:rolleyes: Hoffe das passt so. zweites sende ich auch gleich:rolleyes:
FRST Logfile:
FRST Logfile:
FRST Logfile:
FRST Logfile:
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 16-08-2013
Ran by Hermann (administrator) on 16-08-2013 13:11:36
Running from C:\Users\Hermann\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\580650H2
Microsoft® Windows Vista™ Ultimate Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_e2247046\STacSV.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(Hewlett-Packard Company) C:\Windows\system32\Hpservice.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\UniClient\UiFrmWrk\uiWatchDog.exe
(ArcSoft) C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\coreFrameworkHost.exe
(Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_e2247046\aestsrv.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\AMSP_LogServer.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesApp32.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\UniClient\UiFrmWrk\uiSeAgnt.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [NvCplDaemon] - C:\Windows\system32\NvCpl.dll [13781536 2009-05-27] (NVIDIA Corporation)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1045800 2008-03-28] (Synaptics, Inc.)
HKLM\...\Run: [Trend Micro Titanium] - C:\Program Files\Trend Micro\Titanium\UIFramework\uiWinMgr.exe [1374328 2013-05-29] (Trend Micro Inc.)
HKLM\...\Run: [Trend Micro Client Framework] - C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe [132920 2013-02-04] (Trend Micro Inc.)
HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM\...\RunOnce: [DCERegBootClean] - C:\Windows\RegBootClean.exe [181808 2013-08-16] ()
MountPoints2: {1193683c-b80d-11de-bc2b-002186c0c94b} - E:\LaunchU3.exe -a
MountPoints2: {a2c172d4-97ff-11e0-aa90-002186c0c94b} - H:\.\SETUP.exe
HKU\Default\...\Run: [WindowsWelcomeCenter] - C:\Windows\System32\oobefldr.dll [ 2009-04-10] (Microsoft Corporation)
HKU\Default User\...\Run: [WindowsWelcomeCenter] - C:\Windows\System32\oobefldr.dll [ 2009-04-10] (Microsoft Corporation)
HKU\LogMeInRemoteUser\...\Run: [WindowsWelcomeCenter] - C:\Windows\System32\oobefldr.dll [ 2009-04-10] (Microsoft Corporation)
==================== Internet (Whitelisted) ====================
URLSearchHook: (No Name) - {78e516ef-11de-47a1-8364-a99b917ec5ee} - No File
SearchScopes: HKLM - DefaultScope {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050
SearchScopes: HKLM - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050
SearchScopes: HKCU - DefaultScope {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = hxxp://mystart.incredibar.com/mb174/?search={searchTerms}&loc=IB_DS&a=6R8zhbhFCZ&i=26
SearchScopes: HKCU - {66D2DAA5-1FAC-4E71-BAD3-147DC17B775D} URL = hxxp://www.google.de/search?q={searchTerms}&rlz=
SearchScopes: HKCU - {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = hxxp://mystart.incredibar.com/mb174/?search={searchTerms}&loc=IB_DS&a=6R8zhbhFCZ&i=26
BHO: TmIEPlugInBHO Class - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\Module\20004\2.5.1331\6.8.1094\TmIEPlg.dll (Trend Micro Inc.)
BHO: Web Assistant - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Program Files\Web Assistant\Extension32.dll ()
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.)
BHO: TmBpIeBHO Class - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\Module\20002\7.5.1136\7.5.1136\TmBpIe32.dll (Trend Micro Inc.)
Toolbar: HKCU -No Name - {78E516EF-11DE-47A1-8364-A99B917EC5EE} - No File
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\7.5.1136\7.5.1136\TmBpIe32.dll (Trend Micro Inc.)
Handler: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\2.5.1331\6.8.1094\TmIEPlg.dll (Trend Micro Inc.)
Handler: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} - C:\Program Files\Trend Micro\Titanium\UIFramework\ProToolbarIMRatingActiveX.dll (Trend Micro Inc.)
Winsock: Catalog5 08 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [bmiabdepfhhiieiipmeecdmeljggmfee] - C:\Program Files\Trend Micro\AMSP\Module\20002\7.5.1136\7.5.1136\chrome_tmbep.crx
CHR HKLM\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\Web Assistant\source.crx
========================== Services (Whitelisted) =================
R2 ACDaemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [51712 2007-10-11] (ArcSoft)
R2 AESTFilters; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_e2247046\aestsrv.exe [81920 2009-03-02] (Andrea Electronics Corporation)
S3 getPlusHelper; C:\Program Files\NOS\bin\getPlus_Helper.dll [51168 2009-09-23] (NOS Microsystems Ltd.)
R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_e2247046\STacSV.exe [221266 2009-07-21] (IDT, Inc.)
R2 TuneUp.UtilitiesSvc; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe [1724192 2013-01-28] (TuneUp Software)
S4 Web Assistant Updater; C:\Program Files\Web Assistant\ExtensionUpdaterService.exe [185856 2012-06-25] ()
R2 Amsp; "C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe" coreFrameworkHost.exe -m=rb -dt=60000 -ad [x]
==================== Drivers (Whitelisted) ====================
R3 Afc; C:\Windows\System32\drivers\Afc.sys [11776 2005-02-23] (Arcsoft, Inc.)
S3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [36608 2010-06-14] ()
R2 LMIInfo; C:\Program Files\LogMeIn\x86\RaInfo.sys [12856 2008-08-11] (LogMeIn, Inc.)
R2 LMIRfsDriver; C:\Windows\system32\drivers\LMIRfsDriver.sys [47640 2008-08-11] (LogMeIn, Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
S3 nmwcdnsu; C:\Windows\System32\drivers\nmwcdnsu.sys [137600 2010-07-26] (Nokia)
S3 nmwcdnsuc; C:\Windows\System32\drivers\nmwcdnsuc.sys [8576 2010-07-26] (Nokia)
R1 tmactmon; C:\Windows\System32\DRIVERS\tmactmon.sys [96248 2012-12-21] (Trend Micro Inc.)
R1 tmcomm; C:\Windows\System32\DRIVERS\tmcomm.sys [258976 2012-12-21] (Trend Micro Inc.)
R0 TMEBC; C:\Windows\System32\DRIVERS\TMEBC32.sys [38328 2012-08-24] (Trend Micro Inc.)
R1 tmevtmgr; C:\Windows\System32\DRIVERS\tmevtmgr.sys [76648 2012-12-21] (Trend Micro Inc.)
R1 tmtdi; C:\Windows\System32\DRIVERS\tmtdi.sys [92304 2012-05-02] (Trend Micro Inc.)
R3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys [10088 2012-09-19] (TuneUp Software)
S3 UCharger; C:\Windows\System32\Drivers\UCharger.sys [13765 2007-05-15] ()
S3 GigasetGenericUSB; system32\DRIVERS\GigasetGenericUSB.sys [x]
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
S4 LMIRfsClientNP; No ImagePath
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]
U2 TMAgent;
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-08-16 11:35 - 2013-08-16 13:09 - 00181808 _____ C:\Windows\RegBootClean.exe
2013-08-16 11:35 - 2013-08-16 13:09 - 00007668 _____ C:\Windows\RegBootClean.CFG
2013-08-15 21:48 - 2013-08-15 21:48 - 00000872 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-08-15 21:48 - 2013-08-15 21:48 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-08-15 21:48 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-08-15 21:09 - 2013-08-15 21:09 - 00000000 _____ C:\Users\Hermann\defogger_reenable
2013-08-15 20:18 - 2013-08-15 20:18 - 00000005 _____ C:\Users\Hermann\AppData\Roaming\mbam.context.scan
2013-08-15 18:17 - 2013-08-15 18:17 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\Malwarebytes
2013-08-15 18:16 - 2013-08-15 18:16 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-08-14 20:52 - 2013-08-14 20:52 - 00000000 ____D C:\Hotfix
2013-08-14 20:30 - 2013-08-15 16:39 - 00001908 _____ C:\Windows\diagwrn.xml
2013-08-14 20:30 - 2013-08-15 16:39 - 00001908 _____ C:\Windows\diagerr.xml
2013-08-14 20:30 - 2013-08-15 16:39 - 00000951 _____ C:\Windows\setupact.log
2013-08-14 20:30 - 2013-08-15 16:38 - 00000000 _____ C:\Windows\setuperr.log
2013-08-14 19:05 - 2013-08-14 19:13 - 01785144 _____ C:\Users\Hermann\Documents\Einstellungen von Outlook_14_08_2013.xlsx
2013-08-14 18:26 - 2013-08-14 18:57 - 00000000 ____D C:\Users\Hermann\Documents\Sicherungen von Outlook_14_08_2013
2013-08-14 09:48 - 2013-07-25 04:40 - 12334080 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-14 09:48 - 2013-07-25 04:32 - 01800704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-14 09:48 - 2013-07-25 04:30 - 09738752 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-14 09:48 - 2013-07-25 04:26 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-14 09:48 - 2013-07-25 04:26 - 01104384 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-14 09:48 - 2013-07-25 04:25 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-08-14 09:48 - 2013-07-25 04:24 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-08-14 09:48 - 2013-07-25 04:24 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-14 09:48 - 2013-07-25 04:23 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-14 09:48 - 2013-07-25 04:23 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-14 09:48 - 2013-07-25 04:23 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-14 09:48 - 2013-07-25 04:23 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-08-14 09:48 - 2013-07-25 04:23 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-08-14 09:48 - 2013-07-25 04:22 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-14 09:48 - 2013-07-25 04:22 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-14 09:48 - 2013-07-25 04:22 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-08-14 05:17 - 2013-07-05 06:53 - 00905664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-14 05:17 - 2013-06-15 15:22 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\icaapi.dll
2013-08-14 05:17 - 2013-06-15 13:23 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-08-14 05:16 - 2013-07-17 21:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-14 05:16 - 2013-07-10 11:47 - 00783360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-14 05:16 - 2013-07-09 14:10 - 01205168 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-08-14 05:16 - 2013-07-08 06:55 - 03603904 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2013-08-14 05:16 - 2013-07-08 06:55 - 03551680 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-08-14 05:15 - 2013-07-08 06:20 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-14 05:15 - 2013-07-08 06:16 - 00992768 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-14 05:15 - 2013-07-08 06:16 - 00133120 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-14 05:15 - 2013-07-08 06:16 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-10 17:30 - 2013-08-10 17:30 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-08-10 17:29 - 2013-08-10 18:12 - 00000000 ____D C:\Windows\471D8B37C5B344579FA1B3C693334F4F.TMP
2013-08-05 23:13 - 2013-08-15 20:45 - 00001790 _____ C:\Windows\PFRO.log
2013-08-05 22:22 - 2012-12-21 18:50 - 00258976 _____ (Trend Micro Inc.) C:\Windows\system32\Drivers\tmcomm.sys
2013-08-05 20:09 - 2013-08-05 22:57 - 00295713 _____ C:\Users\Hermann\AppData\Local\census.cache
2013-08-05 20:08 - 2013-08-05 22:57 - 00200330 _____ C:\Users\Hermann\AppData\Local\ars.cache
2013-08-03 21:23 - 2013-08-03 21:23 - 00000000 ____D C:\ProgramData\McAfee
2013-07-31 09:15 - 2013-07-31 09:15 - 00002039 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-07-30 13:54 - 2013-08-16 10:29 - 00853652 _____ C:\Windows\WindowsUpdate.log
2013-07-29 11:18 - 2013-07-29 11:18 - 00000000 ____D C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
2013-07-28 22:08 - 2013-07-28 22:08 - 00000324 _____ C:\Users\Hermann\Desktop\Iphone Benuterhandbuch.website
2013-07-26 06:42 - 2013-07-26 06:42 - 00003308 _____ C:\Users\Hermann\Documents\cc_20130726_064243.reg
2013-07-22 07:01 - 2013-07-22 07:01 - 00001630 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-07-22 07:00 - 2013-07-22 07:01 - 00000000 ____D C:\Program Files\iTunes
2013-07-22 07:00 - 2013-07-22 07:00 - 00000000 ____D C:\Program Files\iPod
2013-07-18 07:53 - 2013-08-14 09:58 - 00000000 ____D C:\Windows\system32\MRT
==================== One Month Modified Files and Folders =======
2013-08-16 13:10 - 2013-08-16 13:10 - 00000000 ____D C:\FRST
2013-08-16 13:09 - 2013-08-16 11:35 - 00181808 _____ C:\Windows\RegBootClean.exe
2013-08-16 13:09 - 2013-08-16 11:35 - 00007668 _____ C:\Windows\RegBootClean.CFG
2013-08-16 12:17 - 2008-01-21 10:24 - 01454146 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-16 12:15 - 2013-05-17 08:57 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-16 12:13 - 2010-03-13 13:57 - 00001100 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-16 12:00 - 2013-07-30 13:54 - 00853652 _____ C:\Windows\WindowsUpdate.log
2013-08-16 11:55 - 2006-11-02 14:46 - 00004576 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-16 11:55 - 2006-11-02 14:46 - 00004576 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-16 11:35 - 2009-10-04 18:59 - 00000000 ____D C:\ProgramData\Trend Micro
2013-08-16 07:59 - 2012-07-04 17:34 - 00048509 _____ C:\ProgramData\nvModes.001
2013-08-16 07:59 - 2010-03-13 13:57 - 00001096 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-16 07:58 - 2012-07-04 17:33 - 00048509 _____ C:\ProgramData\nvModes.dat
2013-08-16 07:55 - 2006-11-02 15:00 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-16 07:54 - 2009-10-04 17:47 - 00001076 _____ C:\Windows\bthservsdp.dat
2013-08-16 07:54 - 2006-11-02 15:00 - 00032554 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-08-15 21:48 - 2013-08-15 21:48 - 00000872 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-08-15 21:48 - 2013-08-15 21:48 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-08-15 21:09 - 2013-08-15 21:09 - 00000000 _____ C:\Users\Hermann\defogger_reenable
2013-08-15 21:09 - 2009-10-04 17:52 - 00000000 ____D C:\Users\Hermann
2013-08-15 20:45 - 2013-08-05 23:13 - 00001790 _____ C:\Windows\PFRO.log
2013-08-15 20:26 - 2009-10-04 18:38 - 00076800 _____ C:\Users\Hermann\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-08-15 20:18 - 2013-08-15 20:18 - 00000005 _____ C:\Users\Hermann\AppData\Roaming\mbam.context.scan
2013-08-15 18:17 - 2013-08-15 18:17 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\Malwarebytes
2013-08-15 18:16 - 2013-08-15 18:16 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-08-15 16:39 - 2013-08-14 20:30 - 00001908 _____ C:\Windows\diagwrn.xml
2013-08-15 16:39 - 2013-08-14 20:30 - 00001908 _____ C:\Windows\diagerr.xml
2013-08-15 16:39 - 2013-08-14 20:30 - 00000951 _____ C:\Windows\setupact.log
2013-08-15 16:38 - 2013-08-14 20:30 - 00000000 _____ C:\Windows\setuperr.log
2013-08-15 15:40 - 2009-10-04 21:17 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\vlc
2013-08-15 15:25 - 2010-05-16 15:26 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\BOM
2013-08-15 11:23 - 2012-11-28 06:51 - 00000484 _____ C:\Users\Hermann\Desktop\navigon.com.website
2013-08-15 11:23 - 2012-07-06 16:07 - 00002407 _____ C:\Users\Hermann\Desktop\DVR Configuration Tool.lnk
2013-08-15 11:17 - 2012-12-01 10:40 - 00000000 ____D C:\ProgramData\boost_interprocess
2013-08-15 10:39 - 2009-10-04 18:57 - 00000000 ____D C:\Program Files\Trend Micro
2013-08-15 10:33 - 2012-12-29 13:13 - 00000000 ___HD C:\TMRescueDisk
2013-08-15 07:05 - 2009-10-04 18:42 - 00008192 __RSH C:\BOOTSECT.BAK
2013-08-14 20:52 - 2013-08-14 20:52 - 00000000 ____D C:\Hotfix
2013-08-14 19:13 - 2013-08-14 19:05 - 01785144 _____ C:\Users\Hermann\Documents\Einstellungen von Outlook_14_08_2013.xlsx
2013-08-14 18:59 - 2009-10-04 19:31 - 00000000 ____D C:\Users\Hermann\AppData\Local\Microsoft Help
2013-08-14 18:57 - 2013-08-14 18:26 - 00000000 ____D C:\Users\Hermann\Documents\Sicherungen von Outlook_14_08_2013
2013-08-14 18:15 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\Microsoft.NET
2013-08-14 15:58 - 2009-10-04 21:14 - 00000000 ____D C:\Users\Hermann\AppData\Local\Adobe
2013-08-14 10:32 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\rescache
2013-08-14 10:01 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\de-DE
2013-08-14 09:58 - 2013-07-18 07:53 - 00000000 ____D C:\Windows\system32\MRT
2013-08-14 09:56 - 2006-11-02 12:24 - 75778376 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2013-08-14 09:54 - 2009-10-04 19:31 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-08-14 04:57 - 2013-04-14 08:54 - 00000840 _____ C:\Users\Hermann\Desktop\DSL Speedtest Internet Geschwindigkeit mit Internet Speedtest überprüfen!.website
2013-08-10 18:12 - 2013-08-10 17:29 - 00000000 ____D C:\Windows\471D8B37C5B344579FA1B3C693334F4F.TMP
2013-08-10 17:30 - 2013-08-10 17:30 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-08-10 17:28 - 2009-10-04 18:47 - 00000000 ____D C:\Program Files\Common Files\Wise Installation Wizard
2013-08-05 23:44 - 2010-12-31 17:46 - 00000000 ____D C:\Users\Hermann2
2013-08-05 23:07 - 2009-10-04 19:32 - 00000000 ____D C:\ProgramData\Skype
2013-08-05 23:06 - 2009-10-04 19:43 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\Skype
2013-08-05 22:57 - 2013-08-05 20:09 - 00295713 _____ C:\Users\Hermann\AppData\Local\census.cache
2013-08-05 22:57 - 2013-08-05 20:08 - 00200330 _____ C:\Users\Hermann\AppData\Local\ars.cache
2013-08-05 22:25 - 2012-12-29 13:02 - 00000036 _____ C:\Users\Hermann\AppData\Local\housecall.guid.cache
2013-08-03 21:23 - 2013-08-03 21:23 - 00000000 ____D C:\ProgramData\McAfee
2013-07-31 09:15 - 2013-07-31 09:15 - 00002039 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-07-31 09:15 - 2010-02-19 10:15 - 00000000 ____D C:\Program Files\Google
2013-07-29 11:18 - 2013-07-29 11:18 - 00000000 ____D C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
2013-07-29 11:18 - 2011-05-29 18:15 - 00000000 ____D C:\ProgramData\Apple Computer
2013-07-28 22:09 - 2011-06-11 10:53 - 00000437 _____ C:\Users\Hermann\Desktop\iPod Benutzerhandbuch.website
2013-07-28 22:08 - 2013-07-28 22:08 - 00000324 _____ C:\Users\Hermann\Desktop\Iphone Benuterhandbuch.website
2013-07-26 06:42 - 2013-07-26 06:42 - 00003308 _____ C:\Users\Hermann\Documents\cc_20130726_064243.reg
2013-07-25 04:40 - 2013-08-14 09:48 - 12334080 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-25 04:32 - 2013-08-14 09:48 - 01800704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-07-25 04:30 - 2013-08-14 09:48 - 09738752 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-25 04:26 - 2013-08-14 09:48 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-25 04:26 - 2013-08-14 09:48 - 01104384 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-25 04:25 - 2013-08-14 09:48 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-07-25 04:24 - 2013-08-14 09:48 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-07-25 04:24 - 2013-08-14 09:48 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-25 04:23 - 2013-08-14 09:48 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-25 04:23 - 2013-08-14 09:48 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-07-25 04:23 - 2013-08-14 09:48 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-25 04:23 - 2013-08-14 09:48 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-07-25 04:23 - 2013-08-14 09:48 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-07-25 04:22 - 2013-08-14 09:48 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-25 04:22 - 2013-08-14 09:48 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-25 04:22 - 2013-08-14 09:48 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-07-22 07:01 - 2013-07-22 07:01 - 00001630 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-07-22 07:01 - 2013-07-22 07:00 - 00000000 ____D C:\Program Files\iTunes
2013-07-22 07:00 - 2013-07-22 07:00 - 00000000 ____D C:\Program Files\iPod
2013-07-22 07:00 - 2011-05-29 18:13 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-07-17 21:41 - 2013-08-14 05:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
Files to move or delete:
====================
C:\ProgramData\nvModes.dat
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-08-16 08:05
==================== End Of Log ============================
--- --- ---
--- --- ---
--- --- ---
--- --- ---
[/CODE]
der erste Versuch hat wohl nicht geklappt. Na dann auf ein neues
FRST Logfile:
FRST Logfile:
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 16-08-2013
Ran by Hermann (administrator) on 16-08-2013 13:11:36
Running from C:\Users\Hermann\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\580650H2
Microsoft® Windows Vista™ Ultimate Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_e2247046\STacSV.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(Hewlett-Packard Company) C:\Windows\system32\Hpservice.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\UniClient\UiFrmWrk\uiWatchDog.exe
(ArcSoft) C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\coreFrameworkHost.exe
(Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_e2247046\aestsrv.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\AMSP_LogServer.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesApp32.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\UniClient\UiFrmWrk\uiSeAgnt.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [NvCplDaemon] - C:\Windows\system32\NvCpl.dll [13781536 2009-05-27] (NVIDIA Corporation)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1045800 2008-03-28] (Synaptics, Inc.)
HKLM\...\Run: [Trend Micro Titanium] - C:\Program Files\Trend Micro\Titanium\UIFramework\uiWinMgr.exe [1374328 2013-05-29] (Trend Micro Inc.)
HKLM\...\Run: [Trend Micro Client Framework] - C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe [132920 2013-02-04] (Trend Micro Inc.)
HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM\...\RunOnce: [DCERegBootClean] - C:\Windows\RegBootClean.exe [181808 2013-08-16] ()
MountPoints2: {1193683c-b80d-11de-bc2b-002186c0c94b} - E:\LaunchU3.exe -a
MountPoints2: {a2c172d4-97ff-11e0-aa90-002186c0c94b} - H:\.\SETUP.exe
HKU\Default\...\Run: [WindowsWelcomeCenter] - C:\Windows\System32\oobefldr.dll [ 2009-04-10] (Microsoft Corporation)
HKU\Default User\...\Run: [WindowsWelcomeCenter] - C:\Windows\System32\oobefldr.dll [ 2009-04-10] (Microsoft Corporation)
HKU\LogMeInRemoteUser\...\Run: [WindowsWelcomeCenter] - C:\Windows\System32\oobefldr.dll [ 2009-04-10] (Microsoft Corporation)
==================== Internet (Whitelisted) ====================
URLSearchHook: (No Name) - {78e516ef-11de-47a1-8364-a99b917ec5ee} - No File
SearchScopes: HKLM - DefaultScope {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050
SearchScopes: HKLM - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050
SearchScopes: HKCU - DefaultScope {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = hxxp://mystart.incredibar.com/mb174/?search={searchTerms}&loc=IB_DS&a=6R8zhbhFCZ&i=26
SearchScopes: HKCU - {66D2DAA5-1FAC-4E71-BAD3-147DC17B775D} URL = hxxp://www.google.de/search?q={searchTerms}&rlz=
SearchScopes: HKCU - {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = hxxp://mystart.incredibar.com/mb174/?search={searchTerms}&loc=IB_DS&a=6R8zhbhFCZ&i=26
BHO: TmIEPlugInBHO Class - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\Module\20004\2.5.1331\6.8.1094\TmIEPlg.dll (Trend Micro Inc.)
BHO: Web Assistant - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Program Files\Web Assistant\Extension32.dll ()
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.)
BHO: TmBpIeBHO Class - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\Module\20002\7.5.1136\7.5.1136\TmBpIe32.dll (Trend Micro Inc.)
Toolbar: HKCU -No Name - {78E516EF-11DE-47A1-8364-A99B917EC5EE} - No File
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\7.5.1136\7.5.1136\TmBpIe32.dll (Trend Micro Inc.)
Handler: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\2.5.1331\6.8.1094\TmIEPlg.dll (Trend Micro Inc.)
Handler: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} - C:\Program Files\Trend Micro\Titanium\UIFramework\ProToolbarIMRatingActiveX.dll (Trend Micro Inc.)
Winsock: Catalog5 08 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [bmiabdepfhhiieiipmeecdmeljggmfee] - C:\Program Files\Trend Micro\AMSP\Module\20002\7.5.1136\7.5.1136\chrome_tmbep.crx
CHR HKLM\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\Web Assistant\source.crx
========================== Services (Whitelisted) =================
R2 ACDaemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [51712 2007-10-11] (ArcSoft)
R2 AESTFilters; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_e2247046\aestsrv.exe [81920 2009-03-02] (Andrea Electronics Corporation)
S3 getPlusHelper; C:\Program Files\NOS\bin\getPlus_Helper.dll [51168 2009-09-23] (NOS Microsystems Ltd.)
R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_e2247046\STacSV.exe [221266 2009-07-21] (IDT, Inc.)
R2 TuneUp.UtilitiesSvc; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe [1724192 2013-01-28] (TuneUp Software)
S4 Web Assistant Updater; C:\Program Files\Web Assistant\ExtensionUpdaterService.exe [185856 2012-06-25] ()
R2 Amsp; "C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe" coreFrameworkHost.exe -m=rb -dt=60000 -ad [x]
==================== Drivers (Whitelisted) ====================
R3 Afc; C:\Windows\System32\drivers\Afc.sys [11776 2005-02-23] (Arcsoft, Inc.)
S3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [36608 2010-06-14] ()
R2 LMIInfo; C:\Program Files\LogMeIn\x86\RaInfo.sys [12856 2008-08-11] (LogMeIn, Inc.)
R2 LMIRfsDriver; C:\Windows\system32\drivers\LMIRfsDriver.sys [47640 2008-08-11] (LogMeIn, Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
S3 nmwcdnsu; C:\Windows\System32\drivers\nmwcdnsu.sys [137600 2010-07-26] (Nokia)
S3 nmwcdnsuc; C:\Windows\System32\drivers\nmwcdnsuc.sys [8576 2010-07-26] (Nokia)
R1 tmactmon; C:\Windows\System32\DRIVERS\tmactmon.sys [96248 2012-12-21] (Trend Micro Inc.)
R1 tmcomm; C:\Windows\System32\DRIVERS\tmcomm.sys [258976 2012-12-21] (Trend Micro Inc.)
R0 TMEBC; C:\Windows\System32\DRIVERS\TMEBC32.sys [38328 2012-08-24] (Trend Micro Inc.)
R1 tmevtmgr; C:\Windows\System32\DRIVERS\tmevtmgr.sys [76648 2012-12-21] (Trend Micro Inc.)
R1 tmtdi; C:\Windows\System32\DRIVERS\tmtdi.sys [92304 2012-05-02] (Trend Micro Inc.)
R3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys [10088 2012-09-19] (TuneUp Software)
S3 UCharger; C:\Windows\System32\Drivers\UCharger.sys [13765 2007-05-15] ()
S3 GigasetGenericUSB; system32\DRIVERS\GigasetGenericUSB.sys [x]
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
S4 LMIRfsClientNP; No ImagePath
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]
U2 TMAgent;
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-08-16 11:35 - 2013-08-16 13:09 - 00181808 _____ C:\Windows\RegBootClean.exe
2013-08-16 11:35 - 2013-08-16 13:09 - 00007668 _____ C:\Windows\RegBootClean.CFG
2013-08-15 21:48 - 2013-08-15 21:48 - 00000872 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-08-15 21:48 - 2013-08-15 21:48 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-08-15 21:48 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-08-15 21:09 - 2013-08-15 21:09 - 00000000 _____ C:\Users\Hermann\defogger_reenable
2013-08-15 20:18 - 2013-08-15 20:18 - 00000005 _____ C:\Users\Hermann\AppData\Roaming\mbam.context.scan
2013-08-15 18:17 - 2013-08-15 18:17 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\Malwarebytes
2013-08-15 18:16 - 2013-08-15 18:16 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-08-14 20:52 - 2013-08-14 20:52 - 00000000 ____D C:\Hotfix
2013-08-14 20:30 - 2013-08-15 16:39 - 00001908 _____ C:\Windows\diagwrn.xml
2013-08-14 20:30 - 2013-08-15 16:39 - 00001908 _____ C:\Windows\diagerr.xml
2013-08-14 20:30 - 2013-08-15 16:39 - 00000951 _____ C:\Windows\setupact.log
2013-08-14 20:30 - 2013-08-15 16:38 - 00000000 _____ C:\Windows\setuperr.log
2013-08-14 19:05 - 2013-08-14 19:13 - 01785144 _____ C:\Users\Hermann\Documents\Einstellungen von Outlook_14_08_2013.xlsx
2013-08-14 18:26 - 2013-08-14 18:57 - 00000000 ____D C:\Users\Hermann\Documents\Sicherungen von Outlook_14_08_2013
2013-08-14 09:48 - 2013-07-25 04:40 - 12334080 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-14 09:48 - 2013-07-25 04:32 - 01800704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-14 09:48 - 2013-07-25 04:30 - 09738752 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-14 09:48 - 2013-07-25 04:26 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-14 09:48 - 2013-07-25 04:26 - 01104384 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-14 09:48 - 2013-07-25 04:25 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-08-14 09:48 - 2013-07-25 04:24 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-08-14 09:48 - 2013-07-25 04:24 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-14 09:48 - 2013-07-25 04:23 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-14 09:48 - 2013-07-25 04:23 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-14 09:48 - 2013-07-25 04:23 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-14 09:48 - 2013-07-25 04:23 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-08-14 09:48 - 2013-07-25 04:23 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-08-14 09:48 - 2013-07-25 04:22 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-14 09:48 - 2013-07-25 04:22 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-14 09:48 - 2013-07-25 04:22 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-08-14 05:17 - 2013-07-05 06:53 - 00905664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-14 05:17 - 2013-06-15 15:22 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\icaapi.dll
2013-08-14 05:17 - 2013-06-15 13:23 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-08-14 05:16 - 2013-07-17 21:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-14 05:16 - 2013-07-10 11:47 - 00783360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-14 05:16 - 2013-07-09 14:10 - 01205168 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-08-14 05:16 - 2013-07-08 06:55 - 03603904 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2013-08-14 05:16 - 2013-07-08 06:55 - 03551680 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-08-14 05:15 - 2013-07-08 06:20 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-14 05:15 - 2013-07-08 06:16 - 00992768 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-14 05:15 - 2013-07-08 06:16 - 00133120 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-14 05:15 - 2013-07-08 06:16 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-10 17:30 - 2013-08-10 17:30 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-08-10 17:29 - 2013-08-10 18:12 - 00000000 ____D C:\Windows\471D8B37C5B344579FA1B3C693334F4F.TMP
2013-08-05 23:13 - 2013-08-15 20:45 - 00001790 _____ C:\Windows\PFRO.log
2013-08-05 22:22 - 2012-12-21 18:50 - 00258976 _____ (Trend Micro Inc.) C:\Windows\system32\Drivers\tmcomm.sys
2013-08-05 20:09 - 2013-08-05 22:57 - 00295713 _____ C:\Users\Hermann\AppData\Local\census.cache
2013-08-05 20:08 - 2013-08-05 22:57 - 00200330 _____ C:\Users\Hermann\AppData\Local\ars.cache
2013-08-03 21:23 - 2013-08-03 21:23 - 00000000 ____D C:\ProgramData\McAfee
2013-07-31 09:15 - 2013-07-31 09:15 - 00002039 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-07-30 13:54 - 2013-08-16 10:29 - 00853652 _____ C:\Windows\WindowsUpdate.log
2013-07-29 11:18 - 2013-07-29 11:18 - 00000000 ____D C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
2013-07-28 22:08 - 2013-07-28 22:08 - 00000324 _____ C:\Users\Hermann\Desktop\Iphone Benuterhandbuch.website
2013-07-26 06:42 - 2013-07-26 06:42 - 00003308 _____ C:\Users\Hermann\Documents\cc_20130726_064243.reg
2013-07-22 07:01 - 2013-07-22 07:01 - 00001630 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-07-22 07:00 - 2013-07-22 07:01 - 00000000 ____D C:\Program Files\iTunes
2013-07-22 07:00 - 2013-07-22 07:00 - 00000000 ____D C:\Program Files\iPod
2013-07-18 07:53 - 2013-08-14 09:58 - 00000000 ____D C:\Windows\system32\MRT
==================== One Month Modified Files and Folders =======
2013-08-16 13:10 - 2013-08-16 13:10 - 00000000 ____D C:\FRST
2013-08-16 13:09 - 2013-08-16 11:35 - 00181808 _____ C:\Windows\RegBootClean.exe
2013-08-16 13:09 - 2013-08-16 11:35 - 00007668 _____ C:\Windows\RegBootClean.CFG
2013-08-16 12:17 - 2008-01-21 10:24 - 01454146 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-16 12:15 - 2013-05-17 08:57 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-16 12:13 - 2010-03-13 13:57 - 00001100 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-16 12:00 - 2013-07-30 13:54 - 00853652 _____ C:\Windows\WindowsUpdate.log
2013-08-16 11:55 - 2006-11-02 14:46 - 00004576 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-16 11:55 - 2006-11-02 14:46 - 00004576 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-16 11:35 - 2009-10-04 18:59 - 00000000 ____D C:\ProgramData\Trend Micro
2013-08-16 07:59 - 2012-07-04 17:34 - 00048509 _____ C:\ProgramData\nvModes.001
2013-08-16 07:59 - 2010-03-13 13:57 - 00001096 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-16 07:58 - 2012-07-04 17:33 - 00048509 _____ C:\ProgramData\nvModes.dat
2013-08-16 07:55 - 2006-11-02 15:00 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-16 07:54 - 2009-10-04 17:47 - 00001076 _____ C:\Windows\bthservsdp.dat
2013-08-16 07:54 - 2006-11-02 15:00 - 00032554 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-08-15 21:48 - 2013-08-15 21:48 - 00000872 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-08-15 21:48 - 2013-08-15 21:48 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-08-15 21:09 - 2013-08-15 21:09 - 00000000 _____ C:\Users\Hermann\defogger_reenable
2013-08-15 21:09 - 2009-10-04 17:52 - 00000000 ____D C:\Users\Hermann
2013-08-15 20:45 - 2013-08-05 23:13 - 00001790 _____ C:\Windows\PFRO.log
2013-08-15 20:26 - 2009-10-04 18:38 - 00076800 _____ C:\Users\Hermann\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-08-15 20:18 - 2013-08-15 20:18 - 00000005 _____ C:\Users\Hermann\AppData\Roaming\mbam.context.scan
2013-08-15 18:17 - 2013-08-15 18:17 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\Malwarebytes
2013-08-15 18:16 - 2013-08-15 18:16 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-08-15 16:39 - 2013-08-14 20:30 - 00001908 _____ C:\Windows\diagwrn.xml
2013-08-15 16:39 - 2013-08-14 20:30 - 00001908 _____ C:\Windows\diagerr.xml
2013-08-15 16:39 - 2013-08-14 20:30 - 00000951 _____ C:\Windows\setupact.log
2013-08-15 16:38 - 2013-08-14 20:30 - 00000000 _____ C:\Windows\setuperr.log
2013-08-15 15:40 - 2009-10-04 21:17 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\vlc
2013-08-15 15:25 - 2010-05-16 15:26 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\BOM
2013-08-15 11:23 - 2012-11-28 06:51 - 00000484 _____ C:\Users\Hermann\Desktop\navigon.com.website
2013-08-15 11:23 - 2012-07-06 16:07 - 00002407 _____ C:\Users\Hermann\Desktop\DVR Configuration Tool.lnk
2013-08-15 11:17 - 2012-12-01 10:40 - 00000000 ____D C:\ProgramData\boost_interprocess
2013-08-15 10:39 - 2009-10-04 18:57 - 00000000 ____D C:\Program Files\Trend Micro
2013-08-15 10:33 - 2012-12-29 13:13 - 00000000 ___HD C:\TMRescueDisk
2013-08-15 07:05 - 2009-10-04 18:42 - 00008192 __RSH C:\BOOTSECT.BAK
2013-08-14 20:52 - 2013-08-14 20:52 - 00000000 ____D C:\Hotfix
2013-08-14 19:13 - 2013-08-14 19:05 - 01785144 _____ C:\Users\Hermann\Documents\Einstellungen von Outlook_14_08_2013.xlsx
2013-08-14 18:59 - 2009-10-04 19:31 - 00000000 ____D C:\Users\Hermann\AppData\Local\Microsoft Help
2013-08-14 18:57 - 2013-08-14 18:26 - 00000000 ____D C:\Users\Hermann\Documents\Sicherungen von Outlook_14_08_2013
2013-08-14 18:15 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\Microsoft.NET
2013-08-14 15:58 - 2009-10-04 21:14 - 00000000 ____D C:\Users\Hermann\AppData\Local\Adobe
2013-08-14 10:32 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\rescache
2013-08-14 10:01 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\de-DE
2013-08-14 09:58 - 2013-07-18 07:53 - 00000000 ____D C:\Windows\system32\MRT
2013-08-14 09:56 - 2006-11-02 12:24 - 75778376 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2013-08-14 09:54 - 2009-10-04 19:31 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-08-14 04:57 - 2013-04-14 08:54 - 00000840 _____ C:\Users\Hermann\Desktop\DSL Speedtest Internet Geschwindigkeit mit Internet Speedtest überprüfen!.website
2013-08-10 18:12 - 2013-08-10 17:29 - 00000000 ____D C:\Windows\471D8B37C5B344579FA1B3C693334F4F.TMP
2013-08-10 17:30 - 2013-08-10 17:30 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-08-10 17:28 - 2009-10-04 18:47 - 00000000 ____D C:\Program Files\Common Files\Wise Installation Wizard
2013-08-05 23:44 - 2010-12-31 17:46 - 00000000 ____D C:\Users\Hermann2
2013-08-05 23:07 - 2009-10-04 19:32 - 00000000 ____D C:\ProgramData\Skype
2013-08-05 23:06 - 2009-10-04 19:43 - 00000000 ____D C:\Users\Hermann\AppData\Roaming\Skype
2013-08-05 22:57 - 2013-08-05 20:09 - 00295713 _____ C:\Users\Hermann\AppData\Local\census.cache
2013-08-05 22:57 - 2013-08-05 20:08 - 00200330 _____ C:\Users\Hermann\AppData\Local\ars.cache
2013-08-05 22:25 - 2012-12-29 13:02 - 00000036 _____ C:\Users\Hermann\AppData\Local\housecall.guid.cache
2013-08-03 21:23 - 2013-08-03 21:23 - 00000000 ____D C:\ProgramData\McAfee
2013-07-31 09:15 - 2013-07-31 09:15 - 00002039 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-07-31 09:15 - 2010-02-19 10:15 - 00000000 ____D C:\Program Files\Google
2013-07-29 11:18 - 2013-07-29 11:18 - 00000000 ____D C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
2013-07-29 11:18 - 2011-05-29 18:15 - 00000000 ____D C:\ProgramData\Apple Computer
2013-07-28 22:09 - 2011-06-11 10:53 - 00000437 _____ C:\Users\Hermann\Desktop\iPod Benutzerhandbuch.website
2013-07-28 22:08 - 2013-07-28 22:08 - 00000324 _____ C:\Users\Hermann\Desktop\Iphone Benuterhandbuch.website
2013-07-26 06:42 - 2013-07-26 06:42 - 00003308 _____ C:\Users\Hermann\Documents\cc_20130726_064243.reg
2013-07-25 04:40 - 2013-08-14 09:48 - 12334080 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-25 04:32 - 2013-08-14 09:48 - 01800704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-07-25 04:30 - 2013-08-14 09:48 - 09738752 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-25 04:26 - 2013-08-14 09:48 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-25 04:26 - 2013-08-14 09:48 - 01104384 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-25 04:25 - 2013-08-14 09:48 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-07-25 04:24 - 2013-08-14 09:48 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-07-25 04:24 - 2013-08-14 09:48 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-25 04:23 - 2013-08-14 09:48 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-25 04:23 - 2013-08-14 09:48 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-07-25 04:23 - 2013-08-14 09:48 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-25 04:23 - 2013-08-14 09:48 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-07-25 04:23 - 2013-08-14 09:48 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-07-25 04:22 - 2013-08-14 09:48 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-25 04:22 - 2013-08-14 09:48 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-25 04:22 - 2013-08-14 09:48 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-07-22 07:01 - 2013-07-22 07:01 - 00001630 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-07-22 07:01 - 2013-07-22 07:00 - 00000000 ____D C:\Program Files\iTunes
2013-07-22 07:00 - 2013-07-22 07:00 - 00000000 ____D C:\Program Files\iPod
2013-07-22 07:00 - 2011-05-29 18:13 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-07-17 21:41 - 2013-08-14 05:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
Files to move or delete:
====================
C:\ProgramData\nvModes.dat
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-08-16 08:05
==================== End Of Log ============================
--- --- ---
--- --- ---
--- --- ---
[/CODE]
und jetzt die Addition Code:
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 16-08-2013
Ran by Hermann at 2013-08-16 13:12:03
Running from C:\Users\Hermann\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\580650H2
Boot Mode: Normal
==========================================================
==================== Installed Programs =======================
Update for Microsoft Office 2007 (KB2508958)
Acronis*True*Image*Home (Version: 12.0.9646.4)
Adobe Flash Player 11 ActiveX (Version: 11.8.800.94)
Adobe Reader X (10.1.7) - Deutsch (Version: 10.1.7)
Apple Application Support (Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (Version: 2.1.3.127)
ArcSoft Software Suite
Ashampoo Burning Studio 2010 Advanced 9.25 (Version: 3.1.1)
Biet-O-Matic v2.14.8 (Version: 2.14.8)
Bonjour (Version: 3.0.0.10)
CyberLink YouCam (Version: 2.0.2328)
DVDVideoSoftTB Toolbar
DVR Configuration Tool (Version: 1.0.9)
Free YouTube to MP3 Converter version 3.10.6.727
Google Earth (Version: 7.1.1.1888)
Google Update Helper (Version: 1.3.21.153)
Google Updater (Version: 2.4.2432.1652)
HP Integrated Module with Bluetooth wireless technology 6.0.1.6200 (Version: 6.0.1.6200)
HP Product Detection (Version: 9.7.3)
HP Quick Launch Buttons (Version: 6.40.17.2)
iTunes (Version: 11.0.4.4)
JMicron JMB38X Flash Media Controller (Version: 1.00.17.07)
LightScribe System Software 1.12.33.2 (Version: 1.12.33.2)
LogMeIn (Version: 4.0.982)
Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Access MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Enterprise 2007 (Version: 12.0.6612.1000)
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Groove MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office InfoPath MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1)
Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft_VC80_ATL_x86 (Version: 8.0.50727.4053)
Microsoft_VC80_CRT_x86 (Version: 8.0.50727.4053)
Microsoft_VC80_MFC_x86 (Version: 8.0.50727.4053)
Microsoft_VC80_MFCLOC_x86 (Version: 8.0.50727.4053)
Microsoft_VC90_ATL_x86 (Version: 1.00.0000)
Microsoft_VC90_CRT_x86 (Version: 1.00.0000)
Microsoft_VC90_MFC_x86 (Version: 1.00.0000)
MSVC80_x86 (Version: 1.0.1.0)
MSVC80_x86_v2 (Version: 1.0.3.0)
MSVC90_x86 (Version: 1.0.1.2)
MSXML 4.0 SP2 (KB927978) (Version: 4.20.9841.0)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
NAVIGON Fresh 3.4.1 (Version: 3.4.1)
neroxml (Version: 1.0.0)
Nokia Connectivity Cable Driver (Version: 7.1.36.0)
NVIDIA Drivers (Version: 1.3)
NVIDIA PhysX (Version: 9.09.0203)
PC Connectivity Solution (Version: 10.50.2.0)
QLBCASL (Version: 6.40.17.2)
Realtek 8169 8168 8101E 8102E Ethernet Driver (Version: 1.00.0000)
Sony Picture Utility (Version: 2.0.06.13151)
Sony USB Driver (Version: 2.00)
Trend Micro Titanium (Version: 6.00)
Trend Micro Titanium Internet Security (Version: 6.0)
TuneUp Utilities 2013 (Version: 13.0.3020.2)
TuneUp Utilities Language Pack (de-DE) (Version: 12.0.3600.73)
TuneUp Utilities Language Pack (de-DE) (Version: 13.0.3020.2)
Uninstall 1.0.0.1
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 3.5 SP1 (KB2836940) (Version: 1)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition
Update for Microsoft Office Outlook 2007 (KB2768023) 32-Bit Edition
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2817642) 32-Bit Edition
Update für Microsoft Office Excel 2007 Help (KB963678)
Update für Microsoft Office Outlook 2007 Help (KB963677)
Update für Microsoft Office Powerpoint 2007 Help (KB963669)
Update für Microsoft Office Word 2007 Help (KB963665)
VCRedistSetup (Version: 1.0.0)
VLC media player 2.0.2 (Version: 2.0.2)
Web Assistant 2.0.0.462
Windows Driver Package - ENE (enecir) HIDClass (04/29/2008 2.5.0.0) (Version: 04/29/2008 2.5.0.0)
Windows-Treiberpaket - Nokia pccsmcfd (08/22/2008 7.0.0.0) (Version: 08/22/2008 7.0.0.0)
==================== Restore Points =========================
28-07-2013 18:17:12 Geplanter Prüfpunkt
29-07-2013 18:25:29 Geplanter Prüfpunkt
30-07-2013 20:34:54 Geplanter Prüfpunkt
02-08-2013 08:09:16 Geplanter Prüfpunkt
03-08-2013 07:54:06 Geplanter Prüfpunkt
03-08-2013 15:15:54 Installed Kaspersky Security Scan.
03-08-2013 18:33:46 First Restore Point
05-08-2013 07:35:22 Geplanter Prüfpunkt
05-08-2013 21:05:58 Removed Skype™ 6.3
05-08-2013 21:07:55 Dragon NaturallySpeaking 10 wurde entfernt.
05-08-2013 21:09:59 Dragon NaturallySpeaking 10 wurde entfernt.
05-08-2013 21:17:36 Dragon NaturallySpeaking 10 wurde entfernt.
09-08-2013 11:13:48 Geplanter Prüfpunkt
10-08-2013 15:29:16 Installed SpyHunter
10-08-2013 16:11:13 Removed SpyHunter
12-08-2013 07:41:06 Geplanter Prüfpunkt
14-08-2013 07:45:54 Windows Update
15-08-2013 11:19:27 Geplanter Prüfpunkt
==================== Hosts content: ==========================
2006-11-02 12:23 - 2006-09-18 23:41 - 00000761 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
::1 localhost
==================== Scheduled Tasks (whitelisted) =============
Task: {075F7B0C-8858-426A-81EA-5161F4D13E82} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {0BF3A3FE-F77C-4C2D-8EE3-59B440BE2EA4} - System32\Tasks\{42A51B4D-A259-4418-85D4-42A1287545A2} => C:\Program Files\Internet Explorer\iexplore.exe [2013-07-25] (Microsoft Corporation)
Task: {12549AF8-B73C-4F28-B46D-5B03BC269114} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files\TuneUp Utilities 2013\OneClick.exe [2013-01-28] (TuneUp Software)
Task: {148F52EC-F68A-49E7-A3B6-8CB29BC08668} - System32\Tasks\Microsoft\Windows\Defrag\ManualDefrag => C:\Windows\system32\defrag.exe [2008-01-21] (Microsoft Corp.)
Task: {235D3792-E4B9-424D-85D5-8DC788F7113A} - System32\Tasks\Google Software Updater => C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-09-20] (Google)
Task: {2EF1A2C3-210D-4AFD-BEB7-E51E7FD69C0C} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {3435BFFC-50BA-49F3-8D94-F6C19A331CB3} - System32\Tasks\AdobeAAMUpdater-1.0-Hermann-NB-Hermann => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06] (Adobe Systems Incorporated)
Task: {3A950610-5351-4CF3-89BD-526A7E64AA8B} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-21] ()
Task: {3BDF5081-5E03-4257-9D20-E6DBFF0B0F43} - System32\Tasks\ScanSoft Background Update => C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [2006-10-25] (Nuance Communications, Inc.)
Task: {3C1F18E9-1D95-4DA4-A9EB-015581444533} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2012 => C:\Program Files\TuneUp Utilities 2012\OneClick.exe No File
Task: {3ED41489-88D0-49CD-80B4-158FD317F193} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\OptinNotification => C:\Windows\System32\wsqmcons.exe [2008-01-21] (Microsoft Corporation)
Task: {3F86253D-02E1-470C-8B41-F91BFBD29E5D} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated)
Task: {4E2427A9-64E2-4A3A-A575-0D32AD3676B8} - System32\Tasks\{5C870D8B-27F1-4800-8CC8-E4385EFD68AB} => C:\Program Files\Internet Explorer\iexplore.exe [2013-07-25] (Microsoft Corporation)
Task: {5A6D9831-D95C-4713-B4E9-F03D1644498F} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-21] (Microsoft Corporation)
Task: {64618BFE-33A7-4226-BB0E-194737EE9376} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\schtasks.exe [2008-01-21] (Microsoft Corporation)
Task: {65059E0D-33D8-48E1-93A7-4EBD03AB2173} - System32\Tasks\User_Feed_Synchronization-{26BC0AE6-01AC-4B9C-92D5-DC41FFB09920} => C:\Windows\system32\msfeedssync.exe [2011-04-21] (Microsoft Corporation)
Task: {6D557086-92CD-4537-AAEE-FACF969E3AFB} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-14] (Adobe Systems Incorporated)
Task: {7BB7567D-AFE6-46A2-826F-43AA0510351E} - System32\Tasks\{5F66F870-3162-4721-A120-0E9EC145E007} => C:\Program Files\Skype\Phone\Skype.exe No File
Task: {813E7847-0D79-4F4B-BF04-9332D81A978F} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe No File
Task: {A20F6404-B0C2-445D-8C36-E16941100704} - System32\Tasks\InstallShield Software-Aktualisierungsdienst => C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe [2005-02-16] (InstallShield Software Corporation)
Task: {A2DF0A60-0DE2-44FC-BFCF-BBD3F44C5EA0} - System32\Tasks\ArcSoft Connect Daemon => C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [2007-10-11] (ArcSoft)
Task: {A56F5824-396E-4E73-AA72-2CB24E391438} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-03-13] (Google Inc.)
Task: {B1775AE8-CA29-4E9D-9671-D000F9E162A9} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-12] (Microsoft Corporation)
Task: {B25D4244-6254-4542-9A54-D5A933EC915A} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {DDA55BB4-8388-4922-93DD-AFA9EFB23FEB} - System32\Tasks\User_Feed_Synchronization-{B2554112-A2D4-418C-9D73-4926A18232A1} => C:\Windows\system32\msfeedssync.exe [2011-04-21] (Microsoft Corporation)
Task: {EEF2FF8A-1423-4381-8E8B-9834737C0ED4} - System32\Tasks\InstallShield Software-Online-Aktualisierungsprogramm => C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe [2005-02-16] (InstallShield Software Corporation)
Task: {FC0FB0B6-0C73-4017-A6BD-B2F15CAF4CEA} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-03-13] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\Google Software Updater.job => C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
==================== Faulty Device Manager Devices =============
Name: SM-Bus-Controller
Description: SM-Bus-Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (08/16/2013 07:57:12 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (08/15/2013 08:47:35 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (08/15/2013 01:19:27 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "ConvertStringSidToSid" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070539.
Vorgang:
OnIdentify-Ereignis
Generatordaten werden gesammelt
Kontext:
Ausführungskontext: Shadow Copy Optimization Writer
Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Generatorname: Shadow Copy Optimization Writer
Generatorinstanz-ID: {15cbdd7c-4615-495d-9a91-cfb92fce8f7f}
Error: (08/15/2013 10:26:54 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (08/14/2013 05:34:44 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (08/14/2013 03:55:37 PM) (Source: Application Hang) (User: )
Description: Programm iexplore.exe, Version 9.0.8112.16502 arbeitet nicht mehr mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen über das Problem zu suchen.
Prozess-ID: 11bc
Anfangszeit: 01ce98f5c9f95ffc
Zeitpunkt der Beendigung: 0
Error: (08/14/2013 03:45:24 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (08/14/2013 10:37:24 AM) (Source: Windows Search Service) (User: )
Description: Die Aktualisierung kann nicht gestartet werden, da kein Zugriff auf die Inhaltsquellen bestand. Beheben Sie die Fehler, und starten Sie die Aktualisierung erneut.
Kontext: Anwendung, SystemIndex Katalog
Error: (08/14/2013 10:36:38 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (08/14/2013 10:27:01 AM) (Source: Application Hang) (User: )
Description: Programm OUTLOOK.EXE, Version 12.0.6680.5000 arbeitet nicht mehr mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen über das Problem zu suchen.
Prozess-ID: 1224
Anfangszeit: 01ce98c6f7a4e419
Zeitpunkt der Beendigung: 16
System errors:
=============
Error: (08/15/2013 07:46:48 PM) (Source: Microsoft-Windows-BitLocker-Driver) (User: NT-AUTORITÄT)
Description: 0xc000000dJ:0x0
Error: (08/15/2013 07:32:55 PM) (Source: Microsoft-Windows-BitLocker-Driver) (User: NT-AUTORITÄT)
Description: 0xc000000dJ:0x0
Error: (08/15/2013 01:23:03 PM) (Source: disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk1\DR1.
Error: (08/15/2013 01:23:00 PM) (Source: disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk1\DR1.
Error: (08/14/2013 08:50:29 PM) (Source: disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk1\DR1.
Error: (08/14/2013 08:50:25 PM) (Source: disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk1\DR1.
Error: (08/14/2013 10:13:39 AM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am 14.08.2013 um 10:11:34 unerwartet heruntergefahren.
Error: (08/14/2013 09:54:47 AM) (Source: Service Control Manager) (User: )
Description: Windows Search%%1053
Error: (08/14/2013 09:54:47 AM) (Source: Service Control Manager) (User: )
Description: 30000Windows Search
Error: (08/14/2013 09:54:14 AM) (Source: Service Control Manager) (User: )
Description: Windows Search%%1053
Microsoft Office Sessions:
=========================
Error: (05/09/2012 07:21:10 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6607.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 4 seconds with 0 seconds of active time. This session ended with a crash.
Error: (12/31/2010 00:51:26 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6548.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 22 seconds with 0 seconds of active time. This session ended with a crash.
Error: (10/15/2010 05:17:08 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6539.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 3 seconds with 0 seconds of active time. This session ended with a crash.
Error: (09/07/2010 07:28:51 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6535.5005, Microsoft Office Version: 12.0.6425.1000. This session lasted 4 seconds with 0 seconds of active time. This session ended with a crash.
Error: (12/05/2009 10:54:35 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6514.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 9364 seconds with 660 seconds of active time. This session ended with a crash.
Error: (11/23/2009 09:17:01 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6514.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 7636 seconds with 960 seconds of active time. This session ended with a crash.
Error: (10/04/2009 08:27:10 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6423.1000, Microsoft Office Version: 12.0.6425.1000. This session lasted 16 seconds with 0 seconds of active time. This session ended with a crash.
Error: (10/04/2009 08:25:25 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6423.1000, Microsoft Office Version: 12.0.6425.1000. This session lasted 80 seconds with 0 seconds of active time. This session ended with a crash.
CodeIntegrity Errors:
===================================
Date: 2013-08-16 01:04:31.668
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-userenv_31bf3856ad364e35_6.1.7601.17514_none_9247d45ea984f2ad\userenv.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-08-16 01:04:31.496
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-userenv_31bf3856ad364e35_6.1.7601.17514_none_9247d45ea984f2ad\userenv.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-08-16 01:04:31.325
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-userenv_31bf3856ad364e35_6.1.7601.17514_none_9247d45ea984f2ad\userenv.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-08-16 01:04:31.153
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-userenv_31bf3856ad364e35_6.1.7601.17514_none_9247d45ea984f2ad\userenv.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-08-16 01:04:30.981
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-userenv_31bf3856ad364e35_6.1.7601.17514_none_9247d45ea984f2ad\userenv.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-08-16 01:04:30.810
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-userenv_31bf3856ad364e35_6.1.7601.17514_none_9247d45ea984f2ad\userenv.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-08-16 01:04:25.459
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tpm-driver-wmi_31bf3856ad364e35_6.1.7600.16385_none_6f63648421975be3\Win32_Tpm.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-08-16 01:04:25.272
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tpm-driver-wmi_31bf3856ad364e35_6.1.7600.16385_none_6f63648421975be3\Win32_Tpm.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-08-16 01:04:25.100
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tpm-driver-wmi_31bf3856ad364e35_6.1.7600.16385_none_6f63648421975be3\Win32_Tpm.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-08-16 01:04:24.929
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tpm-driver-wmi_31bf3856ad364e35_6.1.7600.16385_none_6f63648421975be3\Win32_Tpm.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Percentage of memory in use: 55%
Total physical RAM: 3068.03 MB
Available physical RAM: 1380.08 MB
Total Pagefile: 6341.05 MB
Available Pagefile: 4559.95 MB
Total Virtual: 2047.88 MB
Available Virtual: 1903.36 MB
==================== Drives ================================
Drive c: (System) (Fixed) (Total:298.09 GB) (Free:205.36 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive e: (KINGSTON) (Removable) (Total:1.94 GB) (Free:1.44 GB) FAT
Drive f: (Daten) (Fixed) (Total:298.09 GB) (Free:286.69 GB) NTFS
Drive g: (SICHERUNG) (Fixed) (Total:298.09 GB) (Free:255.28 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows XP) (Size: 298 GB) (Disk ID: E1170B21)
Partition 1: (Not Active) - (Size=298 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 133E133E)
Partition 1: (Active) - (Size=298 GB) - (Type=07 NTFS)
========================================================
Disk: 2 (Size: 2 GB) (Disk ID: 00000000)
Partition 1: (Active) - (Size=2 GB) - (Type=06)
========================================================
Disk: 3 (Size: 298 GB) (Disk ID: 8892C914)
Partition 1: (Not Active) - (Size=298 GB) - (Type=07 NTFS)
==================== End Of Log ============================
|
FRST 32-Bit | FRST 64-Bit
AdwCleaner auf deinen Desktop.
