| |
| |||||||
Log-Analyse und Auswertung: Plötzlich nur noch weißer Bildschirm auf laptop - Frst.text erstelltWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
16.07.2013, 14:26
| #1 |
| |  Plötzlich nur noch weißer Bildschirm auf laptop - Frst.text erstellt Hallo, ich habe auch das Problem mit einem weißen Bildschirm auf meinem Laptop. Maus lässt sich zwar noch bewegen, allerdings komme ich nicht mehr zum Desktop. Habe nach Eurer Anleitung einen Scan gemacht. Hier die Ergebnisse. Könnt Ihr mir mit der Auswertung weiterhelfen? Danke vorab... Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-07-2013 02 Ran by SYSTEM on 16-07-2013 14:30:04 Running from H:\ Windows 7 Home Premium (X64) OS Language: German Standard Internet Explorer Version 8 Boot Mode: Recovery The current controlset is ControlSet001 ATTENTION!:=====> FRST is updated to run from normal or Safe mode to produce a full FRST.txt log and an extra Addition.txt log. ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /FORPCEE3 [2040352 2010-05-31] (Realtek Semiconductor) HKLM\...\Run: [Apoint] - %ProgramFiles%\Apoint\Apoint.exe [212480 2010-05-31] (Alps Electric Co., Ltd.) HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-03-04] (Intel Corporation) HKLM-x32\...\Run: [Norton Online Backup] - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-01] (Symantec Corporation) HKLM-x32\...\Run: [PMBVolumeWatcher] - C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [600928 2010-06-01] (Sony Corporation) HKLM-x32\...\Run: [] - [x] HKLM-x32\...\Run: [bazoo SHIVA BS Gaming Mouse] - "C:\Program Files (x86)\Vivanco\bazoo SHIVA BS Gaming Mouse\Panel.exe" [1103656 2010-10-07] () HKLM-x32\...\Run: [APSDaemon] - "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59720 2013-04-21] (Apple Inc.) HKU\Carsten Appel\...\Run: [swg] - "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [39408 2010-11-25] (Google Inc.) HKU\Carsten Appel\...\Run: [Spotify Web Helper] - "C:\Users\Carsten Appel\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [1104384 2013-07-14] (Spotify Ltd) HKU\Carsten Appel\...\Run: [qcgce2mrvjq91kk1e7pnbb19m52fx] - C:\Users\CARSTE~1\AppData\Local\Temp\rvyxwwivxnwmgyayy.exe [53248 2013-07-16] (NVIDIA Corporation) <===== ATTENTION HKU\Carsten Appel\...\Winlogon: [Shell] cmd.exe [344576 2009-07-14] (Microsoft Corporation) <==== ATTENTION HKU\Carsten Appel\...\Command Processor: "C:\Users\CARSTE~1\AppData\Local\Temp\rvyxwwivxnwmgyayy.exe" <===== ATTENTION! Startup: C:\ProgramData\Start Menu\Programs\Startup\Bluetooth.lnk ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.) ==================== Services (Whitelisted) ================= S2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.) S2 MAGIX StartUp Analyze Service; C:\Program Files (x86)\MAGIX\PC_Check_Tuning_2012\MXSAS.exe [181248 2011-09-09] (MAGIX AG) S2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\ccSvcHst.exe [138272 2012-06-16] (Symantec Corporation) S2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-01] (Symantec Corporation) S2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [259192 2011-01-29] (Sony Corporation) S2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2401632 2012-11-29] (TuneUp Software) S2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [104960 2008-09-18] (ArcSoft, Inc.) S3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1286784 2012-10-26] (Sony Corporation) S2 WajamUpdater; C:\Program Files (x86)\Wajam\Updater\WajamUpdater.exe [109064 2013-03-28] (Wajam) ==================== Drivers (Whitelisted) ==================== S3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.) S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [303616 2011-08-20] () S1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\BASHDefs\20130702.001\BHDrvx64.sys [1393240 2013-05-31] (Symantec Corporation) S1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\BASHDefs\20130702.001\BHDrvx64.sys [1393240 2013-05-31] (Symantec Corporation) S1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1309010.00E\ccSetx64.sys [167072 2012-06-07] (Symantec Corporation) S0 DiskSec; C:\Windows\System32\Drivers\DiskSec.sys [27616 2009-09-23] (MAGIX) S1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484512 2013-01-19] (Symantec Corporation) S1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484512 2013-01-19] (Symantec Corporation) S3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [138912 2012-10-22] (Symantec Corporation) S3 GMFilter Filter; C:\Windows\System32\Drivers\GMFilter.sys [52080 2009-06-04] (Game) S3 GMFilter Filter; C:\Windows\SysWow64\Drivers\GMFilter.sys [27648 2009-06-04] (Game) S1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\IPSDefs\20130713.001\IDSvia64.sys [513184 2012-09-06] (Symantec Corporation) S1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\IPSDefs\20130713.001\IDSvia64.sys [513184 2012-09-06] (Symantec Corporation) S2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [35328 2011-08-20] () S3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\VirusDefs\20130715.033\ENG64.SYS [126040 2013-05-22] (Symantec Corporation) S3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\VirusDefs\20130715.033\ENG64.SYS [126040 2013-05-22] (Symantec Corporation) S3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\VirusDefs\20130715.033\EX64.SYS [2098776 2013-05-22] (Symantec Corporation) S3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\VirusDefs\20130715.033\EX64.SYS [2098776 2013-05-22] (Symantec Corporation) S3 RRNetCap; C:\Windows\System32\DRIVERS\rrnetcap.sys [37480 2013-03-11] (RapidSolution Software AG) S3 RRNetCapMP; C:\Windows\System32\DRIVERS\rrnetcap.sys [37480 2013-03-11] (RapidSolution Software AG) S1 SRTSP; C:\Windows\System32\Drivers\NISx64\1309010.00E\SRTSP64.SYS [737952 2012-07-06] (Symantec Corporation) S1 SRTSPX; C:\Windows\system32\drivers\NISx64\1309010.00E\SRTSPX64.SYS [37536 2012-07-06] (Symantec Corporation) S0 SymDS; C:\Windows\System32\drivers\NISx64\1309010.00E\SYMDS64.SYS [451192 2011-07-25] (Symantec Corporation) S0 SymEFA; C:\Windows\System32\drivers\NISx64\1309010.00E\SYMEFA64.SYS [1129120 2012-05-22] (Symantec Corporation) S3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [175736 2012-06-02] (Symantec Corporation) S1 SymIRON; C:\Windows\system32\drivers\NISx64\1309010.00E\Ironx64.SYS [190072 2012-04-18] (Symantec Corporation) S1 SymNetS; C:\Windows\System32\Drivers\NISx64\1309010.00E\SYMNETS.SYS [405624 2012-04-18] (Symantec Corporation) S3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [11880 2012-07-19] (TuneUp Software) S3 cpuz135; \??\C:\Users\CARSTE~1\AppData\Local\Temp\cpuz135\cpuz135_x64.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-07-16 14:29 - 2013-07-16 14:29 - 00000000 ____D C:\FRST 2013-07-16 12:02 - 2013-07-16 12:02 - 01084709 _____ C:\Users\Carsten Appel\AppData\Roaming\2433f433 2013-07-16 12:02 - 2013-07-16 12:02 - 01084682 _____ C:\Users\Carsten Appel\AppData\Local\2433f433 2013-07-16 12:02 - 2013-07-16 12:02 - 01084668 _____ C:\ProgramData\2433f433 2013-06-19 16:25 - 2013-06-19 16:25 - 00045568 _____ C:\Users\Carsten Appel\Desktop\Vereine Cycling.pub 2013-06-19 15:37 - 2013-06-19 15:37 - 00030208 _____ C:\Users\Carsten Appel\Desktop\Vereine.pub 2013-06-19 12:07 - 2013-06-19 12:07 - 00001783 _____ C:\Users\Public\Desktop\iTunes.lnk 2013-06-19 12:06 - 2013-06-19 12:06 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2013-06-19 12:06 - 2013-06-19 12:06 - 00000000 ____D C:\Program Files\iTunes 2013-06-19 12:06 - 2013-06-19 12:06 - 00000000 ____D C:\Program Files\iPod 2013-06-19 12:06 - 2013-06-19 12:06 - 00000000 ____D C:\Program Files (x86)\iTunes 2013-06-19 11:47 - 2013-06-19 11:48 - 00000000 ____D C:\Program Files (x86)\QuickTime 2013-06-19 11:47 - 2013-06-19 11:47 - 00001845 _____ C:\Users\Public\Desktop\QuickTime Player.lnk ==================== One Month Modified Files and Folders ======= 2013-07-16 14:29 - 2013-07-16 14:29 - 00000000 ____D C:\FRST 2013-07-16 13:19 - 2011-03-01 22:59 - 01523300 _____ C:\Windows\WindowsUpdate.log 2013-07-16 13:19 - 2010-11-25 17:10 - 00654188 _____ C:\Windows\System32\perfh007.dat 2013-07-16 13:19 - 2010-11-25 17:10 - 00130028 _____ C:\Windows\System32\perfc007.dat 2013-07-16 13:19 - 2009-07-14 06:13 - 01498506 _____ C:\Windows\System32\PerfStringBackup.INI 2013-07-16 13:17 - 2012-11-14 08:08 - 00118464 _____ C:\Windows\SysWOW64\GDIPFONTCACHEV1.DAT 2013-07-16 13:16 - 2013-06-04 09:34 - 00001920 _____ C:\Windows\Tasks\Plus-HD-2.6-chromeinstaller.job 2013-07-16 13:16 - 2013-06-04 09:34 - 00001214 _____ C:\Windows\Tasks\Plus-HD-2.6-codedownloader.job 2013-07-16 13:16 - 2013-06-04 09:34 - 00001210 _____ C:\Windows\Tasks\Plus-HD-2.6-updater.job 2013-07-16 13:16 - 2013-06-04 09:34 - 00001114 _____ C:\Windows\Tasks\Plus-HD-2.6-enabler.job 2013-07-16 13:16 - 2011-10-16 09:19 - 00000294 _____ C:\Windows\Tasks\MxTray.job 2013-07-16 13:16 - 2011-05-29 08:42 - 00107652 _____ C:\Windows\setupact.log 2013-07-16 13:16 - 2010-11-25 08:36 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-07-16 13:16 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-07-16 13:07 - 2009-07-14 05:45 - 00013664 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-07-16 13:07 - 2009-07-14 05:45 - 00013664 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-07-16 13:00 - 2010-11-25 08:36 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-07-16 12:22 - 2012-06-08 00:53 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-07-16 12:02 - 2013-07-16 12:02 - 01084709 _____ C:\Users\Carsten Appel\AppData\Roaming\2433f433 2013-07-16 12:02 - 2013-07-16 12:02 - 01084682 _____ C:\Users\Carsten Appel\AppData\Local\2433f433 2013-07-16 12:02 - 2013-07-16 12:02 - 01084668 _____ C:\ProgramData\2433f433 2013-07-16 08:03 - 2011-03-01 23:03 - 00003978 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{C36CCD86-CE80-4756-998F-44F4CD6B2052} 2013-07-15 22:55 - 2010-11-25 08:36 - 00004120 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2013-07-15 22:55 - 2010-11-25 08:36 - 00003868 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2013-07-15 22:48 - 2011-05-29 08:41 - 00397166 _____ C:\Windows\PFRO.log 2013-07-15 12:11 - 2011-06-03 19:32 - 00000000 ____D C:\Users\Carsten Appel\AppData\Local\CrashDumps 2013-07-14 21:05 - 2013-03-17 20:35 - 00000000 ____D C:\Users\Carsten Appel\AppData\Roaming\Spotify 2013-07-13 09:14 - 2013-03-17 20:38 - 00000000 ____D C:\Users\Carsten Appel\AppData\Local\Spotify 2013-07-10 11:23 - 2011-05-28 23:57 - 78185248 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe 2013-07-09 23:56 - 2011-10-16 09:24 - 00000476 _____ C:\Windows\Tasks\Java(TM) Platform SE Auto Updater 2 0 MAGIX PCCT.job 2013-07-09 23:00 - 2011-10-16 09:24 - 00000466 _____ C:\Windows\Tasks\Adobe Reader and Acrobat Manager MAGIX PCCT.job 2013-07-08 10:46 - 2013-04-25 22:18 - 00000000 _____ C:\END 2013-07-03 09:20 - 2011-05-26 16:39 - 00000000 ____D C:\ProgramData\Norton 2013-07-03 09:15 - 2012-03-19 08:07 - 00000000 ____D C:\Users\Public\Downloads\Norton 2013-06-25 12:15 - 2011-03-01 23:08 - 00000000 ___HD C:\Users\Carsten Appel\AppData\Local\Google 2013-06-23 23:33 - 2013-05-21 08:08 - 00256249 _____ C:\test.xml 2013-06-19 16:25 - 2013-06-19 16:25 - 00045568 _____ C:\Users\Carsten Appel\Desktop\Vereine Cycling.pub 2013-06-19 15:37 - 2013-06-19 15:37 - 00030208 _____ C:\Users\Carsten Appel\Desktop\Vereine.pub 2013-06-19 12:07 - 2013-06-19 12:07 - 00001783 _____ C:\Users\Public\Desktop\iTunes.lnk 2013-06-19 12:06 - 2013-06-19 12:06 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2013-06-19 12:06 - 2013-06-19 12:06 - 00000000 ____D C:\Program Files\iTunes 2013-06-19 12:06 - 2013-06-19 12:06 - 00000000 ____D C:\Program Files\iPod 2013-06-19 12:06 - 2013-06-19 12:06 - 00000000 ____D C:\Program Files (x86)\iTunes 2013-06-19 11:48 - 2013-06-19 11:47 - 00000000 ____D C:\Program Files (x86)\QuickTime 2013-06-19 11:47 - 2013-06-19 11:47 - 00001845 _____ C:\Users\Public\Desktop\QuickTime Player.lnk Files to move or delete: ==================== C:\ProgramData\27gb.bat C:\ProgramData\27gb.pad C:\ProgramData\27gb.reg ==================== Known DLLs (Whitelisted) ================ ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit ==================== EXE ASSOCIATION ===================== HKLM\...\.exe: exefile => OK HKLM\...\exefile\DefaultIcon: %1 => OK HKLM\...\exefile\open\command: "%1" %* => OK ==================== Restore Points ========================= Restore point made on: 2013-06-30 18:00:38 Restore point made on: 2013-07-07 22:46:14 Restore point made on: 2013-07-10 11:23:24 Restore point made on: 2013-07-14 18:00:40 ==================== Memory info =========================== Percentage of memory in use: 15% Total physical RAM: 3950.1 MB Available physical RAM: 3323.7 MB Total Pagefile: 3948.25 MB Available Pagefile: 3318.23 MB Total Virtual: 8192 MB Available Virtual: 8191.85 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:452.29 GB) (Free:307.21 GB) NTFS (Disk=0 Partition=3) Drive d: () (Fixed) (Total:465.76 GB) (Free:148.24 GB) NTFS (Disk=1 Partition=1) Drive f: (Recovery) (Fixed) (Total:13.37 GB) (Free:0.76 GB) NTFS (Disk=0 Partition=1) ==>[System with boot components (obtained from reading drive)] Drive g: (20110310_113231) (CDROM) (Total:7.24 GB) (Free:0 GB) CDFS Drive h: (USB DISK) (Removable) (Total:1.86 GB) (Free:1.85 GB) FAT (Disk=2 Partition=1) Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS Drive y: (System Reserved) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS (Disk=0 Partition=2) ==>[System with boot components (obtained from reading drive)] ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 6DFD231A) Partition 1: (Not Active) - (Size=13 GB) - (Type=27) Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=452 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 7340D1FD) Partition 1: (Not Active) - (Size=466 GB) - (Type=OF Extended) ======================================================== Disk: 2 (Size: 2 GB) (Disk ID: 23C70E4B) Partition 1: (Not Active) - (Size=2 GB) - (Type=0E) LastRegBack: 2013-07-14 20:06 ==================== End Of Log ============================ |
| Themen zu Plötzlich nur noch weißer Bildschirm auf laptop - Frst.text erstellt |
| .dll, adobe, adobe flash player, association, bildschirm, explorer, farbar, farbar recovery scan tool, flash player, frst.txt, google, helper, home, log, maus, nvidia, problem, realtek, registry, scan, security, services.exe, software, spotify web helper, svchost.exe, symantec, system, temp, usb, winlogon.exe |
Baum-Darstellung