DoreenUH | 28.04.2014 09:13 | FRST Logfile:
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-04-2014
Ran by user (administrator) on USER-PC on 28-04-2014 10:09:06
Running from C:\Users\user\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: Downloading Farbar Recovery Scan Tool
Download link for 64-Bit Version: Downloading Farbar Recovery Scan Tool
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials
==================== Processes (Whitelisted) =================
(AVAST Software) C:\Program Files\Avast\AvastSvc.exe
(Cherished Technololgy LIMITED) C:\ProgramData\IePluginService\PluginService.exe
() C:\Program Files\003\buuoujqmrk64.exe
() C:\Program Files\002\sxhsshtiaq64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
() C:\Windows\PLFSetI.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe
(AVAST Software) C:\Program Files\Avast\AvastUI.exe
(Mozilla Corporation) C:\Users\user\Downloads\Firefox\firefox.exe
(Mozilla Corporation) C:\Users\user\Downloads\Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_182.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_182.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [9636896 2009-11-30] (Realtek Semiconductor)
HKLM\...\Run: [PLFSetI] => C:\Windows\PLFSetI.exe [206208 2013-10-23] ()
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\Avast\AvastUI.exe [3854640 2014-04-12] (AVAST Software)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [301568 2013-05-14] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe (McAfee, Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Search[[PubID]]_CH&co=DE&userid=9d2de77f-b00e-f4e8-9ddf-dcbc0f388c91&searchtype=ds&q={searchTerms}&installDate={installDate}&barcodeid={barcodeID}&um={UM}
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Search
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Search[[PubID]]_CH&co=DE&userid=9d2de77f-b00e-f4e8-9ddf-dcbc0f388c91&searchtype=ds&q={searchTerms}&installDate={installDate}&barcodeid={barcodeID}&um={UM}
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = Search
SearchScopes: HKLM-x32 - DefaultScope {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = hxxp://websearch.amaizingsearches.info/?l=1&q={searchTerms}&pid=2145&r=2014/04/21&hid=14598678731106518987&lg=EN&cc=DE&unqvl=51
SearchScopes: HKLM-x32 - {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = hxxp://websearch.amaizingsearches.info/?l=1&q={searchTerms}&pid=2145&r=2014/04/21&hid=14598678731106518987&lg=EN&cc=DE&unqvl=51
SearchScopes: HKCU - DefaultScope {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = hxxp://websearch.amaizingsearches.info/?l=1&q={searchTerms}&pid=2145&r=2014/04/21&hid=14598678731106518987&lg=EN&cc=DE&unqvl=51
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = Search[[PubID]]_CH&co=DE&userid=9d2de77f-b00e-f4e8-9ddf-dcbc0f388c91&searchtype=ds&q={searchTerms}&installDate={installDate}&barcodeid={barcodeID}&um={UM}
SearchScopes: HKCU - {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = hxxp://websearch.amaizingsearches.info/?l=1&q={searchTerms}&pid=2145&r=2014/04/21&hid=14598678731106518987&lg=EN&cc=DE&unqvl=51
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Avast\aswWebRepIE64.dll (AVAST Software)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Tcpip\Parameters: [DhcpNameServer] 192.168.168.201
FireFox:
========
FF ProfilePath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\ioiuswtg.default-1392827074993
FF user.js: detected! => C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\ioiuswtg.default-1392827074993\user.js
FF SearchEngineOrder.1: WebSearch
FF SearchEngineOrder.user_pref("browser.search.order.1,S", "WebSearch");: user_pref("browser.search.order.1,S", "WebSearch");
FF Homepage: hxxp://google.de/
FF Keyword.URL: hxxp://websearch.amaizingsearches.info/?pid=2145&r=2014/04/21&hid=14598678731106518987&lg=EN&cc=DE&unqvl=51&l=1&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_182.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_182.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Users\user\Downloads\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\ioiuswtg.default-1392827074993\searchplugins\WebSearch.xml
FF Extension: SNT - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\ioiuswtg.default-1392827074993\Extensions\9_wk@yea-ynj.com [2014-04-21]
FF Extension: MediaPlayerplus - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\ioiuswtg.default-1392827074993\Extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com [2014-04-19]
FF Extension: YoutubeAdblocker - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\ioiuswtg.default-1392827074993\Extensions\dcoueias9@ql-yxin.co.uk [2014-04-21]
FF Extension: saVe net - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\ioiuswtg.default-1392827074993\Extensions\qrgyn@xhfxu.net [2014-04-21]
FF Extension: DownloadHelper - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\ioiuswtg.default-1392827074993\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-03-24]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\Avast\WebRep\FF [2013-04-27]
Chrome:
=======
CHR HomePage: hxxp://websearch.amaizingsearches.info/?pid=2145&r=2014/04/21&hid=14598678731106518987&lg=EN&cc=DE&unqvl=51
CHR RestoreOnStartup: "hxxp://websearch.amaizingsearches.info/?pid=2145&r=2014/04/21&hid=14598678731106518987&lg=EN&cc=DE&unqvl=51"
CHR StartupUrls: "hxxp://websearch.amaizingsearches.info/?pid=2145&r=2014/04/21&hid=14598678731106518987&lg=EN&cc=DE&unqvl=51"
CHR Extension: (saVe net) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\edhpopddkofagcaighdcfjhdkfhemjek [2014-04-21]
CHR Extension: (YoutubeAdblocker) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\hahbgankknpfaiehaleodimbahabmakh [2014-04-21]
CHR Extension: (SNT) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\kolcoemgpdenjndpljnmmklfecdpokgp [2014-04-21]
CHR Extension: (MediaPlayerplus) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\majjphhgppkndjjkmhhnbgafooenebhd [2014-04-18]
CHR Extension: (Social Face) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiaejidbmkiecgbjeifoejpgmdaleoha [2014-04-21]
==================== Services (Whitelisted) =================
R2 avast! Antivirus; C:\Program Files\Avast\AvastSvc.exe [50344 2014-04-12] (AVAST Software)
R2 buuoujqmrk64; C:\Program Files\003\buuoujqmrk64.exe [706560 2014-04-18] ()
R2 IePluginService; C:\ProgramData\IePluginService\PluginService.exe [705136 2014-04-11] (Cherished Technololgy LIMITED)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [289256 2014-01-16] (McAfee, Inc.)
R2 sxhsshtiaq64; C:\Program Files\002\sxhsshtiaq64.exe [706560 2014-04-21] ()
==================== Drivers (Whitelisted) ====================
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-04-12] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-04-12] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-04-12] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1039096 2014-04-12] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423240 2014-04-12] (AVAST Software)
R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [84816 2014-04-12] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2014-01-22] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [208928 2014-04-12] ()
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-01-10] (Anchorfree Inc.)
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-04-28 10:09 - 2014-04-28 10:09 - 00010910 _____ () C:\Users\user\Downloads\FRST.txt
2014-04-28 10:08 - 2014-04-28 10:09 - 00000000 ____D () C:\FRST
2014-04-28 10:08 - 2014-04-28 10:08 - 02061824 _____ (Farbar) C:\Users\user\Downloads\FRST64.exe
2014-04-27 13:09 - 2014-04-27 13:09 - 00000056 _____ () C:\Windows\setupact.log
2014-04-27 13:09 - 2014-04-27 13:09 - 00000000 _____ () C:\Windows\setuperr.log
2014-04-22 10:47 - 2014-04-22 10:47 - 00001724 _____ () C:\Users\user\Desktop\CrystalEye.lnk
2014-04-21 13:51 - 2014-04-21 13:51 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2014-04-21 13:44 - 2014-04-21 13:44 - 00000000 ____D () C:\Users\user\AppData\Roaming\EZDownloader
2014-04-21 13:43 - 2014-04-21 14:40 - 00000000 ____D () C:\ProgramData\SNT
2014-04-21 13:43 - 2014-04-21 13:43 - 00000000 ____D () C:\ProgramData\Rightapp software
2014-04-21 13:41 - 2014-04-21 14:40 - 00000000 ____D () C:\ProgramData\YoutubeAdblocker
2014-04-21 13:41 - 2014-04-21 13:46 - 00000000 ____D () C:\ProgramData\1123b3724a4e3997
2014-04-21 13:41 - 2014-04-21 13:45 - 00000000 ____D () C:\ProgramData\Savue neet
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\user\AppData\Local\Torch
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\user\AppData\Local\Comodo
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Torch
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Google
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Comodo
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\HomeGroupUser$
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\Gast\AppData\Local\Torch
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\Gast
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Torch
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\Administrator
2014-04-21 13:40 - 2014-04-21 13:43 - 00000000 ____D () C:\ProgramData\InstallMate
2014-04-21 13:24 - 2014-04-21 13:36 - 00000000 ____D () C:\Program Files (x86)\PC Speed Maximizer
2014-04-21 13:24 - 2014-04-21 13:35 - 00000000 ____D () C:\ProgramData\WPM
2014-04-21 13:24 - 2014-04-21 13:27 - 00000000 ____D () C:\Program Files\002
2014-04-21 13:24 - 2014-04-21 13:24 - 00000000 ____D () C:\Users\user\AppData\Roaming\SupTab
2014-04-21 13:24 - 2014-04-21 13:24 - 00000000 ____D () C:\ProgramData\IePluginService
2014-04-21 13:23 - 2014-04-21 13:37 - 00000000 ____D () C:\Users\user\AppData\Roaming\qone8
2014-04-21 13:12 - 2014-04-21 13:12 - 00000000 ____D () C:\Users\user\AppData\Roaming\WinRAR
2014-04-21 13:11 - 2014-04-22 09:52 - 00000000 ____D () C:\Users\user\Downloads\WinRAR
2014-04-21 12:54 - 2014-04-21 12:54 - 00000000 ____D () C:\Users\user\AppData\Local\Cool_Mirage
2014-04-21 11:36 - 2014-04-21 11:36 - 00000000 _____ () C:\autoexec.bat
2014-04-18 15:57 - 2014-04-28 10:02 - 00002170 _____ () C:\Windows\Tasks\3d6799c0-7f57-4f60-ab8f-1e65a97fb73f-4.job
2014-04-18 15:57 - 2014-04-28 09:57 - 00001486 _____ () C:\Windows\Tasks\3d6799c0-7f57-4f60-ab8f-1e65a97fb73f-5.job
2014-04-18 15:57 - 2014-04-25 15:57 - 00000000 ____D () C:\Program Files (x86)\MediaPlayerplus
2014-04-18 15:57 - 2014-04-18 15:57 - 00005200 _____ () C:\Windows\System32\Tasks\3d6799c0-7f57-4f60-ab8f-1e65a97fb73f-4
2014-04-18 15:57 - 2014-04-18 15:57 - 00004516 _____ () C:\Windows\System32\Tasks\3d6799c0-7f57-4f60-ab8f-1e65a97fb73f-5
2014-04-18 15:56 - 2014-04-18 15:59 - 00000000 ____D () C:\Program Files\003
2014-04-17 11:19 - 2014-04-26 08:33 - 00000000 ___RD () C:\Users\user\Desktop\Facharbeit
2014-04-16 10:14 - 2014-04-16 10:15 - 00004157 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b13.log
2014-04-12 19:57 - 2014-04-12 19:57 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-04-09 08:08 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-09 08:08 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-04-09 08:08 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-04-09 08:08 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-04-09 08:08 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-04-09 08:08 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-04-09 08:08 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-04-09 08:08 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-04-09 08:08 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-04-09 08:08 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-04-09 08:08 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-04-09 08:08 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-09 08:08 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-09 08:08 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-09 08:08 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-09 08:08 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-04-09 08:08 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-03-29 13:21 - 2014-04-21 12:52 - 00000000 ____D () C:\Users\user\Downloads\Firefox
==================== One Month Modified Files and Folders =======
2014-04-28 10:09 - 2014-04-28 10:09 - 00010910 _____ () C:\Users\user\Downloads\FRST.txt
2014-04-28 10:09 - 2014-04-28 10:08 - 00000000 ____D () C:\FRST
2014-04-28 10:08 - 2014-04-28 10:08 - 02061824 _____ (Farbar) C:\Users\user\Downloads\FRST64.exe
2014-04-28 10:02 - 2014-04-18 15:57 - 00002170 _____ () C:\Windows\Tasks\3d6799c0-7f57-4f60-ab8f-1e65a97fb73f-4.job
2014-04-28 10:01 - 2009-07-14 06:45 - 00023120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-28 10:01 - 2009-07-14 06:45 - 00023120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-28 09:57 - 2014-04-18 15:57 - 00001486 _____ () C:\Windows\Tasks\3d6799c0-7f57-4f60-ab8f-1e65a97fb73f-5.job
2014-04-28 09:55 - 2013-08-11 14:50 - 00000902 _____ () C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineUA.job
2014-04-28 09:48 - 2013-11-24 14:27 - 01247558 _____ () C:\Windows\WindowsUpdate.log
2014-04-28 09:30 - 2013-04-27 09:03 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-04-27 14:55 - 2013-08-11 14:50 - 00000898 _____ () C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineCore.job
2014-04-27 13:09 - 2014-04-27 13:09 - 00000056 _____ () C:\Windows\setupact.log
2014-04-27 13:09 - 2014-04-27 13:09 - 00000000 _____ () C:\Windows\setuperr.log
2014-04-27 13:09 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-27 12:59 - 2013-04-27 09:54 - 00004152 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-04-26 08:33 - 2014-04-17 11:19 - 00000000 ___RD () C:\Users\user\Desktop\Facharbeit
2014-04-25 15:57 - 2014-04-18 15:57 - 00000000 ____D () C:\Program Files (x86)\MediaPlayerplus
2014-04-25 09:30 - 2009-07-14 19:58 - 00699666 _____ () C:\Windows\system32\perfh007.dat
2014-04-25 09:30 - 2009-07-14 19:58 - 00149774 _____ () C:\Windows\system32\perfc007.dat
2014-04-25 09:30 - 2009-07-14 07:13 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-22 10:57 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-04-22 10:47 - 2014-04-22 10:47 - 00001724 _____ () C:\Users\user\Desktop\CrystalEye.lnk
2014-04-22 09:53 - 2013-06-22 09:27 - 00000000 ____D () C:\Users\user\Downloads\Java
2014-04-22 09:52 - 2014-04-21 13:11 - 00000000 ____D () C:\Users\user\Downloads\WinRAR
2014-04-21 14:40 - 2014-04-21 13:43 - 00000000 ____D () C:\ProgramData\SNT
2014-04-21 14:40 - 2014-04-21 13:41 - 00000000 ____D () C:\ProgramData\YoutubeAdblocker
2014-04-21 13:51 - 2014-04-21 13:51 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2014-04-21 13:46 - 2014-04-21 13:41 - 00000000 ____D () C:\ProgramData\1123b3724a4e3997
2014-04-21 13:45 - 2014-04-21 13:41 - 00000000 ____D () C:\ProgramData\Savue neet
2014-04-21 13:44 - 2014-04-21 13:44 - 00000000 ____D () C:\Users\user\AppData\Roaming\EZDownloader
2014-04-21 13:43 - 2014-04-21 13:43 - 00000000 ____D () C:\ProgramData\Rightapp software
2014-04-21 13:43 - 2014-04-21 13:40 - 00000000 ____D () C:\ProgramData\InstallMate
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\user\AppData\Local\Torch
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\user\AppData\Local\Comodo
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Torch
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Google
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Comodo
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\HomeGroupUser$
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\Gast\AppData\Local\Torch
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\Gast
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Torch
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-04-21 13:41 - 2014-04-21 13:41 - 00000000 ____D () C:\Users\Administrator
2014-04-21 13:41 - 2013-06-23 20:38 - 00000000 ____D () C:\Users\user\AppData\Local\Google
2014-04-21 13:37 - 2014-04-21 13:23 - 00000000 ____D () C:\Users\user\AppData\Roaming\qone8
2014-04-21 13:36 - 2014-04-21 13:24 - 00000000 ____D () C:\Program Files (x86)\PC Speed Maximizer
2014-04-21 13:35 - 2014-04-21 13:24 - 00000000 ____D () C:\ProgramData\WPM
2014-04-21 13:27 - 2014-04-21 13:24 - 00000000 ____D () C:\Program Files\002
2014-04-21 13:24 - 2014-04-21 13:24 - 00000000 ____D () C:\Users\user\AppData\Roaming\SupTab
2014-04-21 13:24 - 2014-04-21 13:24 - 00000000 ____D () C:\ProgramData\IePluginService
2014-04-21 13:12 - 2014-04-21 13:12 - 00000000 ____D () C:\Users\user\AppData\Roaming\WinRAR
2014-04-21 13:06 - 2013-04-11 15:38 - 00000000 ___RD () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-21 12:54 - 2014-04-21 12:54 - 00000000 ____D () C:\Users\user\AppData\Local\Cool_Mirage
2014-04-21 12:52 - 2014-03-29 13:21 - 00000000 ____D () C:\Users\user\Downloads\Firefox
2014-04-21 11:36 - 2014-04-21 11:36 - 00000000 _____ () C:\autoexec.bat
2014-04-21 11:14 - 2013-05-09 18:31 - 00761344 ___SH () C:\Users\user\Thumbs.db
2014-04-19 19:07 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-04-18 15:59 - 2014-04-18 15:56 - 00000000 ____D () C:\Program Files\003
2014-04-18 15:57 - 2014-04-18 15:57 - 00005200 _____ () C:\Windows\System32\Tasks\3d6799c0-7f57-4f60-ab8f-1e65a97fb73f-4
2014-04-18 15:57 - 2014-04-18 15:57 - 00004516 _____ () C:\Windows\System32\Tasks\3d6799c0-7f57-4f60-ab8f-1e65a97fb73f-5
2014-04-17 11:20 - 2014-02-26 20:15 - 00000000 ____D () C:\Users\user\Sichern\Documents\DBI
2014-04-16 10:17 - 2013-11-14 00:24 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-16 10:15 - 2014-04-16 10:14 - 00004157 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b13.log
2014-04-16 09:34 - 2013-06-10 23:11 - 00000000 ____D () C:\Users\user\AppData\Local\Adobe
2014-04-16 09:31 - 2013-04-27 09:03 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-04-16 09:31 - 2013-04-27 09:03 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-04-16 09:31 - 2013-04-27 09:03 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-04-14 11:38 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-04-12 20:02 - 2013-04-27 09:53 - 00000000 ____D () C:\Program Files\Avast
2014-04-12 19:57 - 2014-04-12 19:57 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-04-12 19:57 - 2014-02-20 10:55 - 00084816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-04-12 19:57 - 2013-04-27 09:54 - 01039096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-04-12 19:57 - 2013-04-27 09:54 - 00423240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-04-12 19:57 - 2013-04-27 09:54 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-04-12 19:57 - 2013-04-27 09:54 - 00208928 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-04-12 19:57 - 2013-04-27 09:54 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-04-12 19:57 - 2013-04-27 09:54 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-04-12 19:57 - 2013-04-27 09:54 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-04-09 15:16 - 2013-07-14 23:28 - 00000000 ____D () C:\Windows\system32\MRT
2014-04-09 15:14 - 2010-06-24 11:33 - 90655440 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2014-03-31 09:35 - 2013-04-27 08:49 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
Some content of TEMP:
====================
C:\Users\user\AppData\Local\Temp\BackupSetup.exe
C:\Users\user\AppData\Local\Temp\new_somoto_rrsavings.exe
C:\Users\user\AppData\Local\Temp\OnlineWeatherSetup.exe
C:\Users\user\AppData\Local\Temp\PCSpeedMaximizer_AQDE_SOMOTO_PPI.exe
C:\Users\user\AppData\Local\Temp\pcspeedmaxsetup.exe
C:\Users\user\AppData\Local\Temp\SHSetup.exe
C:\Users\user\AppData\Local\Temp\smt_qone8.exe
C:\Users\user\AppData\Local\Temp\UpdateCheckerSetup.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-04-19 11:57
==================== End Of Log ============================ --- --- ---
--- --- ---
FRST Additions Logfile: Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27-04-2014
Ran by user at 2014-04-28 10:10:23
Running from C:\Users\user\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installed Programs ======================
Acer Crystal Eye webcam Ver:1.1.184.610 (HKLM-x32\...\{D0ACE89D-EC7F-470F-80BE-4C98ED366B32}) (Version: 1.1.184.610 - Chicony Electronics Co.,Ltd.)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.182 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.2.122 - Adobe Systems, Inc.)
avast! Free Antivirus (HKLM-x32\...\avast) (Version: 9.0.2016 - Avast Software)
CCleaner (HKLM\...\CCleaner) (Version: 3.21 - Piriform)
ConvertHelper 2.2 (HKLM-x32\...\{27CC6AB1-E72B-4179-AF1A-EAE507EBAF51}_is1) (Version: - DownloadHelper)
Google Update Helper (x32 Version: 1.3.23.0 - DealPly Technologies Ltd) Hidden <==== ATTENTION
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.141.11 - McAfee, Inc.)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Mozilla Firefox 28.0 (x86 de) (HKCU\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
OpenOffice.org 3.4.1 (HKLM-x32\...\{2303AEEA-0FA8-4AFD-80A9-8F86BA4B44D2}) (Version: 3.41.9593 - Apache Software Foundation)
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5992 - Realtek Semiconductor Corp.)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
WavePad Audio-Editor (HKLM-x32\...\WavePad) (Version: 5.71 - NCH Software)
==================== Restore Points =========================
25-04-2014 07:15:01 Windows Update
==================== Hosts content: ==========================
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {1CE354B2-C204-4714-BB2C-B2663DD24D61} - System32\Tasks\avast! Emergency Update => C:\Program Files\Avast\AvastEmUpdate.exe [2014-04-12] (AVAST Software)
Task: {280B1095-9FC9-40BE-86CA-60CBF4F4B01A} - System32\Tasks\DealPlyLiveUpdateTaskMachineUA => C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe <==== ATTENTION
Task: {2A1F5E4F-A142-4227-8E34-5D9C767CB0CC} - System32\Tasks\Desk 365 RunAsStdUser => C:\Program Files (x86)\Desk 365\desk365.exe <==== ATTENTION
Task: {2AE44BA6-BAC6-47EB-B510-2C9908A1511D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-16] (Adobe Systems Incorporated)
Task: {3D3EB231-B1F2-49DA-A30E-13189D1C7EB1} - System32\Tasks\Software Updater => C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.Bootstrapper.exe
Task: {4B8FA8F9-6705-4EE8-B6F2-0BC86780BCE6} - System32\Tasks\3d6799c0-7f57-4f60-ab8f-1e65a97fb73f-5 => C:\Program Files (x86)\MediaPlayerplus\3d6799c0-7f57-4f60-ab8f-1e65a97fb73f-5.exe [2014-04-18] (Freeven) <==== ATTENTION
Task: {4CF12411-2A0A-4C1B-B7E9-84A7E864D990} - System32\Tasks\DealPlyLiveUpdateTaskMachineCore => C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe <==== ATTENTION
Task: {8F25F4F1-007B-45FE-B11A-ED20FEB27096} - System32\Tasks\RunAsStdUser Task for VeohWebPlayer => C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\veohwebplayer.exe <==== ATTENTION
Task: {A854BEE5-BB75-41EC-9462-94079BDFCAE2} - System32\Tasks\3d6799c0-7f57-4f60-ab8f-1e65a97fb73f-4 => C:\Program Files (x86)\MediaPlayerplus\3d6799c0-7f57-4f60-ab8f-1e65a97fb73f-4.exe [2014-04-18] (Freeven) <==== ATTENTION
Task: {B830C4E1-F204-4542-B7AE-2A1F3CB19A3E} - System32\Tasks\Freemium1ClickMaint => C:\Users\user\Downloads\1Click.exe
Task: {C21C5C7B-497D-45FC-A588-8B577CAE21B0} - System32\Tasks\Software Updater Ui => C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.Ui.exe
Task: {D3263602-2F50-43E3-A952-8725C30EBD9E} - System32\Tasks\Dealply => C:\Users\user\AppData\Roaming\Dealply\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: C:\Windows\Tasks\3d6799c0-7f57-4f60-ab8f-1e65a97fb73f-4.job => C:\Program Files (x86)\MediaPlayerplus\3d6799c0-7f57-4f60-ab8f-1e65a97fb73f-4.exe
Task: C:\Windows\Tasks\3d6799c0-7f57-4f60-ab8f-1e65a97fb73f-5.job => C:\Program Files (x86)\MediaPlayerplus\3d6799c0-7f57-4f60-ab8f-1e65a97fb73f-5.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineCore.job => C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe <==== ATTENTION
Task: C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineUA.job => C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe <==== ATTENTION
==================== Loaded Modules (whitelisted) =============
2014-04-18 15:59 - 2014-04-18 15:59 - 00706560 _____ () C:\Program Files\003\buuoujqmrk64.exe
2014-04-21 13:27 - 2014-04-21 13:27 - 00706560 _____ () C:\Program Files\002\sxhsshtiaq64.exe
2013-10-23 13:18 - 2013-10-23 13:18 - 00206208 _____ () C:\Windows\PLFSetI.exe
2014-04-27 12:59 - 2014-04-27 12:59 - 02252800 _____ () C:\Program Files\Avast\defs\14042700\algo.dll
2014-04-28 10:00 - 2014-04-28 10:00 - 02252800 _____ () C:\Program Files\Avast\defs\14042800\algo.dll
2014-02-20 10:55 - 2014-02-20 10:55 - 19336120 _____ () C:\Program Files\Avast\libcef.dll
2014-03-29 13:21 - 2014-03-29 13:21 - 03642480 _____ () C:\Users\user\Downloads\Firefox\mozjs.dll
2014-04-16 09:31 - 2014-04-16 09:31 - 16351920 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_182.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\ProgramData\TEMP:373E1720
AlternateDataStreams: C:\ProgramData\TEMP:AD022376
==================== Safe Mode (whitelisted) ===================
==================== Disabled items from MSCONFIG ==============
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (04/27/2014 01:04:33 PM) (Source: Windows Search Service) (User: )
Description: Die Liste der eingeschlossenen und ausgeschlossenen Adressen konnte vvon Windows Search nicht verarbeitet werden. Fehler: <30, 0x80040d07, "iehistory://{S-1-5-21-3791310106-3821151385-497782571-1000}/">.
Error: (04/27/2014 01:03:04 PM) (Source: Windows Search Service) (User: )
Description: Die Liste der eingeschlossenen und ausgeschlossenen Adressen konnte vvon Windows Search nicht verarbeitet werden. Fehler: <30, 0x80040d07, "iehistory://{S-1-5-21-3791310106-3821151385-497782571-1000}/">.
Error: (04/27/2014 01:01:32 PM) (Source: Windows Search Service) (User: )
Description: Die Liste der eingeschlossenen und ausgeschlossenen Adressen konnte vvon Windows Search nicht verarbeitet werden. Fehler: <30, 0x80040d07, "iehistory://{S-1-5-21-3791310106-3821151385-497782571-1000}/">.
Error: (04/27/2014 01:01:05 PM) (Source: Windows Search Service) (User: )
Description: Die Liste der eingeschlossenen und ausgeschlossenen Adressen konnte vvon Windows Search nicht verarbeitet werden. Fehler: <30, 0x80040d07, "iehistory://{S-1-5-21-3791310106-3821151385-497782571-1000}/">.
Error: (04/26/2014 08:36:46 AM) (Source: Windows Search Service) (User: )
Description: Die Liste der eingeschlossenen und ausgeschlossenen Adressen konnte vvon Windows Search nicht verarbeitet werden. Fehler: <30, 0x80040d07, "iehistory://{S-1-5-21-3791310106-3821151385-497782571-1000}/">.
Error: (04/26/2014 08:35:36 AM) (Source: Windows Search Service) (User: )
Description: Die Liste der eingeschlossenen und ausgeschlossenen Adressen konnte vvon Windows Search nicht verarbeitet werden. Fehler: <30, 0x80040d07, "iehistory://{S-1-5-21-3791310106-3821151385-497782571-1000}/">.
Error: (04/26/2014 08:35:19 AM) (Source: Windows Search Service) (User: )
Description: Die Liste der eingeschlossenen und ausgeschlossenen Adressen konnte vvon Windows Search nicht verarbeitet werden. Fehler: <30, 0x80040d07, "iehistory://{S-1-5-21-3791310106-3821151385-497782571-1000}/">.
Error: (04/25/2014 11:12:42 AM) (Source: Windows Search Service) (User: )
Description: Die Liste der eingeschlossenen und ausgeschlossenen Adressen konnte vvon Windows Search nicht verarbeitet werden. Fehler: <30, 0x80040d07, "iehistory://{S-1-5-21-3791310106-3821151385-497782571-1000}/">.
Error: (04/25/2014 11:11:13 AM) (Source: Windows Search Service) (User: )
Description: Die Liste der eingeschlossenen und ausgeschlossenen Adressen konnte vvon Windows Search nicht verarbeitet werden. Fehler: <30, 0x80040d07, "iehistory://{S-1-5-21-3791310106-3821151385-497782571-1000}/">.
Error: (04/25/2014 11:11:03 AM) (Source: Windows Search Service) (User: )
Description: Die Liste der eingeschlossenen und ausgeschlossenen Adressen konnte vvon Windows Search nicht verarbeitet werden. Fehler: <30, 0x80040d07, "iehistory://{S-1-5-21-3791310106-3821151385-497782571-1000}/">.
System errors:
=============
Error: (04/27/2014 01:09:27 PM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
cdrom
Error: (04/26/2014 08:41:47 AM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
cdrom
Error: (04/25/2014 11:21:04 AM) (Source: NetBT) (User: )
Description: Der Name "WORKGROUP :1d" konnte nicht auf der Schnittstelle mit IP-Adresse 192.168.168.31
registriert werden. Der Computer mit IP-Adresse 192.168.168.19 hat nicht
zugelassen, dass dieser Computer diesen Namen verwendet.
Error: (04/25/2014 11:20:47 AM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
cdrom
Error: (04/25/2014 11:18:20 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Server" wurde mit folgendem Fehler beendet:
%%1062
Error: (04/25/2014 11:18:17 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Enumeratordienst für tragbare Geräte" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1115
Error: (04/25/2014 11:18:17 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Diagnosediensthost" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069
Error: (04/25/2014 11:18:17 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "WdiServiceHost" konnte sich nicht als "NT AUTHORITY\LocalService" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%50
Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
Error: (04/25/2014 11:18:17 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerkverbindungen" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1115
Error: (04/25/2014 11:18:17 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069
Microsoft Office Sessions:
=========================
Error: (04/27/2014 01:04:33 PM) (Source: Windows Search Service)(User: )
Description: 300x80040d07iehistory://{S-1-5-21-3791310106-3821151385-497782571-1000}/
Error: (04/27/2014 01:03:04 PM) (Source: Windows Search Service)(User: )
Description: 300x80040d07iehistory://{S-1-5-21-3791310106-3821151385-497782571-1000}/
Error: (04/27/2014 01:01:32 PM) (Source: Windows Search Service)(User: )
Description: 300x80040d07iehistory://{S-1-5-21-3791310106-3821151385-497782571-1000}/
Error: (04/27/2014 01:01:05 PM) (Source: Windows Search Service)(User: )
Description: 300x80040d07iehistory://{S-1-5-21-3791310106-3821151385-497782571-1000}/
Error: (04/26/2014 08:36:46 AM) (Source: Windows Search Service)(User: )
Description: 300x80040d07iehistory://{S-1-5-21-3791310106-3821151385-497782571-1000}/
Error: (04/26/2014 08:35:36 AM) (Source: Windows Search Service)(User: )
Description: 300x80040d07iehistory://{S-1-5-21-3791310106-3821151385-497782571-1000}/
Error: (04/26/2014 08:35:19 AM) (Source: Windows Search Service)(User: )
Description: 300x80040d07iehistory://{S-1-5-21-3791310106-3821151385-497782571-1000}/
Error: (04/25/2014 11:12:42 AM) (Source: Windows Search Service)(User: )
Description: 300x80040d07iehistory://{S-1-5-21-3791310106-3821151385-497782571-1000}/
Error: (04/25/2014 11:11:13 AM) (Source: Windows Search Service)(User: )
Description: 300x80040d07iehistory://{S-1-5-21-3791310106-3821151385-497782571-1000}/
Error: (04/25/2014 11:11:03 AM) (Source: Windows Search Service)(User: )
Description: 300x80040d07iehistory://{S-1-5-21-3791310106-3821151385-497782571-1000}/
CodeIntegrity Errors:
===================================
Date: 2014-02-07 06:42:34.951
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Percentage of memory in use: 71%
Total physical RAM: 1978.91 MB
Available physical RAM: 558.47 MB
Total Pagefile: 3957.83 MB
Available Pagefile: 2306.23 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:232.79 GB) (Free:193.86 GB) NTFS
Drive d: (System-reserviert) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[System with boot components (obtained from reading drive)]
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 233 GB) (Disk ID: F1E620A9)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=233 GB) - (Type=07 NTFS)
==================== End Of Log ============================ --- --- --- |