|
Plagegeister aller Art und deren Bekämpfung: Windows 8 startet nicht, da Anmeldung nicht moeglich! Tastatur geht nicht.Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
11.07.2013, 15:01 | #16 |
/// the machine /// TB-Ausbilder | Windows 8 startet nicht, da Anmeldung nicht moeglich! Tastatur geht nicht. ist das von dem Fehler? Schau ich heut abend zu hause, auf Arbeit geht das nit. Das frische Logfile?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
11.07.2013, 15:25 | #17 |
| Windows 8 startet nicht, da Anmeldung nicht moeglich! Tastatur geht nicht. Das dauert bis ich wieder mal in das Reperaturmenue komme.
__________________FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-07-2013 (ATTENTION: FRST version is 7 days old) Ran by SYSTEM on 11-07-2013 16:56:45 Running from E:\ Windows 8 (X64) OS Language: English(US) Internet Explorer Version 10 Boot Mode: Recovery The current controlset is ControlSet001 ATTENTION!:=====> FRST is updated to run from normal or Safe mode to produce a full FRST.txt log and an extra Addition.txt log. ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtsFT] RTFTrack.exe [x] HKLM\...\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-26] (Synaptics Incorporated) HKLM\...\Run: [SynLenovoGestureMgr] "%ProgramFiles%\Synaptics\SynTP\SynLenovoGestureMgr.exe" /m [665400 2012-08-26] (Synaptics) HKLM\...\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s [13213840 2012-10-25] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_Dolby] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /FORPCEE4 [1234064 2012-10-28] (Realtek Semiconductor) HKLM\...\Run: [BtPreLoad] "C:\Program Files (x86)\Bluetooth Suite\BtPreLoad.exe" [64640 2012-09-29] () HKLM\...\Run: [OnekeyStudio] C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe -start [4196432 2012-09-14] (Lenovo) HKLM\...\Run: [Energy Management] C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [17080376 2013-01-17] (Lenovo (Beijing) Limited) HKLM\...\Run: [EnergyUtility] C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [191544 2013-01-17] (Lenovo(beijing) Limited) HKLM-x32\...\Run: [Dolby Home Theater v4] "C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe" -autostart [508656 2012-07-25] (Dolby Laboratories Inc.) HKLM-x32\...\Run: [YouCam Mirage] "C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe" [136488 2012-07-27] (CyberLink) HKLM-x32\...\Run: [YouCam Tray] "C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe" /s [167024 2012-07-27] (CyberLink Corp.) HKLM-x32\...\Run: [UpdateP2GShortCut] "C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Lenovo\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\5.0" [217088 2012-04-18] (CyberLink Corp.) HKLM-x32\...\Run: [RemoteControl10] "C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe" [91432 2012-03-28] (CyberLink Corp.) HKLM-x32\...\Run: [Intel AppUp(SM) center] "C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe" --domain-id F0399437-FD0C-4A48-B101-F0314A6172E4 [155488 2012-07-12] (Intel Corporation) HKLM-x32\...\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-05-11] (Adobe Systems Incorporated) HKLM-x32\...\Run: [SearchProtectAll] C:\Program Files (x86)\SearchProtect\bin\cltmng.exe [2852640 2013-05-07] (Conduit) HKLM-x32\...\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [253816 2013-03-11] (Oracle Corporation) HKLM-x32\...\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui [4858968 2013-05-09] (AVAST Software) HKU\Kat\...\Run: [Spotify Web Helper] "C:\Users\Kat\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [1104384 2013-06-25] (Spotify Ltd) HKU\Kat\...\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun [3672640 2013-03-14] (Disc Soft Ltd) HKU\Kat\...\Run: [SearchProtect] C:\Users\Kat\AppData\Roaming\SearchProtect\bin\cltmng.exe [2852640 2013-05-07] (Conduit) AppInit_DLLs: C:\WINDOWS\system32\nvinitx.dll [247144 2012-07-31] (NVIDIA Corporation) AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll [202600 2012-07-31] (NVIDIA Corporation) Startup: C:\Users\Kat\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation) ==================== Services (Whitelisted) ================= S2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [220288 2012-09-29] (Qualcomm Atheros Commnucations) S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software) S2 CltMngSvc; C:\Program Files (x86)\SearchProtect\bin\CltMngSvc.exe [97056 2013-05-07] (Conduit) S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation) S4 McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [237920 2012-06-21] (McAfee, Inc.) S2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [218320 2012-06-21] (McAfee, Inc.) S2 mfevtp; C:\WINDOWS\system32\mfevtps.exe [182752 2013-02-19] (McAfee, Inc.) S2 OfficeSvc; C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [1900728 2013-06-05] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [14920 2013-01-28] (Microsoft Corporation) S2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-09-29] (Atheros) ==================== Drivers (Whitelisted) ==================== S2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software) S2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software) S1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software) S0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] () S1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-06-28] (AVAST Software) S1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-06-28] (AVAST Software) S1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software) S0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-06-28] () S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [76952 2012-09-29] (Qualcomm Atheros) S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-25] (Microsoft Corporation) S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [69672 2012-06-21] (McAfee, Inc.) S1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283200 2013-05-30] (DT Soft Ltd) S3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [169320 2012-06-21] (McAfee, Inc.) S3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [300392 2012-06-21] (McAfee, Inc.) S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [66712 2012-06-18] (McAfee, Inc.) S3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [513456 2012-06-21] (McAfee, Inc.) S0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [771536 2013-02-19] (McAfee, Inc.) S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [106112 2012-06-21] (McAfee, Inc.) S0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [340216 2013-02-19] (McAfee, Inc.) S3 NvnUsbAudio; C:\Windows\system32\DRIVERS\nvnusbaudio.sys [53080 2011-10-05] (Novation DMS Ltd.) S3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [8227216 2012-08-26] (Realtek Semiconductor Corp.) S3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-26] (Synaptics Incorporated) S3 TASCAM_US122144; C:\Windows\System32\Drivers\tascusb2.sys [409664 2012-02-13] (TASCAM) S3 TASCAM_US122L_MK2_MIDI; C:\Windows\system32\drivers\tscusb2m.sys [31296 2012-02-13] (TASCAM) S3 TASCAM_US122L_MK2_WDM; C:\Windows\system32\drivers\tscusb2a.sys [50240 2012-02-13] (TASCAM) S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ("CyberLink) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-07-11 06:50 - 2013-07-11 06:50 - 00001933 ____A C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2013-07-07 16:52 - 2013-07-07 16:52 - 00000000 ____D C:\FRST 2013-07-05 07:13 - 2013-07-05 07:41 - 00000000 ____D C:\Users\Kat\Documents\Musik 2013-07-05 05:31 - 2013-06-28 13:15 - 1863026660 ____A C:\Users\Kat\Desktop\30 In the Dark.MOV 2013-07-05 05:30 - 2013-07-05 05:30 - 00000000 ____D C:\Users\Kat\Tracing 2013-07-05 05:25 - 2013-07-05 23:24 - 00000000 ____D C:\Program Files (x86)\Windows Live 2013-07-05 05:25 - 2013-07-05 05:25 - 00000000 ____D C:\Windows\PCHEALTH 2013-07-05 05:25 - 2013-07-05 05:25 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition 2013-07-05 05:22 - 2013-07-05 05:22 - 00000194 ____A C:\Windows\DirectX.log 2013-07-05 05:20 - 2013-07-05 05:30 - 00000000 ____D C:\Users\Kat\AppData\Local\Windows Live 2013-07-05 05:18 - 2013-07-05 05:19 - 142602520 ____A (Microsoft Corporation) C:\Users\Kat\Downloads\wlsetup-all_16.4.3508.0205.exe 2013-07-05 03:52 - 2013-07-05 03:52 - 00060550 ____A C:\Users\Kat\Downloads\antragerstattung_überweisung (geschützt).xlsx 2013-07-03 04:49 - 2013-07-05 05:21 - 00000000 ____D C:\Users\Kat\AppData\Roaming\TakeOwnershipEx 2013-07-03 04:48 - 2013-07-03 04:48 - 00508710 ____A C:\Users\Kat\Downloads\TakeOwnershipEx.zip 2013-07-03 04:48 - 2013-07-03 04:48 - 00000000 ____D C:\Program Files (x86)\TakeOwnershipEx 2013-07-03 04:11 - 2013-07-03 04:14 - 00000000 ___RD C:\Users\Kat\Dropbox 2013-07-03 04:07 - 2013-07-03 04:17 - 00000000 ____D C:\Users\Kat\AppData\Roaming\Dropbox 2013-07-03 01:55 - 2013-07-03 02:30 - 00000000 ____D C:\Users\Kat\AppData\Roaming\MeldaProduction 2013-07-03 01:55 - 2013-07-03 02:23 - 00000000 ____D C:\ProgramData\MeldaProduction 2013-07-03 01:55 - 2013-07-03 01:55 - 00000000 ____D C:\Program Files\VstPlugins 2013-07-03 01:55 - 2013-07-03 01:55 - 00000000 ____D C:\Program Files\MeldaProduction 2013-07-03 01:55 - 2013-07-03 01:55 - 00000000 ____D C:\Program Files\Common Files\VST3 2013-07-01 13:56 - 2013-07-01 13:56 - 00000000 ____D C:\ProgramData\Energy Management 2013-06-29 07:55 - 2013-06-29 07:55 - 00000000 ___SD C:\Users\Kat\Documents\Passwords Database 2013-06-28 04:01 - 2013-06-28 04:01 - 00000000 ____D C:\Users\Kat\AppData\LocalGoogle 2013-06-28 04:00 - 2013-07-11 06:50 - 00000000 ____A C:\Windows\SysWOW64\config.nt 2013-06-28 04:00 - 2013-06-28 04:00 - 01030952 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSnx.sys 2013-06-28 04:00 - 2013-06-28 04:00 - 00378944 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSP.sys 2013-06-28 04:00 - 2013-06-28 04:00 - 00189936 ____A C:\Windows\System32\Drivers\aswVmm.sys 2013-06-28 04:00 - 2013-06-28 04:00 - 00000175 ____A C:\Windows\System32\Drivers\aswVmm.sys.sum 2013-06-28 04:00 - 2013-06-28 04:00 - 00000175 ____A C:\Windows\System32\Drivers\aswSP.sys.sum 2013-06-28 04:00 - 2013-06-28 04:00 - 00000175 ____A C:\Windows\System32\Drivers\aswSnx.sys.sum 2013-06-28 04:00 - 2013-05-09 00:59 - 00080816 ____A (AVAST Software) C:\Windows\System32\Drivers\aswMonFlt.sys 2013-06-28 04:00 - 2013-05-09 00:59 - 00072016 ____A (AVAST Software) C:\Windows\System32\Drivers\aswRdr2.sys 2013-06-28 04:00 - 2013-05-09 00:59 - 00065336 ____A C:\Windows\System32\Drivers\aswRvrt.sys 2013-06-28 04:00 - 2013-05-09 00:59 - 00064288 ____A (AVAST Software) C:\Windows\System32\Drivers\aswTdi.sys 2013-06-28 04:00 - 2013-05-09 00:59 - 00033400 ____A (AVAST Software) C:\Windows\System32\Drivers\aswFsBlk.sys 2013-06-28 04:00 - 2013-05-09 00:58 - 00287840 ____A (AVAST Software) C:\Windows\System32\aswBoot.exe 2013-06-28 03:59 - 2013-06-28 03:59 - 00000000 ____D C:\ProgramData\AVAST Software 2013-06-28 03:59 - 2013-06-28 03:59 - 00000000 ____D C:\Program Files\AVAST Software 2013-06-28 03:59 - 2013-05-09 00:58 - 00041664 ____A (AVAST Software) C:\Windows\avastSS.scr 2013-06-28 03:57 - 2013-06-28 03:57 - 00000002 ____A C:\AvastSetup.log 2013-06-26 16:18 - 2013-06-26 16:18 - 00421880 ____A C:\Windows\System32\FNTCACHE.DAT 2013-06-25 11:49 - 2013-06-25 12:10 - 00000000 ____D C:\Program Files (x86)\MyPC Backup 2013-06-25 11:49 - 2013-06-25 11:49 - 00000000 ____D C:\Program Files (x86)\3GP to MP3 Converter 2013-06-25 11:49 - 2009-09-02 11:17 - 00000000 ____A C:\Windows\SysWOW64\wmtog32.dat 2013-06-25 02:45 - 2013-06-25 02:44 - 00263592 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2013-06-25 02:44 - 2013-06-25 02:44 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2013-06-25 02:44 - 2013-06-25 02:44 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2013-06-25 02:44 - 2013-06-25 02:44 - 00096168 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2013-06-25 02:44 - 2013-06-25 02:44 - 00000000 ____D C:\Program Files (x86)\Java 2013-06-17 08:20 - 2013-06-17 08:20 - 00000000 ____D C:\ProgramData\Sun 2013-06-17 08:19 - 2013-06-25 02:44 - 00867240 ____A (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll 2013-06-17 08:19 - 2013-06-25 02:44 - 00789416 ____A (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll 2013-06-17 02:58 - 2013-05-30 15:24 - 01257472 ____A (Microsoft Corporation) C:\Windows\System32\kernel32.dll 2013-06-17 02:58 - 2013-05-30 15:08 - 00974848 ____A (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2013-06-17 02:58 - 2013-05-23 15:01 - 01300992 ____A (Microsoft Corporation) C:\Windows\System32\gdi32.dll 2013-06-17 02:58 - 2013-05-23 14:27 - 01022464 ____A (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2013-06-17 02:56 - 2013-05-14 18:25 - 00888320 ____A (Microsoft Corporation) C:\Windows\System32\autochk.exe 2013-06-17 02:56 - 2013-05-14 18:25 - 00542208 ____A (Microsoft Corporation) C:\Windows\System32\untfs.dll 2013-06-17 02:56 - 2013-05-14 18:24 - 00793088 ____A (Microsoft Corporation) C:\Windows\SysWOW64\autochk.exe 2013-06-17 02:56 - 2013-05-14 18:24 - 00482816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll 2013-06-15 12:02 - 2013-05-03 23:58 - 00120736 ____A (Microsoft Corporation) C:\Windows\System32\AuthHost.exe 2013-06-15 12:02 - 2013-05-03 23:34 - 00446720 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\USBHUB3.SYS 2013-06-15 12:02 - 2013-05-03 23:34 - 00284416 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\spaceport.sys 2013-06-15 12:02 - 2013-05-03 23:34 - 00213248 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\UCX01000.SYS 2013-06-15 12:02 - 2013-05-03 23:30 - 00058312 ____A (Microsoft Corporation) C:\Windows\System32\wuauclt.exe 2013-06-15 12:02 - 2013-05-03 22:59 - 13644288 ____A (Microsoft Corporation) C:\Windows\System32\Windows.UI.Xaml.dll 2013-06-15 12:02 - 2013-05-03 22:59 - 03241472 ____A (Microsoft Corporation) C:\Windows\System32\wuaueng.dll 2013-06-15 12:02 - 2013-05-03 22:59 - 01619968 ____A (Microsoft Corporation) C:\Windows\System32\wucltux.dll 2013-06-15 12:02 - 2013-05-03 22:59 - 01483776 ____A (Microsoft Corporation) C:\Windows\System32\VSSVC.exe 2013-06-15 12:02 - 2013-05-03 22:59 - 00812544 ____A (Microsoft Corporation) C:\Windows\System32\Magnify.exe 2013-06-15 12:02 - 2013-05-03 22:59 - 00760320 ____A (Microsoft Corporation) C:\Windows\System32\wuapi.dll 2013-06-15 12:02 - 2013-05-03 22:59 - 00251904 ____A (Microsoft Corporation) C:\Windows\System32\WUSettingsProvider.dll 2013-06-15 12:02 - 2013-05-03 22:59 - 00141824 ____A (Microsoft Corporation) C:\Windows\System32\wuwebv.dll 2013-06-15 12:02 - 2013-05-03 22:59 - 00098304 ____A (Microsoft Corporation) C:\Windows\System32\wudriver.dll 2013-06-15 12:02 - 2013-05-03 22:59 - 00039424 ____A (Microsoft Corporation) C:\Windows\System32\wuapp.exe 2013-06-15 12:02 - 2013-05-03 22:58 - 10116096 ____A (Microsoft Corporation) C:\Windows\System32\twinui.dll 2013-06-15 12:02 - 2013-05-03 22:58 - 01332736 ____A (Microsoft Corporation) C:\Windows\System32\sysmain.dll 2013-06-15 12:02 - 2013-05-03 22:58 - 00470528 ____A (Microsoft Corporation) C:\Windows\System32\netprofmsvc.dll 2013-06-15 12:02 - 2013-05-03 22:58 - 00330240 ____A (Microsoft Corporation) C:\Windows\System32\stobject.dll 2013-06-15 12:02 - 2013-05-03 22:58 - 00328192 ____A (Microsoft Corporation) C:\Windows\System32\ubpm.dll 2013-06-15 12:02 - 2013-05-03 22:58 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\storewuauth.dll 2013-06-15 12:02 - 2013-05-03 22:58 - 00169984 ____A (Microsoft Corporation) C:\Windows\System32\netplwiz.dll 2013-06-15 12:02 - 2013-05-03 22:58 - 00151552 ____A (Microsoft Corporation) C:\Windows\System32\netprofm.dll 2013-06-15 12:02 - 2013-05-03 22:58 - 00093696 ____A (Microsoft Corporation) C:\Windows\System32\psmsrv.dll 2013-06-15 12:02 - 2013-05-03 22:57 - 02305024 ____A (Microsoft Corporation) C:\Windows\System32\authui.dll 2013-06-15 12:02 - 2013-05-03 22:57 - 01131520 ____A (Microsoft Corporation) C:\Windows\System32\AppXDeploymentServer.dll 2013-06-15 12:02 - 2013-05-03 22:57 - 00708096 ____A (Microsoft Corporation) C:\Windows\System32\AppXDeploymentExtensions.dll 2013-06-15 12:02 - 2013-05-03 22:57 - 00560640 ____A (Microsoft Corporation) C:\Windows\System32\mfmp4srcsnk.dll 2013-06-15 12:02 - 2013-05-03 22:57 - 00501760 ____A (Microsoft Corporation) C:\Windows\System32\DevicePairing.dll 2013-06-15 12:02 - 2013-05-03 22:57 - 00389120 ____A (Microsoft Corporation) C:\Windows\System32\BCP47Langs.dll 2013-06-15 12:02 - 2013-05-03 22:57 - 00179712 ____A (Microsoft Corporation) C:\Windows\System32\bisrv.dll 2013-06-15 12:02 - 2013-05-03 22:57 - 00122368 ____A (Microsoft Corporation) C:\Windows\System32\biwinrt.dll 2013-06-15 12:02 - 2013-05-03 22:57 - 00017408 ____A (Microsoft Corporation) C:\Windows\System32\muifontsetup.dll 2013-06-15 12:02 - 2013-05-03 22:56 - 00419840 ____A (Microsoft Corporation) C:\Windows\System32\intl.cpl 2013-06-15 12:02 - 2013-05-03 20:58 - 00758784 ____A (Microsoft Corporation) C:\Windows\SysWOW64\Magnify.exe 2013-06-15 12:02 - 2013-05-03 20:58 - 00621056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2013-06-15 12:02 - 2013-05-03 20:58 - 00125952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2013-06-15 12:02 - 2013-05-03 20:58 - 00083968 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2013-06-15 12:02 - 2013-05-03 20:58 - 00034304 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2013-06-15 12:02 - 2013-05-03 20:57 - 10788864 ____A (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll 2013-06-15 12:02 - 2013-05-03 20:57 - 08857088 ____A (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll 2013-06-15 12:02 - 2013-05-03 20:57 - 00303616 ____A (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll 2013-06-15 12:02 - 2013-05-03 20:57 - 00247296 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll 2013-06-15 12:02 - 2013-05-03 20:57 - 00151040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\netplwiz.dll 2013-06-15 12:02 - 2013-05-03 20:57 - 00115712 ____A (Microsoft Corporation) C:\Windows\SysWOW64\netprofm.dll 2013-06-15 12:02 - 2013-05-03 20:57 - 00018432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\npmproxy.dll 2013-06-15 12:02 - 2013-05-03 20:57 - 00014336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\muifontsetup.dll 2013-06-15 12:02 - 2013-05-03 20:56 - 02035712 ____A (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2013-06-15 12:02 - 2013-05-03 20:56 - 00449536 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DevicePairing.dll 2013-06-15 12:02 - 2013-05-03 20:56 - 00411136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll 2013-06-15 12:02 - 2013-05-03 20:56 - 00309760 ____A (Microsoft Corporation) C:\Windows\SysWOW64\BCP47Langs.dll 2013-06-15 12:02 - 2013-05-03 20:56 - 00092160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\biwinrt.dll 2013-06-15 12:02 - 2013-05-03 20:55 - 00389632 ____A (Microsoft Corporation) C:\Windows\SysWOW64\intl.cpl 2013-06-15 12:02 - 2013-05-03 20:51 - 00014848 ____A (Microsoft) C:\Windows\System32\rars.rs 2013-06-15 12:02 - 2013-05-03 20:48 - 00083968 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\hidclass.sys 2013-06-15 12:02 - 2013-05-03 20:48 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\hidusb.sys 2013-06-15 12:02 - 2013-05-03 20:47 - 00427520 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\rdbss.sys 2013-06-15 12:02 - 2013-05-03 20:10 - 00014848 ____A (Microsoft) C:\Windows\SysWOW64\rars.rs 2013-06-15 12:02 - 2013-05-02 14:04 - 00386646 ____A C:\Windows\System32\ApnDatabase.xml 2013-06-15 03:11 - 2013-06-15 03:11 - 00000000 ____D C:\Users\Kat\Desktop\Diesen Ordner auf dein Desktop kopieren 2013-06-15 03:08 - 2013-06-15 03:08 - 00000000 ____D C:\Program Files\Novation 2013-06-15 03:08 - 2011-10-05 02:46 - 00053080 ____A (Novation DMS Ltd.) C:\Windows\System32\Drivers\nvnusbaudio.sys 2013-06-15 03:08 - 2011-10-05 02:46 - 00020824 ____A (Novation DMS Ltd.) C:\Windows\System32\nvnusbaudio_coinst.dll 2013-06-12 08:33 - 2013-04-02 15:37 - 00025088 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll 2013-06-12 08:33 - 2013-04-02 15:12 - 00030720 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll 2013-06-12 06:27 - 2013-05-15 14:37 - 00044032 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll 2013-06-12 06:27 - 2013-05-15 14:36 - 14320640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-06-12 06:27 - 2013-05-15 14:35 - 19230720 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll 2013-06-12 06:27 - 2013-05-15 14:35 - 00053760 ____A (Microsoft Corporation) C:\Windows\System32\UXInit.dll 2013-06-12 06:27 - 2013-05-14 05:14 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb 2013-06-12 06:27 - 2013-05-14 01:23 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-06-12 06:27 - 2013-05-03 23:45 - 02233600 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys 2013-06-12 06:27 - 2013-04-28 14:30 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-06-12 06:27 - 2013-04-28 14:30 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-06-12 06:27 - 2013-04-28 14:30 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-06-12 06:27 - 2013-04-28 14:30 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-06-12 06:27 - 2013-04-28 14:30 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-06-12 06:27 - 2013-04-28 14:30 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-06-12 06:27 - 2013-04-28 14:30 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-06-12 06:27 - 2013-04-28 14:28 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll 2013-06-12 06:27 - 2013-04-28 14:28 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll 2013-06-12 06:27 - 2013-04-28 14:28 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll 2013-06-12 06:27 - 2013-04-28 14:28 - 00915968 ____A (Microsoft Corporation) C:\Windows\System32\uxtheme.dll 2013-06-12 06:27 - 2013-04-28 14:28 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll 2013-06-12 06:27 - 2013-04-28 14:28 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe 2013-06-12 06:27 - 2013-04-28 14:27 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll 2013-06-12 06:27 - 2013-04-28 14:27 - 02647552 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll 2013-06-12 06:27 - 2013-04-28 14:27 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll 2013-06-12 06:27 - 2013-04-26 21:20 - 00733184 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll 2013-06-12 06:27 - 2013-04-23 15:13 - 01013248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe 2013-06-12 06:27 - 2013-04-23 15:12 - 01569792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-06-12 06:27 - 2013-04-23 15:12 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2013-06-12 06:27 - 2013-04-23 14:56 - 01255936 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe 2013-06-12 06:27 - 2013-04-23 14:55 - 01889280 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll 2013-06-12 06:27 - 2013-04-23 14:55 - 00141312 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll 2013-06-12 06:27 - 2013-04-23 14:55 - 00068096 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll 2013-06-11 12:49 - 2013-06-11 14:53 - 00000000 ____D C:\Users\Kat\AppData\Roaming\Skype 2013-06-11 12:49 - 2013-06-11 13:06 - 00000000 ____D C:\ProgramData\Skype 2013-06-11 12:49 - 2013-06-11 12:49 - 00000000 ___RD C:\Program Files (x86)\Skype 2013-06-11 04:23 - 2013-06-11 04:23 - 00000000 ____D C:\Users\Kat\Downloads\Jamari Glitch Sample Rack Live 9 Project 2013-06-11 04:20 - 2013-06-11 04:20 - 00000000 ____D C:\Program Files (x86)\7-Zip ==================== One Month Modified Files and Folders ======= 2013-07-11 16:36 - 2013-05-11 06:26 - 00000000 ____D C:\users\Kat 2013-07-11 16:36 - 2012-09-13 10:34 - 00000000 ____D C:\users\Administrator 2013-07-11 16:36 - 2012-07-26 00:12 - 00000000 ____D C:\Windows\System32\sru 2013-07-11 16:36 - 2012-07-25 21:38 - 00000000 ____D C:\Windows\System32\Sysprep 2013-07-11 16:35 - 2012-07-26 00:12 - 00000000 ____D C:\Windows\registration 2013-07-11 16:33 - 2013-05-20 06:35 - 00000000 ____D C:\Program Files\Microsoft Office 15 2013-07-11 06:54 - 2012-07-25 23:22 - 00000006 ___AH C:\Windows\Tasks\SA.DAT 2013-07-11 06:52 - 2013-01-17 20:51 - 00753134 ____A C:\Windows\System32\perfh007.dat 2013-07-11 06:52 - 2013-01-17 20:51 - 00155826 ____A C:\Windows\System32\perfc007.dat 2013-07-11 06:52 - 2012-07-25 23:28 - 01745416 ____A C:\Windows\System32\PerfStringBackup.INI 2013-07-11 06:51 - 2013-01-17 12:40 - 01289259 ____A C:\Windows\WindowsUpdate.log 2013-07-11 06:50 - 2013-07-11 06:50 - 00001933 ____A C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2013-07-11 06:50 - 2013-06-28 04:00 - 00000000 ____A C:\Windows\SysWOW64\config.nt 2013-07-11 06:50 - 2012-07-25 23:21 - 00056058 ____A C:\Windows\setupact.log 2013-07-11 02:32 - 2012-09-13 10:32 - 00010214 ____A C:\Windows\PFRO.log 2013-07-07 16:52 - 2013-07-07 16:52 - 00000000 ____D C:\FRST 2013-07-05 23:24 - 2013-07-05 05:25 - 00000000 ____D C:\Program Files (x86)\Windows Live 2013-07-05 07:41 - 2013-07-05 07:13 - 00000000 ____D C:\Users\Kat\Documents\Musik 2013-07-05 05:30 - 2013-07-05 05:30 - 00000000 ____D C:\Users\Kat\Tracing 2013-07-05 05:30 - 2013-07-05 05:20 - 00000000 ____D C:\Users\Kat\AppData\Local\Windows Live 2013-07-05 05:25 - 2013-07-05 05:25 - 00000000 ____D C:\Windows\PCHEALTH 2013-07-05 05:25 - 2013-07-05 05:25 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition 2013-07-05 05:22 - 2013-07-05 05:22 - 00000194 ____A C:\Windows\DirectX.log 2013-07-05 05:21 - 2013-07-03 04:49 - 00000000 ____D C:\Users\Kat\AppData\Roaming\TakeOwnershipEx 2013-07-05 05:19 - 2013-07-05 05:18 - 142602520 ____A (Microsoft Corporation) C:\Users\Kat\Downloads\wlsetup-all_16.4.3508.0205.exe 2013-07-05 04:41 - 2013-05-11 06:36 - 00001126 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-07-05 04:20 - 2012-07-26 00:12 - 00000000 ____D C:\Windows\AUInstallAgent 2013-07-05 03:54 - 2013-04-05 04:08 - 00000000 ____D C:\Users\Kat\AppData\Local\Packages 2013-07-05 03:52 - 2013-07-05 03:52 - 00060550 ____A C:\Users\Kat\Downloads\antragerstattung_überweisung (geschützt).xlsx 2013-07-05 02:25 - 2013-05-11 06:36 - 00001122 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-07-03 05:39 - 2013-04-11 16:36 - 00000000 ____D C:\Users\Kat\Desktop\Fotos 2013-07-03 04:48 - 2013-07-03 04:48 - 00508710 ____A C:\Users\Kat\Downloads\TakeOwnershipEx.zip 2013-07-03 04:48 - 2013-07-03 04:48 - 00000000 ____D C:\Program Files (x86)\TakeOwnershipEx 2013-07-03 04:17 - 2013-07-03 04:07 - 00000000 ____D C:\Users\Kat\AppData\Roaming\Dropbox 2013-07-03 04:14 - 2013-07-03 04:11 - 00000000 ___RD C:\Users\Kat\Dropbox 2013-07-03 04:08 - 2013-04-05 05:54 - 00000000 ____D C:\Users\Kat\Documents\Ableton 2013-07-03 02:30 - 2013-07-03 01:55 - 00000000 ____D C:\Users\Kat\AppData\Roaming\MeldaProduction 2013-07-03 02:23 - 2013-07-03 01:55 - 00000000 ____D C:\ProgramData\MeldaProduction 2013-07-03 01:55 - 2013-07-03 01:55 - 00000000 ____D C:\Program Files\VstPlugins 2013-07-03 01:55 - 2013-07-03 01:55 - 00000000 ____D C:\Program Files\MeldaProduction 2013-07-03 01:55 - 2013-07-03 01:55 - 00000000 ____D C:\Program Files\Common Files\VST3 2013-07-01 13:56 - 2013-07-01 13:56 - 00000000 ____D C:\ProgramData\Energy Management 2013-06-29 07:58 - 2013-05-27 03:45 - 00000000 ____D C:\ProgramData\Kaspersky Lab 2013-06-29 07:57 - 2012-07-26 00:12 - 00000000 ___HD C:\Windows\ELAMBKUP 2013-06-29 07:56 - 2012-07-25 21:26 - 00262144 __ASH C:\Windows\System32\config\ELAM 2013-06-29 07:55 - 2013-06-29 07:55 - 00000000 ___SD C:\Users\Kat\Documents\Passwords Database 2013-06-28 13:15 - 2013-07-05 05:31 - 1863026660 ____A C:\Users\Kat\Desktop\30 In the Dark.MOV 2013-06-28 10:42 - 2013-05-15 00:55 - 00000000 ____D C:\Users\Kat\AppData\Roaming\Spotify 2013-06-28 04:01 - 2013-06-28 04:01 - 00000000 ____D C:\Users\Kat\AppData\LocalGoogle 2013-06-28 04:01 - 2013-05-11 06:36 - 00000000 ____D C:\Users\Kat\AppData\Local\Google 2013-06-28 04:01 - 2013-05-11 06:36 - 00000000 ____D C:\Program Files (x86)\Google 2013-06-28 04:00 - 2013-06-28 04:00 - 01030952 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSnx.sys 2013-06-28 04:00 - 2013-06-28 04:00 - 00378944 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSP.sys 2013-06-28 04:00 - 2013-06-28 04:00 - 00189936 ____A C:\Windows\System32\Drivers\aswVmm.sys 2013-06-28 04:00 - 2013-06-28 04:00 - 00000175 ____A C:\Windows\System32\Drivers\aswVmm.sys.sum 2013-06-28 04:00 - 2013-06-28 04:00 - 00000175 ____A C:\Windows\System32\Drivers\aswSP.sys.sum 2013-06-28 04:00 - 2013-06-28 04:00 - 00000175 ____A C:\Windows\System32\Drivers\aswSnx.sys.sum 2013-06-28 03:59 - 2013-06-28 03:59 - 00000000 ____D C:\ProgramData\AVAST Software 2013-06-28 03:59 - 2013-06-28 03:59 - 00000000 ____D C:\Program Files\AVAST Software 2013-06-28 03:57 - 2013-06-28 03:57 - 00000002 ____A C:\AvastSetup.log 2013-06-26 16:52 - 2012-07-26 00:12 - 00000000 ____D C:\Windows\rescache 2013-06-26 16:18 - 2013-06-26 16:18 - 00421880 ____A C:\Windows\System32\FNTCACHE.DAT 2013-06-25 12:10 - 2013-06-25 11:49 - 00000000 ____D C:\Program Files (x86)\MyPC Backup 2013-06-25 11:49 - 2013-06-25 11:49 - 00000000 ____D C:\Program Files (x86)\3GP to MP3 Converter 2013-06-25 11:47 - 2012-07-26 00:12 - 00000000 ____D C:\Windows\Resources 2013-06-25 02:44 - 2013-06-25 02:45 - 00263592 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2013-06-25 02:44 - 2013-06-25 02:44 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2013-06-25 02:44 - 2013-06-25 02:44 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2013-06-25 02:44 - 2013-06-25 02:44 - 00096168 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2013-06-25 02:44 - 2013-06-25 02:44 - 00000000 ____D C:\Program Files (x86)\Java 2013-06-25 02:44 - 2013-06-17 08:19 - 00867240 ____A (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll 2013-06-25 02:44 - 2013-06-17 08:19 - 00789416 ____A (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll 2013-06-25 02:31 - 2012-07-26 00:12 - 00000000 ____D C:\Windows\LiveKernelReports 2013-06-20 07:58 - 2013-05-24 08:53 - 00000000 ____D C:\Users\Kat\Desktop\Musik 2013-06-19 14:07 - 2013-04-05 04:11 - 00000000 ____D C:\Users\Kat\Documents\Bluetooth Folder 2013-06-19 13:03 - 2012-07-26 00:12 - 00000000 ____D C:\Windows\System32\NDF 2013-06-18 05:30 - 2012-07-25 21:26 - 00262144 __ASH C:\Windows\System32\config\BBI 2013-06-18 05:29 - 2012-07-26 00:12 - 00000000 ___RD C:\Windows\ToastData 2013-06-18 05:29 - 2012-07-26 00:12 - 00000000 ____D C:\Windows\WinStore 2013-06-18 05:29 - 2012-07-26 00:12 - 00000000 ____D C:\Program Files\Windows Photo Viewer 2013-06-18 05:29 - 2012-07-26 00:12 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2013-06-18 05:29 - 2012-07-25 21:38 - 00000000 ____D C:\Windows\SysWOW64\Dism 2013-06-18 05:29 - 2012-07-25 21:38 - 00000000 ____D C:\Windows\System32\Dism 2013-06-17 08:20 - 2013-06-17 08:20 - 00000000 ____D C:\ProgramData\Sun 2013-06-15 03:11 - 2013-06-15 03:11 - 00000000 ____D C:\Users\Kat\Desktop\Diesen Ordner auf dein Desktop kopieren 2013-06-15 03:08 - 2013-06-15 03:08 - 00000000 ____D C:\Program Files\Novation 2013-06-14 14:59 - 2013-05-15 00:55 - 00000000 ____D C:\Users\Kat\AppData\Local\Spotify 2013-06-14 02:38 - 2013-05-12 04:15 - 75825640 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe 2013-06-14 02:19 - 2013-05-07 09:17 - 00000000 ____D C:\Users\Kat\Documents\Wohnung 2013-06-11 14:53 - 2013-06-11 12:49 - 00000000 ____D C:\Users\Kat\AppData\Roaming\Skype 2013-06-11 13:06 - 2013-06-11 12:49 - 00000000 ____D C:\ProgramData\Skype 2013-06-11 12:49 - 2013-06-11 12:49 - 00000000 ___RD C:\Program Files (x86)\Skype 2013-06-11 04:23 - 2013-06-11 04:23 - 00000000 ____D C:\Users\Kat\Downloads\Jamari Glitch Sample Rack Live 9 Project 2013-06-11 04:20 - 2013-06-11 04:20 - 00000000 ____D C:\Program Files (x86)\7-Zip 2013-06-11 04:19 - 2013-05-11 07:03 - 00000000 ____D C:\Users\Kat\AppData\Local\WinZip ==================== Known DLLs (Whitelisted) ================ ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit ==================== EXE ASSOCIATION ===================== HKLM\...\.exe: exefile => OK HKLM\...\exefile\DefaultIcon: %1 => OK HKLM\...\exefile\open\command: "%1" %* => OK ==================== Restore Points ========================= Restore point made on: 2013-06-25 02:44:23 Restore point made on: 2013-06-28 03:59:33 Restore point made on: 2013-07-05 05:21:57 ==================== Memory info =========================== Percentage of memory in use: 23% Total physical RAM: 3951.52 MB Available physical RAM: 3035.53 MB Total Pagefile: 3951.52 MB Available Pagefile: 3045.89 MB Total Virtual: 8192 MB Available Virtual: 8191.84 MB ==================== Drives ================================ Drive c: (Windows8_OS) (Fixed) (Total:418.43 GB) (Free:327.74 GB) NTFS ==>[System with boot components (obtained from reading drive)] Drive d: (LENOVO) (Fixed) (Total:25 GB) (Free:21.87 GB) NTFS Drive e: (STORE N GO) (Removable) (Total:7.46 GB) (Free:7.45 GB) FAT32 (Disk=1 Partition=1) Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 466 GB) (Disk ID: D5A4DC64) Partition: GPT Partition Type ======================================================== Disk: 1 (Size: 7 GB) (Disk ID: 00000000) Partition 1: (Not Active) - (Size=7 GB) - (Type=0B) LastRegBack: 2013-07-03 10:58 ==================== End Of Log ============================ --- --- --- |
11.07.2013, 19:06 | #18 |
/// the machine /// TB-Ausbilder | Windows 8 startet nicht, da Anmeldung nicht moeglich! Tastatur geht nicht. Hm, du hast zwar Malware drauf, aber dein Startproblem is was andres. Du siehst den normalen Startbildschirm, nur wird kein Maus- oder Keyboardeingabe angenommen um weiter zur PW eingabe zu gelangen.
__________________Kannst Du von der DVD ne Startreparatur machen?
__________________ |
11.07.2013, 22:09 | #19 |
| Windows 8 startet nicht, da Anmeldung nicht moeglich! Tastatur geht nicht. Naja, ich hab doch gar keine Dvd. Ja, beim booten zum Beispiel, da geht die Umschalttaste, siehst du ja. Aber f1 und f8 beispielsweise nicht. |
12.07.2013, 10:00 | #20 |
/// the machine /// TB-Ausbilder | Windows 8 startet nicht, da Anmeldung nicht moeglich! Tastatur geht nicht. Wie hast Du Win8 installiert? Oder war es vorinstalliert?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
12.07.2013, 12:48 | #21 |
| Windows 8 startet nicht, da Anmeldung nicht moeglich! Tastatur geht nicht. War schon installiert. |
12.07.2013, 13:26 | #22 |
/// the machine /// TB-Ausbilder | Windows 8 startet nicht, da Anmeldung nicht moeglich! Tastatur geht nicht. Solltest Du nach dem ersten Start ne recovery DVD brennen? Oder gibt es ne Recovery Partition? Wie bootest Du momentan in die Recovery?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
12.07.2013, 13:35 | #23 |
| Windows 8 startet nicht, da Anmeldung nicht moeglich! Tastatur geht nicht. Hi, naja, ich sollte vll mal eine machen, habe ich aber nicht -.- Eine recovery partition habe ich auch nicht erstellt. Gerade, wenn ich in's Reparaturmenue will, druecke ich so lange an und Ausschalter bis er Automatische Reperatur wird vorbereitet schreibt oder Bitte warten. |
12.07.2013, 16:38 | #24 |
/// the machine /// TB-Ausbilder | Windows 8 startet nicht, da Anmeldung nicht moeglich! Tastatur geht nicht. Kannst Du da dann sowas wie Startreparatur wählen?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
12.07.2013, 23:49 | #25 |
| Windows 8 startet nicht, da Anmeldung nicht moeglich! Tastatur geht nicht. Also im Reperaturmenue gibt es: Systemwiederherstellung Systemimage-Wiederherstellung Automatische Reperatur Eingabeaufforderung UEFI Firmwareeinstellung... Starteinstellungen He, also ich bin am Ueberlegen, ob ich den Laptop morgen zur Reperatur abgebe. Naechsten Donnerstag verreise ich und ich wollte ihn eigentlich gerne mitnehmen. Ich mach damit Musik und ich halt's kaum noch aus -.- hehe Was meinst du, wie realistisch ist es , dass wir das bis naechsten Mi hinkriegen koennen? Oder ist es dann sinnvoll, ihn abzugeben, damit ich daran wieder arbeiten kann. |
13.07.2013, 10:19 | #26 |
/// the machine /// TB-Ausbilder | Windows 8 startet nicht, da Anmeldung nicht moeglich! Tastatur geht nicht. Wenn Du Systemimage Wiederherstellung wählst sollte alles wieder gehen, aber evtl sind deine Daten weg.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu Windows 8 startet nicht, da Anmeldung nicht moeglich! Tastatur geht nicht. |
anmelden, anmeldung, automatisch, bildschrim, bios, bleibe, eingebe, free, funktionier, funktioniert, geht nicht, ideapad, klicke, laptop, lenovo ideapad, meldung, moeglich, neu, nicht mehr, nichts, reagiert, relativ, start, starte, startet, startet nicht, tastatur, tastatur funktionert nicht, tastatur-virus, uhrzeit, windows, windows 8 |