-2647887144-2414811117-607621015-1002] ATTENTION ==> Default URLSearchHook is missing.
SearchScopes: HKU\S-1-5-21-2647887144-2414811117-607621015-1001 -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3322288&octid=EB_ORIGINAL_CTID&ISID=MF8E0FC10-AFB0-46C8-A3FE-DD849B61E384&SearchSource=58&CUI=&UM=6&UP=SP6B684E98-D6EE-4FA9-8434-FD3E7E4F9534&q={searchTerms}&SSPV=
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation)
BHO: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.)
BHO-x32: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\UgK0SRWX.default
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-2647887144-2414811117-607621015-1001: amazon.com/AmazonMP3DownloaderPlugin -> C:\Users\Manu\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)
FF Extension: Avira Browser Safety - C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\UgK0SRWX.default\Extensions\abs@avira.com [2014-12-03]

Chrome: 
=======
CHR HomePage: Default -> hxxp://google.de/
CHR StartupUrls: Default -> "https://www.google.com/"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Manu\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Präsentationen) - C:\Users\Manu\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-12-03]
CHR Extension: (Google Docs) - C:\Users\Manu\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-12-03]
CHR Extension: (Google Drive) - C:\Users\Manu\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-12-03]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Manu\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-12-03]
CHR Extension: (YouTube) - C:\Users\Manu\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-12-03]
CHR Extension: (Adblock Plus) - C:\Users\Manu\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-01-15]
CHR Extension: (Google-Suche) - C:\Users\Manu\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-12-03]
CHR Extension: (Google Tabellen) - C:\Users\Manu\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-12-03]
CHR Extension: (Avira Browserschutz) - C:\Users\Manu\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-12-03]
CHR Extension: (AdBlock) - C:\Users\Manu\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-12-03]
CHR Extension: (AdBlock Plus for Chrome) - C:\Users\Manu\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcobmjifdimfbihnbnafhcpmifgmjlka [2014-12-03]
CHR Extension: (Google Wallet) - C:\Users\Manu\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-12-03]
CHR Extension: (Google Mail) - C:\Users\Manu\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-12-03]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-12-16] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-12-16] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [166192 2014-11-20] (Avira Operations GmbH & Co. KG)
R2 BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [79872 2014-01-06] () [File not signed]
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [329104 2014-10-03] (Intel Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-10-23] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131608 2014-10-23] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-10-23] (Avira Operations GmbH & Co. KG)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-09-24] (Microsoft Corporation)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-12-19] (Disc Soft Ltd)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-12-19] (Intel Corporation)
R3 RtkBtFilter; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [558296 2014-12-02] (Realtek Semiconductor Corporation)
R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [2982104 2014-12-02] (Realtek Semiconductor Corporation                           )
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-25 13:11 - 2015-01-25 13:13 - 00013408 _____ () C:\Users\Manu\Downloads\FRST.txt
2015-01-25 13:11 - 2015-01-25 13:11 - 00000000 ____D () C:\FRST
2015-01-25 13:10 - 2015-01-25 13:10 - 02129920 _____ (Farbar) C:\Users\Manu\Downloads\FRST64.exe
2015-01-22 19:27 - 2015-01-22 19:27 - 00000000 ____D () C:\Windows\System32\Tasks\GenericSettingsHandler
2015-01-21 17:39 - 2015-01-21 17:39 - 06912512 _____ () C:\Users\Manu\Downloads\FujitsuSiemensPCSCENICOP320(V8M800)VIDEODRI6.14.10.0103.exe
2015-01-18 20:30 - 2008-07-12 08:18 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2015-01-18 20:30 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2015-01-18 20:30 - 2008-07-12 08:18 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2015-01-18 20:30 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2015-01-18 20:30 - 2008-07-12 08:18 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2015-01-18 20:30 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2015-01-18 20:18 - 2015-01-18 20:18 - 00000000 ____D () C:\Program Files (x86)\Codemasters
2015-01-15 21:39 - 2014-12-19 07:26 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-01-15 21:39 - 2014-12-12 01:51 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ahcache.sys
2015-01-15 21:39 - 2014-12-09 02:50 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-01-15 21:39 - 2014-12-06 04:17 - 00360448 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2015-01-15 21:39 - 2014-12-06 02:41 - 00391680 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2015-01-15 21:39 - 2014-10-29 02:24 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2015-01-15 21:39 - 2014-10-29 02:01 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2015-01-15 21:38 - 2014-12-12 03:04 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-01-15 21:38 - 2014-12-08 20:42 - 00535640 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2015-01-15 21:38 - 2014-12-08 20:42 - 00531616 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2015-01-15 21:38 - 2014-12-08 20:42 - 00448792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2015-01-15 21:38 - 2014-12-08 20:42 - 00413248 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll
2015-01-15 21:38 - 2014-12-08 20:42 - 00372408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll
2015-01-15 21:38 - 2014-12-08 20:42 - 00108944 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2015-01-15 21:38 - 2014-12-08 20:42 - 00038264 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe
2015-01-15 21:38 - 2014-12-08 20:42 - 00033584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFaultSecure.exe
2015-01-15 21:38 - 2014-12-06 02:35 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2015-01-15 21:38 - 2014-10-29 05:00 - 00465320 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe
2015-01-15 21:38 - 2014-10-29 05:00 - 00139984 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe
2015-01-15 21:38 - 2014-10-29 04:52 - 00500016 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-01-15 21:38 - 2014-10-29 04:52 - 00482872 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-01-15 21:38 - 2014-10-29 04:52 - 00394120 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2015-01-15 21:38 - 2014-10-29 04:52 - 00272248 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2015-01-15 21:38 - 2014-10-29 04:12 - 00413136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe
2015-01-15 21:38 - 2014-10-29 04:12 - 00136296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe
2015-01-15 21:38 - 2014-10-29 04:07 - 00424544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2015-01-15 21:38 - 2014-10-29 04:07 - 00370424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2015-01-15 21:38 - 2014-10-29 04:07 - 00344536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2015-01-15 21:38 - 2014-10-29 03:44 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\werdiagcontroller.dll
2015-01-15 21:38 - 2014-10-29 02:59 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werdiagcontroller.dll
2015-01-15 21:38 - 2014-10-29 02:02 - 00911360 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-01-12 20:56 - 2015-01-12 20:56 - 00000000 ____D () C:\Users\Manu\AppData\Roaming\Greenshot
2015-01-12 20:56 - 2015-01-12 20:56 - 00000000 ____D () C:\Users\Manu\AppData\Local\Greenshot
2015-01-12 20:56 - 2015-01-12 20:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Greenshot
2015-01-12 20:56 - 2015-01-12 20:56 - 00000000 ____D () C:\Program Files\Greenshot
2015-01-12 20:54 - 2015-01-12 20:54 - 01352311 _____ (Greenshot ) C:\Users\Manu\Downloads\greenshot-installer-1.2.4.10-release.exe
2015-01-12 20:54 - 2015-01-12 20:54 - 01352311 _____ (Greenshot ) C:\Users\Manu\Downloads\greenshot-installer-1.2.4.10-release (1).exe
2015-01-12 20:52 - 2015-01-12 20:52 - 01174816 _____ () C:\Users\Manu\Downloads\Greenshot - CHIP-Installer.exe
2015-01-08 16:48 - 2015-01-08 16:48 - 00000000 _____ () C:\Users\Manu\Desktop\Butterfly Effect.txt
2015-01-07 22:45 - 2015-01-13 17:22 - 00000000 ____D () C:\Users\Manu\Desktop\IFS12 Referat
2015-01-07 22:29 - 2015-01-07 22:32 - 820998144 _____ () C:\Users\Manu\Documents\OfficeProfessionalPlus_x64_de-de.img
2015-01-07 22:28 - 2015-01-07 22:28 - 10473920 _____ (Akamai Technologies, Inc.) C:\Users\Manu\Downloads\my_downloader_installer (1).exe
2015-01-07 22:27 - 2015-01-07 22:27 - 10473920 _____ (Akamai Technologies, Inc.) C:\Users\Manu\Downloads\my_downloader_installer.exe
2015-01-02 15:43 - 2015-01-24 20:44 - 00000000 ____D () C:\Users\Manu\Documents\Euro Truck Simulator 2
2014-12-28 16:53 - 2014-12-29 11:37 - 00013082 _____ () C:\Users\Manu\Desktop\Silvester.odt
2014-12-26 10:53 - 2014-12-26 10:53 - 00000000 ____D () C:\Users\Manu\Documents\Amazon MP3
2014-12-26 10:53 - 2014-12-26 10:53 - 00000000 ____D () C:\Users\Manu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon
2014-12-26 10:53 - 2014-12-26 10:53 - 00000000 ____D () C:\Users\Manu\AppData\Roaming\Amazon

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-25 13:12 - 2014-12-03 15:07 - 00001118 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-01-25 13:08 - 2014-12-03 15:03 - 00331112 _____ () C:\Users\Manu\AppData\Local\BTServer.log
2015-01-25 13:08 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sru
2015-01-25 12:39 - 2014-12-03 14:42 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2647887144-2414811117-607621015-1001
2015-01-25 12:35 - 2014-12-03 14:36 - 02086645 _____ () C:\Windows\WindowsUpdate.log
2015-01-25 12:23 - 2014-12-06 18:58 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-01-25 12:05 - 2014-12-03 15:12 - 00000000 ____D () C:\ProgramData\Oracle
2015-01-25 12:05 - 2014-12-03 15:11 - 00000000 ____D () C:\Program Files\Java
2015-01-25 12:04 - 2014-12-03 15:12 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2015-01-25 11:59 - 2014-12-03 15:36 - 00000000 ____D () C:\Users\Manu\OneDrive
2015-01-25 11:57 - 2014-12-03 15:07 - 00001114 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-01-24 20:19 - 2014-09-24 07:17 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-24 20:19 - 2014-09-24 06:43 - 00765582 _____ () C:\Windows\system32\perfh007.dat
2015-01-24 20:19 - 2014-09-24 06:43 - 00159366 _____ () C:\Windows\system32\perfc007.dat
2015-01-24 20:18 - 2014-12-03 15:15 - 00000000 ____D () C:\Users\Manu\AppData\Roaming\.minecraft
2015-01-23 15:05 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\AppReadiness
2015-01-22 22:15 - 2013-08-22 15:46 - 00020525 _____ () C:\Windows\setupact.log
2015-01-22 22:15 - 2013-08-22 15:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-22 22:14 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2015-01-22 19:47 - 2013-08-22 16:20 - 00000000 ____D () C:\Windows\CbsTemp
2015-01-19 22:32 - 2014-09-24 08:46 - 00714720 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-01-19 22:32 - 2014-09-24 08:46 - 00106976 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-01-18 20:37 - 2014-12-19 15:46 - 00000000 ____D () C:\Users\Manu\Documents\My Games
2015-01-18 20:35 - 2014-12-24 12:57 - 00000000 ___RD () C:\Users\Manu\Desktop\Spiele
2015-01-18 20:30 - 2014-12-19 14:47 - 00138886 _____ () C:\Windows\DirectX.log
2015-01-18 20:18 - 2014-12-03 14:53 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-01-17 01:17 - 2014-12-03 14:36 - 00000000 ____D () C:\Users\Manu
2015-01-15 22:28 - 2014-12-04 17:57 - 00000000 ____D () C:\Windows\system32\MRT
2015-01-15 22:17 - 2014-12-04 17:56 - 113365784 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-01-13 19:56 - 2014-12-14 03:01 - 00000000 ____D () C:\Program Files\pornos
2015-01-03 22:30 - 2014-12-04 17:38 - 00000000 ____D () C:\Users\Manu\AppData\Roaming\Craften Terminal
2014-12-28 13:58 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\rescache
2014-12-28 13:41 - 2013-08-22 15:44 - 00362760 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-12-28 13:40 - 2014-09-23 22:06 - 00045034 _____ () C:\Windows\PFRO.log

==================== Files in the root of some directories =======

2014-12-03 15:03 - 2015-01-25 13:08 - 0331112 _____ () C:\Users\Manu\AppData\Local\BTServer.log
2014-12-04 18:38 - 2014-12-04 18:38 - 0000017 _____ () C:\Users\Manu\AppData\Local\resmon.resmoncfg

Some content of TEMP:
====================
C:\Users\Manu\AppData\Local\Temp\AutoRun.exe
C:\Users\Manu\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\Manu\AppData\Local\Temp\avgnt.exe
C:\Users\Manu\AppData\Local\Temp\bitool.dll
C:\Users\Manu\AppData\Local\Temp\drm_dyndata_7400009.dll
C:\Users\Manu\AppData\Local\Temp\EAInstall.dll
C:\Users\Manu\AppData\Local\Temp\eauninstall.exe
C:\Users\Manu\AppData\Local\Temp\jre-8u31-windows-au.exe
C:\Users\Manu\AppData\Local\Temp\nsoB0A8.exe
C:\Users\Manu\AppData\Local\Temp\nssE128.exe
C:\Users\Manu\AppData\Local\Temp\ose00000.exe
C:\Users\Manu\AppData\Local\Temp\The Battle for Middle-earth II_uninst.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-01-18 17:11

==================== End Of Log ============================
         

--- --- ---

--- --- ---

--- --- ---


Addition

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 24-01-2015 01
Ran by Manu at 2015-01-25 13:14:12
Running from C:\Users\Manu\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version:  - )
Adobe Flash Player 15 Pepper (HKLM-x32\...\Adobe Flash Player Pepper) (Version: 15.0.0.215 - Adobe Systems Incorporated)
Akamai NetSession Interface (HKU\S-1-5-21-2647887144-2414811117-607621015-1001\...\Akamai) (Version:  - Akamai Technologies, Inc)
Amazon MP3-Downloader 1.0.18 (HKU\S-1-5-21-2647887144-2414811117-607621015-1001\...\Amazon MP3-Downloader) (Version: 1.0.18 - Amazon Services LLC)
Audacity 2.0.6 (HKLM-x32\...\Audacity_is1) (Version: 2.0.6 - Audacity Team)
Aufstieg des Hexenkönigs™ (HKLM-x32\...\{B931FB80-537A-4600-00AD-AC5DEDB6C25B}) (Version:  - )
Avira (HKLM-x32\...\{e7c7c227-b742-4878-9425-f09bbf9951db}) (Version: 1.1.27.25527 - Avira Operations & Co. KG)
Avira (x32 Version: 1.1.27.25527 - Avira Operations & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.7.468 - Avira)
Company of Heroes (New Steam Version) (HKLM-x32\...\Steam App 228200) (Version:  - Relic)
Craften Terminal 4.0.2 (HKLM-x32\...\{4e7c3936-7c06-4ef0-928b-c5d92f372578}_is1) (Version: 4.0.2 - Craften.de)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
Die Schlacht um Mittelerde™ II (HKLM-x32\...\{2A9F95AB-65A3-432c-8631-B8BC5BF7477A}) (Version:  - )
Energy Manager (HKLM-x32\...\InstallShield_{AC768037-7079-4658-AC24-2897650E0ABE}) (Version: 1.0.0.35 - Lenovo)
Energy Manager (x32 Version: 1.0.0.35 - Lenovo) Hidden
Euro Truck Simulator 2 (HKLM-x32\...\Steam App 227300) (Version:  - SCS Software)
Free YouTube to MP3 Converter version 3.12.50.1122 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.50.1122 - DVDVideoSoft Ltd.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 40.0.2214.91 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Greenshot 1.2.4.10 (HKLM\...\Greenshot_is1) (Version: 1.2.4.10 - Greenshot)
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3960 - Intel Corporation)
Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)
NVIDIA GeForce Experience 1.7 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.7 - NVIDIA Corporation)
NVIDIA Grafiktreiber 332.33 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 332.33 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.13.0927 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0927 - NVIDIA Corporation)
OF Dragon Rising (HKLM-x32\...\{1A4052AB-BA77-44F7-8EE7-9F9131BFD7A6}) (Version: 1.00.0000 - Codemasters)
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
REALTEK Bluetooth Driver (HKLM-x32\...\{9D3D8C60-A5EF-4123-B2B9-172095903AB}) (Version: 3.805.802.010814 - REALTEK Semiconductor Corp.)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.39052 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{9DAABC60-A5EF-41FF-B2B9-17329590CD5}) (Version: 1.00.0238 - REALTEK Semiconductor Corp.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
The Long Dark (HKLM-x32\...\Steam App 305620) (Version:  - Hinterland Studio Inc.)
Total War: ROME II - Emperor Edition (HKLM-x32\...\Steam App 214950) (Version:  - Creative Assembly)
Windows-Treiberpaket - Lenovo (ACPIVPC) System  (02/17/2013 9.52.0.776) (HKLM\...\35DD26BE48DAF4A9F35F969F3CB1E3E1435E661E) (Version: 02/17/2013 9.52.0.776 - Lenovo)
Windows-Treiberpaket - Lenovo (WUDFRd) LenovoVhid  (07/25/2013 10.30.0.288) (HKLM\...\6BCA401E9CBEED970D75F55FA5320F60D11984E9) (Version: 07/25/2013 10.30.0.288 - Lenovo)
WinRAR 5.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.20.0 - win.rar GmbH)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-2647887144-2414811117-607621015-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)

==================== Restore Points  =========================

12-01-2015 23:36:18 Geplanter Prüfpunkt
17-01-2015 00:20:46 Windows Update
18-01-2015 20:18:16 Installiert OF Dragon Rising
22-01-2015 19:46:45 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {04E9D34F-C4EB-49D6-A32C-784ED687FCAB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-12-03] (Google Inc.)
Task: {809ABC95-20B5-48AB-9239-4E17D7C45E7B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-12-03] (Google Inc.)
Task: {B47F13CC-D58C-41CE-8507-2907E1EEF20A} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-01-15] (Microsoft Corporation)
Task: {E02AAC5D-D172-4B50-A5C3-A46FADF70AEF} - System32\Tasks\GenericSettingsHandler\Windows-Credentials\RetrySyncTask_for_S-1-5-21-2647887144-2414811117-607621015-1001
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-12-03 15:02 - 2014-01-06 14:56 - 00079872 _____ () C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe
2014-12-03 14:51 - 2014-01-06 09:13 - 00117536 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-10-03 17:36 - 2014-10-03 17:36 - 00457616 _____ () C:\Windows\system32\igfxTray.exe
2015-01-25 12:16 - 2015-01-21 04:50 - 01117512 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.91\libglesv2.dll
2015-01-25 12:16 - 2015-01-21 04:50 - 00211272 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.91\libegl.dll
2015-01-25 12:16 - 2015-01-21 04:50 - 09171272 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.91\pdf.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Users\Manu\OneDrive:ms-properties

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2647887144-2414811117-607621015-1001\...\StartupApproved\Run: => "Akamai NetSession Interface"
HKU\S-1-5-21-2647887144-2414811117-607621015-1001\...\StartupApproved\Run: => "AmazonMP3DownloaderHelper"

========================= Accounts: ==========================

Administrator (S-1-5-21-2647887144-2414811117-607621015-500 - Administrator - Disabled)
Gast (S-1-5-21-2647887144-2414811117-607621015-501 - Limited - Disabled)
Manu (S-1-5-21-2647887144-2414811117-607621015-1001 - Administrator - Enabled) => C:\Users\Manu
UpdatusUser (S-1-5-21-2647887144-2414811117-607621015-1002 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (01/25/2015 00:04:43 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: OFDR.exe, Version: 1.0.0.0, Zeitstempel: 0x00000000
Name des fehlerhaften Moduls: ambxrt.dll, Version: 6.3.9600.17278, Zeitstempel: 0x53eeb4a3
Ausnahmecode: 0xc0000135
Fehleroffset: 0x00098f05
ID des fehlerhaften Prozesses: 0x17d0
Startzeit der fehlerhaften Anwendung: 0xOFDR.exe0
Pfad der fehlerhaften Anwendung: OFDR.exe1
Pfad des fehlerhaften Moduls: OFDR.exe2
Berichtskennung: OFDR.exe3
Vollständiger Name des fehlerhaften Pakets: OFDR.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: OFDR.exe5

Error: (01/23/2015 03:16:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: OFDR.exe, Version: 1.0.0.0, Zeitstempel: 0x00000000
Name des fehlerhaften Moduls: ambxrt.dll, Version: 6.3.9600.17278, Zeitstempel: 0x53eeb4a3
Ausnahmecode: 0xc0000135
Fehleroffset: 0x00098f05
ID des fehlerhaften Prozesses: 0x10b0
Startzeit der fehlerhaften Anwendung: 0xOFDR.exe0
Pfad der fehlerhaften Anwendung: OFDR.exe1
Pfad des fehlerhaften Moduls: OFDR.exe2
Berichtskennung: OFDR.exe3
Vollständiger Name des fehlerhaften Pakets: OFDR.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: OFDR.exe5

Error: (01/22/2015 10:18:15 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2486) (User: MEINZ)
Description: Die App „Deezer.Deezer_1.3.2.0_x64__q7m17pa7q8kj0+App“ wurde nicht innerhalb der vorgesehenen Zeit gestartet.

Error: (01/22/2015 10:17:59 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: MEINZ)
Description: Bei der Aktivierung der App „Deezer.Deezer_q7m17pa7q8kj0!App“ ist folgender Fehler aufgetreten: -2144927142. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (01/22/2015 10:16:53 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2486) (User: MEINZ)
Description: Die App „Deezer.Deezer_1.3.2.0_x64__q7m17pa7q8kj0+App“ wurde nicht innerhalb der vorgesehenen Zeit gestartet.

Error: (01/22/2015 10:14:03 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: MEINZ)
Description: Das Paket „Deezer.Deezer_1.3.2.0_x64__q7m17pa7q8kj0+App“ wurde beendet, da das Anhalten zu lange dauerte.

Error: (01/22/2015 10:11:58 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: MEINZ)
Description: Das Paket „Deezer.Deezer_1.3.2.0_x64__q7m17pa7q8kj0+App“ wurde beendet, da das Anhalten zu lange dauerte.

Error: (01/22/2015 10:06:38 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: MEINZ)
Description: Bei der Aktivierung der App „Deezer.Deezer_q7m17pa7q8kj0!App“ ist folgender Fehler aufgetreten: -2144927142. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (01/22/2015 10:06:31 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2486) (User: MEINZ)
Description: Die App „Deezer.Deezer_1.3.2.0_x64__q7m17pa7q8kj0+App“ wurde nicht innerhalb der vorgesehenen Zeit gestartet.

Error: (01/22/2015 10:06:15 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm Deezer.exe, Version 1.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: ab8

Startzeit: 01d03686f66ec6d5

Endzeit: 0

Anwendungspfad: C:\Program Files\WindowsApps\Deezer.Deezer_1.3.2.0_x64__q7m17pa7q8kj0\Deezer.exe

Berichts-ID: 7da47e14-a27a-11e4-825c-0071cc469d6c

Vollständiger Name des fehlerhaften Pakets: Deezer.Deezer_1.3.2.0_x64__q7m17pa7q8kj0

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: App


System errors:
=============
Error: (01/24/2015 08:32:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (01/24/2015 08:32:07 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.

Error: (01/22/2015 10:17:59 PM) (Source: DCOM) (EventID: 10010) (User: MEINZ)
Description: App

Error: (01/22/2015 10:13:56 PM) (Source: DCOM) (EventID: 10010) (User: MEINZ)
Description: {4AA0A5C4-1B9B-4F2E-99D7-99C6AEC83474}

Error: (01/22/2015 10:13:32 PM) (Source: DCOM) (EventID: 10016) (User: MEINZ)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}MeinZManuS-1-5-21-2647887144-2414811117-607621015-1001LocalHost (unter Verwendung von LRPC)Deezer.Deezer_1.3.2.0_x64__q7m17pa7q8kj0S-1-15-2-1603163045-3571281156-695395475-2439299277-3395427646-929816475-371680158

Error: (01/22/2015 10:06:38 PM) (Source: DCOM) (EventID: 10010) (User: MEINZ)
Description: App

Error: (01/22/2015 10:04:30 PM) (Source: DCOM) (EventID: 10016) (User: MEINZ)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}MeinZManuS-1-5-21-2647887144-2414811117-607621015-1001LocalHost (unter Verwendung von LRPC)Deezer.Deezer_1.3.2.0_x64__q7m17pa7q8kj0S-1-15-2-1603163045-3571281156-695395475-2439299277-3395427646-929816475-371680158

Error: (01/20/2015 05:55:26 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (01/20/2015 05:55:26 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.

Error: (01/19/2015 11:07:02 PM) (Source: DCOM) (EventID: 10010) (User: MEINZ)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}


Microsoft Office Sessions:
=========================
Error: (01/25/2015 00:04:43 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: OFDR.exe1.0.0.000000000ambxrt.dll6.3.9600.1727853eeb4a3c000013500098f0517d001d0388eb6e1d10dC:\Users\Manu\Desktop\Spiele\OFDR.exeambxrt.dllf6b2b9cf-a481-11e4-825d-0071cc469d6c

Error: (01/23/2015 03:16:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: OFDR.exe1.0.0.000000000ambxrt.dll6.3.9600.1727853eeb4a3c000013500098f0510b001d0371726b35b8fC:\Users\Manu\Desktop\Spiele\OFDR.exeambxrt.dll669a0a58-a30a-11e4-825d-0071cc469d6c

Error: (01/22/2015 10:18:15 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2486) (User: MEINZ)
Description: Deezer.Deezer_1.3.2.0_x64__q7m17pa7q8kj0+App

Error: (01/22/2015 10:17:59 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: MEINZ)
Description: Deezer.Deezer_q7m17pa7q8kj0!App-2144927142

Error: (01/22/2015 10:16:53 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2486) (User: MEINZ)
Description: Deezer.Deezer_1.3.2.0_x64__q7m17pa7q8kj0+App

Error: (01/22/2015 10:14:03 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: MEINZ)
Description: Deezer.Deezer_1.3.2.0_x64__q7m17pa7q8kj0+App

Error: (01/22/2015 10:11:58 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: MEINZ)
Description: Deezer.Deezer_1.3.2.0_x64__q7m17pa7q8kj0+App

Error: (01/22/2015 10:06:38 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: MEINZ)
Description: Deezer.Deezer_q7m17pa7q8kj0!App-2144927142

Error: (01/22/2015 10:06:31 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2486) (User: MEINZ)
Description: Deezer.Deezer_1.3.2.0_x64__q7m17pa7q8kj0+App

Error: (01/22/2015 10:06:15 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Deezer.exe1.0.0.0ab801d03686f66ec6d50C:\Program Files\WindowsApps\Deezer.Deezer_1.3.2.0_x64__q7m17pa7q8kj0\Deezer.exe7da47e14-a27a-11e4-825c-0071cc469d6cDeezer.Deezer_1.3.2.0_x64__q7m17pa7q8kj0App


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5-4210U CPU @ 1.70GHz
Percentage of memory in use: 51%
Total physical RAM: 3992.36 MB
Available physical RAM: 1944.28 MB
Total Pagefile: 5528.36 MB
Available Pagefile: 2949.49 MB
Total Virtual: 131072 MB
Available Virtual: 131071.8 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:931.17 GB) (Free:328.57 GB) NTFS
Drive d: (CDROM) (CDROM) (Total:4.37 GB) (Free:0 GB) UDF
Drive e: (LOTRBFME2) (CDROM) (Total:5.68 GB) (Free:0 GB) UDF

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: C6AF7CD4)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931.2 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

Sieht gut aus. Alle Passwörter ändern.

Und damit müsste es sich erledigt haben?

genau

Vielen lieben Dank

Gern Geschehen