Trojaner-Board
Seite 4 von 8 « Erste 23 4 56 Letzte »
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Festplatte C füllt sich unaufhaltsam (https://www.trojaner-board.de/137260-festplatte-c-fuellt-unaufhaltsam.html)

schrauber 01.07.2013 16:14
Letzte als funktionierend bekannte Konfiguration, schon versucht? :)

Adlermania 01.07.2013 18:24
Ja :( da startet er auch neu.

schrauber 01.07.2013 19:25
Da haste ja einiges zerschossen beim Beenden von Combofix. Bitte nochmal in das F8 Menü, automatischen Neustart bei Systemfehler deaktivieren auswählen, dann versuchen neu zu starten.

Kommt ein Bluescreen?

Adlermania 01.07.2013 20:09
Ja ich merks ^^.
Okay hab ich gemacht, hat geklappt mit dem Bluescreen.
Soll ich ein Foto hochladen?

Steht aber das gleiche wie auf dem Foto, das ich schon geposted hab.

schrauber 02.07.2013 07:21
bitte nochmal :)

Adlermania 02.07.2013 15:03
Liste der Anhänge anzeigen (Anzahl: 1)
Okay :)

schrauber 02.07.2013 16:41
Boote wieder in die Eingabeaufforderung mit der DVD. Dann in der Eingabeaufforderung notepad eingeben > datei speichern unter

Damit Du einen Stick anstecken kannst und den Laufwerksbuchstaben findest.

Notepad schliessen. Gib ein:

c:
cd windows
cd minidump
dir /p

es folgt eine Auflistung. das aktuellste Dumpfile bitte auf den Stick kopieren und hier anhängen.

Adlermania 02.07.2013 17:38
Liste der Anhänge anzeigen (Anzahl: 2)
Wenn ich cd windows eingebe sagt er, er konnte den Pfad nicht finden. Hab mal 2 Bilder gemacht:

schrauber 02.07.2013 18:34
Versuch mal laufwerk D mit nem dir /p

Adlermania 02.07.2013 19:45
Code:
D:\>cd windows

D:\Windows>cd minidump
Das System kann den angegebenen Pfad nicht finden.

D:\Windows>dir /p
 Volume in Laufwerk D: hat keine Bezeichnung.
 Volumeseriennummer: B8A9-6039

 Verzeichnis von D:\Windows

28.06.2013  00:21    <DIR>          .
28.06.2013  00:21    <DIR>          ..
14.07.2009  06:32    <DIR>          addins
27.06.2013  11:50    <DIR>          AppPatch
21.11.2010  04:24            71.168 bfsvc.exe
14.07.2009  06:32    <DIR>          Boot
14.07.2009  06:32    <DIR>          Branding
25.12.2011  22:48    <DIR>          CSC
14.07.2009  06:32    <DIR>          Cursors
21.11.2010  07:21    <DIR>          de-DE
27.06.2013  11:51    <DIR>          debug
14.07.2009  06:32    <DIR>          diagnostics
27.06.2013  11:51    <DIR>          ehome
25.02.2011  07:19        2.871.808 explorer.exe
14.07.2009  02:39            15.360 fveupdate.exe
21.11.2010  07:30    <DIR>          Globalization
27.06.2013  11:51    <DIR>          Help
14.07.2009  02:39          733.696 HelpPane.exe
14.07.2009  02:39            16.896 hh.exe
Drücken Sie eine beliebige Taste . . .
27.06.2013  11:51    <DIR>          IME
27.06.2013  11:58    <DIR>          inf
14.07.2009  06:32    <DIR>          L2Schemas
14.07.2009  00:06            43.131 mib.bin
27.06.2013  11:51    <DIR>          Microsoft.NET
14.07.2009  02:39          193.536 notepad.exe
14.07.2009  06:32    <DIR>          Performance
27.06.2013  11:51    <DIR>          PLA
07.05.2013  16:22    <DIR>          PolicyDefinitions
14.07.2009  02:39          427.008 regedit.exe
13.06.2013  09:57    <DIR>          rescache
14.07.2009  06:32    <DIR>          Resources
14.07.2009  06:32    <DIR>          schemas
14.07.2009  05:45    <DIR>          ServiceProfiles
21.11.2010  07:21    <DIR>          servicing
27.06.2013  11:51    <DIR>          Setup
27.06.2013  11:54              224 setupact.log
27.06.2013  11:54                0 setuperr.log
21.11.2010  07:28    <DIR>          ShellNew
27.06.2013  11:58    <DIR>          SoftwareDistribution
21.11.2010  07:21    <DIR>          Speech
21.11.2010  04:24            67.072 splwow64.exe
27.06.2013  11:51    <DIR>          System32
27.06.2013  11:51    <DIR>          SysWOW64
Drücken Sie eine beliebige Taste . . .
27.06.2013  11:51    <DIR>          Tasks
10.06.2009  22:41            94.784 twain.dll
14.07.2009  06:32    <DIR>          twain_32
21.11.2010  04:25            51.200 twain_32.dll
10.06.2009  22:41            49.680 twunk_16.exe
14.07.2009  02:14            31.232 twunk_32.exe
14.07.2009  06:32    <DIR>          Web
27.06.2013  11:58        1.641.368 WindowsUpdate.log
14.07.2009  02:14            9.728 winhlp32.exe
16.06.2013  02:17    <DIR>          winsxs
10.06.2009  21:52          316.640 WMSysPr9.prx
14.07.2009  02:39            10.240 write.exe
              19 Datei(en),      6.644.771 Bytes
              36 Verzeichnis(se), 36.424.847.360 Bytes frei

D:\Windows>

schrauber 03.07.2013 07:27
Irgendwie ist das alles extrem komisch. Kannste bitte einf risches FRST log aus der Recovery posten?

Adlermania 03.07.2013 13:21

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-06-2013 (ATTENTION: FRST version is 6 days old)
Ran by SYSTEM on 03-07-2013 14:18:46
Running from F:\
Windows 7 Enterprise Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Recovery

The current controlset is ControlSet001
ATTENTION!:=====> FRST is updated to run from normal or Safe mode to produce a full FRST.txt log and an extra Addition.txt log.

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [VIAAUD] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VIAAUD.exe [x]
HKLM-x32\...\Run: [PlusService] C:\Program Files (x86)\Yuna Software\Messenger Plus!\PlusService.exe [x]
HKLM-x32\...\Run: [VirtualCloneDrive] "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s [x]
HKLM-x32\...\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r [2792448 2009-12-04] (VIA)
HKLM-x32\...\Run: [LifeCam] "C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe" [x]
HKLM-x32\...\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [x]
HKLM-x32\...\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [x]
HKLM-x32\...\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min [345312 2013-05-07] (Avira Operations GmbH & Co. KG)
HKU\patrick\...\Run: [EA Core] "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent [x]
HKU\patrick\...\Run: [ManyCam] "C:\Program Files (x86)\ManyCam\Bin\ManyCam.exe" /silent [x]

==================== Services (Whitelisted) =================

S2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [86752 2013-05-06] (Avira Operations GmbH & Co. KG)
S2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [110816 2013-05-06] (Avira Operations GmbH & Co. KG)
S2 ForceWare Intelligent Application Manager (IAM); C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe [625184 2009-04-19] ()
S2 nSvcIp; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe [207904 2009-04-19] ()
S2 RalinkRegistryWriter64; C:\Program Files (x86)\Sitecom\Common\RaRegistry64.exe [212256 2009-12-15] (Ralink Technology, Corp.)
S2 AdobeARMservice; "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe" [x]
S3 AdobeFlashPlayerUpdateSvc; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [x]
S3 aspnet_state; %SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [x]
S2 clr_optimization_v4.0.30319_32; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [x]
S2 clr_optimization_v4.0.30319_64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
S3 fsssvc; "C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe" [x]
S2 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [x]
S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [x]
S3 IDriverT; "C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe" [x]
S2 MBAMScheduler; "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe" [x]
S2 MBAMService; "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe" [x]
S3 McComponentHostService; "C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe" [x]
S3 MozillaMaintenance; "C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe" [x]
S4 NetMsmqActivator; "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe" -NetMsmqActivator [x]
S4 NetPipeActivator; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [x]
S4 NetTcpActivator; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [x]
S4 NetTcpPortSharing; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [x]
S2 nvUpdatusService; "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe" [x]
S2 RalinkRegistryWriter; "C:\Program Files (x86)\Sitecom\Common\RaRegistry.exe" [x]
S2 SkypeUpdate; "C:\Program Files (x86)\Skype\Updater\Updater.exe" [x]
S4 wlcrasvc; "C:\Program Files\Windows Live\Mesh\wlcrasvc.exe" [x]

==================== Drivers (Whitelisted) ====================

S2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-05-06] (Avira Operations GmbH & Co. KG)
S1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130016 2013-05-06] (Avira Operations GmbH & Co. KG)
S1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-05-06] (Avira Operations GmbH & Co. KG)
S3 1394ohci; \SystemRoot\system32\drivers\1394ohci.sys [x]
S3 AcpiPmi; \SystemRoot\system32\drivers\acpipmi.sys [x]
S3 adp94xx; \SystemRoot\system32\drivers\adp94xx.sys [x]
S3 adpahci; \SystemRoot\system32\drivers\adpahci.sys [x]
S3 adpu320; \SystemRoot\system32\drivers\adpu320.sys [x]
S3 agp440; \SystemRoot\system32\drivers\agp440.sys [x]
S3 aliide; \SystemRoot\system32\drivers\aliide.sys [x]
S3 amdide; \SystemRoot\system32\drivers\amdide.sys [x]
S3 AmdK8; \SystemRoot\system32\drivers\amdk8.sys [x]
S3 amdsata; \SystemRoot\system32\drivers\amdsata.sys [x]
S3 amdsbs; \SystemRoot\system32\drivers\amdsbs.sys [x]
S0 amdxata; system32\drivers\amdxata.sys [x]
S3 arc; \SystemRoot\system32\drivers\arc.sys [x]
S3 arcsas; \SystemRoot\system32\drivers\arcsas.sys [x]
S3 b06bdrv; \SystemRoot\system32\drivers\bxvbda.sys [x]
S3 b57nd60a; system32\DRIVERS\b57nd60a.sys [x]
S1 blbdrive; system32\DRIVERS\blbdrive.sys [x]
S3 BrFiltLo; \SystemRoot\system32\drivers\BrFiltLo.sys [x]
S3 BrFiltUp; \SystemRoot\system32\drivers\BrFiltUp.sys [x]
S3 Brserid; \SystemRoot\System32\Drivers\Brserid.sys [x]
S3 BrSerWdm; \SystemRoot\System32\Drivers\BrSerWdm.sys [x]
S3 BrUsbMdm; \SystemRoot\System32\Drivers\BrUsbMdm.sys [x]
S3 BrUsbSer; \SystemRoot\System32\Drivers\BrUsbSer.sys [x]
S3 BTHMODEM; \SystemRoot\system32\drivers\bthmodem.sys [x]
S3 circlass; \SystemRoot\system32\drivers\circlass.sys [x]
S3 CmBatt; \SystemRoot\system32\drivers\CmBatt.sys [x]
S3 cmdide; \SystemRoot\system32\drivers\cmdide.sys [x]
S4 crcdisk; \SystemRoot\system32\drivers\crcdisk.sys [x]
S3 dmvsc; \SystemRoot\system32\drivers\dmvsc.sys [x]
S3 E1G60; system32\DRIVERS\E1G6032E.sys [x]
S3 ebdrv; \SystemRoot\system32\drivers\evbda.sys [x]
S1 ElbyCDIO; System32\Drivers\ElbyCDIO.sys [x]
S3 elxstor; \SystemRoot\system32\drivers\elxstor.sys [x]
S3 ErrDev; \SystemRoot\system32\drivers\errdev.sys [x]
S3 fdc; \SystemRoot\system32\drivers\fdc.sys [x]
S3 flpydisk; \SystemRoot\system32\drivers\flpydisk.sys [x]
S3 fssfltr; system32\DRIVERS\fssfltr.sys [x]
S3 gagp30kx; \SystemRoot\system32\drivers\gagp30kx.sys [x]
S3 hcw85cir; \SystemRoot\system32\drivers\hcw85cir.sys [x]
S3 HidBatt; \SystemRoot\system32\drivers\HidBatt.sys [x]
S3 HidBth; \SystemRoot\system32\drivers\hidbth.sys [x]
S3 HidIr; \SystemRoot\system32\drivers\hidir.sys [x]
S3 HpSAMD; \SystemRoot\system32\drivers\HpSAMD.sys [x]
S3 iaStorV; \SystemRoot\system32\drivers\iaStorV.sys [x]
S3 iirsp; \SystemRoot\system32\drivers\iirsp.sys [x]
S3 intelide; \SystemRoot\system32\drivers\intelide.sys [x]
S3 intelppm; \SystemRoot\system32\drivers\intelppm.sys [x]
S3 IPMIDRV; \SystemRoot\system32\drivers\IPMIDrv.sys [x]
S3 isapnp; \SystemRoot\system32\drivers\isapnp.sys [x]
S3 iScsiPrt; \SystemRoot\system32\drivers\msiscsi.sys [x]
S3 LSI_FC; \SystemRoot\system32\drivers\lsi_fc.sys [x]
S3 LSI_SAS; \SystemRoot\system32\drivers\lsi_sas.sys [x]
S3 LSI_SAS2; \SystemRoot\system32\drivers\lsi_sas2.sys [x]
S3 LSI_SCSI; \SystemRoot\system32\drivers\lsi_scsi.sys [x]
S3 ManyCam; system32\DRIVERS\mcvidrv_x64.sys [x]
S3 MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [x]
S3 mcaudrv_simple; system32\drivers\mcaudrv_x64.sys [x]
S3 megasas; \SystemRoot\system32\drivers\megasas.sys [x]
S3 MegaSR; \SystemRoot\system32\drivers\MegaSR.sys [x]
S3 mpio; \SystemRoot\system32\drivers\mpio.sys [x]
S3 MRV6X64P; system32\DRIVERS\MRVW13C.sys [x]
S3 msahci; \SystemRoot\system32\drivers\msahci.sys [x]
S3 msdsm; \SystemRoot\system32\drivers\msdsm.sys [x]
S3 MSHUSBVideo; System32\Drivers\nx6000.sys [x]
S3 MTConfig; \SystemRoot\system32\drivers\MTConfig.sys [x]
S3 netr28x; system32\DRIVERS\netr28x.sys [x]
S3 nfrd960; \SystemRoot\system32\drivers\nfrd960.sys [x]
S3 nmwcd; system32\drivers\ccdcmbx64.sys [x]
S3 nmwcdc; system32\drivers\ccdcmbox64.sys [x]
S3 nmwcdnsux64; system32\drivers\nmwcdnsux64.sys [x]
S3 NVENETFD; system32\DRIVERS\nvm62x64.sys [x]
S3 nvlddmkm; system32\DRIVERS\nvlddmkm.sys [x]
S3 NVNET; system32\DRIVERS\nvmf6264.sys [x]
S3 nvraid; \SystemRoot\system32\drivers\nvraid.sys [x]
S3 nv_agp; \SystemRoot\system32\drivers\nv_agp.sys [x]
S3 ohci1394; \SystemRoot\system32\drivers\ohci1394.sys [x]
S3 pcmcia; \SystemRoot\system32\drivers\pcmcia.sys [x]
S3 Processor; \SystemRoot\system32\drivers\processr.sys [x]
S3 ql2300; \SystemRoot\system32\drivers\ql2300.sys [x]
S3 ql40xx; \SystemRoot\system32\drivers\ql40xx.sys [x]
S3 s3cap; \SystemRoot\system32\drivers\vms3cap.sys [x]
S3 sbp2port; \SystemRoot\system32\drivers\sbp2port.sys [x]
S2 secdrv; No ImagePath
S3 sffdisk; \SystemRoot\system32\drivers\sffdisk.sys [x]
S3 sffp_mmc; \SystemRoot\system32\drivers\sffp_mmc.sys [x]
S3 sffp_sd; \SystemRoot\system32\drivers\sffp_sd.sys [x]
S3 sfloppy; \SystemRoot\system32\drivers\sfloppy.sys [x]
S3 SiSRaid2; \SystemRoot\system32\drivers\SiSRaid2.sys [x]
S3 SiSRaid4; \SystemRoot\system32\drivers\sisraid4.sys [x]
S3 stexstor; \SystemRoot\system32\drivers\stexstor.sys [x]
S0 storflt; system32\drivers\vmstorfl.sys [x]
S3 storvsc; \SystemRoot\system32\drivers\storvsc.sys [x]
S3 swenum; system32\DRIVERS\swenum.sys [x]
S3 Synth3dVsc; \SystemRoot\system32\drivers\Synth3dVsc.sys [x]
S3 taphss6; system32\DRIVERS\taphss6.sys [x]
S3 terminpt; \SystemRoot\system32\drivers\terminpt.sys [x]
S3 TsUsbGD; \SystemRoot\system32\drivers\TsUsbGD.sys [x]
S3 tsusbhub; \SystemRoot\system32\drivers\tsusbhub.sys [x]
S3 uagp35; \SystemRoot\system32\drivers\uagp35.sys [x]
S3 uliagpkx; \SystemRoot\system32\drivers\uliagpkx.sys [x]
S3 UmPass; \SystemRoot\system32\drivers\umpass.sys [x]
S3 upperdev; system32\DRIVERS\usbser_lowerfltx64.sys [x]
S3 usbcir; \SystemRoot\system32\drivers\usbcir.sys [x]
S3 usbprint; \SystemRoot\system32\drivers\usbprint.sys [x]
S3 usbser; system32\drivers\usbser.sys [x]
S3 UsbserFilt; system32\DRIVERS\usbser_lowerfltjx64.sys [x]
S3 usbuhci; \SystemRoot\system32\drivers\usbuhci.sys [x]
S3 VClone; system32\DRIVERS\VClone.sys [x]
S3 vga; system32\DRIVERS\vgapnp.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]
S3 vhdmp; \SystemRoot\system32\drivers\vhdmp.sys [x]
S3 VIAHdAudAddService; system32\drivers\viahduaa.sys [x]
S3 viaide; \SystemRoot\system32\drivers\viaide.sys [x]
S3 vmbus; \SystemRoot\system32\drivers\vmbus.sys [x]
S3 VMBusHID; \SystemRoot\system32\drivers\VMBusHID.sys [x]
S3 vsmraid; \SystemRoot\system32\drivers\vsmraid.sys [x]
S3 WacomPen; \SystemRoot\system32\drivers\wacompen.sys [x]
S3 Wd; \SystemRoot\system32\drivers\wd.sys [x]
S3 WmiAcpi; \SystemRoot\system32\drivers\wmiacpi.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-06-28 20:26 - 2013-06-28 20:26 - 00000000 ____D C:\Windows\System32\config\HiveBackup
2013-06-28 18:56 - 2013-06-27 22:44 - 56623104 ____A C:\Windows\System32\config\SOFTWARE.OLD
2013-06-28 18:56 - 2013-06-27 11:58 - 15204352 ____A C:\Windows\System32\config\SYSTEM.OLD
2013-06-28 18:56 - 2013-06-27 11:58 - 00262144 ____A C:\Windows\System32\config\SECURITY.OLD
2013-06-28 18:56 - 2013-06-27 11:58 - 00262144 ____A C:\Windows\System32\config\SAM.OLD
2013-06-28 18:56 - 2013-06-27 11:58 - 00262144 ____A C:\Windows\System32\config\DEFAULT.OLD
2013-06-28 12:18 - 2013-06-28 12:18 - 00000000 ____D C:\FRST
2013-06-27 11:54 - 2013-06-27 11:54 - 00000224 ____A C:\Windows\setupact.log
2013-06-27 11:54 - 2013-06-27 11:54 - 00000000 ____A C:\Windows\setuperr.log
2013-06-27 11:43 - 2013-06-27 11:48 - 00000000 ____D C:\ComboFix
2013-06-16 02:00 - 2013-06-08 15:08 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-16 02:00 - 2013-06-08 15:07 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-16 02:00 - 2013-06-08 15:06 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-16 02:00 - 2013-06-08 15:06 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-16 02:00 - 2013-06-08 15:06 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-16 02:00 - 2013-06-08 13:28 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-16 02:00 - 2013-06-08 12:42 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-16 02:00 - 2013-06-08 12:40 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-16 02:00 - 2013-06-08 12:40 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-16 02:00 - 2013-06-08 12:40 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-16 02:00 - 2013-06-08 12:40 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-16 02:00 - 2013-06-08 12:13 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-13 00:41 - 2013-05-17 02:25 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-13 00:41 - 2013-05-17 02:25 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-13 00:41 - 2013-05-17 02:25 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-13 00:41 - 2013-05-17 02:25 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-13 00:41 - 2013-05-17 02:25 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-13 00:41 - 2013-05-17 02:25 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-13 00:41 - 2013-05-17 02:25 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-13 00:41 - 2013-05-17 02:25 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-13 00:41 - 2013-05-17 01:59 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-13 00:41 - 2013-05-17 01:59 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-13 00:41 - 2013-05-17 01:58 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-13 00:41 - 2013-05-17 01:58 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-13 00:41 - 2013-05-17 01:58 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-13 00:41 - 2013-05-17 01:58 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-13 00:41 - 2013-05-17 01:58 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-13 00:41 - 2013-05-17 01:58 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-13 00:41 - 2013-05-17 01:58 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-13 00:41 - 2013-05-14 13:23 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-13 00:41 - 2013-05-14 09:40 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-12 18:30 - 2013-05-13 06:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-06-12 18:30 - 2013-05-13 06:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-06-12 18:30 - 2013-05-13 06:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-06-12 18:30 - 2013-05-13 06:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll
2013-06-12 18:30 - 2013-05-13 05:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-06-12 18:30 - 2013-05-13 05:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-06-12 18:30 - 2013-05-13 05:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-06-12 18:30 - 2013-05-13 04:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-06-12 18:30 - 2013-05-13 04:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-06-12 18:30 - 2013-05-13 04:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-06-12 18:30 - 2013-05-08 07:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-06-12 18:30 - 2013-04-26 06:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-06-12 18:30 - 2013-04-26 05:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll

==================== One Month Modified Files and Folders =======

2013-06-28 20:26 - 2013-06-28 20:26 - 00000000 ____D C:\Windows\System32\config\HiveBackup
2013-06-28 12:18 - 2013-06-28 12:18 - 00000000 ____D C:\FRST
2013-06-27 22:44 - 2013-06-28 18:56 - 56623104 ____A C:\Windows\System32\config\SOFTWARE.OLD
2013-06-27 11:58 - 2013-06-28 18:56 - 15204352 ____A C:\Windows\System32\config\SYSTEM.OLD
2013-06-27 11:58 - 2013-06-28 18:56 - 00262144 ____A C:\Windows\System32\config\SECURITY.OLD
2013-06-27 11:58 - 2013-06-28 18:56 - 00262144 ____A C:\Windows\System32\config\SAM.OLD
2013-06-27 11:58 - 2013-06-28 18:56 - 00262144 ____A C:\Windows\System32\config\DEFAULT.OLD
2013-06-27 11:58 - 2011-12-25 16:00 - 01641368 ____A C:\Windows\WindowsUpdate.log
2013-06-27 11:58 - 2009-07-14 05:45 - 00019488 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-06-27 11:58 - 2009-07-14 05:45 - 00019488 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-06-27 11:54 - 2013-06-27 11:54 - 00000224 ____A C:\Windows\setupact.log
2013-06-27 11:54 - 2013-06-27 11:54 - 00000000 ____A C:\Windows\setuperr.log
2013-06-27 11:51 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\System32\WinBioPlugIns
2013-06-27 11:51 - 2009-07-14 05:45 - 00000000 ____D C:\Windows\Setup
2013-06-27 11:51 - 2009-07-14 04:20 - 00000000 ___SD C:\Windows\Media
2013-06-27 11:51 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\Setup
2013-06-27 11:51 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\oobe
2013-06-27 11:51 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\MUI
2013-06-27 11:51 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\com
2013-06-27 11:51 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\System32\winevt
2013-06-27 11:51 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\System32\sysprep
2013-06-27 11:51 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\System32\spool
2013-06-27 11:51 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\System32\SMI
2013-06-27 11:51 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\System32\Setup
2013-06-27 11:51 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\System32\MUI
2013-06-27 11:51 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\System32\Msdtc
2013-06-27 11:51 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\System32\com
2013-06-27 11:51 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PLA
2013-06-27 11:51 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\IME
2013-06-27 11:51 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\Help
2013-06-27 11:50 - 2011-12-25 16:00 - 00000000 ____D C:\users\patrick
2013-06-27 11:48 - 2013-06-27 11:43 - 00000000 ____D C:\ComboFix
2013-06-27 11:48 - 2013-05-27 19:30 - 00000000 ____D C:\Users\patrick\AppData\Local\Downloaded Installations
2013-06-27 11:48 - 2012-04-12 19:02 - 00000000 ____D C:\Program Files\Microsoft LifeCam
2013-06-27 11:48 - 2012-01-03 18:21 - 00000000 ____D C:\Program Files (x86)\Sitecom
2013-06-27 11:48 - 2011-12-26 01:26 - 00000000 ____D C:\Program Files (x86)\VIA
2013-06-27 11:48 - 2011-12-26 01:25 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-06-27 11:48 - 2011-12-26 00:53 - 00000000 ____D C:\Program Files\WinRAR
2013-06-27 11:48 - 2011-12-25 17:10 - 00000000 ____D C:\users\Administrator
2013-06-27 11:48 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Windows Sidebar
2013-06-27 11:48 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Sidebar
2013-06-27 11:48 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Windows NT
2013-06-27 11:48 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2013-06-13 09:57 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-06-08 15:08 - 2013-06-16 02:00 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-08 15:07 - 2013-06-16 02:00 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-08 15:06 - 2013-06-16 02:00 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-08 15:06 - 2013-06-16 02:00 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-08 15:06 - 2013-06-16 02:00 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-08 13:28 - 2013-06-16 02:00 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-08 12:42 - 2013-06-16 02:00 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-08 12:40 - 2013-06-16 02:00 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-08 12:40 - 2013-06-16 02:00 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-08 12:40 - 2013-06-16 02:00 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-08 12:40 - 2013-06-16 02:00 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-08 12:13 - 2013-06-16 02:00 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

==================== Known DLLs (Whitelisted) ================


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
C:\Windows\system32\codeintegrity\Bootcat.cache IS MISSING <==== ATTENTION!.

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points  =========================


==================== Memory info ===========================

Percentage of memory in use: 15%
Total physical RAM: 3839.3 MB
Available physical RAM: 3242.3 MB
Total Pagefile: 3837.5 MB
Available Pagefile: 3227.37 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:48.83 GB) (Free:33.92 GB) NTFS (Disk=0 Partition=1) ==>[System with boot components (obtained from reading drive)]
Drive e: (Madmax764113) (CDROM) (Total:3.91 GB) (Free:0 GB) UDF
Drive f: (KINGSTON) (Removable) (Total:3.73 GB) (Free:3.72 GB) FAT32 (Disk=1 Partition=1)
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
Drive y: (Daten) (Fixed) (Total:249.26 GB) (Free:67.5 GB) NTFS (Disk=0 Partition=2) ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: FD6CFD6C)
Partition 1: (Not Active) - (Size=49 GB) - (Type=07 NTFS)
Partition 2: (Active) - (Size=249 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 4 GB) (Disk ID: C3072E18)
Partition 1: (Active) - (Size=4 GB) - (Type=0C)


LastRegBack: 2013-06-23 13:03

==================== End Of Log ============================
--- --- ---

schrauber 03.07.2013 14:04
Drücke bitte die http://larusso.trojaner-board.de/Images/windows.jpg + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument
Code:
LastRegBack: 2013-06-23 13:03
Speichere diese bitte als Fixlist.txt auf deinem USB Stick.
  • Starte deinen Rechner erneut in die Reparaturoptionen
  • Starte nun die FRST.exe erneut und klicke den Fix Button.
Das Tool erstellt eine Fixlog.txt auf deinem USB Stick. Poste den Inhalt bitte hier.

Adlermania 03.07.2013 14:24
Code:
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 27-06-2013
Ran by SYSTEM at 2013-07-03 15:19:55 Run:6
Running from F:\
Boot Mode: Recovery
==============================================

DEFAULT hive was successfully copied to System32\config\HiveBackup
DEFAULT hive was successfully restored from registry back up.
SAM hive was successfully copied to System32\config\HiveBackup
SAM hive was successfully restored from registry back up.
SECURITY hive was successfully copied to System32\config\HiveBackup
SECURITY hive was successfully restored from registry back up.
SOFTWARE hive was successfully copied to System32\config\HiveBackup
SOFTWARE hive was successfully restored from registry back up.
SYSTEM hive was successfully copied to System32\config\HiveBackup
SYSTEM hive was successfully restored from registry back up.

==== End of Fixlog ====
Bin dann auf Neu Starten und er fährt immer wieder neu hoch, er zeigt an "Windows wird gestartet" mit den 4 Farben die sich zu dem Windows Symbol verbinden, dann geht der Bildschirm kurz aus und er fährt wieder hoch...Grafikkartentreiber wird angezeigt und das ganze Spiel beginnt von Neuem.

schrauber 03.07.2013 18:02
Auch in den Safe Mode Varianten?


Alle Zeitangaben in WEZ +1. Es ist jetzt 03:18 Uhr.
Seite 4 von 8 « Erste 23 4 56 Letzte »
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131