Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Windows 7: weisser Bildschirm nach Start!

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

 
Alt 07.01.2014, 18:32   #16
spax.ink
 
Windows 7: weisser Bildschirm nach Start! - Standard

Windows 7: weisser Bildschirm nach Start!



Hi, also erstmal das Log von dem ESET Online Scanner:
Code:
ATTFilter
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=681cc870c6306849b8ecf972c262c417
# engine=16550
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-01-07 04:48:25
# local_time=2014-01-07 05:48:25 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7600 NT 
# compatibility_mode=5893 16776574 100 94 332664 141552048 0 0
# scanned=282188
# found=0
# cleaned=0
# scan_time=4914
         
Security Log:
Code:
ATTFilter
 Results of screen317's Security Check version 0.99.78  
 Windows 7  x86   
 Out of date service pack!! 
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
 WMI entry may not exist for antivirus; attempting automatic update. 
`````````Anti-malware/Other Utilities Check:````````` 
 Malwarebytes Anti-Malware Version 1.75.0.1300  
 Java(TM) 6 Update 24  
 Java version out of Date! 
 Google Chrome 31.0.1650.63  
````````Process Check: objlist.exe by Laurent````````  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
         
Und zum Schluss noch die FRST Log Datei:

FRST Logfile:

FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 04-01-2014
Ran by Administrator (administrator) on SANDRA-PC on 07-01-2014 18:27:00
Running from D:\Downloads\Programme Reparatur Sandra Rechner (weisser Bildschirm)
Microsoft Windows 7 Ultimate  (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Telefónica) C:\Program Files\o2\Mobile Connection Manager\ImpWiFiSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(Sun Microsystems, Inc.) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Apple Inc.) C:\Program Files\Apple Software Update\SoftwareUpdate.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2010-11-29] (Apple Inc.)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [249064 2010-10-29] (Sun Microsystems, Inc.)
HKLM\...\Run: [AppleSyncNotifier] - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [58656 2011-04-20] (Apple Inc.)
HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59240 2011-11-01] (Apple Inc.)
HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [421736 2011-12-08] (Apple Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x1E713FDCC608CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll No File
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.dll No File
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.dll No File
Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll No File
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll No File
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\kf4ilflk.default
FF Homepage: hxxp://go.microsoft.com/fwlink/?LinkId=69157
FF NetworkProxy: "type", 0
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

Chrome: 
=======
CHR RestoreOnStartup: "hxxp://www.google.de/"
CHR Extension: (Google Docs) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Google Wallet) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0
CHR Extension: (Gmail) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1

========================== Services (Whitelisted) =================

R2 TGCM_ImportWiFiSvc; C:\Program Files\o2\Mobile Connection Manager\ImpWiFiSvc.exe [201080 2011-06-14] (Telefónica)
S3 fsssvc; "C:\Program Files\Windows Live\Family Safety\fsssvc.exe" [x]
S4 wlcrasvc; "C:\Program Files\Windows Live\Mesh\wlcrasvc.exe" [x]

==================== Drivers (Whitelisted) ====================

S3 MOSUMAC; C:\Windows\System32\DRIVERS\MOSUMAC.SYS [40960 2007-06-04] (--)
S3 catchme; \??\C:\Users\ADMINI~1\AppData\Local\Temp\catchme.sys [x]
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [x]
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [x]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [x]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [x]
S3 lgbusenum; system32\DRIVERS\lgbtbus.sys [x]
S3 LGVMODEM; system32\DRIVERS\lgvmodem.sys [x]
S3 usbbus; system32\DRIVERS\lgusbbus.sys [x]
S3 UsbDiag; system32\DRIVERS\lgusbdiag.sys [x]
S3 USBModem; system32\DRIVERS\lgusbmodem.sys [x]
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [48128 2009-07-14] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-07 18:26 - 2014-01-07 18:26 - 00000000 ____D C:\FRST
2014-01-07 16:21 - 2014-01-07 16:21 - 00000000 ____D C:\Users\Administrator\AppData\Local\Apple
2014-01-04 23:51 - 2012-12-16 15:25 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2014-01-04 23:51 - 2012-12-16 15:25 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2014-01-04 23:42 - 2013-02-22 05:05 - 12324352 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-01-04 23:42 - 2013-02-22 04:47 - 09738752 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-01-04 23:42 - 2013-02-22 04:46 - 01800704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-01-04 23:42 - 2013-02-22 04:38 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-01-04 23:42 - 2013-02-22 04:38 - 01104384 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-01-04 23:42 - 2013-02-22 04:37 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-01-04 23:42 - 2013-02-22 04:36 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-01-04 23:42 - 2013-02-22 04:35 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-01-04 23:42 - 2013-02-22 04:34 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-01-04 23:42 - 2013-02-22 04:34 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-01-04 23:42 - 2013-02-22 04:34 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-01-04 23:42 - 2013-02-22 04:33 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-01-04 23:42 - 2013-02-22 04:32 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-01-04 23:42 - 2013-02-22 04:31 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-01-04 23:42 - 2013-02-22 04:31 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-01-04 23:42 - 2013-02-22 04:28 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-01-04 23:38 - 2012-07-26 04:39 - 00526952 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2014-01-04 23:38 - 2012-07-26 04:39 - 00047720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2014-01-04 23:38 - 2012-07-26 03:46 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2014-01-04 23:38 - 2012-06-02 15:34 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2014-01-04 23:37 - 2012-07-26 04:21 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2014-01-04 23:37 - 2012-07-26 04:20 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
2014-01-04 23:37 - 2012-07-26 04:20 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2014-01-04 23:37 - 2012-07-26 04:20 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2014-01-04 23:37 - 2012-07-26 04:20 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
2014-01-04 23:37 - 2012-07-26 03:33 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2014-01-04 23:37 - 2012-07-26 03:32 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2014-01-04 23:37 - 2012-06-02 15:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2014-01-04 23:36 - 2012-03-01 06:53 - 00019312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
2014-01-04 23:36 - 2012-03-01 06:45 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2014-01-04 23:36 - 2012-03-01 06:40 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
2014-01-04 23:34 - 2012-06-09 05:46 - 12868608 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-01-04 22:57 - 2014-01-04 22:57 - 00000629 _____ C:\Users\Administrator\Desktop\JRT.txt
2014-01-04 22:54 - 2014-01-04 22:54 - 01036305 _____ (Thisisu) C:\Users\Administrator\Desktop\JRT.exe
2014-01-04 22:54 - 2014-01-04 22:54 - 00000000 ____D C:\Windows\ERUNT
2014-01-04 22:38 - 2014-01-04 22:20 - 01233962 _____ C:\Users\Administrator\Desktop\adwcleaner.exe
2014-01-04 22:17 - 2014-01-07 16:10 - 00000224 _____ C:\Windows\setupact.log
2014-01-04 22:17 - 2014-01-04 22:17 - 00000000 _____ C:\Windows\setuperr.log
2014-01-04 22:05 - 2013-01-04 05:55 - 01287528 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-01-04 22:05 - 2013-01-04 05:55 - 00187240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-01-04 22:05 - 2012-11-22 10:33 - 00627712 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-01-04 22:05 - 2012-04-28 04:19 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-01-04 22:04 - 2012-07-04 22:26 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2014-01-04 22:04 - 2012-07-04 22:23 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2014-01-04 22:04 - 2012-07-04 22:23 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2014-01-04 22:04 - 2012-05-05 08:44 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2014-01-04 22:04 - 2012-04-02 05:46 - 03958128 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2014-01-04 22:04 - 2012-04-02 05:46 - 03902320 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-01-04 22:03 - 2012-12-07 06:04 - 00308736 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2014-01-04 22:03 - 2012-12-07 05:57 - 02576384 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2014-01-04 22:03 - 2012-12-07 04:21 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs
2014-01-04 22:03 - 2012-12-07 04:21 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
2014-01-04 22:03 - 2012-12-07 04:21 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
2014-01-04 22:03 - 2012-12-07 04:21 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
2014-01-04 22:03 - 2012-12-07 04:21 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
2014-01-04 22:03 - 2012-12-07 04:21 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
2014-01-04 22:03 - 2012-12-07 04:21 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
2014-01-04 22:03 - 2012-12-07 04:21 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs
2014-01-04 22:03 - 2012-12-07 04:21 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
2014-01-04 22:03 - 2012-12-07 04:21 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs
2014-01-04 22:03 - 2012-12-07 04:21 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
2014-01-04 22:03 - 2012-12-07 04:21 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
2014-01-04 22:03 - 2012-12-07 04:21 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
2014-01-04 22:03 - 2012-12-07 04:21 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
2014-01-04 22:03 - 2012-02-15 06:44 - 00826368 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2014-01-04 22:03 - 2012-02-15 05:22 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2014-01-04 22:02 - 2013-03-01 04:11 - 02345984 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-04 22:01 - 2012-11-20 06:10 - 00219136 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-01-04 22:01 - 2012-11-02 05:48 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2014-01-04 22:01 - 2012-08-11 00:54 - 00541184 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-01-04 21:59 - 2013-04-12 14:58 - 01210728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-01-04 21:59 - 2012-08-24 18:10 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2014-01-04 21:59 - 2012-08-02 18:05 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2014-01-04 21:58 - 2014-01-04 21:58 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Malwarebytes
2014-01-04 21:57 - 2014-01-04 21:57 - 00001067 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-04 21:57 - 2014-01-04 21:57 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-04 21:57 - 2014-01-04 21:57 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2014-01-04 21:57 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-04 21:53 - 2012-09-25 22:55 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2014-01-04 21:53 - 2012-09-06 17:48 - 00245616 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
2014-01-04 21:53 - 2012-05-02 05:52 - 00163328 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2014-01-04 21:53 - 2012-04-26 05:48 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-01-04 21:53 - 2012-04-26 05:48 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2014-01-04 21:53 - 2012-04-26 05:43 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe
2014-01-04 21:53 - 2012-04-07 12:34 - 02342400 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-01-04 21:53 - 2012-03-17 08:20 - 00056688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2014-01-04 21:52 - 2012-11-09 05:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-01-04 21:52 - 2012-03-03 06:40 - 01170944 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-01-04 21:52 - 2012-03-03 06:40 - 01074176 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-01-04 21:52 - 2012-03-03 06:40 - 00739840 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-01-04 21:52 - 2012-03-03 06:40 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2014-01-04 21:52 - 2012-03-03 06:40 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2014-01-04 21:51 - 2013-01-04 05:50 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2014-01-04 21:51 - 2013-01-04 05:46 - 00868352 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-01-04 21:51 - 2013-01-04 05:46 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-01-04 21:51 - 2013-01-04 05:43 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2014-01-04 21:51 - 2013-01-04 05:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2014-01-04 21:51 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2014-01-04 21:51 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2014-01-04 21:51 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2014-01-04 21:51 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2014-01-04 21:51 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2014-01-04 21:51 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2014-01-04 21:51 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2014-01-04 21:51 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2014-01-04 21:51 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2014-01-04 21:51 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2014-01-04 21:51 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2014-01-04 21:51 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2014-01-04 21:51 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-01-04 21:51 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2014-01-04 21:51 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2014-01-04 21:51 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2014-01-04 21:51 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2014-01-04 21:51 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2014-01-04 21:51 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2014-01-04 21:51 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2014-01-04 21:51 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2014-01-04 21:51 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2014-01-04 21:51 - 2013-01-04 03:59 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2014-01-04 21:51 - 2013-01-04 03:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2014-01-04 21:51 - 2013-01-04 03:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2014-01-04 21:51 - 2013-01-04 03:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2014-01-04 21:51 - 2013-01-04 03:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2014-01-03 23:36 - 2014-01-03 23:37 - 00000000 ____D C:\Windows\system32\MRT
2014-01-03 23:06 - 2014-01-03 23:06 - 00000017 _____ C:\Users\Administrator\AppData\Local\resmon.resmoncfg
2014-01-03 22:02 - 2014-01-07 18:12 - 00001112 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-03 22:02 - 2014-01-07 16:10 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-03 22:02 - 2014-01-03 22:03 - 00000000 ____D C:\Users\Administrator\AppData\Local\Google
2014-01-03 22:02 - 2014-01-03 22:02 - 00000000 ____D C:\Users\Administrator\AppData\Local\Deployment
2014-01-03 22:02 - 2014-01-03 22:02 - 00000000 ____D C:\Users\Administrator\AppData\Local\Apps\2.0
2014-01-03 22:01 - 2014-01-03 22:01 - 00000000 ____D C:\Users\Administrator\Documents\Updater5
2014-01-03 22:00 - 2014-01-03 22:01 - 00000000 ____D C:\Users\Administrator\AppData\Local\Adobe
2014-01-03 21:59 - 2014-01-03 21:59 - 00007704 _____ C:\ComboFix.txt
2014-01-03 21:33 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2014-01-03 21:33 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2014-01-03 21:33 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-01-03 21:33 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-01-03 21:33 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-01-03 21:33 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2014-01-03 21:33 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2014-01-03 21:33 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2014-01-03 21:30 - 2014-01-03 21:30 - 00000458 __RSH C:\ProgramData\ntuser.pol
2014-01-03 21:22 - 2014-01-03 21:59 - 00000000 ____D C:\Qoobox
2014-01-03 21:22 - 2014-01-03 21:57 - 00000000 ____D C:\Windows\erdnt
2014-01-03 21:21 - 2014-01-03 21:22 - 05160282 ____R (Swearware) C:\Users\Administrator\Downloads\ComboFix.exe
2014-01-03 21:12 - 2014-01-03 21:12 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Macromedia
2014-01-03 21:11 - 2014-01-03 21:12 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Mozilla
2014-01-03 21:11 - 2014-01-03 21:11 - 00000000 ____D C:\Users\Administrator\AppData\Local\Mozilla
2014-01-03 21:11 - 2014-01-03 21:11 - 00000000 _____ C:\Windows\nsreg.dat
2014-01-03 21:05 - 2014-01-03 21:05 - 00062952 _____ C:\Users\Administrator\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-03 21:03 - 2014-01-04 23:09 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Apple Computer
2014-01-03 21:03 - 2014-01-04 23:09 - 00000000 ____D C:\Users\Administrator\AppData\Local\Apple Computer
2014-01-03 21:02 - 2014-01-03 22:01 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Adobe
2014-01-03 21:02 - 2014-01-03 21:02 - 00001409 _____ C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-03 21:02 - 2014-01-03 21:02 - 00000020 ___SH C:\Users\Administrator\ntuser.ini
2014-01-03 21:02 - 2014-01-03 21:02 - 00000000 _SHDL C:\Users\Administrator\Startmenü
2014-01-03 21:02 - 2014-01-03 21:02 - 00000000 _SHDL C:\Users\Administrator\Netzwerkumgebung
2014-01-03 21:02 - 2014-01-03 21:02 - 00000000 _SHDL C:\Users\Administrator\Druckumgebung
2014-01-03 21:02 - 2014-01-03 21:02 - 00000000 _SHDL C:\Users\Administrator\Documents\Eigene Musik
2014-01-03 21:02 - 2014-01-03 21:02 - 00000000 _SHDL C:\Users\Administrator\Documents\Eigene Bilder
2014-01-03 21:02 - 2014-01-03 21:02 - 00000000 _SHDL C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-03 21:02 - 2014-01-03 21:02 - 00000000 _SHDL C:\Users\Administrator\AppData\Local\Verlauf
2014-01-03 21:02 - 2014-01-03 21:02 - 00000000 ____D C:\Users\Administrator
2014-01-03 21:02 - 2009-07-14 05:42 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-01-03 21:02 - 2009-07-14 05:37 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-01-03 20:57 - 2014-01-03 20:57 - 00003296 ____N C:\bootsqm.dat
2014-01-02 20:18 - 2012-05-14 05:37 - 00768512 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2014-01-02 19:45 - 2012-06-02 23:19 - 01933848 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-01-02 19:45 - 2012-06-02 23:19 - 00577048 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-01-02 19:45 - 2012-06-02 23:19 - 00053784 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-01-02 19:45 - 2012-06-02 23:19 - 00045080 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-01-02 19:45 - 2012-06-02 23:19 - 00035864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-01-02 19:45 - 2012-06-02 23:12 - 02422272 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-01-02 19:45 - 2012-06-02 23:12 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-01-02 19:44 - 2012-06-02 15:19 - 00171904 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-01-02 19:44 - 2012-06-02 15:12 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-01-02 18:00 - 2014-01-02 18:00 - 00000000 ____D C:\Program Files\GUM76FA.tmp

==================== One Month Modified Files and Folders =======

2014-01-07 18:26 - 2014-01-07 18:26 - 00000000 ____D C:\FRST
2014-01-07 18:12 - 2014-01-03 22:02 - 00001112 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-07 18:07 - 2010-09-27 08:14 - 01629076 _____ C:\Windows\WindowsUpdate.log
2014-01-07 16:55 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Microsoft.NET
2014-01-07 16:25 - 2010-09-27 08:31 - 01498506 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-07 16:21 - 2014-01-07 16:21 - 00000000 ____D C:\Users\Administrator\AppData\Local\Apple
2014-01-07 16:17 - 2009-07-14 05:34 - 00014016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-07 16:17 - 2009-07-14 05:34 - 00014016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-07 16:10 - 2014-01-04 22:17 - 00000224 _____ C:\Windows\setupact.log
2014-01-07 16:10 - 2014-01-03 22:02 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-07 16:10 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-07 16:10 - 2009-07-14 05:33 - 00289720 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-07 16:08 - 2009-07-14 09:47 - 00000000 ____D C:\Windows\system32\Drivers\de-DE
2014-01-07 16:08 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\de-DE
2014-01-07 16:07 - 2010-10-26 20:45 - 00009690 _____ C:\Windows\PFRO.log
2014-01-04 23:24 - 2011-03-30 02:19 - 00000000 ____D C:\Windows\system32\appmgmt
2014-01-04 23:24 - 2010-09-27 08:25 - 00000000 ____D C:\Users\sandra
2014-01-04 23:09 - 2014-01-03 21:03 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Apple Computer
2014-01-04 23:09 - 2014-01-03 21:03 - 00000000 ____D C:\Users\Administrator\AppData\Local\Apple Computer
2014-01-04 23:07 - 2010-11-13 20:06 - 00000000 ____D C:\ProgramData\Adobe
2014-01-04 22:57 - 2014-01-04 22:57 - 00000629 _____ C:\Users\Administrator\Desktop\JRT.txt
2014-01-04 22:54 - 2014-01-04 22:54 - 01036305 _____ (Thisisu) C:\Users\Administrator\Desktop\JRT.exe
2014-01-04 22:54 - 2014-01-04 22:54 - 00000000 ____D C:\Windows\ERUNT
2014-01-04 22:20 - 2014-01-04 22:38 - 01233962 _____ C:\Users\Administrator\Desktop\adwcleaner.exe
2014-01-04 22:17 - 2014-01-04 22:17 - 00000000 _____ C:\Windows\setuperr.log
2014-01-04 21:58 - 2014-01-04 21:58 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Malwarebytes
2014-01-04 21:57 - 2014-01-04 21:57 - 00001067 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-04 21:57 - 2014-01-04 21:57 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-04 21:57 - 2014-01-04 21:57 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2014-01-04 21:45 - 2010-10-04 00:29 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2014-01-03 23:37 - 2014-01-03 23:36 - 00000000 ____D C:\Windows\system32\MRT
2014-01-03 23:06 - 2014-01-03 23:06 - 00000017 _____ C:\Users\Administrator\AppData\Local\resmon.resmoncfg
2014-01-03 22:03 - 2014-01-03 22:02 - 00000000 ____D C:\Users\Administrator\AppData\Local\Google
2014-01-03 22:02 - 2014-01-03 22:02 - 00000000 ____D C:\Users\Administrator\AppData\Local\Deployment
2014-01-03 22:02 - 2014-01-03 22:02 - 00000000 ____D C:\Users\Administrator\AppData\Local\Apps\2.0
2014-01-03 22:02 - 2011-08-12 11:13 - 00000000 ____D C:\Program Files\Google
2014-01-03 22:01 - 2014-01-03 22:01 - 00000000 ____D C:\Users\Administrator\Documents\Updater5
2014-01-03 22:01 - 2014-01-03 22:00 - 00000000 ____D C:\Users\Administrator\AppData\Local\Adobe
2014-01-03 22:01 - 2014-01-03 21:02 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Adobe
2014-01-03 21:59 - 2014-01-03 21:59 - 00007704 _____ C:\ComboFix.txt
2014-01-03 21:59 - 2014-01-03 21:22 - 00000000 ____D C:\Qoobox
2014-01-03 21:59 - 2009-07-14 03:37 - 00000000 __RHD C:\Users\Default
2014-01-03 21:59 - 2009-07-14 03:37 - 00000000 ___RD C:\Users\Public
2014-01-03 21:57 - 2014-01-03 21:22 - 00000000 ____D C:\Windows\erdnt
2014-01-03 21:57 - 2009-07-14 03:04 - 00000215 _____ C:\Windows\system.ini
2014-01-03 21:30 - 2014-01-03 21:30 - 00000458 __RSH C:\ProgramData\ntuser.pol
2014-01-03 21:29 - 2009-07-14 03:37 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2014-01-03 21:22 - 2014-01-03 21:21 - 05160282 ____R (Swearware) C:\Users\Administrator\Downloads\ComboFix.exe
2014-01-03 21:12 - 2014-01-03 21:12 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Macromedia
2014-01-03 21:12 - 2014-01-03 21:11 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Mozilla
2014-01-03 21:11 - 2014-01-03 21:11 - 00000000 ____D C:\Users\Administrator\AppData\Local\Mozilla
2014-01-03 21:11 - 2014-01-03 21:11 - 00000000 _____ C:\Windows\nsreg.dat
2014-01-03 21:05 - 2014-01-03 21:05 - 00062952 _____ C:\Users\Administrator\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-03 21:02 - 2014-01-03 21:02 - 00001409 _____ C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-03 21:02 - 2014-01-03 21:02 - 00000020 ___SH C:\Users\Administrator\ntuser.ini
2014-01-03 21:02 - 2014-01-03 21:02 - 00000000 _SHDL C:\Users\Administrator\Startmenü
2014-01-03 21:02 - 2014-01-03 21:02 - 00000000 _SHDL C:\Users\Administrator\Netzwerkumgebung
2014-01-03 21:02 - 2014-01-03 21:02 - 00000000 _SHDL C:\Users\Administrator\Druckumgebung
2014-01-03 21:02 - 2014-01-03 21:02 - 00000000 _SHDL C:\Users\Administrator\Documents\Eigene Musik
2014-01-03 21:02 - 2014-01-03 21:02 - 00000000 _SHDL C:\Users\Administrator\Documents\Eigene Bilder
2014-01-03 21:02 - 2014-01-03 21:02 - 00000000 _SHDL C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-03 21:02 - 2014-01-03 21:02 - 00000000 _SHDL C:\Users\Administrator\AppData\Local\Verlauf
2014-01-03 21:02 - 2014-01-03 21:02 - 00000000 ____D C:\Users\Administrator
2014-01-03 20:57 - 2014-01-03 20:57 - 00003296 ____N C:\bootsqm.dat
2014-01-02 18:00 - 2014-01-02 18:00 - 00000000 ____D C:\Program Files\GUM76FA.tmp
2013-12-29 21:17 - 2009-07-14 05:53 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-12-29 21:17 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\LogFiles

Files to move or delete:
====================
C:\ProgramData\0tbpw.pad


Some content of TEMP:
====================
C:\Users\Administrator\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-01 21:21

==================== End Of Log ============================
         
--- --- ---

--- --- ---

--- --- ---

Zu Deiner Frage, ob es noch Probleme gibt: im Moment nicht, allerdings weiss ich ja auch gar nicht was ich da die letzten Tage alles gemacht habe Und ich wollte fragen ob ich die Firewall wieder anschalten kann? AVIRA hatte ich auch deinstalliert, brauch ich das jetzt wieder oder ersetzt eines Deiner genannten Dateien das Anti Viren Programm? Und muss ich noch was machen? Grüsse

 

Themen zu Windows 7: weisser Bildschirm nach Start!
abgesicherten, anschluss, anzeige, bildschirm, cursor, datei, dateien, dienst, eingabeaufforderung, folge, frage, funktioniert, funktioniert nicht, gen, kaspersky, modus, programm, rechner, start, stick, thema, usb, usb stick, windows, windows 7




Ähnliche Themen: Windows 7: weisser Bildschirm nach Start!


  1. Ich bin jetzt auch im Club. Weisser Bildschirm nach Start (Windows 7)
    Plagegeister aller Art und deren Bekämpfung - 29.05.2014 (17)
  2. Windows 7 Start Weisser Bildschirm OTL Auswertung
    Log-Analyse und Auswertung - 18.11.2013 (3)
  3. Weisser Bildschirm beim Start Windows Vista- Abgesicherter Modus nicht möglich
    Log-Analyse und Auswertung - 27.10.2013 (28)
  4. Virus, weisser Bildschirm nach Start (Win7 64Bit)
    Log-Analyse und Auswertung - 04.09.2013 (13)
  5. Windows Vista 32bit: Weisser Sperrbildschirm nach Start
    Plagegeister aller Art und deren Bekämpfung - 26.08.2013 (10)
  6. Virus, weisser Bildschirm nach Start (Win7 32 Bit)
    Plagegeister aller Art und deren Bekämpfung - 15.08.2013 (13)
  7. Weisser Bildschirm nach Start
    Plagegeister aller Art und deren Bekämpfung - 01.07.2013 (21)
  8. weisser Schirm nach Windows start
    Plagegeister aller Art und deren Bekämpfung - 31.05.2013 (9)
  9. Weisser Bildschirm beim Start von Windows 7 mit Bundespolizeihinweis
    Alles rund um Windows - 19.05.2013 (8)
  10. Nach XP-Start weisser Bildschirm :-(
    Plagegeister aller Art und deren Bekämpfung - 30.04.2013 (10)
  11. Weisser Bildschirm bei Start Windows 7 - nur Systemadministrator
    Plagegeister aller Art und deren Bekämpfung - 22.03.2013 (9)
  12. (falsches subforum) Weisser Bildschirm bei Start Windows 7 - nur für Systemadministrator
    Mülltonne - 19.03.2013 (0)
  13. Polizeitrojaner - ab jetzt immer weisser Bildschirm nach PC-Start
    Log-Analyse und Auswertung - 19.12.2012 (2)
  14. weisser bildschirm nach start
    Log-Analyse und Auswertung - 20.11.2012 (17)
  15. Weisser Bildschirm nach Windows- Start
    Plagegeister aller Art und deren Bekämpfung - 13.11.2012 (14)
  16. Windows Vista Weisser Bildschirm bei start + abgesicherter modus geht nicht
    Log-Analyse und Auswertung - 28.10.2012 (1)
  17. Weisser Bildschirm nach PC Start verbindung wird hergestellt bei Windows Vista
    Plagegeister aller Art und deren Bekämpfung - 10.06.2012 (1)

Zum Thema Windows 7: weisser Bildschirm nach Start! - Hi, also erstmal das Log von dem ESET Online Scanner: Code: Alles auswählen Aufklappen ATTFilter # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=681cc870c6306849b8ecf972c262c417 # engine=16550 # end=finished # - Windows 7: weisser Bildschirm nach Start!...
Archiv
Du betrachtest: Windows 7: weisser Bildschirm nach Start! auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.