Trojaner-Board - Freigaben unter Vista entfernen

Hallo schrauber,

danke schon mal für deine Hilfe !

:kaffee:

Hier die beiden txt:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 09-06-2013
Ran by MrM (administrator) on 09-06-2013 17:59:18
Running from C:\Users\MrM\Desktop
Microsoft Windows XP Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(SANDBOXIE L.T.D) C:\Program Files\Sandboxie\SbieSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Check Point Software Technologies LTD) C:\Program Files\CheckPoint\ZoneAlarm\vsmon.exe
(Check Point Software Technologies) C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe
(Check Point Software Technologies) C:\Program Files\CheckPoint\ZAForceField\ForceField.exe
(Microsoft Corporation) C:\Windows\ehome\ehRecvr.exe
(Microsoft Corporation) C:\Windows\ehome\ehsched.exe
(Realtek) C:\Program Files\SITECOM\150N USB Wireless LAN Utility\RtlService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Check Point Software Technologies LTD) C:\Program Files\CheckPoint\ZoneAlarm\zatray.exe
(Realtek Semiconductor Corp.) C:\Program Files\SITECOM\150N USB Wireless LAN Utility\RtWlan.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_7_700_202.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_7_700_202.exe
(Microsoft Corporation) C:\Windows\system32\conime.exe
(Opera Software) C:\Program Files\Opera\opera.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office10\WINWORD.EXE
(Microsoft Corporation) C:\Windows\MSAgent\agentsvr.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [ISW] C:\Program Files\CheckPoint\ZAForceField\ForceField.exe /icon="hidden" [738984 2012-11-22] (Check Point Software Technologies)
HKLM\...\Run: [ZoneAlarm] "C:\Program Files\CheckPoint\ZoneAlarm\zatray.exe" [73832 2013-01-29] (Check Point Software Technologies LTD)
BootExecute: autocheck autochk /r \??\N:autocheck autochk *

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/ig/redirectdomain?brand=FUJD&bmod=FUJD
SearchScopes: HKCU - {1993C63F-2963-4CC7-9B04-BAE0986821CE} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&type=827316&p={searchTerms}
BHO: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO: ZoneAlarm Security Engine Registrar - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
Toolbar: HKLM - No Name - {0124123D-61B4-456f-AF86-78C53A0790C5} - No File
Toolbar: HKLM - ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
Toolbar: HKCU -ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: ipp - No CLSID Value -
Handler: msdaipp - No CLSID Value -
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Winsock: Catalog5 01 %SystemRoot%\system32\NLAapi.dll [48128] (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\System32\mswsock.dll"
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\MrM\AppData\Roaming\Mozilla\Firefox\Profiles\6sbpq4ea.default
FF SearchEngine: user_pref("browser.search.selectedEngine", "");
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_202.dll ()
FF Plugin: @bittorrent.com/BitTorrentDNA - C:\Program Files\DNA\plugins\npbtdna.dll (BitTorrent, Inc.)
FF Plugin: @checkpoint.com/FFApi - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\npFFApi.dll ()
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @divx.com/DivX Player Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll No File
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.17.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.1 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: DownloadHelper - C:\Users\MrM\AppData\Roaming\Mozilla\Firefox\Profiles\6sbpq4ea.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF Extension: restart - C:\Users\MrM\AppData\Roaming\Mozilla\Firefox\Profiles\6sbpq4ea.default\Extensions\restart@restart.org.xpi
FF Extension: toolbar - C:\Users\MrM\AppData\Roaming\Mozilla\Firefox\Profiles\6sbpq4ea.default\Extensions\toolbar@web.de.xpi
FF Extension: No Name - C:\Users\MrM\AppData\Roaming\Mozilla\Firefox\Profiles\6sbpq4ea.default\Extensions\{dd3d7613-0246-469d-bc65-2a3cc1668adc}.xpi

Chrome:
=======
CHR HomePage: hxxp://www.google.com
CHR RestoreOnStartup: "hxxp://www.google.com"
CHR DefaultSearchURL: (facemoods) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}sou rceid=chrome&ie={inputEncoding}
CHR DefaultSuggestURL: (facemoods) - "suggest_url": ""
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\26.0.1410.64\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\26.0.1410.64\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\26.0.1410.64\pdf.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Microsoft\u00AE Windows Media Player Firefox Plugin) - C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)
CHR Plugin: (DivX Player Netscape Plugin) - C:\Program Files\Mozilla Firefox\plugins\npDivxPlayerPlugin.dll (DivX, Inc)
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll (Apple Inc.)
CHR Plugin: (Winamp Application Detector) - C:\Program Files\Mozilla Firefox\plugins\npwachk.dll (Nullsoft, Inc.)
CHR Plugin: (DNA Plug-in) - C:\Program Files\DNA\plugins\npbtdna.dll (BitTorrent, Inc.)
CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
CHR Plugin: (DivX Plus Web Player) - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U9) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll No File
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll No File
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll No File
CHR Plugin: (VLC Web Plugin) - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Windows Presentation Foundation) - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw_1166636.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_5_502_110.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.70.11) - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
CHR Extension: (Google Drive) - C:\Users\MrM\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\MrM\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0
CHR Extension: (Google Search) - C:\Users\MrM\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0
CHR Extension: (DivX Plus Web Player HTML5 \u003Cvideo\u003E) - C:\Users\MrM\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.145_0
CHR Extension: (Gmail) - C:\Users\MrM\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0

========================== Services (Whitelisted) =================

R2 Eventlog; C:\Windows\System32\svchost.exe [21504 2008-01-21] (Microsoft Corporation)
R2 IswSvc; C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe [497320 2012-11-22] (Check Point Software Technologies)
R2 Realtek11nSU; C:\Program Files\SITECOM\150N USB Wireless LAN Utility\RtlService.exe [40960 2009-12-07] (Realtek)
R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [85776 2012-12-16] (SANDBOXIE L.T.D)
S4 TestHandler; C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe [341264 2008-12-18] (Fujitsu Siemens Computers)
S4 UPnPService; C:\Program Files\Common Files\MAGIX Shared\UPnPService\UPnPService.exe [544768 2006-12-14] (Magix AG)
S4 USBDLM; C:\Users\MrM\Desktop\USBDLM\USBDLM.exe [314368 2011-04-27] (Uwe Sieber - www.uwe-sieber.de)
R2 vsmon; C:\Program Files\CheckPoint\ZoneAlarm\vsmon.exe [2447888 2013-01-29] (Check Point Software Technologies LTD)
S3 wbengine; "%systemroot%\system32\wbengine.exe" [x]

==================== Drivers (Whitelisted) ====================

S4 ahcix86s; C:\Windows\system32\drivers\ahcix86s.sys [173576 2008-05-27] (AMD Technologies Inc.)
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [4352 2010-10-22] (AVM Berlin)
S2 DgiVecp; C:\Windows\system32\Drivers\DgiVecp.sys [41984 2008-01-10] (Samsung Electronics Co., Ltd.)
R1 dvdfabio; C:\Windows\system32\drivers\dvdfabio.sys [12264 2012-11-13] (Fengtao Software Inc.)
S3 fwlanusbn; C:\Windows\System32\DRIVERS\fwlanusbn.sys [586752 2010-10-22] (AVM GmbH)
S3 GVCplDrv; C:\Windows\System32\Drivers\GVCplDrv.sys [23040 2004-05-02] ()
S3 hcw66xxx; C:\Windows\System32\Drivers\hcw66xxx.sys [673792 2011-02-08] (Hauppauge Computer Works, Inc.)
R2 ISWKL; C:\Program Files\CheckPoint\ZAForceField\ISWKL.sys [27056 2012-11-22] (Check Point Software Technologies)
S4 JRAID; C:\Windows\system32\drivers\jraid.sys [76688 2008-04-03] (JMicron Technology Corp.)
S3 k510bus; C:\Windows\System32\DRIVERS\k510bus.sys [58288 2006-02-17] (MCCI)
S3 k510mdfl; C:\Windows\System32\DRIVERS\k510mdfl.sys [8336 2006-02-17] (MCCI)
S3 k510mdm; C:\Windows\System32\DRIVERS\k510mdm.sys [94064 2006-02-17] (MCCI)
S3 k510mgmt; C:\Windows\System32\DRIVERS\k510mgmt.sys [85408 2006-02-17] (MCCI)
S3 k510obex; C:\Windows\System32\DRIVERS\k510obex.sys [83344 2006-02-17] (MCCI)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [587096 2012-11-15] (Kaspersky Lab)
R1 LUMDriver; C:\Windows\system32\drivers\LUMDriver.sys [16688 2007-04-24] (IBM)
R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [157776 2012-12-16] (SANDBOXIE L.T.D)
S3 SndTAudio; C:\Windows\System32\drivers\SndTAudio.sys [23096 2008-11-11] (Windows (R) Codename Longhorn DDK provider)
S3 SndTVideo; C:\Windows\System32\DRIVERS\SndTVideo.sys [3768 2008-11-11] (Windows (R) 2000 DDK provider)
R2 SSPORT; C:\Windows\system32\Drivers\SSPORT.sys [5120 2008-01-10] (Samsung Electronics)
S3 taphss; C:\Windows\System32\DRIVERS\taphss.sys [32768 2010-01-09] (AnchorFree Inc)
S3 tbhsd; C:\Windows\System32\drivers\tbhsd.sys [26784 2007-12-11] (RapidSolution Software AG)
R3 vdrive; C:\Windows\System32\DRIVERS\vdrive.sys [36328 2012-11-13] (Fengtao Software Inc.)
R1 Vsdatant; C:\Windows\System32\DRIVERS\vsdatant.sys [451160 2012-12-13] (Check Point Software Technologies LTD)
S3 ZD1211BU(ZyDAS); C:\Windows\System32\DRIVERS\zd1211Bu.sys [402432 2005-10-28] (ZyDAS Technology Corporation)
S3 ZDPSp50; C:\Windows\System32\Drivers\ZDPSp50.sys [17664 2004-10-25] (Printing Communications Assoc., Inc. (PCAUSA))
S3 btwaudio; system32\drivers\btwaudio.sys [x]
S3 btwavdt; system32\drivers\btwavdt.sys [x]
S3 btwl2cap; system32\DRIVERS\btwl2cap.sys [x]
S3 btwrchid; system32\DRIVERS\btwrchid.sys [x]
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [x]
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [x]
S3 FsUsbExDisk; \??\C:\Windows\system32\FsUsbExDisk.SYS [x]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [x]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [x]
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
S3 nmwcdnsu; system32\drivers\nmwcdnsu.sys [x]
S3 nmwcdnsuc; system32\drivers\nmwcdnsuc.sys [x]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]
S3 pccsmcfd; system32\DRIVERS\pccsmcfd.sys [x]
S3 StarOpen; No ImagePath
S0 TfFsMon; system32\drivers\TfFsMon.sys [x]
S3 TfNetMon; \??\C:\Windows\system32\drivers\TfNetMon.sys [x]
S0 TfSysMon; system32\drivers\TfSysMon.sys [x]
S3 upperdev; system32\DRIVERS\usbser_lowerflt.sys [x]

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2013-06-09 17:59 - 2013-06-09 17:59 - 00000000 ____D C:\FRST
2013-06-09 17:58 - 2013-06-09 17:58 - 01358931 ____A (Farbar) C:\Users\MrM\Desktop\FRST.exe
2013-06-09 11:17 - 2013-06-09 11:19 - 00000000 ____D C:\Users\MrM\Desktop\bilder_Frankr
2013-06-09 11:07 - 2013-06-09 11:07 - 00000000 ____D C:\Users\MrM\Desktop\WhatsApp Images
2013-06-09 11:07 - 2013-06-09 11:07 - 00000000 ____D C:\Users\MrM\Desktop\___musik____
2013-06-02 19:20 - 2013-06-02 19:20 - 01309884 ____A C:\Users\MrM\Desktop\katzen.zip
2013-06-02 19:18 - 2013-06-02 19:18 - 00000000 ____D C:\Users\MrM\Desktop\P+Z_Ford
2013-05-30 20:13 - 2013-05-30 20:13 - 00000000 ____D C:\Users\MrM\Desktop\Wander_Ausflüge
2013-05-30 20:07 - 2013-06-09 12:25 - 00000000 ____D C:\Users\MrM\Desktop\P+Z_HUF
2013-05-30 19:57 - 2013-05-30 19:57 - 06989743 ____A C:\Users\MrM\Desktop\Zeugnisse.rar
2013-05-30 12:48 - 2013-05-30 12:48 - 00000000 ____D C:\Users\MrM\Desktop\scanner
2013-05-30 12:22 - 2013-05-30 12:23 - 00000000 ____D C:\Users\MrM\Desktop\Kaufverträge
2013-05-30 11:58 - 2013-05-30 20:39 - 00000000 ____D C:\Users\MrM\Desktop\unterhaltung
2013-05-30 11:58 - 2013-05-30 12:23 - 00000000 ____D C:\Users\MrM\Desktop\Küche Köln
2013-05-30 09:35 - 2013-05-30 09:37 - 00000000 ____D C:\Users\MrM\AppData\Roaming\log
2013-05-30 09:35 - 2013-05-30 09:35 - 00001688 ____A C:\Users\Public\Desktop\Blu-ray Copy.lnk
2013-05-30 09:35 - 2013-05-30 09:35 - 00000000 ____D C:\Users\MrM\Documents\BDCopy
2013-05-30 09:35 - 2013-05-30 09:35 - 00000000 ____D C:\ProgramData\Blu-ray Copy
2013-05-30 09:35 - 2013-05-30 09:35 - 00000000 ____D C:\Program Files\Blu-ray Copy
2013-05-29 20:31 - 2013-06-04 20:10 - 00000000 ____D C:\Users\MrM\AppData\Roaming\NVIDIA
2013-05-29 20:31 - 2013-05-29 20:31 - 00000764 ____A C:\Users\MrM\Desktop\DVDFab 9.lnk
2013-05-29 20:31 - 2013-05-29 20:31 - 00000000 ____D C:\Users\MrM\Documents\DVDFab9
2013-05-29 20:31 - 2013-05-29 20:31 - 00000000 ____D C:\Users\MrM\AppData\Roaming\DVDFab9
2013-05-29 20:31 - 2013-05-29 20:31 - 00000000 ____D C:\Program Files\DVDFab 9
2013-05-29 20:08 - 2013-05-29 20:15 - 00000090 ____A C:\ProgramData\Temp.log
2013-05-28 22:05 - 2013-05-28 22:05 - 00000000 ____D C:\Program Files\DVDFab Virtual Drive
2013-05-28 22:05 - 2012-11-13 10:24 - 00036328 ____A (Fengtao Software Inc.) C:\Windows\System32\Drivers\vdrive.sys
2013-05-28 22:05 - 2012-11-13 10:24 - 00012264 ____A (Fengtao Software Inc.) C:\Windows\System32\Drivers\dvdfabio.sys
2013-05-28 17:41 - 2013-05-28 17:41 - 00000000 ____D C:\Users\Public\CyberLink
2013-05-28 17:38 - 2013-05-28 17:38 - 00000000 ____D C:\Users\MrM\AppData\Local\Power2Go
2013-05-27 22:06 - 2013-06-02 18:22 - 00000000 ____A C:\Windows\lgfwup.ini
2013-05-27 22:05 - 2001-08-29 21:00 - 00059904 ____A (Microsoft Corporation) C:\Windows\System32\wbemdisp.tlb
2013-05-27 22:05 - 1998-07-22 00:00 - 00102160 ____A (Microsoft Corporation) C:\Windows\System32\VB6KO.DLL
2013-05-27 21:29 - 2013-05-29 20:09 - 00000000 ____D C:\Users\MrM\AppData\Local\CyberLink
2013-05-27 21:25 - 2013-05-27 22:06 - 00000000 ____D C:\ProgramData\install_clap
2013-05-27 21:23 - 2013-05-29 20:17 - 00000000 ____D C:\ProgramData\CLSK
2013-05-22 20:26 - 2013-05-22 20:26 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-05-14 21:58 - 2013-05-05 21:25 - 12324864 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-05-14 21:57 - 2013-05-05 21:12 - 02382848 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-05-14 21:51 - 2013-04-15 16:20 - 00638328 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys
2013-05-14 21:51 - 2013-04-13 12:56 - 00037376 ____A (Microsoft Corporation) C:\Windows\System32\cdd.dll
2013-05-14 21:51 - 2013-04-05 00:11 - 01800704 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-05-14 21:51 - 2013-04-05 00:09 - 09738752 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-05-14 21:51 - 2013-04-05 00:02 - 01427968 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-05-14 21:51 - 2013-04-05 00:02 - 01129472 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-05-14 21:51 - 2013-04-05 00:02 - 01104384 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-05-14 21:51 - 2013-04-05 00:01 - 00231936 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-05-14 21:51 - 2013-04-04 23:59 - 00065024 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-05-14 21:51 - 2013-04-04 23:58 - 00717824 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-05-14 21:51 - 2013-04-04 23:58 - 00142848 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-05-14 21:51 - 2013-04-04 23:57 - 00420864 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-05-14 21:51 - 2013-04-04 23:56 - 00607744 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-05-14 21:51 - 2013-04-04 23:55 - 01796096 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-05-14 21:51 - 2013-04-04 23:54 - 00073216 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-05-14 21:51 - 2013-04-04 23:50 - 00176640 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-05-14 21:50 - 2013-04-09 03:36 - 02049024 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys

==================== One Month Modified Files and Folders ========

2013-06-09 17:59 - 2013-06-09 17:59 - 00000000 ____D C:\FRST
2013-06-09 17:58 - 2013-06-09 17:58 - 01358931 ____A (Farbar) C:\Users\MrM\Desktop\FRST.exe
2013-06-09 17:16 - 2012-07-06 18:34 - 00000000 ____D C:\Users\MrM\Desktop\Neuer Ordner (4)
2013-06-09 17:12 - 2008-01-21 09:16 - 01445310 ____A C:\Windows\System32\PerfStringBackup.INI
2013-06-09 17:11 - 2008-11-24 10:26 - 01878833 ____A C:\Windows\WindowsUpdate.log
2013-06-09 17:06 - 2006-11-02 15:01 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-06-09 17:06 - 2006-11-02 14:47 - 00003216 ____A C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-06-09 17:06 - 2006-11-02 14:47 - 00003216 ____A C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-06-09 17:06 - 2006-11-02 14:37 - 00000000 ___RD C:\Users\Public\Recorded TV
2013-06-09 13:12 - 2006-11-02 15:01 - 00032530 ____A C:\Windows\Tasks\SCHEDLGU.TXT
2013-06-09 13:03 - 2009-01-11 13:15 - 00000000 ____D C:\Users\MrM\AppData\Roaming\Skype
2013-06-09 12:47 - 2009-01-11 13:15 - 00000000 ___RD C:\Program Files\Skype
2013-06-09 12:47 - 2009-01-11 13:15 - 00000000 ____D C:\ProgramData\Skype
2013-06-09 12:25 - 2013-05-30 20:07 - 00000000 ____D C:\Users\MrM\Desktop\P+Z_HUF
2013-06-09 12:11 - 2013-04-13 10:57 - 00005049 ___AH C:\Windows\System32\BTImages.dat
2013-06-09 12:11 - 2009-08-11 18:17 - 00000000 ____D C:\Users\MrM\AppData\Roaming\vlc
2013-06-09 11:19 - 2013-06-09 11:17 - 00000000 ____D C:\Users\MrM\Desktop\bilder_Frankr
2013-06-09 11:07 - 2013-06-09 11:07 - 00000000 ____D C:\Users\MrM\Desktop\WhatsApp Images
2013-06-09 11:07 - 2013-06-09 11:07 - 00000000 ____D C:\Users\MrM\Desktop\___musik____
2013-06-04 20:10 - 2013-05-29 20:31 - 00000000 ____D C:\Users\MrM\AppData\Roaming\NVIDIA
2013-06-04 20:07 - 2013-04-20 11:56 - 00001546 ____A C:\Windows\Sandboxie.ini
2013-06-02 19:26 - 2009-04-15 22:13 - 00000000 ____D C:\Users\MrM\rezepte
2013-06-02 19:25 - 2009-03-15 11:48 - 00128776 ____A C:\Users\MrM\AppData\Roaming\GDIPFONTCACHEV1.DAT
2013-06-02 19:20 - 2013-06-02 19:20 - 01309884 ____A C:\Users\MrM\Desktop\katzen.zip
2013-06-02 19:18 - 2013-06-02 19:18 - 00000000 ____D C:\Users\MrM\Desktop\P+Z_Ford
2013-06-02 18:22 - 2013-05-27 22:06 - 00000000 ____A C:\Windows\lgfwup.ini
2013-06-02 18:22 - 2008-10-28 12:12 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2013-05-30 20:39 - 2013-05-30 11:58 - 00000000 ____D C:\Users\MrM\Desktop\unterhaltung
2013-05-30 20:13 - 2013-05-30 20:13 - 00000000 ____D C:\Users\MrM\Desktop\Wander_Ausflüge
2013-05-30 19:57 - 2013-05-30 19:57 - 06989743 ____A C:\Users\MrM\Desktop\Zeugnisse.rar
2013-05-30 12:48 - 2013-05-30 12:48 - 00000000 ____D C:\Users\MrM\Desktop\scanner
2013-05-30 12:23 - 2013-05-30 12:22 - 00000000 ____D C:\Users\MrM\Desktop\Kaufverträge
2013-05-30 12:23 - 2013-05-30 11:58 - 00000000 ____D C:\Users\MrM\Desktop\Küche Köln
2013-05-30 12:22 - 2013-02-15 12:21 - 00000000 ____D C:\Users\MrM\Desktop\Verkauf_Wohnungseinrichtung
2013-05-30 11:54 - 2013-04-03 12:25 - 00000000 ____D C:\Users\MrM\Desktop\PC_repair
2013-05-30 09:37 - 2013-05-30 09:35 - 00000000 ____D C:\Users\MrM\AppData\Roaming\log
2013-05-30 09:35 - 2013-05-30 09:35 - 00001688 ____A C:\Users\Public\Desktop\Blu-ray Copy.lnk
2013-05-30 09:35 - 2013-05-30 09:35 - 00000000 ____D C:\Users\MrM\Documents\BDCopy
2013-05-30 09:35 - 2013-05-30 09:35 - 00000000 ____D C:\ProgramData\Blu-ray Copy
2013-05-30 09:35 - 2013-05-30 09:35 - 00000000 ____D C:\Program Files\Blu-ray Copy
2013-05-29 20:31 - 2013-05-29 20:31 - 00000764 ____A C:\Users\MrM\Desktop\DVDFab 9.lnk
2013-05-29 20:31 - 2013-05-29 20:31 - 00000000 ____D C:\Users\MrM\Documents\DVDFab9
2013-05-29 20:31 - 2013-05-29 20:31 - 00000000 ____D C:\Users\MrM\AppData\Roaming\DVDFab9
2013-05-29 20:31 - 2013-05-29 20:31 - 00000000 ____D C:\Program Files\DVDFab 9
2013-05-29 20:17 - 2013-05-27 21:23 - 00000000 ____D C:\ProgramData\CLSK
2013-05-29 20:17 - 2008-12-31 02:12 - 00000000 ____D C:\Program Files\CyberLink
2013-05-29 20:15 - 2013-05-29 20:08 - 00000090 ____A C:\ProgramData\Temp.log
2013-05-29 20:15 - 2008-12-31 02:12 - 00000000 ____D C:\ProgramData\CyberLink
2013-05-29 20:09 - 2013-05-27 21:29 - 00000000 ____D C:\Users\MrM\AppData\Local\CyberLink
2013-05-29 18:35 - 2013-02-03 12:48 - 00000000 ____D C:\ProgramData\DVD Shrink
2013-05-28 22:05 - 2013-05-28 22:05 - 00000000 ____D C:\Program Files\DVDFab Virtual Drive
2013-05-28 17:41 - 2013-05-28 17:41 - 00000000 ____D C:\Users\Public\CyberLink
2013-05-28 17:41 - 2012-02-25 23:18 - 00000000 ____D C:\Users\MrM\Documents\CyberLink
2013-05-28 17:41 - 2008-12-31 00:15 - 00128776 ____A C:\Users\MrM\AppData\Local\GDIPFONTCACHEV1.DAT
2013-05-28 17:40 - 2008-12-31 02:14 - 00000000 ____D C:\Users\MrM\AppData\Roaming\CyberLink
2013-05-28 17:38 - 2013-05-28 17:38 - 00000000 ____D C:\Users\MrM\AppData\Local\Power2Go
2013-05-28 17:36 - 2006-11-02 14:47 - 00420904 ____A C:\Windows\System32\FNTCACHE.DAT
2013-05-27 22:06 - 2013-05-27 21:25 - 00000000 ____D C:\ProgramData\install_clap
2013-05-27 21:35 - 2010-12-28 01:31 - 00499712 ____A (Microsoft Corporation) C:\Windows\System32\msvcp71.dll
2013-05-27 21:35 - 2010-12-28 01:31 - 00348160 ____A (Microsoft Corporation) C:\Windows\System32\msvcr71.dll
2013-05-23 19:37 - 2013-04-15 23:13 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerApp.exe
2013-05-23 19:37 - 2013-04-15 23:13 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerCPLApp.cpl
2013-05-22 20:26 - 2013-05-22 20:26 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-05-21 23:43 - 2012-03-05 15:36 - 00000000 ____D C:\Users\MrM\Desktop\gutscheine
2013-05-15 17:56 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\Microsoft.NET
2013-05-14 21:52 - 2006-11-02 12:24 - 72607752 ____A (Microsoft Corporation) C:\Windows\System32\mrt.exe

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe
[2009-05-28 20:02] - [2009-04-11 08:27] - 2926592 ____A (Microsoft Corporation) d07d4c3038f3578ffce1c0237f2a1253

C:\Windows\System32\winlogon.exe
[2009-05-28 20:02] - [2009-04-11 08:28] - 0314368 ____A (Microsoft Corporation) 898e7c06a350d4a1a64a9ea264d55452

C:\Windows\System32\wininit.exe
[2008-01-21 04:23] - [2008-01-21 04:23] - 0096768 ____A (Microsoft Corporation) 101ba3ea053480bb5d957ef37c06b5ed

C:\Windows\System32\svchost.exe
[2008-01-21 04:23] - [2008-01-21 04:23] - 0021504 ____A (Microsoft Corporation) 3794b461c45882e06856f282eef025af

C:\Windows\System32\services.exe
[2009-05-28 20:02] - [2009-04-11 08:27] - 0279552 ____A (Microsoft Corporation) d4e6d91c1349b7bfb3599a6ada56851b

C:\Windows\System32\User32.dll
[2009-05-28 20:02] - [2009-04-11 08:28] - 0627712 ____A (Microsoft Corporation) 75510147b94598407666f4802797c75a

C:\Windows\System32\userinit.exe
[2008-01-21 04:24] - [2008-01-21 04:24] - 0025088 ____A (Microsoft Corporation) 0e135526e9785d085bcd9aede6fbcbf9

C:\Windows\System32\Drivers\volsnap.sys
[2012-12-12 12:00] - [2012-08-21 13:47] - 0224640 ____A (Microsoft Corporation) 786db5771f05ef300390399f626bf30a

LastRegBack: 2013-06-09 17:12

==================== End Of Log ============================

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 09-06-2013
Ran by MrM at 2013-06-09 18:00:42 Run:
Running from C:\Users\MrM\Desktop
Boot Mode: Normal
==========================================================

==================== Installed Programs =======================

7-Zip 9.20
Adobe Flash Player 11 ActiveX (Version: 11.7.700.169)
Adobe Flash Player 11 Plugin (Version: 11.7.700.202)
Adobe Reader XI (11.0.03) - Deutsch (Version: 11.0.03)
AVM FRITZ!Box Druckeranschluss
Blu-ray Copy 1.0.28
Compatibility Pack for the 2007 Office system (Version: 12.0.6612.1000)
Corel Home Office 5.0.36 (Version: 5)
DivX-Setup (Version: 2.6.1.9)
DVD Shrink 3.2
DVDFab 9.0.4.2 (27/05/2013)
DVDFab Virtual Drive Version 1.4.1.0 (Version: 1.4.1.0)
Energy Settings (Version: 1.0.7)
Falk Navi-Manager (Version: 2.6.1)
Falk Navi-Manager (Version: 2.8.0)
ICQ6.5 (Version: 6.5)
ImagXpress (Version: 7.0.74.0)
IrfanView (remove only)
Logitech Z-series Software 1.04 (Version: 1.04.153)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1)
Microsoft Office Word Viewer 2003 (Version: 11.0.8173.0)
Microsoft Office XP Professional mit FrontPage (Version: 10.0.6626.0)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Works 2000 (Version: 1.0.0.0000)
Mozilla Firefox 21.0 (x86 de) (Version: 21.0)
MSVC80_x86_v2 (Version: 1.0.3.0)
MSVC90_x86 (Version: 1.0.1.2)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
MUSTEK 1200 UB v2.1
NeroBurningROM (Version: 1.0.0.0)
NeroExpress (Version: 1.0.0.0)
neroxml (Version: 1.0.0)
Nonoh (Version: 4.05 build 579)
NVIDIA Display Control Panel (Version: 6.14.12.5896)
NVIDIA Drivers (Version: 1.10.62.40)
NVIDIA Grafiktreiber 311.06 (Version: 311.06)
NVIDIA Install Application (Version: 2.1002.108.688)
NVIDIA PhysX (Version: 9.12.1031)
NVIDIA PhysX-Systemsoftware 9.12.1031 (Version: 9.12.1031)
NVIDIA Systemsteuerung 311.06 (Version: 311.06)
NVIDIA Update 1.11.3 (Version: 1.11.3)
NVIDIA Update Components (Version: 1.11.3)
ODF Add-In für Microsoft Office (Version: 4.0.5309.0)
Opera 12.15 (Version: 12.15.1748)
PDF24 Creator 5.4.0
PowerDVD
PVSonyDll (Version: 1.00.0001)
QuickTime (Version: 7.73.80.64)
Realtek High Definition Audio Driver
Russisch für Deutsche - Transliteration (Version: 1.0.3.40)
Samsung ML-1640 Series
Samsung ML-2010 Series
Sandboxie 3.76 (32-bit) (Version: 3.76)
Serif DrawPlus X2 (Version: 9.0.4.024)
Sitecom 150N USB Wireless LAN Driver and Utility (Version: 1.00.0142)
Skype™ 6.3 (Version: 6.3.107)
swMSM (Version: 12.0.0.1)
SystemDiagnostics (Version: 2.03.0006)
Trillian
Unlocker 1.9.1 (Version: 1.9.1)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0)
VCRedistSetup (Version: 1.0.0)
VLC media player 2.0.1 (Version: 2.0.1)
Winamp (Version: 5.581 )
Winamp Anwendungserkennung (Version: 1.0.0.1)
Windows Media Player Firefox Plugin (Version: 1.0.0.8)
WinRAR
ZoneAlarm Antivirus (Version: 11.0.000.057)
ZoneAlarm Firewall (Version: 11.0.000.057)
ZoneAlarm Free Antivirus + Firewall (Version: 11.0.000.057)
ZoneAlarm LTD Toolbar
ZoneAlarm Security (Version: 11.0.000.057)

==================== Restore Points =========================

==================== Hosts content: ==========================

127.0.0.1 localhost

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:
==================
Error: (06/08/2013 00:16:17 PM) (Source: System Restore) (User: )
Description: Der geplante Wiederherstellungspunkt konnte nicht erstellt werden. Zusätzliche Informationen: (0x8000ffff).

Error: (06/08/2013 00:16:17 PM) (Source: System Restore) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts auf dem Volume (Prozess = C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation; Beschreibung = Geplanter Prüfpunkt; Hr = 0x8000ffff).

Error: (06/08/2013 00:16:17 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "CoCreateInstance" ist ein unerwarteter Fehler aufgetreten. hr = 0x80004002.

Vorgang:
Sicherung abbrechen

Kontext:
Ausführungskontext: Requestor
Aktueller Status: SnapshotSetCreated

Error: (06/08/2013 00:16:17 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienst-Fehler: Die VSS-Ereignisklasse ist nicht registriert. Dadurch wird
verhindert, dass VSS-Generatoren Ereignisse empfangen. Dies kann auf einen Setupfehler
oder das Installationsprogramm bzw. Deinstallationsprogramm einer Anwendung zurückzuführen
sein.

Vorgang:
Sicherung abbrechen

Kontext:
Ausführungskontext: Requestor
Aktueller Status: SnapshotSetCreated

Error: (06/08/2013 00:16:17 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "CoCreateInstance" ist ein unerwarteter Fehler aufgetreten. hr = 0x80040154.

Vorgang:
Generatordaten werden gesammelt
Asynchroner Vorgang wird ausgeführt

Kontext:
Ausführungskontext: Requestor
Aktueller Status: GatherWriterMetadata

Error: (06/08/2013 00:16:17 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienst-Fehler: Die VSS-Ereignisklasse ist nicht registriert. Dadurch wird
verhindert, dass VSS-Generatoren Ereignisse empfangen. Dies kann auf einen Setupfehler
oder das Installationsprogramm bzw. Deinstallationsprogramm einer Anwendung zurückzuführen
sein.

Vorgang:
Generatordaten werden gesammelt
Asynchroner Vorgang wird ausgeführt

Kontext:
Ausführungskontext: Requestor
Aktueller Status: GatherWriterMetadata

Error: (06/07/2013 05:33:49 PM) (Source: System Restore) (User: )
Description: Der geplante Wiederherstellungspunkt konnte nicht erstellt werden. Zusätzliche Informationen: (0x8000ffff).

Error: (06/07/2013 05:33:49 PM) (Source: System Restore) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts auf dem Volume (Prozess = C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation; Beschreibung = Geplanter Prüfpunkt; Hr = 0x8000ffff).

Error: (06/07/2013 05:33:49 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "CoCreateInstance" ist ein unerwarteter Fehler aufgetreten. hr = 0x80004002.

Vorgang:
Sicherung abbrechen

Kontext:
Ausführungskontext: Requestor
Aktueller Status: SnapshotSetCreated

Error: (06/07/2013 05:33:49 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienst-Fehler: Die VSS-Ereignisklasse ist nicht registriert. Dadurch wird
verhindert, dass VSS-Generatoren Ereignisse empfangen. Dies kann auf einen Setupfehler
oder das Installationsprogramm bzw. Deinstallationsprogramm einer Anwendung zurückzuführen
sein.

Vorgang:
Sicherung abbrechen

Kontext:
Ausführungskontext: Requestor
Aktueller Status: SnapshotSetCreated

System errors:
=============
Error: (06/09/2013 05:06:47 PM) (Source: Service Control Manager) (User: )
Description: TfFsMon
TfSysMon

Error: (06/09/2013 05:06:47 PM) (Source: Service Control Manager) (User: )
Description: DgiVecp%%20

Error: (06/09/2013 05:06:46 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalAktivierung{D215781D-019E-4FA0-903D-0CDCDE13A4F5}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (06/09/2013 01:11:00 PM) (Source: Service Control Manager) (User: )
Description: TfFsMon
TfSysMon

Error: (06/09/2013 01:10:59 PM) (Source: Service Control Manager) (User: )
Description: DgiVecp%%20

Error: (06/09/2013 01:10:58 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalAktivierung{D215781D-019E-4FA0-903D-0CDCDE13A4F5}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (06/09/2013 10:20:07 AM) (Source: Service Control Manager) (User: )
Description: TfFsMon
TfSysMon

Error: (06/09/2013 10:20:06 AM) (Source: Service Control Manager) (User: )
Description: DgiVecp%%20

Error: (06/09/2013 10:20:06 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalAktivierung{D215781D-019E-4FA0-903D-0CDCDE13A4F5}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (06/08/2013 11:04:30 PM) (Source: Service Control Manager) (User: )
Description: TfFsMon
TfSysMon

Microsoft Office Sessions:
=========================
Error: (06/08/2013 00:16:17 PM) (Source: System Restore)(User: )
Description: 0x8000ffff

Error: (06/08/2013 00:16:17 PM) (Source: System Restore)(User: )
Description: C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreationGeplanter Prüfpunkt0x8000ffff

Error: (06/08/2013 00:16:17 PM) (Source: VSS)(User: )
Description: CoCreateInstance0x80004002

Vorgang:
Sicherung abbrechen

Kontext:
Ausführungskontext: Requestor
Aktueller Status: SnapshotSetCreated

Error: (06/08/2013 00:16:17 PM) (Source: VSS)(User: )
Description: Vorgang:
Sicherung abbrechen

Kontext:
Ausführungskontext: Requestor
Aktueller Status: SnapshotSetCreated

Error: (06/08/2013 00:16:17 PM) (Source: VSS)(User: )
Description: CoCreateInstance0x80040154

Vorgang:
Generatordaten werden gesammelt
Asynchroner Vorgang wird ausgeführt

Kontext:
Ausführungskontext: Requestor
Aktueller Status: GatherWriterMetadata

Error: (06/08/2013 00:16:17 PM) (Source: VSS)(User: )
Description: Vorgang:
Generatordaten werden gesammelt
Asynchroner Vorgang wird ausgeführt

Kontext:
Ausführungskontext: Requestor
Aktueller Status: GatherWriterMetadata

Error: (06/07/2013 05:33:49 PM) (Source: System Restore)(User: )
Description: 0x8000ffff

Error: (06/07/2013 05:33:49 PM) (Source: System Restore)(User: )
Description: C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreationGeplanter Prüfpunkt0x8000ffff

Error: (06/07/2013 05:33:49 PM) (Source: VSS)(User: )
Description: CoCreateInstance0x80004002

Vorgang:
Sicherung abbrechen

Kontext:
Ausführungskontext: Requestor
Aktueller Status: SnapshotSetCreated

Error: (06/07/2013 05:33:49 PM) (Source: VSS)(User: )
Description: Vorgang:
Sicherung abbrechen

Kontext:
Ausführungskontext: Requestor
Aktueller Status: SnapshotSetCreated

==================== Memory info ===========================

Percentage of memory in use: 62%
Total physical RAM: 3070.51 MB
Available physical RAM: 1136.42 MB
Total Pagefile: 6347.15 MB
Available Pagefile: 4047.88 MB
Total Virtual: 2047.88 MB
Available Virtual: 1898.88 MB

==================== Drives ================================

Drive c: (VISTA-Daheim) (Fixed) (Total:153.63 GB) (Free:24.4 GB) NTFS ==>[Drive with boot components (Windows XP)]
Drive d: (Daten) (Fixed) (Total:303.34 GB) (Free:18.44 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: E7FE8170)
Partition 1: (Active) - (Size=154 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=303 GB) - (Type=07 NTFS)

==================== End Of Log ============================