| |
| |||||||
Log-Analyse und Auswertung: Vista: normaler Windows-Start, dann weißer BildschirmWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
24.11.2013, 10:48
| #5 |
| |  Vista: normaler Windows-Start, dann weißer Bildschirm Hallo Schrauber und vielen Dank für die Nachricht. Soll ich den PC jetzt wirklich neustarten? Ich habe doch nur einen scan ausgeführt und nichts behoben. Ich habe ihn jetzt am Laufen gehalten im abgesicherten Modus, dafür brauchte ich bestimmt 20 Versuche. Bitte um Nachricht. MfG Klatscher Hier das CombiFix-Logfile: Code:
ATTFilter ComboFix 13-11-23.02 - Jutta 24.11.2013 10:21:54.1.2 - x86 MINIMAL
Microsoft® Windows Vista™ Home Premium 6.0.6000.0.1252.49.1031.18.1022.522 [GMT 1:00]
ausgeführt von:: E:\ComboFix.exe
* Neuer Wiederherstellungspunkt wurde erstellt
.
.
((((((((((((((((((((((( Dateien erstellt von 2013-10-24 bis 2013-11-24 ))))))))))))))))))))))))))))))
.
.
2013-11-24 09:27 . 2013-11-24 09:28 -------- d-----w- c:\users\Jutta\AppData\Local\temp
2013-11-24 09:27 . 2013-11-24 09:27 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-11-22 17:46 . 2013-11-22 17:46 -------- d-----w- C:\found.001
2013-11-21 13:56 . 2013-11-21 14:38 -------- d-----w- c:\program files\stinger
2013-11-21 13:39 . 2013-11-21 13:39 -------- d-----w- C:\FRST
2013-11-21 10:49 . 2013-11-22 17:10 167936 ----a-w- c:\users\Jutta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Other.exe
2013-11-21 10:46 . 2013-11-21 10:46 -------- d-----w- c:\users\Jutta\AppData\Local\VNT
2013-11-21 10:46 . 2013-11-21 10:46 -------- d-----w- c:\program files\VNT
2013-11-21 10:46 . 2013-11-21 10:46 -------- d-----w- c:\program files\AskPartnerNetwork
2013-11-21 10:46 . 2013-11-21 10:46 -------- d-----w- c:\programdata\AskPartnerNetwork
2013-11-21 10:43 . 2013-11-21 10:43 -------- d-----w- c:\programdata\APN
2013-11-21 10:42 . 2013-11-21 10:42 -------- d-----w- c:\program files\GreenTree Applications
2013-11-19 12:46 . 2013-11-08 01:15 7772552 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{F05E35AF-DA38-4BFD-BE5B-7F1133354F7C}\mpengine.dll
2013-11-18 13:40 . 2013-11-18 13:40 -------- d-----w- c:\program files\bhv
2013-11-17 19:34 . 2013-11-17 19:34 -------- d-----w- c:\users\Jutta\AppData\Roaming\FLEXnet
2013-11-17 17:57 . 2012-03-16 13:55 26624 ----a-w- c:\windows\system32\drivers\ew_juextctrl.sys
2013-11-17 17:56 . 2012-03-16 13:55 89856 ----a-w- c:\windows\system32\drivers\ew_jucdcacm.sys
2013-11-17 17:56 . 2012-03-16 13:55 66688 ----a-w- c:\windows\system32\drivers\ew_jucdcecm.sys
2013-11-17 17:55 . 2008-03-21 22:41 503864 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
2013-11-17 17:55 . 2008-03-21 22:41 35896 ----a-w- c:\windows\system32\drivers\WdfLdr.sys
2013-11-17 17:55 . 2012-03-16 13:55 73984 ----a-w- c:\windows\system32\drivers\ew_jubusenum.sys
2013-11-17 17:55 . 2012-03-16 13:55 1112288 ----a-w- c:\windows\system32\wdfcoinstaller01007.dll
2013-11-17 17:54 . 2012-03-16 13:55 102784 ----a-w- c:\windows\system32\drivers\ew_hwusbdev.sys
2013-11-17 17:54 . 2012-03-16 13:55 11136 ----a-w- c:\windows\system32\drivers\ew_usbenumfilter.sys
2013-11-17 17:54 . 2013-11-17 17:54 -------- d-----w- c:\users\Jutta\{b763beb8-a879-4e17-a829-f4c673f79f06}
2013-11-17 17:54 . 2013-11-17 17:54 -------- d-----w- c:\users\Jutta\{64c2587f-5e36-4a84-9891-0f7380e7c081}
2013-11-17 17:52 . 2013-11-17 17:52 -------- d-----w- c:\programdata\Macrovision
2013-11-17 17:52 . 2013-11-17 17:52 -------- d-----w- c:\program files\Vodafone
2013-11-17 17:38 . 2013-11-17 17:38 -------- d-----w- c:\programdata\AVS4YOU
2013-11-16 07:07 . 2004-03-08 21:00 1081616 ----a-w- c:\windows\system32\MSCOMCTL.OCX
2013-11-14 20:45 . 2013-11-14 20:45 242240 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2013-11-14 20:45 . 2013-11-19 12:51 -------- d-----w- c:\users\Jutta\AppData\Roaming\DAEMON Tools Lite
2013-11-14 20:45 . 2013-11-14 20:45 -------- d-----w- c:\program files\DAEMON Tools Lite
2013-11-14 20:36 . 2013-11-14 20:53 -------- d-----w- c:\programdata\DAEMON Tools Lite
2013-11-14 08:41 . 2013-11-14 08:41 -------- d-----w- c:\program files\Silabs
2013-11-14 08:32 . 2013-11-14 08:32 -------- d-----w- C:\SiLabs
2013-11-14 08:13 . 2013-11-14 08:44 -------- d-----w- c:\users\Jutta\.LOGOComfort7.0
2013-11-14 08:12 . 2013-11-14 08:13 -------- d--h--w- c:\program files\Zero G Registry
2013-11-14 08:12 . 2013-11-14 08:12 -------- d-----w- c:\program files\Siemens
2013-11-14 08:11 . 2013-11-14 08:11 -------- d--h--w- c:\users\Jutta\InstallAnywhere
2013-11-14 08:11 . 2013-11-14 08:11 -------- d-----w- C:\tmp
2013-11-13 05:43 . 2013-11-13 05:43 -------- d-----w- c:\users\Jutta\AppData\Roaming\Bytemobile
2013-11-13 05:43 . 2013-11-17 18:27 -------- d-----w- c:\users\Jutta\AppData\Roaming\Vodafone
2013-11-13 05:42 . 2009-06-29 16:59 112128 ----a-w- c:\windows\system32\drivers\ewusbnet.sys
2013-11-13 05:42 . 2009-04-09 12:38 102784 ----a-w- c:\windows\system32\drivers\ewusbmdm.sys
2013-11-13 05:42 . 2009-06-29 16:59 102912 ----a-w- c:\windows\system32\drivers\ewusbfake.sys
2013-11-13 05:40 . 2013-11-17 17:57 -------- d-----w- c:\programdata\Vodafone
2013-11-13 05:40 . 2013-11-13 05:40 -------- d-----w- c:\programdata\FLEXnet
2013-11-13 05:38 . 2013-11-13 05:38 8464 ----a-w- c:\windows\system32\SpOrder.dll
2013-11-13 05:38 . 2013-11-13 05:38 -------- d-----w- c:\users\Jutta\AppData\Local\{86DD38A2-C8BD-404A-A1BD-907F6B69C913}
2013-11-12 06:12 . 2013-11-12 06:12 -------- d-----w- c:\users\Jutta\AppData\Roaming\vlc
2013-11-12 06:06 . 2013-11-12 06:07 -------- d-----w- c:\program files\Steganos Safe CBE
2013-11-12 06:04 . 2013-11-12 06:04 -------- d-----w- c:\program files\7-Zip
2013-11-12 06:03 . 2013-11-12 06:03 -------- d-----w- c:\program files\LauschAngriff
2013-11-12 05:53 . 2013-11-12 05:55 -------- d-----w- c:\program files\Common Files\AVSMedia
2013-11-12 05:52 . 2007-09-27 14:22 638976 ----a-w- c:\windows\system32\divx.dll
2013-11-12 05:52 . 2007-09-27 14:22 413760 ----a-w- c:\windows\system32\mpg4c32.dll
2013-11-12 05:52 . 2007-09-27 14:22 261632 ----a-w- c:\windows\system32\mcdvd_32.dll
2013-11-12 05:52 . 2004-02-04 21:11 81920 ----a-w- c:\windows\system32\AC3ACM.acm
2013-11-12 05:52 . 2003-05-22 12:26 221215 ----a-w- c:\windows\system32\divxdec.ax
2013-11-12 05:52 . 2003-05-21 23:50 82944 ----a-w- c:\windows\system32\vct3216.acm
2013-11-12 05:52 . 2003-05-21 23:50 38912 ----a-w- c:\windows\system32\alf2cd.acm
2013-11-12 05:52 . 2003-03-25 05:49 98304 ----a-w- c:\windows\system32\L3CODECX.AX
2013-11-12 05:52 . 2000-03-14 20:55 13239 ----a-w- c:\windows\system32\Scg726.acm
2013-11-12 05:52 . 2003-05-21 12:50 24576 ----a-w- c:\windows\system32\msxml3a.dll
2013-11-12 05:52 . 2013-11-12 05:55 -------- d-----w- c:\program files\AVS4YOU
2013-11-12 05:52 . 2003-05-21 23:50 1700352 ----a-w- c:\windows\system32\GdiPlus.dll
2013-11-12 05:46 . 2013-11-12 05:46 -------- d-----w- c:\program files\VideoLAN
2013-11-12 05:45 . 2013-11-12 05:45 -------- d-----w- c:\users\Jutta\AppData\Local\Songbird2
2013-11-12 05:45 . 2013-11-12 05:45 -------- d-----w- c:\users\Jutta\AppData\Roaming\Songbird2
2013-11-12 05:44 . 2013-11-12 05:44 -------- d-----w- c:\programdata\SongbirdVLC
2013-11-12 05:44 . 2013-11-12 06:11 -------- d-----w- c:\program files\Songbird
2013-11-12 05:39 . 2013-11-12 05:40 -------- d-----w- C:\12.000 Office Vorlagen Teil 2
2013-11-12 05:32 . 2008-06-02 12:10 1363968 ----a-w- c:\windows\system32\HDX4H263Decoder.ax
2013-11-12 05:32 . 2008-06-02 12:10 167936 ----a-w- c:\windows\system32\HDX4FlashDemuxer.ax
2013-11-12 05:32 . 2013-11-12 05:32 -------- d-----w- c:\program files\Ashampoo
2013-11-12 05:31 . 2013-11-12 05:31 -------- d-----w- c:\program files\FLV Player
2013-11-12 05:29 . 2013-11-12 05:29 -------- d-----w- c:\users\Jutta\AppData\Roaming\ScreenShow
2013-11-12 05:29 . 2013-11-12 05:29 -------- d-----w- c:\users\Jutta\AppData\Roaming\DemoPlugin
2013-11-12 05:29 . 2013-11-12 05:29 -------- d-----w- c:\users\Jutta\AppData\Roaming\AquaSoft
2013-11-12 05:26 . 2013-11-12 05:26 -------- d--h--w- c:\programdata\{DDFE72FA-523E-4F95-A612-46FD157EE728}
2013-11-12 05:26 . 2013-11-12 05:26 -------- d-----w- c:\program files\AquaSoft
2013-11-12 05:24 . 2013-11-12 05:24 -------- d-----w- c:\program files\Jens Lorek
2013-11-12 05:17 . 2013-11-12 05:17 172032 ----a-w- c:\windows\system32\AniGIF.ocx
2013-11-12 05:17 . 2013-11-22 17:54 -------- d-----w- c:\program files\SpeedBit Video Accelerator
2013-11-12 05:16 . 2013-11-12 05:16 -------- d-----w- c:\program files\MedienTeam66
2013-11-12 05:15 . 2005-08-05 21:05 212992 ----a-w- c:\program files\Common Files\InstallShield\Engine\6\Intel 32\ILog.dll
2013-11-12 05:15 . 2013-11-12 05:15 -------- d-----w- c:\program files\e-load
2013-11-12 05:10 . 2013-11-12 05:11 -------- d-----w- c:\program files\Common Files\Adobe
2013-11-08 19:27 . 2013-11-17 17:04 -------- d-----w- c:\windows\system32\SupportAppCB
2013-11-08 17:19 . 2013-11-08 18:40 -------- d-----w- c:\program files\EPlan.student
2013-11-05 13:47 . 2013-01-11 15:36 4466120 ----a-w- c:\windows\system32\hasplms.exe
2013-11-05 13:47 . 2013-01-11 15:36 4466120 ----a-w- c:\windows\system32\aksllmtp.exe
2013-11-05 13:47 . 2013-02-19 14:17 376200 ----a-w- c:\windows\system32\drivers\aksfridge.sys
2013-11-05 13:47 . 2013-03-07 14:06 608136 ----a-w- c:\windows\system32\drivers\hardlock.sys
2013-11-05 13:47 . 2013-11-05 13:47 -------- d-----w- c:\users\Jutta\{bbacacd3-4efa-4fa4-becc-77cea0242d2d}
2013-11-05 13:46 . 2013-01-14 11:34 198088 ----a-w- c:\windows\system32\hlvdd.dll
2013-11-05 13:46 . 2013-11-05 13:46 -------- d-----w- c:\program files\Common Files\Aladdin Shared
2013-11-05 13:45 . 2013-11-05 13:45 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2013-11-05 11:05 . 2009-11-08 09:55 99176 ----a-w- c:\windows\system32\PresentationHostProxy.dll
2013-11-05 11:05 . 2009-11-08 09:55 49472 ----a-w- c:\windows\system32\netfxperf.dll
2013-11-05 11:05 . 2009-11-08 09:55 297808 ----a-w- c:\windows\system32\mscoree.dll
2013-11-05 11:05 . 2009-11-08 09:55 295264 ----a-w- c:\windows\system32\PresentationHost.exe
2013-11-05 11:05 . 2009-11-08 09:55 1130824 ----a-w- c:\windows\system32\dfshim.dll
2013-11-05 10:17 . 2013-11-05 11:13 -------- d-----w- c:\users\Jutta\AppData\Local\cache
2013-11-05 10:17 . 2013-11-05 10:32 -------- d-----w- c:\users\Jutta\AppData\Local\Mobogenie
2013-11-05 10:16 . 2013-11-05 11:12 -------- d-----w- c:\program files\Mobogenie
2013-11-05 10:02 . 2013-11-05 10:07 -------- d-----w- c:\users\Jutta\AppData\Roaming\Advanced System Protector
2013-11-05 10:02 . 2013-11-05 11:33 -------- d-----w- c:\users\Jutta\AppData\Roaming\Systweak
2013-11-05 10:02 . 2013-09-17 10:25 18776 ----a-w- c:\windows\system32\roboot.exe
2013-11-05 09:55 . 2013-11-07 06:54 -------- d-----w- c:\program files\BatBrowse
2013-11-05 09:53 . 2013-11-05 09:53 -------- d-----w- c:\users\Jutta\AppData\Roaming\FoxTab
2013-11-05 09:52 . 2013-11-05 09:52 -------- d-----w- c:\users\Jutta\AppData\Local\BonanzaDealsLive
2013-11-05 09:52 . 2013-11-05 09:52 -------- d-----w- c:\programdata\BonanzaDealsLive
2013-11-05 09:52 . 2013-11-05 09:52 -------- d-----w- c:\program files\BonanzaDeals
2013-11-05 07:35 . 2013-11-14 20:55 -------- d-----w- c:\users\Public\EPLAN
2013-11-05 07:27 . 2013-11-17 17:14 -------- d-----w- c:\program files\EPLAN
2013-11-04 13:50 . 2013-11-04 13:50 -------- d-----w- c:\users\UpdatusUser
2013-11-04 13:50 . 2013-11-04 13:50 -------- d-----w- c:\programdata\NVIDIA
2013-11-04 13:49 . 2013-01-31 09:00 634656 ----a-w- c:\windows\system32\nvvsvc.exe
2013-11-04 13:49 . 2013-01-31 09:00 62752 ----a-w- c:\windows\system32\nvshext.dll
2013-11-04 13:49 . 2013-01-31 09:00 2557728 ----a-w- c:\windows\system32\nvsvcr.dll
2013-11-04 13:48 . 2013-02-19 20:33 53024 ----a-w- c:\windows\system32\OpenCL.dll
2013-10-30 19:26 . 2013-10-30 19:26 -------- d--h--w- c:\programdata\CanonIJEPPEX2
2013-10-30 19:26 . 2013-10-30 19:26 -------- d--h--w- c:\programdata\CanonEPP
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-09-03 12:35 . 2012-09-24 11:42 238872 ------w- c:\windows\system32\MpSigStub.exe
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2006-11-02 125440]
"WidgetAlarm"="c:\program files\e-load\Tiefpreisalarm\Tiefpreisalarm.exe" [2008-06-13 1801520]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="RtHDVCpl.exe" [2007-01-09 4186112]
"RoxWatchTray"="c:\program files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe" [2006-11-20 228088]
"toolbar_eula_launcher"="c:\program files\Packard Bell\GOOGLE_EULA\EULALauncher.exe" [2007-01-10 18944]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"Windows Mobile Device Center"="c:\windows\WindowsMobile\wmdc.exe" [2007-05-31 648072]
"MBBalloon"="c:\program files\HOTALBUMMyBOX\MBBalloon.exe" [2007-11-30 789144]
"UnlockerAssistant"="c:\program files\Unlocker\UnlockerAssistant.exe" [2010-07-04 17408]
"QuickTime Task"="c:\sony\QTTask.exe" [2012-10-25 421888]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2013-11-19 683576]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2010-03-25 2516296]
"CanonSolutionMenuEx"="c:\program files\Canon\Solution Menu EX\CNSEMAIN.EXE" [2010-04-02 1185112]
"mobilegeni daemon"="c:\program files\Mobogenie\DaemonProcess.exe" [2013-10-15 735936]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]
"SpeedBitVideoAccelerator"="c:\program files\SpeedBit Video Accelerator\VideoAccelerator.exe" [2013-11-12 2705008]
"MobileBroadband"="c:\program files\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe" [2012-03-20 69632]
"ApnTBMon"="c:\program files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe" [2013-11-07 1707472]
"VNT"="c:\program files\VNT\vntldr.exe" [2013-11-07 202192]
.
c:\users\Jutta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Other.exe [2013-11-22 167936]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - ECACHE
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ
WindowsMobile REG_MULTI_SZ wcescomm rapimgr
LocalServiceRestricted REG_MULTI_SZ WcesComm RapiMgr
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-11-21 09:52 1210320 ----a-w- c:\program files\Google\Chrome\Application\31.0.1650.57\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2013-11-22 c:\windows\Tasks\BonanzaDealsLiveUpdateTaskMachineCore.job
- c:\program files\BonanzaDealsLive\Update\BonanzaDealsLive.exe [2013-11-05 09:52]
.
2013-11-22 c:\windows\Tasks\BonanzaDealsLiveUpdateTaskMachineUA.job
- c:\program files\BonanzaDealsLive\Update\BonanzaDealsLive.exe [2013-11-05 09:52]
.
2013-11-22 c:\windows\Tasks\Erweiterte Garantie.job
- c:\program files\Packard Bell\SetupmyPC\PBCarNot.exe [2007-03-28 16:38]
.
2013-11-22 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-10-30 15:14]
.
2013-11-22 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-10-30 15:14]
.
2013-11-22 c:\windows\Tasks\Recovery DVD Creator.job
- c:\program files\Packard Bell\SetupMyPc\MCDCheck.exe [2007-03-28 16:34]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.google.de/
uInternet Settings,ProxyServer = http=www-proxy.t-online.de:80
uInternet Settings,ProxyOverride = *.t-online.de
IE: Nach Microsoft E&xel exportieren - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
LSP: c:\program files\Avira\AntiVir Desktop\avsda.dll
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, hxxp://www.gmer.net
Rootkit scan 2013-11-24 10:28
Windows 6.0.6000 NTFS
.
Scanne versteckte Prozesse...
.
Scanne versteckte Autostarteinträge...
.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
mobilegeni daemon = c:\program files\Mobogenie\DaemonProcess.exe?????????????????????????????????????????????????????????????????????????????????????
.
Scanne versteckte Dateien...
.
Scan erfolgreich abgeschlossen
versteckte Dateien: 0
.
**************************************************************************
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Zeit der Fertigstellung: 2013-11-24 10:30:51
ComboFix-quarantined-files.txt 2013-11-24 09:30
ComboFix2.txt 2013-11-24 09:11
.
Vor Suchlauf: 27 Verzeichnis(se), 228.207.468.544 Bytes frei
Nach Suchlauf: 28 Verzeichnis(se), 228.169.728.000 Bytes frei
.
- - End Of File - - E0FB2E82220ADC9D35EADA9CF2B0962D
5C616939100B85E558DA92B899A0FC36
|
| Themen zu Vista: normaler Windows-Start, dann weißer Bildschirm |
| abgesicherten, allgemein, arbeitet, avira, bildschirm, blauer, blauer bildschirm, desktop, gen, gmer, guten, heute, icons, langsam, log-file, modus, neustart, scan, stinger, taskleiste, virenscan, vista, weiße, weißer, zeichen |
Baum-Darstellung