Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
"Windows 7: Sperrschirm...... Was tun?

"Windows 7: Sperrschirm...... Was tun?


Plagegeister aller Art und deren Bekämpfung: "Windows 7: Sperrschirm...... Was tun?

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 23.11.2013, 19:14   #1
safri01
 
"Windows 7: Sperrschirm...... Was tun? - Standard

"Windows 7: Sperrschirm...... Was tun?


Was muß ich tun um den Speer Bildschirm wieder los zu werden???

Hier mein Logfile:

Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 23-11-2013
Ran by SYSTEM on MININT-V2N0UV4 on 23-11-2013 19:05:16
Running from G:\
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Recovery

The current controlset is ControlSet001
ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log.

==================== Registry (Whitelisted) ==================

HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4908592 2013-10-07] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [CitrixReceiver] - "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Citrix\Receiver Updater.lnk"
HKLM-x32\...\Run: [ConnectionCenter] - C:\Program Files (x86)\Citrix\ICA Client\concentr.exe [395656 2013-10-01] (Citrix Systems, Inc.)
HKLM-x32\...\Run: [Redirector] - C:\Program Files (x86)\Citrix\ICA Client\redirector.exe [153992 2013-10-01] (Citrix Systems, Inc.)
HKU\Kfz Sv Büro\...\Winlogon: [Shell] explorer.exe,C:\Users\Kfz Sv Büro\AppData\Roaming\Other.res [94720 2013-08-29] () <==== ATTENTION 

==================== Services (Whitelisted) =================

S2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3538480 2013-10-03] (AVG Technologies CZ, s.r.o.)
S2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [301152 2013-09-25] (AVG Technologies CZ, s.r.o.)
S2 Realtek11nCU; C:\Program Files (x86)\REALTEK\11n USB Wireless LAN Utility\RtlService.exe [36864 2010-04-16] (Realtek)

==================== Drivers (Whitelisted) ====================

S1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [148792 2013-09-25] (AVG Technologies CZ, s.r.o.)
S1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [241464 2013-09-02] (AVG Technologies CZ, s.r.o.)
S0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [192824 2013-09-02] (AVG Technologies CZ, s.r.o.)
S1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-09-02] (AVG Technologies CZ, s.r.o.)
S0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-09-02] (AVG Technologies CZ, s.r.o.)
S0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-08-20] (AVG Technologies CZ, s.r.o.)
S0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31544 2013-09-08] (AVG Technologies CZ, s.r.o.)
S1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [251192 2013-08-01] (AVG Technologies CZ, s.r.o.)
S3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [8192 2005-03-29] ()
S3 RTL8192cu; C:\Windows\System32\DRIVERS\rtwlanu.sys [1038440 2011-05-09] (Realtek Semiconductor Corporation                           )
S3 rtlss; C:\Windows\System32\Drivers\rtlss.sys [27240 2010-06-21] (Realtek Semiconductor Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-23 19:05 - 2013-11-23 19:05 - 00000000 ____D C:\FRST
2013-11-23 09:58 - 2013-11-23 09:58 - 00094720 _____ C:\Users\Kfz Sv Büro\Downloads\video_720p.exe
2013-11-19 19:05 - 2013-11-19 19:05 - 00000230 _____ C:\Users\Kfz Sv Büro\Desktop\Citrix XenApp - Anmeldung.url
2013-11-19 15:25 - 2013-11-19 15:25 - 00001022 _____ C:\Users\Public\Desktop\FotoCopy Eingangsverzeichnis.lnk
2013-11-19 15:25 - 2013-11-19 15:25 - 00000000 ____D C:\Program Files (x86)\Audatex
2013-11-19 15:23 - 2011-07-06 08:41 - 03866112 _____ C:\Users\Kfz Sv Büro\Desktop\FotoCopy.msi
2013-11-19 07:49 - 2013-11-19 07:49 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-18 12:51 - 2013-11-18 12:51 - 00001409 _____ C:\Users\Kfz Sv Büro\Desktop\Internet Explorer.lnk
2013-11-18 12:37 - 2013-11-18 14:25 - 00000000 ____D C:\Users\Kfz Sv Büro\AppData\Roaming\ICAClient
2013-11-18 12:36 - 2013-11-18 12:36 - 00000000 ____D C:\ProgramData\Citrix
2013-11-18 12:35 - 2013-11-18 12:35 - 00000000 ____D C:\Users\Kfz Sv Büro\AppData\Local\Citrix
2013-11-18 12:35 - 2013-11-18 12:35 - 00000000 ____D C:\Program Files (x86)\Citrix
2013-11-18 12:28 - 2013-11-18 12:31 - 53664128 _____ (Citrix Systems, Inc.) C:\Users\Kfz Sv Büro\Downloads\CitrixReceiver.exe
2013-11-14 20:11 - 2013-11-14 20:11 - 00000000 ____D C:\Users\Kfz Sv Büro\AppData\Roaming\AVG2014
2013-11-14 20:09 - 2013-11-14 20:09 - 00000981 _____ C:\Users\Public\Desktop\AVG 2014.lnk
2013-11-14 20:08 - 2013-11-14 20:10 - 00000000 ____D C:\ProgramData\AVG2014
2013-11-13 12:37 - 2013-10-12 09:45 - 02241536 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-11-13 12:37 - 2013-10-12 09:45 - 01364992 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-11-13 12:37 - 2013-10-12 09:45 - 00051712 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-11-13 12:37 - 2013-10-12 09:43 - 19269632 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-11-13 12:37 - 2013-10-12 09:43 - 15404544 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-11-13 12:37 - 2013-10-12 09:43 - 03959808 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-11-13 12:37 - 2013-10-12 09:43 - 02648576 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-11-13 12:37 - 2013-10-12 09:43 - 00855552 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-11-13 12:37 - 2013-10-12 09:43 - 00603136 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-11-13 12:37 - 2013-10-12 09:43 - 00526336 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-11-13 12:37 - 2013-10-12 09:43 - 00136704 _____ (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-11-13 12:37 - 2013-10-12 09:43 - 00067072 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-11-13 12:37 - 2013-10-12 09:43 - 00053248 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-11-13 12:37 - 2013-10-12 09:43 - 00039936 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-11-13 12:37 - 2013-10-12 08:03 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-13 12:37 - 2013-10-12 08:03 - 01138176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-13 12:37 - 2013-10-12 08:02 - 14355968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-13 12:37 - 2013-10-12 08:02 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-13 12:37 - 2013-10-12 08:02 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-13 12:37 - 2013-10-12 08:02 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-13 12:37 - 2013-10-12 08:02 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-13 12:37 - 2013-10-12 08:02 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-13 12:37 - 2013-10-12 08:02 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-13 12:37 - 2013-10-12 08:02 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-13 12:37 - 2013-10-12 08:02 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-13 12:37 - 2013-10-12 08:02 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-13 12:37 - 2013-10-12 08:02 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-13 12:37 - 2013-10-12 07:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-11-13 12:37 - 2013-10-12 07:08 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-13 12:37 - 2013-10-12 06:44 - 00089600 _____ (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-11-13 12:37 - 2013-10-12 06:15 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-13 10:12 - 2013-11-13 10:12 - 00000000 ____D C:\ProgramData\ABBYY
2013-11-13 10:11 - 2013-11-13 10:11 - 00000000 ____D C:\Users\Kfz Sv Büro\Documents\AnyMP4 Studio
2013-11-13 10:11 - 2013-11-13 10:11 - 00000000 ____D C:\Users\Kfz Sv Büro\AppData\Local\AnyMP4 Studio
2013-11-13 08:47 - 2013-11-13 09:17 - 346670920 _____ (AnyMP4 Studio                                               ) C:\Users\Kfz Sv Büro\Downloads\pdf-converter-ultimate.exe
2013-11-13 08:30 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-11-13 08:29 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\System32\nshwfp.dll
2013-11-13 08:29 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\System32\IKEEXT.DLL
2013-11-13 08:29 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\System32\FWPUCLNT.DLL
2013-11-13 08:29 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-11-13 08:29 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-11-13 08:29 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-11-13 08:29 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\System32\SmartcardCredentialProvider.dll
2013-11-13 08:29 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\System32\credui.dll
2013-11-13 08:29 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\System32\authui.dll
2013-11-13 08:29 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2013-11-13 08:29 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-11-13 08:29 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2013-11-13 08:29 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\System32\gdi32.dll
2013-11-13 08:29 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-11-13 08:29 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\afd.sys
2013-11-13 08:29 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ksecpkg.sys
2013-11-13 08:29 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ksecdd.sys
2013-11-13 08:29 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\System32\sspicli.dll
2013-11-13 08:29 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\System32\sspisrv.dll
2013-11-13 08:29 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\System32\secur32.dll
2013-11-13 08:29 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\System32\schannel.dll
2013-11-13 08:29 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\System32\lsasrv.dll
2013-11-13 08:29 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\System32\ncrypt.dll
2013-11-13 08:29 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-11-13 08:29 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-11-13 08:29 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-11-13 08:29 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-11-13 08:29 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\System32\lsass.exe
2013-11-13 08:29 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\cng.sys
2013-11-08 08:20 - 2013-11-08 08:20 - 00000000 ____D C:\Users\Kfz Sv Büro\AppData\Local\PDF24
2013-11-08 08:18 - 2013-11-08 08:18 - 16198832 _____ (Geek Software GmbH                                          ) C:\Users\Kfz Sv Büro\Downloads\pdf24-creator-6.0.1.exe
2013-11-04 13:08 - 2013-11-04 13:08 - 00001991 _____ C:\Users\Kfz Sv Büro\Desktop\HP Photosmart C3100 series - Verknüpfung.lnk
2013-11-04 13:06 - 2013-11-04 13:06 - 00000375 _____ C:\Windows\System32\Drivers\etc\hosts.ics
2013-10-31 23:56 - 2013-11-19 16:19 - 00000000 ____D C:\Users\Kfz Sv Büro\AppData\Local\Avg2014

==================== One Month Modified Files and Folders =======

2013-11-23 19:05 - 2013-11-23 19:05 - 00000000 ____D C:\FRST
2013-11-23 10:01 - 2013-10-20 11:13 - 00000276 _____ C:\Windows\Tasks\AutoKMS.job
2013-11-23 10:01 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-23 10:01 - 2009-07-14 05:51 - 00029158 _____ C:\Windows\setupact.log
2013-11-23 10:00 - 2013-10-18 08:47 - 00000000 ____D C:\Users\Kfz Sv Büro\Downloads\Neuer Ordner
2013-11-23 10:00 - 2013-08-22 18:29 - 01657242 _____ C:\Windows\WindowsUpdate.log
2013-11-23 09:58 - 2013-11-23 09:58 - 00094720 _____ C:\Users\Kfz Sv Büro\Downloads\video_720p.exe
2013-11-23 08:06 - 2013-08-22 21:05 - 00000000 ____D C:\ProgramData\MFAData
2013-11-23 07:52 - 2013-10-13 07:48 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-23 07:19 - 2011-04-12 08:43 - 00711162 _____ C:\Windows\System32\perfh007.dat
2013-11-23 07:19 - 2011-04-12 08:43 - 00152434 _____ C:\Windows\System32\perfc007.dat
2013-11-23 07:19 - 2009-07-14 06:13 - 01640528 _____ C:\Windows\System32\PerfStringBackup.INI
2013-11-23 07:01 - 2009-07-14 05:45 - 00022528 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-23 07:01 - 2009-07-14 05:45 - 00022528 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-22 17:34 - 2010-11-21 04:47 - 00048558 _____ C:\Windows\PFRO.log
2013-11-19 19:05 - 2013-11-19 19:05 - 00000230 _____ C:\Users\Kfz Sv Büro\Desktop\Citrix XenApp - Anmeldung.url
2013-11-19 16:37 - 2013-10-20 11:13 - 00000000 ____D C:\Windows\AutoKMS
2013-11-19 16:19 - 2013-10-31 23:56 - 00000000 ____D C:\Users\Kfz Sv Büro\AppData\Local\Avg2014
2013-11-19 15:25 - 2013-11-19 15:25 - 00001022 _____ C:\Users\Public\Desktop\FotoCopy Eingangsverzeichnis.lnk
2013-11-19 15:25 - 2013-11-19 15:25 - 00000000 ____D C:\Program Files (x86)\Audatex
2013-11-19 14:01 - 2013-08-22 19:52 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-19 07:49 - 2013-11-19 07:49 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-18 14:25 - 2013-11-18 12:37 - 00000000 ____D C:\Users\Kfz Sv Büro\AppData\Roaming\ICAClient
2013-11-18 12:51 - 2013-11-18 12:51 - 00001409 _____ C:\Users\Kfz Sv Büro\Desktop\Internet Explorer.lnk
2013-11-18 12:36 - 2013-11-18 12:36 - 00000000 ____D C:\ProgramData\Citrix
2013-11-18 12:35 - 2013-11-18 12:35 - 00000000 ____D C:\Users\Kfz Sv Büro\AppData\Local\Citrix
2013-11-18 12:35 - 2013-11-18 12:35 - 00000000 ____D C:\Program Files (x86)\Citrix
2013-11-18 12:31 - 2013-11-18 12:28 - 53664128 _____ (Citrix Systems, Inc.) C:\Users\Kfz Sv Büro\Downloads\CitrixReceiver.exe
2013-11-14 20:11 - 2013-11-14 20:11 - 00000000 ____D C:\Users\Kfz Sv Büro\AppData\Roaming\AVG2014
2013-11-14 20:10 - 2013-11-14 20:08 - 00000000 ____D C:\ProgramData\AVG2014
2013-11-14 20:10 - 2013-08-22 21:07 - 00000000 ____D C:\Program Files (x86)\AVG
2013-11-14 20:09 - 2013-11-14 20:09 - 00000981 _____ C:\Users\Public\Desktop\AVG 2014.lnk
2013-11-14 18:32 - 2013-10-15 18:54 - 00000000 ____D C:\Users\Kfz Sv Büro\Desktop\SV Büro Oldenburg
2013-11-14 15:59 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-11-13 12:38 - 2013-08-22 22:31 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-11-13 12:36 - 2013-08-22 20:01 - 00000000 ____D C:\Windows\System32\MRT
2013-11-13 12:35 - 2013-08-22 20:01 - 82896128 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-11-13 10:12 - 2013-11-13 10:12 - 00000000 ____D C:\ProgramData\ABBYY
2013-11-13 10:11 - 2013-11-13 10:11 - 00000000 ____D C:\Users\Kfz Sv Büro\Documents\AnyMP4 Studio
2013-11-13 10:11 - 2013-11-13 10:11 - 00000000 ____D C:\Users\Kfz Sv Büro\AppData\Local\AnyMP4 Studio
2013-11-13 09:17 - 2013-11-13 08:47 - 346670920 _____ (AnyMP4 Studio                                               ) C:\Users\Kfz Sv Büro\Downloads\pdf-converter-ultimate.exe
2013-11-08 08:20 - 2013-11-08 08:20 - 00000000 ____D C:\Users\Kfz Sv Büro\AppData\Local\PDF24
2013-11-08 08:18 - 2013-11-08 08:18 - 16198832 _____ (Geek Software GmbH                                          ) C:\Users\Kfz Sv Büro\Downloads\pdf24-creator-6.0.1.exe
2013-11-04 13:08 - 2013-11-04 13:08 - 00001991 _____ C:\Users\Kfz Sv Büro\Desktop\HP Photosmart C3100 series - Verknüpfung.lnk
2013-11-04 13:06 - 2013-11-04 13:06 - 00000375 _____ C:\Windows\System32\Drivers\etc\hosts.ics
2013-10-26 08:07 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-10-25 06:52 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Public\Libraries

Some content of TEMP:
====================
C:\Users\Kfz Sv Büro\AppData\Local\Temp\oi_{205830D3-4994-4BC4-976F-56120F1F0049}.exe
C:\Users\Kfz Sv Büro\AppData\Local\Temp\UNINSTALL.EXE


==================== Known DLLs (Whitelisted) ================


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points  =========================

8
Restore point made on: 2013-10-20 09:50:13
Restore point made on: 2013-10-30 17:58:43
Restore point made on: 2013-11-01 07:41:25
Restore point made on: 2013-11-10 08:37:21
Restore point made on: 2013-11-13 12:34:16
Restore point made on: 2013-11-14 20:07:50
Restore point made on: 2013-11-14 20:08:22
Restore point made on: 2013-11-19 15:25:36

==================== Memory info =========================== 

Percentage of memory in use: 15%
Total physical RAM: 3838.18 MB
Available physical RAM: 3224.33 MB
Total Pagefile: 3836.38 MB
Available Pagefile: 3209.59 MB
Total Virtual: 8192 MB
Available Virtual: 8191.87 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:465.66 GB) (Free:414.52 GB) NTFS
Drive g: () (Removable) (Total:14.63 GB) (Free:14.63 GB) FAT32
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
Drive y: (System-reserviert) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 588968CC)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=466 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (Size: 15 GB) (Disk ID: 758D54DD)
Partition 1: (Not Active) - (Size=15 GB) - (Type=0C)


LastRegBack: 2013-11-20 07:07

==================== End Of Log ============================

Alt 23.11.2013, 20:27   #2
aharonov
/// TB-Ausbilder
 
"Windows 7: Sperrschirm...... Was tun? - Standard

"Windows 7: Sperrschirm...... Was tun?


Hi,

ist der Sperrschirm nach diesem Fix weg?


Drücke bitte die + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
ATTFilter
HKU\Kfz Sv Büro\...\Winlogon: [Shell] explorer.exe,C:\Users\Kfz Sv Büro\AppData\Roaming\Other.res [94720 2013-08-29] () <==== ATTENTION 
C:\Users\Kfz Sv Büro\AppData\Roaming\Other.res
C:\Users\Kfz Sv Büro\AppData\Local\Temp\*.EXE
Speichere diese bitte als Fixlist.txt auf deinem USB Stick.
  • Starte deinen Rechner erneut in die Reparaturoptionen
  • Starte nun die FRST.exe erneut und klicke den Entfernen Button.

Das Tool erstellt eine Fixlog.txt auf deinem USB Stick. Poste den Inhalt bitte hier.
__________________

__________________
Alt 23.11.2013, 20:46   #3
safri01
 
"Windows 7: Sperrschirm...... Was tun? - Standard

"Windows 7: Sperrschirm...... Was tun?


Code:
ATTFilter
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 23-11-2013
Ran by SYSTEM at 2013-11-23 20:42:26 Run:1
Running from G:\
Boot Mode: Recovery
==============================================

Content of fixlist:
*****************
HKU\Kfz Sv Büro\...\Winlogon: [Shell] explorer.exe,C:\Users\Kfz Sv Büro\AppData\Roaming\Other.res [94720 2013-08-29] () <==== ATTENTION 
C:\Users\Kfz Sv Büro\AppData\Roaming\Other.res
C:\Users\Kfz Sv Büro\AppData\Local\Temp\*.EXE
         
*****************

HKU\Kfz Sv Büro\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell => Value deleted successfully.
C:\Users\Kfz Sv Büro\AppData\Roaming\Other.res => Moved successfully.
C:\Users\Kfz Sv Büro\AppData\Local\Temp\*.EXE => Moved successfully.

==== End of Fixlog ====
__________________
Alt 23.11.2013, 20:55   #4
aharonov
/// TB-Ausbilder
 
"Windows 7: Sperrschirm...... Was tun? - Standard

"Windows 7: Sperrschirm...... Was tun?


Sperrschirm weg?

Falls ja, dann verschiebe die frst64.exe vom USB-Stick auf den Desktop.
  • Starte dann FRST.
  • Setze bei Optional Scan den Haken bei Addition.txt und drücke Scan.
  • Wenn der Scan abgeschlossen ist, werden zwei neue Logfiles FRST.txt und Addition.txt erstellt und auf dem Desktop gespeichert.
  • Poste den Inhalt dieser beiden Logfiles bitte hier in deinen Thread.
__________________
cheers,
Leo

Alt 23.11.2013, 21:28   #5
safri01
 
"Windows 7: Sperrschirm...... Was tun? - Standard

"Windows 7: Sperrschirm...... Was tun?


frst:


FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 23-11-2013
Ran by Kfz Sv Büro (administrator) on KFZSVBÜRO-PC on 23-11-2013 21:23:12
Running from C:\Users\Kfz Sv Büro\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
() C:\Program Files (x86)\Audatex\FotoCopy\FotoCopy.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
(Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\concentr.exe
(Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\redirector.exe
(Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\Receiver\Receiver.exe
(Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\SelfServicePlugin\SelfServicePlugin.exe
(Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe

==================== Registry (Whitelisted) ==================

HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4908592 2013-10-07] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [CitrixReceiver] - "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Citrix\Receiver Updater.lnk"
HKLM-x32\...\Run: [ConnectionCenter] - C:\Program Files (x86)\Citrix\ICA Client\concentr.exe [395656 2013-10-01] (Citrix Systems, Inc.)
HKLM-x32\...\Run: [Redirector] - C:\Program Files (x86)\Citrix\ICA Client\redirector.exe [153992 2013-10-01] (Citrix Systems, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xB2EC2497689FCE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
Filter: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter-x32: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Kfz Sv Büro\AppData\Roaming\Mozilla\Firefox\Profiles\9tvtf75r.default
FF Homepage: www.google.de
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @Citrix.com/npican - C:\Program Files (x86)\Citrix\ICA Client\npicaN.dll (Citrix Systems, Inc.)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

==================== Services (Whitelisted) =================

R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3538480 2013-10-03] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [301152 2013-09-25] (AVG Technologies CZ, s.r.o.)
S2 Realtek11nCU; C:\Program Files (x86)\REALTEK\11n USB Wireless LAN Utility\RtlService.exe [36864 2010-04-16] (Realtek)

==================== Drivers (Whitelisted) ====================

R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [148792 2013-09-25] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [241464 2013-09-02] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [192824 2013-09-02] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-09-02] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-09-02] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-08-20] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31544 2013-09-08] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [251192 2013-08-01] (AVG Technologies CZ, s.r.o.)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [8192 2005-03-29] ()
S3 RTL8192cu; C:\Windows\System32\DRIVERS\rtwlanu.sys [1038440 2011-05-09] (Realtek Semiconductor Corporation                           )
S3 rtlss; C:\Windows\System32\Drivers\rtlss.sys [27240 2010-06-21] (Realtek Semiconductor Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-23 21:23 - 2013-11-23 21:23 - 00011325 _____ C:\Users\Kfz Sv Büro\Desktop\FRST.txt
2013-11-23 21:21 - 2013-11-23 10:28 - 01957916 _____ (Farbar) C:\Users\Kfz Sv Büro\Desktop\FRST64.exe
2013-11-23 19:05 - 2013-11-23 19:05 - 00000000 ____D C:\FRST
2013-11-23 09:58 - 2013-11-23 09:58 - 00094720 _____ C:\Users\Kfz Sv Büro\Downloads\video_720p.exe
2013-11-19 19:05 - 2013-11-19 19:05 - 00000230 _____ C:\Users\Kfz Sv Büro\Desktop\Citrix XenApp - Anmeldung.url
2013-11-19 15:25 - 2013-11-19 15:25 - 00001022 _____ C:\Users\Public\Desktop\FotoCopy Eingangsverzeichnis.lnk
2013-11-19 15:25 - 2013-11-19 15:25 - 00000000 ____D C:\Program Files (x86)\Audatex
2013-11-19 15:23 - 2011-07-06 08:41 - 03866112 _____ C:\Users\Kfz Sv Büro\Desktop\FotoCopy.msi
2013-11-19 07:49 - 2013-11-19 07:49 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-18 12:51 - 2013-11-18 12:51 - 00001409 _____ C:\Users\Kfz Sv Büro\Desktop\Internet Explorer.lnk
2013-11-18 12:37 - 2013-11-18 14:25 - 00000000 ____D C:\Users\Kfz Sv Büro\AppData\Roaming\ICAClient
2013-11-18 12:36 - 2013-11-18 12:36 - 00000000 ____D C:\ProgramData\Citrix
2013-11-18 12:35 - 2013-11-18 12:35 - 00000000 ____D C:\Users\Kfz Sv Büro\AppData\Local\Citrix
2013-11-18 12:35 - 2013-11-18 12:35 - 00000000 ____D C:\Program Files (x86)\Citrix
2013-11-18 12:28 - 2013-11-18 12:31 - 53664128 _____ (Citrix Systems, Inc.) C:\Users\Kfz Sv Büro\Downloads\CitrixReceiver.exe
2013-11-14 20:11 - 2013-11-14 20:11 - 00000000 ____D C:\Users\Kfz Sv Büro\AppData\Roaming\AVG2014
2013-11-14 20:09 - 2013-11-14 20:09 - 00000981 _____ C:\Users\Public\Desktop\AVG 2014.lnk
2013-11-14 20:08 - 2013-11-14 20:10 - 00000000 ____D C:\ProgramData\AVG2014
2013-11-13 12:37 - 2013-10-12 09:45 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-13 12:37 - 2013-10-12 09:45 - 01364992 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-13 12:37 - 2013-10-12 09:45 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-13 12:37 - 2013-10-12 09:43 - 19269632 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-13 12:37 - 2013-10-12 09:43 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-13 12:37 - 2013-10-12 09:43 - 03959808 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-13 12:37 - 2013-10-12 09:43 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-13 12:37 - 2013-10-12 09:43 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-13 12:37 - 2013-10-12 09:43 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-13 12:37 - 2013-10-12 09:43 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-13 12:37 - 2013-10-12 09:43 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-13 12:37 - 2013-10-12 09:43 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-13 12:37 - 2013-10-12 09:43 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-13 12:37 - 2013-10-12 09:43 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-13 12:37 - 2013-10-12 08:03 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-13 12:37 - 2013-10-12 08:03 - 01138176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-13 12:37 - 2013-10-12 08:02 - 14355968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-13 12:37 - 2013-10-12 08:02 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-13 12:37 - 2013-10-12 08:02 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-13 12:37 - 2013-10-12 08:02 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-13 12:37 - 2013-10-12 08:02 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-13 12:37 - 2013-10-12 08:02 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-13 12:37 - 2013-10-12 08:02 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-13 12:37 - 2013-10-12 08:02 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-13 12:37 - 2013-10-12 08:02 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-13 12:37 - 2013-10-12 08:02 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-13 12:37 - 2013-10-12 08:02 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-13 12:37 - 2013-10-12 07:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-13 12:37 - 2013-10-12 07:08 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-13 12:37 - 2013-10-12 06:44 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-13 12:37 - 2013-10-12 06:15 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-13 10:12 - 2013-11-13 10:12 - 00000000 ____D C:\ProgramData\ABBYY
2013-11-13 10:11 - 2013-11-13 10:11 - 00000000 ____D C:\Users\Kfz Sv Büro\Documents\AnyMP4 Studio
2013-11-13 10:11 - 2013-11-13 10:11 - 00000000 ____D C:\Users\Kfz Sv Büro\AppData\Local\AnyMP4 Studio
2013-11-13 08:47 - 2013-11-13 09:17 - 346670920 _____ (AnyMP4 Studio                                               ) C:\Users\Kfz Sv Büro\Downloads\pdf-converter-ultimate.exe
2013-11-13 08:30 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-13 08:29 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-11-13 08:29 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-13 08:29 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-13 08:29 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-11-13 08:29 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-11-13 08:29 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-11-13 08:29 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2013-11-13 08:29 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2013-11-13 08:29 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-11-13 08:29 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2013-11-13 08:29 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-11-13 08:29 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2013-11-13 08:29 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-13 08:29 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-11-13 08:29 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-11-13 08:29 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-11-13 08:29 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-11-13 08:29 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-11-13 08:29 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-11-13 08:29 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-11-13 08:29 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-11-13 08:29 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-11-13 08:29 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-11-13 08:29 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-11-13 08:29 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-11-13 08:29 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-11-13 08:29 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-11-13 08:29 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-11-13 08:29 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-11-08 08:20 - 2013-11-08 08:20 - 00000000 ____D C:\Users\Kfz Sv Büro\AppData\Local\PDF24
2013-11-08 08:18 - 2013-11-08 08:18 - 16198832 _____ (Geek Software GmbH                                          ) C:\Users\Kfz Sv Büro\Downloads\pdf24-creator-6.0.1.exe
2013-11-04 13:08 - 2013-11-04 13:08 - 00001991 _____ C:\Users\Kfz Sv Büro\Desktop\HP Photosmart C3100 series - Verknüpfung.lnk
2013-11-04 13:06 - 2013-11-04 13:06 - 00000375 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2013-10-31 23:56 - 2013-11-19 16:19 - 00000000 ____D C:\Users\Kfz Sv Büro\AppData\Local\Avg2014

==================== One Month Modified Files and Folders =======

2013-11-23 21:24 - 2013-08-22 21:05 - 00000000 ____D C:\ProgramData\MFAData
2013-11-23 21:23 - 2013-11-23 21:23 - 00011325 _____ C:\Users\Kfz Sv Büro\Desktop\FRST.txt
2013-11-23 21:22 - 2011-04-12 08:43 - 00711162 _____ C:\Windows\system32\perfh007.dat
2013-11-23 21:22 - 2011-04-12 08:43 - 00152434 _____ C:\Windows\system32\perfc007.dat
2013-11-23 21:22 - 2009-07-14 06:13 - 01640528 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-23 21:21 - 2009-07-14 05:51 - 00030009 _____ C:\Windows\setupact.log
2013-11-23 21:20 - 2013-10-20 11:13 - 00000276 _____ C:\Windows\Tasks\AutoKMS.job
2013-11-23 21:20 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-23 19:05 - 2013-11-23 19:05 - 00000000 ____D C:\FRST
2013-11-23 10:28 - 2013-11-23 21:21 - 01957916 _____ (Farbar) C:\Users\Kfz Sv Büro\Desktop\FRST64.exe
2013-11-23 10:00 - 2013-10-18 08:47 - 00000000 ____D C:\Users\Kfz Sv Büro\Downloads\Neuer Ordner
2013-11-23 10:00 - 2013-08-22 18:29 - 01658020 _____ C:\Windows\WindowsUpdate.log
2013-11-23 09:58 - 2013-11-23 09:58 - 00094720 _____ C:\Users\Kfz Sv Büro\Downloads\video_720p.exe
2013-11-23 07:52 - 2013-10-13 07:48 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-23 07:01 - 2009-07-14 05:45 - 00022528 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-23 07:01 - 2009-07-14 05:45 - 00022528 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-22 17:34 - 2010-11-21 04:47 - 00048558 _____ C:\Windows\PFRO.log
2013-11-19 19:05 - 2013-11-19 19:05 - 00000230 _____ C:\Users\Kfz Sv Büro\Desktop\Citrix XenApp - Anmeldung.url
2013-11-19 16:37 - 2013-10-20 11:13 - 00000000 ____D C:\Windows\AutoKMS
2013-11-19 16:19 - 2013-10-31 23:56 - 00000000 ____D C:\Users\Kfz Sv Büro\AppData\Local\Avg2014
2013-11-19 15:25 - 2013-11-19 15:25 - 00001022 _____ C:\Users\Public\Desktop\FotoCopy Eingangsverzeichnis.lnk
2013-11-19 15:25 - 2013-11-19 15:25 - 00000000 ____D C:\Program Files (x86)\Audatex
2013-11-19 14:01 - 2013-08-22 19:52 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-19 07:49 - 2013-11-19 07:49 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-18 14:25 - 2013-11-18 12:37 - 00000000 ____D C:\Users\Kfz Sv Büro\AppData\Roaming\ICAClient
2013-11-18 12:51 - 2013-11-18 12:51 - 00001409 _____ C:\Users\Kfz Sv Büro\Desktop\Internet Explorer.lnk
2013-11-18 12:36 - 2013-11-18 12:36 - 00000000 ____D C:\ProgramData\Citrix
2013-11-18 12:35 - 2013-11-18 12:35 - 00000000 ____D C:\Users\Kfz Sv Büro\AppData\Local\Citrix
2013-11-18 12:35 - 2013-11-18 12:35 - 00000000 ____D C:\Program Files (x86)\Citrix
2013-11-18 12:31 - 2013-11-18 12:28 - 53664128 _____ (Citrix Systems, Inc.) C:\Users\Kfz Sv Büro\Downloads\CitrixReceiver.exe
2013-11-14 20:11 - 2013-11-14 20:11 - 00000000 ____D C:\Users\Kfz Sv Büro\AppData\Roaming\AVG2014
2013-11-14 20:10 - 2013-11-14 20:08 - 00000000 ____D C:\ProgramData\AVG2014
2013-11-14 20:10 - 2013-08-22 21:07 - 00000000 ____D C:\Program Files (x86)\AVG
2013-11-14 20:09 - 2013-11-14 20:09 - 00000981 _____ C:\Users\Public\Desktop\AVG 2014.lnk
2013-11-14 18:32 - 2013-10-15 18:54 - 00000000 ____D C:\Users\Kfz Sv Büro\Desktop\SV Büro Oldenburg
2013-11-14 15:59 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-11-13 12:38 - 2013-08-22 22:31 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-11-13 12:36 - 2013-08-22 20:01 - 00000000 ____D C:\Windows\system32\MRT
2013-11-13 12:35 - 2013-08-22 20:01 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-11-13 10:12 - 2013-11-13 10:12 - 00000000 ____D C:\ProgramData\ABBYY
2013-11-13 10:11 - 2013-11-13 10:11 - 00000000 ____D C:\Users\Kfz Sv Büro\Documents\AnyMP4 Studio
2013-11-13 10:11 - 2013-11-13 10:11 - 00000000 ____D C:\Users\Kfz Sv Büro\AppData\Local\AnyMP4 Studio
2013-11-13 09:17 - 2013-11-13 08:47 - 346670920 _____ (AnyMP4 Studio                                               ) C:\Users\Kfz Sv Büro\Downloads\pdf-converter-ultimate.exe
2013-11-08 08:20 - 2013-11-08 08:20 - 00000000 ____D C:\Users\Kfz Sv Büro\AppData\Local\PDF24
2013-11-08 08:18 - 2013-11-08 08:18 - 16198832 _____ (Geek Software GmbH                                          ) C:\Users\Kfz Sv Büro\Downloads\pdf24-creator-6.0.1.exe
2013-11-04 13:08 - 2013-11-04 13:08 - 00001991 _____ C:\Users\Kfz Sv Büro\Desktop\HP Photosmart C3100 series - Verknüpfung.lnk
2013-11-04 13:06 - 2013-11-04 13:06 - 00000375 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2013-10-26 08:07 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-10-25 06:52 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Public\Libraries

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-20 07:07

==================== End Of Log ============================
--- --- ---

--- --- ---


Addition:

Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 23-11-2013
Ran by Kfz Sv Büro at 2013-11-23 21:24:21
Running from C:\Users\Kfz Sv Büro\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}

==================== Installed Programs ======================

64 Bit HP CIO Components Installer (Version: 7.2.4)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.117)
Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05)
AVG 2014 (Version: 14.0.3629)
AVG 2014 (Version: 14.0.4158)
AVG 2014 (Version: 2014.0.4158)
Cisco EAP-FAST Module (x32 Version: 2.2.14)
Cisco LEAP Module (x32 Version: 1.0.19)
Cisco PEAP Module (x32 Version: 1.1.6)
Citrix Authentication Manager (x32 Version: 5.1.0.62606)
Citrix Receiver (DV) (x32 Version: 14.1.0.0)
Citrix Receiver (HDX Flash-Umleitung) (x32 Version: 14.1.0.0)
Citrix Receiver (USB) (x32 Version: 14.1.0.0)
Citrix Receiver (x32 Version: 14.1.0.0)
Citrix Receiver Inside (x32 Version: 4.1.0.56471)
Citrix Receiver Updater (x32 Version: 4.1.0.56461)
Citrix Receiver(Aero) (x32 Version: 14.1.0.0)
D3DX10 (x32 Version: 15.4.2368.0902)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32)
FotoCopy (x32 Version: 1.4)
Junk Mail filter update (x32 Version: 16.4.3508.0205)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000)
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Mozilla Firefox 25.0.1 (x86 de) (x32 Version: 25.0.1)
Mozilla Maintenance Service (x32 Version: 25.0.1)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSVCRT110 (x32 Version: 16.4.1108.0727)
MSVCRT110_amd64 (Version: 16.4.1109.0912)
Online Plug-in (x32 Version: 14.1.0.0)
Photo Common (x32 Version: 16.4.3508.0205)
REALTEK Wireless LAN Driver and Utility (x32 Version: 1.00.0180)
Self-Service Plug-in (x32 Version: 4.1.0.41738)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32)
Update for Microsoft Word 2010 (KB2827323) 32-Bit Edition (x32)
Visual Studio 2010 x64 Redistributables (Version: 13.0.0.1)
Visual Studio 2012 x64 Redistributables (Version: 14.0.0.1)
Visual Studio 2012 x86 Redistributables (x32 Version: 14.0.0.1)
windata 8 (x32 Version: 08.08.0000)
Windows Live Communications Platform (x32 Version: 16.4.3508.0205)
Windows Live Essentials (x32 Version: 16.4.3508.0205)
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0)
Windows Live Installer (x32 Version: 16.4.3508.0205)
Windows Live Mail (x32 Version: 16.4.3508.0205)
Windows Live MIME IFilter (Version: 16.4.3508.0205)
Windows Live Photo Common (x32 Version: 16.4.3508.0205)
Windows Live PIMT Platform (x32 Version: 16.4.3508.0205)
Windows Live SOXE (x32 Version: 16.4.3508.0205)
Windows Live SOXE Definitions (x32 Version: 16.4.3508.0205)
Windows Live UX Platform (x32 Version: 16.4.3508.0205)
Windows Live UX Platform Language Pack (x32 Version: 16.4.3508.0205)
Windows Live Writer (x32 Version: 16.4.3508.0205)
Windows Live Writer Resources (x32 Version: 16.4.3508.0205)

==================== Restore Points  =========================

20-10-2013 08:50:01 Geplanter Prüfpunkt
30-10-2013 16:58:34 Geplanter Prüfpunkt
01-11-2013 06:41:09 Installed AVG 2014
10-11-2013 07:37:15 Geplanter Prüfpunkt
13-11-2013 11:34:07 Windows Update
14-11-2013 19:07:44 Installed AVG 2014
14-11-2013 19:08:17 Installed AVG 2014
19-11-2013 14:25:19 FotoCopy wird installiert

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {1AA56278-82B0-4767-9A7F-9948A808A633} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {72678C1D-FFDE-45FC-8C14-4487D1250D0E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-13] (Adobe Systems Incorporated)
Task: {86D84DA7-7344-4F82-8186-921E08148E96} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AutoKMS.job => C:\Windows\AutoKMS\AutoKMS.exe

==================== Loaded Modules (whitelisted) =============

2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (11/23/2013 09:22:22 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/23/2013 09:21:17 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1". Fehler in Manifest- oder Richtliniendatei "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"2" in Zeile  Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0".
Definition: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (11/23/2013 10:02:58 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/23/2013 10:01:59 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1". Fehler in Manifest- oder Richtliniendatei "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"2" in Zeile  Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0".
Definition: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (11/23/2013 09:58:24 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/23/2013 09:57:09 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1". Fehler in Manifest- oder Richtliniendatei "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"2" in Zeile  Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0".
Definition: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (11/23/2013 08:17:35 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1". Fehler in Manifest- oder Richtliniendatei "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"2" in Zeile  Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0".
Definition: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (11/23/2013 08:17:13 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1". Fehler in Manifest- oder Richtliniendatei "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"2" in Zeile  Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0".
Definition: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (11/23/2013 07:11:59 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1". Fehler in Manifest- oder Richtliniendatei "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"2" in Zeile  Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0".
Definition: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (11/23/2013 06:55:31 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (11/23/2013 09:24:05 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.

Modulpfad: C:\Windows\system32\Rtlihvs.dll
Fehlercode: 126

Error: (11/23/2013 09:20:52 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Realtek11nCU" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%193

Error: (11/23/2013 09:20:47 PM) (Source: atikmdag) (User: )
Description: Display is not active

Error: (11/23/2013 09:20:47 PM) (Source: atikmdag) (User: )
Description: CPLIB :: General - Invalid Parameter

Error: (11/23/2013 10:03:12 AM) (Source: atikmdag) (User: )
Description: Display is not active

Error: (11/23/2013 10:03:02 AM) (Source: atikmdag) (User: )
Description: Display is not active

Error: (11/23/2013 10:01:30 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Realtek11nCU" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%193

Error: (11/23/2013 10:01:29 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.

Modulpfad: C:\Windows\system32\Rtlihvs.dll
Fehlercode: 126

Error: (11/23/2013 10:01:26 AM) (Source: atikmdag) (User: )
Description: Display is not active

Error: (11/23/2013 10:01:26 AM) (Source: atikmdag) (User: )
Description: CPLIB :: General - Invalid Parameter


Microsoft Office Sessions:
=========================
Error: (11/23/2013 09:22:22 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/23/2013 09:21:17 PM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"C:\Program Files (x86)\Citrix\ICA Client\MFC80.DLLC:\Program Files (x86)\Citrix\ICA Client\Microsoft.VC80.MFCLOC.MANIFEST5

Error: (11/23/2013 10:02:58 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/23/2013 10:01:59 AM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"C:\Program Files (x86)\Citrix\ICA Client\MFC80.DLLC:\Program Files (x86)\Citrix\ICA Client\Microsoft.VC80.MFCLOC.MANIFEST5

Error: (11/23/2013 09:58:24 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/23/2013 09:57:09 AM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"C:\Program Files (x86)\Citrix\ICA Client\MFC80.DLLC:\Program Files (x86)\Citrix\ICA Client\Microsoft.VC80.MFCLOC.MANIFEST5

Error: (11/23/2013 08:17:35 AM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"C:\Program Files (x86)\Citrix\ICA Client\MFC80.DLLC:\Program Files (x86)\Citrix\ICA Client\Microsoft.VC80.MFCLOC.MANIFEST5

Error: (11/23/2013 08:17:13 AM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"C:\Program Files (x86)\Citrix\ICA Client\MFC80.DLLC:\Program Files (x86)\Citrix\ICA Client\Microsoft.VC80.MFCLOC.MANIFEST5

Error: (11/23/2013 07:11:59 AM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"C:\Program Files (x86)\Citrix\ICA Client\MFC80.DLLC:\Program Files (x86)\Citrix\ICA Client\Microsoft.VC80.MFCLOC.MANIFEST5

Error: (11/23/2013 06:55:31 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


==================== Memory info =========================== 

Percentage of memory in use: 33%
Total physical RAM: 3838.18 MB
Available physical RAM: 2548.77 MB
Total Pagefile: 7674.54 MB
Available Pagefile: 6345.92 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:465.66 GB) (Free:414.62 GB) NTFS
Drive e: () (Removable) (Total:14.63 GB) (Free:14.63 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 588968CC)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=466 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (Size: 15 GB) (Disk ID: 758D54DD)
Partition 1: (Not Active) - (Size=15 GB) - (Type=0C)

==================== End Of Log ============================


Alt 23.11.2013, 21:56   #6
aharonov
/// TB-Ausbilder
 
"Windows 7: Sperrschirm...... Was tun? - Standard

"Windows 7: Sperrschirm...... Was tun?


Wie läuft der Rechner?


Schritt 1

Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.




Schritt 2


ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

__________________
--> "Windows 7: Sperrschirm...... Was tun?

Alt 07.01.2014, 15:10   #7
aharonov
/// TB-Ausbilder
 
"Windows 7: Sperrschirm...... Was tun? - Standard

"Windows 7: Sperrschirm...... Was tun?


Fehlende Rückmeldung
Dieses Thema wurde aus meinen Abos gelöscht. Somit bekomme ich keine Benachrichtigung mehr über neue Antworten.
Schreib mir eine PM, falls du das Thema doch wieder fortsetzen möchtest. Dann machen wir hier weiter.

Jeder andere bitte diese Anleitung lesen und einen eigenen Thread erstellen.
__________________
cheers,
Leo

Antwort

Themen zu "Windows 7: Sperrschirm...... Was tun?
adobe, adobe flash player, association, avg, bildschirm, crypt, desktop, explorer, explorer.exe, flash player, logfile, microsoft, mozilla, realtek, registry, scan, secur, services.exe, software, svchost.exe, system, temp, usb, windows, winlogon, winlogon.exe


« Whilokii entfernen | rvzr-a.akamaihd.net virus auf dem rechner »


Ähnliche Themen: "Windows 7: Sperrschirm...... Was tun?


  1. Windows 7: BKA-Trojaner ohne Sperrschirm
    Log-Analyse und Auswertung - 08.07.2015 (9)
  2. Windows 8.1 64-Bit: BKA-Trojaner ohne Sperrschirm
    Log-Analyse und Auswertung - 26.06.2015 (7)
  3. Windows 7 : Trojaner mit Sperrschirm "GVU"
    Plagegeister aller Art und deren Bekämpfung - 13.06.2015 (1)
  4. Windows 7: BKA-Trojaner ohne Sperrschirm
    Log-Analyse und Auswertung - 17.03.2015 (17)
  5. Windows XP-Trojaner mit Sperrschirm
    Plagegeister aller Art und deren Bekämpfung - 08.02.2015 (16)
  6. Windows 8.1 64-Bit: BKA-Trojaner ohne Sperrschirm
    Log-Analyse und Auswertung - 06.02.2015 (17)
  7. Windows 7 BKA Trojaner mit Sperrschirm
    Log-Analyse und Auswertung - 11.08.2014 (11)
  8. Windows XP: Sperrschirm nach Polizeitrojaner
    Log-Analyse und Auswertung - 16.02.2014 (8)
  9. Windows XP: Sperrschirm nach Bundespolizei-Virus
    Log-Analyse und Auswertung - 02.02.2014 (9)
  10. "BKA-Trojaner" Sperrschirm,Abgesicherter Modus funktioniert nicht!
    Plagegeister aller Art und deren Bekämpfung - 17.11.2013 (20)
  11. XP Prof. Sperrschirm "Interpol-Virus"
    Log-Analyse und Auswertung - 13.11.2013 (4)
  12. Windows 7: Bka-Interpol-Trojaner mit Sperrschirm
    Plagegeister aller Art und deren Bekämpfung - 09.11.2013 (5)
  13. Trojaner mit Sperrschirm im Windows XP
    Plagegeister aller Art und deren Bekämpfung - 31.10.2013 (13)
  14. Windows 7: BKA/Interpol Sperrschirm
    Log-Analyse und Auswertung - 19.10.2013 (9)
  15. Windows XP : GVU Trojaner mit Sperrschirm
    Plagegeister aller Art und deren Bekämpfung - 10.09.2013 (23)
  16. Windows XP: GVU-Trojaner mit Sperrschirm
    Plagegeister aller Art und deren Bekämpfung - 06.09.2013 (24)
  17. Windows Vista: GVU-Trojaner mit Sperrschirm
    Plagegeister aller Art und deren Bekämpfung - 09.08.2013 (3)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema "Windows 7: Sperrschirm...... Was tun? - Was muß ich tun um den Speer Bildschirm wieder los zu werden??? Hier mein Logfile: Code: Alles auswählen Aufklappen ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: - "Windows 7: Sperrschirm...... Was tun?...
Archiv
Du betrachtest: "Windows 7: Sperrschirm...... Was tun? auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129