Trojaner-Board
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Windows 8 startet nicht, da Anmeldung nicht moeglich! Tastatur geht nicht. (https://www.trojaner-board.de/137772-windows-8-startet-anmeldung-moeglich-tastatur-geht.html)

KatinkaBu 05.07.2013 23:26
Windows 8 startet nicht, da Anmeldung nicht moeglich! Tastatur geht nicht.
 
Hi!

Heute ging ploetzlich nach einem Mal mein Laptop nicht mehr an. Bzw.anfangs kam ich noch in den Bios durch f1 druecken, und durch Nr 5 zum Anmeldefenster. Dort kann ich allerdings nichts eingeben. Die Numlock reagiert garnicht. Nur im Reperaturmenue geht die Tastatur.

Mittlerweile komme ich nur durch das Abwuergen automatisch in's Bios.

Wenn ich Windows 8 normal starte, kommt irgendwann der Bildschrim mit der Uhrzeit und ich klicke eigentlich um in das Anmeldefenster zu kommen. Da die Tastatur nicht funktioniert bleibe ich bei diesem Wartefenster.

Mein Laptop ist relativ neu: Lenovo Ideapad Z500.

Avast free antivirus. Keine Sicherheits-Cd, kein Backup.

Keine Ahnung.
Haha.

Kann jemand helfen?

schrauber 06.07.2013 08:28
Hi,



Scan mit Farbar's Recovery Scan Tool (Recovery Mode - Windows Vista, 7, 8)
Hinweise für Windows 8-Nutzer: Anleitung 1 (FRST-Variante) und Anleitung 2 (zweiter Teil)
  • Downloade dir bitte die passende Version des Tools (im Zweifel beide) und speichere diese auf einen USB Stick: FRST 32-Bit | FRST 64-Bit
  • Schließe den USB Stick an das infizierte System an und boote das System in die System Reparatur Option.
  • Scanne jetzt nach der bebilderten Anleitung oder verwende die folgende Kurzanleitung:
Über den Boot Manager:
  • Starte den Rechner neu.
  • Während dem Hochfahren drücke mehrmals die F8 Taste
  • Wähle nun Computer reparieren.
  • Wähle dein Betriebssystem und Benutzerkonto und klicke jeweils "Weiter".
Mit Windows CD/DVD (auch bei Windows 8 möglich):
  • Lege die Windows CD in dein Laufwerk.
  • Starte den Rechner neu und starte von der CD.
  • Wähle die Spracheinstellungen und klicke "Weiter".
  • Klicke auf Computerreparaturoptionen !
  • Wähle dein Betriebssystem und Benutzerkonto und klicke jeweils "Weiter".
Wähle in den Reparaturoptionen: Eingabeaufforderung
  • Gib nun bitte notepad ein und drücke Enter.
  • Im öffnenden Textdokument: Datei > Speichern unter... und wähle Computer.
    Hier wird dir der Laufwerksbuchstabe deines USB Sticks angezeigt, merke ihn dir.
  • Schließe Notepad wieder
  • Gib nun bitte folgenden Befehl ein.
    e:\frst.exe bzw. e:\frst64.exe
    Hinweis: e steht für den Laufwerksbuchstaben deines USB Sticks, den du dir gemerkt hast. Gegebenfalls anpassen.
  • Akzeptiere den Disclaimer mit Yes und klicke Scan
Das Tool erstellt eine FRST.txt auf deinem USB Stick. Poste den Inhalt bitte hier nach Möglichkeit in Code-Tags (Anleitung).

KatinkaBu 06.07.2013 20:14
Hi! Vielen Dank fuer deine schnelle Antwort.
Jetzt komme ich nur noch in das automatische Reperatur Menue. :(

Da kann ich nur auswaehlen zwischen Wiederherstellen und Abbrechen. Auf f1 und f8 reagiert er garnicht.

Was kann ich da tun?

schrauber 07.07.2013 06:37
Was genau hast Du gemacht? hast Du auch schon den Weg über DVD versucht?

KatinkaBu 07.07.2013 15:46
Hey,

ich hab keine Dvd.

Ich habe den Pc einige male abgewuergt, bzw. beim Starten f1 oder f8 gedrueckt, allerdings kommt dann nur das Automatische Reperatur wird vorbereitet.

Hi, es hat geklappt. :)



FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-07-2013
Ran by SYSTEM on 07-07-2013 16:52:06
Running from E:\
Windows 8 (X64) OS Language: English(US)
Internet Explorer Version 10
Boot Mode: Recovery
Attention: Could not load system hive.
==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtsFT] RTFTrack.exe [x]
HKLM\...\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-26] (Synaptics Incorporated)
HKLM\...\Run: [SynLenovoGestureMgr] "%ProgramFiles%\Synaptics\SynTP\SynLenovoGestureMgr.exe" /m [665400 2012-08-26] (Synaptics)
HKLM\...\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s [13213840 2012-10-25] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /FORPCEE4  [1234064 2012-10-28] (Realtek Semiconductor)
HKLM\...\Run: [BtPreLoad] "C:\Program Files (x86)\Bluetooth Suite\BtPreLoad.exe" [64640 2012-09-29] ()
HKLM\...\Run: [OnekeyStudio] C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe -start [4196432 2012-09-14] (Lenovo)
HKLM\...\Run: [Energy Management] C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [17080376 2013-01-17] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [191544 2013-01-17] (Lenovo(beijing) Limited)
HKLM-x32\...\Run: [Dolby Home Theater v4] "C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe" -autostart [508656 2012-07-25] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [YouCam Mirage] "C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe" [136488 2012-07-27] (CyberLink)
HKLM-x32\...\Run: [YouCam Tray] "C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe" /s [167024 2012-07-27] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GShortCut] "C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Lenovo\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\5.0" [217088 2012-04-18] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] "C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe" [91432 2012-03-28] (CyberLink Corp.)
HKLM-x32\...\Run: [Intel AppUp(SM) center] "C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe" --domain-id F0399437-FD0C-4A48-B101-F0314A6172E4 [155488 2012-07-12] (Intel Corporation)
HKLM-x32\...\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-05-11] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SearchProtectAll] C:\Program Files (x86)\SearchProtect\bin\cltmng.exe [2852640 2013-05-07] (Conduit)
HKLM-x32\...\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [253816 2013-03-11] (Oracle Corporation)
HKLM-x32\...\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui [4858968 2013-05-09] (AVAST Software)
HKU\Kat\...\Run: [Spotify Web Helper] "C:\Users\Kat\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [1104384 2013-06-25] (Spotify Ltd)
HKU\Kat\...\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun [3672640 2013-03-14] (Disc Soft Ltd)
HKU\Kat\...\Run: [SearchProtect] C:\Users\Kat\AppData\Roaming\SearchProtect\bin\cltmng.exe [2852640 2013-05-07] (Conduit)
AppInit_DLLs: C:\WINDOWS\system32\nvinitx.dll [247144 2012-07-31] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll [202600 2012-07-31] (NVIDIA Corporation)
Startup: C:\Users\Kat\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation)
BootExecute:

==================== Services (Whitelisted) =================


==================== Drivers (Whitelisted) ====================


==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-07 16:52 - 2013-07-07 16:52 - 00000000 ____D C:\FRST
2013-07-05 07:13 - 2013-07-05 07:41 - 00000000 ____D C:\Users\Kat\Documents\Musik
2013-07-05 05:31 - 2013-06-28 13:15 - 1863026660 ____A C:\Users\Kat\Desktop\30 In the Dark.MOV
2013-07-05 05:30 - 2013-07-05 05:30 - 00000000 ____D C:\Users\Kat\Tracing
2013-07-05 05:25 - 2013-07-05 23:24 - 00000000 ____D C:\Program Files (x86)\Windows Live
2013-07-05 05:25 - 2013-07-05 05:25 - 00000000 ____D C:\Windows\PCHEALTH
2013-07-05 05:25 - 2013-07-05 05:25 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2013-07-05 05:22 - 2013-07-05 05:22 - 00000194 ____A C:\Windows\DirectX.log
2013-07-05 05:20 - 2013-07-05 05:30 - 00000000 ____D C:\Users\Kat\AppData\Local\Windows Live
2013-07-05 05:18 - 2013-07-05 05:19 - 142602520 ____A (Microsoft Corporation) C:\Users\Kat\Downloads\wlsetup-all_16.4.3508.0205.exe
2013-07-05 03:52 - 2013-07-05 03:52 - 00060550 ____A C:\Users\Kat\Downloads\antragerstattung_überweisung (geschützt).xlsx
2013-07-03 04:49 - 2013-07-05 05:21 - 00000000 ____D C:\Users\Kat\AppData\Roaming\TakeOwnershipEx
2013-07-03 04:48 - 2013-07-03 04:48 - 00508710 ____A C:\Users\Kat\Downloads\TakeOwnershipEx.zip
2013-07-03 04:48 - 2013-07-03 04:48 - 00000000 ____D C:\Program Files (x86)\TakeOwnershipEx
2013-07-03 04:11 - 2013-07-03 04:14 - 00000000 ___RD C:\Users\Kat\Dropbox
2013-07-03 04:07 - 2013-07-03 04:17 - 00000000 ____D C:\Users\Kat\AppData\Roaming\Dropbox
2013-07-03 01:55 - 2013-07-03 02:30 - 00000000 ____D C:\Users\Kat\AppData\Roaming\MeldaProduction
2013-07-03 01:55 - 2013-07-03 02:23 - 00000000 ____D C:\ProgramData\MeldaProduction
2013-07-03 01:55 - 2013-07-03 01:55 - 00000000 ____D C:\Program Files\VstPlugins
2013-07-03 01:55 - 2013-07-03 01:55 - 00000000 ____D C:\Program Files\MeldaProduction
2013-07-03 01:55 - 2013-07-03 01:55 - 00000000 ____D C:\Program Files\Common Files\VST3
2013-07-01 13:56 - 2013-07-01 13:56 - 00000000 ____D C:\ProgramData\Energy Management
2013-06-29 07:55 - 2013-06-29 07:55 - 00000000 ___SD C:\Users\Kat\Documents\Passwords Database
2013-06-28 04:01 - 2013-06-28 04:01 - 00000000 ____D C:\Users\Kat\AppData\LocalGoogle
2013-06-28 04:00 - 2013-06-28 05:16 - 00000000 ____A C:\Windows\SysWOW64\config.nt
2013-06-28 04:00 - 2013-06-28 04:00 - 01030952 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSnx.sys
2013-06-28 04:00 - 2013-06-28 04:00 - 00378944 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSP.sys
2013-06-28 04:00 - 2013-06-28 04:00 - 00189936 ____A C:\Windows\System32\Drivers\aswVmm.sys
2013-06-28 04:00 - 2013-06-28 04:00 - 00000175 ____A C:\Windows\System32\Drivers\aswVmm.sys.sum
2013-06-28 04:00 - 2013-06-28 04:00 - 00000175 ____A C:\Windows\System32\Drivers\aswSP.sys.sum
2013-06-28 04:00 - 2013-06-28 04:00 - 00000175 ____A C:\Windows\System32\Drivers\aswSnx.sys.sum
2013-06-28 04:00 - 2013-05-09 00:59 - 00080816 ____A (AVAST Software) C:\Windows\System32\Drivers\aswMonFlt.sys
2013-06-28 04:00 - 2013-05-09 00:59 - 00072016 ____A (AVAST Software) C:\Windows\System32\Drivers\aswRdr2.sys
2013-06-28 04:00 - 2013-05-09 00:59 - 00065336 ____A C:\Windows\System32\Drivers\aswRvrt.sys
2013-06-28 04:00 - 2013-05-09 00:59 - 00064288 ____A (AVAST Software) C:\Windows\System32\Drivers\aswTdi.sys
2013-06-28 04:00 - 2013-05-09 00:59 - 00033400 ____A (AVAST Software) C:\Windows\System32\Drivers\aswFsBlk.sys
2013-06-28 04:00 - 2013-05-09 00:58 - 00287840 ____A (AVAST Software) C:\Windows\System32\aswBoot.exe
2013-06-28 03:59 - 2013-06-28 03:59 - 00000000 ____D C:\ProgramData\AVAST Software
2013-06-28 03:59 - 2013-06-28 03:59 - 00000000 ____D C:\Program Files\AVAST Software
2013-06-28 03:59 - 2013-05-09 00:58 - 00041664 ____A (AVAST Software) C:\Windows\avastSS.scr
2013-06-28 03:57 - 2013-06-28 03:57 - 00000002 ____A C:\AvastSetup.log
2013-06-26 16:18 - 2013-06-26 16:18 - 00421880 ____A C:\Windows\System32\FNTCACHE.DAT
2013-06-25 11:49 - 2013-06-25 12:10 - 00000000 ____D C:\Program Files (x86)\MyPC Backup
2013-06-25 11:49 - 2013-06-25 11:49 - 00000000 ____D C:\Program Files (x86)\3GP to MP3 Converter
2013-06-25 11:49 - 2009-09-02 11:17 - 00000000 ____A C:\Windows\SysWOW64\wmtog32.dat
2013-06-25 02:45 - 2013-06-25 02:44 - 00263592 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-06-25 02:44 - 2013-06-25 02:44 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-06-25 02:44 - 2013-06-25 02:44 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-06-25 02:44 - 2013-06-25 02:44 - 00096168 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-06-25 02:44 - 2013-06-25 02:44 - 00000000 ____D C:\Program Files (x86)\Java
2013-06-17 08:20 - 2013-06-17 08:20 - 00000000 ____D C:\ProgramData\Sun
2013-06-17 08:19 - 2013-06-25 02:44 - 00867240 ____A (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll
2013-06-17 08:19 - 2013-06-25 02:44 - 00789416 ____A (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2013-06-17 02:58 - 2013-05-30 15:24 - 01257472 ____A (Microsoft Corporation) C:\Windows\System32\kernel32.dll
2013-06-17 02:58 - 2013-05-30 15:08 - 00974848 ____A (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-06-17 02:58 - 2013-05-23 15:01 - 01300992 ____A (Microsoft Corporation) C:\Windows\System32\gdi32.dll
2013-06-17 02:58 - 2013-05-23 14:27 - 01022464 ____A (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-06-17 02:56 - 2013-05-14 18:25 - 00888320 ____A (Microsoft Corporation) C:\Windows\System32\autochk.exe
2013-06-17 02:56 - 2013-05-14 18:25 - 00542208 ____A (Microsoft Corporation) C:\Windows\System32\untfs.dll
2013-06-17 02:56 - 2013-05-14 18:24 - 00793088 ____A (Microsoft Corporation) C:\Windows\SysWOW64\autochk.exe
2013-06-17 02:56 - 2013-05-14 18:24 - 00482816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll
2013-06-15 12:02 - 2013-05-03 23:58 - 00120736 ____A (Microsoft Corporation) C:\Windows\System32\AuthHost.exe
2013-06-15 12:02 - 2013-05-03 23:34 - 00446720 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\USBHUB3.SYS
2013-06-15 12:02 - 2013-05-03 23:34 - 00284416 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\spaceport.sys
2013-06-15 12:02 - 2013-05-03 23:34 - 00213248 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\UCX01000.SYS
2013-06-15 12:02 - 2013-05-03 23:30 - 00058312 ____A (Microsoft Corporation) C:\Windows\System32\wuauclt.exe
2013-06-15 12:02 - 2013-05-03 22:59 - 13644288 ____A (Microsoft Corporation) C:\Windows\System32\Windows.UI.Xaml.dll
2013-06-15 12:02 - 2013-05-03 22:59 - 03241472 ____A (Microsoft Corporation) C:\Windows\System32\wuaueng.dll
2013-06-15 12:02 - 2013-05-03 22:59 - 01619968 ____A (Microsoft Corporation) C:\Windows\System32\wucltux.dll
2013-06-15 12:02 - 2013-05-03 22:59 - 01483776 ____A (Microsoft Corporation) C:\Windows\System32\VSSVC.exe
2013-06-15 12:02 - 2013-05-03 22:59 - 00812544 ____A (Microsoft Corporation) C:\Windows\System32\Magnify.exe
2013-06-15 12:02 - 2013-05-03 22:59 - 00760320 ____A (Microsoft Corporation) C:\Windows\System32\wuapi.dll
2013-06-15 12:02 - 2013-05-03 22:59 - 00251904 ____A (Microsoft Corporation) C:\Windows\System32\WUSettingsProvider.dll
2013-06-15 12:02 - 2013-05-03 22:59 - 00141824 ____A (Microsoft Corporation) C:\Windows\System32\wuwebv.dll
2013-06-15 12:02 - 2013-05-03 22:59 - 00098304 ____A (Microsoft Corporation) C:\Windows\System32\wudriver.dll
2013-06-15 12:02 - 2013-05-03 22:59 - 00039424 ____A (Microsoft Corporation) C:\Windows\System32\wuapp.exe
2013-06-15 12:02 - 2013-05-03 22:58 - 10116096 ____A (Microsoft Corporation) C:\Windows\System32\twinui.dll
2013-06-15 12:02 - 2013-05-03 22:58 - 01332736 ____A (Microsoft Corporation) C:\Windows\System32\sysmain.dll
2013-06-15 12:02 - 2013-05-03 22:58 - 00470528 ____A (Microsoft Corporation) C:\Windows\System32\netprofmsvc.dll
2013-06-15 12:02 - 2013-05-03 22:58 - 00330240 ____A (Microsoft Corporation) C:\Windows\System32\stobject.dll
2013-06-15 12:02 - 2013-05-03 22:58 - 00328192 ____A (Microsoft Corporation) C:\Windows\System32\ubpm.dll
2013-06-15 12:02 - 2013-05-03 22:58 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\storewuauth.dll
2013-06-15 12:02 - 2013-05-03 22:58 - 00169984 ____A (Microsoft Corporation) C:\Windows\System32\netplwiz.dll
2013-06-15 12:02 - 2013-05-03 22:58 - 00151552 ____A (Microsoft Corporation) C:\Windows\System32\netprofm.dll
2013-06-15 12:02 - 2013-05-03 22:58 - 00093696 ____A (Microsoft Corporation) C:\Windows\System32\psmsrv.dll
2013-06-15 12:02 - 2013-05-03 22:57 - 02305024 ____A (Microsoft Corporation) C:\Windows\System32\authui.dll
2013-06-15 12:02 - 2013-05-03 22:57 - 01131520 ____A (Microsoft Corporation) C:\Windows\System32\AppXDeploymentServer.dll
2013-06-15 12:02 - 2013-05-03 22:57 - 00708096 ____A (Microsoft Corporation) C:\Windows\System32\AppXDeploymentExtensions.dll
2013-06-15 12:02 - 2013-05-03 22:57 - 00560640 ____A (Microsoft Corporation) C:\Windows\System32\mfmp4srcsnk.dll
2013-06-15 12:02 - 2013-05-03 22:57 - 00501760 ____A (Microsoft Corporation) C:\Windows\System32\DevicePairing.dll
2013-06-15 12:02 - 2013-05-03 22:57 - 00389120 ____A (Microsoft Corporation) C:\Windows\System32\BCP47Langs.dll
2013-06-15 12:02 - 2013-05-03 22:57 - 00179712 ____A (Microsoft Corporation) C:\Windows\System32\bisrv.dll
2013-06-15 12:02 - 2013-05-03 22:57 - 00122368 ____A (Microsoft Corporation) C:\Windows\System32\biwinrt.dll
2013-06-15 12:02 - 2013-05-03 22:57 - 00017408 ____A (Microsoft Corporation) C:\Windows\System32\muifontsetup.dll
2013-06-15 12:02 - 2013-05-03 22:56 - 00419840 ____A (Microsoft Corporation) C:\Windows\System32\intl.cpl
2013-06-15 12:02 - 2013-05-03 20:58 - 00758784 ____A (Microsoft Corporation) C:\Windows\SysWOW64\Magnify.exe
2013-06-15 12:02 - 2013-05-03 20:58 - 00621056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2013-06-15 12:02 - 2013-05-03 20:58 - 00125952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2013-06-15 12:02 - 2013-05-03 20:58 - 00083968 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2013-06-15 12:02 - 2013-05-03 20:58 - 00034304 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2013-06-15 12:02 - 2013-05-03 20:57 - 10788864 ____A (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2013-06-15 12:02 - 2013-05-03 20:57 - 08857088 ____A (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2013-06-15 12:02 - 2013-05-03 20:57 - 00303616 ____A (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll
2013-06-15 12:02 - 2013-05-03 20:57 - 00247296 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll
2013-06-15 12:02 - 2013-05-03 20:57 - 00151040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\netplwiz.dll
2013-06-15 12:02 - 2013-05-03 20:57 - 00115712 ____A (Microsoft Corporation) C:\Windows\SysWOW64\netprofm.dll
2013-06-15 12:02 - 2013-05-03 20:57 - 00018432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\npmproxy.dll
2013-06-15 12:02 - 2013-05-03 20:57 - 00014336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\muifontsetup.dll
2013-06-15 12:02 - 2013-05-03 20:56 - 02035712 ____A (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-06-15 12:02 - 2013-05-03 20:56 - 00449536 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DevicePairing.dll
2013-06-15 12:02 - 2013-05-03 20:56 - 00411136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2013-06-15 12:02 - 2013-05-03 20:56 - 00309760 ____A (Microsoft Corporation) C:\Windows\SysWOW64\BCP47Langs.dll
2013-06-15 12:02 - 2013-05-03 20:56 - 00092160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\biwinrt.dll
2013-06-15 12:02 - 2013-05-03 20:55 - 00389632 ____A (Microsoft Corporation) C:\Windows\SysWOW64\intl.cpl
2013-06-15 12:02 - 2013-05-03 20:51 - 00014848 ____A (Microsoft) C:\Windows\System32\rars.rs
2013-06-15 12:02 - 2013-05-03 20:48 - 00083968 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\hidclass.sys
2013-06-15 12:02 - 2013-05-03 20:48 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\hidusb.sys
2013-06-15 12:02 - 2013-05-03 20:47 - 00427520 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\rdbss.sys
2013-06-15 12:02 - 2013-05-03 20:10 - 00014848 ____A (Microsoft) C:\Windows\SysWOW64\rars.rs
2013-06-15 12:02 - 2013-05-02 14:04 - 00386646 ____A C:\Windows\System32\ApnDatabase.xml
2013-06-15 03:11 - 2013-06-15 03:11 - 00000000 ____D C:\Users\Kat\Desktop\Diesen Ordner auf dein Desktop kopieren
2013-06-15 03:08 - 2013-06-15 03:08 - 00000000 ____D C:\Program Files\Novation
2013-06-15 03:08 - 2011-10-05 02:46 - 00053080 ____A (Novation DMS Ltd.) C:\Windows\System32\Drivers\nvnusbaudio.sys
2013-06-15 03:08 - 2011-10-05 02:46 - 00020824 ____A (Novation DMS Ltd.) C:\Windows\System32\nvnusbaudio_coinst.dll
2013-06-12 08:33 - 2013-04-02 15:37 - 00025088 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-06-12 08:33 - 2013-04-02 15:12 - 00030720 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll
2013-06-12 06:27 - 2013-05-15 14:37 - 00044032 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2013-06-12 06:27 - 2013-05-15 14:36 - 14320640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-12 06:27 - 2013-05-15 14:35 - 19230720 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-12 06:27 - 2013-05-15 14:35 - 00053760 ____A (Microsoft Corporation) C:\Windows\System32\UXInit.dll
2013-06-12 06:27 - 2013-05-14 05:14 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-12 06:27 - 2013-05-14 01:23 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-12 06:27 - 2013-05-03 23:45 - 02233600 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-06-12 06:27 - 2013-04-28 14:30 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-12 06:27 - 2013-04-28 14:30 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-12 06:27 - 2013-04-28 14:30 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-12 06:27 - 2013-04-28 14:30 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-12 06:27 - 2013-04-28 14:30 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-12 06:27 - 2013-04-28 14:30 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-12 06:27 - 2013-04-28 14:30 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-12 06:27 - 2013-04-28 14:28 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-12 06:27 - 2013-04-28 14:28 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-12 06:27 - 2013-04-28 14:28 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-12 06:27 - 2013-04-28 14:28 - 00915968 ____A (Microsoft Corporation) C:\Windows\System32\uxtheme.dll
2013-06-12 06:27 - 2013-04-28 14:28 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-12 06:27 - 2013-04-28 14:28 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-12 06:27 - 2013-04-28 14:27 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-12 06:27 - 2013-04-28 14:27 - 02647552 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-12 06:27 - 2013-04-28 14:27 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-12 06:27 - 2013-04-26 21:20 - 00733184 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-06-12 06:27 - 2013-04-23 15:13 - 01013248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-06-12 06:27 - 2013-04-23 15:12 - 01569792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-06-12 06:27 - 2013-04-23 15:12 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-06-12 06:27 - 2013-04-23 14:56 - 01255936 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-06-12 06:27 - 2013-04-23 14:55 - 01889280 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-06-12 06:27 - 2013-04-23 14:55 - 00141312 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-06-12 06:27 - 2013-04-23 14:55 - 00068096 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-06-11 12:49 - 2013-06-11 14:53 - 00000000 ____D C:\Users\Kat\AppData\Roaming\Skype
2013-06-11 12:49 - 2013-06-11 13:06 - 00000000 ____D C:\ProgramData\Skype
2013-06-11 12:49 - 2013-06-11 12:49 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-06-11 04:23 - 2013-06-11 04:23 - 00000000 ____D C:\Users\Kat\Downloads\Jamari Glitch Sample Rack Live 9 Project
2013-06-11 04:20 - 2013-06-11 04:20 - 00000000 ____D C:\Program Files (x86)\7-Zip

==================== One Month Modified Files and Folders =======

2013-07-07 16:52 - 2013-07-07 16:52 - 00000000 ____D C:\FRST
2013-07-07 00:33 - 2013-05-11 06:26 - 00000000 ____D C:\users\Kat
2013-07-07 00:33 - 2012-09-13 10:34 - 00000000 ____D C:\users\Administrator
2013-07-07 00:33 - 2012-07-26 00:12 - 00000000 ____D C:\Windows\System32\sru
2013-07-07 00:33 - 2012-07-26 00:12 - 00000000 ____D C:\Windows\registration
2013-07-07 00:32 - 2012-07-25 21:38 - 00000000 ____D C:\Windows\System32\Sysprep
2013-07-06 14:34 - 2012-07-25 23:22 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-07-06 11:11 - 2012-07-25 23:21 - 00048903 ____A C:\Windows\setupact.log
2013-07-05 23:24 - 2013-07-05 05:25 - 00000000 ____D C:\Program Files (x86)\Windows Live
2013-07-05 12:38 - 2012-09-13 10:32 - 00008040 ____A C:\Windows\PFRO.log
2013-07-05 07:41 - 2013-07-05 07:13 - 00000000 ____D C:\Users\Kat\Documents\Musik
2013-07-05 07:02 - 2013-01-17 12:40 - 01132884 ____A C:\Windows\WindowsUpdate.log
2013-07-05 05:30 - 2013-07-05 05:30 - 00000000 ____D C:\Users\Kat\Tracing
2013-07-05 05:30 - 2013-07-05 05:20 - 00000000 ____D C:\Users\Kat\AppData\Local\Windows Live
2013-07-05 05:25 - 2013-07-05 05:25 - 00000000 ____D C:\Windows\PCHEALTH
2013-07-05 05:25 - 2013-07-05 05:25 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2013-07-05 05:22 - 2013-07-05 05:22 - 00000194 ____A C:\Windows\DirectX.log
2013-07-05 05:21 - 2013-07-03 04:49 - 00000000 ____D C:\Users\Kat\AppData\Roaming\TakeOwnershipEx
2013-07-05 05:19 - 2013-07-05 05:18 - 142602520 ____A (Microsoft Corporation) C:\Users\Kat\Downloads\wlsetup-all_16.4.3508.0205.exe
2013-07-05 05:03 - 2013-01-17 20:51 - 00753134 ____A C:\Windows\System32\perfh007.dat
2013-07-05 05:03 - 2013-01-17 20:51 - 00155826 ____A C:\Windows\System32\perfc007.dat
2013-07-05 05:03 - 2012-07-25 23:28 - 01745416 ____A C:\Windows\System32\PerfStringBackup.INI
2013-07-05 04:41 - 2013-05-11 06:36 - 00001126 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-07-05 04:20 - 2012-07-26 00:12 - 00000000 ____D C:\Windows\AUInstallAgent
2013-07-05 03:54 - 2013-04-05 04:08 - 00000000 ____D C:\Users\Kat\AppData\Local\Packages
2013-07-05 03:52 - 2013-07-05 03:52 - 00060550 ____A C:\Users\Kat\Downloads\antragerstattung_überweisung (geschützt).xlsx
2013-07-05 02:25 - 2013-05-11 06:36 - 00001122 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-07-03 05:39 - 2013-04-11 16:36 - 00000000 ____D C:\Users\Kat\Desktop\Fotos
2013-07-03 04:48 - 2013-07-03 04:48 - 00508710 ____A C:\Users\Kat\Downloads\TakeOwnershipEx.zip
2013-07-03 04:48 - 2013-07-03 04:48 - 00000000 ____D C:\Program Files (x86)\TakeOwnershipEx
2013-07-03 04:17 - 2013-07-03 04:07 - 00000000 ____D C:\Users\Kat\AppData\Roaming\Dropbox
2013-07-03 04:14 - 2013-07-03 04:11 - 00000000 ___RD C:\Users\Kat\Dropbox
2013-07-03 04:08 - 2013-04-05 05:54 - 00000000 ____D C:\Users\Kat\Documents\Ableton
2013-07-03 02:30 - 2013-07-03 01:55 - 00000000 ____D C:\Users\Kat\AppData\Roaming\MeldaProduction
2013-07-03 02:23 - 2013-07-03 01:55 - 00000000 ____D C:\ProgramData\MeldaProduction
2013-07-03 01:55 - 2013-07-03 01:55 - 00000000 ____D C:\Program Files\VstPlugins
2013-07-03 01:55 - 2013-07-03 01:55 - 00000000 ____D C:\Program Files\MeldaProduction
2013-07-03 01:55 - 2013-07-03 01:55 - 00000000 ____D C:\Program Files\Common Files\VST3
2013-07-01 13:56 - 2013-07-01 13:56 - 00000000 ____D C:\ProgramData\Energy Management
2013-06-29 07:58 - 2013-05-27 03:45 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-06-29 07:57 - 2012-07-26 00:12 - 00000000 ___HD C:\Windows\ELAMBKUP
2013-06-29 07:56 - 2012-07-25 21:26 - 00262144 __ASH C:\Windows\System32\config\ELAM
2013-06-29 07:55 - 2013-06-29 07:55 - 00000000 ___SD C:\Users\Kat\Documents\Passwords Database
2013-06-28 13:15 - 2013-07-05 05:31 - 1863026660 ____A C:\Users\Kat\Desktop\30 In the Dark.MOV
2013-06-28 10:42 - 2013-05-15 00:55 - 00000000 ____D C:\Users\Kat\AppData\Roaming\Spotify
2013-06-28 05:16 - 2013-06-28 04:00 - 00000000 ____A C:\Windows\SysWOW64\config.nt
2013-06-28 04:01 - 2013-06-28 04:01 - 00000000 ____D C:\Users\Kat\AppData\LocalGoogle
2013-06-28 04:01 - 2013-05-11 06:36 - 00000000 ____D C:\Users\Kat\AppData\Local\Google
2013-06-28 04:01 - 2013-05-11 06:36 - 00000000 ____D C:\Program Files (x86)\Google
2013-06-28 04:00 - 2013-06-28 04:00 - 01030952 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSnx.sys
2013-06-28 04:00 - 2013-06-28 04:00 - 00378944 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSP.sys
2013-06-28 04:00 - 2013-06-28 04:00 - 00189936 ____A C:\Windows\System32\Drivers\aswVmm.sys
2013-06-28 04:00 - 2013-06-28 04:00 - 00000175 ____A C:\Windows\System32\Drivers\aswVmm.sys.sum
2013-06-28 04:00 - 2013-06-28 04:00 - 00000175 ____A C:\Windows\System32\Drivers\aswSP.sys.sum
2013-06-28 04:00 - 2013-06-28 04:00 - 00000175 ____A C:\Windows\System32\Drivers\aswSnx.sys.sum
2013-06-28 03:59 - 2013-06-28 03:59 - 00000000 ____D C:\ProgramData\AVAST Software
2013-06-28 03:59 - 2013-06-28 03:59 - 00000000 ____D C:\Program Files\AVAST Software
2013-06-28 03:57 - 2013-06-28 03:57 - 00000002 ____A C:\AvastSetup.log
2013-06-26 16:52 - 2012-07-26 00:12 - 00000000 ____D C:\Windows\rescache
2013-06-26 16:18 - 2013-06-26 16:18 - 00421880 ____A C:\Windows\System32\FNTCACHE.DAT
2013-06-25 12:10 - 2013-06-25 11:49 - 00000000 ____D C:\Program Files (x86)\MyPC Backup
2013-06-25 11:49 - 2013-06-25 11:49 - 00000000 ____D C:\Program Files (x86)\3GP to MP3 Converter
2013-06-25 11:47 - 2012-07-26 00:12 - 00000000 ____D C:\Windows\Resources
2013-06-25 02:44 - 2013-06-25 02:45 - 00263592 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-06-25 02:44 - 2013-06-25 02:44 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-06-25 02:44 - 2013-06-25 02:44 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-06-25 02:44 - 2013-06-25 02:44 - 00096168 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-06-25 02:44 - 2013-06-25 02:44 - 00000000 ____D C:\Program Files (x86)\Java
2013-06-25 02:44 - 2013-06-17 08:19 - 00867240 ____A (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll
2013-06-25 02:44 - 2013-06-17 08:19 - 00789416 ____A (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2013-06-25 02:31 - 2012-07-26 00:12 - 00000000 ____D C:\Windows\LiveKernelReports
2013-06-20 07:58 - 2013-05-24 08:53 - 00000000 ____D C:\Users\Kat\Desktop\Musik
2013-06-19 14:07 - 2013-04-05 04:11 - 00000000 ____D C:\Users\Kat\Documents\Bluetooth Folder
2013-06-19 13:03 - 2012-07-26 00:12 - 00000000 ____D C:\Windows\System32\NDF
2013-06-18 05:30 - 2012-07-25 21:26 - 00262144 __ASH C:\Windows\System32\config\BBI
2013-06-18 05:29 - 2012-07-26 00:12 - 00000000 ___RD C:\Windows\ToastData
2013-06-18 05:29 - 2012-07-26 00:12 - 00000000 ____D C:\Windows\WinStore
2013-06-18 05:29 - 2012-07-26 00:12 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2013-06-18 05:29 - 2012-07-26 00:12 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2013-06-18 05:29 - 2012-07-25 21:38 - 00000000 ____D C:\Windows\SysWOW64\Dism
2013-06-18 05:29 - 2012-07-25 21:38 - 00000000 ____D C:\Windows\System32\Dism
2013-06-17 08:20 - 2013-06-17 08:20 - 00000000 ____D C:\ProgramData\Sun
2013-06-17 02:04 - 2013-05-20 06:35 - 00000000 ____D C:\Program Files\Microsoft Office 15
2013-06-15 03:11 - 2013-06-15 03:11 - 00000000 ____D C:\Users\Kat\Desktop\Diesen Ordner auf dein Desktop kopieren
2013-06-15 03:08 - 2013-06-15 03:08 - 00000000 ____D C:\Program Files\Novation
2013-06-14 14:59 - 2013-05-15 00:55 - 00000000 ____D C:\Users\Kat\AppData\Local\Spotify
2013-06-14 02:38 - 2013-05-12 04:15 - 75825640 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-06-14 02:19 - 2013-05-07 09:17 - 00000000 ____D C:\Users\Kat\Documents\Wohnung
2013-06-11 14:53 - 2013-06-11 12:49 - 00000000 ____D C:\Users\Kat\AppData\Roaming\Skype
2013-06-11 13:06 - 2013-06-11 12:49 - 00000000 ____D C:\ProgramData\Skype
2013-06-11 12:49 - 2013-06-11 12:49 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-06-11 04:23 - 2013-06-11 04:23 - 00000000 ____D C:\Users\Kat\Downloads\Jamari Glitch Sample Rack Live 9 Project
2013-06-11 04:20 - 2013-06-11 04:20 - 00000000 ____D C:\Program Files (x86)\7-Zip
2013-06-11 04:19 - 2013-05-11 07:03 - 00000000 ____D C:\Users\Kat\AppData\Local\WinZip

==================== Known DLLs (Whitelisted) ================


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points  =========================

Restore point made on: 2013-06-17 04:37:58
Restore point made on: 2013-06-25 02:44:23
Restore point made on: 2013-06-28 03:59:33
Restore point made on: 2013-07-05 05:21:57

==================== Memory info ===========================

Percentage of memory in use: 23%
Total physical RAM: 3951.52 MB
Available physical RAM: 3035.45 MB
Total Pagefile: 3951.52 MB
Available Pagefile: 3043.81 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB

==================== Drives ================================

Drive c: (Windows8_OS) (Fixed) (Total:418.43 GB) (Free:328.63 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (LENOVO) (Fixed) (Total:25 GB) (Free:21.87 GB) NTFS
Drive e: (STORE N GO) (Removable) (Total:7.46 GB) (Free:7.46 GB) FAT32 (Disk=1 Partition=1)
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: D5A4DC64)

Partition: GPT Partition Type
========================================================
Disk: 1 (Size: 7 GB) (Disk ID: 00000000)
Partition 1: (Not Active) - (Size=7 GB) - (Type=0B)


LastRegBack: 2013-07-03 10:58

==================== End Of Log ============================
--- --- ---

--- --- ---

schrauber 07.07.2013 18:39
Bitte nochmal wenn möglich, das Tool konnte die Registry nicht laden :)

KatinkaBu 08.07.2013 13:09
FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-07-2013
Ran by SYSTEM on 08-07-2013 13:54:19
Running from E:\
Windows 8 (X64) OS Language: English(US)
Internet Explorer Version 10
Boot Mode: Recovery

The current controlset is ControlSet001
ATTENTION!:=====> FRST is updated to run from normal or Safe mode to produce a full FRST.txt log and an extra Addition.txt log.

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtsFT] RTFTrack.exe [x]
HKLM\...\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-26] (Synaptics Incorporated)
HKLM\...\Run: [SynLenovoGestureMgr] "%ProgramFiles%\Synaptics\SynTP\SynLenovoGestureMgr.exe" /m [665400 2012-08-26] (Synaptics)
HKLM\...\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s [13213840 2012-10-25] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /FORPCEE4  [1234064 2012-10-28] (Realtek Semiconductor)
HKLM\...\Run: [BtPreLoad] "C:\Program Files (x86)\Bluetooth Suite\BtPreLoad.exe" [64640 2012-09-29] ()
HKLM\...\Run: [OnekeyStudio] C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe -start [4196432 2012-09-14] (Lenovo)
HKLM\...\Run: [Energy Management] C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [17080376 2013-01-17] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [191544 2013-01-17] (Lenovo(beijing) Limited)
HKLM-x32\...\Run: [Dolby Home Theater v4] "C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe" -autostart [508656 2012-07-25] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [YouCam Mirage] "C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe" [136488 2012-07-27] (CyberLink)
HKLM-x32\...\Run: [YouCam Tray] "C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe" /s [167024 2012-07-27] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GShortCut] "C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Lenovo\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\5.0" [217088 2012-04-18] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] "C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe" [91432 2012-03-28] (CyberLink Corp.)
HKLM-x32\...\Run: [Intel AppUp(SM) center] "C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe" --domain-id F0399437-FD0C-4A48-B101-F0314A6172E4 [155488 2012-07-12] (Intel Corporation)
HKLM-x32\...\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-05-11] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SearchProtectAll] C:\Program Files (x86)\SearchProtect\bin\cltmng.exe [2852640 2013-05-07] (Conduit)
HKLM-x32\...\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [253816 2013-03-11] (Oracle Corporation)
HKLM-x32\...\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui [4858968 2013-05-09] (AVAST Software)
HKU\Kat\...\Run: [Spotify Web Helper] "C:\Users\Kat\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [1104384 2013-06-25] (Spotify Ltd)
HKU\Kat\...\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun [3672640 2013-03-14] (Disc Soft Ltd)
HKU\Kat\...\Run: [SearchProtect] C:\Users\Kat\AppData\Roaming\SearchProtect\bin\cltmng.exe [2852640 2013-05-07] (Conduit)
AppInit_DLLs: C:\WINDOWS\system32\nvinitx.dll [247144 2012-07-31] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll [202600 2012-07-31] (NVIDIA Corporation)
Startup: C:\Users\Kat\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation)

==================== Services (Whitelisted) =================

S2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [220288 2012-09-29] (Qualcomm Atheros Commnucations)
S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
S2 CltMngSvc; C:\Program Files (x86)\SearchProtect\bin\CltMngSvc.exe [97056 2013-05-07] (Conduit)
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
S4 McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [237920 2012-06-21] (McAfee, Inc.)
S2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [218320 2012-06-21] (McAfee, Inc.)
S2 mfevtp; C:\WINDOWS\system32\mfevtps.exe [182752 2013-02-19] (McAfee, Inc.)
S2 OfficeSvc; C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [1900728 2013-06-05] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [14920 2013-01-28] (Microsoft Corporation)
S2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-09-29] (Atheros)

==================== Drivers (Whitelisted) ====================

S2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software)
S2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
S1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
S0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
S1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-06-28] (AVAST Software)
S1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-06-28] (AVAST Software)
S1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
S0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-06-28] ()
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [76952 2012-09-29] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-25] (Microsoft Corporation)
S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [69672 2012-06-21] (McAfee, Inc.)
S1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283200 2013-05-30] (DT Soft Ltd)
S3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [169320 2012-06-21] (McAfee, Inc.)
S3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [300392 2012-06-21] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [66712 2012-06-18] (McAfee, Inc.)
S3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [513456 2012-06-21] (McAfee, Inc.)
S0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [771536 2013-02-19] (McAfee, Inc.)
S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [106112 2012-06-21] (McAfee, Inc.)
S0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [340216 2013-02-19] (McAfee, Inc.)
S3 NvnUsbAudio; C:\Windows\system32\DRIVERS\nvnusbaudio.sys [53080 2011-10-05] (Novation DMS Ltd.)
S3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [8227216 2012-08-26] (Realtek Semiconductor Corp.)
S3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-26] (Synaptics Incorporated)
S3 TASCAM_US122144; C:\Windows\System32\Drivers\tascusb2.sys [409664 2012-02-13] (TASCAM)
S3 TASCAM_US122L_MK2_MIDI; C:\Windows\system32\drivers\tscusb2m.sys [31296 2012-02-13] (TASCAM)
S3 TASCAM_US122L_MK2_WDM; C:\Windows\system32\drivers\tscusb2a.sys [50240 2012-02-13] (TASCAM)
S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ("CyberLink)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-07 16:52 - 2013-07-07 16:52 - 00000000 ____D C:\FRST
2013-07-05 07:13 - 2013-07-05 07:41 - 00000000 ____D C:\Users\Kat\Documents\Musik
2013-07-05 05:31 - 2013-06-28 13:15 - 1863026660 ____A C:\Users\Kat\Desktop\30 In the Dark.MOV
2013-07-05 05:30 - 2013-07-05 05:30 - 00000000 ____D C:\Users\Kat\Tracing
2013-07-05 05:25 - 2013-07-05 23:24 - 00000000 ____D C:\Program Files (x86)\Windows Live
2013-07-05 05:25 - 2013-07-05 05:25 - 00000000 ____D C:\Windows\PCHEALTH
2013-07-05 05:25 - 2013-07-05 05:25 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2013-07-05 05:22 - 2013-07-05 05:22 - 00000194 ____A C:\Windows\DirectX.log
2013-07-05 05:20 - 2013-07-05 05:30 - 00000000 ____D C:\Users\Kat\AppData\Local\Windows Live
2013-07-05 05:18 - 2013-07-05 05:19 - 142602520 ____A (Microsoft Corporation) C:\Users\Kat\Downloads\wlsetup-all_16.4.3508.0205.exe
2013-07-05 03:52 - 2013-07-05 03:52 - 00060550 ____A C:\Users\Kat\Downloads\antragerstattung_überweisung (geschützt).xlsx
2013-07-03 04:49 - 2013-07-05 05:21 - 00000000 ____D C:\Users\Kat\AppData\Roaming\TakeOwnershipEx
2013-07-03 04:48 - 2013-07-03 04:48 - 00508710 ____A C:\Users\Kat\Downloads\TakeOwnershipEx.zip
2013-07-03 04:48 - 2013-07-03 04:48 - 00000000 ____D C:\Program Files (x86)\TakeOwnershipEx
2013-07-03 04:11 - 2013-07-03 04:14 - 00000000 ___RD C:\Users\Kat\Dropbox
2013-07-03 04:07 - 2013-07-03 04:17 - 00000000 ____D C:\Users\Kat\AppData\Roaming\Dropbox
2013-07-03 01:55 - 2013-07-03 02:30 - 00000000 ____D C:\Users\Kat\AppData\Roaming\MeldaProduction
2013-07-03 01:55 - 2013-07-03 02:23 - 00000000 ____D C:\ProgramData\MeldaProduction
2013-07-03 01:55 - 2013-07-03 01:55 - 00000000 ____D C:\Program Files\VstPlugins
2013-07-03 01:55 - 2013-07-03 01:55 - 00000000 ____D C:\Program Files\MeldaProduction
2013-07-03 01:55 - 2013-07-03 01:55 - 00000000 ____D C:\Program Files\Common Files\VST3
2013-07-01 13:56 - 2013-07-01 13:56 - 00000000 ____D C:\ProgramData\Energy Management
2013-06-29 07:55 - 2013-06-29 07:55 - 00000000 ___SD C:\Users\Kat\Documents\Passwords Database
2013-06-28 04:01 - 2013-06-28 04:01 - 00000000 ____D C:\Users\Kat\AppData\LocalGoogle
2013-06-28 04:00 - 2013-06-28 05:16 - 00000000 ____A C:\Windows\SysWOW64\config.nt
2013-06-28 04:00 - 2013-06-28 04:00 - 01030952 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSnx.sys
2013-06-28 04:00 - 2013-06-28 04:00 - 00378944 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSP.sys
2013-06-28 04:00 - 2013-06-28 04:00 - 00189936 ____A C:\Windows\System32\Drivers\aswVmm.sys
2013-06-28 04:00 - 2013-06-28 04:00 - 00000175 ____A C:\Windows\System32\Drivers\aswVmm.sys.sum
2013-06-28 04:00 - 2013-06-28 04:00 - 00000175 ____A C:\Windows\System32\Drivers\aswSP.sys.sum
2013-06-28 04:00 - 2013-06-28 04:00 - 00000175 ____A C:\Windows\System32\Drivers\aswSnx.sys.sum
2013-06-28 04:00 - 2013-05-09 00:59 - 00080816 ____A (AVAST Software) C:\Windows\System32\Drivers\aswMonFlt.sys
2013-06-28 04:00 - 2013-05-09 00:59 - 00072016 ____A (AVAST Software) C:\Windows\System32\Drivers\aswRdr2.sys
2013-06-28 04:00 - 2013-05-09 00:59 - 00065336 ____A C:\Windows\System32\Drivers\aswRvrt.sys
2013-06-28 04:00 - 2013-05-09 00:59 - 00064288 ____A (AVAST Software) C:\Windows\System32\Drivers\aswTdi.sys
2013-06-28 04:00 - 2013-05-09 00:59 - 00033400 ____A (AVAST Software) C:\Windows\System32\Drivers\aswFsBlk.sys
2013-06-28 04:00 - 2013-05-09 00:58 - 00287840 ____A (AVAST Software) C:\Windows\System32\aswBoot.exe
2013-06-28 03:59 - 2013-06-28 03:59 - 00000000 ____D C:\ProgramData\AVAST Software
2013-06-28 03:59 - 2013-06-28 03:59 - 00000000 ____D C:\Program Files\AVAST Software
2013-06-28 03:59 - 2013-05-09 00:58 - 00041664 ____A (AVAST Software) C:\Windows\avastSS.scr
2013-06-28 03:57 - 2013-06-28 03:57 - 00000002 ____A C:\AvastSetup.log
2013-06-26 16:18 - 2013-06-26 16:18 - 00421880 ____A C:\Windows\System32\FNTCACHE.DAT
2013-06-25 11:49 - 2013-06-25 12:10 - 00000000 ____D C:\Program Files (x86)\MyPC Backup
2013-06-25 11:49 - 2013-06-25 11:49 - 00000000 ____D C:\Program Files (x86)\3GP to MP3 Converter
2013-06-25 11:49 - 2009-09-02 11:17 - 00000000 ____A C:\Windows\SysWOW64\wmtog32.dat
2013-06-25 02:45 - 2013-06-25 02:44 - 00263592 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-06-25 02:44 - 2013-06-25 02:44 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-06-25 02:44 - 2013-06-25 02:44 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-06-25 02:44 - 2013-06-25 02:44 - 00096168 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-06-25 02:44 - 2013-06-25 02:44 - 00000000 ____D C:\Program Files (x86)\Java
2013-06-17 08:20 - 2013-06-17 08:20 - 00000000 ____D C:\ProgramData\Sun
2013-06-17 08:19 - 2013-06-25 02:44 - 00867240 ____A (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll
2013-06-17 08:19 - 2013-06-25 02:44 - 00789416 ____A (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2013-06-17 02:58 - 2013-05-30 15:24 - 01257472 ____A (Microsoft Corporation) C:\Windows\System32\kernel32.dll
2013-06-17 02:58 - 2013-05-30 15:08 - 00974848 ____A (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-06-17 02:58 - 2013-05-23 15:01 - 01300992 ____A (Microsoft Corporation) C:\Windows\System32\gdi32.dll
2013-06-17 02:58 - 2013-05-23 14:27 - 01022464 ____A (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-06-17 02:56 - 2013-05-14 18:25 - 00888320 ____A (Microsoft Corporation) C:\Windows\System32\autochk.exe
2013-06-17 02:56 - 2013-05-14 18:25 - 00542208 ____A (Microsoft Corporation) C:\Windows\System32\untfs.dll
2013-06-17 02:56 - 2013-05-14 18:24 - 00793088 ____A (Microsoft Corporation) C:\Windows\SysWOW64\autochk.exe
2013-06-17 02:56 - 2013-05-14 18:24 - 00482816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll
2013-06-15 12:02 - 2013-05-03 23:58 - 00120736 ____A (Microsoft Corporation) C:\Windows\System32\AuthHost.exe
2013-06-15 12:02 - 2013-05-03 23:34 - 00446720 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\USBHUB3.SYS
2013-06-15 12:02 - 2013-05-03 23:34 - 00284416 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\spaceport.sys
2013-06-15 12:02 - 2013-05-03 23:34 - 00213248 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\UCX01000.SYS
2013-06-15 12:02 - 2013-05-03 23:30 - 00058312 ____A (Microsoft Corporation) C:\Windows\System32\wuauclt.exe
2013-06-15 12:02 - 2013-05-03 22:59 - 13644288 ____A (Microsoft Corporation) C:\Windows\System32\Windows.UI.Xaml.dll
2013-06-15 12:02 - 2013-05-03 22:59 - 03241472 ____A (Microsoft Corporation) C:\Windows\System32\wuaueng.dll
2013-06-15 12:02 - 2013-05-03 22:59 - 01619968 ____A (Microsoft Corporation) C:\Windows\System32\wucltux.dll
2013-06-15 12:02 - 2013-05-03 22:59 - 01483776 ____A (Microsoft Corporation) C:\Windows\System32\VSSVC.exe
2013-06-15 12:02 - 2013-05-03 22:59 - 00812544 ____A (Microsoft Corporation) C:\Windows\System32\Magnify.exe
2013-06-15 12:02 - 2013-05-03 22:59 - 00760320 ____A (Microsoft Corporation) C:\Windows\System32\wuapi.dll
2013-06-15 12:02 - 2013-05-03 22:59 - 00251904 ____A (Microsoft Corporation) C:\Windows\System32\WUSettingsProvider.dll
2013-06-15 12:02 - 2013-05-03 22:59 - 00141824 ____A (Microsoft Corporation) C:\Windows\System32\wuwebv.dll
2013-06-15 12:02 - 2013-05-03 22:59 - 00098304 ____A (Microsoft Corporation) C:\Windows\System32\wudriver.dll
2013-06-15 12:02 - 2013-05-03 22:59 - 00039424 ____A (Microsoft Corporation) C:\Windows\System32\wuapp.exe
2013-06-15 12:02 - 2013-05-03 22:58 - 10116096 ____A (Microsoft Corporation) C:\Windows\System32\twinui.dll
2013-06-15 12:02 - 2013-05-03 22:58 - 01332736 ____A (Microsoft Corporation) C:\Windows\System32\sysmain.dll
2013-06-15 12:02 - 2013-05-03 22:58 - 00470528 ____A (Microsoft Corporation) C:\Windows\System32\netprofmsvc.dll
2013-06-15 12:02 - 2013-05-03 22:58 - 00330240 ____A (Microsoft Corporation) C:\Windows\System32\stobject.dll
2013-06-15 12:02 - 2013-05-03 22:58 - 00328192 ____A (Microsoft Corporation) C:\Windows\System32\ubpm.dll
2013-06-15 12:02 - 2013-05-03 22:58 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\storewuauth.dll
2013-06-15 12:02 - 2013-05-03 22:58 - 00169984 ____A (Microsoft Corporation) C:\Windows\System32\netplwiz.dll
2013-06-15 12:02 - 2013-05-03 22:58 - 00151552 ____A (Microsoft Corporation) C:\Windows\System32\netprofm.dll
2013-06-15 12:02 - 2013-05-03 22:58 - 00093696 ____A (Microsoft Corporation) C:\Windows\System32\psmsrv.dll
2013-06-15 12:02 - 2013-05-03 22:57 - 02305024 ____A (Microsoft Corporation) C:\Windows\System32\authui.dll
2013-06-15 12:02 - 2013-05-03 22:57 - 01131520 ____A (Microsoft Corporation) C:\Windows\System32\AppXDeploymentServer.dll
2013-06-15 12:02 - 2013-05-03 22:57 - 00708096 ____A (Microsoft Corporation) C:\Windows\System32\AppXDeploymentExtensions.dll
2013-06-15 12:02 - 2013-05-03 22:57 - 00560640 ____A (Microsoft Corporation) C:\Windows\System32\mfmp4srcsnk.dll
2013-06-15 12:02 - 2013-05-03 22:57 - 00501760 ____A (Microsoft Corporation) C:\Windows\System32\DevicePairing.dll
2013-06-15 12:02 - 2013-05-03 22:57 - 00389120 ____A (Microsoft Corporation) C:\Windows\System32\BCP47Langs.dll
2013-06-15 12:02 - 2013-05-03 22:57 - 00179712 ____A (Microsoft Corporation) C:\Windows\System32\bisrv.dll
2013-06-15 12:02 - 2013-05-03 22:57 - 00122368 ____A (Microsoft Corporation) C:\Windows\System32\biwinrt.dll
2013-06-15 12:02 - 2013-05-03 22:57 - 00017408 ____A (Microsoft Corporation) C:\Windows\System32\muifontsetup.dll
2013-06-15 12:02 - 2013-05-03 22:56 - 00419840 ____A (Microsoft Corporation) C:\Windows\System32\intl.cpl
2013-06-15 12:02 - 2013-05-03 20:58 - 00758784 ____A (Microsoft Corporation) C:\Windows\SysWOW64\Magnify.exe
2013-06-15 12:02 - 2013-05-03 20:58 - 00621056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2013-06-15 12:02 - 2013-05-03 20:58 - 00125952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2013-06-15 12:02 - 2013-05-03 20:58 - 00083968 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2013-06-15 12:02 - 2013-05-03 20:58 - 00034304 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2013-06-15 12:02 - 2013-05-03 20:57 - 10788864 ____A (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2013-06-15 12:02 - 2013-05-03 20:57 - 08857088 ____A (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2013-06-15 12:02 - 2013-05-03 20:57 - 00303616 ____A (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll
2013-06-15 12:02 - 2013-05-03 20:57 - 00247296 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll
2013-06-15 12:02 - 2013-05-03 20:57 - 00151040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\netplwiz.dll
2013-06-15 12:02 - 2013-05-03 20:57 - 00115712 ____A (Microsoft Corporation) C:\Windows\SysWOW64\netprofm.dll
2013-06-15 12:02 - 2013-05-03 20:57 - 00018432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\npmproxy.dll
2013-06-15 12:02 - 2013-05-03 20:57 - 00014336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\muifontsetup.dll
2013-06-15 12:02 - 2013-05-03 20:56 - 02035712 ____A (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-06-15 12:02 - 2013-05-03 20:56 - 00449536 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DevicePairing.dll
2013-06-15 12:02 - 2013-05-03 20:56 - 00411136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2013-06-15 12:02 - 2013-05-03 20:56 - 00309760 ____A (Microsoft Corporation) C:\Windows\SysWOW64\BCP47Langs.dll
2013-06-15 12:02 - 2013-05-03 20:56 - 00092160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\biwinrt.dll
2013-06-15 12:02 - 2013-05-03 20:55 - 00389632 ____A (Microsoft Corporation) C:\Windows\SysWOW64\intl.cpl
2013-06-15 12:02 - 2013-05-03 20:51 - 00014848 ____A (Microsoft) C:\Windows\System32\rars.rs
2013-06-15 12:02 - 2013-05-03 20:48 - 00083968 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\hidclass.sys
2013-06-15 12:02 - 2013-05-03 20:48 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\hidusb.sys
2013-06-15 12:02 - 2013-05-03 20:47 - 00427520 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\rdbss.sys
2013-06-15 12:02 - 2013-05-03 20:10 - 00014848 ____A (Microsoft) C:\Windows\SysWOW64\rars.rs
2013-06-15 12:02 - 2013-05-02 14:04 - 00386646 ____A C:\Windows\System32\ApnDatabase.xml
2013-06-15 03:11 - 2013-06-15 03:11 - 00000000 ____D C:\Users\Kat\Desktop\Diesen Ordner auf dein Desktop kopieren
2013-06-15 03:08 - 2013-06-15 03:08 - 00000000 ____D C:\Program Files\Novation
2013-06-15 03:08 - 2011-10-05 02:46 - 00053080 ____A (Novation DMS Ltd.) C:\Windows\System32\Drivers\nvnusbaudio.sys
2013-06-15 03:08 - 2011-10-05 02:46 - 00020824 ____A (Novation DMS Ltd.) C:\Windows\System32\nvnusbaudio_coinst.dll
2013-06-12 08:33 - 2013-04-02 15:37 - 00025088 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-06-12 08:33 - 2013-04-02 15:12 - 00030720 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll
2013-06-12 06:27 - 2013-05-15 14:37 - 00044032 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2013-06-12 06:27 - 2013-05-15 14:36 - 14320640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-12 06:27 - 2013-05-15 14:35 - 19230720 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-12 06:27 - 2013-05-15 14:35 - 00053760 ____A (Microsoft Corporation) C:\Windows\System32\UXInit.dll
2013-06-12 06:27 - 2013-05-14 05:14 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-12 06:27 - 2013-05-14 01:23 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-12 06:27 - 2013-05-03 23:45 - 02233600 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-06-12 06:27 - 2013-04-28 14:30 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-12 06:27 - 2013-04-28 14:30 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-12 06:27 - 2013-04-28 14:30 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-12 06:27 - 2013-04-28 14:30 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-12 06:27 - 2013-04-28 14:30 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-12 06:27 - 2013-04-28 14:30 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-12 06:27 - 2013-04-28 14:30 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-12 06:27 - 2013-04-28 14:28 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-12 06:27 - 2013-04-28 14:28 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-12 06:27 - 2013-04-28 14:28 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-12 06:27 - 2013-04-28 14:28 - 00915968 ____A (Microsoft Corporation) C:\Windows\System32\uxtheme.dll
2013-06-12 06:27 - 2013-04-28 14:28 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-12 06:27 - 2013-04-28 14:28 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-12 06:27 - 2013-04-28 14:27 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-12 06:27 - 2013-04-28 14:27 - 02647552 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-12 06:27 - 2013-04-28 14:27 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-12 06:27 - 2013-04-26 21:20 - 00733184 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-06-12 06:27 - 2013-04-23 15:13 - 01013248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-06-12 06:27 - 2013-04-23 15:12 - 01569792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-06-12 06:27 - 2013-04-23 15:12 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-06-12 06:27 - 2013-04-23 14:56 - 01255936 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-06-12 06:27 - 2013-04-23 14:55 - 01889280 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-06-12 06:27 - 2013-04-23 14:55 - 00141312 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-06-12 06:27 - 2013-04-23 14:55 - 00068096 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-06-11 12:49 - 2013-06-11 14:53 - 00000000 ____D C:\Users\Kat\AppData\Roaming\Skype
2013-06-11 12:49 - 2013-06-11 13:06 - 00000000 ____D C:\ProgramData\Skype
2013-06-11 12:49 - 2013-06-11 12:49 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-06-11 04:23 - 2013-06-11 04:23 - 00000000 ____D C:\Users\Kat\Downloads\Jamari Glitch Sample Rack Live 9 Project
2013-06-11 04:20 - 2013-06-11 04:20 - 00000000 ____D C:\Program Files (x86)\7-Zip

==================== One Month Modified Files and Folders =======

2013-07-08 03:41 - 2012-07-25 23:22 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-07-08 03:40 - 2012-09-13 10:32 - 00009802 ____A C:\Windows\PFRO.log
2013-07-07 16:52 - 2013-07-07 16:52 - 00000000 ____D C:\FRST
2013-07-07 00:33 - 2013-05-11 06:26 - 00000000 ____D C:\users\Kat
2013-07-07 00:33 - 2012-09-13 10:34 - 00000000 ____D C:\users\Administrator
2013-07-07 00:33 - 2012-07-26 00:12 - 00000000 ____D C:\Windows\System32\sru
2013-07-07 00:33 - 2012-07-26 00:12 - 00000000 ____D C:\Windows\registration
2013-07-07 00:32 - 2012-07-25 21:38 - 00000000 ____D C:\Windows\System32\Sysprep
2013-07-06 11:11 - 2012-07-25 23:21 - 00048903 ____A C:\Windows\setupact.log
2013-07-05 23:24 - 2013-07-05 05:25 - 00000000 ____D C:\Program Files (x86)\Windows Live
2013-07-05 07:41 - 2013-07-05 07:13 - 00000000 ____D C:\Users\Kat\Documents\Musik
2013-07-05 07:02 - 2013-01-17 12:40 - 01132884 ____A C:\Windows\WindowsUpdate.log
2013-07-05 05:30 - 2013-07-05 05:30 - 00000000 ____D C:\Users\Kat\Tracing
2013-07-05 05:30 - 2013-07-05 05:20 - 00000000 ____D C:\Users\Kat\AppData\Local\Windows Live
2013-07-05 05:25 - 2013-07-05 05:25 - 00000000 ____D C:\Windows\PCHEALTH
2013-07-05 05:25 - 2013-07-05 05:25 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2013-07-05 05:22 - 2013-07-05 05:22 - 00000194 ____A C:\Windows\DirectX.log
2013-07-05 05:21 - 2013-07-03 04:49 - 00000000 ____D C:\Users\Kat\AppData\Roaming\TakeOwnershipEx
2013-07-05 05:19 - 2013-07-05 05:18 - 142602520 ____A (Microsoft Corporation) C:\Users\Kat\Downloads\wlsetup-all_16.4.3508.0205.exe
2013-07-05 05:03 - 2013-01-17 20:51 - 00753134 ____A C:\Windows\System32\perfh007.dat
2013-07-05 05:03 - 2013-01-17 20:51 - 00155826 ____A C:\Windows\System32\perfc007.dat
2013-07-05 05:03 - 2012-07-25 23:28 - 01745416 ____A C:\Windows\System32\PerfStringBackup.INI
2013-07-05 04:41 - 2013-05-11 06:36 - 00001126 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-07-05 04:20 - 2012-07-26 00:12 - 00000000 ____D C:\Windows\AUInstallAgent
2013-07-05 03:54 - 2013-04-05 04:08 - 00000000 ____D C:\Users\Kat\AppData\Local\Packages
2013-07-05 03:52 - 2013-07-05 03:52 - 00060550 ____A C:\Users\Kat\Downloads\antragerstattung_überweisung (geschützt).xlsx
2013-07-05 02:25 - 2013-05-11 06:36 - 00001122 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-07-03 05:39 - 2013-04-11 16:36 - 00000000 ____D C:\Users\Kat\Desktop\Fotos
2013-07-03 04:48 - 2013-07-03 04:48 - 00508710 ____A C:\Users\Kat\Downloads\TakeOwnershipEx.zip
2013-07-03 04:48 - 2013-07-03 04:48 - 00000000 ____D C:\Program Files (x86)\TakeOwnershipEx
2013-07-03 04:17 - 2013-07-03 04:07 - 00000000 ____D C:\Users\Kat\AppData\Roaming\Dropbox
2013-07-03 04:14 - 2013-07-03 04:11 - 00000000 ___RD C:\Users\Kat\Dropbox
2013-07-03 04:08 - 2013-04-05 05:54 - 00000000 ____D C:\Users\Kat\Documents\Ableton
2013-07-03 02:30 - 2013-07-03 01:55 - 00000000 ____D C:\Users\Kat\AppData\Roaming\MeldaProduction
2013-07-03 02:23 - 2013-07-03 01:55 - 00000000 ____D C:\ProgramData\MeldaProduction
2013-07-03 01:55 - 2013-07-03 01:55 - 00000000 ____D C:\Program Files\VstPlugins
2013-07-03 01:55 - 2013-07-03 01:55 - 00000000 ____D C:\Program Files\MeldaProduction
2013-07-03 01:55 - 2013-07-03 01:55 - 00000000 ____D C:\Program Files\Common Files\VST3
2013-07-01 13:56 - 2013-07-01 13:56 - 00000000 ____D C:\ProgramData\Energy Management
2013-06-29 07:58 - 2013-05-27 03:45 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-06-29 07:57 - 2012-07-26 00:12 - 00000000 ___HD C:\Windows\ELAMBKUP
2013-06-29 07:56 - 2012-07-25 21:26 - 00262144 __ASH C:\Windows\System32\config\ELAM
2013-06-29 07:55 - 2013-06-29 07:55 - 00000000 ___SD C:\Users\Kat\Documents\Passwords Database
2013-06-28 13:15 - 2013-07-05 05:31 - 1863026660 ____A C:\Users\Kat\Desktop\30 In the Dark.MOV
2013-06-28 10:42 - 2013-05-15 00:55 - 00000000 ____D C:\Users\Kat\AppData\Roaming\Spotify
2013-06-28 05:16 - 2013-06-28 04:00 - 00000000 ____A C:\Windows\SysWOW64\config.nt
2013-06-28 04:01 - 2013-06-28 04:01 - 00000000 ____D C:\Users\Kat\AppData\LocalGoogle
2013-06-28 04:01 - 2013-05-11 06:36 - 00000000 ____D C:\Users\Kat\AppData\Local\Google
2013-06-28 04:01 - 2013-05-11 06:36 - 00000000 ____D C:\Program Files (x86)\Google
2013-06-28 04:00 - 2013-06-28 04:00 - 01030952 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSnx.sys
2013-06-28 04:00 - 2013-06-28 04:00 - 00378944 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSP.sys
2013-06-28 04:00 - 2013-06-28 04:00 - 00189936 ____A C:\Windows\System32\Drivers\aswVmm.sys
2013-06-28 04:00 - 2013-06-28 04:00 - 00000175 ____A C:\Windows\System32\Drivers\aswVmm.sys.sum
2013-06-28 04:00 - 2013-06-28 04:00 - 00000175 ____A C:\Windows\System32\Drivers\aswSP.sys.sum
2013-06-28 04:00 - 2013-06-28 04:00 - 00000175 ____A C:\Windows\System32\Drivers\aswSnx.sys.sum
2013-06-28 03:59 - 2013-06-28 03:59 - 00000000 ____D C:\ProgramData\AVAST Software
2013-06-28 03:59 - 2013-06-28 03:59 - 00000000 ____D C:\Program Files\AVAST Software
2013-06-28 03:57 - 2013-06-28 03:57 - 00000002 ____A C:\AvastSetup.log
2013-06-26 16:52 - 2012-07-26 00:12 - 00000000 ____D C:\Windows\rescache
2013-06-26 16:18 - 2013-06-26 16:18 - 00421880 ____A C:\Windows\System32\FNTCACHE.DAT
2013-06-25 12:10 - 2013-06-25 11:49 - 00000000 ____D C:\Program Files (x86)\MyPC Backup
2013-06-25 11:49 - 2013-06-25 11:49 - 00000000 ____D C:\Program Files (x86)\3GP to MP3 Converter
2013-06-25 11:47 - 2012-07-26 00:12 - 00000000 ____D C:\Windows\Resources
2013-06-25 02:44 - 2013-06-25 02:45 - 00263592 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-06-25 02:44 - 2013-06-25 02:44 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-06-25 02:44 - 2013-06-25 02:44 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-06-25 02:44 - 2013-06-25 02:44 - 00096168 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-06-25 02:44 - 2013-06-25 02:44 - 00000000 ____D C:\Program Files (x86)\Java
2013-06-25 02:44 - 2013-06-17 08:19 - 00867240 ____A (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll
2013-06-25 02:44 - 2013-06-17 08:19 - 00789416 ____A (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2013-06-25 02:31 - 2012-07-26 00:12 - 00000000 ____D C:\Windows\LiveKernelReports
2013-06-20 07:58 - 2013-05-24 08:53 - 00000000 ____D C:\Users\Kat\Desktop\Musik
2013-06-19 14:07 - 2013-04-05 04:11 - 00000000 ____D C:\Users\Kat\Documents\Bluetooth Folder
2013-06-19 13:03 - 2012-07-26 00:12 - 00000000 ____D C:\Windows\System32\NDF
2013-06-18 05:30 - 2012-07-25 21:26 - 00262144 __ASH C:\Windows\System32\config\BBI
2013-06-18 05:29 - 2012-07-26 00:12 - 00000000 ___RD C:\Windows\ToastData
2013-06-18 05:29 - 2012-07-26 00:12 - 00000000 ____D C:\Windows\WinStore
2013-06-18 05:29 - 2012-07-26 00:12 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2013-06-18 05:29 - 2012-07-26 00:12 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2013-06-18 05:29 - 2012-07-25 21:38 - 00000000 ____D C:\Windows\SysWOW64\Dism
2013-06-18 05:29 - 2012-07-25 21:38 - 00000000 ____D C:\Windows\System32\Dism
2013-06-17 08:20 - 2013-06-17 08:20 - 00000000 ____D C:\ProgramData\Sun
2013-06-17 02:04 - 2013-05-20 06:35 - 00000000 ____D C:\Program Files\Microsoft Office 15
2013-06-15 03:11 - 2013-06-15 03:11 - 00000000 ____D C:\Users\Kat\Desktop\Diesen Ordner auf dein Desktop kopieren
2013-06-15 03:08 - 2013-06-15 03:08 - 00000000 ____D C:\Program Files\Novation
2013-06-14 14:59 - 2013-05-15 00:55 - 00000000 ____D C:\Users\Kat\AppData\Local\Spotify
2013-06-14 02:38 - 2013-05-12 04:15 - 75825640 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-06-14 02:19 - 2013-05-07 09:17 - 00000000 ____D C:\Users\Kat\Documents\Wohnung
2013-06-11 14:53 - 2013-06-11 12:49 - 00000000 ____D C:\Users\Kat\AppData\Roaming\Skype
2013-06-11 13:06 - 2013-06-11 12:49 - 00000000 ____D C:\ProgramData\Skype
2013-06-11 12:49 - 2013-06-11 12:49 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-06-11 04:23 - 2013-06-11 04:23 - 00000000 ____D C:\Users\Kat\Downloads\Jamari Glitch Sample Rack Live 9 Project
2013-06-11 04:20 - 2013-06-11 04:20 - 00000000 ____D C:\Program Files (x86)\7-Zip
2013-06-11 04:19 - 2013-05-11 07:03 - 00000000 ____D C:\Users\Kat\AppData\Local\WinZip

==================== Known DLLs (Whitelisted) ================


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points  =========================

Restore point made on: 2013-06-17 04:37:58
Restore point made on: 2013-06-25 02:44:23
Restore point made on: 2013-06-28 03:59:33
Restore point made on: 2013-07-05 05:21:57

==================== Memory info ===========================

Percentage of memory in use: 23%
Total physical RAM: 3951.52 MB
Available physical RAM: 3038.16 MB
Total Pagefile: 3951.52 MB
Available Pagefile: 3045.07 MB
Total Virtual: 8192 MB
Available Virtual: 8191.85 MB

==================== Drives ================================

Drive c: (Windows8_OS) (Fixed) (Total:418.43 GB) (Free:328.41 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (LENOVO) (Fixed) (Total:25 GB) (Free:21.87 GB) NTFS
Drive e: (STORE N GO) (Removable) (Total:7.46 GB) (Free:7.46 GB) FAT32 (Disk=1 Partition=1)
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: D5A4DC64)

Partition: GPT Partition Type
========================================================
Disk: 1 (Size: 7 GB) (Disk ID: 00000000)
Partition 1: (Not Active) - (Size=7 GB) - (Type=0B)


LastRegBack: 2013-07-03 10:58

==================== End Of Log ============================
--- --- ---

--- --- ---

schrauber 08.07.2013 17:58
Drücke bitte die + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
C:\Users\Kat\AppData\Local\temp
Speichere diese bitte als Fixlist.txt auf deinem USB Stick.
  • Starte deinen Rechner erneut in die Reparaturoptionen
  • Starte nun die FRST.exe erneut und klicke den Entfernen Button.

Das Tool erstellt eine Fixlog.txt auf deinem USB Stick. Poste den Inhalt bitte hier.

KatinkaBu 10.07.2013 19:49
Code:
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 04-07-2013
Ran by SYSTEM at 2013-07-10 20:48:28 Run:1
Running from E:\
Boot Mode: Recovery
==============================================

C:\Users\Kat\AppData\Local\temp => Moved successfully.

==== End of Fixlog ====

schrauber 10.07.2013 20:40
neu booten?

KatinkaBu 10.07.2013 20:43
Wie meinst du?

schrauber 10.07.2013 20:50
Rechner neu starten und schauen ob er normal bootet :)

KatinkaBu 10.07.2013 20:54
Asoooo

Nein :(

Weiter als zu dem bunten Wartefenster komme ich nicht.

schrauber 11.07.2013 07:15
Zum Mäuse melken :)

Poste bitte ein frisches Log aus der Recovery. Definiere bitte das bunte Fenster? Wie weit genau kommst Du, was siehst Du? Mach evtl nen Screenshot. Hört sich irgendwie nicht nach typischer Malware oder Sperrbildschirm an.

KatinkaBu 11.07.2013 14:44
Haha,ja.

Hier ein Video:

https://vimeo.com/70104104


Alle Zeitangaben in WEZ +1. Es ist jetzt 23:39 Uhr.
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131