|
Log-Analyse und Auswertung: Windows 8 ohne Adminrechte & ohne KontextprogrammeWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
25.04.2015, 20:56 | #1 |
| Windows 8 ohne Adminrechte & ohne Kontextprogramme Hallo ihr Lieben, ich habe hier eine Windows 8 Maschine, welche mich langsam aber sicher in die Verzweifelung treibt. Der/die Benutzer/in haben natürlich "nichts gemacht", so dass mir die Fehlersuche erschwert wird. Folgendes Problem: Windows 8 bootet problemlos, aber
Anbei habe ich ein HiJackThis-Log-File angehangen, ich hoffe, dass mir hier irgendjemand helfen kann. Ich hatte versucht Windows 8 "aufzufrischen" scheitere aber an den Adminrechten... ...wäre super, wenn es ggf. sogar schon eine Lösung gibt?! Beste Grüße ich |
25.04.2015, 22:29 | #2 |
/// the machine /// TB-Ausbilder | Windows 8 ohne Adminrechte & ohne Kontextprogramme Hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
25.04.2015, 23:12 | #3 |
| Windows 8 ohne Adminrechte & ohne Kontextprogramme Hallo Schrauber,
__________________anbei findest du die beiden geforderten Dateien. Besten Dank für deine Unterstützung ich |
26.04.2015, 18:10 | #4 |
/// the machine /// TB-Ausbilder | Windows 8 ohne Adminrechte & ohne Kontextprogramme Hi, Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen. Ich kann auf Arbeit keine Anhänge öffnen, danke. So funktioniert es: Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
26.04.2015, 18:59 | #5 |
| Windows 8 ohne Adminrechte & ohne Kontextprogramme Hallo Schrauber, besten Dank für die Info... ...hier nun der Inhalt FRST.txt: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-04-2015 Ran by Rosi (administrator) on PC on 25-04-2015 23:50:18 Running from F:\ Loaded Profiles: Rosi (Available profiles: Rosi & Tester) Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 (Default browser: FF) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) () C:\Program Files\Hewlett-Packard\SimplePass\cachesrvr.exe (Softex Inc.) C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (Hewlett-Packard Company) C:\Windows\System32\hpservice.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RTKAUDIOSERVICE64.EXE (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe (CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Symantec Corporation) C:\Program Files (x86)\Norton AntiVirus\Engine\21.7.0.11\nav.exe () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe (Symantec Corporation) C:\Program Files (x86)\Norton AntiVirus\Engine\21.7.0.11\nav.exe () C:\Program Files\Hewlett-Packard\SimplePass\opvapp.exe (Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Hewlett-Packard) C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBroker.exe (Hewlett-Packard) C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBrokerDsktop.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerSt.exe (CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe (CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Microsoft Corporation) C:\Windows\System32\WWAHost.exe (Microsoft Corporation) C:\Windows\System32\UserAccountBroker.exe (Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.17477_none_fa2b7d3b9b36c7b4\TiWorker.exe (CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7194840 2013-07-27] (Realtek Semiconductor) HKLM\...\Run: [SimplePass] => C:\Program Files\Hewlett-Packard\SimplePass\HPSmplPass.exe [2249104 2013-09-03] (Hewlett-Packard) HKLM\...\Run: [OPBHOBroker] => C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBroker.exe [151608 2013-08-23] (Hewlett-Packard) HKLM\...\Run: [OPBHOBrokerDesktop] => C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBrokerDsktop.exe [151608 2013-08-23] (Hewlett-Packard) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2771184 2013-07-26] (Synaptics Incorporated) HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-08-19] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [AccelerometerSysTrayApplet] => C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe [77088 2013-07-24] (Hewlett-Packard Company) HKLM-x32\...\Run: [YouCam Service] => C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [267224 2013-08-01] (CyberLink Corp.) HKLM-x32\...\Run: [HPMessageService] => C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe [1045304 2013-07-23] (Hewlett-Packard Development Company, L.P.) HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [34672 2008-06-12] (Adobe Systems Incorporated) HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X] HKU\S-1-5-21-1237749874-1723038781-576965108-1001\...\Run: [ViStart] => C:\Users\Rosi\AppData\Roaming\ViStart\ViStart.exe HKU\S-1-5-21-1237749874-1723038781-576965108-1001\...\MountPoints2: {77e3c7ea-166c-11e3-825a-806e6f6e6963} - "E:\setup.exe" HKU\S-1-5-21-1237749874-1723038781-576965108-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Bubbles.scr [788480 2014-10-29] (Microsoft Corporation) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk [2014-05-17] ShortcutTarget: Microsoft Office.lnk -> C:\Program Files (x86)\Microsoft Office XP\Office10\OSA.EXE (Microsoft Corporation) Startup: C:\Users\Rosi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk [2014-05-14] ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation) ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File BootExecute: autocheck autochk * sdnclean64.exe ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPNOT14/4 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPNOT14/4 HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT14/4 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT14/4 HKU\S-1-5-21-1237749874-1723038781-576965108-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPNOT14/4 HKU\S-1-5-21-1237749874-1723038781-576965108-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT14/4 SearchScopes: HKLM -> {96088B54-A627-45D4-AD07-2FB0771F6FBD} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} SearchScopes: HKLM -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-154345-12128-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms} SearchScopes: HKLM-x32 -> {96088B54-A627-45D4-AD07-2FB0771F6FBD} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} SearchScopes: HKLM-x32 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-154345-12128-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms} SearchScopes: HKU\S-1-5-21-1237749874-1723038781-576965108-1001 -> {96088B54-A627-45D4-AD07-2FB0771F6FBD} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} SearchScopes: HKU\S-1-5-21-1237749874-1723038781-576965108-1001 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-154345-12128-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms} BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-02-10] (Microsoft Corporation) BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-02-10] (Microsoft Corporation) BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28] (Hewlett-Packard) BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11] (Adobe Systems Incorporated) BHO-x32: Norton Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> C:\Program Files (x86)\Norton AntiVirus\Engine\21.7.0.11\IPS\IPSBHO.DLL [2015-03-05] (Symantec Corporation) BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28] (Hewlett-Packard) Handler-x32: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Program Files (x86)\Common Files\Microsoft Shared\Web Folders\PKMCDO.DLL [2001-01-22] (Microsoft Corporation) Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\Rosi\AppData\Roaming\Mozilla\Firefox\Profiles\gpejowu3.default FF SelectedSearchEngine: Ask Web Search FF Homepage: about:home FF Keyword.URL: hxxp://search.tb.ask.com/search/GGmain.jhtml?st=kwd&ptb=324A3666-A2BE-4C4B-9067-DCB44D22E6CA&n=781b1656&ind=2015041110&p2=^UX^xdm158^LADEDE^de&si=245051&searchfor= FF NetworkProxy: "type", 0 FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll [2015-02-07] () FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll [2015-02-07] () FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\windows\SysWOW64\Adobe\Director\np32dsw_1203133.dll [2013-06-26] (Adobe Systems, Inc.) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-08-09] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-08-09] (Intel Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2014-05-13] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-05] (Microsoft Corporation) FF SearchPlugin: C:\Users\Rosi\AppData\Roaming\Mozilla\Firefox\Profiles\gpejowu3.default\searchplugins\ask-web-search.xml [2015-04-11] FF Extension: MapsGalaxy - C:\Users\Rosi\AppData\Roaming\Mozilla\Firefox\Profiles\gpejowu3.default\Extensions\39ffxtbr@MapsGalaxy_39.com [2015-04-11] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation) R2 Cachedrv server; C:\Program Files\Hewlett-Packard\SimplePass\cachesrvr.exe [109568 2013-08-23] () [File not signed] R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2714800 2015-02-10] (Microsoft Corporation) R2 CyberLink PowerDVD 12 Media Server Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe [77576 2013-08-12] (CyberLink) R2 CyberLink PowerDVD 12 Media Server Service; C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe [298760 2013-08-12] (CyberLink) R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2013-08-29] (Hewlett-Packard Company) [File not signed] R2 HPWMISVC; C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe [1039160 2013-07-23] (Hewlett-Packard Development Company, L.P.) R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-22] (Intel Corporation) R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [File not signed] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-08-09] (Intel Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-08-09] (Intel Corporation) R2 NAV; C:\Program Files (x86)\Norton AntiVirus\Engine\21.7.0.11\NAV.exe [262928 2015-03-07] (Symantec Corporation) R2 omniserv; C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe [87552 2013-08-23] (Softex Inc.) [File not signed] R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [254512 2012-04-25] () R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [246488 2013-06-19] (Realtek Semiconductor) R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.) R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.) R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.) S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [76800 2013-08-26] (Microsoft Corporation) R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation) R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R1 BHDrvx64; C:\Program Files (x86)\Norton AntiVirus\NortonData\21.0.1.3\Definitions\BASHDefs\20150321.001\BHDrvx64.sys [1622744 2015-02-03] (Symantec Corporation) R1 ccSet_NAV; C:\Windows\system32\drivers\NAVx64\1507000.00B\ccSetx64.sys [162392 2014-02-21] (Symantec Corporation) R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [91712 2013-03-05] (CyberLink) R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [487216 2014-12-13] (Symantec Corporation) R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [142640 2014-12-13] (Symantec Corporation) R1 IDSVia64; C:\Program Files (x86)\Norton AntiVirus\NortonData\21.0.1.3\Definitions\IPSDefs\20150327.001\IDSvia64.sys [671448 2015-03-29] (Symantec Corporation) R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-08-09] (Intel Corporation) S3 NAVENG; C:\Program Files (x86)\Norton AntiVirus\NortonData\21.0.1.3\Definitions\VirusDefs\20150328.002\ENG64.SYS [129752 2015-01-23] (Symantec Corporation) S3 NAVEX15; C:\Program Files (x86)\Norton AntiVirus\NortonData\21.0.1.3\Definitions\VirusDefs\20150328.002\EX64.SYS [2137304 2015-01-23] (Symantec Corporation) S3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [418008 2013-06-24] (Realsil Semiconductor Corporation) R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [2944216 2013-08-21] (Realtek Semiconductor Corporation ) S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [30448 2013-07-26] (Synaptics Incorporated) R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [34544 2013-07-26] (Synaptics Incorporated) S3 SRTSP; C:\Windows\System32\Drivers\NAVx64\1507000.00B\SRTSP64.SYS [876248 2014-08-26] (Symantec Corporation) R1 SRTSPX; C:\Windows\system32\drivers\NAVx64\1507000.00B\SRTSPX64.SYS [37592 2014-08-26] (Symantec Corporation) R0 SymDS; C:\Windows\System32\drivers\NAVx64\1507000.00B\SYMDS64.SYS [493656 2013-08-01] (Symantec Corporation) R0 SymEFA; C:\Windows\System32\drivers\NAVx64\1507000.00B\SYMEFA64.SYS [1148120 2014-03-04] (Symantec Corporation) S0 SymELAM; C:\Windows\System32\drivers\NAVx64\1507000.00B\SymELAM.sys [23568 2013-08-01] (Symantec Corporation) R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2014-05-29] (Symantec Corporation) R1 SymIRON; C:\Windows\system32\drivers\NAVx64\1507000.00B\Ironx64.SYS [266968 2014-08-06] (Symantec Corporation) R1 SymNetS; C:\Windows\System32\Drivers\NAVx64\1507000.00B\SYMNETS.SYS [593112 2014-02-18] (Symantec Corporation) R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation) R3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20800 2013-07-22] (Hewlett-Packard Development Company, L.P.) ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-04-25 23:50 - 2015-04-25 23:50 - 00000000 ____D () C:\FRST 2015-04-25 20:51 - 2015-04-25 20:52 - 00000000 ____D () C:\medium 2015-04-18 06:51 - 2015-04-18 06:51 - 00000000 _____ () C:\Recovery.txt 2015-04-17 23:12 - 2015-04-17 23:17 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1237749874-1723038781-576965108-1002 2015-04-17 23:12 - 2015-04-17 23:12 - 00000000 ____D () C:\Users\Tester\AppData\Roaming\Mozilla 2015-04-17 23:12 - 2015-04-17 23:12 - 00000000 ____D () C:\Users\Tester\AppData\Local\Mozilla 2015-04-17 23:08 - 2015-04-17 23:08 - 00000000 ____D () C:\Users\Tester\Documents\Youcam 2015-04-17 23:08 - 2015-04-17 23:08 - 00000000 ____D () C:\Users\Tester\AppData\Local\CyberLink 2015-04-17 23:07 - 2015-04-17 23:07 - 00000000 ____D () C:\Users\Tester\AppData\Roaming\Synaptics 2015-04-17 23:07 - 2015-04-17 23:07 - 00000000 ____D () C:\Users\Tester\AppData\Roaming\ATI 2015-04-17 23:07 - 2015-04-17 23:07 - 00000000 ____D () C:\Users\Tester\AppData\Local\Power2Go8 2015-04-17 23:07 - 2015-04-17 23:07 - 00000000 ____D () C:\Users\Tester\AppData\Local\Hewlett-Packard 2015-04-17 23:07 - 2015-04-17 23:07 - 00000000 ____D () C:\Users\Tester\AppData\Local\ATI 2015-04-17 23:06 - 2015-04-17 23:09 - 00000000 ____D () C:\Users\Tester\AppData\Local\Packages 2015-04-17 23:06 - 2015-04-17 23:06 - 00001461 _____ () C:\Users\Tester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2015-04-17 23:06 - 2015-04-17 23:06 - 00000020 ___SH () C:\Users\Tester\ntuser.ini 2015-04-17 23:06 - 2015-04-17 23:06 - 00000000 _SHDL () C:\Users\Tester\Vorlagen 2015-04-17 23:06 - 2015-04-17 23:06 - 00000000 _SHDL () C:\Users\Tester\Startmenü 2015-04-17 23:06 - 2015-04-17 23:06 - 00000000 _SHDL () C:\Users\Tester\Netzwerkumgebung 2015-04-17 23:06 - 2015-04-17 23:06 - 00000000 _SHDL () C:\Users\Tester\Lokale Einstellungen 2015-04-17 23:06 - 2015-04-17 23:06 - 00000000 _SHDL () C:\Users\Tester\Eigene Dateien 2015-04-17 23:06 - 2015-04-17 23:06 - 00000000 _SHDL () C:\Users\Tester\Druckumgebung 2015-04-17 23:06 - 2015-04-17 23:06 - 00000000 _SHDL () C:\Users\Tester\Documents\Eigene Musik 2015-04-17 23:06 - 2015-04-17 23:06 - 00000000 _SHDL () C:\Users\Tester\Documents\Eigene Bilder 2015-04-17 23:06 - 2015-04-17 23:06 - 00000000 _SHDL () C:\Users\Tester\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2015-04-17 23:06 - 2015-04-17 23:06 - 00000000 _SHDL () C:\Users\Tester\AppData\Local\Verlauf 2015-04-17 23:06 - 2015-04-17 23:06 - 00000000 _SHDL () C:\Users\Tester\AppData\Local\Anwendungsdaten 2015-04-17 23:06 - 2015-04-17 23:06 - 00000000 _SHDL () C:\Users\Tester\Anwendungsdaten 2015-04-17 23:06 - 2015-04-17 23:06 - 00000000 ____D () C:\Users\Tester\AppData\Roaming\Adobe 2015-04-17 23:06 - 2015-04-17 23:06 - 00000000 ____D () C:\Users\Tester\AppData\Local\VirtualStore 2015-04-17 23:06 - 2015-04-17 23:06 - 00000000 ____D () C:\Users\Tester 2015-04-17 23:06 - 2015-03-23 10:47 - 00000000 ___RD () C:\Users\Tester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2015-04-17 23:06 - 2015-03-23 10:47 - 00000000 ___RD () C:\Users\Tester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-04-17 23:06 - 2015-03-23 10:47 - 00000000 ___RD () C:\Users\Tester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2015-04-17 23:06 - 2014-05-11 17:19 - 00002139 _____ () C:\Users\Tester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SkyDrive.lnk 2015-04-17 23:06 - 2014-02-22 06:37 - 00000369 _____ () C:\Users\Tester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk 2015-04-17 23:06 - 2014-02-22 06:37 - 00000369 _____ () C:\Users\Tester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk 2015-04-17 23:06 - 2013-09-05 20:30 - 00000000 ___HD () C:\Users\Tester\Documents\hp.system.package.metadata 2015-04-17 23:06 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\Tester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2015-04-17 21:08 - 2015-04-17 21:08 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking 2015-04-17 21:06 - 2015-04-25 20:44 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy 2015-04-17 21:06 - 2015-04-17 21:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2 2015-04-17 21:06 - 2015-04-17 21:07 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2 2015-04-17 21:06 - 2015-04-17 21:06 - 00001414 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk 2015-04-17 21:06 - 2015-04-17 21:06 - 00001402 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk 2015-04-17 21:06 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe 2015-04-16 20:18 - 2015-04-14 01:24 - 00792056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-04-16 20:18 - 2015-04-14 01:24 - 00178168 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-04-16 20:16 - 2015-04-16 20:16 - 00000000 ____D () C:\Windows\system32\appraiser 2015-04-16 19:59 - 2015-03-14 10:54 - 00133256 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2015-04-16 19:59 - 2015-03-14 03:56 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2015-04-16 19:59 - 2015-03-14 03:56 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2015-04-16 19:59 - 2015-03-14 03:51 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll 2015-04-16 19:59 - 2015-03-14 03:37 - 00267264 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll 2015-04-16 19:59 - 2015-03-14 03:14 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2015-04-16 19:59 - 2015-03-14 02:22 - 03678720 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2015-04-16 19:59 - 2015-03-14 02:12 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2015-04-16 19:59 - 2015-03-14 02:12 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2015-04-16 19:59 - 2015-03-14 02:09 - 00200192 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll 2015-04-16 19:59 - 2015-03-14 02:08 - 00408064 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll 2015-04-16 19:59 - 2015-03-14 02:08 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2015-04-16 19:59 - 2015-03-14 02:06 - 02373632 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2015-04-16 19:59 - 2015-03-14 02:06 - 00891392 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2015-04-16 19:59 - 2015-03-14 02:02 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2015-04-16 19:59 - 2015-03-14 02:02 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2015-04-16 19:59 - 2015-03-14 01:59 - 00721920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2015-04-16 19:59 - 2015-03-14 01:59 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2015-04-16 19:58 - 2015-03-23 23:59 - 07476032 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2015-04-16 19:58 - 2015-03-23 23:59 - 01733952 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2015-04-16 19:58 - 2015-03-23 23:59 - 00360480 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll 2015-04-16 19:58 - 2015-03-23 23:58 - 01498872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2015-04-16 19:58 - 2015-03-23 23:45 - 00257216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll 2015-04-16 19:58 - 2015-03-20 06:12 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-system-events.dll 2015-04-16 19:58 - 2015-03-20 06:10 - 00285184 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2015-04-16 19:58 - 2015-03-20 06:10 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2015-04-16 19:58 - 2015-03-20 05:17 - 00411648 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe 2015-04-16 19:58 - 2015-03-20 04:41 - 00369152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe 2015-04-16 19:58 - 2015-03-20 04:40 - 00950784 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2015-04-16 19:58 - 2015-03-20 04:16 - 00749568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll 2015-04-16 19:57 - 2015-03-23 00:45 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2015-04-16 19:57 - 2015-03-23 00:09 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2015-04-16 19:57 - 2015-03-23 00:09 - 00957440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2015-04-16 19:57 - 2015-03-23 00:09 - 00769024 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2015-04-16 19:57 - 2015-03-23 00:09 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2015-04-16 19:57 - 2015-03-23 00:09 - 00419328 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2015-04-16 19:57 - 2015-03-23 00:09 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll 2015-04-16 19:57 - 2015-03-14 10:20 - 01385256 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll 2015-04-16 19:57 - 2015-03-14 10:13 - 01124352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll 2015-04-16 19:57 - 2015-03-13 06:32 - 24980480 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-04-16 19:57 - 2015-03-13 06:08 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-04-16 19:57 - 2015-03-13 06:07 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-04-16 19:57 - 2015-03-13 05:53 - 00816128 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2015-04-16 19:57 - 2015-03-13 05:50 - 06025216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-04-16 19:57 - 2015-03-13 05:42 - 19695616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2015-04-16 19:57 - 2015-03-13 05:28 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2015-04-16 19:57 - 2015-03-13 05:26 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-04-16 19:57 - 2015-03-13 05:22 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2015-04-16 19:57 - 2015-03-13 05:17 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll 2015-04-16 19:57 - 2015-03-13 05:16 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2015-04-16 19:57 - 2015-03-13 05:08 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-04-16 19:57 - 2015-03-13 05:07 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-04-16 19:57 - 2015-03-13 05:00 - 14397440 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-04-16 19:57 - 2015-03-13 04:58 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll 2015-04-16 19:57 - 2015-03-13 04:50 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll 2015-04-16 19:57 - 2015-03-13 04:49 - 04305408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2015-04-16 19:57 - 2015-03-13 04:45 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-04-16 19:57 - 2015-03-13 04:44 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2015-04-16 19:57 - 2015-03-13 04:37 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll 2015-04-16 19:57 - 2015-03-13 04:34 - 12825600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2015-04-16 19:57 - 2015-03-13 04:33 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-04-16 19:57 - 2015-03-13 04:22 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-04-16 19:57 - 2015-03-13 04:20 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2015-04-16 19:57 - 2015-03-13 04:16 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2015-04-16 19:57 - 2015-03-13 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2015-04-16 19:57 - 2015-03-04 12:25 - 00377152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys 2015-04-16 19:57 - 2015-03-04 05:04 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll 2015-04-16 19:57 - 2015-03-04 04:19 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll 2015-04-16 19:57 - 2015-02-24 10:32 - 00991552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys 2015-04-16 19:57 - 2015-02-21 01:49 - 00780800 _____ (Microsoft Corporation) C:\Windows\system32\lsm.dll 2015-04-16 19:57 - 2014-12-03 01:09 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2015-04-15 21:41 - 2015-04-16 19:38 - 00000000 ____D () C:\Users\Rosi\AppData\Roaming\ViStart 2015-04-12 11:01 - 2015-04-17 22:36 - 00001170 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2015-04-11 13:37 - 2015-04-17 22:36 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2015-04-11 11:01 - 2015-04-11 11:02 - 00000000 ___SD () C:\Windows\system32\GWX 2015-04-11 11:01 - 2015-04-11 11:01 - 00000000 ___SD () C:\Windows\SysWOW64\GWX 2015-04-11 10:47 - 2015-04-25 21:45 - 00000000 ____D () C:\Users\Rosi\AppData\Local\CrashDumps 2015-04-04 17:30 - 2015-04-04 17:30 - 00012262 _____ () C:\Users\Rosi\Downloads\Re_Anfrage_via_Webseite.eml ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-04-25 23:49 - 2014-05-08 19:15 - 02034093 _____ () C:\Windows\WindowsUpdate.log 2015-04-25 23:48 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru 2015-04-25 21:12 - 2014-08-12 09:00 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-04-25 20:51 - 2013-09-06 06:08 - 00801992 _____ () C:\Windows\system32\perfh007.dat 2015-04-25 20:51 - 2013-09-06 06:08 - 00174994 _____ () C:\Windows\system32\perfc007.dat 2015-04-25 20:51 - 2013-08-26 08:09 - 01924576 _____ () C:\Windows\system32\PerfStringBackup.INI 2015-04-25 20:45 - 2014-05-08 19:17 - 00000000 ____D () C:\Users\Rosi\Documents\Youcam 2015-04-25 20:43 - 2014-05-13 08:43 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2015-04-25 20:43 - 2013-08-22 16:46 - 00042730 _____ () C:\Windows\setupact.log 2015-04-25 20:43 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-04-25 20:43 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI 2015-04-17 23:26 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppCompat 2015-04-17 23:16 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness 2015-04-17 22:55 - 2014-05-08 19:21 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1237749874-1723038781-576965108-1001 2015-04-17 22:36 - 2014-05-13 08:43 - 00001182 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2015-04-17 20:57 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM 2015-04-16 20:16 - 2015-03-23 10:46 - 00000000 ___SD () C:\Windows\system32\CompatTel 2015-04-16 20:16 - 2013-08-22 17:20 - 00000000 ____D () C:\Windows\CbsTemp 2015-04-16 19:20 - 2014-06-12 13:42 - 00000000 ____D () C:\Windows\system32\MRT 2015-04-16 19:17 - 2014-06-12 13:42 - 128913832 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2015-04-12 10:34 - 2013-08-26 08:01 - 00025666 _____ () C:\Windows\PFRO.log 2015-04-12 10:34 - 2013-08-22 17:36 - 00000000 ___HD () C:\Windows\ELAMBKUP 2015-03-30 14:16 - 2014-05-29 09:14 - 00003218 _____ () C:\Windows\System32\Tasks\Norton WSC Integration 2015-03-30 14:16 - 2014-05-29 09:14 - 00002428 _____ () C:\Users\Public\Desktop\Norton AntiVirus.lnk 2015-03-30 14:16 - 2014-05-29 09:13 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton AntiVirus 2015-03-30 14:16 - 2014-05-29 09:13 - 00000000 ____D () C:\Windows\system32\Drivers\NAVx64 2015-03-29 14:48 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\rescache ==================== Files in the root of some directories ======= 2014-06-04 12:43 - 2014-06-04 12:43 - 0000017 _____ () C:\Users\Rosi\AppData\Local\resmon.resmoncfg ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-04-19 09:30 ==================== End Of Log ============================ --- --- --- Inhalt Addition.txt: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 24-04-2015 Ran by Rosi at 2015-04-25 23:51:00 Running from F:\ Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-1237749874-1723038781-576965108-500 - Administrator - Disabled) Gast (S-1-5-21-1237749874-1723038781-576965108-501 - Limited - Disabled) Rosi (S-1-5-21-1237749874-1723038781-576965108-1001 - Administrator - Enabled) => C:\Users\Rosi Tester (S-1-5-21-1237749874-1723038781-576965108-1002 - Limited - Enabled) => C:\Users\Tester ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Norton AntiVirus Online (Disabled - Out of date) {53C7D717-52E2-B95E-FA61-6F32ECC805DB} AV: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0} AS: Norton AntiVirus Online (Disabled - Out of date) {E8A636F3-74D8-B6D0-C0D1-5440974F4F66} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) 7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov) Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated) Adobe Reader 9 - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-A90000000001}) (Version: 9.0.0 - Adobe Systems Incorporated) Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.3.133 - Adobe Systems, Inc.) AMD Catalyst Install Manager (HKLM\...\{5A3BF213-01BC-E5A1-1D1B-EDE3167852AB}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.) AutoUpdate (HKLM-x32\...\{18D10072035C4515918F7E37EAFAACFC}) (Version: 1.1 - ) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.4.6515 - CyberLink Corp.) CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}) (Version: 10.0.4.2928 - CyberLink Corp.) Cyberlink PhotoDirector (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.2.4128 - CyberLink Corp.) CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.4.3202 - CyberLink Corp.) CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.4.3122 - CyberLink Corp.) CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.1.3212 - CyberLink Corp.) CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 5.0.1.3201 - CyberLink Corp.) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden DivX Codec (HKLM-x32\...\{7B63B2922B174135AFC0E1377DD81EC2}) (Version: 6.8.0 - DivX, Inc.) Energy Star (HKLM-x32\...\{FC0ADA4D-8FA5-4452-8AFF-F0A0BAC97EF7}) (Version: 1.0.9 - Hewlett-Packard Company) Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Hewlett-Packard ACLM.NET v1.2.2.3 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden HP 3D DriveGuard (HKLM-x32\...\{07F6DC37-0857-4B68-A675-4E35989E85E3}) (Version: 6.0.15.1 - Hewlett-Packard Company) HP Connected Music (Meridian - installer) (HKLM-x32\...\StartHPConnectedMusic) (Version: 1.0 - Meridian Audio Ltd) HP CoolSense (HKLM-x32\...\{59F8C5AA-91BD-423D-BF05-09A80F39898F}) (Version: 2.10.62 - Hewlett-Packard Company) HP Documentation (HKLM-x32\...\{F5120027-B9BF-4A48-86E9-63F7F79A5263}) (Version: 1.1.0.0 - Hewlett-Packard) HP Registration Service (HKLM\...\{D1E8F2D7-7794-4245-B286-87ED86C1893C}) (Version: 1.2.7045.4591 - Hewlett-Packard) HP SimplePass (HKLM-x32\...\InstallShield_{314FAD12-F785-4471-BCE8-AB506642B9A1}) (Version: 8.00.49 - Hewlett-Packard) HP Support Assistant (HKLM-x32\...\{3AF15EEA-8EDF-4393-BB6C-CF8A9986486A}) (Version: 7.3.35.20 - Hewlett-Packard Company) HP System Event Utility (HKLM-x32\...\{23EF407B-E7D0-4CB6-8916-43E5B9EEFDED}) (Version: 1.0.9 - Hewlett-Packard Company) HP Utility Center (HKLM\...\{AED1C141-3AFC-47FE-AE90-C820AA60B103}) (Version: 2.2.5 - Hewlett-Packard Company) HP Wireless Button Driver (HKLM-x32\...\{30B2D1D8-0A07-4B71-9553-0710C5D31E35}) (Version: 1.1.2.1 - Hewlett-Packard Company) Inst5675 (Version: 8.00.49 - Softex Inc.) Hidden Inst5676 (Version: 8.00.49 - Softex Inc.) Hidden Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.13.1706 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3277 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.1.1000 - Intel Corporation) IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: - ) Microsoft Office Home and Student 2013 - de-de (HKLM\...\HomeStudentRetail - de-de) (Version: 15.0.4701.1002 - Microsoft Corporation) Microsoft Office XP Professional mit FrontPage (HKLM-x32\...\{90280407-6000-11D3-8CFE-0050048383C9}) (Version: 10.0.2701.0 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-1237749874-1723038781-576965108-1001\...\OneDriveSetup.exe) (Version: 17.3.4726.0226 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation) Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Mozilla Firefox 37.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.1 (x86 de)) (Version: 37.0.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 37.0.1 - Mozilla) Norton AntiVirus (HKLM-x32\...\NAV) (Version: 21.7.0.11 - Symantec Corporation) OEM Application Profile (HKLM-x32\...\{70D5F822-F4C4-33D9-7EEC-2A4AF4EA7BDC}) (Version: 1.00.0000 - Ihr Firmenname) Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4701.1002 - Microsoft Corporation) Hidden Office 15 Click-to-Run Licensing Component (Version: 15.0.4701.1002 - Microsoft Corporation) Hidden Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4701.1002 - Microsoft Corporation) Hidden PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 1.1.9200.20 - Realtek Semiconductor Corp.) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.20.815.2013 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7010 - Realtek Semiconductor Corp.) REALTEK Wireless LAN Driver (HKLM-x32\...\{A5107464-AA9B-4177-8129-5FF2F42DD322}) (Version: 1.00.12.0906 - REALTEK Semiconductor Corp.) Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.) swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 17.0.6.2 - Synaptics Incorporated) VLC media player 1.1.11 (HKLM-x32\...\VLC media player) (Version: 1.1.11 - VideoLAN) Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation) WinRAR (HKLM-x32\...\WinRAR archiver) (Version: - ) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-1237749874-1723038781-576965108-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Rosi\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncApi64.dll (Microsoft Corporation) ==================== Restore Points ========================= 23-03-2015 09:42:03 Windows Update 11-04-2015 10:58:56 Windows Update 16-04-2015 19:14:50 Windows Update ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {099AED79-EFB4-4C98-AB61-033DD8B3A322} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-24] (Microsoft Corporation) Task: {1671D24B-31DB-4C45-994A-70A599136FA2} - System32\Tasks\{57620842-397B-48C6-94C5-39CFD4DDE0F4} => pcalua.exe -a E:\_SETIMG\EPSSWT.EXE -d E:\ -c /NODISP:"ALL" /NOWIZ:"..\EPSETUP.EXE" /ST:"3500,WIN98,WINME" Task: {220D35C9-6655-4678-A7CD-66D657C2DDAC} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation) Task: {3555D610-8066-485C-ACFB-CA5946D662D4} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton AntiVirus\Engine\21.7.0.11\WSCStub.exe [2015-03-07] (Symantec Corporation) Task: {37090FD8-4657-44B7-9867-DAAC38D04117} - System32\Tasks\Hewlett-Packard\HP CoolSense\HP CoolSense Start at Logon => C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe [2013-06-07] (Hewlett-Packard Development Company, L.P.) Task: {3BA4157C-4F31-4DCB-9790-14F9BCF0F511} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-08-29] (Hewlett-Packard Company) Task: {477CE1DC-1307-48F6-AEE7-166A113E6AB9} - System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-1237749874-1723038781-576965108-1001 => %localappdata%\Microsoft\OneDrive\OneDrive.exe Task: {490F1D27-8D20-45AE-9B77-178093E84152} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-02-10] (Microsoft Corporation) Task: {61EE5075-DE41-4358-8CA8-6AF44AA85DDC} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2013-08-09] (Hewlett-Packard) Task: {6F4AAA9E-7B17-4AC1-8612-1C3029E4E55B} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-08-29] (Hewlett-Packard Company) Task: {816C6D6B-54CD-4B51-842A-F51B2B471715} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-02-10] (Microsoft Corporation) Task: {9E352251-64F9-4FB6-BBDB-D1B530C118F5} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-04-16] (Microsoft Corporation) Task: {A60D26FF-46EF-4A18-AA70-9C42B9F9897D} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2012-11-29] (Hewlett-Packard Company) Task: {AC5432BB-1A48-4669-87C0-AFF2FFCBCEE4} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2014-06-24] (Safer-Networking Ltd.) Task: {B1C5E5F1-C388-4CF9-852F-C6967F0BBF26} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.) Task: {B817A994-2EBE-4F26-A89B-A7483531215A} - System32\Tasks\CLMLSvc_P2G8 => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [2013-08-05] (CyberLink) Task: {CE73DEA6-5DF4-4977-A621-F333D7410733} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation) Task: {D545AC2E-658E-4F86-8D6F-DB77A9A3F49C} - System32\Tasks\CLVDLauncher => C:\Program Files (x86)\CyberLink\Power2Go8\CLVDLauncher.exe [2013-03-12] (CyberLink Corp.) Task: {D6B611AE-CD04-4306-8B63-1D9CBC1D1303} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2014-06-24] (Safer-Networking Ltd.) Task: {F1BBD22C-C4BC-4C11-BE89-26B46A605A0D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-07] (Adobe Systems Incorporated) Task: {FA12AECC-4C7D-438C-A1A3-2BB1F954119F} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Loaded Modules (whitelisted) ============== 2013-08-23 01:08 - 2013-08-23 01:08 - 00109568 _____ () C:\Program Files\Hewlett-Packard\SimplePass\cachesrvr.exe 2013-08-23 01:13 - 2013-08-23 01:13 - 00627200 _____ () C:\Program Files\Hewlett-Packard\SimplePass\cachedrv.dll 2013-08-23 01:09 - 2013-08-23 01:09 - 02508800 _____ () C:\Program Files\Hewlett-Packard\SimplePass\autheng.dll 2013-08-23 01:07 - 2013-08-23 01:07 - 00035328 _____ () C:\Program Files\Hewlett-Packard\SimplePass\ssplogon.dll 2013-08-23 01:07 - 2013-08-23 01:07 - 00055296 _____ () C:\Program Files\Hewlett-Packard\SimplePass\RandomPass.dll 2013-08-23 01:07 - 2013-08-23 01:07 - 00021504 _____ () C:\Program Files\Hewlett-Packard\SimplePass\cryptodll.dll 2013-08-23 01:20 - 2013-08-23 01:20 - 00304016 _____ () C:\Program Files\Hewlett-Packard\SimplePass\mstrpwd.dll 2013-08-23 01:20 - 2013-08-23 01:20 - 01283472 _____ () C:\Program Files\Hewlett-Packard\SimplePass\GraphicalPwd.dll 2014-05-13 08:08 - 2014-05-20 09:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll 2013-09-05 21:29 - 2012-04-25 04:43 - 00254512 ____N () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe 2013-08-23 01:12 - 2013-08-23 01:12 - 00064000 _____ () C:\Program Files\Hewlett-Packard\SimplePass\opvapp.exe 2015-04-17 21:06 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl 2015-04-17 21:06 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl 2015-04-17 21:06 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl 2015-04-17 21:06 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll 2015-04-17 21:06 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll 2014-11-24 17:16 - 2014-11-24 17:16 - 00316576 _____ () C:\Program Files\Microsoft Office 15\root\office15\AppVIsvStream32.dll 2013-09-05 21:22 - 2013-08-05 09:49 - 00627672 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll 2013-08-05 15:48 - 2013-08-05 15:48 - 00016856 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll 2013-09-05 21:03 - 2013-08-09 14:25 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) AlternateDataStreams: C:\Users\Rosi\Downloads\Re_Anfrage_via_Webseite.eml:OECustomProperty ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""="" ==================== EXE Association (whitelisted) =============== (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, the associated entry will be removed from the registry.) ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-1237749874-1723038781-576965108-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Rosi\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper DNS Servers: 192.168.1.1 ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) HKU\S-1-5-21-1237749874-1723038781-576965108-1001\...\StartupApproved\Run: => "ViStart" ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (04/25/2015 09:45:26 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: explorer.exe, Version: 6.3.9600.17667, Zeitstempel: 0x54c6f7c2 Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.3.9600.17415, Zeitstempel: 0x54505737 Ausnahmecode: 0xc06d007e Fehleroffset: 0x0000000000008b9c ID des fehlerhaften Prozesses: 0x12b0 Startzeit der fehlerhaften Anwendung: 0xexplorer.exe0 Pfad der fehlerhaften Anwendung: explorer.exe1 Pfad des fehlerhaften Moduls: explorer.exe2 Berichtskennung: explorer.exe3 Vollständiger Name des fehlerhaften Pakets: explorer.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: explorer.exe5 Error: (04/25/2015 09:21:07 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: explorer.exe, Version: 6.3.9600.17667, Zeitstempel: 0x54c6f7c2 Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.3.9600.17415, Zeitstempel: 0x54505737 Ausnahmecode: 0xc06d007e Fehleroffset: 0x0000000000008b9c ID des fehlerhaften Prozesses: 0x324 Startzeit der fehlerhaften Anwendung: 0xexplorer.exe0 Pfad der fehlerhaften Anwendung: explorer.exe1 Pfad des fehlerhaften Moduls: explorer.exe2 Berichtskennung: explorer.exe3 Vollständiger Name des fehlerhaften Pakets: explorer.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: explorer.exe5 Error: (04/25/2015 09:08:44 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm backgroundTaskHost.exe, Version 6.3.9600.17415 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 92c Startzeit: 01d07f8a3c4c5a73 Endzeit: 4294967295 Anwendungspfad: C:\Windows\system32\backgroundTaskHost.exe Berichts-ID: 2fc15fc6-eb7e-11e4-8283-a01d48e36bfc Vollständiger Name des fehlerhaften Pakets: Microsoft.BingNews_3.0.1.174_x64__8wekyb3d8bbwe Anwendungs-ID, die relativ zum fehlerhaften Paket ist: AppexNews Error: (04/25/2015 08:56:57 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: explorer.exe, Version: 6.3.9600.17667, Zeitstempel: 0x54c6f7c2 Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.3.9600.17415, Zeitstempel: 0x54505737 Ausnahmecode: 0xc06d007e Fehleroffset: 0x0000000000008b9c ID des fehlerhaften Prozesses: 0x1354 Startzeit der fehlerhaften Anwendung: 0xexplorer.exe0 Pfad der fehlerhaften Anwendung: explorer.exe1 Pfad des fehlerhaften Moduls: explorer.exe2 Berichtskennung: explorer.exe3 Vollständiger Name des fehlerhaften Pakets: explorer.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: explorer.exe5 Error: (04/25/2015 08:56:26 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: explorer.exe, Version: 6.3.9600.17667, Zeitstempel: 0x54c6f7c2 Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.3.9600.17415, Zeitstempel: 0x54505737 Ausnahmecode: 0xc06d007e Fehleroffset: 0x0000000000008b9c ID des fehlerhaften Prozesses: 0x13e4 Startzeit der fehlerhaften Anwendung: 0xexplorer.exe0 Pfad der fehlerhaften Anwendung: explorer.exe1 Pfad des fehlerhaften Moduls: explorer.exe2 Berichtskennung: explorer.exe3 Vollständiger Name des fehlerhaften Pakets: explorer.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: explorer.exe5 Error: (04/25/2015 08:51:12 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: explorer.exe, Version: 6.3.9600.17667, Zeitstempel: 0x54c6f7c2 Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.3.9600.17415, Zeitstempel: 0x54505737 Ausnahmecode: 0xc06d007e Fehleroffset: 0x0000000000008b9c ID des fehlerhaften Prozesses: 0xbdc Startzeit der fehlerhaften Anwendung: 0xexplorer.exe0 Pfad der fehlerhaften Anwendung: explorer.exe1 Pfad des fehlerhaften Moduls: explorer.exe2 Berichtskennung: explorer.exe3 Vollständiger Name des fehlerhaften Pakets: explorer.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: explorer.exe5 Error: (04/25/2015 08:50:53 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: explorer.exe, Version: 6.3.9600.17667, Zeitstempel: 0x54c6f7c2 Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.3.9600.17415, Zeitstempel: 0x54505737 Ausnahmecode: 0xc06d007e Fehleroffset: 0x0000000000008b9c ID des fehlerhaften Prozesses: 0xffc Startzeit der fehlerhaften Anwendung: 0xexplorer.exe0 Pfad der fehlerhaften Anwendung: explorer.exe1 Pfad des fehlerhaften Moduls: explorer.exe2 Berichtskennung: explorer.exe3 Vollständiger Name des fehlerhaften Pakets: explorer.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: explorer.exe5 Error: (04/25/2015 08:50:48 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: explorer.exe, Version: 6.3.9600.17667, Zeitstempel: 0x54c6f7c2 Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.3.9600.17415, Zeitstempel: 0x54505737 Ausnahmecode: 0xc06d007e Fehleroffset: 0x0000000000008b9c ID des fehlerhaften Prozesses: 0xc8c Startzeit der fehlerhaften Anwendung: 0xexplorer.exe0 Pfad der fehlerhaften Anwendung: explorer.exe1 Pfad des fehlerhaften Moduls: explorer.exe2 Berichtskennung: explorer.exe3 Vollständiger Name des fehlerhaften Pakets: explorer.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: explorer.exe5 Error: (04/25/2015 08:45:15 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: Explorer.EXE, Version: 6.3.9600.17667, Zeitstempel: 0x54c6f7c2 Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.3.9600.17415, Zeitstempel: 0x54505737 Ausnahmecode: 0xc06d007e Fehleroffset: 0x0000000000008b9c ID des fehlerhaften Prozesses: 0xc0c Startzeit der fehlerhaften Anwendung: 0xExplorer.EXE0 Pfad der fehlerhaften Anwendung: Explorer.EXE1 Pfad des fehlerhaften Moduls: Explorer.EXE2 Berichtskennung: Explorer.EXE3 Vollständiger Name des fehlerhaften Pakets: Explorer.EXE4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Explorer.EXE5 Error: (04/25/2015 08:42:33 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: explorer.exe, Version: 6.3.9600.17667, Zeitstempel: 0x54c6f7c2 Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.3.9600.17415, Zeitstempel: 0x54505737 Ausnahmecode: 0xc06d007e Fehleroffset: 0x0000000000008b9c ID des fehlerhaften Prozesses: 0x11a4 Startzeit der fehlerhaften Anwendung: 0xexplorer.exe0 Pfad der fehlerhaften Anwendung: explorer.exe1 Pfad des fehlerhaften Moduls: explorer.exe2 Berichtskennung: explorer.exe3 Vollständiger Name des fehlerhaften Pakets: explorer.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: explorer.exe5 System errors: ============= Error: (04/25/2015 10:06:54 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Dienst "CyberLink PowerDVD 12 Media Server Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error: (04/25/2015 09:02:32 PM) (Source: DCOM) (EventID: 10010) (User: PC) Description: {1B1F472E-3221-4826-97DB-2C2324D389AE} Error: (04/25/2015 09:02:02 PM) (Source: DCOM) (EventID: 10010) (User: PC) Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001} Error: (04/25/2015 08:43:49 PM) (Source: APPHOSTSVC) (EventID: 9010) (User: ) Description: Fehler im Anwendungshost-Hilfsdienst beim Zugriff auf das Verlaufsstammverzeichnis "C:\inetpub\history". Das Verzeichnis ist nicht vorhanden, oder die Berechtigungen für das Verzeichnis lassen den Zugriff des Verzeichnisdiensts auf das Verzeichnis nicht zu. Das Konfigurationsverlaufsfeature wird deaktiviert und erneut aktiviert, nachdem das Problem behoben wurde. Stellen Sie zum Beheben des Problems sicher, dass das Verzeichnis vorhanden ist und dass die Gruppe "Administratoren" über Lese- und Schreibzugriff auf das Verzeichnis verfügt. Das Datenfeld enthält die Fehlernummer. Error: (04/25/2015 08:24:52 PM) (Source: Tcpip) (EventID: 4199) (User: ) Description: Das System hat einen Adressenkonflikt der IP-Adresse 192.168.1.13 mit dem Computer mit der Netzwerkhardwareadresse 00-00-85-F1-01-7C ermittelt. Netzwerkvorgänge könnten daher auf diesem System unterbrochen werden. Error: (04/22/2015 11:52:31 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Dienst "CyberLink PowerDVD 12 Media Server Service" wurde unerwartet beendet. Dies ist bereits 4 Mal passiert. Error: (04/22/2015 11:39:39 PM) (Source: DCOM) (EventID: 10010) (User: PC) Description: {1B1F472E-3221-4826-97DB-2C2324D389AE} Error: (04/22/2015 11:39:06 PM) (Source: DCOM) (EventID: 10010) (User: PC) Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001} Error: (04/19/2015 09:46:01 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Dienst "CyberLink PowerDVD 12 Media Server Service" wurde unerwartet beendet. Dies ist bereits 3 Mal passiert. Error: (04/19/2015 09:31:03 AM) (Source: DCOM) (EventID: 10010) (User: PC) Description: {1B1F472E-3221-4826-97DB-2C2324D389AE} Microsoft Office Sessions: ========================= Error: (04/25/2015 09:45:26 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: explorer.exe6.3.9600.1766754c6f7c2KERNELBASE.dll6.3.9600.1741554505737c06d007e0000000000008b9c12b001d07f8cfaf6704eC:\Windows\explorer.exeC:\Windows\system32\KERNELBASE.dll9deeafa5-eb83-11e4-8283-a01d48e36bfc Error: (04/25/2015 09:21:07 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: explorer.exe6.3.9600.1766754c6f7c2KERNELBASE.dll6.3.9600.1741554505737c06d007e0000000000008b9c32401d07f899aa11c31C:\Windows\explorer.exeC:\Windows\system32\KERNELBASE.dll3870eaac-eb80-11e4-8283-a01d48e36bfc Error: (04/25/2015 09:08:44 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: backgroundTaskHost.exe6.3.9600.1741592c01d07f8a3c4c5a734294967295C:\Windows\system32\backgroundTaskHost.exe2fc15fc6-eb7e-11e4-8283-a01d48e36bfcMicrosoft.BingNews_3.0.1.174_x64__8wekyb3d8bbweAppexNews Error: (04/25/2015 08:56:57 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: explorer.exe6.3.9600.1766754c6f7c2KERNELBASE.dll6.3.9600.1741554505737c06d007e0000000000008b9c135401d07f89889c2389C:\Windows\explorer.exeC:\Windows\system32\KERNELBASE.dlld81df8f1-eb7c-11e4-8283-a01d48e36bfc Error: (04/25/2015 08:56:26 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: explorer.exe6.3.9600.1766754c6f7c2KERNELBASE.dll6.3.9600.1741554505737c06d007e0000000000008b9c13e401d07f88cd15f338C:\Windows\explorer.exeC:\Windows\system32\KERNELBASE.dllc5b200e7-eb7c-11e4-8283-a01d48e36bfc Error: (04/25/2015 08:51:12 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: explorer.exe6.3.9600.1766754c6f7c2KERNELBASE.dll6.3.9600.1741554505737c06d007e0000000000008b9cbdc01d07f88c1986212C:\Windows\explorer.exeC:\Windows\system32\KERNELBASE.dll0a5e5ca9-eb7c-11e4-8283-a01d48e36bfc Error: (04/25/2015 08:50:53 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: explorer.exe6.3.9600.1766754c6f7c2KERNELBASE.dll6.3.9600.1741554505737c06d007e0000000000008b9cffc01d07f88bec32ec6C:\Windows\explorer.exeC:\Windows\system32\KERNELBASE.dllff0e1833-eb7b-11e4-8283-a01d48e36bfc Error: (04/25/2015 08:50:48 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: explorer.exe6.3.9600.1766754c6f7c2KERNELBASE.dll6.3.9600.1741554505737c06d007e0000000000008b9cc8c01d07f87fd533db2C:\Windows\explorer.exeC:\Windows\system32\KERNELBASE.dllfc3b46ca-eb7b-11e4-8283-a01d48e36bfc Error: (04/25/2015 08:45:15 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Explorer.EXE6.3.9600.1766754c6f7c2KERNELBASE.dll6.3.9600.1741554505737c06d007e0000000000008b9cc0c01d07f87d71de2b5C:\Windows\Explorer.EXEC:\Windows\system32\KERNELBASE.dll360c8752-eb7b-11e4-8283-a01d48e36bfc Error: (04/25/2015 08:42:33 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: explorer.exe6.3.9600.1766754c6f7c2KERNELBASE.dll6.3.9600.1741554505737c06d007e0000000000008b9c11a401d07f879668c317C:\Windows\explorer.exeC:\Windows\system32\KERNELBASE.dlld58e3e23-eb7a-11e4-8282-a01d48e36bfc CodeIntegrity Errors: =================================== Date: 2015-04-25 21:05:04.750 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\amdhdl64.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-04-17 22:56:36.063 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\amdhdl64.dll that did not meet the Custom 3 / Antimalware signing level requirements. ==================== Memory info =========================== Processor: Intel(R) Core(TM) i5-4200M CPU @ 2.50GHz Percentage of memory in use: 14% Total physical RAM: 12203.57 MB Available physical RAM: 10477.23 MB Total Pagefile: 14059.57 MB Available Pagefile: 11855.6 MB Total Virtual: 131072 MB Available Virtual: 131071.79 MB ==================== Drives ================================ Drive c: (Datenträger) (Fixed) (Total:465.37 GB) (Free:410.4 GB) NTFS Drive d: (Datenträger) (Fixed) (Total:465.37 GB) (Free:431.2 GB) NTFS Drive e: (HRM_CCSA_X64FRE_DE-DE_DV5) (CDROM) (Total:3.32 GB) (Free:0 GB) UDF Drive f: () (Removable) (Total:29.25 GB) (Free:12.37 GB) FAT32 ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 931.5 GB) (Disk ID: 94763991) Partition: GPT Partition Type. ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 29.9 GB) (Disk ID: 00000000) Partition: GPT Partition Type. ==================== End Of Log ============================ ich |
27.04.2015, 14:47 | #6 |
/// the machine /// TB-Ausbilder | Windows 8 ohne Adminrechte & ohne Kontextprogramme Bitte noch ein Log mit Minitoolbox anfertigen: Downloade dir bitte Farbar's MiniToolBox auf deinen Desktop und starte das Tool Setze einen Haken bei folgenden Einträgen
__________________ --> Windows 8 ohne Adminrechte & ohne Kontextprogramme |
27.04.2015, 20:25 | #7 |
| Windows 8 ohne Adminrechte & ohne Kontextprogramme Hallo Schrauber, anbei das Logfile aus der MiniToolBox: Code:
ATTFilter MiniToolBox by Farbar Version: 14-04-2015 Ran by Rosi (administrator) on 27-04-2015 at 21:20:44 Running from "C:\Users\Rosi\Desktop" Microsoft Windows 8.1 (X64) Model: HP Pavilion 17 Notebook PC Manufacturer: Hewlett-Packard Boot Mode: Normal *************************************************************************** ========================= Flush DNS: =================================== Windows-IP-Konfiguration Der DNS-Aufl�sungscache wurde geleert. ========================= IE Proxy Settings: ============================== Proxy is not enabled. No Proxy Server is set. "Reset IE Proxy Settings": IE Proxy Settings were reset. ========================= FF Proxy Settings: ============================== "network.proxy.type", 0 "Reset FF Proxy Settings": Firefox Proxy settings were reset. ========================= Hosts content: ================================= ========================= IP Configuration: ================================ Realtek PCIe FE Family Controller = Ethernet (Connected) Realtek RTL8188EE 802.11bgn Wi-Fi Adapter = WiFi (Media disconnected) # ---------------------------------- # IPv4-Konfiguration # ---------------------------------- pushd interface ipv4 reset set global icmpredirects=enabled set interface interface="LAN-Verbindung* 4" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled set interface interface="Ethernet" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled set interface interface="WiFi" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled set interface interface="LAN-Verbindung* 1" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled popd # Ende der IPv4-Konfiguration Windows-IP-Konfiguration Hostname . . . . . . . . . . . . : PC Prim�res DNS-Suffix . . . . . . . : Knotentyp . . . . . . . . . . . . : Hybrid IP-Routing aktiviert . . . . . . : Nein WINS-Proxy aktiviert . . . . . . : Nein DNS-Suffixsuchliste . . . . . . . : hitronhub.home Drahtlos-LAN-Adapter LAN-Verbindung* 1: Medienstatus. . . . . . . . . . . : Medium getrennt Verbindungsspezifisches DNS-Suffix: Beschreibung. . . . . . . . . . . : Virtueller Microsoft-Adapter f�r direktes WiFi #3 Physische Adresse . . . . . . . . : 54-35-30-B9-6B-C7 DHCP aktiviert. . . . . . . . . . : Ja Autokonfiguration aktiviert . . . : Ja Drahtlos-LAN-Adapter WiFi: Medienstatus. . . . . . . . . . . : Medium getrennt Verbindungsspezifisches DNS-Suffix: Speedport_W_724V_Typ_A_05011602_00_001 Beschreibung. . . . . . . . . . . : Realtek RTL8188EE 802.11bgn Wi-Fi Adapter Physische Adresse . . . . . . . . : 54-35-30-B9-6B-C7 DHCP aktiviert. . . . . . . . . . : Ja Autokonfiguration aktiviert . . . : Ja Ethernet-Adapter Ethernet: Verbindungsspezifisches DNS-Suffix: hitronhub.home Beschreibung. . . . . . . . . . . : Realtek PCIe FE Family Controller Physische Adresse . . . . . . . . : A0-1D-48-E3-6B-FC DHCP aktiviert. . . . . . . . . . : Ja Autokonfiguration aktiviert . . . : Ja IPv6-Adresse. . . . . . . . . . . : 2a02:810a:8b00:d08::5(Bevorzugt) Lease erhalten. . . . . . . . . . : Montag, 27. April 2015 21:19:01 Lease l�uft ab. . . . . . . . . . : Montag, 27. April 2015 22:49:01 IPv6-Adresse. . . . . . . . . . . : 2a02:810a:8b00:d08:c87e:b42c:e63a:12f0(Bevorzugt) IPv6-Adresse. . . . . . . . . . . : fd00:bc14:115:6272:c87e:b42c:e63a:12f0(Bevorzugt) Tempor�re IPv6-Adresse. . . . . . : 2a02:810a:8b00:d08:4d3a:23f1:86b9:bb66(Bevorzugt) Tempor�re IPv6-Adresse. . . . . . : fd00:bc14:115:6272:25dc:701d:82c8:f554(Verworfen) Verbindungslokale IPv6-Adresse . : fe80::c87e:b42c:e63a:12f0%3(Bevorzugt) IPv4-Adresse . . . . . . . . . . : 192.168.1.15(Bevorzugt) Subnetzmaske . . . . . . . . . . : 255.255.255.0 Lease erhalten. . . . . . . . . . : Samstag, 25. April 2015 20:43:46 Lease l�uft ab. . . . . . . . . . : Montag, 4. Mai 2015 21:19:03 Standardgateway . . . . . . . . . : fe80::be14:1ff:fe15:6272%3 192.168.1.1 DHCP-Server . . . . . . . . . . . : 192.168.1.1 DHCPv6-IAID . . . . . . . . . . . : 161488200 DHCPv6-Client-DUID. . . . . . . . : 00-01-00-01-19-BA-A6-9D-A0-1D-48-E3-6B-FC DNS-Server . . . . . . . . . . . : 2a02:810a:8b00:d08::1 192.168.1.1 NetBIOS �ber TCP/IP . . . . . . . : Aktiviert Suchliste f�r verbindungsspezifische DNS-Suffixe: hitronhub.home Tunneladapter isatap.hitronhub.home: Medienstatus. . . . . . . . . . . : Medium getrennt Verbindungsspezifisches DNS-Suffix: hitronhub.home Beschreibung. . . . . . . . . . . : Microsoft-ISATAP-Adapter Physische Adresse . . . . . . . . : 00-00-00-00-00-00-00-E0 DHCP aktiviert. . . . . . . . . . : Nein Autokonfiguration aktiviert . . . : Ja Tunneladapter Teredo Tunneling Pseudo-Interface: Verbindungsspezifisches DNS-Suffix: Beschreibung. . . . . . . . . . . : Teredo Tunneling Pseudo-Interface Physische Adresse . . . . . . . . : 00-00-00-00-00-00-00-E0 DHCP aktiviert. . . . . . . . . . : Nein Autokonfiguration aktiviert . . . : Ja IPv6-Adresse. . . . . . . . . . . : 2001:0:9d38:6ab8:18b7:2608:3f57:fef0(Bevorzugt) Verbindungslokale IPv6-Adresse . : fe80::18b7:2608:3f57:fef0%7(Bevorzugt) Standardgateway . . . . . . . . . : DHCPv6-IAID . . . . . . . . . . . : 436207616 DHCPv6-Client-DUID. . . . . . . . : 00-01-00-01-19-BA-A6-9D-A0-1D-48-E3-6B-FC NetBIOS �ber TCP/IP . . . . . . . : Deaktiviert DNS request timed out. timeout was 2 seconds. Server: UnKnown Address: 2a02:810a:8b00:d08::1 DNS request timed out. timeout was 2 seconds. DNS request timed out. timeout was 2 seconds. DNS request timed out. timeout was 2 seconds. Ping wird ausgef�hrt f�r google.com [2a00:1450:4005:809::100e] mit 32 Bytes Daten: Antwort von 2a00:1450:4005:809::100e: Zeit=51ms Zeit�berschreitung der Anforderung. Ping-Statistik f�r 2a00:1450:4005:809::100e: Pakete: Gesendet = 2, Empfangen = 1, Verloren = 1 (50% Verlust), Ca. Zeitangaben in Millisek.: Minimum = 51ms, Maximum = 51ms, Mittelwert = 51ms Server: hitronhub.home Address: 2a02:810a:8b00:d08::1 DNS request timed out. timeout was 2 seconds. DNS request timed out. timeout was 2 seconds. DNS request timed out. timeout was 2 seconds. DNS request timed out. timeout was 2 seconds. Ping wird ausgef�hrt f�r yahoo.com [206.190.36.45] mit 32 Bytes Daten: Zeit�berschreitung der Anforderung. Antwort von 206.190.36.45: Bytes=32 Zeit=192ms TTL=48 Ping-Statistik f�r 206.190.36.45: Pakete: Gesendet = 2, Empfangen = 1, Verloren = 1 (50% Verlust), Ca. Zeitangaben in Millisek.: Minimum = 192ms, Maximum = 192ms, Mittelwert = 192ms Ping wird ausgef�hrt f�r 127.0.0.1 mit 32 Bytes Daten: Antwort von 127.0.0.1: Bytes=32 Zeit<1ms TTL=128 Antwort von 127.0.0.1: Bytes=32 Zeit<1ms TTL=128 Ping-Statistik f�r 127.0.0.1: Pakete: Gesendet = 2, Empfangen = 2, Verloren = 0 (0% Verlust), Ca. Zeitangaben in Millisek.: Minimum = 0ms, Maximum = 0ms, Mittelwert = 0ms =========================================================================== Schnittstellenliste 5...54 35 30 b9 6b c7 ......Virtueller Microsoft-Adapter f�r direktes WiFi #3 4...54 35 30 b9 6b c7 ......Realtek RTL8188EE 802.11bgn Wi-Fi Adapter 3...a0 1d 48 e3 6b fc ......Realtek PCIe FE Family Controller 1...........................Software Loopback Interface 1 8...00 00 00 00 00 00 00 e0 Microsoft-ISATAP-Adapter 7...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface =========================================================================== IPv4-Routentabelle =========================================================================== Aktive Routen: Netzwerkziel Netzwerkmaske Gateway Schnittstelle Metrik 0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.15 30 127.0.0.0 255.0.0.0 Auf Verbindung 127.0.0.1 306 127.0.0.1 255.255.255.255 Auf Verbindung 127.0.0.1 306 127.255.255.255 255.255.255.255 Auf Verbindung 127.0.0.1 306 192.168.1.0 255.255.255.0 Auf Verbindung 192.168.1.15 286 192.168.1.15 255.255.255.255 Auf Verbindung 192.168.1.15 286 192.168.1.255 255.255.255.255 Auf Verbindung 192.168.1.15 286 224.0.0.0 240.0.0.0 Auf Verbindung 127.0.0.1 306 224.0.0.0 240.0.0.0 Auf Verbindung 192.168.1.15 286 255.255.255.255 255.255.255.255 Auf Verbindung 127.0.0.1 306 255.255.255.255 255.255.255.255 Auf Verbindung 192.168.1.15 286 =========================================================================== St�ndige Routen: Keine IPv6-Routentabelle =========================================================================== Aktive Routen: If Metrik Netzwerkziel Gateway 1 306 ::1/128 Auf Verbindung 7 306 2001::/32 Auf Verbindung 7 306 2001:0:9d38:6ab8:18b7:2608:3f57:fef0/128 Auf Verbindung 3 286 2a02:810a:8b00:d08::/62 fe80::be14:1ff:fe15:6272 3 286 2a02:810a:8b00:d08::/64 Auf Verbindung 3 286 2a02:810a:8b00:d08::5/128 Auf Verbindung 3 286 2a02:810a:8b00:d08:4d3a:23f1:86b9:bb66/128 Auf Verbindung 3 286 2a02:810a:8b00:d08:c87e:b42c:e63a:12f0/128 Auf Verbindung 3 286 fd00:bc14:115:6272::/64 Auf Verbindung 3 286 fd00:bc14:115:6272:25dc:701d:82c8:f554/128 Auf Verbindung 3 286 fd00:bc14:115:6272:c87e:b42c:e63a:12f0/128 Auf Verbindung 3 286 fe80::/64 Auf Verbindung 7 306 fe80::/64 Auf Verbindung 7 306 fe80::18b7:2608:3f57:fef0/128 Auf Verbindung 3 286 fe80::c87e:b42c:e63a:12f0/128 Auf Verbindung 1 306 ff00::/8 Auf Verbindung 3 286 ff00::/8 Auf Verbindung 7 306 ff00::/8 Auf Verbindung =========================================================================== St�ndige Routen: Keine ========================= Winsock entries ===================================== Catalog5 01 C:\Windows\SysWOW64\napinsp.dll [55296] (Microsoft Corporation) Catalog5 02 C:\Windows\SysWOW64\pnrpnsp.dll [70144] (Microsoft Corporation) Catalog5 03 C:\Windows\SysWOW64\pnrpnsp.dll [70144] (Microsoft Corporation) Catalog5 04 C:\Windows\SysWOW64\NLAapi.dll [65536] (Microsoft Corporation) Catalog5 05 C:\Windows\SysWOW64\mswsock.dll [286208] (Microsoft Corporation) Catalog5 06 C:\Windows\SysWOW64\winrnr.dll [23040] (Microsoft Corporation) Catalog5 07 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [121704] (Apple Inc.) Catalog9 01 C:\Windows\SysWOW64\mswsock.dll [286208] (Microsoft Corporation) Catalog9 02 C:\Windows\SysWOW64\mswsock.dll [286208] (Microsoft Corporation) Catalog9 03 C:\Windows\SysWOW64\mswsock.dll [286208] (Microsoft Corporation) Catalog9 04 C:\Windows\SysWOW64\mswsock.dll [286208] (Microsoft Corporation) Catalog9 05 C:\Windows\SysWOW64\mswsock.dll [286208] (Microsoft Corporation) Catalog9 06 C:\Windows\SysWOW64\mswsock.dll [286208] (Microsoft Corporation) Catalog9 07 C:\Windows\SysWOW64\mswsock.dll [286208] (Microsoft Corporation) Catalog9 08 C:\Windows\SysWOW64\mswsock.dll [286208] (Microsoft Corporation) Catalog9 09 C:\Windows\SysWOW64\mswsock.dll [286208] (Microsoft Corporation) Catalog9 10 C:\Windows\SysWOW64\mswsock.dll [286208] (Microsoft Corporation) x64-Catalog5 01 C:\Windows\System32\napinsp.dll [69120] (Microsoft Corporation) x64-Catalog5 02 C:\Windows\System32\pnrpnsp.dll [88576] (Microsoft Corporation) x64-Catalog5 03 C:\Windows\System32\pnrpnsp.dll [88576] (Microsoft Corporation) x64-Catalog5 04 C:\Windows\System32\NLAapi.dll [86016] (Microsoft Corporation) x64-Catalog5 05 C:\Windows\System32\mswsock.dll [339456] (Microsoft Corporation) x64-Catalog5 06 C:\Windows\System32\winrnr.dll [30720] (Microsoft Corporation) x64-Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [132968] (Apple Inc.) x64-Catalog9 01 C:\Windows\System32\mswsock.dll [339456] (Microsoft Corporation) x64-Catalog9 02 C:\Windows\System32\mswsock.dll [339456] (Microsoft Corporation) x64-Catalog9 03 C:\Windows\System32\mswsock.dll [339456] (Microsoft Corporation) x64-Catalog9 04 C:\Windows\System32\mswsock.dll [339456] (Microsoft Corporation) x64-Catalog9 05 C:\Windows\System32\mswsock.dll [339456] (Microsoft Corporation) x64-Catalog9 06 C:\Windows\System32\mswsock.dll [339456] (Microsoft Corporation) x64-Catalog9 07 C:\Windows\System32\mswsock.dll [339456] (Microsoft Corporation) x64-Catalog9 08 C:\Windows\System32\mswsock.dll [339456] (Microsoft Corporation) x64-Catalog9 09 C:\Windows\System32\mswsock.dll [339456] (Microsoft Corporation) x64-Catalog9 10 C:\Windows\System32\mswsock.dll [339456] (Microsoft Corporation) ========================= Event log errors: =============================== Application errors: ================== Error: (04/25/2015 09:45:26 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: explorer.exe, Version: 6.3.9600.17667, Zeitstempel: 0x54c6f7c2 Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.3.9600.17415, Zeitstempel: 0x54505737 Ausnahmecode: 0xc06d007e Fehleroffset: 0x0000000000008b9c ID des fehlerhaften Prozesses: 0x12b0 Startzeit der fehlerhaften Anwendung: 0xexplorer.exe0 Pfad der fehlerhaften Anwendung: explorer.exe1 Pfad des fehlerhaften Moduls: explorer.exe2 Berichtskennung: explorer.exe3 Vollständiger Name des fehlerhaften Pakets: explorer.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: explorer.exe5 Error: (04/25/2015 09:21:07 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: explorer.exe, Version: 6.3.9600.17667, Zeitstempel: 0x54c6f7c2 Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.3.9600.17415, Zeitstempel: 0x54505737 Ausnahmecode: 0xc06d007e Fehleroffset: 0x0000000000008b9c ID des fehlerhaften Prozesses: 0x324 Startzeit der fehlerhaften Anwendung: 0xexplorer.exe0 Pfad der fehlerhaften Anwendung: explorer.exe1 Pfad des fehlerhaften Moduls: explorer.exe2 Berichtskennung: explorer.exe3 Vollständiger Name des fehlerhaften Pakets: explorer.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: explorer.exe5 Error: (04/25/2015 09:08:44 PM) (Source: Application Hang) (User: ) Description: Programm backgroundTaskHost.exe, Version 6.3.9600.17415 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 92c Startzeit: 01d07f8a3c4c5a73 Endzeit: 4294967295 Anwendungspfad: C:\Windows\system32\backgroundTaskHost.exe Berichts-ID: 2fc15fc6-eb7e-11e4-8283-a01d48e36bfc Vollständiger Name des fehlerhaften Pakets: Microsoft.BingNews_3.0.1.174_x64__8wekyb3d8bbwe Anwendungs-ID, die relativ zum fehlerhaften Paket ist: AppexNews Error: (04/25/2015 08:56:57 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: explorer.exe, Version: 6.3.9600.17667, Zeitstempel: 0x54c6f7c2 Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.3.9600.17415, Zeitstempel: 0x54505737 Ausnahmecode: 0xc06d007e Fehleroffset: 0x0000000000008b9c ID des fehlerhaften Prozesses: 0x1354 Startzeit der fehlerhaften Anwendung: 0xexplorer.exe0 Pfad der fehlerhaften Anwendung: explorer.exe1 Pfad des fehlerhaften Moduls: explorer.exe2 Berichtskennung: explorer.exe3 Vollständiger Name des fehlerhaften Pakets: explorer.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: explorer.exe5 Error: (04/25/2015 08:56:26 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: explorer.exe, Version: 6.3.9600.17667, Zeitstempel: 0x54c6f7c2 Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.3.9600.17415, Zeitstempel: 0x54505737 Ausnahmecode: 0xc06d007e Fehleroffset: 0x0000000000008b9c ID des fehlerhaften Prozesses: 0x13e4 Startzeit der fehlerhaften Anwendung: 0xexplorer.exe0 Pfad der fehlerhaften Anwendung: explorer.exe1 Pfad des fehlerhaften Moduls: explorer.exe2 Berichtskennung: explorer.exe3 Vollständiger Name des fehlerhaften Pakets: explorer.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: explorer.exe5 Error: (04/25/2015 08:51:12 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: explorer.exe, Version: 6.3.9600.17667, Zeitstempel: 0x54c6f7c2 Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.3.9600.17415, Zeitstempel: 0x54505737 Ausnahmecode: 0xc06d007e Fehleroffset: 0x0000000000008b9c ID des fehlerhaften Prozesses: 0xbdc Startzeit der fehlerhaften Anwendung: 0xexplorer.exe0 Pfad der fehlerhaften Anwendung: explorer.exe1 Pfad des fehlerhaften Moduls: explorer.exe2 Berichtskennung: explorer.exe3 Vollständiger Name des fehlerhaften Pakets: explorer.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: explorer.exe5 Error: (04/25/2015 08:50:53 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: explorer.exe, Version: 6.3.9600.17667, Zeitstempel: 0x54c6f7c2 Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.3.9600.17415, Zeitstempel: 0x54505737 Ausnahmecode: 0xc06d007e Fehleroffset: 0x0000000000008b9c ID des fehlerhaften Prozesses: 0xffc Startzeit der fehlerhaften Anwendung: 0xexplorer.exe0 Pfad der fehlerhaften Anwendung: explorer.exe1 Pfad des fehlerhaften Moduls: explorer.exe2 Berichtskennung: explorer.exe3 Vollständiger Name des fehlerhaften Pakets: explorer.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: explorer.exe5 Error: (04/25/2015 08:50:48 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: explorer.exe, Version: 6.3.9600.17667, Zeitstempel: 0x54c6f7c2 Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.3.9600.17415, Zeitstempel: 0x54505737 Ausnahmecode: 0xc06d007e Fehleroffset: 0x0000000000008b9c ID des fehlerhaften Prozesses: 0xc8c Startzeit der fehlerhaften Anwendung: 0xexplorer.exe0 Pfad der fehlerhaften Anwendung: explorer.exe1 Pfad des fehlerhaften Moduls: explorer.exe2 Berichtskennung: explorer.exe3 Vollständiger Name des fehlerhaften Pakets: explorer.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: explorer.exe5 Error: (04/25/2015 08:45:15 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: Explorer.EXE, Version: 6.3.9600.17667, Zeitstempel: 0x54c6f7c2 Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.3.9600.17415, Zeitstempel: 0x54505737 Ausnahmecode: 0xc06d007e Fehleroffset: 0x0000000000008b9c ID des fehlerhaften Prozesses: 0xc0c Startzeit der fehlerhaften Anwendung: 0xExplorer.EXE0 Pfad der fehlerhaften Anwendung: Explorer.EXE1 Pfad des fehlerhaften Moduls: Explorer.EXE2 Berichtskennung: Explorer.EXE3 Vollständiger Name des fehlerhaften Pakets: Explorer.EXE4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Explorer.EXE5 Error: (04/25/2015 08:42:33 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: explorer.exe, Version: 6.3.9600.17667, Zeitstempel: 0x54c6f7c2 Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.3.9600.17415, Zeitstempel: 0x54505737 Ausnahmecode: 0xc06d007e Fehleroffset: 0x0000000000008b9c ID des fehlerhaften Prozesses: 0x11a4 Startzeit der fehlerhaften Anwendung: 0xexplorer.exe0 Pfad der fehlerhaften Anwendung: explorer.exe1 Pfad des fehlerhaften Moduls: explorer.exe2 Berichtskennung: explorer.exe3 Vollständiger Name des fehlerhaften Pakets: explorer.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: explorer.exe5 System errors: ============= Error: (04/26/2015 10:26:41 PM) (Source: Service Control Manager) (User: ) Description: Dienst "CyberLink PowerDVD 12 Media Server Service" wurde unerwartet beendet. Dies ist bereits 3 Mal passiert. Error: (04/26/2015 10:17:45 PM) (Source: DCOM) (User: PC) Description: {1B1F472E-3221-4826-97DB-2C2324D389AE} Error: (04/26/2015 10:17:15 PM) (Source: DCOM) (User: PC) Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001} Error: (04/26/2015 00:16:50 AM) (Source: Service Control Manager) (User: ) Description: Dienst "CyberLink PowerDVD 12 Media Server Service" wurde unerwartet beendet. Dies ist bereits 2 Mal passiert. Error: (04/25/2015 10:06:54 PM) (Source: Service Control Manager) (User: ) Description: Dienst "CyberLink PowerDVD 12 Media Server Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error: (04/25/2015 09:02:32 PM) (Source: DCOM) (User: PC) Description: {1B1F472E-3221-4826-97DB-2C2324D389AE} Error: (04/25/2015 09:02:02 PM) (Source: DCOM) (User: PC) Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001} Error: (04/25/2015 08:43:49 PM) (Source: APPHOSTSVC) (User: ) Description: Fehler im Anwendungshost-Hilfsdienst beim Zugriff auf das Verlaufsstammverzeichnis "C:\inetpub\history". Das Verzeichnis ist nicht vorhanden, oder die Berechtigungen für das Verzeichnis lassen den Zugriff des Verzeichnisdiensts auf das Verzeichnis nicht zu. Das Konfigurationsverlaufsfeature wird deaktiviert und erneut aktiviert, nachdem das Problem behoben wurde. Stellen Sie zum Beheben des Problems sicher, dass das Verzeichnis vorhanden ist und dass die Gruppe "Administratoren" über Lese- und Schreibzugriff auf das Verzeichnis verfügt. Das Datenfeld enthält die Fehlernummer. Error: (04/25/2015 08:24:52 PM) (Source: Tcpip) (User: ) Description: Das System hat einen Adressenkonflikt der IP-Adresse 192.168.1.13 mit dem Computer mit der Netzwerkhardwareadresse 00-00-85-F1-01-7C ermittelt. Netzwerkvorgänge könnten daher auf diesem System unterbrochen werden. Error: (04/22/2015 11:52:31 PM) (Source: Service Control Manager) (User: ) Description: Dienst "CyberLink PowerDVD 12 Media Server Service" wurde unerwartet beendet. Dies ist bereits 4 Mal passiert. Microsoft Office Sessions: ========================= Error: (04/25/2015 09:45:26 PM) (Source: Application Error)(User: ) Description: explorer.exe6.3.9600.1766754c6f7c2KERNELBASE.dll6.3.9600.1741554505737c06d007e0000000000008b9c12b001d07f8cfaf6704eC:\Windows\explorer.exeC:\Windows\system32\KERNELBASE.dll9deeafa5-eb83-11e4-8283-a01d48e36bfc Error: (04/25/2015 09:21:07 PM) (Source: Application Error)(User: ) Description: explorer.exe6.3.9600.1766754c6f7c2KERNELBASE.dll6.3.9600.1741554505737c06d007e0000000000008b9c32401d07f899aa11c31C:\Windows\explorer.exeC:\Windows\system32\KERNELBASE.dll3870eaac-eb80-11e4-8283-a01d48e36bfc Error: (04/25/2015 09:08:44 PM) (Source: Application Hang)(User: ) Description: backgroundTaskHost.exe6.3.9600.1741592c01d07f8a3c4c5a734294967295C:\Windows\system32\backgroundTaskHost.exe2fc15fc6-eb7e-11e4-8283-a01d48e36bfcMicrosoft.BingNews_3.0.1.174_x64__8wekyb3d8bbweAppexNews Error: (04/25/2015 08:56:57 PM) (Source: Application Error)(User: ) Description: explorer.exe6.3.9600.1766754c6f7c2KERNELBASE.dll6.3.9600.1741554505737c06d007e0000000000008b9c135401d07f89889c2389C:\Windows\explorer.exeC:\Windows\system32\KERNELBASE.dlld81df8f1-eb7c-11e4-8283-a01d48e36bfc Error: (04/25/2015 08:56:26 PM) (Source: Application Error)(User: ) Description: explorer.exe6.3.9600.1766754c6f7c2KERNELBASE.dll6.3.9600.1741554505737c06d007e0000000000008b9c13e401d07f88cd15f338C:\Windows\explorer.exeC:\Windows\system32\KERNELBASE.dllc5b200e7-eb7c-11e4-8283-a01d48e36bfc Error: (04/25/2015 08:51:12 PM) (Source: Application Error)(User: ) Description: explorer.exe6.3.9600.1766754c6f7c2KERNELBASE.dll6.3.9600.1741554505737c06d007e0000000000008b9cbdc01d07f88c1986212C:\Windows\explorer.exeC:\Windows\system32\KERNELBASE.dll0a5e5ca9-eb7c-11e4-8283-a01d48e36bfc Error: (04/25/2015 08:50:53 PM) (Source: Application Error)(User: ) Description: explorer.exe6.3.9600.1766754c6f7c2KERNELBASE.dll6.3.9600.1741554505737c06d007e0000000000008b9cffc01d07f88bec32ec6C:\Windows\explorer.exeC:\Windows\system32\KERNELBASE.dllff0e1833-eb7b-11e4-8283-a01d48e36bfc Error: (04/25/2015 08:50:48 PM) (Source: Application Error)(User: ) Description: explorer.exe6.3.9600.1766754c6f7c2KERNELBASE.dll6.3.9600.1741554505737c06d007e0000000000008b9cc8c01d07f87fd533db2C:\Windows\explorer.exeC:\Windows\system32\KERNELBASE.dllfc3b46ca-eb7b-11e4-8283-a01d48e36bfc Error: (04/25/2015 08:45:15 PM) (Source: Application Error)(User: ) Description: Explorer.EXE6.3.9600.1766754c6f7c2KERNELBASE.dll6.3.9600.1741554505737c06d007e0000000000008b9cc0c01d07f87d71de2b5C:\Windows\Explorer.EXEC:\Windows\system32\KERNELBASE.dll360c8752-eb7b-11e4-8283-a01d48e36bfc Error: (04/25/2015 08:42:33 PM) (Source: Application Error)(User: ) Description: explorer.exe6.3.9600.1766754c6f7c2KERNELBASE.dll6.3.9600.1741554505737c06d007e0000000000008b9c11a401d07f879668c317C:\Windows\explorer.exeC:\Windows\system32\KERNELBASE.dlld58e3e23-eb7a-11e4-8282-a01d48e36bfc CodeIntegrity Errors: =================================== Date: 2015-04-25 21:05:04.750 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\amdhdl64.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-04-17 22:56:36.063 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\amdhdl64.dll that did not meet the Custom 3 / Antimalware signing level requirements. =========================== Installed Programs ============================ 7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov) Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated) Adobe Reader 9 - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-A90000000001}) (Version: 9.0.0 - Adobe Systems Incorporated) Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.3.133 - Adobe Systems, Inc.) AMD Catalyst Control Center (x32 Version: 2013.0819.1344.22803 - Ihr Firmenname) Hidden AMD Catalyst Install Manager (HKLM\...\{5A3BF213-01BC-E5A1-1D1B-EDE3167852AB}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.) AutoUpdate (HKLM-x32\...\{18D10072035C4515918F7E37EAFAACFC}) (Version: 1.1 - ) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Graphics Previews Common (x32 Version: 2013.0819.1344.22803 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center InstallProxy (x32 Version: 2013.0819.1344.22803 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Localization All (x32 Version: 2013.0819.1344.22803 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Profiles Mobile (x32 Version: 2013.0819.1344.22803 - Advanced Micro Devices, Inc.) Hidden CCC Help Chinese Standard (x32 Version: 2013.0819.1343.22803 - Advanced Micro Devices, Inc.) Hidden CCC Help Chinese Traditional (x32 Version: 2013.0819.1343.22803 - Advanced Micro Devices, Inc.) Hidden CCC Help Czech (x32 Version: 2013.0819.1343.22803 - Advanced Micro Devices, Inc.) Hidden CCC Help Danish (x32 Version: 2013.0819.1343.22803 - Advanced Micro Devices, Inc.) Hidden CCC Help Dutch (x32 Version: 2013.0819.1343.22803 - Advanced Micro Devices, Inc.) Hidden CCC Help English (x32 Version: 2013.0819.1343.22803 - Advanced Micro Devices, Inc.) Hidden CCC Help Finnish (x32 Version: 2013.0819.1343.22803 - Advanced Micro Devices, Inc.) Hidden CCC Help French (x32 Version: 2013.0819.1343.22803 - Advanced Micro Devices, Inc.) Hidden CCC Help German (x32 Version: 2013.0819.1343.22803 - Advanced Micro Devices, Inc.) Hidden CCC Help Greek (x32 Version: 2013.0819.1343.22803 - Advanced Micro Devices, Inc.) Hidden CCC Help Hungarian (x32 Version: 2013.0819.1343.22803 - Advanced Micro Devices, Inc.) Hidden CCC Help Italian (x32 Version: 2013.0819.1343.22803 - Advanced Micro Devices, Inc.) Hidden CCC Help Japanese (x32 Version: 2013.0819.1343.22803 - Advanced Micro Devices, Inc.) Hidden CCC Help Korean (x32 Version: 2013.0819.1343.22803 - Advanced Micro Devices, Inc.) Hidden CCC Help Norwegian (x32 Version: 2013.0819.1343.22803 - Advanced Micro Devices, Inc.) Hidden CCC Help Polish (x32 Version: 2013.0819.1343.22803 - Advanced Micro Devices, Inc.) Hidden CCC Help Portuguese (x32 Version: 2013.0819.1343.22803 - Advanced Micro Devices, Inc.) Hidden CCC Help Russian (x32 Version: 2013.0819.1343.22803 - Advanced Micro Devices, Inc.) Hidden CCC Help Spanish (x32 Version: 2013.0819.1343.22803 - Advanced Micro Devices, Inc.) Hidden CCC Help Swedish (x32 Version: 2013.0819.1343.22803 - Advanced Micro Devices, Inc.) Hidden CCC Help Thai (x32 Version: 2013.0819.1343.22803 - Advanced Micro Devices, Inc.) Hidden CCC Help Turkish (x32 Version: 2013.0819.1343.22803 - Advanced Micro Devices, Inc.) Hidden ccc-utility64 (Version: 2013.0819.1344.22803 - Advanced Micro Devices, Inc.) Hidden CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.4.6515 - CyberLink Corp.) CyberLink LabelPrint (x32 Version: 2.5.4.6515 - CyberLink Corp.) Hidden CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}) (Version: 10.0.4.2928 - CyberLink Corp.) CyberLink Media Suite 10 (x32 Version: 10.0.4.2928 - CyberLink Corp.) Hidden Cyberlink PhotoDirector (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.2.4128 - CyberLink Corp.) Cyberlink PhotoDirector (x32 Version: 3.0.2.4128 - CyberLink Corp.) Hidden CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.4.3202 - CyberLink Corp.) CyberLink Power2Go 8 (x32 Version: 8.0.4.3202 - CyberLink Corp.) Hidden CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.4.3122 - CyberLink Corp.) CyberLink PowerDirector 10 (x32 Version: 10.0.4.3122 - CyberLink Corp.) Hidden CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.1.3212 - CyberLink Corp.) CyberLink PowerDVD 12 (x32 Version: 12.0.1.3212 - CyberLink Corp.) Hidden CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 5.0.1.3201 - CyberLink Corp.) CyberLink YouCam (x32 Version: 5.0.1.3201 - CyberLink Corp.) Hidden D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden DivX Codec (HKLM-x32\...\{7B63B2922B174135AFC0E1377DD81EC2}) (Version: 6.8.0 - DivX, Inc.) Energy Star (HKLM-x32\...\{FC0ADA4D-8FA5-4452-8AFF-F0A0BAC97EF7}) (Version: 1.0.9 - Hewlett-Packard Company) Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Hewlett-Packard ACLM.NET v1.2.2.3 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden HP 3D DriveGuard (HKLM-x32\...\{07F6DC37-0857-4B68-A675-4E35989E85E3}) (Version: 6.0.15.1 - Hewlett-Packard Company) HP Connected Music (Meridian - installer) (HKLM-x32\...\StartHPConnectedMusic) (Version: 1.0 - Meridian Audio Ltd) HP CoolSense (HKLM-x32\...\{59F8C5AA-91BD-423D-BF05-09A80F39898F}) (Version: 2.10.62 - Hewlett-Packard Company) HP Customer Experience Enhancements (x32 Version: 6.0.1.7 - Hewlett-Packard) Hidden HP Documentation (HKLM-x32\...\{F5120027-B9BF-4A48-86E9-63F7F79A5263}) (Version: 1.1.0.0 - Hewlett-Packard) HP Postscript Converter (Version: 4.5.12202 - Hewlett-Packard) Hidden HP Recovery Manager (x32 Version: 11.00 - Hewlett-Packard) Hidden HP Registration Service (HKLM\...\{D1E8F2D7-7794-4245-B286-87ED86C1893C}) (Version: 1.2.7045.4591 - Hewlett-Packard) HP SimplePass (HKLM-x32\...\InstallShield_{314FAD12-F785-4471-BCE8-AB506642B9A1}) (Version: 8.00.49 - Hewlett-Packard) HP SimplePass (Version: 8.00.49 - Hewlett-Packard) Hidden HP Support Assistant (HKLM-x32\...\{3AF15EEA-8EDF-4393-BB6C-CF8A9986486A}) (Version: 7.3.35.20 - Hewlett-Packard Company) HP System Event Utility (HKLM-x32\...\{23EF407B-E7D0-4CB6-8916-43E5B9EEFDED}) (Version: 1.0.9 - Hewlett-Packard Company) HP Utility Center (HKLM\...\{AED1C141-3AFC-47FE-AE90-C820AA60B103}) (Version: 2.2.5 - Hewlett-Packard Company) HP Wireless Button Driver (HKLM-x32\...\{30B2D1D8-0A07-4B71-9553-0710C5D31E35}) (Version: 1.1.2.1 - Hewlett-Packard Company) Inst5675 (Version: 8.00.49 - Softex Inc.) Hidden Inst5676 (Version: 8.00.49 - Softex Inc.) Hidden Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.13.1706 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3277 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.1.1000 - Intel Corporation) Intel(R) Rapid Storage Technology (Version: 12.8.1.1000 - Intel Corporation) Hidden Intel® Trusted Connect Service Client (Version: 1.28.487.1 - Intel Corporation) Hidden IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: - ) Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft Office Home and Student 2013 - de-de (HKLM\...\HomeStudentRetail - de-de) (Version: 15.0.4701.1002 - Microsoft Corporation) Microsoft Office XP Professional mit FrontPage (HKLM-x32\...\{90280407-6000-11D3-8CFE-0050048383C9}) (Version: 10.0.2701.0 - Microsoft Corporation) Microsoft OneDrive (HKCU\...\OneDriveSetup.exe) (Version: 17.3.4726.0226 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Mozilla Firefox 37.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.1 (x86 de)) (Version: 37.0.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 37.0.1 - Mozilla) MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden neroxml (x32 Version: 1.0.0 - Nero AG) Hidden Norton AntiVirus (HKLM-x32\...\NAV) (Version: 21.7.0.11 - Symantec Corporation) OEM Application Profile (HKLM-x32\...\{70D5F822-F4C4-33D9-7EEC-2A4AF4EA7BDC}) (Version: 1.00.0000 - Ihr Firmenname) Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4701.1002 - Microsoft Corporation) Hidden Office 15 Click-to-Run Licensing Component (Version: 15.0.4701.1002 - Microsoft Corporation) Hidden Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4701.1002 - Microsoft Corporation) Hidden Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Photo Gallery (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 1.1.9200.20 - Realtek Semiconductor Corp.) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.20.815.2013 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7010 - Realtek Semiconductor Corp.) REALTEK Wireless LAN Driver (HKLM-x32\...\{A5107464-AA9B-4177-8129-5FF2F42DD322}) (Version: 1.00.12.0906 - REALTEK Semiconductor Corp.) Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.) swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 17.0.6.2 - Synaptics Incorporated) VLC media player 1.1.11 (HKLM-x32\...\VLC media player) (Version: 1.1.11 - VideoLAN) Windows Live Communications Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation) Windows Live Essentials (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live Installer (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live PIMT Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live SOXE (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live UX Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden WinRAR (HKLM-x32\...\WinRAR archiver) (Version: - ) ========================= Memory info: =================================== Percentage of memory in use: 14% Total physical RAM: 12203.57 MB Available physical RAM: 10467.28 MB Total Pagefile: 14059.57 MB Available Pagefile: 11902.18 MB Total Virtual: 4095.88 MB Available Virtual: 3976.7 MB ========================= Partitions: ===================================== 1 Drive c: (Datenträger) (Fixed) (Total:465.37 GB) (Free:411 GB) NTFS 2 Drive d: (Datenträger) (Fixed) (Total:465.37 GB) (Free:431.2 GB) NTFS 3 Drive e: (HRM_CCSA_X64FRE_DE-DE_DV5) (CDROM) (Total:3.32 GB) (Free:0 GB) UDF 4 Drive f: () (Removable) (Total:29.25 GB) (Free:12.37 GB) FAT32 ========================= Users: ======================================== Benutzerkonten fr \\PC Administrator Gast Rosi Tester Der Befehl wurde erfolgreich ausgefhrt. ========================= Minidump Files ================================== No minidump file found **** End of log **** |
28.04.2015, 14:04 | #8 |
/// the machine /// TB-Ausbilder | Windows 8 ohne Adminrechte & ohne Kontextprogramme Deaktiviere mal bitte ipV6 komplett, und setz Google DNS als DNS auf dem Rechner.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
28.04.2015, 20:52 | #9 |
| Windows 8 ohne Adminrechte & ohne Kontextprogramme Hallo Schrauber, keinerlei Veränderung - ich verliere immer noch 2 von 4 Ping-Paketen... ...folgendes habe ich allerdings in der regedit gefunden: hxxp://g.uk.msn.com/HPNOT14/4 Hier waren die Startseite mit verwanzt... ...allerdings kann ich immer noch keine Seite ansurfen und die Sache mit dem Starten von Programmen aus dem Kontextmenü heraus funktioniert auch nicht... ... beim Klick - kurzer blauer Bildschirm - Desktop ... die Anwendung öffnen sich nicht. Besten Dank für weitere Ideen und Support ich |
29.04.2015, 08:46 | #10 |
/// the machine /// TB-Ausbilder | Windows 8 ohne Adminrechte & ohne Kontextprogramme
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
30.04.2015, 15:31 | #11 |
| Windows 8 ohne Adminrechte & ohne Kontextprogramme Hallo Schrauber, leider gar keine Veränderung, was die Probleme angeht:
Bin für jedweden weiteren Lösungsvorschlag zu haben, spekuliere aber fast mit einer Neuinstallation . Vielen Dank ich |
01.05.2015, 15:23 | #12 |
/// the machine /// TB-Ausbilder | Windows 8 ohne Adminrechte & ohne Kontextprogramme Da spekuliere ich jetzt auch drauf. BZw einen Refresh von Win8, dann bleiben die Daten und Programme erhalten.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu Windows 8 ohne Adminrechte & ohne Kontextprogramme |
administrator, automatisch, bildschirm, blauer bildschirm, cmd, datei, desktop, folge, funktioniert, google, hijack, langsam, lösung, maus, pakete, problem, probleme, programm, programme, rechtsklick, router, super, surfen, taskleiste, windows, öffnet |