| BGFighter | 13.06.2015 20:55 |
[CODE]Additional
FRST Logfile: Code:
scan result of Farbar Recovery Scan Tool (x64) Version:13-06-2015
Ran by BGFighter at 2015-06-13 21:53:13
Running from D:\Downloads
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-3234060430-3409083472-189945155-500 - Administrator - Disabled)
BGFighter (S-1-5-21-3234060430-3409083472-189945155-1001 - Administrator - Enabled) => C:\Users\BGFighter
Gast (S-1-5-21-3234060430-3409083472-189945155-501 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus (Enabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.188 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.11) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.11 - Adobe Systems Incorporated)
Apple Application Support (32-Bit) (HKLM-x32\...\{AFA1153A-F547-409B-B837-3A0D6C5A3FEC}) (Version: 3.1.3 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{D7B824DE-DA32-4772-9E5E-39C5158136A7}) (Version: 3.1.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{C4123106-B685-48E6-B9BD-E4F911841EB4}) (Version: 8.1.1.3 - Apple Inc.)
Avast Internet Security (HKLM-x32\...\Avast) (Version: 10.2.2218 - AVAST Software)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.6.2 - EA Digital Illusions CE AB)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.4.5306 - CDBurnerXP)
Data Lifeguard Diagnostic for Windows 1.24 (HKLM-x32\...\{519C4DB6-B53B-4F5C-8297-89B2BE949FA5}_is1) (Version: - Western Digital Corporation)
DivX (HKLM-x32\...\{7B63B2922B174135AFC0E1377DD81EC2}) (Version: 6.0 - DivXNetworks, Inc.)
DVDStyler v2.8 (HKLM-x32\...\DVDStyler_is1) (Version: - )
Free Studio version 2014 (HKLM-x32\...\Free Studio_is1) (Version: 6.3.10.923 - DVDVideoSoft Ltd.)
Freemake Video Converter Version 4.1.6 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.6 - Ellora Assets Corporation)
IsoBuster 3.5 (HKLM-x32\...\IsoBuster_is1) (Version: 3.5 - Smart Projects)
iTunes (HKLM\...\{93F2A022-6C37-48B8-B241-FFABD9F60C30}) (Version: 12.1.2.27 - Apple Inc.)
Java 8 Update 40 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218040F0}) (Version: 8.0.400 - Oracle Corporation)
Malwarebytes Anti-Malware Version 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
Microsoft LifeCam (HKLM\...\{6965A8D2-465D-4F98-9FAA-0E9E2348F329}) (Version: 3.22.270.0 - Microsoft Corporation)
Microsoft Money 99 (HKLM-x32\...\MSMONEYV70) (Version: - )
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISER) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Mozilla Firefox 38.0.5 (x86 de) (HKLM-x32\...\Mozilla Firefox 38.0.5 (x86 de)) (Version: 38.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 31.3.0 - Mozilla)
Mozilla Thunderbird 31.3.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 31.3.0 (x86 de)) (Version: 31.3.0 - Mozilla)
MyFreeCodec (HKU\S-1-5-21-3234060430-3409083472-189945155-1001\...\MyFreeCodec) (Version: - )
Origin (HKLM-x32\...\Origin) (Version: 9.5.5.2850 - Electronic Arts, Inc.)
paint.net (HKLM\...\{19BD2C33-16A8-4ED1-B9EA-D9E35B21EC42}) (Version: 4.0.5 - dotPDN LLC)
Roxio Easy Media Creator 9 Suite (HKLM-x32\...\{70272964-C468-4C5F-8246-AA2CABA75941}) (Version: 9.0.136 - Roxio, Inc.)
Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.15013.17 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (x32 Version: 3.2.15013.17 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.49.0 - SAMSUNG Electronics Co., Ltd.)
SeaTools for Windows (HKLM-x32\...\SeaTools for Windows) (Version: - Seagate Technology)
SiSoftware Sandra Lite 2015x (HKLM\...\{C3113E55-7BCB-4de3-8EBF-60E6CE6B2496}_is1) (Version: 21.15.2015.1 - SiSoftware)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.4.0.9058 - Microsoft Corporation)
Skype™ 7.3 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
Turbo Lister 2 (HKLM-x32\...\{8927E07C-97F7-4A54-88FB-D976F50DD46E}) (Version: 2.00.0000 - eBay Inc.)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISER_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISER_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version: - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISER_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISER_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft)
VD64Inst (Version: 1.00.0000 - Roxio, Inc.) Hidden
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)
WinRAR 5.11 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH)
XMedia Recode Version 3.2.1.6 (HKLM-x32\...\{DDA3C325-47B2-4730-9672-BF3771C08799}_is1) (Version: 3.2.1.6 - XMedia Recode)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== Restore Points =========================
25-05-2015 08:28:21 Windows Update
05-06-2015 07:31:59 Geplanter Prüfpunkt
13-06-2015 19:08:24 Removed Google Earth
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {13A1BCC5-585A-4650-A11B-D220EC0A03A1} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => schtasks
Task: {1D7B207D-1787-4524-B49F-ADDCE87AC74E} - System32\Tasks\{BC0DEB37-A8A7-4AD2-9DE5-53A159A322D0} => pcalua.exe -a "K:\Money 99\Setup\SETUP.EXE" -d "K:\Money 99\Setup"
Task: {24A9DFAE-2175-41D1-838F-C4AD98DF273C} - System32\Tasks\InstallShield Software-Aktualisierungsdienst => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe [2005-02-16] (InstallShield Software Corporation)
Task: {28B78A65-18FB-42E4-B1C1-9C19C6F46053} - System32\Tasks\hcdll2_ex_Win32 => C:\Program Files (x86)\Hardcopy\hcdll2_ex_Win32.exe [2013-07-17] ()
Task: {3BCFFDA9-CA9D-4D21-B0DF-A38C1A341E48} - System32\Tasks\InstallShield Software-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [2005-02-16] (InstallShield Software Corporation)
Task: {4995D71E-B354-4FCE-8CD5-897B0EAEC0BD} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-05-06] (Microsoft Corporation)
Task: {5007DCC6-75DA-4A78-801A-79C6AC9F0DC8} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\Logon => C:\Windows\system32\GWX\GWX.exe [2015-05-06] (Microsoft Corporation)
Task: {5DED68AF-C8B6-4AE0-B033-29558994AA13} - \Crossbrowse No Task File <==== ATTENTION
Task: {6D72FE06-C9C9-4496-8444-4AD7CAA9C8C6} - System32\Tasks\avast! Emergency Update => D:\Sicherheit\Avast Free\AvastEmUpdate.exe [2015-05-16] (Avast Software s.r.o.)
Task: {722453C6-13A0-473E-BB66-252F3B407A2E} - System32\Tasks\{94CE2E13-974E-4A01-A907-DF493A5EF03B} => pcalua.exe -a "D:\Systemprogramme\TuneUp Utilities 2012\TUInstallHelper.exe" -c --Trigger-Uninstall
Task: {7A28FE46-ED77-4103-9387-AB59334A4348} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-05-19] (Adobe Systems Incorporated)
Task: {7A78A5F5-62BC-4CB4-BEEB-AF446BD3120C} - System32\Tasks\{98104736-FB45-407A-B133-4591CF58B173} => Firefox.exe hxxp://ui.skype.com/ui/0/6.18.0.106/de/go/help.faq.installer?LastError=1638
Task: {8176119C-D1B8-4483-AE11-148377244AB3} - System32\Tasks\{0282C9D1-80A1-4379-8A5E-DC883D5A93B0} => pcalua.exe -a C:\Users\BGFighter\AppData\Roaming\luckysearches\UninstallManager.exe -c -ptid=cmi
Task: {896D06C2-A876-4FC8-A2BC-BA1E72CC87CA} - System32\Tasks\{548E333A-0F95-40DA-AC5C-834B8AB8E695} => Firefox.exe hxxp://ui.skype.com/ui/0/6.18.0.106/de/go/help.faq.installer?LastError=1638
Task: {90DDA27D-22E1-458E-A818-21FEA5BC99BC} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-05-13] (Microsoft Corporation)
Task: {91E3BA41-14D4-4886-9C81-0E1249217E4B} - System32\Tasks\avastBCLRestartS-1-5-21-3234060430-3409083472-189945155-1001 => Firefox.exe
Task: {9862A127-787B-4301-BAA1-8FFD097FE20C} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2015-03-07] (Oracle Corporation)
Task: {9C4CBB0B-209D-4879-B214-807976927335} - System32\Tasks\hcdll2_ex_x64 => C:\Program Files (x86)\Hardcopy\hcdll2_ex_x64.exe [2012-11-08] ()
Task: {9CA1C9E9-A057-44A8-9F17-9CC450408302} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-05-06] (Microsoft Corporation)
Task: {B31CBC76-501E-47C9-A653-5813EA9B3624} - System32\Tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser => C:\Windows\system32\compattel\DiagTrackRunner.exe [2015-03-16] (Microsoft Corporation)
Task: {CFB368FB-403C-4627-AD88-9E63B4FBDB6F} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2014\OneClick.exe [2014-07-16] (TuneUp Software)
Task: {D11550C0-4F40-4193-AC58-17D8C8148DD6} - System32\Tasks\{C22D97B0-FDFF-449D-BD17-DD8DCF0994C6} => pcalua.exe -a "Z:\Magician Software\Samsung_Magician_Setup_v.3.2.exe" -d "Z:\Magician Software"
Task: {D5A8FF20-7B2D-4ACD-A527-B99DB6489D70} - System32\Tasks\{9A33799F-4A8A-484F-93F7-E0029C55348B} => Firefox.exe hxxp://ui.skype.com/ui/0/6.18.0.106/de/go/help.faq.installer?LastError=1638
Task: {D9A08837-7F64-462E-A17E-964B455250E7} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle => C:\Windows\system32\GWX\GWX.exe [2015-05-06] (Microsoft Corporation)
Task: {E1CA89D4-FAC4-40D2-912E-9189FB600979} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {F1A2EFE6-776D-477E-A81B-5D730650B738} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Loaded Modules (Whitelisted) ==============
2015-03-20 18:12 - 2015-03-20 18:12 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-03-20 18:12 - 2015-03-20 18:12 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2014-07-16 10:24 - 2014-07-16 10:24 - 00699704 _____ () C:\Program Files (x86)\TuneUp Utilities 2014\avgrepliba.dll
2015-05-16 10:09 - 2015-05-16 10:09 - 00104400 _____ () D:\Sicherheit\Avast Free\log.dll
2015-05-16 10:09 - 2015-05-16 10:09 - 00081728 _____ () D:\Sicherheit\Avast Free\JsonRpcServer.dll
2015-06-13 19:34 - 2015-06-13 19:34 - 02954752 _____ () D:\Sicherheit\Avast Free\defs\15061300\algo.dll
2015-06-13 21:40 - 2015-06-13 21:40 - 02954752 _____ () D:\Sicherheit\Avast Free\defs\15061301\algo.dll
2015-03-21 16:18 - 2015-03-21 16:18 - 40540672 _____ () D:\Sicherheit\Avast Free\libcef.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\Users\BGFighter\Documents\Weihnachten 2014.jwl:Roxio EMC Stream
==================== Safe Mode (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
IE trusted site: HKU\S-1-5-21-3234060430-3409083472-189945155-1001\...\amazon.de -> hxxps://amazon.de
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-3234060430-3409083472-189945155-1001\Control Panel\Desktop\\Wallpaper -> E:\Bilder\Familie\Allerlei\Foto-0001.jpg
DNS Servers: 192.168.0.1
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
HKLM\...\StartupApproved\StartupFolder: => "Hardcopy.LNK"
HKLM\...\StartupApproved\Run: => "VX3000"
HKLM\...\StartupApproved\Run: => "Start WingMan Profiler"
HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKLM\...\StartupApproved\Run32: => "LifeCam"
HKLM\...\StartupApproved\Run32: => "APSDaemon"
HKLM\...\StartupApproved\Run32: => "KiesTrayAgent"
HKLM\...\StartupApproved\Run32: => "PDFPrint"
HKLM\...\StartupApproved\Run32: => "GrooveMonitor"
HKLM\...\StartupApproved\Run32: => "ISUSScheduler"
HKLM\...\StartupApproved\Run32: => "iTunesHelper"
HKLM\...\StartupApproved\Run32: => "Adobe ARM"
HKLM\...\StartupApproved\Run32: => "NBAgent"
HKLM\...\StartupApproved\Run32: => "Wondershare Helper Compact.exe"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKLM\...\StartupApproved\Run32: => "RoxWatchTray"
HKLM\...\StartupApproved\Run32: => "gmsd_de_466"
HKLM\...\StartupApproved\Run32: => "SmartWeb"
HKU\S-1-5-21-3234060430-3409083472-189945155-1001\...\StartupApproved\StartupFolder: => "hqghumeaylnlf.lnk"
HKU\S-1-5-21-3234060430-3409083472-189945155-1001\...\StartupApproved\Run: => "Reminder"
HKU\S-1-5-21-3234060430-3409083472-189945155-1001\...\StartupApproved\Run: => "KiesPreload"
HKU\S-1-5-21-3234060430-3409083472-189945155-1001\...\StartupApproved\Run: => "LightScribe Control Panel"
HKU\S-1-5-21-3234060430-3409083472-189945155-1001\...\StartupApproved\Run: => "ISUSPM Startup"
HKU\S-1-5-21-3234060430-3409083472-189945155-1001\...\StartupApproved\Run: => "KiesAirMessage"
HKU\S-1-5-21-3234060430-3409083472-189945155-1001\...\StartupApproved\Run: => ""
HKU\S-1-5-21-3234060430-3409083472-189945155-1001\...\StartupApproved\Run: => "GoogleChromeAutoLaunch_9CC641DC665709260E3F7583865059FD"
HKU\S-1-5-21-3234060430-3409083472-189945155-1001\...\StartupApproved\Run: => "Optimizer Pro"
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{588F7094-94EE-42E4-A543-E48E840505E2}] => (Allow) D:\Arbeitsprogramme\Star Money 9.0\ouservice\StarMoneyOnlineUpdate.exe
FirewallRules: [{D5192F58-13CE-4E2F-BE95-6FBB3502AC10}] => (Allow) D:\Arbeitsprogramme\Star Money 9.0\ouservice\StarMoneyOnlineUpdate.exe
FirewallRules: [{8F285973-11E6-49E2-AAB0-8296FBCCDFAB}] => (Allow) D:\Arbeitsprogramme\Star Money 9.0\app\StarMoney.exe
FirewallRules: [{05666685-E791-4AB3-B686-884986D77E04}] => (Allow) D:\Arbeitsprogramme\Star Money 9.0\app\StarMoney.exe
FirewallRules: [TCP Query User{C2D2BD35-AE3E-4556-9542-90B2D04F1B52}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{555C06F7-8289-497C-A2B8-C58EA405B928}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{05ED239C-2526-44DD-9EAE-F319A23554DA}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeCam.exe
FirewallRules: [{80AB478E-A02B-44D7-AE54-1F2C03397048}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeCam.exe
FirewallRules: [{92300C2A-E0AE-46B2-93BE-8F9BCB98CF13}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeEnC2.exe
FirewallRules: [{DC4D4E92-7F6A-4D66-B30A-2E55DD713CB2}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeEnC2.exe
FirewallRules: [{38114681-8DC9-4ECC-BBC2-CD669523D44D}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe
FirewallRules: [{4F74F1D3-5FF1-4D70-92F9-334C62425423}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe
FirewallRules: [{4C5BD820-BE40-4C28-9A11-4FB81252995E}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeTray.exe
FirewallRules: [{6A08DCB3-09EF-4013-8F3E-662F44C0CB43}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeTray.exe
FirewallRules: [{2EE89AD5-3DFA-4513-8978-68BA642C7C25}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{EC19B6CD-783C-4123-B160-B9D895EBCF1C}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{E545CD96-7EFF-4B26-A999-BBBAFE7A5958}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{D9727B69-0D38-4A50-A824-0B1DC4679C36}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{C409FDC4-6F01-471E-9696-5EDC6D8BDC83}] => (Allow) D:\Arbeitsprogramme\Office Enterprise 2007\Office12\outlook.exe
FirewallRules: [{1993CD4C-184C-460E-9A9C-0DE13AFA8843}] => (Allow) D:\Arbeitsprogramme\Office Enterprise 2007\Office12\GROOVE.EXE
FirewallRules: [{FC3F69DF-E575-4B23-A384-68A70FD94BE5}] => (Allow) D:\Arbeitsprogramme\Office Enterprise 2007\Office12\GROOVE.EXE
FirewallRules: [{65DDE8A2-B518-4032-A842-8D894FDD659A}] => (Allow) D:\Arbeitsprogramme\Office Enterprise 2007\Office12\ONENOTE.EXE
FirewallRules: [{355FFC6A-67BB-44FA-9B1F-F4FE19A04C51}] => (Allow) D:\Arbeitsprogramme\Office Enterprise 2007\Office12\ONENOTE.EXE
FirewallRules: [{B9F160FF-65A0-4ECE-B91B-6CE1F29DBAA5}] => (Allow) D:\Spiele\Steam\Steam.exe
FirewallRules: [{EB57877D-23D1-4198-917A-5DE7B3CF9948}] => (Allow) D:\Spiele\Steam\Steam.exe
FirewallRules: [{F25E1D91-43BD-417F-9F70-957BFAF03BB0}] => (Allow) D:\Spiele\Steam\SteamApps\common\Half-Life 2 Deathmatch\hl2.exe
FirewallRules: [{9C726E35-FBB0-4C4B-971F-CA4AC4F9B7A0}] => (Allow) D:\Spiele\Steam\SteamApps\common\Half-Life 2 Deathmatch\hl2.exe
FirewallRules: [{AA2AEC33-F660-43AE-8D63-95250F87B0D7}] => (Allow) D:\Spiele\Steam\SteamApps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{A2DDFF42-C574-4F78-966B-395B648FBAFF}] => (Allow) D:\Spiele\Steam\SteamApps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{676266D2-FC5B-4F29-BB53-CB6EF40D9B1C}] => (Allow) D:\Spiele\Steam\SteamApps\common\Day of Defeat Source\hl2.exe
FirewallRules: [{9A10F497-469F-483C-AC03-F75BE1B57449}] => (Allow) D:\Spiele\Steam\SteamApps\common\Day of Defeat Source\hl2.exe
FirewallRules: [{A3240AD9-462F-47EA-9568-EB24F228324D}] => (Allow) D:\Spiele\Steam\SteamApps\common\Half-Life 2\hl2.exe
FirewallRules: [{C8A557D8-4451-43E0-9ED8-7141B15DDE02}] => (Allow) D:\Spiele\Steam\SteamApps\common\Half-Life 2\hl2.exe
FirewallRules: [{97644AB7-9C0A-48A2-A0B9-D8E3C22A725E}] => (Allow) D:\Spiele\Steam\SteamApps\common\Sniper Ghost Warrior\Sniper_x86.exe
FirewallRules: [{80D9168D-5C63-4E63-8C0C-CFFC6D01429D}] => (Allow) D:\Spiele\Steam\SteamApps\common\Sniper Ghost Warrior\Sniper_x86.exe
FirewallRules: [{81F2A4C5-DF26-4645-A648-F358A2B1B612}] => (Allow) D:\Spiele\Battlefield 2\BF2.exe
FirewallRules: [{1AA3FD51-92F8-4B6C-B838-FC5CC7B49D60}] => (Allow) D:\Spiele\Battlefield 2\BF2.exe
FirewallRules: [{DB79AFB5-302E-43B3-A3EC-2BD7B370A363}] => (Allow) D:\Spiele\Battlefield 3\bf3.exe
FirewallRules: [{CF52CF0C-2EE8-41EB-B292-267B037426C2}] => (Allow) D:\Spiele\Battlefield 3\bf3.exe
FirewallRules: [TCP Query User{3601979E-275D-4981-9D67-4ECFFDA418FE}D:\spiele\battlefield bad company 2\bfbc2game.exe] => (Allow) D:\spiele\battlefield bad company 2\bfbc2game.exe
FirewallRules: [UDP Query User{EF7BAF43-1DE6-4EBE-8CE6-4CD02A22CD54}D:\spiele\battlefield bad company 2\bfbc2game.exe] => (Allow) D:\spiele\battlefield bad company 2\bfbc2game.exe
FirewallRules: [{1AE3846C-61D3-42DB-8C6D-80BE95B9E9CF}] => (Allow) D:\Spiele\Battlefield 2142 Deluxe Edition\BF2142.exe
FirewallRules: [{816324D1-5E4B-4822-8D12-CEEB64F00BBD}] => (Allow) D:\Spiele\Battlefield 2142 Deluxe Edition\BF2142.exe
FirewallRules: [{3FB1C75B-3192-4D68-9160-08F665D51539}] => (Allow) D:\Spiele\Battlefield Bad Company 2\BFBC2Updater.exe
FirewallRules: [{06A4355A-B928-4657-81C2-C160AEA48872}] => (Allow) D:\Spiele\Battlefield Bad Company 2\BFBC2Updater.exe
FirewallRules: [{E5FA9093-B82D-41F3-9B6F-693BAEBA4214}] => (Allow) D:\Spiele\Call of Duty 4 - Modern Warfare\iw3mp.exe
FirewallRules: [{0D1B0919-DC2C-4B8C-AD4E-0AACB6DFFC65}] => (Allow) D:\Spiele\Call of Duty 4 - Modern Warfare\iw3mp.exe
FirewallRules: [{B6C7F9AC-D7D6-45E0-BE5F-4A94705F5F27}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{1EFE48D5-267D-4995-8A2B-D4BC66FA3725}] => (Allow) LPort=2869
FirewallRules: [{98007679-4E57-41F6-B5B1-0EC2605F79DD}] => (Allow) LPort=1900
FirewallRules: [{7DC9433F-960A-4DDB-9D91-CFBA3AF8A58A}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{F077B6B3-0551-4CFF-B7FE-7DF80CFE44AD}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [TCP Query User{6D203F74-06A8-46E9-BEB7-B16B530BF3A0}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{C9F10DBB-DAB1-41AD-822E-83BF1586AB37}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{93E8A675-6F0B-4700-9B22-64CC5B8544C8}] => (Allow) D:\Multimedia Programme\DVDVideoSoft\Free Torrent Download\FreeTorrentDownload.exe
FirewallRules: [{EBD1EA59-0A99-4108-B8F6-7B3155085945}] => (Allow) D:\Multimedia Programme\DVDVideoSoft\Free Torrent Download\FreeTorrentDownload.exe
FirewallRules: [{EC86B45D-24CC-4934-91D1-C3DA2FFC006A}] => (Allow) D:\Systemprogramme\SiSoftware Sandra Lite 2015x\RpcAgentSrv.exe
FirewallRules: [{7533B160-B7E6-4011-A5A4-42DDF49E54C9}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{8F525340-9533-4B9A-9F40-2DCBEEF31BB5}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{99F6345F-38A6-467D-9BD6-D58C0E869EBB}] => (Allow) D:\Spiele\Steam\bin\steamwebhelper.exe
FirewallRules: [{475D9339-5C0F-43AA-95EB-07380EA9EF2A}] => (Allow) D:\Spiele\Steam\bin\steamwebhelper.exe
FirewallRules: [{8BA26BC7-2CB8-4E20-B278-E43FB0E3DDE1}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{796589B1-0164-4E4B-B2D9-D171B57AF8DD}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{8D8CD8E2-83C6-4DAB-AF00-0803D4B35117}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{A1D12242-2DAA-4B89-802D-4114CAA0C754}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{C5EE6656-9791-48DD-B1B5-94B0C876E6EC}] => (Allow) D:\Systemprogramme\SiSoftware Sandra Lite 2015x\WNt600x64\RpcSandraSrv.exe
FirewallRules: [{00BBADC9-795D-458D-86FA-C5BB821B5CD6}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{2FA63CFC-5D16-423A-848A-31F6D2DDA614}] => (Allow) D:\Sicherheit\Avast Free\ng\vbox\aswFe.exe
FirewallRules: [{D744B5A5-430B-4147-894E-697266CC4A83}] => (Allow) D:\Sicherheit\Avast Free\ng\vbox\aswFe.exe
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (06/13/2015 09:40:13 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.
Error: (06/13/2015 07:47:02 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.
Error: (06/13/2015 07:07:06 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm Explorer.EXE, Version 6.3.9600.17667 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 7e8
Startzeit: 01d0a5fb22d9e2ce
Endzeit: 0
Anwendungspfad: C:\Windows\Explorer.EXE
Berichts-ID: 9d940b9c-11ee-11e5-82fe-94de80b1e153
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (06/13/2015 07:05:46 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: ProductUpdater.exe, Version: 1.0.0.0, Zeitstempel: 0x55769e01
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.3.9600.17415, Zeitstempel: 0x54504ade
Ausnahmecode: 0xe0434352
Fehleroffset: 0x00014598
ID des fehlerhaften Prozesses: 0x558
Startzeit der fehlerhaften Anwendung: 0xProductUpdater.exe0
Pfad der fehlerhaften Anwendung: ProductUpdater.exe1
Pfad des fehlerhaften Moduls: ProductUpdater.exe2
Berichtskennung: ProductUpdater.exe3
Vollständiger Name des fehlerhaften Pakets: ProductUpdater.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ProductUpdater.exe5
Error: (06/13/2015 07:05:46 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: ProductUpdater.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.
Ausnahmeinformationen: System.ComponentModel.Win32Exception
Stapel:
bei System.Diagnostics.Process.StartWithShellExecuteEx(System.Diagnostics.ProcessStartInfo)
bei System.Diagnostics.Process.Start()
bei System.Diagnostics.Process.Start(System.Diagnostics.ProcessStartInfo)
bei ProductUpdater.Services.UpdateDownloader.DownloadFileCompleted(System.Object, System.ComponentModel.AsyncCompletedEventArgs)
bei System.Net.WebClient.OnDownloadFileCompleted(System.ComponentModel.AsyncCompletedEventArgs)
bei System.Net.WebClient.DownloadFileOperationCompleted(System.Object)
bei System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
bei MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
bei System.Windows.Threading.DispatcherOperation.InvokeImpl()
bei System.Windows.Threading.DispatcherOperation.InvokeInSecurityContext(System.Object)
bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
bei System.Windows.Threading.DispatcherOperation.Invoke()
bei System.Windows.Threading.Dispatcher.ProcessQueue()
bei System.Windows.Threading.Dispatcher.WndProcHook(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
bei MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
bei MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
bei System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
bei MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
bei System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
bei MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
bei MS.Win32.UnsafeNativeMethods.DispatchMessage(System.Windows.Interop.MSG ByRef)
bei System.Windows.Threading.Dispatcher.PushFrameImpl(System.Windows.Threading.DispatcherFrame)
bei System.Windows.Threading.Dispatcher.PushFrame(System.Windows.Threading.DispatcherFrame)
bei System.Windows.Threading.Dispatcher.Run()
bei System.Windows.Application.RunDispatcher(System.Object)
bei System.Windows.Application.RunInternal(System.Windows.Window)
bei System.Windows.Application.Run(System.Windows.Window)
bei ProductUpdater.App.Main()
Error: (06/12/2015 07:40:38 AM) (Source: SideBySide) (EventID: 59) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.
Error: (06/12/2015 07:39:04 AM) (Source: SideBySide) (EventID: 59) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.
Error: (06/12/2015 07:19:41 AM) (Source: SideBySide) (EventID: 59) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.
Error: (06/11/2015 09:25:56 PM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: Das Volume "Wiederherstellung" wurde aufgrund eines Fehlers nicht optimiert: Falscher Parameter. (0x80070057)
Error: (06/11/2015 09:21:12 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.
System errors:
=============
Error: (06/13/2015 09:51:52 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "cyberJack PC/SC COM Service " wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (06/13/2015 09:44:36 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Dynamic Application Loader Host Interface Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (06/13/2015 09:44:36 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Rapid Storage Technology" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (06/13/2015 09:44:34 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "StarMoney 9.0 OnlineUpdate" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (06/13/2015 09:44:34 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "SAMSUNG Mobile Connectivity Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (06/13/2015 09:44:34 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "PnkBstrA" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (06/13/2015 09:44:34 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "LightScribeService Direct Disc Labeling Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (06/13/2015 09:44:34 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Intel(R) Capability Licensing Service Interface" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.
Error: (06/13/2015 09:44:34 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Adobe Acrobat Update Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (06/13/2015 09:44:34 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Druckwarteschlange" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 5000 Millisekunden durchgeführt: Neustart des Diensts.
Microsoft Office:
=========================
Error: (06/18/2014 08:50:42 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6700.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 90 seconds with 60 seconds of active time. This session ended with a crash.
Error: (06/18/2014 08:47:59 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6700.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 1507 seconds with 1500 seconds of active time. This session ended with a crash.
CodeIntegrity Errors:
===================================
Date: 2015-06-13 21:39:57.124
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\drivers\RxFilter.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-06-13 19:46:44.077
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\drivers\RxFilter.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-06-13 19:34:01.140
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\drivers\RxFilter.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-06-12 07:24:24.077
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\drivers\RxFilter.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-05-31 16:35:41.453
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\drivers\RxFilter.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-05-28 20:39:55.359
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\drivers\RxFilter.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-05-27 21:13:49.265
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\drivers\RxFilter.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-05-25 14:18:18.484
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\drivers\RxFilter.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-05-25 14:12:14.265
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\drivers\RxFilter.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-05-25 14:08:53.296
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\drivers\RxFilter.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Memory info ===========================
Processor: Intel(R) Xeon(R) CPU E3-1230 v3 @ 3.30GHz
Percentage of memory in use: 19%
Total physical RAM: 8136.97 MB
Available physical RAM: 6520.9 MB
Total Pagefile: 9416.97 MB
Available Pagefile: 7733.11 MB
Total Virtual: 131072 MB
Available Virtual: 131071.82 MB
==================== Drives ================================
Drive c: (System) (Fixed) (Total:118.73 GB) (Free:70.83 GB) NTFS
Drive d: (Programme) (Fixed) (Total:292.97 GB) (Free:211.17 GB) NTFS
Drive e: (Multimedia) (Fixed) (Total:1569.92 GB) (Free:985.52 GB) NTFS
Drive f: (Archiv) (Fixed) (Total:596.17 GB) (Free:374.91 GB) NTFS
Drive g: (Sicherung) (Fixed) (Total:596.17 GB) (Free:149.91 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 119.2 GB) (Disk ID: 217A3CA4)
Partition: GPT Partition Type.
========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 596.2 GB) (Disk ID: F5F2C9A2)
Partition 1: (Not Active) - (Size=596.2 GB) - (Type=07 NTFS)
========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 0359B6B3)
Partition: GPT Partition Type.
========================================================
Disk: 3 (MBR Code: Windows XP) (Size: 596.2 GB) (Disk ID: F5F1F6F1)
Partition 1: (Not Active) - (Size=596.2 GB) - (Type=07 NTFS)
==================== End of log ============================
--- --- ---
Fertig |
Malwarebytes Anti-Malware 
AdwCleaner auf deinen Desktop.
FRST 32-Bit | FRST 64-Bit
SecurityCheck und:
