| Jana1809 | 04.10.2013 10:30 |
gemacht:
1)
FRST Logfile:
FRST Logfile:
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013
Ran by Nastja (administrator) on NASTJA-PC on 04-10-2013 11:25:17
Running from C:\Users\Nastja\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 10 Organizer\PhotoshopElementsFileAgent.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Sentelic Corporation) C:\Program Files\FSP\FspUip.exe
() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Huawei Technologies Co., Ltd.) C:\Users\Nastja\AppData\Roaming\Mobile Partner\ouc.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
() C:\ProgramData\DatacardService\HWDeviceService64.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
() C:\Program Files (x86)\VTech\DownloadManager\System\AgentMonitor.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
() C:\Program Files (x86)\watchmi\TvdTray.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google) C:\Users\Nastja\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [323584 2009-09-22] (Alcor Micro Corp.)
HKLM\...\Run: [IntelPAN] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-05-02] (Intel(R) Corporation)
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [fspuip] - C:\Program Files\FSP\fspuip.exe [4055552 2010-11-08] (Sentelic Corporation)
HKLM\...\Run: [CDAServer] - C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [438784 2010-12-17] ()
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [499608 2011-06-16] (Adobe Systems Incorporated)
HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [1840720 2007-04-03] (CANON INC.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [{20CE7A7D-BEBB-4723-AC57-6759C1CFFA8E}] - "C:\Users\Nastja\AppData\Local\Temp\woax_easyfirma_setup.exe" /cmdloc "HKCU\Software\WoAx-IT AiTemp\{20CE7A7D-BEBB-4723-AC57-6759C1CFFA8E}" <===== ATTENTION
HKCU\...\Run: [HW_OPENEYE_OUC_Mobile Partner] - C:\Program Files (x86)\Mobile Partner\UpdateDog\ouc.exe [110592 2009-07-27] (Huawei Technologies Co., Ltd.)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [19875432 2013-06-21] (Skype Technologies S.A.)
MountPoints2: F - F:\AutoRun.exe
MountPoints2: G - G:\AutoRun.exe
MountPoints2: {0ae5a1cf-4db7-11e1-85cb-386077d17063} - F:\AutoRun.exe
MountPoints2: {0ae5a1dd-4db7-11e1-85cb-386077d17063} - F:\AutoRun.exe
MountPoints2: {0ae5a21d-4db7-11e1-85cb-386077d17063} - G:\AutoRun.exe
MountPoints2: {0ae5a229-4db7-11e1-85cb-386077d17063} - F:\AutoRun.exe
MountPoints2: {1c1ca837-7c1f-11e1-ba0b-386077d17063} - F:\setup_vmb_lite.exe /checkApplicationPresence
MountPoints2: {1fb1a87a-7c2b-11e1-81cf-386077d17063} - F:\setup_vmb_lite.exe /checkApplicationPresence
MountPoints2: {2bdc6485-92c2-11e1-a3e9-386077d17063} - F:\setup_vmb_lite.exe /checkApplicationPresence
MountPoints2: {3630774c-a677-11e2-861c-001e101f4e71} - F:\AutoRun.exe
MountPoints2: {55ccae1b-a665-11e2-9cca-386077d17063} - F:\AutoRun.exe
MountPoints2: {857b7c63-d27e-11e1-a838-386077d17063} - F:\AutoRun.exe
MountPoints2: {857b7c76-d27e-11e1-a838-386077d17063} - F:\AutoRun.exe
MountPoints2: {932bdc29-0007-11e3-9a17-386077d17063} - F:\HTC_Sync_Manager_PC.exe
MountPoints2: {9fda0cf8-7c2f-11e1-bd4c-386077d17063} - G:\setup_vmb_lite.exe /checkApplicationPresence
MountPoints2: {a0f56f27-a43b-11e2-92de-386077d17063} - F:\AutoRun.exe
MountPoints2: {df4e2c79-7c22-11e1-83a7-386077d17063} - F:\setup_vmb_lite.exe /checkApplicationPresence
MountPoints2: {fd4bdcc7-048c-11e2-98f7-386077d17063} - F:\AutoRun.exe
MountPoints2: {ffbeae2e-7b72-11e1-8d34-386077d17063} - F:\setup_vmb_lite.exe /checkApplicationPresence
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-11-06] (Intel Corporation)
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [CLMLServer] - C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [107816 2010-08-04] (CyberLink)
HKLM-x32\...\Run: [YouCam Mirage] - C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [136488 2011-04-15] (CyberLink)
HKLM-x32\...\Run: [YouCam Tray] - C:\Program Files (x86)\CyberLink\YouCam\YouCam.exe [228448 2011-04-15] (CyberLink Corp.)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] - C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [506712 2011-02-03] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [AlterGeoUpdater] - C:\Program Files (x86)\AlterGeo\Html5 geolocation provider\html5locsvc.exe [27680 2012-02-06] (AlterGeo)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [AgentMonitor] - C:\Program Files (x86)\VTech\DownloadManager\System\AgentMonitor.exe [377800 2012-11-05] ()
HKLM-x32\...\Run: [TkBellExe] - C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe [295512 2013-05-20] (RealNetworks, Inc.)
HKLM-x32\...\Run: [PDFPrint] - C:\Program Files (x86)\PDF24\pdf24.exe [162856 2013-07-22] (Geek Software GmbH)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
AppInit_DLLs: [0 ] ()
AppInit_DLLs-x32: [0 ] ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=MDNF&bmod=MDNF
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2410} URL =
SearchScopes: HKCU - E0690AA23379411E93195F454C10C6A5 URL = hxxp://mystart.incredibar.com/mb188/?search={searchTerms}&loc=IB_DS&a=6OyQOroS9m&i=26
SearchScopes: HKCU - {4E35CBE0-1CED-4753-ADE8-A472860FD140} URL = hxxp://de.search.yahoo.com/search?ei=utf-8&fr=chr-greentree_ie&type=937811&ilc=12&p={searchTerms}
SearchScopes: HKCU - {E88E0043-C9D4-4e33-8555-FEE4F5B63060} URL = hxxp://go.mail.ru/search?q={searchTerms}&utf8in=1&fr=ietb
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: AlterGeoBHO Class - {9BFBA68E-E21B-458E-AE12-FE85E903D2C0} - C:\ProgramData\AlterGeo\Update for Html5 geolocation provider\npHtml5loc.dll (Altergeo)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
DPF: HKLM {9BE31822-FDAD-461B-AD51-BE1D1C159921} hxxp://iptv.kartina.tv/files/bin/VLC%20TV%20Player.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1
Tcpip\..\Interfaces\{208B6640-A70B-4C5E-AF56-1D549DAA560B}: [NameServer]193.189.244.206 193.189.244.225
Tcpip\..\Interfaces\{57F726B6-A70E-4406-AEDC-B3E44FD7062D}: [NameServer]193.189.244.225 193.189.244.206
Tcpip\..\Interfaces\{A595D632-B34A-4B3A-BB09-8033A9E87E86}: [NameServer]193.189.244.225 193.189.244.206
FireFox:
========
FF ProfilePath: C:\Users\Nastja\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox
FF NetworkProxy: "ftp", "127.0.0.1"
FF NetworkProxy: "ftp_port", 4001
FF NetworkProxy: "gopher", "127.0.0.1"
FF NetworkProxy: "gopher_port", 4001
FF NetworkProxy: "http", "127.0.0.1"
FF NetworkProxy: "http_port", 4001
FF NetworkProxy: "socks_remote_dns", true
FF NetworkProxy: "ssl", "127.0.0.1"
FF NetworkProxy: "ssl_port", 4001
FF NetworkProxy: "type", 1
FF Homepage: user_pref("browser.startup.homepage", );
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @canon.com/EPPEX - C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin-x32: @java.com/DTPlugin,version=10.9.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.9.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @real.com/nppl3260;version=16.0.2.32 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.2 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.2 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.2 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.2.32 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=1.0.5.0 - C:\Program Files (x86)\Kartina.TV\VLC\npvlc.dll (the VideoLAN Team)
FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @altergeo.ru/Html5loc - C:\ProgramData\AlterGeo\Update for Html5 geolocation provider\npHtml5loc.dll (Altergeo)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Nastja\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Users\Nastja\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\duckduckgo-ssl-javascript-free.xml
FF SearchPlugin: C:\Users\Nastja\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\google-de-ssl.xml
FF SearchPlugin: C:\Users\Nastja\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\google-encrypted-no-personalization.xml
FF SearchPlugin: C:\Users\Nastja\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ixquick---deutsch.xml
FF SearchPlugin: C:\Users\Nastja\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ixquick-ssl-pictures---deutsch.xml
FF SearchPlugin: C:\Users\Nastja\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ixquick-ssl-pictures---english.xml
FF SearchPlugin: C:\Users\Nastja\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ixquick.xml
FF SearchPlugin: C:\Users\Nastja\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\leo-eng-ger.xml
FF SearchPlugin: C:\Users\Nastja\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\leo-esp-ale.xml
FF SearchPlugin: C:\Users\Nastja\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\leo-fra-all.xml
FF SearchPlugin: C:\Users\Nastja\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\metager2.xml
FF SearchPlugin: C:\Users\Nastja\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ssl-wikipedia-deutsch.xml
FF SearchPlugin: C:\Users\Nastja\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ssl-wikipedia-english.xml
FF SearchPlugin: C:\Users\Nastja\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\startpage-https---deutsch.xml
FF SearchPlugin: C:\Users\Nastja\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\startpage-https.xml
FF Extension: No Name - C:\Users\Nastja\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\54818767-c1e0-4c84-b033-72ea65a4edba@ee56dd5d-3d74-4339-aeed-d52f03c7f36f.com
FF Extension: HTTPS-Everywhere - C:\Users\Nastja\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\https-everywhere@eff.org
FF Extension: Cookie Monster - C:\Users\Nastja\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{45d8ff86-d909-11db-9705-005056c00008}
FF Extension: unplug - C:\Users\Nastja\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\unplug@compunach.xpi
FF Extension: No Name - C:\Users\Nastja\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{437be45a-4114-11dd-b9ab-71d256d89593}.xpi
FF Extension: No Name - C:\Users\Nastja\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
FF Extension: No Name - C:\Users\Nastja\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: No Name - C:\Users\Nastja\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{fa8476cf-a98c-4e08-99b4-65a69cb4b7d4}.xpi
FF HKLM-x32\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\virtualKeyboard@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [KavAntiBanner@Kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\KavAntiBanner@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [linkfilter@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\linkfilter@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [{79AB5E93-0AE2-4759-891A-3F1B322F9F9A}] - C:\Program Files (x86)\Kartina.TV\VLC\npvlc.dll
FF Extension: No Name - C:\Program Files (x86)\Kartina.TV\VLC\npvlc.dll
FF HKLM-x32\...\Firefox\Extensions: [{FCE04E1F-9378-4f39-96F6-5689A9159E45}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
Chrome:
=======
CHR HomePage: hxxp://www.google.com
CHR RestoreOnStartup: "hxxp://www.google.de/"
CHR DefaultSearchURL: (Search Results) - hxxp://dts.search-results.com/sr?src=crb&appid=0&systemid=410&sr=0&q={searchTerms}
CHR DefaultSuggestURL: (Search Results) - "suggest_url": "",
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.66\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.66\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.66\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Talk Plugin) - C:\Users\Nastja\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
CHR Plugin: (Google Talk Plugin Video Accelerator) - C:\Users\Nastja\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
CHR Plugin: (Google Talk Plugin Video Renderer) - C:\Users\Nastja\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U9) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (McAfee Security Scanner +) - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll No File
CHR Plugin: (Nitro PDF plugin for Firefox and Chrome) - C:\Program Files (x86)\Nitro\Pro 8\npnitromozilla.dll No File
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Html5 location provider) - C:\ProgramData\AlterGeo\Update for Html5 geolocation provider\npHtml5loc.dll (Altergeo)
CHR Plugin: (RealNetworks(tm) RealDownloader Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
CHR Plugin: (RealNetworks(tm) RealDownloader HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
CHR Plugin: (RealNetworks(tm) RealDownloader PepperFlashVideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
CHR Plugin: (RealDownloader Plugin) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.90.5) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation)
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Download Plugin) - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
CHR Extension: (Google Drive) - C:\Users\Nastja\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Nastja\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Nastja\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Pricora 6.1) - C:\Users\Nastja\AppData\Local\Google\Chrome\User Data\Default\Extensions\foenjmpocjdplgcoopnkgljjimdkjmkn\1.25.37_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\Nastja\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (Gmail) - C:\Users\Nastja\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx
CHR HKLM-x32\...\Chrome\Extension: [nhgcieglcpdegkhamigiokdphfhhnlhh] - C:\Program Files (x86)\AlterGeo\Html5 geolocation provider\altergeo.crx
==================== Services (Whitelisted) =================
R2 AdobeActiveFileMonitor10.0; C:\Program Files (x86)\Adobe\Elements 10 Organizer\PhotoshopElementsFileAgent.exe [169624 2011-09-14] (Adobe Systems Incorporated)
S3 CGVPNCliSrvc; C:\Program Files\CyberGhost VPN\CGVPNCliService.exe [2438696 2012-04-26] (mobile concepts GmbH)
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [339456 2010-11-16] ()
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-05-02] ()
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-04-16] ()
S2 watchmi; C:\Program Files (x86)\watchmi\TvdService.exe [62464 2010-12-06] ()
==================== Drivers (Whitelisted) ====================
S2 DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys [x]
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [x]
S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-10-04 11:25 - 2013-10-04 11:25 - 00000000 ___DC C:\FRST
2013-10-04 11:24 - 2013-10-04 11:24 - 01954124 _____ (Farbar) C:\Users\Nastja\Downloads\FRST64.exe
2013-10-04 10:03 - 2013-10-04 10:03 - 00006174 _____ C:\Users\Nastja\Desktop\attach.txt
2013-10-04 10:03 - 2013-10-04 10:02 - 00015771 _____ C:\Users\Nastja\Desktop\dds.txt
2013-10-04 10:00 - 2013-10-04 10:00 - 00688992 ____R (Swearware) C:\Users\Nastja\Downloads\dds.exe
2013-10-04 09:53 - 2013-10-04 09:55 - 00000000 ___DC C:\AdwCleaner
2013-10-04 09:52 - 2013-10-04 09:52 - 01045226 _____ C:\Users\Nastja\Downloads\adwcleaner.exe
2013-09-17 16:38 - 2013-09-17 16:38 - 00000000 ____D C:\Windows\SysWOW64\jmdp_old
2013-09-17 16:38 - 2013-09-17 16:38 - 00000000 ____D C:\Windows\system32\ljkb
2013-09-09 17:44 - 2013-09-09 17:44 - 00000000 ___DC C:\Real
2013-09-09 09:29 - 2013-09-09 09:29 - 12792968 _____ (CyberGhost S.R.L. ) C:\Users\Nastja\Downloads\CG.4.7.19-Cleverbridge (1).exe
==================== One Month Modified Files and Folders =======
2013-10-04 11:25 - 2013-10-04 11:25 - 00000000 ___DC C:\FRST
2013-10-04 11:24 - 2013-10-04 11:24 - 01954124 _____ (Farbar) C:\Users\Nastja\Downloads\FRST64.exe
2013-10-04 11:19 - 2012-02-11 20:17 - 00000000 ____D C:\Users\Nastja\AppData\Roaming\Skype
2013-10-04 11:19 - 2012-02-02 11:21 - 01848747 _____ C:\Windows\WindowsUpdate.log
2013-10-04 11:03 - 2012-02-02 11:20 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-04 11:03 - 2012-02-02 11:20 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-04 10:54 - 2013-02-24 11:27 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-04 10:36 - 2012-03-01 17:26 - 00000366 _____ C:\Windows\Tasks\AlterGeoUpdaterS-1-5-18.job
2013-10-04 10:04 - 2009-07-14 06:45 - 00021072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-04 10:04 - 2009-07-14 06:45 - 00021072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-04 10:03 - 2013-10-04 10:03 - 00006174 _____ C:\Users\Nastja\Desktop\attach.txt
2013-10-04 10:02 - 2013-10-04 10:03 - 00015771 _____ C:\Users\Nastja\Desktop\dds.txt
2013-10-04 10:00 - 2013-10-04 10:00 - 00688992 ____R (Swearware) C:\Users\Nastja\Downloads\dds.exe
2013-10-04 09:57 - 2013-08-07 18:25 - 00001904 _____ C:\Windows\Tasks\Pricora 6.1-chromeinstaller.job
2013-10-04 09:57 - 2013-08-07 18:25 - 00001830 _____ C:\Windows\Tasks\Pricora 6.1-firefoxinstaller.job
2013-10-04 09:57 - 2013-08-07 18:25 - 00001292 _____ C:\Windows\Tasks\Pricora 6.1-updater.job
2013-10-04 09:57 - 2013-08-07 18:25 - 00001198 _____ C:\Windows\Tasks\Pricora 6.1-codedownloader.job
2013-10-04 09:57 - 2013-08-07 18:25 - 00001096 _____ C:\Windows\Tasks\Pricora 6.1-enabler.job
2013-10-04 09:56 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-04 09:56 - 2009-07-14 06:51 - 00261153 _____ C:\Windows\setupact.log
2013-10-04 09:55 - 2013-10-04 09:53 - 00000000 ___DC C:\AdwCleaner
2013-10-04 09:55 - 2013-01-23 13:31 - 00000000 ____D C:\Users\Nastja\AppData\Roaming\Uniblue
2013-10-04 09:55 - 2013-01-23 13:31 - 00000000 ____D C:\Program Files (x86)\Uniblue
2013-10-04 09:55 - 2012-10-11 21:52 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-04 09:52 - 2013-10-04 09:52 - 01045226 _____ C:\Users\Nastja\Downloads\adwcleaner.exe
2013-10-04 09:34 - 2012-02-02 11:21 - 00000000 ___DC C:\Program Files\Google
2013-10-04 09:34 - 2012-02-02 11:20 - 00000000 ____D C:\Program Files (x86)\Google
2013-10-04 09:34 - 2010-11-21 05:47 - 00036072 _____ C:\Windows\PFRO.log
2013-10-04 09:30 - 2013-03-09 18:24 - 00000000 ____D C:\Program Files (x86)\AceBIT
2013-10-04 09:28 - 2012-02-02 18:22 - 00000000 ___HD C:\Users\Nastja\AppData\Local\Google
2013-10-04 09:28 - 2012-02-02 11:20 - 00000000 ____D C:\ProgramData\Google
2013-10-04 09:23 - 2013-08-07 19:00 - 00000000 ___DC C:\Program Files\CyberGhost VPN
2013-10-04 09:23 - 2012-02-11 20:17 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-10-03 17:50 - 2012-04-01 23:15 - 00003938 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{4D4E6BF8-BB14-446B-8A02-080CEC128CAE}
2013-10-03 09:04 - 2013-03-14 09:05 - 00003366 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2467042770-1258344101-1671049899-1000
2013-10-03 09:04 - 2013-01-28 18:04 - 00003234 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2467042770-1258344101-1671049899-1000
2013-10-01 13:11 - 2011-02-10 21:25 - 00652456 _____ C:\Windows\system32\perfh007.dat
2013-10-01 13:11 - 2011-02-10 21:25 - 00129206 _____ C:\Windows\system32\perfc007.dat
2013-10-01 13:11 - 2009-07-14 07:13 - 01493700 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-30 15:25 - 2012-10-11 21:27 - 00000000 ___RD C:\Users\Nastja\Desktop\DOkumente
2013-09-24 17:46 - 2012-03-23 13:44 - 00000000 ____D C:\Users\Nastja\AppData\Roaming\vlc
2013-09-24 17:00 - 2012-03-24 22:33 - 00000000 ____D C:\Users\Nastja\AppData\Roaming\dvdcss
2013-09-20 08:54 - 2013-02-24 11:27 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-20 08:54 - 2013-02-24 11:27 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-20 08:54 - 2011-07-18 19:57 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-19 07:23 - 2012-02-02 23:35 - 00000000 ____D C:\Users\Nastja\AppData\Roaming\SoftGrid Client
2013-09-17 16:38 - 2013-09-17 16:38 - 00000000 ____D C:\Windows\SysWOW64\jmdp_old
2013-09-17 16:38 - 2013-09-17 16:38 - 00000000 ____D C:\Windows\system32\ljkb
2013-09-16 07:04 - 2009-07-14 07:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-09-09 17:44 - 2013-09-09 17:44 - 00000000 ___DC C:\Real
2013-09-09 10:52 - 2011-01-08 00:02 - 00829264 _____ (Microsoft Corporation) C:\Windows\system32\msvcr100.dll
2013-09-09 10:52 - 2011-01-08 00:02 - 00608080 _____ (Microsoft Corporation) C:\Windows\system32\msvcp100.dll
2013-09-09 09:29 - 2013-09-09 09:29 - 12792968 _____ (CyberGhost S.R.L. ) C:\Users\Nastja\Downloads\CG.4.7.19-Cleverbridge (1).exe
2013-09-06 13:03 - 2012-10-11 21:26 - 00000000 ___RD C:\Users\Nastja\Desktop\Buchhaltung 01.2012
2013-09-06 12:51 - 2013-07-28 17:18 - 00000000 ___SD C:\Users\Nastja\Documents\Meine Datenquellen
2013-09-04 21:48 - 2012-02-04 21:39 - 00000000 ___RD C:\Users\Nastja\Desktop\Bilder Ersatzteile
Some content of TEMP:
====================
C:\Users\Nastja\AppData\Local\Temp\GenericUninstall.exe
C:\Users\Nastja\AppData\Local\Temp\IminentSetup.exe
C:\Users\Nastja\AppData\Local\Temp\installhelper.dll
C:\Users\Nastja\AppData\Local\Temp\mgsqlite3.dll
C:\Users\Nastja\AppData\Local\Temp\Quarantine.exe
C:\Users\Nastja\AppData\Local\Temp\readSTILog.dll
C:\Users\Nastja\AppData\Local\Temp\Shortcut_SweetIMSetup.exe
C:\Users\Nastja\AppData\Local\Temp\silent_pricora_DE.exe
C:\Users\Nastja\AppData\Local\Temp\SIMEEIInstaller.exe
C:\Users\Nastja\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Nastja\AppData\Local\Temp\SQLite.dll
C:\Users\Nastja\AppData\Local\Temp\SRAssetsHelper.dll
C:\Users\Nastja\AppData\Local\Temp\stubhelper.dll
C:\Users\Nastja\AppData\Local\Temp\uninst1.exe
C:\Users\Nastja\AppData\Local\Temp\uninstaller.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-10-01 07:41
==================== End Of Log ============================
--- --- ---
--- --- ---
--- --- ---
2)FRST Additions Logfile: Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-10-2013
Ran by Nastja at 2013-10-04 11:26:12
Running from C:\Users\Nastja\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
Adobe AIR (x32 Version: 2.7.0.19530)
Adobe Community Help (x32 Version: 3.5.23)
Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.175)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.168)
Adobe Photoshop Elements 10 (x32 Version: 10.0)
Adobe Reader XI (11.0.04) - Nederlands (x32 Version: 11.0.04)
Alcor Micro USB Card Reader (x32 Version: 1.8.1217.36096)
AMI VR-pulse OS Switcher (Version: 1.1)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (x32 Version: 1.0.0.35)
Canon Easy-PhotoPrint EX (x32 Version: 4.1.6)
Canon MP Navigator EX 1.0 (x32)
Canon MP610 series
Canon MP610 series Benutzerregistrierung (x32)
Canon My Printer
CD-LabelPrint (x32)
Common Desktop Agent (Version: 1.53.0)
Conexant HD Audio (Version: 8.54.14.50)
Control ActiveX de Windows Live Mesh para conexiones remotas (x32 Version: 15.4.5722.2)
Contrôle ActiveX Windows Live Mesh pour connexions à distance (x32 Version: 15.4.5722.2)
Controlo ActiveX do Windows Live Mesh para Ligações Remotas (x32 Version: 15.4.5722.2)
CyberGhost VPN
CyberLink LabelPrint (x32 Version: 2.5.3624)
CyberLink Power2Go (x32 Version: 7.0.0.1327)
CyberLink PowerDVD Copy (x32 Version: 1.5.1306)
CyberLink PowerRecover (x32 Version: 5.5.4125)
CyberLink YouCam (x32 Version: 3.1.4013)
D3DX10 (x32 Version: 15.4.2368.0902)
Dolby Advanced Audio v2 (x32 Version: 7.2.7000.4)
Elements 10 Organizer (x32 Version: 10.0)
EPSON Scan (x32)
Finger Sensing Pad Driver (Version: 8.8.0.5)
FLV Player (HKCU)
Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsługę połączeń zdalnych (x32 Version: 15.4.5722.2)
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922)
Free Mp3 Wma Converter V 2.2 (x32 Version: 2.2.0.0)
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922)
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922)
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922)
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922)
Google Chrome (x32 Version: 30.0.1599.66)
Groß im Handel Schülerversion (x32)
Html5 geolocation provider (x32 Version: 3.5.0.849)
Intel PROSet Wireless
Intel PROSet Wireless (x32)
Intel(R) Processor Graphics (x32 Version: 8.15.10.2321)
Intel(R) PROSet/Wireless WiFi Software (Version: 14.01.1000)
Intel(R) Rapid Storage Technology (x32 Version: 10.1.0.1008)
Ipswitch WS_FTP 12 (x32 Version: 12.4)
Java 7 Update 9 (x32 Version: 7.0.90)
Java Auto Updater (x32 Version: 2.1.9.0)
Java(TM) 6 Update 26 (64-bit) (Version: 6.0.260)
Java(TM) 6 Update 31 (x32 Version: 6.0.310)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
Kartina.TV (x32 Version: 2.64-20130708)
Kontrolnik Windows Live Mesh ActiveX za oddaljene povezave (x32 Version: 15.4.5722.2)
Medion Home Cinema (x32 Version: 8.0.2608)
Mesh Runtime (x32 Version: 15.4.5722.2)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.4763.1000)
Microsoft Silverlight (x32 Version: 4.0.60531.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (Version: 10.0.30319)
Mobile Partner (x32 Version: 16.002.03.04.511)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
Multilizer PDF Translator (Build 8.0.3) (x32)
NetObjects Fusion 12.0 (x32 Version: 12 German)
NetObjects Fusion 12.0 (x32 Version: 12.00.5000.5041)
Opera 11.61 (x32 Version: 11.61.1250)
PDF24 Creator 5.7.0 (x32)
PL-2303 USB-to-Serial (x32 Version: 1.3.0)
PlayReady PC Runtime amd64 (Version: 1.3.0)
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922)
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922)
Pošta Windows Live (x32 Version: 15.4.3502.0922)
Pricora 6.1 (x32 Version: 1.27.153.11)
PSE10 STI Installer (x32 Version: 10.0)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922)
RealDownloader (x32 Version: 1.3.2)
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0)
RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0)
RealPlayer (x32 Version: 16.0.2)
RealUpgrade 1.1 (x32 Version: 1.1.0)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.34.0)
Samsung Easy Printer Manager (x32 Version: 1.02.06.05)
Samsung Printer Live Update (x32)
Samsung Scan Assistant (x32 Version: 1.04.30.00)
Samsung SCX-3400 Series (x32 Version: 1.08 (07.05.2012))
Skype™ 6.6 (x32 Version: 6.6.106)
Spelling Dictionaries Support For Adobe Reader X (x32 Version: 10.0.0)
Unity Web Player (HKCU Version: )
Update for Html5 geolocation provider (x32 Version: 3.5.5.872)
Update for Html5 geolocation provider (x32 Version: 3.6.1.897)
Update for Html5 geolocation provider (x32 Version: 3.6.2.901)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Uzak Bağlantılar İçin Windows Live Mesh ActiveX Denetimi (x32 Version: 15.4.5722.2)
Versandhelfer (x32 Version: 0.9.511)
VLC media player 2.0.1 (x32 Version: 2.0.1)
VLC TV Player (x32 Version: 1.0.5.0)
VR-pulse Installer (Version: 1.5.2.0)
VTech Download Agent Library (x32 Version: 1.00.0000)
VTech Download Manager (x32)
watchmi (x32 Version: 2.5.0)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3508.1109)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live Fotoğraf Galerisi (x32 Version: 15.4.3502.0922)
Windows Live Fotótár (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3508.1109)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (x32 Version: 15.4.5722.2)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX-objekt til fjernforbindelser (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX-vezérlő távoli kapcsolatokhoz (x32 Version: 15.4.5722.2)
Windows Live Messenger (x32 Version: 15.4.3502.0922)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live Temel Parçalar (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
WinRAR 4.01 (32-Bit) (x32 Version: 4.01.0)
WinZip 16.0 (Version: 16.0.9715)
WISE-FTP 7 (x32)
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922)
==================== Restore Points =========================
26-08-2013 22:00:02 Geplanter Prüfpunkt
03-09-2013 08:35:26 Geplanter Prüfpunkt
11-09-2013 06:06:46 Geplanter Prüfpunkt
18-09-2013 09:09:55 Geplanter Prüfpunkt
25-09-2013 16:32:53 Geplanter Prüfpunkt
03-10-2013 08:48:13 Geplanter Prüfpunkt
04-10-2013 07:30:45 Tuning Tool wird entfernt
04-10-2013 07:32:16 Στοιχείο ελέγχου ActiveX του Windows Live Mesh για απομακρυσμένες συνδέσεις wird entfernt
==================== Hosts content: ==========================
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {0350E754-587C-49A7-868D-CF8C906F3DB3} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-2467042770-1258344101-1671049899-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-04-16] (RealNetworks, Inc.)
Task: {0D1987C0-A736-425F-BF11-964C94CF7E69} - System32\Tasks\Pricora 6.1-firefoxinstaller => C:\Program Files (x86)\Pricora 6.1\Pricora 6.1-firefoxinstaller.exe [2013-08-07] (Corporate Inc)
Task: {1305BD07-1725-4024-84FA-77398F0DC254} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {1E621265-7DCE-44EE-928D-4E9E383F49E1} - System32\Tasks\Pricora 6.1-updater => C:\Program Files (x86)\Pricora 6.1\Pricora 6.1-updater.exe [2013-08-07] (Corporate Inc)
Task: {250C4941-F115-419C-8796-E7A25F710635} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-02-02] (Google Inc.)
Task: {3F5B3472-1582-43DE-95CD-661B5B1A6B81} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe
Task: {5946D3C5-8F4E-4C66-A865-F367CACA43F4} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe
Task: {607E41F0-AD8F-4201-930D-DEDCA09617C7} - System32\Tasks\AdobeAAMUpdater-1.0-Nastja-PC-Nastja => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2011-06-16] (Adobe Systems Incorporated)
Task: {62653442-B03A-4B04-BC55-38DB128022F5} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-20] (Adobe Systems Incorporated)
Task: {73FE0836-E22A-4B4C-AE3D-20A6E2F8081F} - System32\Tasks\Pricora 6.1-enabler => C:\Program Files (x86)\Pricora 6.1\Pricora 6.1-enabler.exe [2013-08-07] (Corporate Inc)
Task: {7F5F6FC7-2F6D-4720-BD33-B8184C3BD3C3} - System32\Tasks\Pricora 6.1-codedownloader => C:\Program Files (x86)\Pricora 6.1\Pricora 6.1-codedownloader.exe [2013-08-07] (Corporate Inc)
Task: {8805B8DF-4B42-4997-BCFE-E23261671162} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2012-07-03] (Sun Microsystems, Inc.)
Task: {880D9898-13FC-4C18-8E3D-E56B50A43A1F} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2467042770-1258344101-1671049899-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-04-16] (RealNetworks, Inc.)
Task: {943D80D2-6FBB-49AD-B26E-8B48610A7DD0} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated)
Task: {9AD7DCD9-5601-4B00-A528-8873B8F2CA1A} - System32\Tasks\{8E29FFA9-0731-48C9-8CD0-AEAEBA37E29B} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/abandoninstall?page=tsProgressBar
Task: {9C4AD38B-C0CB-4DF8-9B2D-077D43063505} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2467042770-1258344101-1671049899-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-04-16] (RealNetworks, Inc.)
Task: {A686D528-F694-4B6D-B4BB-2947B6B881B8} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-02-02] (Google Inc.)
Task: {AA8F0549-A0A3-4EE8-BEBE-895FE0CA34DF} - System32\Tasks\AlterGeoUpdaterS-1-5-18 => C:\Program Files (x86)\AlterGeo\Html5 geolocation provider\html5locsvc.exe [2012-02-06] (AlterGeo)
Task: {B68C02C7-09C5-43F1-AB01-7538BD2F47E7} - System32\Tasks\Pricora 6.1-chromeinstaller => C:\Program Files (x86)\Pricora 6.1\Pricora 6.1-chromeinstaller.exe [2013-08-07] (Corporate Inc)
Task: {B739BD99-E79B-47D5-AD66-EF598FA5B789} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-2467042770-1258344101-1671049899-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe [2013-04-16] (RealNetworks, Inc.)
Task: {C7AAF10C-8100-455A-8AA1-64CC8539B34C} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-2467042770-1258344101-1671049899-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-04-16] (RealNetworks, Inc.)
Task: {C9B3BCDD-4FB8-41AE-B5B1-E6316960D507} - System32\Tasks\Real Player-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe [2013-05-20] (RealNetworks, Inc.)
Task: {DF5295D8-0178-4570-81E9-E50D2A6B5EC7} - System32\Tasks\{22E8C043-7DAA-4B3F-ACB3-215369FBC5BB} => Chrome.exe hxxp://ui.skype.com/ui/0/5.8.0.156/de/go/help.faq.installer?LastError=1603
Task: {F19930A1-4F4E-46B4-8529-5C8C6F46C107} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2467042770-1258344101-1671049899-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-04-16] (RealNetworks, Inc.)
Task: {F3444ACA-6C59-41DB-9130-A555BC31C846} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2467042770-1258344101-1671049899-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-04-16] (RealNetworks, Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AlterGeoUpdaterS-1-5-18.job => C:\Program Files (x86)\AlterGeo\Html5 geolocation provider\html5locsvc.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Pricora 6.1-chromeinstaller.job => C:\Program Files (x86)\Pricora 6.1\Pricora 6.1-chromeinstaller.exe
Task: C:\Windows\Tasks\Pricora 6.1-codedownloader.job => C:\Program Files (x86)\Pricora 6.1\Pricora 6.1-codedownloader.exe
Task: C:\Windows\Tasks\Pricora 6.1-enabler.job => C:\Program Files (x86)\Pricora 6.1\Pricora 6.1-enabler.exe
Task: C:\Windows\Tasks\Pricora 6.1-firefoxinstaller.job => C:\Program Files (x86)\Pricora 6.1\Pricora 6.1-firefoxinstaller.exe
Task: C:\Windows\Tasks\Pricora 6.1-updater.job => C:\Program Files (x86)\Pricora 6.1\Pricora 6.1-updater.exe
==================== Loaded Modules (whitelisted) =============
2011-05-02 22:41 - 2011-05-02 22:41 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\LIBEAY32.dll
2011-07-18 18:12 - 2011-03-06 21:07 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2011-07-18 19:54 - 2010-11-08 15:50 - 00044032 ____C () C:\Program Files\FSP\KbdHook.dll
2011-07-18 19:54 - 2010-11-08 15:51 - 00070656 ____C () C:\Program Files\FSP\FspLib.dll
2010-12-17 18:13 - 2010-12-17 18:13 - 00050688 ____C () C:\Program Files\Common Files\Common Desktop Agent\CDASrvPS.dll
2010-12-06 13:52 - 2010-12-06 13:52 - 00004608 _____ () C:\Program Files (x86)\watchmi\de\TvdTray.resources.dll
2012-02-02 11:19 - 2012-02-02 11:19 - 00061952 _____ () C:\Windows\assembly\GAC_MSIL\Tvd.Remote\2.5.0.5__f722db7bec59a14b\Tvd.Remote.dll
2010-08-04 00:39 - 2010-08-04 00:39 - 00619816 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
2010-08-04 00:39 - 2010-08-04 00:39 - 00013096 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
2012-11-05 11:37 - 2010-06-24 03:16 - 02150400 _____ () C:\Program Files (x86)\VTech\DownloadManager\System\QtCore4.dll
2012-11-05 11:37 - 2010-07-13 15:07 - 07826432 _____ () C:\Program Files (x86)\VTech\DownloadManager\System\QtGui4.dll
2012-11-05 11:37 - 2010-06-02 04:29 - 00934912 _____ () C:\Program Files (x86)\VTech\DownloadManager\System\QtNetwork4.dll
2012-11-05 11:37 - 2010-06-02 04:28 - 00335360 _____ () C:\Program Files (x86)\VTech\DownloadManager\System\QtXml4.dll
2012-11-05 11:37 - 2012-08-06 11:54 - 09843640 _____ () C:\Program Files (x86)\VTech\DownloadManager\System\QtWebKit4.dll
2012-11-05 11:37 - 2010-06-02 04:56 - 00232960 _____ () C:\Program Files (x86)\VTech\DownloadManager\System\phonon4.dll
2012-11-05 11:37 - 2010-06-02 04:54 - 02530816 _____ () C:\Program Files (x86)\VTech\DownloadManager\System\QtXmlPatterns4.dll
2012-11-05 11:37 - 2010-07-05 11:19 - 00116736 _____ () C:\Program Files (x86)\VTech\DownloadManager\System\QtSolutions_SOAP-2.7.dll
2012-11-05 11:37 - 2010-11-11 11:24 - 00028160 _____ () C:\Program Files (x86)\VTech\DownloadManager\System\DACommCenter.dll
2012-11-05 11:37 - 2010-06-02 07:05 - 00119808 _____ () C:\Program Files (x86)\VTech\DownloadManager\System\imageformats\qjpeg4.dll
2011-10-08 04:54 - 2011-10-08 04:54 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\c4d97d8e5ac0dda14755c4d63b1d0598\IsdiInterop.ni.dll
2011-07-18 18:18 - 2010-11-06 08:50 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2013-10-03 15:05 - 2013-09-26 21:07 - 00698832 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.66\libglesv2.dll
2013-10-03 15:05 - 2013-09-26 21:07 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.66\libegl.dll
2013-10-03 15:05 - 2013-09-26 21:08 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.66\pdf.dll
2013-10-03 15:05 - 2013-09-26 21:08 - 00415184 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.66\ppGoogleNaClPluginChrome.dll
2013-10-03 15:05 - 2013-09-26 21:07 - 01604560 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.66\ffmpegsumo.dll
2013-10-03 15:05 - 2013-09-26 21:08 - 13611984 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.66\PepperFlash\pepflashplayer.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\Windows:nlsPreferences
AlternateDataStreams: C:\Users\Nastja\Downloads\5-Regionen.rss:OECustomProperty
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (10/04/2013 10:15:59 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"1".
Die abhängige Assemblierung "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (10/04/2013 09:57:35 AM) (Source: Tvd.Service) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ServiceModel.Diagnostics.CallbackException: Ein Benutzerrückruf hat eine Ausnahme ausgelöst. Prüfen Sie den Ausnahmestapel und die interne Ausnahme, um den Rückruf zu ermitteln, bei dem ein Fehler aufgetreten ist. ---> System.Xml.XmlException: Das Stammelement ist nicht vorhanden.
bei System.Xml.XmlTextReaderImpl.Throw(Exception e)
bei System.Xml.XmlTextReaderImpl.ParseDocumentContent()
bei System.Xml.XmlReader.MoveToContent()
bei System.Data.DataSet.ReadXml(XmlReader reader, Boolean denyResolving)
bei System.Data.DataSet.ReadXml(String fileName)
bei Tvd.Reporting.UsageTracker.x5d95f5f98c940295()
bei Tvd.Reporting.UsageTracker..ctor(String uid)
bei Tvd.Service.TvdService.OnStartedAction(Object sender, EventArgs e)
bei System.ServiceModel.Channels.CommunicationObject.OnOpened()
--- Ende der internen Ausnahmestapelüberwachung ---
bei System.ServiceModel.Channels.CommunicationObject.OnOpened()
bei System.ServiceModel.Channels.CommunicationObject.Open(Time...
Error: (10/04/2013 09:52:46 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"1".
Die abhängige Assemblierung "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (10/04/2013 09:35:23 AM) (Source: Tvd.Service) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ServiceModel.Diagnostics.CallbackException: Ein Benutzerrückruf hat eine Ausnahme ausgelöst. Prüfen Sie den Ausnahmestapel und die interne Ausnahme, um den Rückruf zu ermitteln, bei dem ein Fehler aufgetreten ist. ---> System.Xml.XmlException: Das Stammelement ist nicht vorhanden.
bei System.Xml.XmlTextReaderImpl.Throw(Exception e)
bei System.Xml.XmlTextReaderImpl.ParseDocumentContent()
bei System.Xml.XmlReader.MoveToContent()
bei System.Data.DataSet.ReadXml(XmlReader reader, Boolean denyResolving)
bei System.Data.DataSet.ReadXml(String fileName)
bei Tvd.Reporting.UsageTracker.x5d95f5f98c940295()
bei Tvd.Reporting.UsageTracker..ctor(String uid)
bei Tvd.Service.TvdService.OnStartedAction(Object sender, EventArgs e)
bei System.ServiceModel.Channels.CommunicationObject.OnOpened()
--- Ende der internen Ausnahmestapelüberwachung ---
bei System.ServiceModel.Channels.CommunicationObject.OnOpened()
bei System.ServiceModel.Channels.CommunicationObject.Open(Time...
Error: (10/04/2013 09:18:22 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"1".
Die abhängige Assemblierung "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (10/04/2013 00:32:06 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"1".
Die abhängige Assemblierung "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (10/03/2013 11:13:35 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: taskhost.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce796f7
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7c8f9
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000009970a
ID des fehlerhaften Prozesses: 0x15ec
Startzeit der fehlerhaften Anwendung: 0xtaskhost.exe0
Pfad der fehlerhaften Anwendung: taskhost.exe1
Pfad des fehlerhaften Moduls: taskhost.exe2
Berichtskennung: taskhost.exe3
Error: (10/03/2013 08:40:59 PM) (Source: Tvd.Service) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ServiceModel.Diagnostics.CallbackException: Ein Benutzerrückruf hat eine Ausnahme ausgelöst. Prüfen Sie den Ausnahmestapel und die interne Ausnahme, um den Rückruf zu ermitteln, bei dem ein Fehler aufgetreten ist. ---> System.Xml.XmlException: Das Stammelement ist nicht vorhanden.
bei System.Xml.XmlTextReaderImpl.Throw(Exception e)
bei System.Xml.XmlTextReaderImpl.ParseDocumentContent()
bei System.Xml.XmlReader.MoveToContent()
bei System.Data.DataSet.ReadXml(XmlReader reader, Boolean denyResolving)
bei System.Data.DataSet.ReadXml(String fileName)
bei Tvd.Reporting.UsageTracker.x5d95f5f98c940295()
bei Tvd.Reporting.UsageTracker..ctor(String uid)
bei Tvd.Service.TvdService.OnStartedAction(Object sender, EventArgs e)
bei System.ServiceModel.Channels.CommunicationObject.OnOpened()
--- Ende der internen Ausnahmestapelüberwachung ---
bei System.ServiceModel.Channels.CommunicationObject.OnOpened()
bei System.ServiceModel.Channels.CommunicationObject.Open(Time...
Error: (10/03/2013 08:38:34 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"1".
Die abhängige Assemblierung "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (10/03/2013 09:14:58 AM) (Source: CVHSVC) (User: )
Description: Nur zur Information.
(Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Die Serververbindung wurde aufgrund eines Fehlers beendet.
System errors:
=============
Error: (10/04/2013 09:57:02 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (10/04/2013 09:34:20 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (10/03/2013 08:40:27 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (10/03/2013 09:03:58 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (10/02/2013 09:18:15 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Server" wurde mit folgendem Fehler beendet:
%%13
Error: (10/02/2013 09:18:12 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Enumeratordienst für tragbare Geräte" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1115
Error: (10/02/2013 09:18:12 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Diagnosediensthost" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069
Error: (10/02/2013 09:18:12 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "WdiServiceHost" konnte sich nicht als "NT AUTHORITY\LocalService" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%50
Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
Error: (10/02/2013 09:18:11 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069
Error: (10/02/2013 09:18:11 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "WSearch" konnte sich nicht als "NT AUTHORITY\SYSTEM" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%50
Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
Microsoft Office Sessions:
=========================
Error: (10/04/2013 10:15:59 AM) (Source: SideBySide)(User: )
Description: rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"C:\Windows\Installer\{3DC873BB-FFE3-46BF-9701-26B9AE371F9F}\recordingmanager.exe
Error: (10/04/2013 09:57:35 AM) (Source: Tvd.Service)(User: )
Description: Der Dienst kann nicht gestartet werden. System.ServiceModel.Diagnostics.CallbackException: Ein Benutzerrückruf hat eine Ausnahme ausgelöst. Prüfen Sie den Ausnahmestapel und die interne Ausnahme, um den Rückruf zu ermitteln, bei dem ein Fehler aufgetreten ist. ---> System.Xml.XmlException: Das Stammelement ist nicht vorhanden.
bei System.Xml.XmlTextReaderImpl.Throw(Exception e)
bei System.Xml.XmlTextReaderImpl.ParseDocumentContent()
bei System.Xml.XmlReader.MoveToContent()
bei System.Data.DataSet.ReadXml(XmlReader reader, Boolean denyResolving)
bei System.Data.DataSet.ReadXml(String fileName)
bei Tvd.Reporting.UsageTracker.x5d95f5f98c940295()
bei Tvd.Reporting.UsageTracker..ctor(String uid)
bei Tvd.Service.TvdService.OnStartedAction(Object sender, EventArgs e)
bei System.ServiceModel.Channels.CommunicationObject.OnOpened()
--- Ende der internen Ausnahmestapelüberwachung ---
bei System.ServiceModel.Channels.CommunicationObject.OnOpened()
bei System.ServiceModel.Channels.CommunicationObject.Open(Time...
Error: (10/04/2013 09:52:46 AM) (Source: SideBySide)(User: )
Description: rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"C:\Windows\Installer\{3DC873BB-FFE3-46BF-9701-26B9AE371F9F}\recordingmanager.exe
Error: (10/04/2013 09:35:23 AM) (Source: Tvd.Service)(User: )
Description: Der Dienst kann nicht gestartet werden. System.ServiceModel.Diagnostics.CallbackException: Ein Benutzerrückruf hat eine Ausnahme ausgelöst. Prüfen Sie den Ausnahmestapel und die interne Ausnahme, um den Rückruf zu ermitteln, bei dem ein Fehler aufgetreten ist. ---> System.Xml.XmlException: Das Stammelement ist nicht vorhanden.
bei System.Xml.XmlTextReaderImpl.Throw(Exception e)
bei System.Xml.XmlTextReaderImpl.ParseDocumentContent()
bei System.Xml.XmlReader.MoveToContent()
bei System.Data.DataSet.ReadXml(XmlReader reader, Boolean denyResolving)
bei System.Data.DataSet.ReadXml(String fileName)
bei Tvd.Reporting.UsageTracker.x5d95f5f98c940295()
bei Tvd.Reporting.UsageTracker..ctor(String uid)
bei Tvd.Service.TvdService.OnStartedAction(Object sender, EventArgs e)
bei System.ServiceModel.Channels.CommunicationObject.OnOpened()
--- Ende der internen Ausnahmestapelüberwachung ---
bei System.ServiceModel.Channels.CommunicationObject.OnOpened()
bei System.ServiceModel.Channels.CommunicationObject.Open(Time...
Error: (10/04/2013 09:18:22 AM) (Source: SideBySide)(User: )
Description: rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"C:\Windows\Installer\{3DC873BB-FFE3-46BF-9701-26B9AE371F9F}\recordingmanager.exe
Error: (10/04/2013 00:32:06 AM) (Source: SideBySide)(User: )
Description: rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"C:\Windows\Installer\{3DC873BB-FFE3-46BF-9701-26B9AE371F9F}\recordingmanager.exe
Error: (10/03/2013 11:13:35 PM) (Source: Application Error)(User: )
Description: taskhost.exe6.1.7601.175144ce796f7ntdll.dll6.1.7601.175144ce7c8f9c0000005000000000009970a15ec01cec07d6b661cceC:\Windows\system32\taskhost.exeC:\Windows\SYSTEM32\ntdll.dlla98502d3-2c70-11e3-8895-386077d17063
Error: (10/03/2013 08:40:59 PM) (Source: Tvd.Service)(User: )
Description: Der Dienst kann nicht gestartet werden. System.ServiceModel.Diagnostics.CallbackException: Ein Benutzerrückruf hat eine Ausnahme ausgelöst. Prüfen Sie den Ausnahmestapel und die interne Ausnahme, um den Rückruf zu ermitteln, bei dem ein Fehler aufgetreten ist. ---> System.Xml.XmlException: Das Stammelement ist nicht vorhanden.
bei System.Xml.XmlTextReaderImpl.Throw(Exception e)
bei System.Xml.XmlTextReaderImpl.ParseDocumentContent()
bei System.Xml.XmlReader.MoveToContent()
bei System.Data.DataSet.ReadXml(XmlReader reader, Boolean denyResolving)
bei System.Data.DataSet.ReadXml(String fileName)
bei Tvd.Reporting.UsageTracker.x5d95f5f98c940295()
bei Tvd.Reporting.UsageTracker..ctor(String uid)
bei Tvd.Service.TvdService.OnStartedAction(Object sender, EventArgs e)
bei System.ServiceModel.Channels.CommunicationObject.OnOpened()
--- Ende der internen Ausnahmestapelüberwachung ---
bei System.ServiceModel.Channels.CommunicationObject.OnOpened()
bei System.ServiceModel.Channels.CommunicationObject.Open(Time...
Error: (10/03/2013 08:38:34 PM) (Source: SideBySide)(User: )
Description: rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"C:\Windows\Installer\{3DC873BB-FFE3-46BF-9701-26B9AE371F9F}\recordingmanager.exe
Error: (10/03/2013 09:14:58 AM) (Source: CVHSVC)(User: )
Description: (Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Die Serververbindung wurde aufgrund eines Fehlers beendet.
==================== Memory info ===========================
Percentage of memory in use: 27%
Total physical RAM: 8103.13 MB
Available physical RAM: 5865.91 MB
Total Pagefile: 16204.45 MB
Available Pagefile: 13841.73 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB
==================== Drives ================================
Drive c: (Boot) (Fixed) (Total:412.66 GB) (Free:135.87 GB) NTFS
Drive d: (Recover) (Fixed) (Total:50 GB) (Free:29.9 GB) NTFS
Drive e: (MY_WMA_092413) (CDROM) (Total:0.03 GB) (Free:0 GB) CDFS
Drive h: () (Removable) (Total:3.68 GB) (Free:3.43 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 5925B5A9)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=413 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=52 GB) - (Type=OF Extended)
Partition 4: (Not Active) - (Size=1 GB) - (Type=12)
========================================================
Disk: 1 (Size: 4 GB) (Disk ID: 00000000)
Partition 1: (Not Active) - (Size=4 GB) - (Type=0B)
==================== End Of Log ============================
--- --- ---
Danke für Ihre Hilfe |
FRST 32-Bit | FRST 64-Bit
Malwarebytes Anti-Malware 