vivarium | 17.08.2013 17:41 | Hi,
ich hoffe ich hab's richtig gemacht. Hier die beiden Dateien...
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 16-08-2013
Ran by *** (administrator) on 17-08-2013 18:36:17
Running from C:\Users\***\Downloads
Microsoft Windows 7 Professional Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(Lenovo.) C:\Windows\system32\ibmpmsvc.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MsMpEng.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Authentec Inc.) C:\Program Files\ThinkVantage Fingerprint Software\upeksvr.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe
(Lenovo) C:\Program Files\Lenovo\Access Connections\AcPrfMgrSvc.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
(Cisco Systems, Inc.) C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
(Lenovo.) C:\Program Files\ThinkPad\Utilities\DOZESVC.EXE
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe
() C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\Scrybe\Service\ScrybeUpdater.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe
() C:\Windows\system32\vaultsvd.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Microsoft Corporation) C:\Windows\system32\wbem\unsecapp.exe
(Lenovo) C:\Program Files\Lenovo\Access Connections\AcSvc.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\tposdsvc.exe
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\tpnumlkd.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesApp32.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Zoom\TpScrex.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Client Security Solution\cssauth.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Lenovo) C:\Program Files\Lenovo\Access Connections\ACTray.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Client Security Solution\password_manager.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
() C:\Program Files\TP-LINK\USB Printer Controller\USB Printer Controller.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe
(Deutsche Telekom AG) C:\Users\***\AppData\Roaming\Telekom\MediencenterSync\Mediencenter.exe
(Lenovo) C:\Program Files\Lenovo\Access Connections\SvcGuiHlpr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\NisSrv.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDCleaner.exe
(Google Inc.) C:\Users\***\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\***\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\***\AppData\Local\Google\Chrome\Application\chrome.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Lenovo Group Limited) C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Users\***\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\***\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\***\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MpCmdRun.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [cssauth] - C:\Program Files\Lenovo\Client Security Solution\cssauth.exe [3110200 2011-06-10] (Lenovo Group Limited)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2342200 2012-07-05] (Synaptics Incorporated)
HKLM\...\Run: [ACTray] - C:\Program Files\Lenovo\Access Connections\ACTray.exe [433216 2011-10-20] (Lenovo)
HKLM\...\Run: [TP-Link USB Printer Controller] - C:\Program Files\TP-LINK\USB Printer Controller\USB Printer Controller.exe [4428800 2012-03-23] ()
HKLM\...\Run: [SDTray] - C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [3830224 2013-05-16] (Safer-Networking Ltd.)
Winlogon\Notify\psfus: C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll [X]
Winlogon\Notify\ScCertProp: wlnotify.dll [X]
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
HKCU\...\Run: [Spybot-S&D Cleaning] - C:\Program Files\Spybot - Search & Destroy 2\SDCleaner.exe [3642312 2013-05-16] (Safer-Networking Ltd.)
HKCU\...\Run: [NTRedirect] - C:\Windows\system32\rundll32.exe "C:\Users\***\AppData\Roaming\BabSolution\Shared\NTRedirect.dll",Run [x] <===== ATTENTION
HKU\Default\...\RunOnce: [WLStart] - C:\Program Files\Windows Live\Installer\wlstart.exe [ 2009-08-20] (Microsoft Corporation)
HKU\Default\...\RunOnce: [] - [x]
HKU\Default\...\RunOnce: [Lenovoautoqdrive] - C:\PROGRA~1\Common~1\Lenovo\Lenovo~1\LenovoAutorunreg.exe [ 2009-03-24] ()
HKU\Default User\...\RunOnce: [WLStart] - C:\Program Files\Windows Live\Installer\wlstart.exe [ 2009-08-20] (Microsoft Corporation)
HKU\Default User\...\RunOnce: [] - [x]
HKU\Default User\...\RunOnce: [Lenovoautoqdrive] - C:\PROGRA~1\Common~1\Lenovo\Lenovo~1\LenovoAutorunreg.exe [ 2009-03-24] ()
IMEO\htcupctloader.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2011\TUAutoReactivator32.exe"
IMEO\itunes.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2011\TUAutoReactivator32.exe"
IMEO\ncc.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2011\TUAutoReactivator32.exe"
Lsa: [Notification Packages] scecli C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\VPN Client.lnk
ShortcutTarget: VPN Client.lnk -> C:\Windows\Installer\{21E247D4-5E27-4BEA-AA4D-19A81203FE2A}\Icon3E5562ED7.ico ()
Startup: C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Mediencenter.lnk
ShortcutTarget: Mediencenter.lnk -> C:\Users\***\AppData\Roaming\Telekom\MediencenterSync\Mediencenter.exe (Deutsche Telekom AG)
BootExecute: autocheck autochk * sdnclean.exe
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=EA790027109593E9&affID=119357&tsp=4975
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com/welcome/thinkpad
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {E668679A-8755-47E1-B2EE-49D9FA828DB8} URL = hxxp://www.bing.com/search?q={searchTerms}&form=LEMDF8&pc=MALC&src=IE-SearchBox;
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =
SearchScopes: HKCU - {A8945019-18BA-4ECC-B55E-160FD84D07CE} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&type=386496&p={searchTerms}
SearchScopes: HKCU - {E668679A-8755-47E1-B2EE-49D9FA828DB8} URL =
BHO: SwissAcademic.Citavi.Picker.IEPicker - {609D670F-B735-4da7-AC6D-F3BD358E325E} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~4\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: IePasswordManagerHelper Class - {BF468356-BB7E-42D7-9F15-4F3B9BCFCED2} - C:\Program Files\Lenovo\Client Security Solution\tvtpwm_ie_com.dll (Lenovo Group Limited)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU -No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
DPF: {1ABA5FAC-1417-422B-BA82-45C35E2C908B} hxxp://kitchenplanner.ikea.com/DE/Core/Player/2020PlayerAX_IKEA_Win32.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Winsock: Catalog5 10 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\..\Interfaces\{6E46B758-E4D6-4596-807B-A57756BA850A}: [NameServer]212.23.115.148 212.23.115.132
FireFox:
========
FF ProfilePath: C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\4j4b4ll7.default
FF user.js: detected! => C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\4j4b4ll7.default\user.js
FF NewTab: hxxp://www1.delta-search.com/?babsrc=NT_ss&mntrId=EA790027109593E9&affID=119357&tsp=4975
FF Homepage: hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=EA790027109593E9&affID=119357&tsp=4975
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @parallelgraphics.com/Cortona - C:\Program Files\Common Files\ParallelGraphics\Cortona\npCortona.dll (ParallelGraphics)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\***\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\***\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin1017319.dll (Amazon.com, Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\ShareazaWebSearch.xml
FF Extension: No Name - C:\Users\***\AppData\Roaming\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
FF Extension: No Name - C:\Users\***\AppData\Roaming\Mozilla\Extensions\{92650c4d-4b8e-4d2a-b7eb-24ecf4f6b63a}
FF Extension: No Name - C:\Users\***\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF Extension: Default - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM\...\Firefox\Extensions: [{8AA36F4F-6DC7-4c06-77AF-5035170634FE}] C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox
FF Extension: Citavi Picker - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox
FF HKCU\...\Firefox\Extensions: [{F74D5734-46F5-4B16-96F0-1E7FBF41B750}] C:\Program Files\Lenovo\Client Security Solution\PWM Firefox Extension\2.0b12
FF Extension: ThinkVantage Password Manager - C:\Program Files\Lenovo\Client Security Solution\PWM Firefox Extension\2.0b12
Chrome:
=======
CHR Extension: (Google Docs) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Gmail) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
========================== Services (Whitelisted) =================
R2 AcPrfMgrSvc; C:\Program Files\Lenovo\Access Connections\AcPrfMgrSvc.exe [134208 2011-10-20] (Lenovo)
R2 AcSvc; C:\Program Files\Lenovo\Access Connections\AcSvc.exe [269376 2011-10-20] (Lenovo)
R2 AMPPALR3; C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe [509448 2012-03-15] (Intel Corporation)
R2 BTHSSecurityMgr; C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe [104208 2012-04-23] (Intel(R) Corporation)
R2 CVPND; C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe [1528624 2009-11-17] (Cisco Systems, Inc.)
S4 LENOVO.CAMMUTE; C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe [50536 2010-07-27] (Lenovo Group Limited)
R2 LENOVO.MICMUTE; C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe [45496 2010-04-07] (Lenovo Group Limited)
S4 LENOVO.TPKNRSVC; C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe [74088 2010-07-27] (Lenovo Group Limited)
R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [93032 2010-04-07] (Lenovo Group Limited)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [20456 2013-01-27] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [295232 2013-01-27] (Microsoft Corporation)
R2 PassThru Service; C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe [88576 2011-09-15] ()
S3 PwmEWSvc; C:\Program Files\ThinkPad\Utilities\PWMEWSVC.EXE [1665120 2012-05-16] (Lenovo Group Limited)
R2 ScrybeUpdater; C:\Program Files\Synaptics\Scrybe\Service\ScrybeUpdater.exe [1300264 2011-05-27] (Synaptics, Inc.)
R2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.)
S4 Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3064000 2012-10-02] (Skype Technologies S.A.)
S3 SUService; C:\Program Files\Lenovo\System Update\SUService.exe [22376 2013-04-11] ()
R2 TPHKLOAD; C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe [131432 2011-07-12] (Lenovo Group Limited)
R2 ucsvc32; C:\Windows\system32\vaultsvd.exe [65024 2012-09-15] ()
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [2759984 2012-06-25] (Intel® Corporation)
==================== Drivers (Whitelisted) ====================
R3 AMPPAL; C:\Windows\System32\DRIVERS\AMPPAL.sys [143360 2012-03-15] (Windows (R) Win 7 DDK provider)
S3 AMPPALP; C:\Windows\System32\DRIVERS\amppal.sys [143360 2012-03-15] (Windows (R) Win 7 DDK provider)
S3 CVirtA; C:\Windows\System32\DRIVERS\CVirtA.sys [5275 2007-01-18] (Cisco Systems, Inc.)
R2 CVPNDRVA; C:\Windows\system32\Drivers\CVPNDRVA.sys [308859 2009-11-17] (Cisco Systems, Inc.)
R3 DNE; C:\Windows\System32\DRIVERS\dne2000.sys [131984 2008-11-16] (Deterministic Networks, Inc.)
S3 htcnprot; C:\Windows\System32\DRIVERS\htcnprot.sys [23040 2010-06-23] (Windows (R) Win 7 DDK provider)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [195296 2013-01-20] (Microsoft Corporation)
R1 MpKsl397c646a; c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{85BB5DD3-E369-4118-A649-4532C93FE723}\MpKsl397c646a.sys [29904 2013-08-17] (Microsoft Corporation)
R3 NETwNs32; C:\Windows\System32\DRIVERS\Netwsn00.sys [10364416 2012-06-03] (Intel Corporation)
S3 pmxdrv; C:\Windows\system32\drivers\pmxdrv.sys [816792 2010-11-19] ()
S3 s117bus; C:\Windows\System32\DRIVERS\s117bus.sys [82984 2007-06-25] (MCCI Corporation)
S3 s117mdfl; C:\Windows\System32\DRIVERS\s117mdfl.sys [14888 2007-06-25] (MCCI Corporation)
S3 s117mdm; C:\Windows\System32\DRIVERS\s117mdm.sys [108456 2007-06-25] (MCCI Corporation)
S3 s117mgmt; C:\Windows\System32\DRIVERS\s117mgmt.sys [100264 2007-06-25] (MCCI Corporation)
S3 s117nd5; C:\Windows\System32\DRIVERS\s117nd5.sys [22952 2007-06-25] (MCCI Corporation)
S3 s117obex; C:\Windows\System32\DRIVERS\s117obex.sys [98344 2007-06-25] (MCCI Corporation)
S3 s117unic; C:\Windows\System32\DRIVERS\s117unic.sys [98856 2007-06-25] (MCCI Corporation)
S3 SCR3XX2K; C:\Windows\System32\DRIVERS\SCR3XX2K.sys [57856 2010-01-07] (SCM Microsystems Inc.)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [23608 2012-07-05] (Synaptics Incorporated)
R2 smihlp; C:\Program Files\ThinkVantage Fingerprint Software\smihlp.sys [11976 2011-05-30] (Authentec Inc.)
R3 TPLINKUDSMBus; C:\Windows\System32\Drivers\TPLINKUDSMBus.sys [89728 2012-03-08] (Windows (R) Codename Longhorn DDK provider)
S3 TPLINKUDSTcpBus; C:\Windows\System32\Drivers\TPLINKUDSTcpBus.sys [146304 2012-03-08] (Windows (R) Codename Longhorn DDK provider)
R3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys [10064 2011-06-06] (TuneUp Software)
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13752 2009-09-29] ()
S3 catchme; \??\C:\Users\***\AppData\Local\Temp\catchme.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-08-17 18:34 - 2013-08-17 18:35 - 01068993 _____ (Farbar) C:\Users\***\Downloads\FRST.exe
2013-08-17 18:34 - 2013-08-17 18:34 - 00714352 _____ C:\Users\***\Downloads\ZipOpenerSetup.exe
2013-08-16 13:21 - 2013-08-16 13:21 - 00985600 _____ C:\Users\***\Downloads\MicrosoftFixit50123.msi
2013-08-16 10:15 - 2013-08-16 10:32 - 104635274 _____ C:\Users\***\Desktop\HLDCGY.part4.rar
2013-08-16 07:41 - 2013-08-16 12:38 - 910163968 _____ C:\Users\***\Desktop\HLDCGY.part2.rar
2013-08-16 07:41 - 2013-08-16 10:13 - 910163968 _____ C:\Users\***\Desktop\HLDCGY.part3.rar
2013-08-15 14:55 - 2013-08-15 18:05 - 910163968 _____ C:\Users\***\Desktop\HLDCGY.part1.rar
2013-08-15 14:48 - 2013-08-16 13:11 - 00000000 ____D C:\Program Files\JDownloader
2013-08-15 14:45 - 2013-08-15 14:45 - 00077236 _____ (AppWork UG (haftungsbeschränkt)) C:\Users\***\Downloads\jDownloaderWebInstaller09581.exe
2013-08-15 14:44 - 2013-08-15 14:44 - 00002864 _____ C:\Users\***\Downloads\HLDCGY.dlc
2013-08-14 23:02 - 2013-08-14 23:03 - 19512553 _____ C:\Users\***\Downloads\ICD-10.zip
2013-08-14 22:59 - 2013-08-14 23:01 - 88450088 _____ C:\Users\***\Downloads\Verhaltenstheraüie.zip
2013-08-14 21:19 - 2013-08-14 21:21 - 04983495 _____ C:\Users\***\Downloads\2013-04-21-614.zip
2013-08-14 19:56 - 2013-08-14 19:58 - 103032969 _____ C:\Users\***\Downloads\PsychoThie20130814.zip
2013-08-14 19:53 - 2013-08-14 19:54 - 51818505 _____ C:\Users\***\Downloads\PsychoElsev20130814.zip
2013-08-14 19:52 - 2013-08-14 19:52 - 06035937 _____ C:\Users\***\Downloads\PsychoSpr20130814.zip
2013-08-14 19:46 - 2013-08-14 19:46 - 05423014 _____ C:\Users\***\Downloads\MemorixPsychosomatikPsychotherapie.zip
2013-08-14 19:43 - 2013-08-14 19:44 - 10739523 _____ C:\Users\***\Downloads\BandelowKlbPsychiatrie2013.zip
2013-08-14 19:22 - 2013-08-14 19:24 - 75692423 _____ C:\Users\***\Downloads\SexualmedThie.zip
2013-08-14 18:24 - 2013-08-14 18:24 - 01856716 _____ C:\Users\***\Downloads\BenkertPocketGuide.zip
2013-08-14 17:34 - 2013-08-14 17:49 - 44980976 _____ C:\Users\***\Downloads\3642036368.rar
2013-08-14 14:55 - 2013-08-14 14:57 - 05651792 _____ C:\Users\***\Downloads\BenkertKompendium.zip
2013-08-12 07:52 - 2013-08-12 08:13 - 360763911 _____ C:\Users\***\Downloads\1308_fox_0285.wmv
2013-08-08 11:08 - 2013-08-08 11:08 - 00000000 ____D C:\Users\***\AppData\Local\{9FE7C15E-61AC-4259-93D6-6E7675B6ED77}
2013-08-06 14:48 - 2013-08-06 14:48 - 00001164 _____ C:\Users\***\Desktop\Mediencenter.lnk
2013-08-02 10:16 - 2013-08-02 10:44 - 419636949 _____ C:\Users\***\Downloads\1308_jock_1548.wmv
2013-07-26 13:57 - 2013-07-26 14:17 - 428981081 _____ C:\Users\***\Downloads\1307_5star_3062.wmv
2013-07-24 15:24 - 2013-08-14 18:17 - 00000000 ____D C:\Users\***\Documents\DGVT
2013-07-19 12:57 - 2013-07-19 13:22 - 540903151 _____ C:\Users\***\Downloads\1307_subserviant_2694 (2).wmv
2013-07-19 09:36 - 2013-07-19 10:00 - 360799597 _____ C:\Users\***\Downloads\1307_subserviant_2694 (1).wmv
2013-07-19 09:31 - 2013-07-19 09:39 - 105491480 _____ C:\Users\***\Downloads\1307_magikboy_2625 (2).wmv
2013-07-19 09:31 - 2013-07-19 09:32 - 10962669 _____ C:\Users\***\Downloads\1307_subserviant_2694.wmv
2013-07-19 08:16 - 2013-07-19 08:16 - 03967768 _____ C:\Users\***\Downloads\1307_magikboy_2625 (1).wmv
2013-07-19 08:09 - 2013-07-19 08:10 - 00480984 _____ C:\Users\***\Downloads\1307_magikboy_2625.wmv
==================== One Month Modified Files and Folders =======
2013-08-17 18:36 - 2012-09-17 23:07 - 00001128 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2424265513-2494307364-3588977769-1000UA.job
2013-08-17 18:35 - 2013-08-17 18:35 - 00000000 ____D C:\FRST
2013-08-17 18:35 - 2013-08-17 18:34 - 01068993 _____ (Farbar) C:\Users\***\Downloads\FRST.exe
2013-08-17 18:34 - 2013-08-17 18:34 - 00714352 _____ C:\Users\***\Downloads\ZipOpenerSetup.exe
2013-08-17 18:33 - 2011-06-05 15:43 - 00000528 _____ C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job
2013-08-17 18:33 - 2010-12-06 10:29 - 00000000 ____D C:\Users\***\AppData\Roaming\Skype
2013-08-17 18:32 - 2009-07-21 07:30 - 00390040 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-17 18:27 - 2011-06-05 15:43 - 00000466 _____ C:\Windows\Tasks\SystemToolsDailyTest.job
2013-08-17 18:26 - 2013-06-19 10:00 - 00001680 _____ C:\Windows\setupact.log
2013-08-17 18:26 - 2013-04-05 08:37 - 00000000 ___RD C:\Users\***\Mediencenter
2013-08-17 18:26 - 2012-08-15 16:10 - 00001096 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-17 18:26 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-17 16:43 - 2010-11-19 04:22 - 01373876 _____ C:\Windows\WindowsUpdate.log
2013-08-17 16:38 - 2012-08-15 16:10 - 00001100 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-17 16:05 - 2009-07-14 06:34 - 00016768 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-17 16:05 - 2009-07-14 06:34 - 00016768 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-17 15:55 - 2013-07-12 08:25 - 00068174 _____ C:\Windows\PFRO.log
2013-08-16 13:56 - 2013-07-10 19:48 - 00029870 _____ C:\Windows\wininit.ini
2013-08-16 13:21 - 2013-08-16 13:21 - 00985600 _____ C:\Users\***\Downloads\MicrosoftFixit50123.msi
2013-08-16 13:11 - 2013-08-15 14:48 - 00000000 ____D C:\Program Files\JDownloader
2013-08-16 12:38 - 2013-08-16 07:41 - 910163968 _____ C:\Users\***\Desktop\HLDCGY.part2.rar
2013-08-16 12:00 - 2011-05-17 22:35 - 00026624 ___SH C:\Users\***\Thumbs.db
2013-08-16 10:32 - 2013-08-16 10:15 - 104635274 _____ C:\Users\***\Desktop\HLDCGY.part4.rar
2013-08-16 10:13 - 2013-08-16 07:41 - 910163968 _____ C:\Users\***\Desktop\HLDCGY.part3.rar
2013-08-15 18:05 - 2013-08-15 14:55 - 910163968 _____ C:\Users\***\Desktop\HLDCGY.part1.rar
2013-08-15 14:45 - 2013-08-15 14:45 - 00077236 _____ (AppWork UG (haftungsbeschränkt)) C:\Users\***\Downloads\jDownloaderWebInstaller09581.exe
2013-08-15 14:44 - 2013-08-15 14:44 - 00002864 _____ C:\Users\***\Downloads\HLDCGY.dlc
2013-08-14 23:03 - 2013-08-14 23:02 - 19512553 _____ C:\Users\***\Downloads\ICD-10.zip
2013-08-14 23:01 - 2013-08-14 22:59 - 88450088 _____ C:\Users\***\Downloads\Verhaltenstheraüie.zip
2013-08-14 21:21 - 2013-08-14 21:19 - 04983495 _____ C:\Users\***\Downloads\2013-04-21-614.zip
2013-08-14 19:58 - 2013-08-14 19:56 - 103032969 _____ C:\Users\***\Downloads\PsychoThie20130814.zip
2013-08-14 19:54 - 2013-08-14 19:53 - 51818505 _____ C:\Users\***\Downloads\PsychoElsev20130814.zip
2013-08-14 19:52 - 2013-08-14 19:52 - 06035937 _____ C:\Users\***\Downloads\PsychoSpr20130814.zip
2013-08-14 19:46 - 2013-08-14 19:46 - 05423014 _____ C:\Users\***\Downloads\MemorixPsychosomatikPsychotherapie.zip
2013-08-14 19:44 - 2013-08-14 19:43 - 10739523 _____ C:\Users\***\Downloads\BandelowKlbPsychiatrie2013.zip
2013-08-14 19:36 - 2012-09-17 23:07 - 00001076 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2424265513-2494307364-3588977769-1000Core.job
2013-08-14 19:24 - 2013-08-14 19:22 - 75692423 _____ C:\Users\***\Downloads\SexualmedThie.zip
2013-08-14 18:24 - 2013-08-14 18:24 - 01856716 _____ C:\Users\***\Downloads\BenkertPocketGuide.zip
2013-08-14 18:17 - 2013-07-24 15:24 - 00000000 ____D C:\Users\***\Documents\DGVT
2013-08-14 17:49 - 2013-08-14 17:34 - 44980976 _____ C:\Users\***\Downloads\3642036368.rar
2013-08-14 14:57 - 2013-08-14 14:55 - 05651792 _____ C:\Users\***\Downloads\BenkertKompendium.zip
2013-08-12 20:09 - 2010-12-06 19:22 - 00000000 ____D C:\Users\***\Documents\Rezepte
2013-08-12 08:13 - 2013-08-12 07:52 - 360763911 _____ C:\Users\***\Downloads\1308_fox_0285.wmv
2013-08-08 11:08 - 2013-08-08 11:08 - 00000000 ____D C:\Users\***\AppData\Local\{9FE7C15E-61AC-4259-93D6-6E7675B6ED77}
2013-08-06 14:48 - 2013-08-06 14:48 - 00001164 _____ C:\Users\***\Desktop\Mediencenter.lnk
2013-08-06 14:48 - 2013-04-05 08:36 - 00001150 _____ C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mediencenter.lnk
2013-08-05 07:34 - 2010-12-06 10:29 - 00000000 ___RD C:\Program Files\Skype
2013-08-05 07:34 - 2010-12-06 10:29 - 00000000 ____D C:\ProgramData\Skype
2013-08-02 10:44 - 2013-08-02 10:16 - 419636949 _____ C:\Users\***\Downloads\1308_jock_1548.wmv
2013-07-28 19:43 - 2013-06-18 09:57 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-07-26 14:17 - 2013-07-26 13:57 - 428981081 _____ C:\Users\***\Downloads\1307_5star_3062.wmv
2013-07-19 13:22 - 2013-07-19 12:57 - 540903151 _____ C:\Users\***\Downloads\1307_subserviant_2694 (2).wmv
2013-07-19 10:00 - 2013-07-19 09:36 - 360799597 _____ C:\Users\***\Downloads\1307_subserviant_2694 (1).wmv
2013-07-19 09:39 - 2013-07-19 09:31 - 105491480 _____ C:\Users\***\Downloads\1307_magikboy_2625 (2).wmv
2013-07-19 09:32 - 2013-07-19 09:31 - 10962669 _____ C:\Users\***\Downloads\1307_subserviant_2694.wmv
2013-07-19 08:16 - 2013-07-19 08:16 - 03967768 _____ C:\Users\***\Downloads\1307_magikboy_2625 (1).wmv
2013-07-19 08:10 - 2013-07-19 08:09 - 00480984 _____ C:\Users\***\Downloads\1307_magikboy_2625.wmv
ZeroAccess:
C:\Users\***\AppData\Local\282d2952
C:\Users\***\AppData\Local\282d2952\U\800000c0.$
C:\Users\***\AppData\Local\282d2952\U\800000cb.$
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-08-12 15:29
==================== End Of Log ============================ --- --- --- Code:
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 16-08-2013
Ran by *** at 2013-08-17 18:37:32
Running from C:\Users\***\Downloads
Boot Mode: Normal
==========================================================
==================== Installed Programs =======================
7-Zip 9.20
Access Help (Version: 3.01)
Adobe AIR (Version: 3.2.0.2070)
Adobe Flash Player 11 ActiveX (Version: 11.4.402.265)
Adobe Flash Player 11 Plugin (Version: 11.7.700.224)
Adobe Reader XI (11.0.03) - Deutsch (Version: 11.0.03)
Advertising Center (Version: 0.0.0.2)
AirPort (Version: 5.6.1.2)
Akamai NetSession Interface
Amazon MP3-Downloader 1.0.17 (Version: 1.0.17)
AMR to MP3 Converter 1.4
Anzeige am Bildschirm (Version: 6.61.00)
Apple Software Update (Version: 2.1.3.127)
Bing Bar (Version: 6.3.2322.0)
Bonjour (Version: 3.0.0.10)
Burn.Now 4.5 (Version: 4.5.0)
Cisco Systems VPN Client 5.0.06.0160 (Version: 5.0.6)
Citavi (Version: 3.0.3.0)
Client Security - Password Manager (Version: 8.30.0049.00)
Conexant 20585 SmartAudio HD (Version: 4.95.48.50)
Corel Burn.Now Lenovo Edition (Version: 4.5.0)
Corel DVD MovieFactory 7 (Version: 7.0.0)
Corel DVD MovieFactory Lenovo Edition (Version: 7.0.0)
Cortona3D Viewer (Version: 6.0.180)
Create Recovery Media (Version: 1.20.0.00)
D3DX10 (Version: 15.4.2368.0902)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition
DHTML Editing Component (Version: 6.02.0001)
Dienstprogramm "ThinkPad UltraNav" (Version: 2.13.0)
Direct DiscRecorder (Version: 1.00.0000)
Disable AMT Profile Synchronization Pop-up for Windows Vista/7 (Version: 1.00)
Dropbox (HKCU Version: 1.4.7)
Energie-Manager (Version: 6.32)
FileZilla Client 3.0.11 (Version: 3.0.11)
FormatFactory 2.60 (Version: 2.60)
Free YouTube Download version 3.1.29.608 (Version: 3.1.29.608)
GIMP 2.8.2 (Version: 2.8.2)
Google Chrome (HKCU Version: 28.0.1500.95)
Google Update Helper (Version: 1.3.21.153)
GPL Ghostscript 9.00
HTC BMP USB Driver (Version: 1.0.5375)
HTC Driver Installer (Version: 3.0.0.021)
HTC Sync (Version: 3.2.20)
IBM SPSS Amos 20 (Version: 20.0.0)
IBM SPSS Smartreader 19 (Version: 19.0.0)
Integrated Camera Driver Installer Package Ver.1.1.0.48 (Version: 1.1.0.48)
Intel PROSet Wireless
Intel(R) Control Center (Version: 1.2.1.1007)
Intel(R) Management Engine Components (Version: 6.0.0.1179)
Intel(R) Network Connections Drivers (Version: 16.8)
Intel(R) Processor Graphics (Version: 8.15.10.2622)
Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed (Version: 15.2.0.0284)
Intel® PROSet/Wireless WiFi-Software (Version: 15.02.0000.1258)
iTunes (Version: 11.0.4.4)
Java 7 Update 21 (Version: 7.0.210)
Java Auto Updater (Version: 2.1.9.5)
Java(TM) 6 Update 26 (Version: 6.0.260)
JavaFX 2.1.0 (Version: 2.1.0)
Junk Mail filter update (Version: 15.4.3502.0922)
Lenovo Auto Scroll Utility (Version: 1.11)
Lenovo Patch Utility (Version: 1.3.0.9)
Lenovo System Interface Driver (Version: 1.05)
Lenovo System Update (Version: 5.02.0011)
Lenovo ThinkVantage Toolbox (Version: 6.0.5849.23)
Lenovo Warranty Information (Version: 1.0.0004.00)
Lenovo Welcome (Version: 2.0.020.0)
Mediencenter 3.8.0.2907 (HKCU Version: 3.8.0.2907)
Mesh Runtime (Version: 15.4.5722.2)
Message Center Plus (Version: 2.0.0012.00)
Messenger Companion (Version: 15.4.3502.0922)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8402.2)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Office 2010 Service Pack 1 (SP1)
Microsoft Office Access MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Outlook Connector (Version: 14.0.5118.5000)
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Professional 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (French) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (Italian) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proofing (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Single Image 2010 (Version: 14.0.6029.1000)
Microsoft Office Word MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Outlook Social Connector Provider for Windows Live Messenger 32-bit (Version: 14.0.5120.5000)
Microsoft Reader Text-to-Speech deutsch (Version: 01.00.0000)
Microsoft Research AutoCollage Touch 2009 (Version: 2.00.2009)
Microsoft Search Enhancement Pack (Version: 3.0.133.0)
Microsoft Security Client (Version: 4.2.0223.1)
Microsoft Security Client DE-DE Language Pack (Version: 2.1.1116.0)
Microsoft Security Essentials (Version: 4.2.223.1)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (Version: 9.0.30729.5570)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Mobile Broadband Connect (Version: 3.5.0010)
Mozilla Firefox 22.0 (x86 de) (Version: 22.0)
Mozilla Maintenance Service (Version: 22.0)
MP3-Cutter
MP4 To MP3 Converter V3.0
MSVCRT (Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
MSXML 4.0 SP2 Parser and SDK (Version: 4.20.9818.0)
MSXML 4.0 SP3 Parser (KB2721691) (Version: 4.30.2114.0)
MSXML 4.0 SP3 Parser (KB2758694) (Version: 4.30.2117.0)
MSXML 4.0 SP3 Parser (KB973685) (Version: 4.30.2107.0)
MSXML 4.0 SP3 Parser (Version: 4.30.2100.0)
Nero 9 Essentials
Nero BurnRights (Version: 3.4.13.100)
Nero BurnRights Help (Version: 3.4.4.100)
Nero ControlCenter (Version: 9.0.0.1)
Nero DiscSpeed (Version: 5.4.13.100)
Nero DiscSpeed Help (Version: 5.4.4.100)
Nero DriveSpeed (Version: 4.4.12.100)
Nero DriveSpeed Help (Version: 4.4.4.100)
Nero InfoTool (Version: 6.4.12.100)
Nero InfoTool Help (Version: 6.4.4.100)
Nero Installer (Version: 4.4.9.0)
Nero Online Upgrade (Version: 1.3.0.0)
Nero StartSmart (Version: 9.4.38.100)
Nero StartSmart Help (Version: 9.4.38.100)
neroxml (Version: 1.0.0)
Nvu 1.0 (Version: 1.0)
OLYMPUS Digital Camera Updater (Version: 1.0.1)
Prezi Desktop (Version: 4.0.4)
RedMon - Redirection Port Monitor
Registry Patch to Enable Maximum Power Saving on WiFi Adapters for Windows 7 (Version: 1.00)
Rescue and Recovery (Version: 4.30.0025.00)
RICOH R5U230 Media Driver ver.2.06.02.02 (Version: 2.06.02.02)
Riva FLV Player (Version: 1.0.0000)
RUBICon (Version: 2.0.25)
SeaMonkey 2.14.1 (x86 de) (Version: 2.14.1)
SecondLifeViewer2 (remove only)
Skype Click to Call (Version: 6.3.11079)
Skype™ 6.6 (Version: 6.6.106)
Spybot - Search & Destroy (Version: 2.1.19)
Synaptics Gesture Suite featuring SYNAPTICS | Scrybe (Version: 1.6.5.17120)
ThinkPad Bluetooth with Enhanced Data Rate Software (Version: 6.2.1.3200)
ThinkPad FullScreen Magnifier (Version: 2.40)
ThinkPad Modem Adapter (Version: 7.80.5.0)
ThinkPad Power Management Driver (Version: 1.60.0.4)
ThinkPad UltraNav Driver (Version: 16.2.5.0)
ThinkVantage Access Connections (Version: 5.85)
ThinkVantage Communications Utility (Version: 1.42)
ThinkVantage Fingerprint Software (Version: 5.9.6.7084)
ThinkVantage System für aktiven Festplattenschutz (Version: 1.77.0.5)
TP-LINK USB Printer Controller (Version: 1.0.12.0323)
TrueCrypt (Version: 7.1)
TuneUp Utilities 2011 (Version: 10.0.4600.4)
TuneUp Utilities Language Pack (de-DE) (Version: 10.0.4600.4)
Turbo Lister 2 (Version: 2.00.0000)
Überwachungstool für die Intel® Turbo-Boost-Technik (Version: 1.0.186.3)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1)
Update for Microsoft Office 2010 (KB2494150)
Update for Microsoft Office 2010 (KB2553065)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553378) 32-Bit Edition
Update for Microsoft Office 2010 (KB2566458)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition
Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition
Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition
Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition
Update for Microsoft Outlook 2010 (KB2597090) 32-Bit Edition
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition
Update for Microsoft PowerPoint 2010 (KB2598240) 32-Bit Edition
Verizon Wireless Mobile Broadband Self Activation (Version: 3.1.4)
Windows Driver Package - Broadcom (BTHUSB) Bluetooth (04/08/2010 6.3.5.430) (Version: 04/08/2010 6.3.5.430)
Windows Driver Package - Broadcom Bluetooth (06/15/2009 6.2.0.9000) (Version: 06/15/2009 6.2.0.9000)
Windows Driver Package - Broadcom Bluetooth (07/30/2009 6.2.0.9405) (Version: 07/30/2009 6.2.0.9405)
Windows Driver Package - Broadcom Bluetooth (09/11/2009 6.2.0.9407) (Version: 09/11/2009 6.2.0.9407)
Windows Driver Package - Broadcom HIDClass (07/28/2009 6.2.0.9800) (Version: 07/28/2009 6.2.0.9800)
Windows Live Communications Platform (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3538.0513)
Windows Live Family Safety (Version: 15.4.3538.0513)
Windows Live Fotogalerie (Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (Version: 15.4.3502.0922)
Windows Live Mail (Version: 15.4.3502.0922)
Windows Live Mesh (Version: 15.4.3502.0922)
Windows Live Mesh ActiveX control for remote connections (Version: 15.4.5722.2)
Windows Live Messenger (Version: 15.4.3538.0513)
Windows Live Messenger Companion Core (Version: 15.4.3502.0922)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (Version: 15.4.3502.0922)
Windows Live Photo Common (Version: 15.4.3502.0922)
Windows Live Photo Gallery (Version: 15.4.3502.0922)
Windows Live PIMT Platform (Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (Version: 15.4.3502.0922)
Windows Live SOXE Definitions (Version: 15.4.3502.0922)
Windows Live Sync (Version: 14.0.8089.726)
Windows Live UX Platform (Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (Version: 15.4.3508.1109)
Windows Live Writer (Version: 15.4.3502.0922)
Windows Live Writer Resources (Version: 15.4.3502.0922)
Windows Media Player Firefox Plugin (Version: 1.0.0.8)
Windows-Treiberpaket - Intel (e1kexpress) Net (12/10/2009 11.5.10.0) (Version: 12/10/2009 11.5.10.0)
Windows-Treiberpaket - Intel (HECI) System (09/17/2009 6.0.0.1179) (Version: 09/17/2009 6.0.0.1179)
Windows-Treiberpaket - Intel System (06/04/2009 1.0.0.0002) (Version: 06/04/2009 1.0.0.0002)
Windows-Treiberpaket - Intel System (10/28/2009 9.1.1.1022) (Version: 10/28/2009 9.1.1.1022)
Windows-Treiberpaket - Intel USB (08/20/2009 9.1.1.1020) (Version: 08/20/2009 9.1.1.1020)
Windows-Treiberpaket - Lenovo 1.60.0.4 (11/18/2009 1.60.0.4) (Version: 11/18/2009 1.60.0.4)
Windows-Treiberpaket - OLYMPUS IMAGING CORP. Camera Communication Driver Package (09/09/2009 1.0.0.0) (Version: 09/09/2009 1.0.0.0)
Windows-Treiberpaket - Ricoh Company MS Host Controller (10/26/2009 6.10.02.07) (Version: 10/26/2009 6.10.02.07)
==================== Restore Points =========================
22-07-2013 06:37:42 Geplanter Prüfpunkt
29-07-2013 17:12:08 Geplanter Prüfpunkt
06-08-2013 12:38:17 Geplanter Prüfpunkt
14-08-2013 06:29:55 Geplanter Prüfpunkt
16-08-2013 08:01:05 S
16-08-2013 11:07:45 S
16-08-2013 11:08:50 S
16-08-2013 11:22:02 Installed Microsoft Fix it 50123
16-08-2013 11:27:10 Installed Microsoft Fix it 50123
16-08-2013 12:32:37 S
17-08-2013 13:58:46 S
17-08-2013 14:00:25 S
==================== Hosts content: ==========================
2009-07-14 04:04 - 2013-06-14 08:58 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
Task: {11BFD002-5FCA-46D7-99CA-18A467A48F38} - System32\Tasks\SystemToolsDailyTest => C:\Program Files\PC-Doctor\uaclauncher.exe [2011-06-27] (PC-Doctor, Inc.)
Task: {13C99129-D58F-49E1-99F9-1C0DCD48B19F} - System32\Tasks\TVT\LaunchRnR => %RR%\rrcmd.exe No File
Task: {1631E089-C57A-4C05-8158-1AA11FE20171} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-08-15] (Google Inc.)
Task: {23EFF5ED-3A67-46EB-B754-8EC2C4FA37D8} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files\Lenovo\System Update\tvsuShim.exe [2013-04-11] ()
Task: {27F72222-3879-4CB2-85F0-A215B4E8ADC0} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files\Spybot - Search & Destroy 2\SDImmunize.exe No File
Task: {2A571016-1477-49AC-92F4-A2CBB3D8184A} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-20] (Microsoft Corporation)
Task: {62948E2D-4ABB-4728-BA5E-86CA80E42BFC} - System32\Tasks\Browser Manager => C:\Windows\system32\sc.exe [2009-07-14] (Microsoft Corporation)
Task: {6C26C17B-8034-430E-AC63-BB219FCC7542} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\PC-Doctor\uaclauncher.exe [2011-06-27] (PC-Doctor, Inc.)
Task: {6C830667-035D-4E6B-AE67-F0C5060B94F0} - System32\Tasks\Google Updater and Installer => C:\Users\***\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-16] (Google Inc.)
Task: {6D481D47-466F-4473-8112-A6430136B9C9} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2424265513-2494307364-3588977769-1000Core => C:\Users\***\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-16] (Google Inc.)
Task: {6D687FBC-4CD2-44E3-A378-9EC04F756E46} - System32\Tasks\JavaUpdateSched => C:\Windows\System32\jusched.exe No File
Task: {7814C411-5DA0-4099-867E-44CB36E8EC4F} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2424265513-2494307364-3588977769-1000UA => C:\Users\***\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-16] (Google Inc.)
Task: {83905B62-68C4-4219-ACFD-F8AA00DE5CE1} - System32\Tasks\TVT\ChangePWD => %RR%\rrcmd.exe No File
Task: {8BA6B856-B798-4A06-8E00-9A0AFDCE5E26} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {96212594-E16D-462A-B7E8-2AEE724C769B} - System32\Tasks\TVT\UpdateRnR => %TVTCOMMON%\Scheduler\tvtsetsched.exe No File
Task: {9E8B4846-1592-4799-A8D0-C817B1DA05BD} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => c:\Program Files\Microsoft Security Client\MpCmdRun.exe [2013-01-27] (Microsoft Corporation)
Task: {AE20DA03-B461-418F-B755-C2074ABC1CE8} - System32\Tasks\Express FilesUpdate => C:\Program Files\ExpressFiles\EFUpdater.exe No File
Task: {B216C86A-81DA-43DB-B488-769BD1E0BAB0} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-03-12] (Oracle Corporation)
Task: {B34FDA2D-FD35-4628-8A56-5E0E9BF6F53A} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe [2010-11-20] (Microsoft Corporation)
Task: {B5A8B7EE-F61F-478C-A745-09A70DE4FAFE} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe No File
Task: {BB98A262-CF96-46EF-982D-77B6A6EA3D11} - System32\Tasks\{5242E32B-A714-49F4-AD46-3C3D63060455} => C:\Program Files\Skype\\Phone\Skype.exe [2013-06-21] (Skype Technologies S.A.)
Task: {C5FB7968-92DC-43F1-8A92-725C5C8B8C1D} - System32\Tasks\BrowserDefendert => C:\Windows\system32\sc.exe [2009-07-14] (Microsoft Corporation)
Task: {C6932140-D1C0-4FA2-8C6B-7CFCEE01EF21} - System32\Tasks\Launch HTC Sync Loader => C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe [2012-04-17] ()
Task: {C907D1BC-111A-43B4-AEFE-4571DB51DF65} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files\Spybot - Search & Destroy 2\SDScan.exe No File
Task: {CE82BD9A-B1C2-44CA-93AC-BD318095C569} - System32\Tasks\PCDEventLauncher => C:\Program Files\PC-Doctor\sessionchecker.exe [2011-06-27] (PC-Doctor, Inc.)
Task: {D369F111-A4A5-4D2F-83B3-DB9D615F375D} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-05-11] (Adobe Systems Incorporated)
Task: {DE60EDDC-F3A9-49B5-8F42-F9BE72945AB0} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-08-15] (Google Inc.)
Task: {E704046D-1829-4F64-AA25-9E186D07E3B8} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2011 => C:\Program Files\TuneUp Utilities 2011\OneClick.exe [2011-12-13] (TuneUp Software)
Task: {EB252E21-311D-4A0E-A926-C4EADB1D0701} - System32\Tasks\Message Center plus => C:\Program Files\LENOVO\Message Center Plus\MCPLaunch.exe [2009-05-27] ()
Task: {F2B1BF00-20BC-46B4-8C41-6DFE1C9C98DF} - System32\Tasks\EPUpdater => C:\Users\***\AppData\Roaming\BABSOL~1\Shared\BabMaint.exe No File
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2424265513-2494307364-3588977769-1000Core.job => C:\Users\***\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2424265513-2494307364-3588977769-1000UA.job => C:\Users\***\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job => C:\Program Files\PC-Doctor\uaclauncher.exe
Task: C:\Windows\Tasks\SystemToolsDailyTest.job => C:\Program Files\PC-Doctor\uaclauncher.exe
==================== Faulty Device Manager Devices =============
Name: Cisco Systems VPN Adapter
Description: Cisco Systems VPN Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: CVirtA
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: Intel(R) 82577LM Gigabit Network Connection
Description: Intel(R) 82577LM Gigabit Network Connection
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Intel
Service: e1kexpress
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: =========================
Application errors:
==================
Error: (08/17/2013 06:32:49 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (08/17/2013 04:02:46 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (08/17/2013 03:58:26 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.
Vorgang:
Generatordaten werden gesammelt
Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {ae276deb-a0a9-4a90-9204-43f32372fcdf}
Error: (08/16/2013 02:32:35 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.
Vorgang:
Generatordaten werden gesammelt
Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {1de0d097-8bb6-4df0-bdc7-ae44e2d36793}
Error: (08/16/2013 01:53:08 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (08/16/2013 01:36:27 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (08/16/2013 01:19:07 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (08/16/2013 01:08:50 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddWin32ServiceFiles: Unable to back up image of service BrowserDefendert since QueryServiceConfig API failed
System Error:
Das System kann die angegebene Datei nicht finden.
.
Error: (08/16/2013 01:07:52 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddWin32ServiceFiles: Unable to back up image of service BrowserDefendert since QueryServiceConfig API failed
System Error:
Das System kann die angegebene Datei nicht finden.
.
Error: (08/16/2013 11:42:40 AM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
System errors:
=============
Error: (08/17/2013 06:37:35 PM) (Source: Microsoft Antimalware) (User: )
Description: Beim Aktualisieren der Signaturen wurde von %NT-AUTORITÄT60 ein Fehler festgestellt.
Neue Signaturversion:
Vorherige Signaturversion: 1.155.2386.0
Aktualisierungsquelle: %NT-AUTORITÄT59
Aktualisierungsphase: 4.2.0223.00
Quellpfad: 4.2.0223.01
Signaturtyp: %NT-AUTORITÄT602
Aktualisierungstyp: %NT-AUTORITÄT604
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion: %NT-AUTORITÄT605
Vorherige Modulversion: %NT-AUTORITÄT606
Fehlercode: %NT-AUTORITÄT607
Fehlerbeschreibung: %NT-AUTORITÄT608
Error: (08/17/2013 06:28:44 PM) (Source: Server) (User: )
Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{6E46B758-E4D6-4596-807B-A57756BA850A} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden.
Error: (08/17/2013 06:28:03 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Presentation Foundation-Schriftartcache 3.0.0.0" wurde nicht richtig gestartet.
Error: (08/17/2013 06:26:37 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1058
Error: (08/17/2013 04:42:50 PM) (Source: DCOM) (User: )
Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}
Error: (08/17/2013 04:42:46 PM) (Source: DCOM) (User: )
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
Error: (08/17/2013 04:06:18 PM) (Source: Microsoft Antimalware) (User: )
Description: Beim Aktualisieren der Signaturen wurde von %NT-AUTORITÄT60 ein Fehler festgestellt.
Neue Signaturversion:
Vorherige Signaturversion: 1.155.2386.0
Aktualisierungsquelle: %NT-AUTORITÄT59
Aktualisierungsphase: 4.2.0223.00
Quellpfad: 4.2.0223.01
Signaturtyp: %NT-AUTORITÄT602
Aktualisierungstyp: %NT-AUTORITÄT604
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion: %NT-AUTORITÄT605
Vorherige Modulversion: %NT-AUTORITÄT606
Fehlercode: %NT-AUTORITÄT607
Fehlerbeschreibung: %NT-AUTORITÄT608
Error: (08/17/2013 03:58:08 PM) (Source: Server) (User: )
Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{6E46B758-E4D6-4596-807B-A57756BA850A} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden.
Error: (08/17/2013 03:57:40 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Presentation Foundation-Schriftartcache 3.0.0.0" wurde nicht richtig gestartet.
Error: (08/17/2013 03:56:14 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1058
Microsoft Office Sessions:
=========================
Error: (08/17/2013 06:32:49 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000
Error: (08/17/2013 04:02:46 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000
Error: (08/17/2013 03:58:26 PM) (Source: VSS)(User: )
Description: 0x80070005, Zugriff verweigert
Vorgang:
Generatordaten werden gesammelt
Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {ae276deb-a0a9-4a90-9204-43f32372fcdf}
Error: (08/16/2013 02:32:35 PM) (Source: VSS)(User: )
Description: 0x80070005, Zugriff verweigert
Vorgang:
Generatordaten werden gesammelt
Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {1de0d097-8bb6-4df0-bdc7-ae44e2d36793}
Error: (08/16/2013 01:53:08 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000
Error: (08/16/2013 01:36:27 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000
Error: (08/16/2013 01:19:07 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000
Error: (08/16/2013 01:08:50 PM) (Source: Microsoft-Windows-CAPI2)(User: )
Description:
Details:
AddWin32ServiceFiles: Unable to back up image of service BrowserDefendert since QueryServiceConfig API failed
System Error:
Das System kann die angegebene Datei nicht finden.
Error: (08/16/2013 01:07:52 PM) (Source: Microsoft-Windows-CAPI2)(User: )
Description:
Details:
AddWin32ServiceFiles: Unable to back up image of service BrowserDefendert since QueryServiceConfig API failed
System Error:
Das System kann die angegebene Datei nicht finden.
Error: (08/16/2013 11:42:40 AM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000
==================== Memory info ===========================
Percentage of memory in use: 60%
Total physical RAM: 2995.67 MB
Available physical RAM: 1185.66 MB
Total Pagefile: 5989.63 MB
Available Pagefile: 3835.48 MB
Total Virtual: 2047.88 MB
Available Virtual: 1889.73 MB
==================== Drives ================================
Drive c: (Windows7_OS) (Fixed) (Total:454.33 GB) (Free:55.71 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive q: (Lenovo_Recovery) (Fixed) (Total:10.25 GB) (Free:5.04 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 466 GB) (Disk ID: BD6B6839)
Partition 1: (Active) - (Size=1 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=454 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=10 GB) - (Type=07 NTFS)
==================== End Of Log ============================ |