Trojaner-Board - GVU-Trojaner auf Windows 8

hier das erste :
FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-07-2013 04 (ATTENTION: FRST version is 48 days old)

Ran by user (administrator) on 27-08-2013 20:10:18

Running from C:\Users\user\Desktop

Windows 8 (X64) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe

(Microsoft Corporation) C:\Windows\system32\dashost.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe

(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgr.exe

(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe

(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe

(Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE

(Microsoft Corporation) C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.2.9200.16455_none_624a7aa150f57306\TiWorker.exe

(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

() C:\Program Files\Sony\VAIO Care\VCPerfService.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe

(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Improvement\vim.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe

(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkClient.EXE

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Qualcomm Atheros) C:\Program Files (x86)\Bluetooth Suite\BtTray.exe

(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe

(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE

(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

() C:\Program Files\Sony\VAIO Care\listener.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe

(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Improvement\vim.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /SONYAPO  [1214608 2012-08-20] (Realtek Semiconductor)

HKLM\...\Run: [BtTray] - "C:\Program Files (x86)\Bluetooth Suite\BtTray.exe" [764032 2012-08-13] (Qualcomm Atheros)

HKLM\...\Run: [BtvStack] - "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe" [127616 2012-08-13] (Atheros Communications)

HKLM\...\Run: [IgfxTray] - C:\Windows\system32\igfxtray.exe [170304 2012-08-20] (Intel Corporation)

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [398656 2012-08-20] (Intel Corporation)

HKLM\...\Run: [Persistence] - C:\Windows\system32\igfxpers.exe [440640 2012-08-20] (Intel Corporation)

HKLM\...\Run: [SynTPEnh] - %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-21] (Synaptics Incorporated)

HKCU\...\Run: [qcgce2mrvjq91kk1e7pnbb19m52fx] - C:\Users\user\AppData\Local\Temp\qyegdoxqdtlkqfdgj.exe [x] <===== ATTENTION

HKLM-x32\...\Run: [ISBMgr.exe] - "C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe" [68776 2012-08-18] (Sony Corporation)

HKLM-x32\...\Run: [PMBVolumeWatcher] - C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [724576 2012-07-27] (Sony Corporation)

HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - "c:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" [35736 2010-11-15] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [Adobe ARM] - "c:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [932288 2010-11-15] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [Intel AppUp(SM) center] - "C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe" --domain-id F0399437-FD0C-4A48-B101-F0314A6172E4 [152896 2012-06-25] (Intel Corporation)

HKLM-x32\...\Run: [] -  [x]

HKLM-x32\...\Run: [avgnt] - "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min [345144 2013-07-01] (Avira Operations GmbH & Co. KG)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://sony13.msn.com

HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://vaioportal.sony.eu

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://sony13.msn.com

SearchScopes: HKCU - {C718F4B8-8E1C-498F-B23C-62E694896DCB} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10261&src=kw&q={searchTerms}&locale=de_DE&apn_ptnrs=^AGS&apn_dtid=^YYYYYY^YY^DE&apn_uid=d15f01ad-eeeb-4832-bbce-50739c7ef103&apn_sauid=7534D0E2-A357-4214-A773-E1BA51C673C7

SearchScopes: HKCU - {E0FACEAB-BDD2-4A71-A76C-824B85A6B5B4} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-27/4?mpre=hxxp://shop.ebay.de/?oemInLn=ieSrch-Q312&_nkw={searchTerms}

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM-x32 - TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\PROGRA~2\TerraTec\TERRAT~1\THCDES~1.DLL (TerraTec Electronic GmbH)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

==================== Services (Whitelisted) =================
 

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-07-01] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-07-01] (Avira Operations GmbH & Co. KG)

R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [589368 2013-07-01] (Avira Operations GmbH & Co. KG)

R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [211584 2012-08-13] (Qualcomm Atheros Commnucations)

R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)

S3 NetworkSupport; C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkSupport.exe [623784 2012-08-18] (Sony Corporation)

R2 PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [474208 2012-07-27] (Sony Corporation)

R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [156672 2012-08-06] ()

R3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1266336 2012-07-24] (Sony Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [14920 2013-01-29] (Microsoft Corporation)

R2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-08-13] (Atheros)

S2 McOobeSv2; "C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe" /McCoreSvc [x]
 

==================== Drivers (Whitelisted) ====================
 

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-03-29] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130016 2013-03-29] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-03-29] (Avira Operations GmbH & Co. KG)

R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [76952 2012-08-13] (Qualcomm Atheros)

R3 BTATH_VDP; C:\Windows\system32\drivers\btath_vdp.sys [427416 2012-08-13] (Qualcomm Atheros)

R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)

R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)

R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-21] (Synaptics Incorporated)

R3 SOWS; C:\Windows\System32\drivers\sows.sys [24280 2012-06-11] (Sony Corporation)
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-08-27 19:57 - 2013-08-27 19:57 - 00000040 ____A C:\Windows\system32\sstate_prev.sdt

2013-08-27 19:57 - 2013-08-27 19:57 - 00000000 ____A C:\Windows\system32\sstates.sdt
 

==================== One Month Modified Files and Folders =======
 

2013-08-27 20:02 - 2013-01-10 10:56 - 01185038 ____A C:\Windows\WindowsUpdate.log

2013-08-27 20:01 - 2013-01-10 12:59 - 00003594 ____A C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3955468186-1342653315-40924789-1001

2013-08-27 20:01 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\system32\sru

2013-08-27 19:57 - 2013-08-27 19:57 - 00000040 ____A C:\Windows\system32\sstate_prev.sdt

2013-08-27 19:57 - 2013-08-27 19:57 - 00000000 ____A C:\Windows\system32\sstates.sdt

2013-08-26 18:29 - 2013-01-10 10:18 - 00753134 ____A C:\Windows\system32\perfh007.dat

2013-08-26 18:29 - 2013-01-10 10:18 - 00155826 ____A C:\Windows\system32\perfc007.dat

2013-08-26 18:29 - 2012-07-26 09:28 - 01745416 ____A C:\Windows\system32\PerfStringBackup.INI

2013-08-26 18:26 - 2012-07-26 09:21 - 00028433 ____A C:\Windows\setupact.log

2013-08-26 18:24 - 2012-07-26 09:22 - 00000006 ___AH C:\Windows\Tasks\SA.DAT

2013-08-26 18:23 - 2012-08-03 04:22 - 00014176 ____A C:\Windows\PFRO.log

2013-08-25 15:34 - 2012-07-26 09:52 - 00000000 ____D C:\Program Files\Windows Journal

2013-08-25 15:34 - 2012-07-26 07:26 - 00262144 __ASH C:\Windows\system32\config\BBI

2013-08-25 15:32 - 2013-02-09 16:47 - 78185248 ____A (Microsoft Corporation) C:\Windows\system32\MRT.exe

2013-08-25 14:23 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\AUInstallAgent
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-07-11 12:56
 

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

und das zweite :

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-07-2013 04

Ran by user at 2013-08-27 20:11:47

Running from C:\Users\user\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Installed Programs =======================
 

   

Adobe Reader X MUI (x32 Version: 10.0.0)

Agatha Christie - Death on the Nile (x32 Version: 2.2.0.98)

Aloha TriPeaks (x32 Version: 2.2.0.98)

aptics Pointing Device Driver (Version: 16.2.10.5)

Avira Free Antivirus (x32 Version: 13.0.0.3737)

Bejeweled 3 (x32 Version: 2.2.0.98)

Build-a-lot: On Vacation (x32 Version: 2.2.0.110)

Chronicles of Albian (x32 Version: 2.2.0.110)

Chuzzle Deluxe (x32 Version: 2.2.0.95)

Cradle Of Egypt Collector's Edition (x32 Version: 2.2.0.110)

CyberLink Power2Go 8 (x32 Version: 8.0.0.1923)

CyberLink PowerDVD (x32 Version: 9.0.5601.52)

FATE (x32 Version: 2.2.0.97)

FDUx86 (x32 Version: 1.0.0)

Heroes of Hellas 3: Athens (x32 Version: 2.2.0.110)

Intel AppUp(SM) center (x32 Version: 03.05.11)

Intel(R) Management Engine Components (x32 Version: 8.1.0.1252)

Intel(R) Processor Graphics (x32 Version: 9.17.10.2828)

Intel(R) Rapid Storage Technology (x32 Version: 11.5.3.1004)

Intel(R) SDK for OpenCL - CPU Only Runtime Package (x32 Version: 2.0.0.37149)

Intel® Trusted Connect Service Client (Version: 1.24.388.1)

Java Auto Updater (x32 Version: 2.1.6.0)

Java(TM) 7 Update 5 (64-bit) (Version: 7.0.50)

Java(TM) 7 Update 5 (x32 Version: 7.0.50)

KUx86 (x32 Version: 1.0.0)

LibreOffice 4.0.0.3 (x32 Version: 4.0.0.3)

Luxor HD (x32 Version: 2.2.0.110)

Mahjongg Artifacts (x32 Version: 2.2.0.110)

Microsoft Office (x32 Version: 14.0.6120.5004)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)

Mystery of Mortlake Mansion (x32 Version: 2.2.0.98)

Mystery P.I. - The London Caper (x32 Version: 2.2.0.95)

Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98)

PlayMemories Home (x32 Version: 6.3.02.07270)

Polar Bowler (x32 Version: 2.2.0.97)

Qualcomm Atheros Bluetooth Suite (64) (Version: 8.0.0.206)

Realtek High Definition Audio Driver (x32 Version: 6.0.1.6695)

Realtek PCIE Card Reader (x32 Version: 6.1.8400.28121)

Restore (x32 Version: 1.0.0)

Shared C Run-time for x64 (Version: 10.0.0)

SSLx64 (Version: 1.0.0)

SSLx86 (x32 Version: 1.0.0)

TerraTec Home Cinema (x32 Version: 6.15.11)

Update Installer for WildTangent Games App (x32)

VAIO - Xperia Link (x32 Version: 1.0.0.08170)

VAIO Care (Version: 8.0.0.08150)

VAIO Control Center (x32 Version: 6.0.0.08200)

VAIO Data Restore Tool (x32 Version: 1.10.0.07270)

VAIO Easy Connect (x32 Version: 1.2.0.08150)

VAIO Gate (x32 Version: 3.0.0.08140)

VAIO Gate Default (x32 Version: 3.0.0.08060)

VAIO Gesture Control (x32 Version: 2.0.0.08240)

VAIO Image Optimizer (x32 Version: 3.0.00.08170)

VAIO Improvement (x32 Version: 2.0.0.08090)

VAIO Media Server Settings (Version: 1.0.0.08240)

VAIO Movie Creator Template Data (x32 Version: 4.0.00.08170)

VAIO Update (x32 Version: 6.0.0.08170)

VAIO*CPU-Lüfterdiagnose (x32 Version: 1.1.0.09200)

VAIO-Handbuch (x32 Version: 3.0.0.08100)

VAIO-Support für Übertragungen (x32 Version: 1.8.0.08212)

VCCx64 (Version: 1.0.0)

VCCx86 (x32 Version: 1.0.0)

VGClientX64 (Version: 1.0.0)

VHD (x32 Version: 1.0.0)

Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.98)

VIx64 (Version: 1.0.0)

VIx86 (x32 Version: 1.0.0)

VMLx86 (x32 Version: 1.0.0)

VPMx64 (Version: 1.0.0)

VSSTx64 (Version: 1.0.0)

VSSTx86 (x32 Version: 1.0.0)

VU5x64 (Version: 1.0.0)

VU5x86 (x32 Version: 1.0.0)

VUx64 (Version: 1.0.0)

VUx86 (x32 Version: 1.0.0)

VWSTx86 (x32 Version: 1.0.0)

WildTangent Games App (x32 Version: 4.0.8.7)

WildTangent-Spiele (x32 Version: 1.0.3.0)

XperiaLinkx86 (x32 Version: 1.0.0)
 

==================== Restore Points  =========================
 

14-06-2013 16:11:30 Windows Update

24-06-2013 08:42:13 Geplanter Prüfpunkt

02-07-2013 17:21:28 Geplanter Prüfpunkt

11-07-2013 10:56:34 Windows Update

25-08-2013 13:31:58 Windows Update
 

==================== Hosts content: ==========================
 

2012-07-26 07:26 - 2012-07-26 07:26 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {0040D241-D779-4399-A62D-2F0C63CEE361} - System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3955468186-1342653315-40924789-1001

Task: {10D85952-E3F6-47A1-96CF-5E1C2D874EA6} - System32\Tasks\Microsoft\Windows\SystemRestore\SR => C:\Windows\system32\srtasks.exe [2012-07-26] (Microsoft Corporation)

Task: {13A2AC02-B682-48CC-9155-2E2673580117} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64 Critical

Task: {17644F17-DC4C-4AC8-9444-7AAA52EB5CDC} - System32\Tasks\Microsoft\Windows\NetCfg\BindingWorkItemQueueHandler

Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => C:\Windows\system32\rundll32.exe [2012-07-26] (Microsoft Corporation)

Task: {1DB7C2F1-876C-4F24-AD17-8428211113F9} - System32\Tasks\Microsoft\Windows\MemoryDiagnostic\ProcessMemoryDiagnosticEvents

Task: {214B24F4-FEB4-4C59-AF1F-70136065199C} - System32\Tasks\Microsoft\Windows\Shell\IndexerAutomaticMaintenance

Task: {23700E5C-0E77-499D-908A-415D5C6252F4} - System32\Tasks\Microsoft\Windows\Plug and Play\Device Install Group Policy

Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => C:\Windows\System32\rundll32.exe [2012-07-26] (Microsoft Corporation)

Task: {2C6B9EA8-7F5A-4ABA-BF96-8D352D02A743} - System32\Tasks\Microsoft\Windows\Device Setup\Metadata Refresh

Task: {2E030FA7-3D7C-4E1D-8CFE-56ADB26FD402} - System32\Tasks\Microsoft\Windows\PI\Sqm-Tasks

Task: {3054485A-F517-4E95-9977-4DD827B1E9B3} - System32\Tasks\Microsoft\Windows\WS\Badge Update

Task: {378401BA-A703-444A-A79C-3C47AD2DC5B6} - System32\Tasks\Microsoft\Windows\TaskScheduler\Maintenance Configurator

Task: {3AE164E7-30CD-40BC-9422-3EC7A5618965} - System32\Tasks\Microsoft\Windows\WS\WSTask

Task: {3C490ABD-D849-41AF-9AC4-87DD759B0996} - System32\Tasks\Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem

Task: {3EADC0F3-CD3F-4580-97EA-6EAF5169F1CB} - System32\Tasks\Sony Corporation\VAIO Care\VCSelfHeal => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-08-15] (Sony Corporation)

Task: {4073C1B3-6E16-4AA8-B7F3-C6A6D35D5071} - System32\Tasks\Microsoft\Windows\TPM\Tpm-Maintenance

Task: {42C1AA11-C2EF-4525-89D5-E3C6F63A97A8} - System32\Tasks\Sony Corporation\VAIO Improvement\VAIOImprovementMonitorUser => C:\Program Files\Sony\VAIO Improvement\vim.exe [2012-08-09] (Sony Corporation)

Task: {44B3F1B8-5943-4072-8D8C-A9484676AC44} - System32\Tasks\Microsoft\Windows\Live\Roaming\SynchronizeWithStorage

Task: {483A8F5C-5D26-44B5-B49E-AF6741D1BBEB} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => C:\Windows\System32\MbaeParserTask.exe [2012-07-26] (Microsoft Corporation)

Task: {4B952129-9AE9-41A3-BE2B-8AD2E06F66B6} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTaskLogon

Task: {509A5CF8-A5A8-4BC4-8240-57292AB6EC8F} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files (x86)\Ask.com\UpdateTask.exe No File

Task: {5755E746-D7ED-4C20-A472-66C11834CDE4} - System32\Tasks\Microsoft\Windows\TaskScheduler\Manual Maintenance

Task: {5AD43981-4E4E-4EF5-92D4-D9448B77D22B} - System32\Tasks\Sony Corporation\VAIO Control Center\Level4Month => C:\Program Files (x86)\Sony\VAIO Control Center\WBCBatteryCare.exe [2012-08-18] (Sony Corporation)

Task: {5C4EFB77-EFA6-45DF-A373-D795C0725BFF} - System32\Tasks\Microsoft\Windows\Plug and Play\Device Install Reboot Required

Task: {627441F3-8526-4B62-BF9A-1A3EA414E71A} - System32\Tasks\Microsoft\Windows\SpacePort\SpaceAgentTask => C:\Windows\system32\SpaceAgent.exe [2012-07-26] (Microsoft Corporation)

Task: {658DD32F-21C6-495B-93CB-2E65A61331C4} - System32\Tasks\Sony Corporation\VAIO Improvement\VAIOImprovementUploader => C:\Program Files\Sony\VAIO Improvement\viuploader.exe [2012-08-09] (Sony Corporation)

Task: {6A4B8552-D01F-480A-B442-28A14AF4A9EE} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start => C:\Windows\system32\sc.exe [2012-07-26] (Microsoft Corporation)

Task: {6E9DE125-5583-4031-B572-FEE48F25CFFF} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyMonitor => C:\Windows\System32\wpcmon.exe [2012-09-20] (Microsoft Corporation)

Task: {6FBCF1E4-04F3-465D-97F2-0960FB0CE3A9} - System32\Tasks\Sony Corporation\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2012-08-14] (Sony Corporation)

Task: {6FDDEA7C-6310-428D-AEB2-54FFC72811EF} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319

Task: {7163E81A-4604-4470-89E8-DC07D67CBDCB} - System32\Tasks\Sony Corporation\VAIO Care\VCMetrics => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-08-15] (Sony Corporation)

Task: {74096F94-B654-4DB0-96F5-3C3408B92FE3} - System32\Tasks\Microsoft\Windows\PI\Secure-Boot-Update

Task: {7BBB1E6F-A12F-4AF8-B9B4-49374F707A70} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update => C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe [2012-08-20] (Sony Corporation)

Task: {7C307548-ED4E-4E9B-8E86-8A9CE064CFDF} - System32\Tasks\Sony Corporation\VAIO Care\VAIO Care => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-08-15] (Sony Corporation)

Task: {7D9A9A1C-499C-40A6-8F8A-5BCC4CC9A87C} - System32\Tasks\Microsoft\Windows\TaskScheduler\Regular Maintenance

Task: {7F91D832-35C6-48C3-974D-506EDD2B4DE3} - System32\Tasks\Microsoft\Windows\WindowsUpdate\AUFirmwareInstall

Task: {831FCEAF-46A8-4EB5-961F-0E18EF595CE1} - System32\Tasks\Microsoft\Windows\WindowsUpdate\AUSessionConnect

Task: {845CB020-68B5-4C6B-9876-7BEC7B3E27AC} - System32\Tasks\Microsoft\Windows\TaskScheduler\Idle Maintenance

Task: {87354DAA-66DF-4B41-9346-15958D96E1D2} - System32\Tasks\Microsoft\Windows\FileHistory\File History (maintenance mode)

Task: {8C769A03-9A6E-40F7-A096-8F6E595F68F8} - System32\Tasks\VHDInformationCheck => %ProgramFiles(x86)%\Sony\VAIO Recovery\plugins\InformationCheck.exe No File

Task: {91E699B6-8A30-49BC-946A-F45EF4C6B098} - System32\Tasks\CLMLSvc_P2G8 => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [2012-06-08] (CyberLink)

Task: {921A1D4E-32FB-46D7-B6C0-6F467884074D} - System32\Tasks\Microsoft\Windows\WS\Sync Licenses

Task: {9479EF8E-11D4-41B3-9783-CC65070D592D} - System32\Tasks\Microsoft\Windows\Time Synchronization\ForceSynchronizeTime

Task: {94DCF254-64FB-4C4E-8E12-5F4055C10C2A} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64

Task: {989A7C6D-BE82-4C3C-AF96-6116039E336B} - System32\Tasks\Microsoft\Windows\MemoryDiagnostic\RunFullMemoryDiagnostic

Task: {A174FAB5-BEE4-4398-8A62-F0AF172F4524} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-08-15] (Sony Corporation)

Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => C:\Windows\System32\rundll32.exe [2012-07-26] (Microsoft Corporation)

Task: {A800277E-E202-4492-AD38-3312641CBC04} - System32\Tasks\Microsoft\Windows\Live\Roaming\MaintenanceTask

Task: {AB62FA47-2C99-44B1-A5D0-D4161423BE43} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyRefresh

Task: {AB96B97B-39C2-46A2-876A-EEB6AE199033} - System32\Tasks\Microsoft\Windows\Servicing\StartComponentCleanup => C:\Windows\System32\dism.exe [2012-07-26] (Microsoft Corporation)

Task: {AC6259DE-AC59-459E-849E-6ADFFD1ADE63} - System32\Tasks\Microsoft\Windows\Shell\CreateObjectTask

Task: {AEB0B5BD-B9E5-458A-898A-E559BD9EB51B} - System32\Tasks\Microsoft\Windows\SettingSync\BackgroundUploadTask

Task: {AF549BD8-337C-4BF7-8681-36A182E30507} - System32\Tasks\Microsoft\Windows\Chkdsk\ProactiveScan

Task: {B2AD9A46-4125-4EBB-9A67-7977A92CBEE5} - System32\Tasks\Sony Corporation\VAIO Control Center\NetworkSetting\NetworkSetting Logon Start => C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkClient No File

Task: {B87A0B38-4487-4997-BD25-1FDE01AC10DD} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\BrowserChoice\browserchoice.exe [2012-08-15] (Microsoft Corporation)

Task: {BA328220-AAA4-4209-A20C-14650B8CE4A9} - System32\Tasks\CLVDLauncher => C:\Program Files (x86)\CyberLink\Power2Go8\CLVDLauncher.exe [2012-07-24] (CyberLink Corp.)

Task: {BC76AEF7-2CF0-4EB6-B65B-A8803E0B5E12} - System32\Tasks\Microsoft\Windows\AppID\SmartScreenSpecific

Task: {C1ACCD1E-4385-4FB2-B5E4-7F2A57A626A2} - System32\Tasks\Microsoft\Windows\Data Integrity Scan\Data Integrity Scan

Task: {C1C409C3-4E3A-46A5-AEE5-414FFBAFD44A} - System32\Tasks\Sony Corporation\VAIO Care\VCCheckIolo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-08-15] (Sony Corporation)

Task: {C463FD1E-31C7-4C20-AB65-08E514CA152D} - System32\Tasks\Microsoft\Windows\IME\SQM data sender

Task: {C629EA00-26F6-47E1-BDA9-0E85AF3A0FB7} - System32\Tasks\Microsoft\Windows\WindowsUpdate\AUScheduledInstall

Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => C:\Windows\system32\rundll32.exe [2012-07-26] (Microsoft Corporation)

Task: {C73F7349-9DE0-4360-A299-6B9488043FE3} - System32\Tasks\Sony Corporation\VAIO Control Center\Level4Daily => C:\Program Files (x86)\Sony\VAIO Control Center\WBCBatteryCare.exe [2012-08-18] (Sony Corporation)

Task: {CD1054FF-8005-4904-8B9C-436EAB1E2021} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTaskNetwork

Task: {D204AE9F-478B-478B-8A59-67B91A776CC6} - System32\Tasks\Sony Corporation\VAIO Improvement\VAIOImprovementMonitorSystem => C:\Program Files\Sony\VAIO Improvement\vim.exe [2012-08-09] (Sony Corporation)

Task: {D7FAD828-969F-42F1-AD75-E03C1A9E4836} - System32\Tasks\Sony Corporation\VAIO Care\CRMReminder => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-08-15] (Sony Corporation)

Task: {DBCF6E1B-CE0A-441E-B7A5-219C8BE50C65} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 Critical

Task: {DECE5921-598D-454B-9A04-B2DE95EFC1B3} - System32\Tasks\Microsoft\Windows\Data Integrity Scan\Data Integrity Scan for Crash Recovery

Task: {E4DFE66F-E089-4CC3-A70F-957223D565F4} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask

Task: {E8DAA09B-DF2A-4951-9134-6FA9587793F9} - System32\Tasks\Microsoft\Windows\Plug and Play\Sysprep Generalize Drivers => C:\Windows\System32\drvinst.exe [2012-09-20] (Microsoft Corporation)

Task: {EBAE0B6E-6B99-4B7F-9F30-AD2383B71606} - System32\Tasks\Sony Corporation\VAIO Gesture Control\VCGULogonTask => C:\Program Files (x86)\Sony\VAIO Camera Gesture Utility\VCGU.exe [2012-08-04] (Sony Corporation)

Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => C:\Windows\system32\rundll32.exe [2012-07-26] (Microsoft Corporation)

Task: {ED0C1F69-C3A2-41EA-B8C3-3F0D83A1F6C0} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\BthSQM
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (08/27/2013 08:07:32 PM) (Source: Application Hang) (User: )

Description: Programm IEXPLORE.EXE, Version 10.0.9200.16537 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 1750
 

Startzeit: 01cea350046d04db
 

Endzeit: 0
 

Anwendungspfad: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
 

Berichts-ID: 811da2d9-0f43-11e3-be90-083e8ed27c44
 

Vollständiger Name des fehlerhaften Pakets: 
 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (08/26/2013 06:29:29 PM) (Source: SampleCollector) (User: )

Description: CreateFile:SState: Failed with error 0x3: Das System kann den angegebenen Pfad nicht finden.
 

Error: (07/11/2013 05:37:25 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: VAIO)

Description: Bei der Aktivierung der App „microsoft.windowsphotos_8wekyb3d8bbwe!Microsoft.WindowsLive.ModernPhotos“ ist folgender Fehler aufgetreten: -2144927142. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
 

Error: (07/11/2013 05:37:25 PM) (Source: Application Hang) (User: )

Description: Programm wwahost.exe, Version 6.2.9200.16420 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 112c
 

Startzeit: 01ce7e4c7668e08f
 

Endzeit: 4294967295
 

Anwendungspfad: C:\Windows\system32\wwahost.exe
 

Berichts-ID: be9e16e4-ea3f-11e2-be8f-083e8ed27c44
 

Vollständiger Name des fehlerhaften Pakets: microsoft.windowsphotos_16.4.4204.712_x64__8wekyb3d8bbwe
 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Microsoft.WindowsLive.ModernPhotos
 

Error: (07/11/2013 05:37:06 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: VAIO)

Description: Die App „microsoft.windowsphotos_8wekyb3d8bbwe!Microsoft.WindowsLive.ModernPhotos“ wurde nicht innerhalb der vorgesehenen Zeit gestartet.
 

Error: (07/11/2013 00:33:11 PM) (Source: Customer Experience Improvement Program) (User: )

Description: 80070005
 

Error: (07/08/2013 00:38:24 PM) (Source: Application Hang) (User: )

Description: Programm IEXPLORE.EXE, Version 10.0.9200.16537 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 294
 

Startzeit: 01ce7bc70ce91eec
 

Endzeit: 28
 

Anwendungspfad: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
 

Berichts-ID: 7adf4058-e7ba-11e2-be8e-083e8ed27c44
 

Vollständiger Name des fehlerhaften Pakets: 
 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (07/07/2013 00:17:37 PM) (Source: Microsoft-Windows-WMI) (User: NT-AUTORITÄT)

Description: Der Ereignisfilter mit der Abfrage "select * from __InstanceModificationEvent where targetinstance isa '__ArbitratorConfiguration'" konnte im Namespace "//./root" aufgrund des Fehlers "0x80041033" nicht reaktiviert werden. Solange dieses Problem besteht, können mit diesem Filter keine Ereignisse übermittelt werden.
 

Error: (07/07/2013 00:17:37 PM) (Source: Microsoft-Windows-WMI) (User: NT-AUTORITÄT)

Description: Vom Ereignisanbieter "$Core" wurde versucht, die Abfrage "select * from __TimerEvent" zu registrieren, deren Zielklasse "__TimerEvent" im Namespace "//./root/CIMV2" nicht vorhanden ist. Die Abfrage wird ignoriert.
 

Error: (07/07/2013 00:17:37 PM) (Source: Microsoft-Windows-WMI) (User: NT-AUTORITÄT)

Description: Vom Ereignisanbieter "$Core" wurde versucht, die Abfrage "select * from __SystemEvent" zu registrieren, deren Zielklasse "__SystemEvent" im Namespace "//./root/CIMV2" nicht vorhanden ist. Die Abfrage wird ignoriert.
 
 

System errors:

=============

Error: (08/27/2013 07:57:01 PM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst SampleCollector erreicht.
 

Error: (08/27/2013 07:56:31 PM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst SampleCollector erreicht.
 

Error: (08/26/2013 06:29:23 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "VAIO Care Performance Service" wurde nicht richtig gestartet.
 

Error: (08/26/2013 06:24:57 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "McAfee OOBE Service2" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (07/11/2013 05:36:48 PM) (Source: Virtual Disk Service) (User: )

Description: Unerwarteter Anbieterfehler. Möglicherweise kann das Problem durch erneutes Starten des Dienstes behoben werden. Fehlercode: 8007001F@02000014
 

Error: (07/11/2013 05:16:53 PM) (Source: Virtual Disk Service) (User: )

Description: Unerwarteter Anbieterfehler. Möglicherweise kann das Problem durch erneutes Starten des Dienstes behoben werden. Fehlercode: 8007001F@02000014
 

Error: (07/08/2013 00:45:17 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "McAfee OOBE Service2" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (07/08/2013 00:43:59 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst Windows Update konnte nach dem Empfang eines Preshutdown-Steuerelements nicht richtig heruntergefahren werden.
 

Error: (07/07/2013 02:04:37 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "McAfee OOBE Service2" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (07/07/2013 00:21:01 PM) (Source: DCOM) (User: VAIO)

Description: 1084ShellHWDetectionNicht verfügbar{DD522ACC-F821-461A-A407-50B198B896DC}
 
 

Microsoft Office Sessions:

=========================

Error: (08/27/2013 08:07:32 PM) (Source: Application Hang)(User: )

Description: IEXPLORE.EXE10.0.9200.16537175001cea350046d04db0C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE811da2d9-0f43-11e3-be90-083e8ed27c44
 

Error: (08/26/2013 06:29:29 PM) (Source: SampleCollector)(User: )

Description: CreateFile:SState: Failed with error 0x3: Das System kann den angegebenen Pfad nicht finden.
 

Error: (07/11/2013 05:37:25 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: VAIO)

Description: microsoft.windowsphotos_8wekyb3d8bbwe!Microsoft.WindowsLive.ModernPhotos-2144927142
 

Error: (07/11/2013 05:37:25 PM) (Source: Application Hang)(User: )

Description: wwahost.exe6.2.9200.16420112c01ce7e4c7668e08f4294967295C:\Windows\system32\wwahost.exebe9e16e4-ea3f-11e2-be8f-083e8ed27c44microsoft.windowsphotos_16.4.4204.712_x64__8wekyb3d8bbweMicrosoft.WindowsLive.ModernPhotos
 

Error: (07/11/2013 05:37:06 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: VAIO)

Description: microsoft.windowsphotos_8wekyb3d8bbwe!Microsoft.WindowsLive.ModernPhotos
 

Error: (07/11/2013 00:33:11 PM) (Source: Customer Experience Improvement Program)(User: )

Description: 80070005
 

Error: (07/08/2013 00:38:24 PM) (Source: Application Hang)(User: )

Description: IEXPLORE.EXE10.0.9200.1653729401ce7bc70ce91eec28C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE7adf4058-e7ba-11e2-be8e-083e8ed27c44
 

Error: (07/07/2013 00:17:37 PM) (Source: Microsoft-Windows-WMI)(User: NT-AUTORITÄT)

Description: //./rootselect * from __InstanceModificationEvent where targetinstance isa '__ArbitratorConfiguration'0x80041033
 

Error: (07/07/2013 00:17:37 PM) (Source: Microsoft-Windows-WMI)(User: NT-AUTORITÄT)

Description: $Coreselect * from __TimerEvent__TimerEvent//./root/CIMV2
 

Error: (07/07/2013 00:17:37 PM) (Source: Microsoft-Windows-WMI)(User: NT-AUTORITÄT)

Description: $Coreselect * from __SystemEvent__SystemEvent//./root/CIMV2
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 40%

Total physical RAM: 3973.27 MB

Available physical RAM: 2378.52 MB

Total Pagefile: 5317.27 MB

Available Pagefile: 3586.92 MB

Total Virtual: 8192 MB

Available Virtual: 8191.77 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:435.76 GB) (Free:380.04 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 00000000)
 

Partition: GPT Partition Type

==================== End Of Log ============================

Soll ich das Junkware Removal Tool auch mit trotzdem auführen machen oder es weglassen ?

erstmal das frische FRST
FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-08-2013

Ran by user (administrator) on 28-08-2013 19:59:45

Running from C:\Users\user\Downloads

Windows 8 (X64) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe

(Microsoft Corporation) C:\Windows\system32\dashost.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe

(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgr.exe

(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe

(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe

(Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE

(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

() C:\Program Files\Sony\VAIO Care\VCPerfService.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Improvement\vim.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe

(Microsoft Corporation) C:\Windows\System32\vds.exe

(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe

(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkClient.EXE

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Qualcomm Atheros) C:\Program Files (x86)\Bluetooth Suite\BtTray.exe

(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE

(Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe

(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

() C:\Program Files\Sony\VAIO Care\listener.exe

(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe

(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Improvement\vim.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1214608 2012-08-20] (Realtek Semiconductor)

HKLM\...\Run: [BtTray] - C:\Program Files (x86)\Bluetooth Suite\BtTray.exe [764032 2012-08-13] (Qualcomm Atheros)

HKLM\...\Run: [BtvStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [127616 2012-08-13] (Atheros Communications)

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-21] (Synaptics Incorporated)

HKCU\...\Run: [qcgce2mrvjq91kk1e7pnbb19m52fx] - C:\Users\user\AppData\Local\Temp\qyegdoxqdtlkqfdgj.exe [x] <===== ATTENTION

HKLM-x32\...\Run: [ISBMgr.exe] - C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [68776 2012-08-18] (Sony Corporation)

HKLM-x32\...\Run: [PMBVolumeWatcher] - C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [724576 2012-07-27] (Sony Corporation)

HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - c:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [35736 2010-11-15] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [Adobe ARM] - c:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [932288 2010-11-15] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [Intel AppUp(SM) center] - C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [152896 2012-06-25] (Intel Corporation)

HKLM-x32\...\Run: [] -  [x]

HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [345144 2013-07-01] (Avira Operations GmbH & Co. KG)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://sony13.msn.com

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://sony13.msn.com

HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://vaioportal.sony.eu

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://vaioportal.sony.eu

SearchScopes: HKLM - DefaultScope value is missing.

SearchScopes: HKCU - DefaultScope {B384A03C-8AF0-4E98-8D5E-7B65CCFE377C} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASEJS

SearchScopes: HKCU - {B384A03C-8AF0-4E98-8D5E-7B65CCFE377C} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASEJS

SearchScopes: HKCU - {C718F4B8-8E1C-498F-B23C-62E694896DCB} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10261&src=kw&q={searchTerms}&locale=de_DE&apn_ptnrs=^AGS&apn_dtid=^YYYYYY^YY^DE&apn_uid=d15f01ad-eeeb-4832-bbce-50739c7ef103&apn_sauid=7534D0E2-A357-4214-A773-E1BA51C673C7

SearchScopes: HKCU - {E0FACEAB-BDD2-4A71-A76C-824B85A6B5B4} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-27/4?mpre=hxxp://shop.ebay.de/?oemInLn=ieSrch-Q312&_nkw={searchTerms}

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM-x32 - TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\PROGRA~2\TerraTec\TERRAT~1\THCDES~1.DLL (TerraTec Electronic GmbH)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

==================== Services (Whitelisted) =================
 

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-07-01] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-07-01] (Avira Operations GmbH & Co. KG)

R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [589368 2013-07-01] (Avira Operations GmbH & Co. KG)

R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [211584 2012-08-13] (Qualcomm Atheros Commnucations)

R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)

S3 NetworkSupport; C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkSupport.exe [623784 2012-08-18] (Sony Corporation)

R2 PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [474208 2012-07-27] (Sony Corporation)

R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [156672 2012-08-06] ()

S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [972000 2012-08-08] (Sony Corporation)

R3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1266336 2012-07-24] (Sony Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [14920 2013-01-29] (Microsoft Corporation)

R2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-08-13] (Atheros)

S2 McOobeSv2; "C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe" /McCoreSvc [x]
 

==================== Drivers (Whitelisted) ====================
 

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-03-29] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130016 2013-03-29] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-03-29] (Avira Operations GmbH & Co. KG)

R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [76952 2012-08-13] (Qualcomm Atheros)

R3 BTATH_VDP; C:\Windows\system32\drivers\btath_vdp.sys [427416 2012-08-13] (Qualcomm Atheros)

R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)

R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)

R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-21] (Synaptics Incorporated)

R3 SOWS; C:\Windows\System32\drivers\sows.sys [24280 2012-06-11] (Sony Corporation)
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-08-27 20:39 - 2013-08-27 20:39 - 00187940 _____ C:\Windows\system32\s000000.dat

2013-08-27 19:57 - 2013-08-27 19:57 - 00000040 _____ C:\Windows\system32\sstate_prev.sdt

2013-08-27 19:57 - 2013-08-27 19:57 - 00000000 _____ C:\Windows\system32\sstates.sdt
 

==================== One Month Modified Files and Folders =======
 

2013-08-28 19:59 - 2013-08-28 19:59 - 01579080 _____ (Farbar) C:\Users\user\Downloads\FRST64.exe

2013-08-28 19:55 - 2013-01-10 12:59 - 00003594 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3955468186-1342653315-40924789-1001

2013-08-28 19:55 - 2013-01-10 10:56 - 01353317 _____ C:\Windows\WindowsUpdate.log

2013-08-27 20:39 - 2013-08-27 20:39 - 00187940 _____ C:\Windows\system32\s000000.dat

2013-08-27 19:57 - 2013-08-27 19:57 - 00000040 _____ C:\Windows\system32\sstate_prev.sdt

2013-08-27 19:57 - 2013-08-27 19:57 - 00000000 _____ C:\Windows\system32\sstates.sdt

2013-08-26 18:29 - 2013-01-10 10:18 - 00753134 _____ C:\Windows\system32\perfh007.dat

2013-08-26 18:29 - 2013-01-10 10:18 - 00155826 _____ C:\Windows\system32\perfc007.dat

2013-08-26 18:29 - 2012-07-26 09:28 - 01745416 _____ C:\Windows\system32\PerfStringBackup.INI

2013-08-26 18:26 - 2012-07-26 09:21 - 00028433 _____ C:\Windows\setupact.log

2013-08-26 18:24 - 2012-07-26 09:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-08-26 18:23 - 2012-08-03 04:22 - 00014176 _____ C:\Windows\PFRO.log

2013-08-25 15:34 - 2012-07-26 09:52 - 00000000 ____D C:\Program Files\Windows Journal

2013-08-25 15:34 - 2012-07-26 07:26 - 00262144 ___SH C:\Windows\system32\config\BBI

2013-08-25 15:32 - 2013-02-09 16:47 - 78185248 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2013-08-25 14:23 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\AUInstallAgent
 

Files to move or delete:

====================

C:\Users\user\AppData\Local\Temp\install_reader11_de_gtba_chra_dy_aih.exe

C:\Users\user\AppData\Local\Temp\setup.exe

C:\Users\user\AppData\Local\Temp\nsg4A41.tmp\mcbrwsr2.dll

C:\Users\user\AppData\Local\Temp\nsg4A41.tmp\McInstallerStartup.dll

C:\Users\user\AppData\Local\Temp\nsg4A41.tmp\McInstallerUtil.dll

C:\Users\user\AppData\Local\Temp\nsg4A41.tmp\mcuicnt.exe

C:\Users\user\AppData\Local\Temp\nsg4A41.tmp\OcpStartup.dll

C:\Users\user\AppData\Local\Temp\nsg4A41.tmp\Ocp_LD.dll

C:\Users\user\AppData\Local\Temp\nsg4A41.tmp\OCP_UI.dll

C:\Users\user\AppData\Local\Temp\nsg4A41.tmp\UnInstallOcp.exe

C:\Users\user\AppData\Local\Temp\nsg4A41.tmp\UnMfp.exe
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-08-27 20:22
 

==================== End Of Log ============================

--- --- ---

--- --- ---

und das von eset

Code:

ESETSmartInstaller@High as downloader log:

all ok

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6920

# api_version=3.0.2

# EOSSerial=e32fc621725fb24082b8d5862f54f50c

# engine=14935

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=false

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2013-08-28 07:49:34

# local_time=2013-08-28 09:49:34 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# lang=1033

# osver=6.2.9200 NT 

# compatibility_mode=1799 16775165 100 96 7029 15557134 0 0

# compatibility_mode=5893 16776574 100 94 11399311 37225485 0 0

# scanned=183997

# found=3

# cleaned=0

# scan_time=5896

sh=AD6CA2211362CA74CF862EB7C452FB97FBFC3204 ft=1 fh=81d6674b9266fe81 vn="a variant of Win32/Kryptik.BFXQ trojan" ac=I fn="C:\FRST\Quarantine\qyegdoxqdtlkqfdgj.exe"

sh=3081DA216DE14DBF25016710A559C19BC9F79718 ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="C:\Users\user\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\20\34e21f54-5358eebe"

sh=C7D10D228A2AA319C12017C2DC232328002CEB0C ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="C:\Users\user\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7\4f97a087-52b82170"