Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Laptop Acer Aspire 8935G: Stürzt immer nach kuzrer Zeit ab -> Farbenbildschirm, Bluescreen

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML

Antwort
Alt 22.07.2014, 15:56   #1
Otti101
 
Laptop Acer Aspire 8935G: Stürzt immer nach kuzrer Zeit ab -> Farbenbildschirm, Bluescreen - Ausrufezeichen

Laptop Acer Aspire 8935G: Stürzt immer nach kuzrer Zeit ab -> Farbenbildschirm, Bluescreen



Hallo!

Mein Problem ist folgendes:
Ich habe vor langer Zeit einmal meinen Akku bei der Einstellung von "Ausbalanciert" auf "Höchstleistung" gestellt und dann wieder zurück. Seitdem stürzt mein Laptop immer wieder nach kurzer Zeit ab, daraufhin kommen meisten die Farben "Rot, Blau, Grün" über den ganzen Bildschirm und dann Bluescreen. Ab und zu aber auch nur die Farben und er hört auch nicht mehr auf sie zu wechseln.

Habe schon sehr viel ausprobiert, Neu aufgesetzt, Wärmeleitpaste ausgetauscht, Lüfter geputzt und und und..

Z.B.: wenn ich mir den Fehlerbericht durchlesen will unter Systemsteuerung-System-Verwaltung, stürzt er immer ab wenn ich auf den Button "Verwaltung" klicke.

Vll hatte dieses Problem schon mal wer von euch.
Hoffe auf gute Lösungsvorschläge oder Ansätze!

Mein System:

Acer Aspire 8935G
Intel Core Duo prozessor P7450 2,13 GHz 1066 MHz FSB
ATI Mobility Radeon HD 4670
4 GB RAM
320 GB HDD
Win 7 64-Bit
18,4 Zoll Monitor

Danke
Mit freundlichen Grüßen

Otti

Alt 22.07.2014, 15:59   #2
schrauber
/// the machine
/// TB-Ausbilder
 

Laptop Acer Aspire 8935G: Stürzt immer nach kuzrer Zeit ab -> Farbenbildschirm, Bluescreen - Standard

Laptop Acer Aspire 8935G: Stürzt immer nach kuzrer Zeit ab -> Farbenbildschirm, Bluescreen



hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

__________________

__________________

Alt 22.07.2014, 16:30   #3
Otti101
 
Laptop Acer Aspire 8935G: Stürzt immer nach kuzrer Zeit ab -> Farbenbildschirm, Bluescreen - Standard

Laptop Acer Aspire 8935G: Stürzt immer nach kuzrer Zeit ab -> Farbenbildschirm, Bluescreen



Siehe im Anhang.


Mit freundlichen Grüßen

Otti
__________________

Alt 22.07.2014, 16:56   #4
Otti101
 
Laptop Acer Aspire 8935G: Stürzt immer nach kuzrer Zeit ab -> Farbenbildschirm, Bluescreen - Standard

Laptop Acer Aspire 8935G: Stürzt immer nach kuzrer Zeit ab -> Farbenbildschirm, Bluescreen



Hier als Zitat


FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-07-2014
Ran by Otti (administrator) on OTTI-PC on 22-07-2014 17:24:36
Running from C:\Users\Otti\Desktop
Platform: Windows 7 Home Premium (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 8
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Egis Technology Inc.) C:\Program Files (x86)\Acer Bio Protection\CompPtcVUI.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GregHSRW.exe
(Egis Technology Inc.) C:\Program Files (x86)\Acer Bio Protection\BASVC.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe
(McAfee, Inc.) C:\Program Files (x86)\Common Files\McAfee\McProxy\McProxy.exe
(McAfee, Inc.) C:\Program Files\McAfee\VirusScan\Mcshield.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\MPF\MpfSrv.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\MSK\msksrver.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\MWLService.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
(O2Micro International) C:\Windows\System32\drivers\o2flash.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe
(Acer) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\MSC\mcmscsvc.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee.com\Agent\mcagent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
() C:\Windows\PLFSetI.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Google Inc.) C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.EXE
(Egis Technology Inc.) C:\Program Files (x86)\Acer Bio Protection\PdtWzd.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
(Acer Corp.) C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe
(Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\ePowerEvent.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\VirusScan\mcsysmon.exe
(McAfee, Inc.) C:\Program Files (x86)\Common Files\McAfee\MNA\McNASvc.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [IAAnotif] => C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-05] (Intel Corporation)
HKLM\...\Run: [mwlDaemon] => C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe [349480 2009-08-06] (Egis Technology Inc.)
HKLM\...\Run: [Acer ePower Management] => C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe [496160 2009-08-18] (Acer Incorporated)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8061984 2009-08-12] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1814312 2009-08-14] (Synaptics Incorporated)
HKLM\...\Run: [PLFSetI] => C:\Windows\PLFSetI.exe [200704 2008-07-29] ()
HKLM-x32\...\Run: [EgisTecLiveUpdate] => C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe [199464 2009-08-04] (Egis Technology Inc.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [35696 2009-02-28] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [261888 2009-09-03] (NewTech Infosystems, Inc.)
HKLM-x32\...\Run: [NortonOnlineBackupReminder] => C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe [588648 2009-07-25] (Symantec Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2009-07-16] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [mcagent_exe] => C:\Program Files (x86)\McAfee.com\Agent\mcagent.exe [645328 2009-07-23] (McAfee, Inc.)
HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [825864 2009-08-18] (Dritek System Inc.)
HKLM-x32\...\Run: [VitaKeyPdtWzd] => C:\Program Files (x86)\Acer Bio Protection\PdtWzd.exe [3567616 2009-08-05] (Egis Technology Inc.)
HKLM-x32\...\Run: [ArcadeDeluxeAgent] => C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe [128296 2009-07-31] (CyberLink Corp.)
HKLM-x32\...\Run: [PlayMovie] => C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe [181480 2009-09-02] (Acer Corp.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-19\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-96117979-1357587514-11002555-1000\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2009-08-22] (Google Inc.)
Lsa: [Notification Packages] C:\Program Files (x86)\Acer Bio Protection\PwdFilterV64
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Acer VCM.lnk
ShortcutTarget: Acer VCM.lnk -> C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe (Acer Incorporated)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
ShellIconOverlayIdentifiers: egisPSDP -> {30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} => C:\Program Files (x86)\EgisTec\MyWinLocker 3\x64\psdprotect.dll (Egis Technology Inc.)
ShellIconOverlayIdentifiers-x32: egisPSDP -> {30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} => C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\psdprotect.dll (Egis Technology Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0c07&m=aspire_8935g&r=27360514g016l0333z1k5t57i9u80s
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0c07&m=aspire_8935g&r=27360514g016l0333z1k5t57i9u80s
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0c07&m=aspire_8935g&r=27360514g016l0333z1k5t57i9u80s
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0c07&m=aspire_8935g&r=27360514g016l0333z1k5t57i9u80s
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0c07&m=aspire_8935g&r=27360514g016l0333z1k5t57i9u80s
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0c07&m=aspire_8935g&r=27360514g016l0333z1k5t57i9u80s
URLSearchHook: HKCU - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
URLSearchHook: HKCU - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM-x32 - DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKCU - DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_deAT598
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_deAT598
BHO: McAfee Phishing Filter -> {27B4851A-3207-45A2-B947-BE8AFE6163AB} -> C:\Program Files (x86)\McAfee\MSK\mskapbho64.dll ()
BHO: scriptproxy -> {7DB2D5A0-7241-4E79-B68D-6309F01C5231} -> C:\Program Files\McAfee\VirusScan\scriptsn.dll (McAfee, Inc.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Google Toolbar Notifier BHO -> {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} -> C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg64.dll (Google Inc.)
BHO: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: McAfee Phishing Filter -> {27B4851A-3207-45A2-B947-BE8AFE6163AB} -> C:\Program Files (x86)\McAfee\MSK\MskAPBho.dll ()
BHO-x32: No Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} ->  No File
BHO-x32: scriptproxy -> {7DB2D5A0-7241-4E79-B68D-6309F01C5231} -> C:\Program Files (x86)\McAfee\VirusScan\scriptsn.dll (McAfee, Inc.)
BHO-x32: Windows Live Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Google Toolbar Notifier BHO -> {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} -> C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.)
BHO-x32: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
BHO-x32: Google Dictionary Compression sdch -> {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} -> C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll (Google Inc.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8064.0206.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8064.0206.dll (Microsoft Corporation)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Acer\Acer VCM\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\2.0.40115.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8064.0206 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF HKLM-x32\...\Firefox\Extensions: [{B7082FAA-CB62-4872-9106-E42DD88EDE45}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2009-08-22]

==================== Services (Whitelisted) =================

R2 ePowerSvc; C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe [796192 2009-08-18] (Acer Incorporated)
R2 IGBASVC; C:\Program Files (x86)\Acer Bio Protection\BASVC.exe [3450368 2009-08-05] (Egis Technology Inc.) [File not signed]
R2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [110312 2009-12-08] (McAfee, Inc.)
R2 mcmscsvc; C:\Program Files (x86)\McAfee\MSC\mcmscsvc.exe [865832 2009-07-23] (McAfee, Inc.)
R2 McNASvc; c:\Program Files (x86)\Common Files\McAfee\MNA\McNASvc.exe [2482848 2009-04-09] (McAfee, Inc.)
S3 McODS; C:\Program Files\McAfee\VirusScan\mcods.exe [696848 2009-06-17] (McAfee, Inc.)
R2 McProxy; c:\Program Files (x86)\Common Files\McAfee\McProxy\McProxy.exe [359952 2009-04-09] (McAfee, Inc.)
R2 McShield; C:\Program Files\McAfee\VirusScan\Mcshield.exe [155456 2009-06-18] (McAfee, Inc.)
R3 McSysmon; C:\Program Files (x86)\McAfee\VirusScan\mcsysmon.exe [606736 2009-06-17] (McAfee, Inc.)
R2 MpfService; C:\Program Files (x86)\McAfee\MPF\MPFSrv.exe [894136 2009-07-22] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files (x86)\McAfee\MSK\MskSrver.exe [26640 2009-04-10] (McAfee, Inc.)
R2 MWLService; C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe [311592 2009-08-06] (Egis Technology Inc.)
R2 RS_Service; C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe [253952 2009-07-10] (Acer Incorporated) [File not signed]

==================== Drivers (Whitelisted) ====================

R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [102600 2009-06-18] (McAfee, Inc.)
R1 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [307400 2009-06-18] (McAfee, Inc.)
S3 mferkdk; C:\Windows\System32\drivers\mferkdk.sys [40904 2009-06-18] (McAfee, Inc.)
R3 mfesmfk; C:\Windows\System32\drivers\mfesmfk.sys [49480 2009-06-18] (McAfee, Inc.)
R1 MPFP; C:\Windows\System32\Drivers\Mpfp.sys [176144 2009-04-09] (McAfee, Inc.)
R3 nuvotoncir; C:\Windows\system32\DRIVERS\nuvotoncir.sys [48128 2009-06-24] (Nuvoton Technology Corporation)
R3 O2SDGRDR; C:\Windows\System32\DRIVERS\o2sdgx64.sys [48800 2009-05-07] (O2Micro )

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-07-22 17:24 - 2014-07-22 17:25 - 00017250 _____ () C:\Users\Otti\Desktop\FRST.txt
2014-07-22 17:24 - 2014-07-22 17:24 - 00000000 ____D () C:\FRST
2014-07-22 17:23 - 2014-07-22 17:23 - 02090496 _____ (Farbar) C:\Users\Otti\Desktop\FRST64.exe
2014-07-22 17:19 - 2014-07-22 17:19 - 00277096 _____ () C:\Windows\Minidump\072214-48890-01.dmp
2014-07-22 17:11 - 2014-07-22 17:11 - 00277096 _____ () C:\Windows\Minidump\072214-28423-01.dmp
2014-07-22 17:06 - 2014-07-22 17:06 - 00277096 _____ () C:\Windows\Minidump\072214-26878-01.dmp
2014-07-22 16:47 - 2014-07-22 16:47 - 00277096 _____ () C:\Windows\Minidump\072214-26785-01.dmp
2014-07-22 16:23 - 2014-07-22 16:23 - 00001086 _____ () C:\Users\Otti\Desktop\MSI Afterburner.lnk
2014-07-22 16:23 - 2014-07-22 16:23 - 00000000 ____D () C:\Users\Otti\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner
2014-07-22 16:23 - 2014-07-22 16:23 - 00000000 ____D () C:\Program Files (x86)\MSI Afterburner
2014-07-22 16:22 - 2014-07-22 16:22 - 29239096 _____ () C:\Users\Otti\Desktop\MSIAfterburnerSetup301.zip
2014-07-22 16:05 - 2014-07-22 16:05 - 00277096 _____ () C:\Windows\Minidump\072214-25318-01.dmp
2014-07-22 15:52 - 2014-07-22 17:19 - 00000000 ____D () C:\Windows\Minidump
2014-07-22 15:52 - 2014-07-22 15:52 - 00277096 _____ () C:\Windows\Minidump\072214-26754-01.dmp
2014-07-22 15:47 - 2014-07-22 15:47 - 00000000 ____D () C:\Users\Otti\AppData\Roaming\Adobe
2014-07-22 15:44 - 2014-07-22 17:19 - 375902277 _____ () C:\Windows\MEMORY.DMP

==================== One Month Modified Files and Folders =======

2014-07-22 17:25 - 2014-07-22 17:24 - 00017250 _____ () C:\Users\Otti\Desktop\FRST.txt
2014-07-22 17:24 - 2014-07-22 17:24 - 00000000 ____D () C:\FRST
2014-07-22 17:23 - 2014-07-22 17:23 - 02090496 _____ (Farbar) C:\Users\Otti\Desktop\FRST64.exe
2014-07-22 17:23 - 2009-08-22 18:08 - 00003973 _____ () C:\Windows\system32\Config.MPF
2014-07-22 17:20 - 2009-07-14 06:45 - 00342320 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-07-22 17:19 - 2014-07-22 17:19 - 00277096 _____ () C:\Windows\Minidump\072214-48890-01.dmp
2014-07-22 17:19 - 2014-07-22 15:52 - 00000000 ____D () C:\Windows\Minidump
2014-07-22 17:19 - 2014-07-22 15:44 - 375902277 _____ () C:\Windows\MEMORY.DMP
2014-07-22 17:19 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-22 17:19 - 2009-07-14 06:51 - 00040683 _____ () C:\Windows\setupact.log
2014-07-22 17:14 - 2014-05-10 13:40 - 01278311 _____ () C:\Windows\WindowsUpdate.log
2014-07-22 17:11 - 2014-07-22 17:11 - 00277096 _____ () C:\Windows\Minidump\072214-28423-01.dmp
2014-07-22 17:06 - 2014-07-22 17:06 - 00277096 _____ () C:\Windows\Minidump\072214-26878-01.dmp
2014-07-22 16:47 - 2014-07-22 16:47 - 00277096 _____ () C:\Windows\Minidump\072214-26785-01.dmp
2014-07-22 16:27 - 2009-07-14 06:45 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-22 16:27 - 2009-07-14 06:45 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-22 16:23 - 2014-07-22 16:23 - 00001086 _____ () C:\Users\Otti\Desktop\MSI Afterburner.lnk
2014-07-22 16:23 - 2014-07-22 16:23 - 00000000 ____D () C:\Users\Otti\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner
2014-07-22 16:23 - 2014-07-22 16:23 - 00000000 ____D () C:\Program Files (x86)\MSI Afterburner
2014-07-22 16:22 - 2014-07-22 16:22 - 29239096 _____ () C:\Users\Otti\Desktop\MSIAfterburnerSetup301.zip
2014-07-22 16:19 - 2014-05-10 23:17 - 00643866 _____ () C:\Windows\system32\perfh007.dat
2014-07-22 16:19 - 2014-05-10 23:17 - 00126394 _____ () C:\Windows\system32\perfc007.dat
2014-07-22 16:19 - 2009-07-14 07:13 - 01472002 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-22 16:05 - 2014-07-22 16:05 - 00277096 _____ () C:\Windows\Minidump\072214-25318-01.dmp
2014-07-22 16:05 - 2009-08-22 18:15 - 00738546 _____ () C:\Windows\PFRO.log
2014-07-22 16:05 - 2009-08-22 18:06 - 00000000 ____D () C:\Program Files (x86)\McAfee
2014-07-22 15:52 - 2014-07-22 15:52 - 00277096 _____ () C:\Windows\Minidump\072214-26754-01.dmp
2014-07-22 15:47 - 2014-07-22 15:47 - 00000000 ____D () C:\Users\Otti\AppData\Roaming\Adobe

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-05-10 15:08

==================== End Of Log ===========================
         
--- --- ---

--- --- ---


Zitat:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 21-07-2014
Ran by Otti at 2014-07-22 17:25:49
Running from C:\Users\Otti\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: McAfee VirusScan (Enabled - Up to date) {86355677-4064-3EA7-ABB3-1B136EB04637}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: McAfee VirusScan (Enabled - Up to date) {3D54B793-665E-3129-9103-206115370C8A}
FW: McAfee Personal Firewall (Enabled) {BE0ED752-0A0B-3FFF-80EC-B2269063014C}

==================== Installed Programs ======================

2007 Microsoft Office Suite Service Pack 2 (SP2) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}) (Version: - Microsoft)
2007 Microsoft Office Suite Service Pack 2 (SP2) (x32 Version: - Microsoft) Hidden
Acer Arcade Deluxe (HKLM-x32\...\InstallShield_{2637C347-9DAD-11D6-9EA2-00055D0CA761}) (Version: 3.1.6903 - CyberLink Corp.)
Acer Arcade Deluxe (x32 Version: 3.1.6903 - CyberLink Corp.) Hidden
Acer Arcade Instant On (x32 Version: 3.0.18.0 - Acer) Hidden
Acer Backup Manager (HKLM-x32\...\InstallShield_{30075A70-B5D2-440B-AFA3-FB2021740121}) (Version: 2.0.1.25 - NewTech Infosystems)
Acer Bio Protection (HKLM-x32\...\InstallShield_{E09664BB-BB08-45FA-87D1-33EAB0E017F5}) (Version: 6.2.48 - Egis Technology Inc.)
Acer Crystal Eye Webcam (HKLM-x32\...\{7760D94E-B1B5-40A0-9AA0-ABF942108755}) (Version: 5.2.7.1 - Suyin Optronics Corp)
Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 4.05.3003 - Acer Incorporated)
Acer GameZone Console (HKLM-x32\...\{8ed9688e-4f79-4308-91ca-f1c37ca142b4}_is1) (Version: 5.1.0.2 - Oberon Media, Inc.)
Acer GridVista (HKLM-x32\...\GridVista) (Version: 3.01.0730 - Acer Inc.)
Acer PowerSmart Manager (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 4.06.3004 - Acer Incorporated)
Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.02.3004 - Acer Incorporated)
Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.11.0715 - Acer Incorporated)
Acer Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.01.3014 - Acer Incorporated)
Acer VCM (HKLM-x32\...\{047F790A-7A2A-4B6A-AD02-38092BA63DAC}) (Version: 4.05.3000 - Acer Incorporated)
Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.0.7220 - Adobe Systems Inc.)
Adobe AIR (x32 Version: 1.5.0.7220 - Adobe Systems Inc.) Hidden
Adobe Flash Player 10 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 10.0.22.87 - Adobe Systems Incorporated)
Adobe Reader 9.1 MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-A91000000001}) (Version: 9.1.0 - Adobe Systems Incorporated)
Alice Greenfingers (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112920767}) (Version: - Oberon Media)
Amazonia (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-11273477}) (Version: - Oberon Media)
ATI AVIVO64 Codecs (Version: 10.8.0.40716 - ATI Technologies Inc.) Hidden
ATI Catalyst Install Manager (HKLM\...\{E9FAEC29-DCA3-F797-55D6-1EB0A5A166A1}) (Version: 3.0.736.0 - ATI Technologies, Inc.)
Backup Manager Advance (x32 Version: 2.0.1.25 - NewTech Infosystems) Hidden
Broadcom Gigabit NetLink Controller (HKLM\...\{96F70DF8-160F-4F9C-9B9E-2A9B439B4EB9}) (Version: 12.26.01 - Broadcom Corporation)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center Core Implementation (x32 Version: 2009.0716.1518.25582 - ATI) Hidden
Catalyst Control Center Graphics Full Existing (x32 Version: 2009.0716.1518.25582 - ATI) Hidden
Catalyst Control Center Graphics Full New (x32 Version: 2009.0716.1518.25582 - ATI) Hidden
Catalyst Control Center Graphics Light (x32 Version: 2009.0716.1518.25582 - ATI) Hidden
Catalyst Control Center Graphics Previews Vista (x32 Version: 2009.0716.1518.25582 - ATI) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2009.0716.1518.25582 - ATI Technologies, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2009.0716.1518.25582 - ATI) Hidden
CCC Help Chinese Standard (x32 Version: 2009.0716.1517.25582 - ATI) Hidden
CCC Help Chinese Traditional (x32 Version: 2009.0716.1517.25582 - ATI) Hidden
CCC Help Czech (x32 Version: 2009.0716.1517.25582 - ATI) Hidden
CCC Help Danish (x32 Version: 2009.0716.1517.25582 - ATI) Hidden
CCC Help Dutch (x32 Version: 2009.0716.1517.25582 - ATI) Hidden
CCC Help English (x32 Version: 2009.0716.1517.25582 - ATI) Hidden
CCC Help Finnish (x32 Version: 2009.0716.1517.25582 - ATI) Hidden
CCC Help French (x32 Version: 2009.0716.1517.25582 - ATI) Hidden
CCC Help German (x32 Version: 2009.0716.1517.25582 - ATI) Hidden
CCC Help Greek (x32 Version: 2009.0716.1517.25582 - ATI) Hidden
CCC Help Hungarian (x32 Version: 2009.0716.1517.25582 - ATI) Hidden
CCC Help Italian (x32 Version: 2009.0716.1517.25582 - ATI) Hidden
CCC Help Japanese (x32 Version: 2009.0716.1517.25582 - ATI) Hidden
CCC Help Korean (x32 Version: 2009.0716.1517.25582 - ATI) Hidden
CCC Help Norwegian (x32 Version: 2009.0716.1517.25582 - ATI) Hidden
CCC Help Polish (x32 Version: 2009.0716.1517.25582 - ATI) Hidden
CCC Help Portuguese (x32 Version: 2009.0716.1517.25582 - ATI) Hidden
CCC Help Russian (x32 Version: 2009.0716.1517.25582 - ATI) Hidden
CCC Help Spanish (x32 Version: 2009.0716.1517.25582 - ATI) Hidden
CCC Help Swedish (x32 Version: 2009.0716.1517.25582 - ATI) Hidden
CCC Help Thai (x32 Version: 2009.0716.1517.25582 - ATI) Hidden
CCC Help Turkish (x32 Version: 2009.0716.1517.25582 - ATI) Hidden
ccc-core-static (x32 Version: 2009.0716.1518.25582 - Ihr Firmenname) Hidden
ccc-utility64 (Version: 2009.0716.1518.25582 - ATI) Hidden
Chicken Invaders 2 (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110209593}) (Version: - Oberon Media)
Choice Guard (x32 Version: 1.2.87.0 - Microsoft Corporation) Hidden
Compatibility Pack für 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation)
Dairy Dash (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-115053100}) (Version: - Oberon Media)
Dream Day First Home (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-113832110}) (Version: - Oberon Media)
eSobi v2 (HKLM-x32\...\InstallShield_{15D967B5-A4BE-42AE-9E84-64CD062B25AA}) (Version: 2.0.4.000274 - esobi Inc.)
eSobi v2 (x32 Version: 2.0.4.000274 - esobi Inc.) Hidden
Farm Frenzy 2 (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-11531173}) (Version: - Oberon Media)
Fingerprint Solution (x32 Version: 6.1.48.0 - Egis Technology Inc.) Hidden
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Granny In Paradise (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110551697}) (Version: - Oberon Media)
Heroes of Hellas (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-113786380}) (Version: - Oberon Media)
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3001 - Acer Incorporated)
Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version: - Intel Corporation)
Junk Mail filter update (x32 Version: 14.0.8064.206 - Microsoft Corporation) Hidden
Launch Manager (HKLM-x32\...\LManager) (Version: 3.0.03 - Acer Inc.)
McAfee SecurityCenter (HKLM-x32\...\MSC) (Version: - McAfee, Inc.)
Merriam Websters Spell Jam (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112662477}) (Version: - Oberon Media)
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (English) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6425.1000 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Language Pack 2007 - German/Deutsch (HKLM-x32\...\OMUI.de-de) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office O MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (English) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (English) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint Viewer 2007 (German) (HKLM-x32\...\{95120000-00AF-0407-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (Spanish) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (English) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (English) 2007 (Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007 (Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (English) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Shared Setup Metadata MUI (English) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office SharePoint Designer MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Suite Activation Assistant (HKLM-x32\...\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}) (Version: 2.9 - Microsoft Corporation)
Microsoft Office Word MUI (English) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office X MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 2.0.40115.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Works (HKLM-x32\...\{62F7DA7E-CCCB-439C-A760-00C3926E761F}) (Version: 9.7.0621 - Microsoft Corporation)
MSI Afterburner 3.0.1 (HKLM-x32\...\Afterburner) (Version: 3.0.1 - MSI Co., LTD)
MSVCRT (x32 Version: 14.0.1468.721 - Microsoft) Hidden
MyWinLocker (HKLM-x32\...\{68301905-2DEA-41CE-A4D4-E8B443B099BA}) (Version: 3.1.72.0 - Egis Technology Inc.)
Norton Online Backup (HKLM-x32\...\{C57BCDE1-7CB9-467D-B3BA-7E119916CDC1}) (Version: 1.2.0.36 - Symantec)
NTI Backup Now 5 (HKLM-x32\...\InstallShield_{12EFA1A4-AC3B-443C-8143-237EDE760403}) (Version: 5.1.2.627 - NewTech Infosystems)
NTI Backup Now Standard (x32 Version: 5.1.2.627 - NewTech Infosystems) Hidden
NTI Media Maker 8 (HKLM-x32\...\InstallShield_{2413930C-8309-47A6-BC61-5EF27A4222BC}) (Version: 8.0.12.6623 - NewTech Infosystems)
NTI Media Maker 8 (x32 Version: 8.0.12.6623 - NewTech Infosystems) Hidden
Nuvoton CIR Device Driver (HKLM-x32\...\{2D3858B1-226A-420D-9C9D-B51864E85429}) (Version: 8.60.1000 - Nuvoton Technology Corporation)
O2Micro 1394 OHCI Compliant Host Controller Driver (HKLM-x32\...\InstallShield_{AFC44A23-E6A8-4625-B6B1-23D438525D59}) (Version: 1.0.00 - O2Micro International LTD.)
O2Micro 1394 OHCI Compliant Host Controller Driver (Version: 1.0.00 - O2Micro International LTD.) Hidden
O2Micro Flash Memory Card Windows Driver (HKLM-x32\...\InstallShield_{517AA17F-407C-4D2D-8A0C-56F1F989F870}) (Version: 2.0.08 - O2Micro International LTD.)
O2Micro Flash Memory Card Windows Driver (Version: 2.0.08 - O2Micro International LTD.) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5915 - Realtek Semiconductor Corp.)
Star Defender 4 (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-114803710}) (Version: - Oberon Media)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.0.3 - Synaptics Incorporated)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.00.3005 - Acer Incorporated)
WIDCOMM Bluetooth Software (HKLM\...\{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}) (Version: 6.2.0.9700 - Broadcom Corporation)
Windows Live Anmelde-Assistent (HKLM-x32\...\{52B97218-98CB-4B8B-9283-D213C85E1AA4}) (Version: 5.000.818.5 - Microsoft Corporation)
Windows Live Call (x32 Version: 14.0.8064.0206 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 14.0.8064.206 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8064.0206 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 14.0.8064.206 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 14.0.8064.206 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 14.0.8064.0206 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 14.0.8064.0206 - Microsoft Corporation) Hidden
Windows Live Sync (HKLM-x32\...\{ED636101-1959-4360-8BF7-209436E7DEE4}) (Version: 14.0.8064.206 - Microsoft Corporation)
Windows Live Writer (x32 Version: 14.0.8064.0206 - Microsoft Corporation) Hidden
Windows Live-Uploadtool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)

==================== Restore Points =========================

10-05-2014 11:55:52 Installiert O2Micro Flash Memory Card Windows Driver
10-05-2014 11:59:20 Installiert Acer Crystal Eye Webcam
10-05-2014 12:00:23 Installiert Acer eRecovery Management
10-05-2014 12:03:46 DirectX wurde installiert
10-05-2014 12:08:47 Installiert Acer PowerSmart Manager
10-05-2014 12:10:18 Installed Acer Arcade Instant On
10-05-2014 12:12:46 Installiert Fingerprint Solution
10-05-2014 12:13:50 Installiert Suite
10-05-2014 12:18:13 Konfiguriert Backup Manager Advance
10-05-2014 18:43:20 Windows Update
10-05-2014 18:49:22 Windows Update

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {65E81275-1CC9-4358-B661-7C2590CB2FAC} - System32\Tasks\McDefragTask => c:\Program Files (x86)\McAfee\MQC\QcConsol.exe [2009-07-04] (McAfee, Inc.)
Task: {ACCB6581-0417-49B7-A5F8-7615CCFE4341} - System32\Tasks\McQcTask => c:\Program Files (x86)\McAfee\MQC\QcConsol.exe [2009-07-04] (McAfee, Inc.)
Task: {CEB25C44-7E43-4315-9C9E-614B6FF56C62} - System32\Tasks\Recovery Management\Burn Notification => C:\Program Files\Acer\Acer eRecovery Management\NotificationCenter\Notification.exe [2009-07-09] (Acer)
Task: C:\Windows\Tasks\McDefragTask.job => C:\Windows\system32\defrag.exe
Task: C:\Windows\Tasks\McQcTask.job => c:\PROGRA~2\mcafee\mqc\QcConsol.exe

==================== Loaded Modules (whitelisted) =============

2008-05-26 12:24 - 2008-05-26 12:24 - 00103424 _____ () C:\Program Files (x86)\Acer Bio Protection\PwdFilterV64.DLL
2014-05-10 13:59 - 2008-07-29 19:29 - 00200704 _____ () C:\Windows\PLFSetI.exe
2009-07-17 17:20 - 2009-07-17 17:20 - 00173344 _____ () C:\Program Files\WIDCOMM\Bluetooth Software\btkeyind.dll
2009-06-19 10:49 - 2009-06-19 10:49 - 00016384 ____R () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2014-05-10 13:42 - 2014-05-10 13:42 - 00270336 _____ () C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2009-02-02 17:33 - 2009-02-02 17:33 - 00460199 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\sqlite3.dll
2008-09-28 17:55 - 2008-09-28 17:55 - 01076224 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\ACE.dll
2014-07-22 15:57 - 2009-12-08 13:12 - 00199904 _____ () c:\Program Files (x86)\McAfee\SiteAdvisor\saSubMgr.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcmscsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MpfService => ""="Service"

==================== EXE Association (whitelisted) =============


==================== MSCONFIG/TASK MANAGER disabled items =========


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (07/22/2014 04:23:22 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC90.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"1".
Die abhängige Assemblierung "Microsoft.VC90.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (07/22/2014 04:23:21 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC90.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"1".
Die abhängige Assemblierung "Microsoft.VC90.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (07/22/2014 04:23:21 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC90.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"1".
Die abhängige Assemblierung "Microsoft.VC90.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (05/10/2014 03:11:03 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0"1".
Die abhängige Assemblierung "msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (05/10/2014 03:11:03 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0"1".
Die abhängige Assemblierung "msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (05/10/2014 03:11:02 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0"1".
Die abhängige Assemblierung "msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (05/10/2014 03:11:02 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0"1".
Die abhängige Assemblierung "msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (05/10/2014 03:09:05 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (05/10/2014 01:41:37 PM) (Source: MsiInstaller) (EventID: 11935) (User: NT-AUTORITÄT)
Description: Produkt: Microsoft Visual C++ 2005 Redistributable (x64) -- Error 1935.Während der Installation der Assembly "Microsoft.VC80.OpenMP,type="win32",version="8.0.50727.762",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="amd64"" ist ein Fehler aufgetreten. Weitere Informationen finden Sie unter Hilfe und Support. HRESULT: 0x80070002, Assemblyschnittstelle: IAssemblyCacheItem, Funktion: Commit, Komponente: {09D44781-D142-FE32-A01F-C8B3B9A1E18E}


System errors:
=============
Error: (07/22/2014 05:19:51 PM) (Source: BugCheck) (EventID: 1001) (User: )
Description: 0x0000007e (0xffffffffc0000094, 0xfffff880049e8779, 0xfffff88007596d78, 0xfffff880075965d0)C:\Windows\MEMORY.DMP072214-48890-01

Error: (07/22/2014 05:19:40 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎22.‎07.‎2014 um 17:16:44 unerwartet heruntergefahren.

Error: (07/22/2014 05:16:02 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎22.‎07.‎2014 um 17:13:59 unerwartet heruntergefahren.

Error: (07/22/2014 05:11:23 PM) (Source: BugCheck) (EventID: 1001) (User: )
Description: 0x0000007e (0xffffffffc0000094, 0xfffff88004a04779, 0xfffff880075a8f38, 0xfffff880075a8790)C:\Windows\MEMORY.DMP072214-28423-01

Error: (07/22/2014 05:11:18 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎22.‎07.‎2014 um 17:09:14 unerwartet heruntergefahren.

Error: (07/22/2014 05:06:38 PM) (Source: BugCheck) (EventID: 1001) (User: )
Description: 0x0000007e (0xffffffffc0000094, 0xfffff88004a6b779, 0xfffff88007596f38, 0xfffff88007596790)C:\Windows\MEMORY.DMP072214-26878-01

Error: (07/22/2014 05:06:32 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎22.‎07.‎2014 um 16:59:48 unerwartet heruntergefahren.

Error: (07/22/2014 04:57:06 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎22.‎07.‎2014 um 16:51:35 unerwartet heruntergefahren.

Error: (07/22/2014 04:47:48 PM) (Source: BugCheck) (EventID: 1001) (User: )
Description: 0x0000007e (0xffffffffc0000094, 0xfffff880049bc779, 0xfffff88006d96f48, 0xfffff88006d967a0)C:\Windows\MEMORY.DMP072214-26785-01

Error: (07/22/2014 04:47:45 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎22.‎07.‎2014 um 16:46:10 unerwartet heruntergefahren.


Microsoft Office Sessions:
=========================

==================== Memory info ===========================

Percentage of memory in use: 38%
Total physical RAM: 3996.86 MB
Available physical RAM: 2451.95 MB
Total Pagefile: 7991.88 MB
Available Pagefile: 6338.95 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:282.49 GB) (Free:250.04 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 298 GB) (Disk ID: E30DF49A)
Partition 1: (Not Active) - (Size=12 GB) - (Type=27)
Partition 2: (Not Active) - (Size=4 GB) - (Type=12)
Partition 3: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=282 GB) - (Type=OF Extended)

==================== End Of Log ============================

Alt 23.07.2014, 08:35   #5
schrauber
/// the machine
/// TB-Ausbilder
 

Laptop Acer Aspire 8935G: Stürzt immer nach kuzrer Zeit ab -> Farbenbildschirm, Bluescreen - Standard

Laptop Acer Aspire 8935G: Stürzt immer nach kuzrer Zeit ab -> Farbenbildschirm, Bluescreen



hi,

Scan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop.
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es ein Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.


__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 29.07.2014, 13:15   #6
Otti101
 
Laptop Acer Aspire 8935G: Stürzt immer nach kuzrer Zeit ab -> Farbenbildschirm, Bluescreen - Standard

Laptop Acer Aspire 8935G: Stürzt immer nach kuzrer Zeit ab -> Farbenbildschirm, Bluescreen



Hat leider ein bisschen gedauert.
So hier das Lofile von ComboFix:

Lg Otti

Code:
ATTFilter
ComboFix 14-07-29.01 - Otti 29.07.2014 13:49:34.1.2 - x64 Microsoft Windows 7 Home Premium 6.1.7600.0.1252.43.1031.18.3997.2992 [GMT 2:00] ausgeführt von:: C:\Users\Otti\Desktop\ComboFix.exe SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} (((((((((((((((((((((((((((((((((((( Weitere Löschungen )))))))))))))))))))))))))))))))))))))))))))))))) C:\Program Files (x86)\Acer Bio Protection\PwdFilterV64.dll C:\Program Files (x86)\Common Files\Acer GameZone online.ico ((((((((((((((((((((((( Dateien erstellt von 2014-06-28 bis 2014-07-29 )))))))))))))))))))))))))))))) 2014-07-29 11:56:18 . 2014-07-29 11:56:18 -------- d-----w- C:\Users\Default\AppData\Local\temp 2014-07-29 11:40:01 . 2011-03-12 12:03:46 662528 ----a-w- C:\Windows\system32\XpsPrint.dll 2014-07-29 11:40:01 . 2011-03-12 11:31:58 442880 ----a-w- C:\Windows\SysWow64\XpsPrint.dll 2014-07-29 11:13:09 . 2010-06-19 06:53:18 52224 ----a-w- C:\Windows\system32\rtutils.dll 2014-07-29 11:13:09 . 2010-06-19 06:23:50 37376 ----a-w- C:\Windows\SysWow64\rtutils.dll 2014-07-29 11:13:07 . 2013-02-12 14:02:22 19968 ----a-w- C:\Windows\system32\drivers\usb8023.sys 2014-07-29 11:13:00 . 2012-04-26 05:34:38 76288 ----a-w- C:\Windows\system32\rdpwsx.dll 2014-07-29 11:13:00 . 2012-04-26 05:34:37 149504 ----a-w- C:\Windows\system32\rdpcorekmts.dll 2014-07-29 11:13:00 . 2012-04-26 05:28:32 9216 ----a-w- C:\Windows\system32\rdrmemptylst.exe 2014-07-29 11:12:55 . 2012-05-02 05:32:43 208896 ----a-w- C:\Windows\system32\profsvc.dll 2014-07-29 11:12:50 . 2011-01-07 08:07:24 475648 ----a-w- C:\Windows\system32\XpsGdiConverter.dll 2014-07-29 11:12:50 . 2011-01-07 07:31:10 288256 ----a-w- C:\Windows\SysWow64\XpsGdiConverter.dll 2014-07-29 11:12:43 . 2010-05-19 19:48:12 144384 ----a-w- C:\Windows\system32\cdd.dll 2014-07-29 11:12:43 . 2009-10-02 04:32:07 982600 ----a-w- C:\Windows\system32\drivers\dxgkrnl.sys 2014-07-22 15:46:08 . 2014-07-22 15:46:08 -------- d-----w- C:\ProgramData\AWEM 2014-07-22 15:24:28 . 2014-07-22 15:26:41 -------- d-----w- C:\FRST 2014-07-22 14:23:04 . 2014-07-22 14:23:33 -------- d-----w- C:\Program Files (x86)\MSI Afterburner . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) 2014-05-10 21:16:27 . 2014-05-10 21:16:27 2560 ----a-w- C:\Windows\SysWow64\drivers\de-DE\qwavedrv.sys.mui 2014-05-10 21:16:10 . 2014-05-10 21:16:10 5632 ----a-w- C:\Windows\SysWow64\drivers\de-DE\ndiscap.sys.mui 2014-05-10 21:16:10 . 2014-05-10 21:16:10 2560 ----a-w- C:\Windows\SysWow64\drivers\de-DE\scfilter.sys.mui 2014-05-10 21:16:06 . 2014-05-10 21:16:06 51712 ----a-w- C:\Windows\SysWow64\drivers\de-DE\tcpip.sys.mui 2014-05-10 21:15:58 . 2014-05-10 21:15:58 29696 ----a-w- C:\Windows\SysWow64\drivers\de-DE\bfe.dll.mui 2014-05-10 21:15:58 . 2014-05-10 21:15:58 16896 ----a-w- C:\Windows\SysWow64\drivers\de-DE\pacer.sys.mui 2014-05-10 12:13:07 . 2014-05-10 12:13:07 564784 ----a-w- C:\Windows\system32\NBMatS1SDK.dll 2014-05-10 12:13:06 . 2014-05-10 12:13:06 465456 ----a-w- C:\Windows\SysWow64\NBMatS1SDK.dll 2014-05-10 12:13:01 . 2014-05-10 12:13:01 29184 ----a-w- C:\Windows\system32\drivers\FPSensor.sys 2014-05-10 11:44:19 . 2009-08-22 15:56:26 6 ----a-w- C:\Windows\system32\PLD_Framework.cmd (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP] @="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}" [HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}] 2009-08-06 17:18:12 120104 ----a-w- C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\PSDProtect.dll [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2009-07-14 01:39:41 1475072] "swg"="C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-08-22 16:04:40 39408] [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "EgisTecLiveUpdate"="C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe" [2009-08-04 05:09:34 199464] "Adobe Reader Speed Launcher"="C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-28 00:10:28 35696] "BackupManagerTray"="C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" [2009-09-03 15:31:16 261888] "NortonOnlineBackupReminder"="C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" [2009-07-24 23:31:08 588648] "StartCCC"="C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-07-16 13:10:10 98304] "LManager"="C:\Program Files (x86)\Launch Manager\LManager.exe" [2009-08-18 07:38:32 825864] "VitaKeyPdtWzd"="C:\Program Files (x86)\Acer Bio Protection\PdtWzd.exe" [2009-08-05 13:39:32 3567616] "ArcadeDeluxeAgent"="C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe" [2009-07-31 15:29:12 128296] "PlayMovie"="C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe" [2009-09-02 17:51:50 181480] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ Acer VCM.lnk - C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe [2009-8-22 708608] Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-7-17 1079584] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "aux1"=wdmaud.drv R3 NTIBackupSvc;NTI Backup Now 5 Backup Service;C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe;C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [x] R3 Partner Service;Partner Service;C:\ProgramData\Partner\Partner.exe;C:\ProgramData\Partner\Partner.exe [x] S1 mwlPSDFilter;mwlPSDFilter;C:\Windows\system32\DRIVERS\mwlPSDFilter.sys;C:\Windows\SYSNATIVE\DRIVERS\mwlPSDFilter.sys [x] S1 mwlPSDNServ;mwlPSDNServ;C:\Windows\system32\DRIVERS\mwlPSDNServ.sys;C:\Windows\SYSNATIVE\DRIVERS\mwlPSDNServ.sys [x] S1 mwlPSDVDisk;mwlPSDVDisk;C:\Windows\system32\DRIVERS\mwlPSDVDisk.sys;C:\Windows\SYSNATIVE\DRIVERS\mwlPSDVDisk.sys [x] S2 AMD External Events Utility;AMD External Events Utility;C:\Windows\system32\atiesrxx.exe;C:\Windows\SYSNATIVE\atiesrxx.exe [x] S2 ePowerSvc;Acer ePower Service;C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe;C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe [x] S2 FPSensor;EgisTec-Corp Fingerprint Reader Driver (FPSensor.sys);C:\Windows\system32\Drivers\FPSensor.sys;C:\Windows\SYSNATIVE\Drivers\FPSensor.sys [x] S2 Greg_Service;GRegService;C:\Program Files (x86)\Acer\Registration\GregHSRW.exe;C:\Program Files (x86)\Acer\Registration\GregHSRW.exe [x] S2 IGBASVC;EgisTec Service;C:\Program Files (x86)\Acer Bio Protection\BASVC.exe;C:\Program Files (x86)\Acer Bio Protection\BASVC.exe [x] S2 MWLService;MyWinLocker Service;C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe;C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe [x] S2 NTI IScheduleSvc;NTI IScheduleSvc;C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe;C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [x] S2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service;C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe;C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [x] S2 RS_Service;Raw Socket Service;C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe;C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe [x] S2 Updater Service;Updater Service;C:\Program Files\Acer\Acer Updater\UpdaterService.exe;C:\Program Files\Acer\Acer Updater\UpdaterService.exe [x] S3 intelkmd;intelkmd;C:\Windows\system32\DRIVERS\igdpmd64.sys;C:\Windows\SYSNATIVE\DRIVERS\igdpmd64.sys [x] S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;C:\Windows\system32\DRIVERS\k57nd60a.sys;C:\Windows\SYSNATIVE\DRIVERS\k57nd60a.sys [x] S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;C:\Windows\system32\DRIVERS\netw5v64.sys;C:\Windows\SYSNATIVE\DRIVERS\netw5v64.sys [x] S3 nuvotoncir;Nuvoton IR Transceiver;C:\Windows\system32\DRIVERS\nuvotoncir.sys;C:\Windows\SYSNATIVE\DRIVERS\nuvotoncir.sys [x] S3 O2MDGRDR;O2MDGRDR;C:\Windows\system32\DRIVERS\o2mdgx64.sys;C:\Windows\SYSNATIVE\DRIVERS\o2mdgx64.sys [x] S3 O2SDGRDR;O2SDGRDR;C:\Windows\system32\DRIVERS\o2sdgx64.sys;C:\Windows\SYSNATIVE\DRIVERS\o2sdgx64.sys [x] --------- X64 Entries ----------- [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP] @="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}" [HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}] 2009-08-06 17:19:54 137512 ----a-w- C:\Program Files (x86)\EgisTec\MyWinLocker 3\x64\PSDProtect.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IAAnotif"="C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-06-05 02:03:32 186904] "mwlDaemon"="C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe" [2009-08-06 17:18:42 349480] "Acer ePower Management"="C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe" [2009-08-18 20:40:16 496160] "RtHDVCpl"="C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-08-12 10:39:22 8061984] "IgfxTray"="C:\Windows\system32\igfxtray.exe" [2009-07-16 06:54:54 165912] "HotKeysCmds"="C:\Windows\system32\hkcmd.exe" [2009-07-16 06:54:50 387608] "Persistence"="C:\Windows\system32\igfxpers.exe" [2009-07-16 06:54:54 365592] "PLFSetI"="C:\Windows\PLFSetI.exe" [2008-07-29 17:29:26 200704] ------- Zusätzlicher Suchlauf ------- uStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0c07&m=aspire_8935g&r=27360514g016l0333z1k5t57i9u80s
 
uLocal Page = C:\Windows\system32\blank.htm mDefault_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0c07&m=aspire_8935g&r=27360514g016l0333z1k5t57i9u80s
 
mStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0c07&m=aspire_8935g&r=27360514g016l0333z1k5t57i9u80s
 
mLocal Page = C:\Windows\SysWOW64\blank.htm IE: Bild an &Bluetooth-Gerät senden... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm IE: Seite an &Bluetooth-Gerät senden... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm TCP: DhcpNameServer = 192.168.0.1
 
- - - - Entfernte verwaiste Registrierungseinträge - - - - Toolbar-Locked - (no file) SafeBoot-mcmscsvc SafeBoot-MCODS Toolbar-Locked - (no file) HKLM-Run-SynTPEnh - C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe
         

Alt 30.07.2014, 11:09   #7
schrauber
/// the machine
/// TB-Ausbilder
 

Laptop Acer Aspire 8935G: Stürzt immer nach kuzrer Zeit ab -> Farbenbildschirm, Bluescreen - Standard

Laptop Acer Aspire 8935G: Stürzt immer nach kuzrer Zeit ab -> Farbenbildschirm, Bluescreen



`Das Log ist unvollständig. Schau bitte ob da nit noch mehr im Log steht.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort

Themen zu Laptop Acer Aspire 8935G: Stürzt immer nach kuzrer Zeit ab -> Farbenbildschirm, Bluescreen
acer, acer aspire, alle farben, aspire, bildschirm, blau, bluescreen, button, einstellung, farbe, farben, folge, folgendes, langer, laptop, leistung, lüfter, neu, nicht mehr, paste, problem, prozessor, radeon, stürzt, systems, wechsel, zoll



Ähnliche Themen: Laptop Acer Aspire 8935G: Stürzt immer nach kuzrer Zeit ab -> Farbenbildschirm, Bluescreen


  1. Arbeitsspeicher / CPU vom Laptop (Acer Aspire 5738G) im Leerlauf bei mind. 80% Auslastung
    Log-Analyse und Auswertung - 26.05.2015 (7)
  2. Bei Acer Aspire bleibt nach dem Start der Bildschirm schwarz
    Plagegeister aller Art und deren Bekämpfung - 26.09.2013 (15)
  3. Win XP GVU Trojaner auf Acer Aspire One entfernen
    Plagegeister aller Art und deren Bekämpfung - 04.09.2013 (26)
  4. Laptop stürzt ab nach Bluescreen!
    Alles rund um Windows - 01.08.2012 (7)
  5. Acer Aspire 5742G AMD Radeon HD 6370HD Grafiktreiber stürzt ab
    Alles rund um Windows - 09.06.2011 (11)
  6. Touchpen für Acer Aspire one 721 (Laptop)?
    Netzwerk und Hardware - 26.12.2010 (3)
  7. Acer Aspire 8730 - Aufrüsten ?
    Netzwerk und Hardware - 13.11.2010 (11)
  8. Acer Aspire 8370 Systemrecover
    Mülltonne - 16.09.2010 (0)
  9. Laptop Stürzt mit Bluescreen ab (ständig!)
    Plagegeister aller Art und deren Bekämpfung - 04.09.2010 (0)
  10. Acer Aspire 7730G BIldschirmproblem,Grafik,?
    Alles rund um Windows - 01.05.2010 (1)
  11. Acer Aspire hängt nach 10 minuten!
    Alles rund um Windows - 25.07.2009 (1)
  12. Neuer Acer aspire --> Startprobleme
    Alles rund um Windows - 14.07.2009 (0)
  13. Acer Aspire 5601 immer langsamer
    Plagegeister aller Art und deren Bekämpfung - 13.12.2008 (0)
  14. Abstürze Acer Aspire 1694
    Alles rund um Windows - 19.02.2008 (9)
  15. Abstürze Acer Aspire 1610
    Netzwerk und Hardware - 15.08.2007 (5)
  16. PCI-Kommunikationscontroller Acer Aspire T620 gesucht
    Netzwerk und Hardware - 21.10.2005 (1)
  17. Acer Aspire 1307LC
    Netzwerk und Hardware - 06.05.2003 (16)

Zum Thema Laptop Acer Aspire 8935G: Stürzt immer nach kuzrer Zeit ab -> Farbenbildschirm, Bluescreen - Hallo! Mein Problem ist folgendes: Ich habe vor langer Zeit einmal meinen Akku bei der Einstellung von "Ausbalanciert" auf "Höchstleistung" gestellt und dann wieder zurück. Seitdem stürzt mein Laptop immer - Laptop Acer Aspire 8935G: Stürzt immer nach kuzrer Zeit ab -> Farbenbildschirm, Bluescreen...
Archiv
Du betrachtest: Laptop Acer Aspire 8935G: Stürzt immer nach kuzrer Zeit ab -> Farbenbildschirm, Bluescreen auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.