Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Polizeivirus auf meinem LapTop - Logfile erstellt - wie weiter? (https://www.trojaner-board.de/125591-polizeivirus-meinem-laptop-logfile-erstellt.html)

meeresengel 12.10.2012 19:28

Polizeivirus auf meinem LapTop - Logfile erstellt - wie weiter?
 
Hallo zusammen,
hab mir auch den bösen Polizeivirus eingefangen. Über Google bin ich auf
eure Seite gekommen und mit der ORL.EXE das Logfile erstellt.

Könnt ihr mir weiterhelfen?


Hier der Inhalt der OTL.txt:
Code:

Code:

OTL Extras logfile created on: 12.10.2012 18:36:43 - Run 1
OTL by OldTimer - Version 3.2.69.0    Folder = C:\Users\Anette\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000C07 | Country: Österreich | Language: DEA | Date Format: dd.MM.yyyy
 
2,96 Gb Total Physical Memory | 2,50 Gb Available Physical Memory | 84,51% Memory free
6,12 Gb Paging File | 5,85 Gb Available in Paging File | 95,64% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 92,21 Gb Total Space | 39,92 Gb Free Space | 43,29% Space Free | Partition Type: NTFS
Drive D: | 465,76 Gb Total Space | 451,40 Gb Free Space | 96,92% Space Free | Partition Type: NTFS
Drive E: | 364,76 Gb Total Space | 364,63 Gb Free Space | 99,96% Space Free | Partition Type: NTFS
Drive G: | 3,72 Gb Total Space | 1,98 Gb Free Space | 53,05% Space Free | Partition Type: FAT32
 
Computer Name: ANETTE-PC | User Name: Anette | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office14\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "C:\Program Files\Microsoft Office\Office14\msohtmed.exe" /p %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
========== Authorized Applications List ==========
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0911BCEA-E4E2-42A3-8D4C-DF8C38A4A719}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office14\outlook.exe |
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{03ED1FC6-CC42-43FC-B957-FFBC0A2672D6}" = protocol=6 | dir=in | app=c:\program files\a1\a1 webassistent\a1modemkonfigurator.exe |
"{042F24C2-4AE0-4F3C-9C2B-889A713B7BC8}" = protocol=17 | dir=in | app=d:\programme\frostwire\frostwire 5\frostwire.exe |
"{0628179D-4983-4228-9088-82013EF9ABC7}" = protocol=17 | dir=in | app=c:\program files\a1\a1 webassistent\a1webassistent.exe |
"{0A7F61B9-38E5-4F01-B270-0FFBB9E9561E}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe |
"{3046E46A-1F4C-4413-AFC6-D50D6BE6107D}" = protocol=17 | dir=in | app=c:\program files\a1\a1 breitband\a1breitband.exe |
"{362295A0-A436-4AA6-A69E-F379988F0511}" = protocol=17 | dir=in | app=c:\program files\a1\a1 webassistent\a1modemkonfigurator.exe |
"{39F30E83-4F06-4FC9-A5CD-20A8E3D5C2EB}" = protocol=17 | dir=in | app=c:\program files\a1\a1 webassistent\a1modemkonfigurator.exe |
"{3EF1F903-6E96-442F-9D6F-0BC6EC627C4D}" = protocol=6 | dir=in | app=c:\program files\a1\a1 breitband\a1breitband.exe |
"{3EF9FD7D-C7C3-4059-817D-A8561613823D}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office14\groove.exe |
"{414E5212-7D20-4DEB-9E4E-51DAE000F1F0}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office14\onenote.exe |
"{67DA6839-D712-4342-AC7E-DC117CB09DE9}" = protocol=6 | dir=in | app=c:\program files\a1\a1 webassistent\a1wlanassistent.exe |
"{695EDC0C-4471-4675-8EA6-92174A88D29E}" = protocol=6 | dir=in | app=c:\program files\a1\a1 webassistent\a1wlanassistent.exe |
"{95DEA299-45D9-4641-8B07-41BB91F408FE}" = protocol=6 | dir=in | app=c:\program files\a1\a1 breitband\a1breitband.exe |
"{96DBB8BD-9233-40B1-8DC9-135917917ACD}" = protocol=17 | dir=in | app=c:\program files\a1\a1 webassistent\a1wlanassistent.exe |
"{A199C1D0-810B-4AD6-8E2F-ABBFC9E19E7A}" = protocol=6 | dir=in | app=c:\program files\a1\a1 webassistent\a1modemkonfigurator.exe |
"{AA4F419E-1964-4379-A172-11CCF5AB02E1}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office14\groove.exe |
"{ACB4AA92-C08B-460D-BBF8-9EF169B3FC66}" = protocol=6 | dir=in | app=c:\program files\a1\a1 servicecenter\a1servicecenter.exe |
"{AF51EFD9-2DFA-48D3-B271-21F3DD50629E}" = protocol=6 | dir=in | app=c:\program files\vuze\azureus.exe |
"{C4D1E923-A633-4A53-8A09-A08C0BDF7DE5}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office14\onenote.exe |
"{C6F98B09-CBF7-43B5-962F-A10743EA65BC}" = protocol=17 | dir=in | app=c:\program files\vuze\azureus.exe |
"{C9FCACD9-2DC5-43E2-AA20-F83CCB948A10}" = protocol=17 | dir=in | app=c:\program files\a1\a1 servicecenter\a1servicecenter.exe |
"{D5CC8FE4-9981-4408-9997-E7054529C7D2}" = protocol=17 | dir=in | app=c:\program files\a1\a1 webassistent\a1wlanassistent.exe |
"{DE142DAD-DB4D-4A43-9F00-3CA62571D41E}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{EB1138E4-04CE-4F43-937B-D9F3D94F8883}" = protocol=6 | dir=in | app=c:\program files\a1\a1 webassistent\a1webassistent.exe |
"{F07283B8-154C-46B5-98FA-820394C6C8D8}" = protocol=17 | dir=in | app=c:\program files\a1\a1 breitband\a1breitband.exe |
"{F1AF1C20-2546-4DA0-A0FB-35FDA6D35AA6}" = protocol=6 | dir=in | app=c:\windows\system32\muzapp.exe |
"{F8B2F98B-1F54-4C86-B58F-2522E37B54D6}" = protocol=6 | dir=in | app=d:\programme\frostwire\frostwire 5\frostwire.exe |
"{FC504C1E-1BBB-40DF-B159-A1AFD025B776}" = protocol=17 | dir=in | app=c:\windows\system32\muzapp.exe |
"TCP Query User{18A7C6BF-9135-48CC-A363-3C53378A719F}C:\program files\a1\a1 webassistent\a1webassistent.exe" = protocol=6 | dir=in | app=c:\program files\a1\a1 webassistent\a1webassistent.exe |
"TCP Query User{25BB5763-E462-4BCA-878A-06F7F0EC3F50}C:\program files\vuze\azureus.exe" = protocol=6 | dir=in | app=c:\program files\vuze\azureus.exe |
"TCP Query User{308CF410-94D4-41BF-B90D-C2128BD08E96}C:\windows\kmsemulator.exe" = protocol=6 | dir=in | app=c:\windows\kmsemulator.exe |
"TCP Query User{71C587B9-BD7C-4E51-A51F-24D32A04CFC0}C:\program files\1clickdownload\1clickdownloader.exe" = protocol=6 | dir=in | app=c:\program files\1clickdownload\1clickdownloader.exe |
"TCP Query User{85C61221-93C8-4320-9D94-E0BDE829AADC}C:\programdata\microsoft\windows\start menu\programs\startup\skype.exe" = protocol=6 | dir=in | app=c:\programdata\microsoft\windows\start menu\programs\startup\skype.exe |
"TCP Query User{C37398ED-4AC6-4D6C-AC2F-F76970EE3692}C:\programdata\microsoft\windows\start menu\programs\startup\skype.exe" = protocol=6 | dir=in | app=c:\programdata\microsoft\windows\start menu\programs\startup\skype.exe |
"UDP Query User{0EAA1E9C-D4EA-4DEE-AA71-C707D060C0A6}C:\program files\1clickdownload\1clickdownloader.exe" = protocol=17 | dir=in | app=c:\program files\1clickdownload\1clickdownloader.exe |
"UDP Query User{4371C87A-876E-46EA-BA8B-91EF933DD71D}C:\program files\vuze\azureus.exe" = protocol=17 | dir=in | app=c:\program files\vuze\azureus.exe |
"UDP Query User{6557018F-982C-4F4D-8D21-4E0A1C1716EA}C:\programdata\microsoft\windows\start menu\programs\startup\skype.exe" = protocol=17 | dir=in | app=c:\programdata\microsoft\windows\start menu\programs\startup\skype.exe |
"UDP Query User{839D7A41-79FE-4794-B6F7-4AF43080A0DD}C:\programdata\microsoft\windows\start menu\programs\startup\skype.exe" = protocol=17 | dir=in | app=c:\programdata\microsoft\windows\start menu\programs\startup\skype.exe |
"UDP Query User{A674F758-97E1-4846-AC4E-4550BCD1D7C4}C:\program files\a1\a1 webassistent\a1webassistent.exe" = protocol=17 | dir=in | app=c:\program files\a1\a1 webassistent\a1webassistent.exe |
"UDP Query User{C192DD0A-9CBD-4147-AAE9-CFB63FB30DC1}C:\windows\kmsemulator.exe" = protocol=17 | dir=in | app=c:\windows\kmsemulator.exe |
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu
"{0E64B098-8018-4256-BA23-C316A43AD9B0}" = QuickTime
"{1111706F-666A-4037-7777-211328764D10}" = JavaFX 2.1.1
"{26A24AE4-039D-4CA4-87B4-2F83217005FF}" = Java(TM) 7 Update 5
"{291A06BB-7145-443F-9257-8913A928BD40}" = A1 Webassistent
"{2F926AE7-9FB7-4B34-906F-9C29A6D146A7}" = SystemDiagnostics
"{3921A67A-5AB1-4E48-9444-C71814CF3027}" = VCRedistSetup
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{58BAA8D0-404E-4585-9FD3-ED1BB72AC2EE}" = Adobe Flash Player 9 ActiveX
"{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}" = MSVC80_x86_v2
"{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{7964AE02-9127-42C0-A917-2CE4CD4EFE3B}" = Nokia Suite
"{7E4FBD52-148F-49EE-AFCC-96FB498F4D7D}" = A1 Servicecenter
"{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar
"{90140000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2010
"{90140000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2010
"{90140000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2010
"{90140000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2010
"{90140000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2010
"{90140000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2010
"{90140000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2010
"{90140000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2010
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
"{90140000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2010
"{90140000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2010
"{90140000-0044-0407-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (German) 2010
"{90140000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2010
"{90140000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2010
"{90140000-00BA-0407-0000-0000000FF1CE}" = Microsoft Office Groove MUI (German) 2010
"{905A7A49-C6AE-4F77-8E69-AE8B9629D719}" = A1 Internet Software
"{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager
"{933B4015-4618-4716-A828-5289FC03165F}" = VC80CRTRedist - 8.0.50727.6195
"{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}" = ALPS Touch Pad Driver
"{A57025CC-5F2E-4D01-B387-06DB10500D43}" = Nokia Connectivity Cable Driver
"{AC76BA86-7AD7-1031-7B44-A95000000001}" = Adobe Reader 9.5.1 - Deutsch
"{AC76BA86-7AD7-5464-3428-900000000004}" = Spelling Dictionaries Support For Adobe Reader 9
"{AF111648-99A1-453E-81DD-80DBBF6DAD0D}" = MSVC90_x86
"{AFC454ED-A26F-4816-826B-C35129D82E1F}" = Fujitsu Siemens Computers Recovery
"{B0E5D7E7-A106-458F-BA7B-2F8CAEA3BF16}" = PlayReady PC runtime
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = SAMSUNG USB Driver for Mobile Phones
"{DA5B2BDC-F654-4A88-A669-4D34BC7846A1}" = PC Connectivity Solution
"{E3B64CC5-C011-40C0-92BC-7316CD5E5688}" = Microsoft_VC100_CRT_SP1_x86
"{EB879750-CCBD-4013-BFD5-0294D4DA5BD0}" = Apple Application Support
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.10
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F14B8ECC-BDA0-4987-9201-D7B7DBE11031}" = Nero 7 Ultra Edition
"{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"1ClickDownloader" = 1ClickDownloader
"504244733D18C8F63FF584AEB290E3904E791693" = Windows-Treiberpaket - Nokia pccsmcfd  (08/22/2008 7.0.0.0)
"8461-7759-5462-8226" = Vuze
"8781-9705-0578-2960" = Medienmanager 1.3.0
"A1 Internet Software" = A1 Internet Software
"A1 Servicecenter" = A1 Servicecenter
"A1 Webassistent" = A1 Webassistent
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Atlantis Quest_is1" = Atlantis Quest
"Audacity_is1" = Audacity 2.0
"Avira AntiVir Desktop" = Avira Antivirus Premium 2012
"DivX Setup" = DivX-Setup
"DVDVideoSoftTB Toolbar" = DVDVideoSoftTB Toolbar
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.11.19.412
"funmoods" = Funmoods on IE and Chrome
"Hotkey Utility_is1" = Hotkey Utility
"InstallShield_{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"Launch Pad_is1" = Launch Pad 1.0.3
"McAfee Security Scan" = McAfee Security Scan Plus
"Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Mozilla Firefox 14.0.1 (x86 de)" = Mozilla Firefox 14.0.1 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"Nokia Suite" = Nokia Suite
"NVIDIA Drivers" = NVIDIA Drivers
"Office14.PROPLUS" = Microsoft Office Professional Plus 2010
"Power Manager_is1" = Power Manager 2.8.3
"PROSet" = Intel(R) Network Connections Drivers
"Vuze_Remote Toolbar" = Vuze Remote Toolbar
"WinRAR archiver" = WinRAR 4.11 (32-Bit)
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{79A765E1-C399-405B-85AF-466F52E918B0}" = Ask Toolbar Updater
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 23.07.2012 17:04:00 | Computer Name = Anette-PC | Source = System Restore | ID = 8193
Description =
 
Error - 06.08.2012 14:50:00 | Computer Name = Anette-PC | Source = Application Error | ID = 1000
Description = Fehlerhafte Anwendung taskeng.exe, Version 6.0.6002.18342, Zeitstempel
 0x4cd2e07b, fehlerhaftes Modul ntdll.dll, Version 6.0.6002.18541, Zeitstempel 0x4ec3e3d5,
 Ausnahmecode 0xc0000005, Fehleroffset 0x00066e61,  Prozess-ID 0xd44, Anwendungsstartzeit
 01cd7404351f10e0.
 
Error - 03.09.2012 17:21:19 | Computer Name = Anette-PC | Source = Application Error | ID = 1000
Description = Fehlerhafte Anwendung plugin-container.exe, Version 12.0.0.4493, Zeitstempel
 0x4f920759, fehlerhaftes Modul NPSWF32_11_3_300_271.dll_unloaded, Version 0.0.0.0,
 Zeitstempel 0x502701bf, Ausnahmecode 0xc0000005, Fehleroffset 0x54ddac93,  Prozess-ID
 0x1480, Anwendungsstartzeit 01cd8a196757b870.
 
Error - 19.09.2012 14:20:01 | Computer Name = Anette-PC | Source = Application Error | ID = 1000
Description = Fehlerhafte Anwendung iexplore.exe, Version 9.0.8112.16448, Zeitstempel
 0x4fecf1b7, fehlerhaftes Modul ntdll.dll, Version 6.0.6002.18541, Zeitstempel 0x4ec3e3d5,
 Ausnahmecode 0xc0000005, Fehleroffset 0x00039377,  Prozess-ID 0x1704, Anwendungsstartzeit
 01cd969351e24a63.
 
Error - 24.09.2012 12:54:33 | Computer Name = Anette-PC | Source = Application Error | ID = 1000
Description = Fehlerhafte Anwendung rundll32.exe, Version 6.0.6000.16386, Zeitstempel
 0x4549b0e1, fehlerhaftes Modul USER32.dll, Version 6.0.6002.18541, Zeitstempel
0x4ec3e3d5, Ausnahmecode 0xc0000142, Fehleroffset 0x00009f5d,  Prozess-ID 0x1628,
Anwendungsstartzeit 01cd9a754517996f.
 
Error - 24.09.2012 12:54:33 | Computer Name = Anette-PC | Source = Application Error | ID = 1000
Description = Fehlerhafte Anwendung rundll32.exe, Version 6.0.6000.16386, Zeitstempel
 0x4549b0e1, fehlerhaftes Modul USER32.dll, Version 6.0.6002.18541, Zeitstempel
0x4ec3e3d5, Ausnahmecode 0xc0000142, Fehleroffset 0x00009f5d,  Prozess-ID 0x1f88,
Anwendungsstartzeit 01cd9a75451416ff.
 
Error - 24.09.2012 12:54:38 | Computer Name = Anette-PC | Source = Application Error | ID = 1000
Description = Fehlerhafte Anwendung iexplore.exe, Version 9.0.8112.16448, Zeitstempel
 0x4fecf1b7, fehlerhaftes Modul USER32.dll, Version 6.0.6002.18541, Zeitstempel
0x4ec3e3d5, Ausnahmecode 0xc0000142, Fehleroffset 0x00009f5d,  Prozess-ID 0x1e88,
Anwendungsstartzeit 01cd9a754759e84f.
 
Error - 24.09.2012 12:55:19 | Computer Name = Anette-PC | Source = Application Error | ID = 1000
Description = Fehlerhafte Anwendung iexplore.exe, Version 9.0.8112.16448, Zeitstempel
 0x4fecf1b7, fehlerhaftes Modul USER32.dll, Version 6.0.6002.18541, Zeitstempel
0x4ec3e3d5, Ausnahmecode 0xc0000142, Fehleroffset 0x00009f5d,  Prozess-ID 0x18dc,
Anwendungsstartzeit 01cd9a756113c0df.
 
Error - 24.09.2012 12:57:52 | Computer Name = Anette-PC | Source = Application Hang | ID = 1002
Description = Programm firefox.exe, Version 14.0.1.4577 arbeitet nicht mehr mit
Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet
"Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen über
 das Problem zu suchen.  Prozess-ID: 4f4  Anfangszeit: 01cd9a700a6a07df  Zeitpunkt der
 Beendigung: 15
 
Error - 24.09.2012 17:16:05 | Computer Name = Anette-PC | Source = Application Hang | ID = 1002
Description = Programm avcenter.exe, Version 12.3.0.15 arbeitet nicht mehr mit Windows
 zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet "Lösungen
 für Probleme" in der Systemsteuerung, um nach weiteren Informationen über das Problem
 zu suchen.  Prozess-ID: 1d60  Anfangszeit: 01cd9a75b6cf9140  Zeitpunkt der Beendigung:
 0
 
[ System Events ]
Error - 06.03.2012 11:52:21 | Computer Name = Anette-PC | Source = HTTP | ID = 15016
Description =
 
Error - 06.03.2012 11:53:57 | Computer Name = Anette-PC | Source = Dhcp | ID = 1001
Description = Diesem Computer konnte keine Netzwerkadresse durch den DHCP-Server
 für die Netzwerkkarte mit der Netzwerkadresse 00215D35C17E zugeteilt werden. Der
 folgende Fehler ist aufgetreten:  %%121. Es wird weiterhin im Hintergrund versucht,
 eine Adresse vom Netzwerkadressserver (DHCP) zugeteilt zu bekommen.
 
Error - 06.03.2012 11:55:42 | Computer Name = Anette-PC | Source = PlugPlayManager | ID = 12
Description = Das Gerät "Mobile Intel(R) 45 Express Chipset Series PCI Express Root
 Port - 2A41" (PCI\VEN_8086&DEV_2A41&SUBSYS_11481734&REV_07\3&11583659&0&08) wurde
 ohne vorbereitende Maßnahmen vom System entfernt.
 
Error - 06.03.2012 13:26:07 | Computer Name = Anette-PC | Source = PlugPlayManager | ID = 12
Description = Das Gerät "Mobile Intel(R) 45 Express Chipset Series PCI Express Root
 Port - 2A41" (PCI\VEN_8086&DEV_2A41&SUBSYS_11481734&REV_07\3&11583659&0&08) wurde
 ohne vorbereitende Maßnahmen vom System entfernt.
 
Error - 06.03.2012 13:26:06 | Computer Name = Anette-PC | Source = HTTP | ID = 15016
Description =
 
Error - 06.03.2012 13:26:09 | Computer Name = Anette-PC | Source = Dhcp | ID = 1002
Description = Die IP-Adresslease 10.0.0.3 für die Netzwerkkarte mit der Netzwerkadresse
 00215D35C17E wurde durch den DHCP-Server 0.0.0.0 abgelehnt (der DHCP-Server hat
 eine DHCPNACK-Meldung gesendet).
 
Error - 06.03.2012 13:46:26 | Computer Name = Anette-PC | Source = Dhcp | ID = 1002
Description = Die IP-Adresslease 10.0.0.6 für die Netzwerkkarte mit der Netzwerkadresse
 00215D35C17E wurde durch den DHCP-Server 0.0.0.0 abgelehnt (der DHCP-Server hat
 eine DHCPNACK-Meldung gesendet).
 
Error - 06.03.2012 16:00:14 | Computer Name = Anette-PC | Source = PlugPlayManager | ID = 12
Description = Das Gerät "Mobile Intel(R) 45 Express Chipset Series PCI Express Root
 Port - 2A41" (PCI\VEN_8086&DEV_2A41&SUBSYS_11481734&REV_07\3&11583659&0&08) wurde
 ohne vorbereitende Maßnahmen vom System entfernt.
 
 
< End of report >


t'john 13.10.2012 00:08

:hallo:

wo ist OTL.txt?

t'john 25.11.2012 07:59

Fehlende Rückmeldung

Gibt es Probleme beim Abarbeiten obiger Anleitung?

Um Kapazitäten für andere Hilfesuchende freizumachen, lösche ich dieses Thema aus meinen Benachrichtigungen.

Solltest Du weitermachen wollen, schreibe mir eine PN oder eröffne ein neues Thema.
http://www.trojaner-board.de/69886-a...-beachten.html


Hinweis: Das Verschwinden der Symptome bedeutet nicht, dass Dein Rechner sauber ist.


Alle Zeitangaben in WEZ +1. Es ist jetzt 00:29 Uhr.

Copyright ©2000-2024, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129