Danke dir für die schnelle Hilfe, schrauber. Gerne.
FRST.txt
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-11-2014
Ran by Sarah (administrator) on SARAH-PC on 15-11-2014 16:42:19
Running from C:\Users\Sarah\Desktop
Loaded Profiles: Sarah & (Available profiles: Sarah & UpdatusUser & Administrator)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Logitech Inc.) C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\Logishrd\LVMVFM\LVPrS64H.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Lexmark International, Inc.) C:\Windows\System32\spool\drivers\x64\3\lxdpserv.exe
( ) C:\Windows\System32\lxdpcoms.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesApp64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast1\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast1\ng\ngservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Avast Software) C:\Program Files\AVAST Software\Avast1\ng\vbox\AvastVBoxSVC.exe
(Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winamp.exe
(Last.fm) C:\Program Files (x86)\Last.fm\Last.fm Scrobbler.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [703736 2014-10-01] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast1\AvastUI.exe [5223016 2014-11-15] (AVAST Software)
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\AVAST Software <====== ATTENTION
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Malwarebytes <====== ATTENTION
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\McAfee <====== ATTENTION
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Avira <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files (x86)\Avira <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files\AVAST Software <====== ATTENTION
HKU\S-1-5-21-2397675965-2088753291-856571785-1000\...\Policies\Explorer: [NoCDBurning] 1
HKU\S-1-5-21-2397675965-2088753291-856571785-1000\...\MountPoints2: E - E:\setup.exe
HKU\S-1-5-21-2397675965-2088753291-856571785-1000\...\MountPoints2: {51be963a-0dc0-11e1-80bd-806e6f6e6963} - D:\Autorun.exe
HKU\S-1-5-21-2397675965-2088753291-856571785-1000\...0c966feabec1\InprocServer32: [Default-shell32] C:\Users\Sarah\AppData\Local\{94aeb679-94a4-13dc-210f-ebdf01fea3cd}\n. ATTENTION! ====> ZeroAccess/Alureon?
HKU\S-1-5-21-2397675965-2088753291-856571785-1000\...409d6c4515e9\InprocServer32: [Default-shell32] C:\$Recycle.Bin\S-1-5-21-2397675965-2088753291-856571785-1000\$94aeb67994a413dc210febdf01fea3cd\n. ATTENTION! ====> ZeroAccess?
HKU\S-1-5-21-2397675965-2088753291-856571785-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\Explorer: [NoCDBurning] 1
HKU\S-1-5-21-2397675965-2088753291-856571785-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: E - E:\setup.exe
HKU\S-1-5-21-2397675965-2088753291-856571785-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {51be963a-0dc0-11e1-80bd-806e6f6e6963} - D:\Autorun.exe
Startup: C:\Users\Sarah\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Sarah\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast1\ashShA64.dll (AVAST Software)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-2397675965-2088753291-856571785-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-2397675965-2088753291-856571785-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: ATLAS Toolbar -> {3C6301ED-0F78-4AF2-8150-D9C052361A8E} -> C:\Program Files (x86)\ATLAS V14\ATLIECP.DLL (FUJITSU LIMITED)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - ATLAS Toolbar - {3C6301ED-0F78-4AF2-8150-D9C052361A8E} - C:\Program Files (x86)\ATLAS V14\ATLIECP.DLL (FUJITSU LIMITED)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\Sarah\AppData\Roaming\Mozilla\Firefox\Profiles\14nr1zgo.default
FF SelectedSearchEngine: Google
FF Homepage: mail.yahoo.de
FF NetworkProxy: "ftp", "proxyus.stealthy.co"
FF NetworkProxy: "ftp_port", 3128
FF NetworkProxy: "http", "proxyus.stealthy.co"
FF NetworkProxy: "http_port", 3128
FF NetworkProxy: "no_proxies_on", "localhost, 127.0.0.1, stealthy.co"
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks", "proxyus.stealthy.co"
FF NetworkProxy: "socks_port", 3128
FF NetworkProxy: "ssl", "proxyus.stealthy.co"
FF NetworkProxy: "ssl_port", 3128
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_223.dll ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_223.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 -> C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 -> C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: @videolan.org/vlc,version=1.1.11 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (the VideoLAN Team)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\ddg.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Avira Browser Safety - C:\Users\Sarah\AppData\Roaming\Mozilla\Firefox\Profiles\14nr1zgo.default\Extensions\abs@avira.com [2014-10-01]
FF Extension: DownloadHelper - C:\Users\Sarah\AppData\Roaming\Mozilla\Firefox\Profiles\14nr1zgo.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-10-05]
FF Extension: Adblock Plus - C:\Users\Sarah\AppData\Roaming\Mozilla\Firefox\Profiles\14nr1zgo.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-09-12]
FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-09-15]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast1\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast1\WebRep\FF [2014-11-15]
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: No Name - wrc@avast.com [Not Found]
Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast1\WebRep\Chrome\aswWebRepChrome.crx [2014-11-15]
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2013-08-14]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-10-01] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-10-01] (Avira Operations GmbH & Co. KG)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast1\AvastSvc.exe [50344 2014-11-15] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast1\ng\vbox\AvastVBoxSVC.exe [4012248 2014-11-15] (Avast Software)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2436280 2014-09-25] (Microsoft Corporation)
S4 Giraffic; C:\Program Files (x86)\Giraffic\Veoh_GirafficWatchdog.exe [2245232 2013-05-13] (Giraffic)
S4 LVSrvLauncher; C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe [173344 2007-02-06] (Logitech Inc.)
R2 lxdpCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\x64\3\\lxdpserv.exe [29184 2009-04-28] (Lexmark International, Inc.)
R2 lxdp_device; C:\Windows\system32\lxdpcoms.exe [1039872 2007-11-19] ( )
R2 lxdp_device; C:\Windows\SysWOW64\lxdpcoms.exe [589824 2007-11-19] ( )
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()
S3 TuneUp.Defrag; C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe [607048 2011-11-13] (TuneUp Software)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe [1353544 2009-10-30] (TuneUp Software)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S3 ASPI; C:\Windows\SysWOW64\DRIVERS\ASPI32.sys [84832 2002-07-17] (Adaptec) [File not signed]
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-11-15] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [82768 2014-11-15] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-11-15] (AVAST Software)
S0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-11-15] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1049920 2014-11-15] (AVAST Software)
S1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-11-15] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-11-15] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-11-15] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-10-01] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131608 2014-10-01] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-26] (Avira Operations GmbH & Co. KG)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [279616 2011-11-13] (DT Soft Ltd)
R3 hitmanpro37; C:\Windows\system32\drivers\hitmanpro37.sys [43664 2014-11-15] ()
S3 LVcKap64; C:\Windows\System32\DRIVERS\LVcKap64.sys [1013024 2007-02-06] (Logitech Inc.)
S3 LVMVDrv; C:\Windows\System32\DRIVERS\LVMVDrv.sys [2346016 2007-02-06] (Logitech Inc.)
R3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2Mon.sys [31520 2007-02-06] ()
S3 lvsels64; C:\Windows\System32\DRIVERS\lvsels64.sys [38944 2007-02-03] (Logitech Inc.)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2014-11-15] (Malwarebytes Corporation)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesDriver64.sys [11856 2009-10-14] (TuneUp Software)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast1\ng\vbox\VBoxAswDrv.sys [270728 2014-11-15] (Avast Software)
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [59904 2009-07-14] (Microsoft Corporation)
S3 gdrv; \??\C:\Windows\gdrv.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-11-15 16:42 - 2014-11-15 16:42 - 00017196 _____ () C:\Users\Sarah\Desktop\FRST.txt
2014-11-15 16:42 - 2014-11-15 16:42 - 00000000 ___DC () C:\FRST
2014-11-15 16:41 - 2014-11-15 16:42 - 02116608 _____ (Farbar) C:\Users\Sarah\Desktop\FRST64.exe
2014-11-15 16:27 - 2014-11-15 16:27 - 00000249 _____ () C:\Windows\system32\2014-11-15-15-27-15.006-aswFe.exe-6040.log
2014-11-15 16:25 - 2014-11-15 16:25 - 00000199 _____ () C:\Windows\system32\2014-11-15-15-25-26.090-AvastVBoxSVC.exe-5768.log
2014-11-15 15:47 - 2014-11-15 15:47 - 00000249 _____ () C:\Windows\system32\2014-11-15-14-47-29.083-aswFe.exe-4996.log
2014-11-15 15:45 - 2014-11-15 15:45 - 00000199 _____ () C:\Windows\system32\2014-11-15-14-45-57.088-AvastVBoxSVC.exe-2392.log
2014-11-15 15:44 - 2014-11-15 15:44 - 00000249 _____ () C:\Windows\system32\2014-11-15-14-44-25.005-aswFe.exe-2392.log
2014-11-15 15:42 - 2014-11-15 15:42 - 00000249 _____ () C:\Windows\system32\2014-11-15-14-42-22.002-aswFe.exe-3392.log
2014-11-15 15:42 - 2014-11-15 15:42 - 00000199 _____ () C:\Windows\system32\2014-11-15-14-42-11.042-AvastVBoxSVC.exe-4504.log
2014-11-15 15:38 - 2014-11-15 15:38 - 00000000 ____D () C:\Windows\SysWOW64\vbox
2014-11-15 15:38 - 2014-11-15 15:38 - 00000000 ____D () C:\Windows\system32\vbox
2014-11-15 15:35 - 2014-11-15 15:35 - 01049920 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-11-15 15:35 - 2014-11-15 15:35 - 00436624 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-11-15 15:35 - 2014-11-15 15:35 - 00364512 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-11-15 15:35 - 2014-11-15 15:35 - 00267632 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-11-15 15:35 - 2014-11-15 15:35 - 00116728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-11-15 15:35 - 2014-11-15 15:35 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-11-15 15:35 - 2014-11-15 15:35 - 00082768 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-11-15 15:35 - 2014-11-15 15:35 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-11-15 15:35 - 2014-11-15 15:35 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-11-15 15:35 - 2014-11-15 15:35 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-11-15 15:35 - 2014-11-15 15:35 - 00001985 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2014-11-15 15:35 - 2014-11-15 15:35 - 00000645 ____C () C:\DelFix.txt
2014-11-15 15:35 - 2014-11-15 15:35 - 00000000 ____D () C:\Windows\ERUNT
2014-11-15 15:35 - 2014-11-15 15:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2014-11-15 15:26 - 2014-11-15 15:26 - 00043664 _____ () C:\Windows\system32\Drivers\hitmanpro37.sys
2014-11-15 15:25 - 2014-11-15 15:25 - 00002036 _____ () C:\Windows\system32\.crusader
2014-11-15 15:22 - 2014-11-15 15:22 - 00000000 ___DC () C:\Program Files\HitmanPro
2014-11-15 15:19 - 2014-11-15 15:25 - 00000000 ____D () C:\ProgramData\HitmanPro
2014-11-15 15:16 - 2014-11-15 15:16 - 00003128 _____ () C:\Windows\System32\Tasks\{F46D68C4-ABB1-4CD7-BF8A-52CA4230D7B9}
2014-11-15 14:40 - 2014-11-15 15:36 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-11-15 14:40 - 2014-11-15 14:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-11-15 14:40 - 2014-11-15 14:40 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-11-15 14:40 - 2014-10-01 11:11 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-11-15 14:40 - 2014-10-01 11:11 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-11-15 14:40 - 2014-10-01 11:11 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-11-15 14:26 - 2014-11-15 14:26 - 00179436 _____ () C:\Users\Sarah\AppData\Local\recently-used.xbel
2014-11-13 19:28 - 2014-11-13 19:28 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-11-13 18:36 - 2014-11-13 18:52 - 302536695 _____ () C:\Users\Sarah\Desktop\once.upon.a.time.220.hdtv-lol.mp4
2014-11-11 18:54 - 2014-11-15 15:06 - 00000000 ____D () C:\ProgramData\MaquGzup
2014-11-09 19:28 - 2014-11-09 20:07 - 00003072 ____H () C:\Users\Sarah\Desktop\photothumb.db
2014-11-09 13:07 - 2014-11-09 13:07 - 00002051 _____ () C:\Users\Sarah\Desktop\Sims 3 Jahreszeiten.lnk
2014-11-06 18:38 - 2014-11-06 18:38 - 00000000 ____D () C:\Users\Sarah\curves
2014-11-06 18:25 - 2014-11-06 18:25 - 00000000 ____D () C:\Users\Sarah\AppData\Local\webkit
2014-11-03 21:26 - 2014-11-05 14:43 - 00002939 _____ () C:\Users\Sarah\Desktop\Fanfic-Liste.txt
2014-10-29 14:02 - 2014-11-07 18:03 - 00011264 _____ () C:\Users\Sarah\Desktop\To Do+To watch.xls
2014-10-26 01:25 - 2014-10-26 01:25 - 00000616 _____ () C:\Users\Sarah\Desktop\KMPlayer.lnk
2014-10-26 01:25 - 2014-10-26 01:25 - 00000000 ____D () C:\Users\Sarah\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The KMPlayer
2014-10-25 14:05 - 2014-10-25 14:05 - 00000000 ____D () C:\Users\Sarah\Documents\Benutzerdefinierte Office-Vorlagen
2014-10-25 14:03 - 2014-10-25 14:03 - 00002206 _____ () C:\Users\Sarah\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2014-10-25 14:03 - 2014-10-25 14:03 - 00002130 _____ () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2014-10-25 14:03 - 2014-10-25 14:03 - 00002130 _____ () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2014-10-25 14:03 - 2014-10-25 14:03 - 00000000 ___RD () C:\Users\Sarah\OneDrive
2014-10-25 14:03 - 2014-10-25 14:03 - 00000000 ____D () C:\Program Files (x86)\Microsoft OneDrive
2014-10-25 13:45 - 2014-10-25 13:46 - 00000000 ___DC () C:\Program Files\Microsoft Office 15
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-11-15 16:39 - 2011-12-06 13:55 - 00000000 ____D () C:\Users\Sarah\AppData\Local\Last.fm
2014-11-15 16:25 - 2013-04-19 20:37 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-11-15 15:34 - 2014-08-25 23:18 - 00000000 ___DC () C:\Program Files\AVAST Software
2014-11-15 15:33 - 2009-07-14 05:45 - 00013760 _____ () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-15 15:33 - 2009-07-14 05:45 - 00013760 _____ () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-15 15:30 - 2009-07-14 18:58 - 00699432 _____ () C:\Windows\system32\perfh007.dat
2014-11-15 15:30 - 2009-07-14 18:58 - 00149572 _____ () C:\Windows\system32\perfc007.dat
2014-11-15 15:30 - 2009-07-14 06:13 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-15 15:29 - 2011-11-13 07:30 - 01493094 _____ () C:\Windows\WindowsUpdate.log
2014-11-15 15:26 - 2013-10-23 21:15 - 00003362 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2397675965-2088753291-856571785-1000
2014-11-15 15:26 - 2013-10-23 21:15 - 00003228 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2397675965-2088753291-856571785-1000
2014-11-15 15:26 - 2013-05-09 11:53 - 00000000 ___RD () C:\Users\Sarah\Dropbox
2014-11-15 15:26 - 2013-05-09 11:48 - 00000000 ____D () C:\Users\Sarah\AppData\Roaming\Dropbox
2014-11-15 15:26 - 2011-11-24 18:12 - 00113065 _____ () C:\Windows\setupact.log
2014-11-15 15:26 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-15 15:25 - 2014-10-05 13:29 - 00000000 ____D () C:\Program Files (x86)\Savevid
2014-11-15 15:18 - 2012-01-14 15:07 - 00253458 _____ () C:\Windows\PFRO.log
2014-11-15 15:17 - 2013-08-28 08:02 - 00000000 ____D () C:\ProgramData\Avira
2014-11-15 15:16 - 2013-08-28 08:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-11-15 15:10 - 2013-05-09 11:48 - 00000000 ____D () C:\Users\Sarah\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-11-15 15:09 - 2013-04-19 20:37 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-11-15 15:09 - 2012-05-09 09:09 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-11-15 15:09 - 2011-11-25 23:05 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-11-15 14:26 - 2014-10-05 12:07 - 00000000 ____D () C:\Users\Sarah\AppData\Local\gtk-2.0
2014-11-15 14:26 - 2014-10-05 10:20 - 00000000 ____D () C:\Users\Sarah\.gimp-2.8
2014-11-15 14:13 - 2014-10-05 11:56 - 00000000 ___DC () C:\KMPlayer
2014-11-15 13:59 - 2011-11-25 17:29 - 00000000 ____D () C:\Wendy
2014-11-15 13:11 - 2013-08-24 10:43 - 00000000 ____D () C:\ProgramData\lx_Cats
2014-11-15 10:59 - 2013-08-28 08:02 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-11-14 18:39 - 2012-05-09 09:09 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-11-11 19:24 - 2013-08-27 23:35 - 00000000 ____D () C:\Windows\pss
2014-11-06 18:38 - 2011-11-13 07:28 - 00000000 ____D () C:\Users\Sarah
2014-11-04 20:20 - 2013-09-19 19:31 - 00003850 _____ () C:\Windows\System32\Tasks\Real Networks Scheduler
2014-10-28 19:27 - 2013-03-02 12:22 - 00000000 ____D () C:\Users\Sarah\AppData\Roaming\Skype
2014-10-25 22:53 - 2011-11-13 07:32 - 00118064 _____ () C:\Users\Sarah\AppData\Local\GDIPFONTCACHEV1.DAT
2014-10-25 22:53 - 2009-07-14 05:45 - 00464744 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-10-25 13:54 - 2014-09-09 22:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-10-24 23:19 - 2013-09-15 14:32 - 00003340 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2397675965-2088753291-856571785-1000
2014-10-24 23:19 - 2013-09-15 14:32 - 00003206 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2397675965-2088753291-856571785-1000
2014-10-23 12:52 - 2013-12-01 11:29 - 00000000 ____D () C:\Users\Sarah\AppData\Local\Adobe
ZeroAccess:
C:\Windows\Installer\{94aeb679-94a4-13dc-210f-ebdf01fea3cd}
C:\Windows\Installer\{94aeb679-94a4-13dc-210f-ebdf01fea3cd}\@
ZeroAccess:
C:\$Recycle.Bin\S-1-5-21-2397675965-2088753291-856571785-1000\$94aeb67994a413dc210febdf01fea3cd
ZeroAccess:
C:\Users\Sarah\AppData\Local\{94aeb679-94a4-13dc-210f-ebdf01fea3cd}
C:\Users\Sarah\AppData\Local\{94aeb679-94a4-13dc-210f-ebdf01fea3cd}\@
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-11-15 15:01
==================== End Of Log ============================ --- --- ---
addition.txt Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 14-11-2014
Ran by Sarah at 2014-11-15 16:42:43
Running from C:\Users\Sarah\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe Flash Player 11 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 11.8.800.94 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.223 - Adobe Systems Incorporated)
Amazon MP3-Downloader 1.0.9 (HKLM-x32\...\Amazon MP3-Downloader) (Version: - )
Any Video Converter 3.3.9 (HKLM-x32\...\Any Video Converter_is1) (Version: - Any-Video-Converter.com)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ATLAS Translation Standard V14.0 Trial Version (HKLM-x32\...\{6652750B-AA69-49B7-9D09-C0A28B6FFC9F}) (Version: 14.00.2000 - FUJITSU LIMITED)
ATLAS V14.0 L10 Update Pack U004 (x32 Version: 14.04.0000 - FUJITSU LIMITED) Hidden
Audacity 2.0 (HKLM-x32\...\Audacity_is1) (Version: - Audacity Team)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.0.2206 - AVAST Software)
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.7.306 - Avira)
calibre 64bit (HKLM\...\{C7B9E1F1-45A6-4AF8-A800-0FE9A2B8F30C}) (Version: 1.14.0 - Kovid Goyal)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.45.1.0236 - DT Soft Ltd)
Die Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.67.2 - Electronic Arts)
Die Sims™ 3 Einfach tierisch (HKLM-x32\...\{C12631C6-804D-4B32-B0DD-8A496462F106}) (Version: 10.0.96 - Electronic Arts)
Die Sims™ 3 Jahreszeiten (HKLM-x32\...\{3DE92282-CB49-434F-81BF-94E5B380E889}) (Version: 16.0.136 - Electronic Arts)
Die Sims™ 3 Late Night (HKLM-x32\...\{45057FCE-5784-48BE-8176-D9D00AF56C3C}) (Version: 6.0.81 - Electronic Arts)
Die Sims™ 3 Lebensfreude (HKLM-x32\...\{E6B88BD6-E4B2-4701-A648-B6DAC6E491CC}) (Version: 8.0.152 - Electronic Arts)
Die Sims™ 3 Showtime (HKLM-x32\...\{3BBFD444-5FAB-49F6-98B1-A1954E831399}) (Version: 12.0.273 - Electronic Arts)
Die Sims™ 3 Supernatural (HKLM-x32\...\{B37DAFA5-717D-41F8-BDFB-3A4B68C0B3A1}) (Version: 15.0.135 - Electronic Arts)
Die Sims™ 3 Traumkarrieren (HKLM-x32\...\{910F4A29-1134-49E0-AD8B-56E4A3152BD1}) (Version: 4.0.87 - Electronic Arts)
Dropbox (HKU\S-1-5-21-2397675965-2088753291-856571785-1000\...\Dropbox) (Version: 2.10.52 - Dropbox, Inc.)
Dropbox (HKU\S-1-5-21-2397675965-2088753291-856571785-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Dropbox) (Version: 2.10.52 - Dropbox, Inc.)
EMDB 2.03 (HKLM-x32\...\EMDB_is1) (Version: - Wicked & Wild Inc.)
Explorer Suite IV (HKLM\...\Explorer Suite_is1) (Version: - )
f.lux (HKU\S-1-5-21-2397675965-2088753291-856571785-1000\...\Flux) (Version: - )
f.lux (HKU\S-1-5-21-2397675965-2088753291-856571785-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Flux) (Version: - )
Foxit Reader 5.1 (HKLM-x32\...\Foxit Reader_is1) (Version: 5.1.3.1201 - Foxit Corporation)
Free WMA to MP3 Converter 1.16 (HKLM-x32\...\Free WMA to MP3 Converter_is1) (Version: - Jodix Technologies Ltd.)
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
Java 7 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.450 - Oracle)
Katawa Shoujo (HKLM-x32\...\Katawa Shoujo) (Version: - )
KMPlayer (remove only) (HKLM-x32\...\The KMPlayer) (Version: 3.9.0.128 - PandoraTV)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - )
Last.fm Scrobbler 2.1.36 (HKLM-x32\...\LastFM_is1) (Version: - Last.fm)
Lexmark Z2300 Series (HKLM\...\Lexmark Z2300 Series) (Version: - Lexmark International, Inc.)
Logitech QuickCam (HKLM\...\{192E85C6-2B8A-4217-AD30-ECA5CE19DB23}) (Version: 10.51.2029 - Logitech Inc.)
Logitech® Camera-Treiber (HKLM-x32\...\QcDrv) (Version: - )
Malwarebytes Anti-Malware Version 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)
Meka MP3 Album Artwork Tool (HKLM-x32\...\{566D66BF-BF53-4FA7-91C5-F419A37F7248}) (Version: 1.0.0 - DroidSDK Software)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Games for Windows - LIVE (HKLM-x32\...\{B45FABE7-D101-4D99-A671-E16DA40AF7F0}) (Version: 3.0.86.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{B578C85A-A84C-4230-A177-C5B2AF565B8C}) (Version: 3.0.17.0 - Microsoft Corporation)
Microsoft Lync Basic 2013 (HKLM-x32\...\Office15.LYNCENTRY) (Version: 15.0.4420.1017 - Microsoft Corporation)
Microsoft Office 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 15.0.4659.1001 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2397675965-2088753291-856571785-1000\...\OneDriveSetup.exe) (Version: 17.3.1171.0714 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2397675965-2088753291-856571785-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\OneDriveSetup.exe) (Version: 17.3.1171.0714 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Mozilla Firefox 33.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 33.1 (x86 de)) (Version: 33.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 32.0.1 - Mozilla)
MP3-Tag-Editor 3.10 (HKLM-x32\...\{12FCEE02-33A5-478A-A0B1-219E07BA0B47}) (Version: 3.10.0 - Gisbert Müller)
MSVCRT Redists (Version: 1.0 - Sony Creative Software Inc.) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MVisn64 (Version: 10.51.2027 - Logitech Inc.) Hidden
MyDriveConnect 3.3.0.1756 (HKLM-x32\...\MyDriveConnect) (Version: 3.3.0.1756 - TomTom)
NVIDIA 3D Vision Controller-Treiber 314.22 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 314.22 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 314.22 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 314.22 - NVIDIA Corporation)
NVIDIA Grafiktreiber 314.22 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 314.22 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.23.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.23.1 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.12.1031 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.1031 - NVIDIA Corporation)
NVIDIA Update 1.12.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.12.12 - NVIDIA Corporation)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4659.1001 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4659.1001 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4659.1001 - Microsoft Corporation) Hidden
OpenOffice.org 3.3 (HKLM-x32\...\{4286716B-1287-48E7-9078-3DC8248DBA96}) (Version: 3.3.9567 - OpenOffice.org)
Origin (HKLM-x32\...\Origin) (Version: 8.6.0.357 - Electronic Arts, Inc.)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
pdfsam (HKU\S-1-5-21-2397675965-2088753291-856571785-1000\...\pdfsam) (Version: 2.2.1 - )
pdfsam (HKU\S-1-5-21-2397675965-2088753291-856571785-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\pdfsam) (Version: 2.2.1 - )
Photo Pos Pro (HKLM-x32\...\Photo Pos Pro) (Version: 1.89 - PowerOfSoftware Ltd.)
PhotoScape (HKLM-x32\...\PhotoScape) (Version: - )
RealDownloader (x32 Version: 1.3.3 - RealNetworks, Inc.) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0 - RealNetworks, Inc) Hidden
RealPlayer (HKLM-x32\...\RealPlayer 16.0) (Version: 16.0.3 - RealNetworks)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.38.113.2011 - Realtek)
RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) Hidden
RPG Maker VX RTP (HKLM-x32\...\RPG Maker VX RTP_is1) (Version: 1.02 - Enterbrain)
Savevid (HKU\S-1-5-21-2397675965-2088753291-856571785-1000\...\Savevid) (Version: 0.0.0.1046 - Bandoo Media Inc) <==== ATTENTION
Savevid (HKU\S-1-5-21-2397675965-2088753291-856571785-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Savevid) (Version: 0.0.0.1046 - Bandoo Media Inc) <==== ATTENTION
ScummVM 1.5.0 (HKLM-x32\...\ScummVM_is1) (Version: - The ScummVM Team)
Skype™ 6.21 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.21.104 - Skype Technologies S.A.)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
TuneUp Utilities (HKLM-x32\...\TuneUp Utilities) (Version: 9.0.2000.15 - TuneUp Software)
TuneUp Utilities (x32 Version: 9.0.2000.15 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (x32 Version: 9.0.2000.15 - TuneUp Software) Hidden
Unigine Heaven Benchmark v2.1 (HKLM-x32\...\{38468127-9E6F-4FC9-B5F7-42D4AD437D96}) (Version: 2.1 - Unigine Corp.)
Vegas Pro 10.0 (HKLM-x32\...\{3C8CDDCF-D09A-11DF-8BB6-0013D3D69929}) (Version: 10.0.387 - Sony)
Veoh Giraffic Video Accelerator (HKLM-x32\...\Giraffic) (Version: 0.86.412.230 - Giraffic)
Veoh Web Player (HKLM-x32\...\Veoh Web Player Beta) (Version: 1.1.2.0000 - Veoh Networks, Inc.)
Visual Studio C++ 10.0 Runtime (HKLM-x32\...\{4412F224-3849-4461-A3E9-DEEF8D252790}) (Version: 10.0.0 - TomTom International B.V.)
VLC media player 1.1.11 (HKLM-x32\...\VLC media player) (Version: 1.1.11 - VideoLAN)
Winamp (HKLM-x32\...\Winamp) (Version: 5.622 - Nullsoft, Inc)
WinRAR 4.00 beta 7 (64-bit) (HKLM\...\WinRAR archiver) (Version: 4.00.7 - win.rar GmbH)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-2397675965-2088753291-856571785-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Sarah\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2397675965-2088753291-856571785-1000_Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InprocServer32 -> C:\Users\Sarah\AppData\Local\{94aeb679-94a4-13dc-210f-ebdf01fea3cd}\n. No File
CustomCLSID: HKU\S-1-5-21-2397675965-2088753291-856571785-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Sarah\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2397675965-2088753291-856571785-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Sarah\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2397675965-2088753291-856571785-1000_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Sarah\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2397675965-2088753291-856571785-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Sarah\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2397675965-2088753291-856571785-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Sarah\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64\FileSyncApi64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2397675965-2088753291-856571785-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Sarah\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2397675965-2088753291-856571785-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Sarah\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2397675965-2088753291-856571785-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Sarah\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2397675965-2088753291-856571785-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Sarah\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2397675965-2088753291-856571785-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Sarah\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2397675965-2088753291-856571785-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Sarah\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2397675965-2088753291-856571785-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Sarah\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2397675965-2088753291-856571785-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Sarah\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2397675965-2088753291-856571785-1000_Classes\CLSID\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InprocServer32 -> C:\$Recycle.Bin ()
==================== Restore Points =========================
08-11-2014 14:11:15 Geplanter Prüfpunkt
15-11-2014 14:24:19 Prüfpunkt von HitmanPro
15-11-2014 14:25:14 Prüfpunkt von HitmanPro
15-11-2014 14:34:51 avast! antivirus system restore point
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 03:34 - 2014-11-11 19:03 - 00000884 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
127.0.0.1 player.kmpmedia.net
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {0134E7C6-E4A3-4514-A98D-3537C8AE88C8} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2397675965-2088753291-856571785-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {07D80477-0FB3-441E-B661-1F257C559C3E} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2397675965-2088753291-856571785-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {08207192-DE1C-463B-882D-8810520E59DA} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2397675965-2088753291-856571785-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {0E6EC90A-3F22-44A7-AA60-AA3094E96A9B} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-20] (Microsoft Corporation)
Task: {162BA24E-20C0-4676-BE87-EBD0287D8F9D} - System32\Tasks\{11B678D5-DA0B-46C9-876B-FCBB589FC909} => C:\Program Files\Sony\Vegas Pro 11.0\vegas110.exe
Task: {39B7D925-3B4B-42E1-9F00-CA1BF8D180D9} - System32\Tasks\Automatische Problemsuche => C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpSystemStatusCheck.exe [2009-10-30] (TuneUp Software)
Task: {3E14DC2F-7C29-4FF9-B50D-DD3501175797} - System32\Tasks\RunAsStdUser Task for VeohWebPlayer => C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\veohwebplayer.exe [2012-01-02] (Veoh Networks)
Task: {4895C3C8-91BE-4293-9DE5-5EDC0F167BB2} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2014-10-25] (Microsoft Corporation)
Task: {4C7EF4CE-232D-4E4E-9A85-F26D6393FEB8} - System32\Tasks\Real Networks Scheduler => C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe [2013-09-15] (RealNetworks, Inc.)
Task: {73AF88A5-69F5-46EB-B27D-C60B2B8458C7} - System32\Tasks\Installation App Launcher => C:\Program Files (x86)\Lexmark Z2300 Series\ezprint.exe [2010-02-04] (Lexmark International Inc.)
Task: {8D49CA1D-E81E-4210-8263-63B1551AE686} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2397675965-2088753291-856571785-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {A178FF79-34D0-4D5F-A8B8-099F4C8C0BDF} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-2397675965-2088753291-856571785-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe [2013-08-14] (RealNetworks, Inc.)
Task: {B39F3CBD-3374-4C9F-BCC3-761610F6F6E1} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance => C:\Program Files (x86)\TuneUp Utilities 2010\OneClick.exe [2009-10-30] (TuneUp Software)
Task: {B65286D9-5CD0-4B2C-AED9-42D7F053E184} - System32\Tasks\{4E8C7CF6-3975-4E2C-ADEB-9EE15569D1C3} => C:\Program Files\Sony\Vegas Pro 11.0\vegas110.exe
Task: {B6829E67-B184-472C-AE52-4C5133154248} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {CB2C3E7E-A2DF-4933-9624-D83C1E857353} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe
Task: {CBD2892E-387F-4EC4-80A9-4C19CD6AF791} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)
Task: {CD5CC931-395D-4154-89FD-6A6F05B9FD21} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2014-09-25] (Microsoft Corporation)
Task: {FE244C6E-C3B2-4FCE-947A-C0C9BC50A1F9} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-15] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Loaded Modules (whitelisted) =============
2013-08-28 10:44 - 2009-08-13 06:06 - 00177152 _____ () C:\Windows\system32\spool\PRTPROCS\x64\lxdpdrpp.dll
2014-10-25 13:45 - 2014-05-20 08:19 - 00105640 ____C () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2013-08-14 14:19 - 2013-08-14 14:19 - 00039056 _____ () C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
2014-11-15 15:35 - 2014-11-15 15:35 - 00388208 ____C () C:\Program Files\AVAST Software\Avast1\ng\vbox\VBoxDDU.dll
2014-11-15 15:35 - 2014-11-15 15:35 - 05846160 ____C () C:\Program Files\AVAST Software\Avast1\ng\vbox\VBoxRT.dll
2014-11-15 15:35 - 2014-11-15 15:35 - 02896384 ____C () C:\Program Files\AVAST Software\Avast1\defs\14102100\algo.dll
2014-11-15 15:36 - 2014-11-15 15:36 - 02903040 ____C () C:\Program Files\AVAST Software\Avast1\defs\14111500\algo.dll
2014-11-15 15:35 - 2014-11-15 15:35 - 04491192 ____C () C:\Program Files\AVAST Software\Avast1\ng\vbox\x86\VBoxRT-x86.dll
2014-11-13 19:28 - 2014-11-13 19:28 - 03649648 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2011-10-26 19:49 - 2011-11-16 00:11 - 00410624 _____ () C:\Program Files (x86)\Winamp\nsutil.dll
2011-10-26 19:49 - 2011-11-16 00:11 - 00078848 _____ () C:\Program Files (x86)\Winamp\nde.dll
2011-10-26 19:49 - 2011-11-16 00:11 - 00047616 _____ () C:\Program Files (x86)\Winamp\zlib.dll
2014-11-15 16:26 - 2014-11-15 16:26 - 00010752 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\auth.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00069120 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\burnlib.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00013824 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\dsp_sps.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00006656 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\enc_fhgaac.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00004096 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\enc_flac.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00005632 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\enc_lame.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00004096 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\enc_vorbis.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00004096 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\enc_wav.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00006144 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\enc_wma.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00023552 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\gen_classicart.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00007168 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\gen_crasher.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00023040 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\gen_ff.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00004096 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\gen_find_on_disk.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00011264 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\gen_hotkeys.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00041984 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\gen_jumpex.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00021504 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\gen_ml.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00009216 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\gen_nopro.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00007168 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\gen_orgler.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00011776 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\gen_skinmanager.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00010240 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\gen_timerestore.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00008192 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\gen_tray.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00010752 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\gen_undo.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00005120 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\in_avi.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00014336 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\in_cdda.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00006656 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\in_dshow.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00005632 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\in_flac.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00003584 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\in_flv.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00003584 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\in_linein.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00020480 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\in_midi.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00004608 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\in_mkv.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00018944 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\in_mod.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00023040 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\in_mp3.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00005120 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\in_mp4.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00011776 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\in_nsv.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00003584 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\in_swf.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00011264 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\in_vorbis.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00006656 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\in_wav.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00005632 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\in_wave.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00015360 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\in_wm.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00004608 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\in_wv.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00003584 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\ml_addons.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00006656 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\ml_autotag.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00005120 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\ml_bookmarks.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00008704 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\ml_devices.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00047616 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\ml_disc.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00009728 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\ml_downloads.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00004608 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\ml_enqplay.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00008704 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\ml_history.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00005120 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\ml_impex.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00056320 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\ml_local.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00003584 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\ml_nowplaying.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00014336 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\ml_online.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00004096 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\ml_orb.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00012800 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\ml_playlists.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00034816 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\ml_plg.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00047104 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\ml_pmp.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00005120 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\ml_rg.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00008192 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\ml_transcode.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00014848 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\ml_wire.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00036352 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\ombrowser.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00006144 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\out_disk.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00016384 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\out_ds.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00007680 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\out_wave.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00003072 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\playlist.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00004608 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\pmp_activesync.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00020480 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\pmp_android.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00036864 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\pmp_ipod.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00003584 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\pmp_njb.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00004096 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\pmp_p4s.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00011776 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\pmp_usb.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00039424 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\pmp_wifi.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00006144 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\tagz.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00088064 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\vis_avs.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00155648 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\vis_milk2.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00007680 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\vis_nsfs.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00204800 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\winamp.lng
2014-11-15 16:26 - 2014-11-15 16:26 - 00004096 _____ () C:\Users\Sarah\AppData\Local\Temp\WLZ148.tmp\winampa.lng
2011-10-26 19:49 - 2011-11-16 00:11 - 00023040 _____ () C:\Program Files (x86)\Winamp\System\albumart.w5s
2011-10-26 19:49 - 2011-11-16 00:11 - 00019456 _____ () C:\Program Files (x86)\Winamp\System\bmp.w5s
2011-10-26 19:49 - 2011-11-16 00:11 - 00016896 _____ () C:\Program Files (x86)\Winamp\System\dlmgr.w5s
2011-10-26 19:49 - 2011-11-16 00:11 - 00019456 _____ () C:\Program Files (x86)\Winamp\System\gif.w5s
2011-10-26 19:49 - 2011-11-16 00:11 - 00016384 _____ () C:\Program Files (x86)\Winamp\System\gracenote.w5s
2011-10-26 19:49 - 2011-11-16 00:11 - 00623616 _____ () C:\Program Files (x86)\Winamp\System\jnetlib.w5s
2011-10-26 19:49 - 2011-11-16 00:11 - 00154624 _____ () C:\Program Files (x86)\Winamp\System\jpeg.w5s
2011-10-26 19:49 - 2011-11-16 00:11 - 00084480 _____ () C:\Program Files (x86)\Winamp\System\playlist.w5s
2011-10-26 19:49 - 2011-11-16 00:11 - 00103936 _____ () C:\Program Files (x86)\Winamp\System\png.w5s
2011-10-26 19:49 - 2011-11-16 00:11 - 00021504 _____ () C:\Program Files (x86)\Winamp\System\tagz.w5s
2011-10-26 19:49 - 2011-11-16 00:11 - 00090112 _____ () C:\Program Files (x86)\Winamp\System\xml.w5s
2011-10-26 19:49 - 2011-11-16 00:11 - 00102400 _____ () C:\Program Files (x86)\Winamp\Plugins\in_cdda.dll
2011-10-26 19:49 - 2011-11-16 00:11 - 00061440 _____ () C:\Program Files (x86)\Winamp\Plugins\in_flac.dll
2011-10-26 19:49 - 2011-11-16 00:11 - 00109568 _____ () C:\Program Files (x86)\Winamp\Plugins\in_midi.dll
2011-10-26 19:49 - 2011-11-16 00:11 - 00165376 _____ () C:\Program Files (x86)\Winamp\Plugins\in_mod.dll
2011-10-26 19:49 - 2011-11-16 00:11 - 00290304 _____ () C:\Program Files (x86)\Winamp\Plugins\in_mp3.dll
2011-10-26 19:49 - 2011-11-16 00:11 - 00052736 _____ () C:\Program Files (x86)\Winamp\Plugins\in_mp4.dll
2011-10-26 19:49 - 2011-11-16 00:11 - 00253440 _____ () C:\Program Files (x86)\Winamp\Plugins\in_vorbis.dll
2011-10-26 19:49 - 2011-11-16 00:11 - 00016896 _____ () C:\Program Files (x86)\Winamp\Plugins\in_wave.dll
2011-10-26 19:49 - 2011-11-16 00:11 - 00253440 _____ () C:\Program Files (x86)\Winamp\libsndfile.dll
2011-10-26 19:49 - 2011-11-16 00:11 - 00313344 _____ () C:\Program Files (x86)\Winamp\Plugins\in_wm.dll
2011-10-26 19:49 - 2011-11-16 00:11 - 00022528 _____ () C:\Program Files (x86)\Winamp\Plugins\out_disk.dll
2011-10-26 19:49 - 2011-11-16 00:11 - 00052224 _____ () C:\Program Files (x86)\Winamp\Plugins\out_ds.dll
2011-10-26 19:49 - 2011-11-16 00:11 - 00018432 _____ () C:\Program Files (x86)\Winamp\Plugins\out_wave.dll
2011-10-26 19:49 - 2011-11-16 00:11 - 00027648 _____ () C:\Program Files (x86)\Winamp\Plugins\gen_hotkeys.dll
2011-10-26 19:05 - 2011-11-16 00:11 - 00183808 _____ () C:\Program Files (x86)\Winamp\Plugins\gen_jumpex.dll
2011-10-26 19:49 - 2011-11-16 00:11 - 00025600 _____ () C:\Program Files (x86)\Winamp\Plugins\gen_tray.dll
2013-01-17 20:13 - 2013-09-03 13:01 - 00736768 _____ () C:\Program Files (x86)\Last.fm\unicorn.dll
2013-01-17 20:13 - 2013-09-03 13:01 - 00032768 _____ () C:\Program Files (x86)\Last.fm\logger.dll
2013-01-17 20:13 - 2013-09-03 09:54 - 00351232 _____ () C:\Program Files (x86)\Last.fm\lastfm.dll
2013-01-17 20:13 - 2013-09-03 13:01 - 00126976 _____ () C:\Program Files (x86)\Last.fm\listener.dll
2013-01-17 20:13 - 2013-01-18 11:39 - 00302592 _____ () C:\Program Files (x86)\Last.fm\phonon.dll
2013-04-12 16:23 - 2013-01-18 11:49 - 00182784 _____ () C:\Program Files (x86)\Last.fm\plugins\phonon_backend\phonon_vlc.dll
2013-01-17 20:13 - 2012-12-13 00:12 - 00111104 _____ () C:\Program Files (x86)\Last.fm\libvlc.dll
2013-01-17 20:13 - 2012-12-13 00:13 - 02286592 _____ () C:\Program Files (x86)\Last.fm\libvlccore.dll
2013-09-08 15:53 - 2012-12-13 00:13 - 00049664 _____ () C:\Program Files (x86)\Last.fm\plugins\audio_output\libaout_directx_plugin.dll
2014-10-25 13:46 - 2014-10-25 13:46 - 00316576 ____C () C:\Program Files\Microsoft Office 15\root\office15\AppVIsvStream32.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
AlternateDataStreams: C:\ProgramData\TEMP:EBAA0CD9
AlternateDataStreams: C:\ProgramData\TEMP:EC77041F
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: Apple Mobile Device => 2
MSCONFIG\Services: Giraffic => 2
MSCONFIG\Services: LVSrvLauncher => 2
MSCONFIG\Services: nvsvc => 2
MSCONFIG\Services: nvUpdatusService => 2
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: Steam Client Service => 3
MSCONFIG\Services: Stereo Service => 2
MSCONFIG\startupfolder: C:^Users^Sarah^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: avgnt => "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
MSCONFIG\startupreg: Avira Systray => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: EzPrint => "C:\Program Files (x86)\Lexmark Z2300 Series\ezprint.exe"
MSCONFIG\startupreg: f.lux => "C:\Users\Sarah\AppData\Local\FluxSoftware\Flux\flux.exe" /noshow
MSCONFIG\startupreg: Logitech Download Assistant => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
MSCONFIG\startupreg: lxdpmon.exe => "C:\Program Files (x86)\Lexmark Z2300 Series\lxdpmon.exe"
MSCONFIG\startupreg: MaquGzup => regsvr32.exe "C:\ProgramData\MaquGzup\MaquGzup.dat"
MSCONFIG\startupreg: MyDriveConnect.exe => "C:\Program Files (x86)\MyDrive Connect\MyDriveConnect.exe"
========================= Accounts: ==========================
Administrator (S-1-5-21-2397675965-2088753291-856571785-500 - Administrator - Enabled) => C:\Users\Administrator
Gast (S-1-5-21-2397675965-2088753291-856571785-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2397675965-2088753291-856571785-1007 - Limited - Enabled)
Sarah (S-1-5-21-2397675965-2088753291-856571785-1000 - Administrator - Enabled) => C:\Users\Sarah
UpdatusUser (S-1-5-21-2397675965-2088753291-856571785-1001 - Limited - Enabled) => C:\Users\UpdatusUser
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (11/15/2014 04:25:36 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary adjoyjfc.
System Error:
Das System kann die angegebene Datei nicht finden.
.
Error: (11/15/2014 04:25:28 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary adjoyjfc.
System Error:
Das System kann die angegebene Datei nicht finden.
.
Error: (11/15/2014 03:46:04 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary adjoyjfc.
System Error:
Das System kann die angegebene Datei nicht finden.
.
Error: (11/15/2014 03:45:59 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary adjoyjfc.
System Error:
Das System kann die angegebene Datei nicht finden.
.
Error: (11/15/2014 03:38:27 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary adjoyjfc.
System Error:
Das System kann die angegebene Datei nicht finden.
.
Error: (11/15/2014 03:38:22 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary adjoyjfc.
System Error:
Das System kann die angegebene Datei nicht finden.
.
Error: (11/15/2014 03:34:51 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary adjoyjfc.
System Error:
Das System kann die angegebene Datei nicht finden.
.
Error: (11/15/2014 03:25:32 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "RegSetValueExW(0x000002fc,SYSTEM\CurrentControlSet\Services\VSS\Diag\VssvcPublisher,0,REG_BINARY,000000000331ED60.72)" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Error: (11/15/2014 03:25:32 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "RegSetValueExW(0x000002dc,(null),0,REG_BINARY,0000000000D7E200.72)" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Vorgang:
BackupShutdown-Ereignis
Kontext:
Ausführungskontext: Writer
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {e79a2196-e5a4-42f3-9322-a5600882f66b}
Error: (11/15/2014 03:25:32 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "RegSetValueExW(0x000007ac,(null),0,REG_BINARY,0000000006A8E170.72)" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Vorgang:
BackupShutdown-Ereignis
Kontext:
Ausführungskontext: Writer
Generatorklassen-ID: {a6ad56c2-b509-4e6c-bb19-49d8f43532f0}
Generatorname: WMI Writer
Generatorinstanz-ID: {0a1852a2-2d20-4fb7-9264-d6ce6c89dddd}
System errors:
=============
Error: (11/15/2014 03:26:39 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Der Dienst "HitmanPro 3.7 Crusader (Boot)" wurde mit folgendem dienstspezifischem Fehler beendet: %%0.
Error: (11/15/2014 03:26:26 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen.
Error: (11/15/2014 03:26:26 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen.
Error: (11/15/2014 03:26:12 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen.
Error: (11/15/2014 03:26:12 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen.
Error: (11/15/2014 03:26:12 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen.
Error: (11/15/2014 03:25:20 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "DeleteFlag" aufgrund folgenden Fehlers fehlgeschlagen:
%%5
Error: (11/15/2014 03:25:20 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "SavevidService" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (11/15/2014 03:18:28 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen.
Error: (11/15/2014 03:18:28 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen.
Microsoft Office Sessions:
=========================
Error: (11/15/2014 04:25:36 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description:
Details:
AddLegacyDriverFiles: Unable to back up image of binary adjoyjfc.
System Error:
Das System kann die angegebene Datei nicht finden.
Error: (11/15/2014 04:25:28 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description:
Details:
AddLegacyDriverFiles: Unable to back up image of binary adjoyjfc.
System Error:
Das System kann die angegebene Datei nicht finden.
Error: (11/15/2014 03:46:04 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description:
Details:
AddLegacyDriverFiles: Unable to back up image of binary adjoyjfc.
System Error:
Das System kann die angegebene Datei nicht finden.
Error: (11/15/2014 03:45:59 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description:
Details:
AddLegacyDriverFiles: Unable to back up image of binary adjoyjfc.
System Error:
Das System kann die angegebene Datei nicht finden.
Error: (11/15/2014 03:38:27 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description:
Details:
AddLegacyDriverFiles: Unable to back up image of binary adjoyjfc.
System Error:
Das System kann die angegebene Datei nicht finden.
Error: (11/15/2014 03:38:22 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description:
Details:
AddLegacyDriverFiles: Unable to back up image of binary adjoyjfc.
System Error:
Das System kann die angegebene Datei nicht finden.
Error: (11/15/2014 03:34:51 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description:
Details:
AddLegacyDriverFiles: Unable to back up image of binary adjoyjfc.
System Error:
Das System kann die angegebene Datei nicht finden.
Error: (11/15/2014 03:25:32 PM) (Source: VSS) (EventID: 8193) (User: )
Description: RegSetValueExW(0x000002fc,SYSTEM\CurrentControlSet\Services\VSS\Diag\VssvcPublisher,0,REG_BINARY,000000000331ED60.72)0x80070005, Zugriff verweigert
Error: (11/15/2014 03:25:32 PM) (Source: VSS) (EventID: 8193) (User: )
Description: RegSetValueExW(0x000002dc,(null),0,REG_BINARY,0000000000D7E200.72)0x80070005, Zugriff verweigert
Vorgang:
BackupShutdown-Ereignis
Kontext:
Ausführungskontext: Writer
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {e79a2196-e5a4-42f3-9322-a5600882f66b}
Error: (11/15/2014 03:25:32 PM) (Source: VSS) (EventID: 8193) (User: )
Description: RegSetValueExW(0x000007ac,(null),0,REG_BINARY,0000000006A8E170.72)0x80070005, Zugriff verweigert
Vorgang:
BackupShutdown-Ereignis
Kontext:
Ausführungskontext: Writer
Generatorklassen-ID: {a6ad56c2-b509-4e6c-bb19-49d8f43532f0}
Generatorname: WMI Writer
Generatorinstanz-ID: {0a1852a2-2d20-4fb7-9264-d6ce6c89dddd}
==================== Memory info ===========================
Processor: AMD Phenom(tm) II X4 955 Processor
Percentage of memory in use: 48%
Total physical RAM: 4093.55 MB
Available physical RAM: 2119.78 MB
Total Pagefile: 8591.73 MB
Available Pagefile: 6217.29 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB
==================== Drives ================================
Drive c: (System SSD) (Fixed) (Total:111.69 GB) (Free:29.16 GB) NTFS
Drive d: (Sims3EP08) (CDROM) (Total:3.9 GB) (Free:0 GB) UDF
Drive f: (Daten HDD) (Fixed) (Total:76.32 GB) (Free:37.06 GB) NTFS
Drive g: (System-reserviert) (Fixed) (Total:0.1 GB) (Free:0.04 GB) NTFS ==>[System with boot components (obtained from reading drive)]
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 76.3 GB) (Disk ID: 4A7D4A7E)
Partition 1: (Active) - (Size=76.3 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: D0A07874)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=111.7 GB) - (Type=07 NTFS)
==================== End Of Log ============================ |