![]() |
|
Log-Analyse und Auswertung: Sperrbildschirm BKA usw.Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #1 |
| ![]() Sperrbildschirm BKA usw. hier die Logs mit FRST FRST.txt Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 10-11-2013 01 Ran by SYSTEM on MININT-HMQBMVR on 12-11-2013 15:08:50 Running from E:\ Windows Vista (TM) Business (X86) OS Language: German Standard Internet Explorer Version 9 Boot Mode: Recovery The current controlset is ControlSet001 ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log. ==================== Registry (Whitelisted) ================== HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-19] (Microsoft Corporation) HKLM\...\Run: [ITSecMng] - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\ItSecMng.exe [75136 2007-09-28] ( TOSHIBA CORPORATION) HKLM\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe [39792 2008-10-15] (Adobe Systems Incorporated) HKLM\...\Run: [] - [x] HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-07] (Avira Operations GmbH & Co. KG) HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation) HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter HKU\Default User\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter HKU\John\...\Run: [OpdotwhWLtLW.exe] - C:\ProgramData\OpdotwhWLtLW.exe Startup: C:\Users\John\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.0.lnk ShortcutTarget: OpenOffice.org 3.0.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe () ========================== Services (Whitelisted) ================= S2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-09-07] (Avira Operations GmbH & Co. KG) S2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-07] (Avira Operations GmbH & Co. KG) S2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [815160 2013-09-07] (Avira Operations GmbH & Co. KG) S2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) S2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) S2 NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [71096 2008-10-20] () S2 Winmgmt; C:\Windows\system32\svchost.exe [21504 2008-01-19] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== S3 ac97intc; C:\Windows\System32\drivers\ac97intc.sys [108032 2006-11-02] (Intel Corporation) S2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88840 2013-09-07] (Avira Operations GmbH & Co. KG) S1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136672 2013-09-07] (Avira Operations GmbH & Co. KG) S1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-07-29] (Avira Operations GmbH & Co. KG) S0 hotcore3; C:\Windows\System32\drivers\hotcore3.sys [39472 2007-12-17] (Paragon Software Group) S3 ialm; C:\Windows\System32\DRIVERS\ialmnt5.sys [1302492 2006-11-02] (Intel Corporation) S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation) S3 NETw2v32; C:\Windows\System32\DRIVERS\NETw2v32.sys [2595840 2007-03-06] (Intel® Corporation) S1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-07-29] (Avira GmbH) S1 UimBus; C:\Windows\System32\DRIVERS\UimBus.sys [32080 2007-12-17] (Windows (R) 2000 DDK provider) S1 Uim_IM; C:\Windows\System32\Drivers\Uim_IM.sys [131672 2007-12-17] (Paragon) S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [x] S3 IpInIp; system32\DRIVERS\ipinip.sys [x] S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x] S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x] S3 Tosrfcom; No ImagePath ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-11-12 14:52 - 2013-11-12 14:52 - 00000000 ____D C:\FRST 2013-11-07 08:09 - 2013-11-07 08:09 - 00000273 _____ C:\ProgramData\a28w4a.reg 2013-11-07 08:09 - 2013-11-07 08:09 - 00000000 _____ C:\ProgramData\a28w4a.fvv 2013-11-07 08:08 - 2013-11-07 08:22 - 95025368 ____T C:\ProgramData\a28w4a.bxx 2013-10-26 07:43 - 2013-10-26 07:43 - 103054676 _____ C:\Windows\System32\뮠趟¡ ==================== One Month Modified Files and Folders ======= 2013-11-12 14:52 - 2013-11-12 14:52 - 00000000 ____D C:\FRST 2013-11-12 14:04 - 2013-08-21 10:08 - 00000000 ____D C:\Kaspersky Rescue Disk 10.0 2013-11-12 12:55 - 2006-11-02 13:52 - 01752305 _____ C:\Windows\WindowsUpdate.log 2013-11-12 12:54 - 2006-11-02 13:47 - 00003648 _____ C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 2013-11-12 12:54 - 2006-11-02 13:47 - 00003648 _____ C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 2013-11-07 08:22 - 2013-11-07 08:08 - 95025368 ____T C:\ProgramData\a28w4a.bxx 2013-11-07 08:10 - 2008-10-08 19:00 - 00000680 _____ C:\Users\John\AppData\Local\d3d9caps.dat 2013-11-07 08:09 - 2013-11-07 08:09 - 00000273 _____ C:\ProgramData\a28w4a.reg 2013-11-07 08:09 - 2013-11-07 08:09 - 00000000 _____ C:\ProgramData\a28w4a.fvv 2013-10-29 10:25 - 2006-11-02 11:33 - 01445116 _____ C:\Windows\System32\PerfStringBackup.INI 2013-10-26 07:43 - 2013-10-26 07:43 - 103054676 _____ C:\Windows\System32\뮠趟¡ 2013-10-19 08:31 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\Microsoft.NET 2013-10-15 20:32 - 2006-11-02 13:47 - 00246488 _____ C:\Windows\System32\FNTCACHE.DAT Files to move or delete: ==================== C:\ProgramData\a28w4a.reg Some content of TEMP: ==================== C:\Users\John\AppData\Local\Temp\ApnStub.exe C:\Users\John\AppData\Local\Temp\AskSLib.dll C:\Users\John\AppData\Local\Temp\FlashPlayerUpdate.exe C:\Users\John\AppData\Local\Temp\FlashPlayerUpdate01.exe C:\Users\John\AppData\Local\Temp\Fpnl.dll C:\Users\John\AppData\Local\Temp\jre-6u30-windows-i586-iftw-rv.exe C:\Users\John\AppData\Local\Temp\jre-6u34-windows-i586-iftw.exe C:\Users\John\AppData\Local\Temp\jre-6u38-windows-i586-iftw.exe C:\Users\John\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe C:\Users\John\AppData\Local\Temp\Quarantine.exe ==================== Known DLLs (Whitelisted) ============ ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit ==================== EXE ASSOCIATION ===================== HKLM\...\.exe: exefile => OK HKLM\...\exefile\DefaultIcon: %1 => OK HKLM\...\exefile\open\command: "%1" %* => OK ==================== Restore Points ========================= 3 Restore point made on: 2013-09-29 09:48:17 Restore point made on: 2013-10-11 20:33:57 Restore point made on: 2013-10-28 08:32:23 ==================== Memory info =========================== Percentage of memory in use: 66% Total physical RAM: 1006.87 MB Available physical RAM: 337.68 MB Total Pagefile: 1006.87 MB Available Pagefile: 335.65 MB Total Virtual: 2047.88 MB Available Virtual: 1946.17 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:39.15 GB) (Free:14.81 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive e: () (Removable) (Total:1.91 GB) (Free:1.89 GB) FAT32 Drive x: (Boot) (Fixed) (Total:0.49 GB) (Free:0.49 GB) NTFS Drive y: (Win7PE-pro) (CDROM) (Total:0.4 GB) (Free:0 GB) CDFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 56 GB) (Disk ID: AE7FAE7F) Partition 1: (Active) - (Size=39 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=17 GB) - (Type=BC) ======================================================== Disk: 1 (Size: 2 GB) (Disk ID: 6E652072) No partition Table on disk 1. LastRegBack: 2013-11-07 08:03 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 10-11-2013 01 Ran by John at 2013-11-12 14:54:23 Running from E:\ Boot Mode: Safe Mode (minimal) ========================================================== ==================== Security Center ======================== ==================== Installed Programs ====================== Adobe Flash Player 11 ActiveX (Version: 11.1.102.55) Adobe Reader 8.1.3 - Deutsch (Version: 8.1.3) Avira Free Antivirus (Version: 13.0.0.4052) Bluetooth Stack for Windows by Toshiba (Version: v6.10.10(T)) CCleaner (remove only) CDBurnerXP (Version: 4.2.3.1110) Drive Backup 2008 eDocPrintPro v3.12.1 (Version: 3.12.1) ESET Online Scanner v3 Intel(R) Network Connections Drivers Intel(R) PROSet/Wireless Software (Version: 11.5.0000) Java 7 Update 25 (Version: 7.0.250) Java Auto Updater (Version: 2.1.9.5) Java(TM) 6 Update 7 (Version: 1.6.0.70) MAGIX Xtreme Foto Designer 6 6.0.19.0 (D) (Version: 6.0.19.0) Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300) mCorev32.ism_new (Version: 11.52.0000) mDriver (Version: 11.52.0000) mHelp (Version: 11.52.0000) Microsoft .NET Framework 3.5 Language Pack SP1 - DEU Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729) Microsoft .NET Framework 3.5 SP1 Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319) Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219) Microsoft XML Parser (Version: 8.0.7820.0) mMHouse (Version: 11.52.0000) Mozilla Firefox (3.6.3) (Version: 3.6.3 (de)) mPfMgr (Version: 11.52.0000) MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0) Numedia CD-DVD writing as non-admin user (Version: 1.0.0) OpenOffice.org 3.0 (Version: 3.0.9358) Spelling Dictionaries Support For Adobe Reader 8 (Version: 8.0.0) TeamViewer 5 (Version: 5.0.7904 ) Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (Version: 3) XnView 1.95.4 (Version: 1.95.4) ==================== Restore Points ========================= Could not list Restore Points. Check WMI. ==================== Hosts content: ========================== 2006-11-02 11:23 - 2006-09-18 22:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ::1 localhost ==================== Scheduled Tasks (whitelisted) ============= Task: {0712C06F-93F5-4960-A174-029BDF2CF2F5} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI Task: {155723BA-60E2-4354-93AF-84EAC8D3C2D8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\System32\gatherWirelessInfo.vbs [2008-01-05] () Task: {2DE18FE4-6467-484F-8431-206702EC5546} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\System32\RacAgent.exe [2008-01-19] (Microsoft Corporation) Task: {2E5B7D97-F14C-4CFF-864E-620AABA892D1} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages Task: {4D72741E-769C-45DB-8604-CB8EBDADAA29} - System32\Tasks\Microsoft\Windows\MobilePC\TMM Task: {C88D3BAD-AFA7-4D51-88C3-786DDA65A30C} - System32\Tasks\Microsoft\Windows\WindowsCalendar\Reminders - John => C:\Program Files\Windows Calendar\WinCal.exe [2009-04-11] (Microsoft Corporation) ==================== Loaded Modules (whitelisted) ============= ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="1" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "UseAlternateShell"="1" ==================== Faulty Device Manager Devices ============= Could not list Devices. Check WMI. ==================== Event log errors: ========================= Application errors: ================== Error: (11/06/2013 09:39:32 AM) (Source: Application Hang) (User: ) Description: Programm iexplore.exe, Version 9.0.8112.16514 arbeitet nicht mehr mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen über das Problem zu suchen. Prozess-ID: 500 Anfangszeit: 01cedacb5f0c5d20 Zeitpunkt der Beendigung: 70 Error: (09/14/2013 07:09:23 AM) (Source: VSS) (User: ) Description: Volumeschattenkopie-Dienstfehler: Unerwarteter Fehler "CreateFileW(\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy7,0xc0000000,0x00000003,...)". hr = 0x80070020. Error: (09/07/2013 02:59:41 PM) (Source: Application Error) (User: ) Description: Fehlerhafte Anwendung iexplore.exe, Version 9.0.8112.16502, Zeitstempel 0x51f08c68, fehlerhaftes Modul MSHTML.dll, Version 9.0.8112.16502, Zeitstempel 0x51f08fd8, Ausnahmecode 0xc0000005, Fehleroffset 0x000ac5e6, Prozess-ID 0x5f0, Anwendungsstartzeit iexplore.exe0. Error: (08/21/2013 00:02:33 PM) (Source: .NET Runtime Optimization Service) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: WindowsFormsIntegration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35 . Error code = 0x80131f06 Error: (08/21/2013 00:02:32 PM) (Source: .NET Runtime Optimization Service) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: WindowsFormsIntegration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35 . Error code = 0x80131f06 Error: (08/21/2013 00:02:32 PM) (Source: .NET Runtime Optimization Service) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: PresentationFramework, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35 . Error code = 0x80131f06 Error: (08/21/2013 00:02:31 PM) (Source: .NET Runtime Optimization Service) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: PresentationFramework, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35 . Error code = 0x80131f06 Error: (08/21/2013 00:02:30 PM) (Source: .NET Runtime Optimization Service) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a . Error code = 0x80131f06 Error: (08/21/2013 00:02:30 PM) (Source: .NET Runtime Optimization Service) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a . Error code = 0x80131f06 Error: (08/21/2013 00:02:29 PM) (Source: .NET Runtime Optimization Service) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x80131f06 System errors: ============= Error: (11/12/2013 02:52:52 PM) (Source: DCOM) (User: ) Description: {8BC3F05E-D86B-11D0-A075-00C04FB68820} Error: (11/07/2013 08:00:19 AM) (Source: Service Control Manager) (User: ) Description: 30000Microsoft .NET Framework NGEN v4.0.30319_X86 Error: (11/06/2013 04:46:35 PM) (Source: Service Control Manager) (User: ) Description: 30000Microsoft .NET Framework NGEN v4.0.30319_X86 Error: (11/06/2013 04:45:00 PM) (Source: Service Control Manager) (User: ) Description: Windows-Dienst für Schriftartencache%%1053 Error: (11/06/2013 04:45:00 PM) (Source: Service Control Manager) (User: ) Description: 30000Windows-Dienst für Schriftartencache Error: (11/06/2013 09:30:14 AM) (Source: Service Control Manager) (User: ) Description: 30000Microsoft .NET Framework NGEN v4.0.30319_X86 Error: (11/06/2013 09:28:36 AM) (Source: Service Control Manager) (User: ) Description: Windows-Dienst für Schriftartencache%%1053 Error: (11/06/2013 09:28:36 AM) (Source: Service Control Manager) (User: ) Description: 30000Windows-Dienst für Schriftartencache Error: (11/05/2013 10:04:14 AM) (Source: Service Control Manager) (User: ) Description: 30000Microsoft .NET Framework NGEN v4.0.30319_X86 Error: (11/01/2013 01:41:18 PM) (Source: Server) (User: ) Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{D2CFEF66-2BFE-4E89-B837-928E06FA0B63} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden. Microsoft Office Sessions: ========================= Error: (11/06/2013 09:39:32 AM) (Source: Application Hang)(User: ) Description: iexplore.exe9.0.8112.1651450001cedacb5f0c5d2070 Error: (09/14/2013 07:09:23 AM) (Source: VSS)(User: ) Description: CreateFileW(\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy7,0xc0000000,0x00000003,...)0x80070020 Error: (09/07/2013 02:59:41 PM) (Source: Application Error)(User: ) Description: iexplore.exe9.0.8112.1650251f08c68MSHTML.dll9.0.8112.1650251f08fd8c0000005000ac5e65f001ceabd274ccd5b0 Error: (08/21/2013 00:02:33 PM) (Source: .NET Runtime Optimization Service)(User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: WindowsFormsIntegration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35 . Error code = 0x80131f06 WindowsFormsIntegration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35 Error: (08/21/2013 00:02:32 PM) (Source: .NET Runtime Optimization Service)(User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: WindowsFormsIntegration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35 . Error code = 0x80131f06 WindowsFormsIntegration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35 Error: (08/21/2013 00:02:32 PM) (Source: .NET Runtime Optimization Service)(User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: PresentationFramework, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35 . Error code = 0x80131f06 PresentationFramework, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35 Error: (08/21/2013 00:02:31 PM) (Source: .NET Runtime Optimization Service)(User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: PresentationFramework, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35 . Error code = 0x80131f06 PresentationFramework, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35 Error: (08/21/2013 00:02:30 PM) (Source: .NET Runtime Optimization Service)(User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a . Error code = 0x80131f06 System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a Error: (08/21/2013 00:02:30 PM) (Source: .NET Runtime Optimization Service)(User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a . Error code = 0x80131f06 System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a Error: (08/21/2013 00:02:29 PM) (Source: .NET Runtime Optimization Service)(User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x80131f06 System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 CodeIntegrity Errors: =================================== Date: 2013-01-23 14:42:55.164 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-01-23 14:42:55.014 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-01-23 14:42:54.874 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-01-23 14:42:54.704 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-01-23 14:42:54.543 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2012-01-21 09:56:50.602 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2012-01-21 09:56:50.462 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2012-01-21 09:56:50.312 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2012-01-21 09:56:50.172 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2012-01-21 09:56:50.031 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Memory info =========================== Percentage of memory in use: 27% Total physical RAM: 1006.78 MB Available physical RAM: 726.61 MB Total Pagefile: 2271.84 MB Available Pagefile: 2106.52 MB Total Virtual: 2047.88 MB Available Virtual: 1947.84 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:39.15 GB) (Free:12.57 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive e: () (Removable) (Total:1.91 GB) (Free:1.89 GB) FAT32 ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 56 GB) (Disk ID: AE7FAE7F) Partition 1: (Active) - (Size=39 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=17 GB) - (Type=BC) ======================================================== Disk: 1 (Size: 2 GB) (Disk ID: 6E652072) No partition Table on disk 1. ==================== End Of Log ============================ |
Themen zu Sperrbildschirm BKA usw. |
adobe, antivir, antivirus, association, avg, avira, cdburnerxp, defender, desktop, failed, farbar, farbar recovery scan tool, fehler, firefox, flash player, iexplore.exe, kaspersky, netzwerk, programm, registry, rundll, scan, security, server, services.exe, software, svchost.exe, system, vista |