Schwarzer Bildschirm mit Mauspfeil nach dem Hochfahren

Lisa88 · 06.07.2013, 12:18

Hallo zusammen:

ich habe folgendes Problem:

Wenn ich meinen PC (Acer-Laptop, 3 Jahre alt mit Windows 7, 64-Bit) hochfahre, erscheint nach dem Windows-Symbol nur noch ein schwarzer Bildschirm mit Mauspfeil.

Nach dem ich eben schon einmal einen ähnlich Fall hier gefunden hatte, habe ich mir das Tool FRST64 auf einen Stick geladen und über den Boot-Manager einen Scan durchgeführt.

Hier ist nun das Ergebnis:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-07-2013
Ran by SYSTEM on 06-07-2013 13:02:45
Running from G:\
Windows 7 Home Premium (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Recovery

The current controlset is ControlSet001
ATTENTION!:=====> FRST is updated to run from normal or Safe mode to produce a full FRST.txt log and an extra Addition.txt log.

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [IAAnotif] C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-04] (Intel Corporation)
HKLM\...\Run: [PLFSetI] C:\Windows\PLFSetI.exe [200704 2010-04-12] ()
HKLM\...\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe [295936 2009-05-21] (Alps Electric Co., Ltd.)
HKLM\...\Run: [Acer ePower Management] C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [823840 2009-09-30] (Acer Incorporated)
HKLM\...\RunOnce: [*Restore] C:\Windows\system32\rstrui.exe /RUNONCE [296960 2010-11-20] (Microsoft Corporation)
HKLM-x32\...\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe [1094736 2009-11-01] (Dritek System Inc.)
HKLM-x32\...\Run: [Samsung PanelMgr] C:\Windows\Samsung\PanelMgr\ssmmgr.exe /autorun [614400 2009-08-28] ()
HKLM-x32\...\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59280 2012-05-30] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" [421776 2012-06-07] (Apple Inc.)
HKLM-x32\...\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui [4858968 2013-05-09] (AVAST Software)
HKLM-x32\...\Run: [SearchProtectAll] C:\Program Files (x86)\SearchProtect\bin\cltmng.exe [2852640 2013-05-07] (Conduit)
HKU\Default\...\RunOnce: [ScrSav] C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe /default [162336 2009-07-08] ()
HKU\Default User\...\RunOnce: [ScrSav] C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe /default [162336 2009-07-08] ()
HKU\Dering\...\Run: [SearchProtect] C:\Users\Dering\AppData\Roaming\SearchProtect\bin\cltmng.exe [2852640 2013-05-07] (Conduit)
HKU\Gast\...\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe [427520 2009-07-13] (Microsoft Corporation)
HKU\TGF\...\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe [427520 2009-07-13] (Microsoft Corporation)
HKU\TGF\...\Run: [SearchProtect] C:\Users\TGF\AppData\Roaming\SearchProtect\bin\cltmng.exe [2852640 2013-05-07] (Conduit)
AppInit_DLLs-x32: c:\progra~3\browse~1\261339~1.144\{c16c1~1\browse~1.dll [2521552 2013-06-03] ()
Startup: C:\Users\Dering\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk

==================== Services (Whitelisted) =================

S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
S2 BrowserProtect; C:\ProgramData\BrowserProtect\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe [3085264 2013-06-03] ()
S2 CltMngSvc; C:\Program Files (x86)\SearchProtect\bin\CltMngSvc.exe [93984 2013-03-06] (Conduit)
S3 MWLService; C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe [305448 2009-09-10] (Egis Technology Inc.)

==================== Drivers (Whitelisted) ====================

S3 Andbus; C:\Windows\System32\DRIVERS\lgandbus64.sys [19456 2010-12-07] (LG Electronics Inc.)
S3 AndDiag; C:\Windows\System32\DRIVERS\lganddiag64.sys [27648 2010-12-07] (LG Electronics Inc.)
S3 AndGps; C:\Windows\System32\DRIVERS\lgandgps64.sys [27136 2010-12-07] (LG Electronics Inc.)
S3 ANDModem; C:\Windows\System32\DRIVERS\lgandmodem64.sys [34304 2010-12-07] (LG Electronics Inc.)
S2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software)
S2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
S1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
S0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
S1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1025808 2013-05-09] (AVAST Software)
S1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378432 2013-05-09] (AVAST Software)
S1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
S0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-05-09] ()
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited)
S2 SSPORT; C:\Windows\SysWow64\Drivers\SSPORT.sys [11576 2009-08-26] (Samsung Electronics)
S2 DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys [x]
S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [x]
S2 SSPORT; \??\C:\Windows\system32\Drivers\SSPORT.sys [x]
S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [x]

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2013-07-06 12:41 - 2013-07-06 12:41 - 00000000 ____D C:\FRST
2013-06-26 13:29 - 2013-06-26 13:29 - 00291640 ____A C:\Windows\Minidump\062613-68593-01.dmp
2013-06-26 13:28 - 2013-06-26 13:28 - 275295072 ____A C:\Windows\MEMORY.DMP
2013-06-26 04:32 - 2013-06-26 04:36 - 353467664 ____A C:\Users\Dering\Downloads\zak2install.zip.part
2013-06-26 04:32 - 2013-06-26 04:32 - 00000000 ____A C:\Users\Dering\Downloads\zak2install.zip
2013-06-25 09:51 - 2013-06-25 09:51 - 00001306 ____A C:\Users\Public\Desktop\Free YouTube Download.lnk
2013-06-25 09:51 - 2013-06-25 09:51 - 00001243 ____A C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2013-06-25 09:50 - 2013-06-25 09:51 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-06-25 09:48 - 2013-06-25 09:48 - 23493288 ____A (DVDVideoSoft Ltd. ) C:\Users\Dering\Downloads\FreeYouTubeDownload.exe
2013-06-25 09:12 - 2013-06-25 09:12 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-25 09:12 - 2013-06-25 09:12 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-25 09:12 - 2013-06-25 09:12 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-06-25 09:12 - 2013-06-25 09:12 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-06-25 09:12 - 2013-06-25 09:12 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-06-25 09:12 - 2013-06-25 09:12 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-06-25 09:12 - 2013-06-25 09:12 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-06-25 09:12 - 2013-06-25 09:12 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-06-25 09:12 - 2013-06-25 09:12 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-06-25 09:12 - 2013-06-25 09:12 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-06-25 09:12 - 2013-06-25 09:12 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-06-25 09:12 - 2013-06-25 09:12 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-06-25 09:12 - 2013-06-25 09:12 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-06-25 09:12 - 2013-06-25 09:12 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-06-25 09:12 - 2013-06-25 09:12 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-06-25 09:12 - 2013-06-25 09:12 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-06-25 09:12 - 2013-06-25 09:12 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-25 09:12 - 2013-06-25 09:12 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-06-25 09:12 - 2013-06-25 09:12 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-06-25 09:12 - 2013-06-25 09:12 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-25 09:12 - 2013-06-25 09:12 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-06-25 09:12 - 2013-06-25 09:12 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00053760 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-25 09:12 - 2013-06-25 09:12 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00039936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-06-25 09:12 - 2013-06-25 09:12 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-06-25 09:12 - 2013-06-25 09:12 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-06-25 09:12 - 2013-06-25 09:12 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-06-25 09:10 - 2013-06-25 09:10 - 03928064 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 03419136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 02776576 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 02565120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 02284544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 01988096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 01682432 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 01643520 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 01238528 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 01175552 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 01158144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 01080832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00648192 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00604160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00522752 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00465920 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00417792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00363008 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00333312 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00296960 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00293376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00249856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00245248 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00221184 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00207872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00187392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00010752 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00009728 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00002560 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-25 09:05 - 2013-06-25 09:05 - 04396440 ____A (Piriform Ltd) C:\Users\Dering\Downloads\ccsetup403.exe
2013-06-25 08:57 - 2013-06-25 08:57 - 00000000 ____D C:\Users\Dering\AppData\Roaming\File Scout
2013-06-25 08:57 - 2013-05-28 05:05 - 00163328 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerUpdateService.exe
2013-06-24 10:27 - 2013-06-24 10:27 - 00000000 ____D C:\Users\TGF\AppData\Local\Apple Computer
2013-06-24 09:43 - 2013-06-24 19:23 - 00000000 ____D C:\Users\TGF\Desktop\Arbeitsbeschreibung Parkhausgesellschaft Stadt Kassel
2013-06-11 21:00 - 2013-05-07 22:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-06-11 21:00 - 2013-04-25 15:30 - 01505280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-06-11 21:00 - 2013-03-31 14:52 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-11 20:58 - 2013-05-09 21:49 - 00030720 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll
2013-06-11 20:58 - 2013-05-09 19:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-06-11 20:58 - 2013-04-25 21:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-06-11 20:58 - 2013-04-25 20:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-06-11 20:57 - 2013-05-12 21:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-06-11 20:57 - 2013-05-12 21:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-06-11 20:57 - 2013-05-12 21:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-06-11 20:57 - 2013-05-12 21:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll
2013-06-11 20:57 - 2013-05-12 20:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-06-11 20:57 - 2013-05-12 20:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-06-11 20:57 - 2013-05-12 20:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-06-11 20:57 - 2013-05-12 19:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-06-11 20:57 - 2013-05-12 19:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-06-11 20:57 - 2013-05-12 19:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll

==================== One Month Modified Files and Folders =======

2013-07-06 12:41 - 2013-07-06 12:41 - 00000000 ____D C:\FRST
2013-06-26 23:27 - 2012-07-21 06:28 - 00000000 ____D C:\users\Gast
2013-06-26 23:27 - 2010-07-01 09:38 - 00000000 ____D C:\users\TGF
2013-06-26 23:27 - 2010-05-15 01:12 - 00000000 ____D C:\users\Dering
2013-06-26 23:27 - 2009-07-13 19:20 - 00000000 __RSD C:\Windows\Media
2013-06-26 23:27 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\registration
2013-06-26 23:27 - 2009-07-13 19:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2013-06-26 13:29 - 2013-06-26 13:29 - 00291640 ____A C:\Windows\Minidump\062613-68593-01.dmp
2013-06-26 13:29 - 2011-11-07 07:20 - 00000000 ____D C:\Windows\Minidump
2013-06-26 13:29 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\SysWOW64\zh-HK
2013-06-26 13:29 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR
2013-06-26 13:29 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\System32\zh-HK
2013-06-26 13:29 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\System32\tr-TR
2013-06-26 13:29 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-06-26 13:28 - 2013-06-26 13:28 - 275295072 ____A C:\Windows\MEMORY.DMP
2013-06-26 07:24 - 2013-05-07 22:56 - 01304338 ____A C:\Windows\WindowsUpdate.log
2013-06-26 06:30 - 2013-04-19 07:10 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-06-26 04:36 - 2013-06-26 04:32 - 353467664 ____A C:\Users\Dering\Downloads\zak2install.zip.part
2013-06-26 04:32 - 2013-06-26 04:32 - 00000000 ____A C:\Users\Dering\Downloads\zak2install.zip
2013-06-26 02:14 - 2010-04-12 16:02 - 00659672 ____A C:\Windows\System32\perfh007.dat
2013-06-26 02:14 - 2010-04-12 16:02 - 00132708 ____A C:\Windows\System32\perfc007.dat
2013-06-26 02:14 - 2009-07-13 21:13 - 01514542 ____A C:\Windows\System32\PerfStringBackup.INI
2013-06-26 02:02 - 2009-07-13 20:45 - 00022832 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-06-26 02:02 - 2009-07-13 20:45 - 00022832 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-06-25 09:55 - 2011-09-03 02:32 - 00000000 ____D C:\Users\Dering\AppData\Roaming\DVDVideoSoft
2013-06-25 09:51 - 2013-06-25 09:51 - 00001306 ____A C:\Users\Public\Desktop\Free YouTube Download.lnk
2013-06-25 09:51 - 2013-06-25 09:51 - 00001243 ____A C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2013-06-25 09:51 - 2013-06-25 09:50 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-06-25 09:48 - 2013-06-25 09:48 - 23493288 ____A (DVDVideoSoft Ltd. ) C:\Users\Dering\Downloads\FreeYouTubeDownload.exe
2013-06-25 09:12 - 2013-06-25 09:12 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-25 09:12 - 2013-06-25 09:12 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-25 09:12 - 2013-06-25 09:12 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-06-25 09:12 - 2013-06-25 09:12 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-06-25 09:12 - 2013-06-25 09:12 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-06-25 09:12 - 2013-06-25 09:12 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-06-25 09:12 - 2013-06-25 09:12 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-06-25 09:12 - 2013-06-25 09:12 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-06-25 09:12 - 2013-06-25 09:12 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-06-25 09:12 - 2013-06-25 09:12 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-06-25 09:12 - 2013-06-25 09:12 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-06-25 09:12 - 2013-06-25 09:12 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-06-25 09:12 - 2013-06-25 09:12 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-06-25 09:12 - 2013-06-25 09:12 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-06-25 09:12 - 2013-06-25 09:12 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-06-25 09:12 - 2013-06-25 09:12 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-06-25 09:12 - 2013-06-25 09:12 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-25 09:12 - 2013-06-25 09:12 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-06-25 09:12 - 2013-06-25 09:12 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-06-25 09:12 - 2013-06-25 09:12 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-25 09:12 - 2013-06-25 09:12 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-06-25 09:12 - 2013-06-25 09:12 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00053760 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-25 09:12 - 2013-06-25 09:12 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00039936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-06-25 09:12 - 2013-06-25 09:12 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-06-25 09:12 - 2013-06-25 09:12 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-06-25 09:12 - 2013-06-25 09:12 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-06-25 09:12 - 2013-06-25 09:12 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-06-25 09:10 - 2013-06-25 09:10 - 03928064 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 03419136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 02776576 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 02565120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 02284544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 01988096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 01682432 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 01643520 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 01238528 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 01175552 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 01158144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 01080832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00648192 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00604160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00522752 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00465920 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00417792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00363008 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00333312 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00296960 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00293376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00249856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00245248 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00221184 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00207872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00187392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00010752 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00009728 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00002560 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-25 09:10 - 2013-06-25 09:10 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-25 09:07 - 2011-03-07 07:52 - 00001021 ____A C:\Users\Public\Desktop\CCleaner.lnk
2013-06-25 09:07 - 2010-05-15 13:46 - 00000000 ____D C:\Program Files (x86)\CCleaner
2013-06-25 09:05 - 2013-06-25 09:05 - 04396440 ____A (Piriform Ltd) C:\Users\Dering\Downloads\ccsetup403.exe
2013-06-25 08:58 - 2013-01-09 01:08 - 00001926 ____A C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-06-25 08:58 - 2010-05-15 10:15 - 00000000 ____A C:\Windows\SysWOW64\config.nt
2013-06-25 08:57 - 2013-06-25 08:57 - 00000000 ____D C:\Users\Dering\AppData\Roaming\File Scout
2013-06-25 08:57 - 2009-07-13 21:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-06-25 08:55 - 2012-03-09 20:08 - 00000000 ____D C:\Users\Dering\AppData\Roaming\dvdcss
2013-06-25 08:55 - 2011-12-26 03:06 - 00000000 ____D C:\Users\Dering\AppData\Roaming\vlc
2013-06-24 19:23 - 2013-06-24 09:43 - 00000000 ____D C:\Users\TGF\Desktop\Arbeitsbeschreibung Parkhausgesellschaft Stadt Kassel
2013-06-24 10:27 - 2013-06-24 10:27 - 00000000 ____D C:\Users\TGF\AppData\Local\Apple Computer
2013-06-24 10:27 - 2012-07-09 21:19 - 00000000 ____D C:\Users\TGF\AppData\Roaming\Apple Computer
2013-06-15 23:51 - 2010-07-01 09:40 - 00000000 ____D C:\Users\Dering\Desktop\Thomas
2013-06-12 05:32 - 2012-11-11 00:57 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-12 05:32 - 2012-02-05 21:33 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-06-12 05:22 - 2009-10-28 21:45 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-06-12 05:19 - 2010-10-24 01:12 - 75825640 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-06-11 01:55 - 2010-11-16 10:04 - 00000099 ____A C:\Users\Public\LMDebug.log

Files to move or delete:
====================
C:\ProgramData\FullRemove.exe
C:\ProgramData\dsgsdgdsgdsgw.bat
C:\ProgramData\dsgsdgdsgdsgw.pad
C:\ProgramData\dsgsdgdsgdsgw.reg
C:\ProgramData\go_0molg.pad
C:\ProgramData\rat_0ybba.pad

==================== Known DLLs (Whitelisted) ================

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points =========================

Restore point made on: 2013-06-06 08:56:29
Restore point made on: 2013-06-09 10:31:42
Restore point made on: 2013-06-09 21:36:49
Restore point made on: 2013-06-10 22:16:32
Restore point made on: 2013-06-12 03:27:15
Restore point made on: 2013-06-12 06:47:17
Restore point made on: 2013-06-15 23:53:20
Restore point made on: 2013-06-16 08:50:22
Restore point made on: 2013-06-18 05:17:12
Restore point made on: 2013-06-19 01:05:48
Restore point made on: 2013-06-24 09:37:46
Restore point made on: 2013-06-24 11:26:00
Restore point made on: 2013-06-24 17:00:32
Restore point made on: 2013-06-25 08:51:42
Restore point made on: 2013-06-25 09:04:46
Restore point made on: 2013-06-26 07:24:13

==================== Memory info ===========================

Percentage of memory in use: 17%
Total physical RAM: 4090.93 MB
Available physical RAM: 3357.56 MB
Total Pagefile: 4089.07 MB
Available Pagefile: 3340.66 MB
Total Virtual: 8192 MB
Available Virtual: 8191.86 MB

==================== Drives ================================

Drive c: (ACER) (Fixed) (Total:286.27 GB) (Free:162.58 GB) NTFS (Disk=0 Partition=3)
Drive e: (PQSERVICE) (Fixed) (Total:11.72 GB) (Free:1.34 GB) NTFS (Disk=0 Partition=1)
Drive g: () (Removable) (Total:3.73 GB) (Free:0.28 GB) FAT32 (Disk=1 Partition=1)
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
Drive y: (SYSTEM RESERVED) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS (Disk=0 Partition=2) ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 298 GB) (Disk ID: D2B3D2B3)
Partition 1: (Not Active) - (Size=12 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=286 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 4 GB) (Disk ID: 00000000)
Partition 1: (Not Active) - (Size=4 GB) - (Type=0B)

LastRegBack: 2013-04-21 22:29

==================== End Of Log ============================

Kann mir vielleicht jemand sagen, wie ich meinen Laptop wieder zum Laufen bringe?

Vielen Dank im Voraus

markusg · 06.07.2013, 12:22

Hi,
2 Fragen.
1. Ich sehe die Systemwiederherstellung wurde durchgeführt, war das evtl. der Auslöser, wurde sie also vor kurzem ausgeführt? wenn ja, warum?
2. kannst du mal das Gerät starten, warten bis du den schwarzen Desktop siehst, dann strg+alt+entf drücken, taskmanager, neuer Task, tippe:
explorer.exe
enter, ist der Desktop zu sehen?
3. hatte Avast funde, wenn ja, posten bitte.b

Lisa88 · 06.07.2013, 12:29

Hey! Erst mal vielen Dank, dass du mir hilfst.

Ich wüsste nicht, dass ich in letzter Zeit eine Systemwiederherstellung gemacht hätte. Ich habe das vorhin nach dem drücken von F8 in dem Reparatur-Bereich (sorry, ich hoffe du verstehst mich, ich weiß die ganzen Fachbegriffe nicht so genau...) versucht, da bekam ich die Info, dass keine Wiederherstellungspunkte gefunden werden konnten...

Wenn ich Strg+Alt+Entf drücke, passiert leider gar nichts... :-( immernoch alles schwarz+Mauszeiger

markusg · 06.07.2013, 12:43

Drücke bitte die

+ R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

Startup: C:\Users\Dering\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk
C:\ProgramData\dsgsdgdsgdsgw.bat
C:\ProgramData\dsgsdgdsgdsgw.pad
C:\ProgramData\dsgsdgdsgdsgw.reg
C:\ProgramData\go_0molg.pad
C:\ProgramData\rat_0ybba.pad

Speichere diese bitte als Fixlist.txt auf deinem USB Stick.

Starte deinen Rechner erneut in die Reparaturoptionen
Starte nun die FRST.exe erneut und klicke den Fix Button.

Das Tool erstellt eine Fixlog.txt auf deinem USB Stick. Poste den Inhalt bitte hier.

Lisa88 · 06.07.2013, 12:53

Hier das Ergebnis:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 04-07-2013
Ran by SYSTEM at 2013-07-06 13:49:58 Run:1
Running from G:\
Boot Mode: Recovery
==============================================

C:\Users\Dering\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk => Moved successfully.
C:\ProgramData\dsgsdgdsgdsgw.bat => Moved successfully.
C:\ProgramData\dsgsdgdsgdsgw.pad => Moved successfully.
C:\ProgramData\dsgsdgdsgdsgw.reg => Moved successfully.
C:\ProgramData\go_0molg.pad => Moved successfully.
C:\ProgramData\rat_0ybba.pad => Moved successfully.

==== End of Fixlog ====

markusg · 06.07.2013, 12:55

OK verbesserung?
teste, falls noch nicht besser ob du:
1. den taskmanager aufrufen kasnst und über neuer Task die Explorer.exe
starten kannst.
bzw über Rechtsklick auf den Desktop, Ansicht, Symbole einblenden, anhaken

Lisa88 · 06.07.2013, 13:06

Leider nein :-(

Der Bildschirm ist nach dem Hochfahren immer noch schwarz. Der Tsak.Manager lässt sich nicht öffnen und einen Desktop sehe ich ja gar nicht.
Ich hab versucht mit nem Rechtsklick "ins Schwarze" das Menü zu öffnen, um Symbole einblenden zu können. Aber keine Reaktion beim Rechtsklick :-(

markusg · 06.07.2013, 13:17

Funktioniert der abgesicherte Modus mit eingabeaufforderung, zu erreichen bei PC Start über f8
wenn ja. kopiere über nen sauberen pc das nun folgene Programm auf nen stick.
und starte es dann mit
x:\combofix.exe
enter
wobei x: der Buchstabe des usb laufwerks ist.
Wenn combofix einen Neustart verlangt, mach das in den normalen Modus, falls möglich Log posten und berichten, wie der Start verlaufen ist.
Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Lisa88 · 06.07.2013, 13:22

Auch beim Start im abgesicherten Modus (mit Eingabeaufforderung) kommt nur der schwarze Bildschirm mit Pfeil...

markusg · 06.07.2013, 13:33

Kein Prob
HitmanPro.Kickstart
Du brauchst hierfür einen USB-Stick. Achtung: Alle Daten darauf werden verloren gehen! Sichere sie zuvor an einen anderen Ort, wenn du sie noch brauchst.

Bereite deinen USB-Stick vor wie in dieser Anleitung beschrieben: Anleitung: HitmanPro.Kickstart
Schliesse dann diesen Stick an den infizierten Rechner an und boote ihn vom USB-Stick. (Anleitung: Starten vom USB-Stick)
Es erscheint ein Bootmenü von HitmanPro - wähle zunächst Methode 1 aus und wenn das nicht klappen sollte, dann Methode 2.
Windows wird jetzt ganz normal starten. Wenn der Sperrschirm des Trojaners erscheint, warte einfach ab. HitmanPro sollte in wenigen Sekunden gestartet werden (grünes Fenster).
Klicke jetzt: Weiter -> "Nein, ich möchte nur einen Einmalscan ..." -> Weiter
Der Computer wird jetzt untersucht, mache in dieser Zeit bitte nichts.
Klicke dann weiter, um die Funde in die Quarantäne zu verschieben.
Klicke jetzt unten links auf "Logfile speichern" und lege es auf dem Desktop ab.
Lasse den Rechner neu starten, berichte ob alles geklappt hat und poste mir hier das Logfile von HitmanPro.

Lisa88 · 06.07.2013, 14:03

Och menno...
also das mit dem Boot-Stick hat funktioniert.
Sowohl mit Methoda 1, als auch mit Methode 2 erscheint das Bootmenü von HitmanPro. Nachdem ich bis zur Untersuchung weiter geklickt habe, gibt er an, dass er keine Internetverbindung hat. Das kann eigentlich gar nicht sein, weil ich alles über W-Lan laufen lasse. Naja, habe dann gerade mal ein Lan-Kabel an das Modem und den Laptop angeschlossen. Leider ohne Erfolg. Nach dem das Programm 5 Min kein Internetsignal erhält, bricht es die Untersuchung ab :-(

markusg · 06.07.2013, 14:12

Du machst es einem auch nicht leicht, was?
:-)
Mit einem sauberen 2. Rechner eine OTLPE-CD erstellen und den infizierten Rechner dann von dieser CD booten:

Falls Du kein Brennprogramm installiert hast, lade dir bitte ISOBurner herunter. Das Programm wird Dir erlauben, OTLPE auf eine CD zu brennen und sie bootfähig zu machen. Du brauchst das Tool nur zu installieren, der Rest läuft automatisch => Wie brenne ich eine ISO Datei auf CD/DVD.

Lade

OTLPENet.exe von OldTimer herunter und speichere sie auf Deinem Desktop. Anmerkung: Die Datei ist ca. 120 MB groß und es wird bei langsamer Internet-Verbindung ein wenig dauern, bis Du sie runtergeladen hast.

Wenn der Download fertig ist, mache einen Doppelklick auf die Datei und beantworte die Frage "Do you want to burn the CD?" mit Yes.
Lege eine leere CD in Deinen Brenner.
ImgBurn (oder Dein Brennprogramm) wird das Archiv extrahieren und OTLPE Network auf die CD brennen.
Wenn der Brenn-Vorgang abgeschlossen ist, wirst Du eine Dialogbox sehen => "Operation successfully completed".
Du kannst nun die Fenster des Brennprogramms schließen.

Nun boote von der OTLPE CD. Hinweis: Wie boote ich von CD

Bebilderte Anleitung: OTLpe-Scan

Dein System sollte nach einigen Minuten den REATOGO-X-PE Desktop anzeigen.
Mache einen Doppelklick auf das OTLPE Icon.
Hinweis: Damit OTLPE auch das richtige installierte Windows scant, musst du den Windows-Ordner des auf der Platte installierten Windows auswählen, einfach nur C: auswählen gibt einen Fehler!
Wenn Du gefragt wirst "Do you wish to load the remote registry", dann wähle Yes.
Wenn Du gefragt wirst "Do you wish to load remote user profile(s) for scanning", dann wähle Yes.
Vergewissere Dich, dass die Box "Automatically Load All Remaining Users" gewählt ist und drücke OK.
OTLpe sollte nun starten.
Drücke Run Scan, um den Scan zu starten.
Wenn der Scan fertig ist, werden die Dateien C:\OTL.Txt und C:\Extras.Txt erstellt
Kopiere diese Datei auf Deinen USB-Stick, wenn Du keine Internetverbindung auf diesem System hast.
Bitte poste den Inhalt von C:\OTL.txt und Extras.txt.

Lisa88 · 06.07.2013, 15:13

So...OTL Logfile:

Code:

ATTFilter

OTL logfile created on: 7/6/2013 5:05:04 PM - Run 
OTLPE by OldTimer - Version 3.1.48.0     Folder = X:\Programs\OTLPE
64bit-Windows 7 Home Premium Service Pack 1 (Version = 6.1.7601) - Type = System
Internet Explorer (Version = 9.10.9200.16618)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 87.00% Memory free
3.00 Gb Paging File | 3.00 Gb Available in Paging File | 97.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = D: | %SystemRoot% = D:\Windows | %ProgramFiles% = D:\Program Files (x86)
Drive C: | 100.00 Mb Total Space | 74.34 Mb Free Space | 74.35% Space Free | Partition Type: NTFS
Drive D: | 286.27 Gb Total Space | 162.61 Gb Free Space | 56.80% Space Free | Partition Type: NTFS
Drive E: | 3.76 Gb Total Space | 0.01 Gb Free Space | 0.34% Space Free | Partition Type: FAT32
Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
 
Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet001
 
========== Files/Folders - Created Within 30 Days ==========
 
[2013/07/06 17:04:31 | 000,000,000 | -HSD | C] -- D:\RECYCLER
[2013/07/06 16:41:50 | 000,000,000 | ---D | C] -- D:\FRST
[2013/07/06 09:13:25 | 000,000,000 | ---D | C] -- D:\Program Files\HitmanPro
[2013/07/06 08:45:15 | 000,000,000 | ---D | C] -- D:\ProgramData\HitmanPro
[2013/06/25 13:50:33 | 000,000,000 | ---D | C] -- D:\Program Files (x86)\Common Files\DVDVideoSoft
[2013/06/25 13:50:32 | 000,000,000 | ---D | C] -- D:\Program Files (x86)\DVDVideoSoft
[2013/06/25 13:12:19 | 003,958,784 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\jscript9.dll
[2013/06/25 13:12:19 | 002,877,440 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\jscript9.dll
[2013/06/25 13:12:19 | 001,509,376 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\inetcpl.cpl
[2013/06/25 13:12:19 | 001,441,280 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\inetcpl.cpl
[2013/06/25 13:12:19 | 001,400,416 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\ieapfltr.dat
[2013/06/25 13:12:19 | 001,400,416 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\ieapfltr.dat
[2013/06/25 13:12:19 | 001,054,720 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\MsSpellCheckingFacility.exe
[2013/06/25 13:12:19 | 000,905,728 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\mshtmlmedia.dll
[2013/06/25 13:12:19 | 000,855,552 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\jscript.dll
[2013/06/25 13:12:19 | 000,762,368 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\ieapfltr.dll
[2013/06/25 13:12:19 | 000,719,360 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\mshtmlmedia.dll
[2013/06/25 13:12:19 | 000,690,688 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\jscript.dll
[2013/06/25 13:12:19 | 000,629,248 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\ieapfltr.dll
[2013/06/25 13:12:19 | 000,603,136 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\msfeeds.dll
[2013/06/25 13:12:19 | 000,599,552 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\vbscript.dll
[2013/06/25 13:12:19 | 000,526,336 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\ieui.dll
[2013/06/25 13:12:19 | 000,493,056 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\msfeeds.dll
[2013/06/25 13:12:19 | 000,452,096 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\dxtmsft.dll
[2013/06/25 13:12:19 | 000,441,856 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\html.iec
[2013/06/25 13:12:19 | 000,391,168 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\ieui.dll
[2013/06/25 13:12:19 | 000,361,984 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\html.iec
[2013/06/25 13:12:19 | 000,357,888 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\dxtmsft.dll
[2013/06/25 13:12:19 | 000,281,600 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\dxtrans.dll
[2013/06/25 13:12:19 | 000,235,008 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\url.dll
[2013/06/25 13:12:19 | 000,232,960 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\url.dll
[2013/06/25 13:12:19 | 000,226,816 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\dxtrans.dll
[2013/06/25 13:12:19 | 000,226,304 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\elshyph.dll
[2013/06/25 13:12:19 | 000,216,064 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\msls31.dll
[2013/06/25 13:12:19 | 000,197,120 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\msrating.dll
[2013/06/25 13:12:19 | 000,185,344 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\elshyph.dll
[2013/06/25 13:12:19 | 000,173,568 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\ieUnatt.exe
[2013/06/25 13:12:19 | 000,167,424 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\iexpress.exe
[2013/06/25 13:12:19 | 000,163,840 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\msrating.dll
[2013/06/25 13:12:19 | 000,158,720 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\msls31.dll
[2013/06/25 13:12:19 | 000,150,528 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\iexpress.exe
[2013/06/25 13:12:19 | 000,149,504 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\occache.dll
[2013/06/25 13:12:19 | 000,144,896 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\wextract.exe
[2013/06/25 13:12:19 | 000,138,752 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\wextract.exe
[2013/06/25 13:12:19 | 000,137,216 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\ieUnatt.exe
[2013/06/25 13:12:19 | 000,136,704 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\iesysprep.dll
[2013/06/25 13:12:19 | 000,136,192 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\iepeers.dll
[2013/06/25 13:12:19 | 000,135,680 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\IEAdvpack.dll
[2013/06/25 13:12:19 | 000,125,440 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\occache.dll
[2013/06/25 13:12:19 | 000,117,248 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\iepeers.dll
[2013/06/25 13:12:19 | 000,110,592 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\IEAdvpack.dll
[2013/06/25 13:12:19 | 000,109,056 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\iesysprep.dll
[2013/06/25 13:12:19 | 000,102,912 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\inseng.dll
[2013/06/25 13:12:19 | 000,097,280 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\mshtmled.dll
[2013/06/25 13:12:19 | 000,092,160 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\SetIEInstalledDate.exe
[2013/06/25 13:12:19 | 000,089,600 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\RegisterIEPKEYs.exe
[2013/06/25 13:12:19 | 000,082,432 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\inseng.dll
[2013/06/25 13:12:19 | 000,081,408 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\icardie.dll
[2013/06/25 13:12:19 | 000,079,872 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\mshtmled.dll
[2013/06/25 13:12:19 | 000,077,312 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\tdc.ocx
[2013/06/25 13:12:19 | 000,073,728 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\SetIEInstalledDate.exe
[2013/06/25 13:12:19 | 000,071,680 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\RegisterIEPKEYs.exe
[2013/06/25 13:12:19 | 000,069,120 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\icardie.dll
[2013/06/25 13:12:19 | 000,067,072 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\iesetup.dll
[2013/06/25 13:12:19 | 000,062,976 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\pngfilt.dll
[2013/06/25 13:12:19 | 000,061,952 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\tdc.ocx
[2013/06/25 13:12:19 | 000,061,440 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\iesetup.dll
[2013/06/25 13:12:19 | 000,057,344 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\pngfilt.dll
[2013/06/25 13:12:19 | 000,051,712 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\ie4uinit.exe
[2013/06/25 13:12:19 | 000,051,200 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\imgutil.dll
[2013/06/25 13:12:19 | 000,048,640 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\mshtmler.dll
[2013/06/25 13:12:19 | 000,048,640 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\mshtmler.dll
[2013/06/25 13:12:19 | 000,039,936 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\iernonce.dll
[2013/06/25 13:12:19 | 000,038,400 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\imgutil.dll
[2013/06/25 13:12:19 | 000,033,280 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\iernonce.dll
[2013/06/25 13:12:19 | 000,027,648 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\licmgr10.dll
[2013/06/25 13:12:19 | 000,023,040 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\licmgr10.dll
[2013/06/25 13:12:19 | 000,013,824 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\mshta.exe
[2013/06/25 13:12:19 | 000,012,800 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\msfeedssync.exe
[2013/06/25 13:12:19 | 000,011,776 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\msfeedssync.exe
[2013/06/25 13:10:11 | 003,928,064 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\d2d1.dll
[2013/06/25 13:10:11 | 003,419,136 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\d2d1.dll
[2013/06/25 13:10:11 | 002,776,576 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\msmpeg2vdec.dll
[2013/06/25 13:10:11 | 002,565,120 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\d3d10warp.dll
[2013/06/25 13:10:11 | 002,284,544 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\msmpeg2vdec.dll
[2013/06/25 13:10:11 | 001,988,096 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\d3d10warp.dll
[2013/06/25 13:10:11 | 001,682,432 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\XpsPrint.dll
[2013/06/25 13:10:11 | 001,643,520 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\DWrite.dll
[2013/06/25 13:10:11 | 001,424,384 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\WindowsCodecs.dll
[2013/06/25 13:10:11 | 001,247,744 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\DWrite.dll
[2013/06/25 13:10:11 | 001,238,528 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\d3d10.dll
[2013/06/25 13:10:11 | 001,158,144 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\XpsPrint.dll
[2013/06/25 13:10:11 | 001,080,832 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\d3d10.dll
[2013/06/25 13:10:11 | 000,648,192 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\d3d10level9.dll
[2013/06/25 13:10:11 | 000,604,160 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\d3d10level9.dll
[2013/06/25 13:10:11 | 000,522,752 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\XpsGdiConverter.dll
[2013/06/25 13:10:11 | 000,465,920 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\WMPhoto.dll
[2013/06/25 13:10:11 | 000,417,792 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\WMPhoto.dll
[2013/06/25 13:10:11 | 000,364,544 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\XpsGdiConverter.dll
[2013/06/25 13:10:11 | 000,363,008 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\dxgi.dll
[2013/06/25 13:10:11 | 000,333,312 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\d3d10_1core.dll
[2013/06/25 13:10:11 | 000,296,960 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\d3d10core.dll
[2013/06/25 13:10:11 | 000,293,376 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\dxgi.dll
[2013/06/25 13:10:11 | 000,249,856 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\d3d10_1core.dll
[2013/06/25 13:10:11 | 000,245,248 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\WindowsCodecsExt.dll
[2013/06/25 13:10:11 | 000,221,184 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\UIAnimation.dll
[2013/06/25 13:10:11 | 000,220,160 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\d3d10core.dll
[2013/06/25 13:10:11 | 000,207,872 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\WindowsCodecsExt.dll
[2013/06/25 13:10:11 | 000,194,560 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\d3d10_1.dll
[2013/06/25 13:10:11 | 000,187,392 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\UIAnimation.dll
[2013/06/25 13:10:11 | 000,161,792 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\d3d10_1.dll
[2013/06/25 13:10:11 | 000,010,752 | -H-- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll
[2013/06/25 13:10:11 | 000,010,752 | -H-- | C] (Microsoft Corporation) -- D:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
[2013/06/25 13:10:11 | 000,009,728 | -H-- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
[2013/06/25 13:10:11 | 000,009,728 | -H-- | C] (Microsoft Corporation) -- D:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
[2013/06/25 13:10:11 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
[2013/06/25 13:10:11 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- D:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
[2013/06/25 13:10:11 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll
[2013/06/25 13:10:11 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- D:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
[2013/06/25 13:10:11 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll
[2013/06/25 13:10:11 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- D:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
[2013/06/25 13:10:11 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll
[2013/06/25 13:10:11 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- D:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
[2013/06/25 13:10:11 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll
[2013/06/25 13:10:11 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- D:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
[2013/06/25 13:10:11 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll
[2013/06/25 13:10:11 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- D:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
[2013/06/25 13:10:11 | 000,002,560 | -H-- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll
[2013/06/25 13:10:11 | 000,002,560 | -H-- | C] (Microsoft Corporation) -- D:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
[2013/06/25 12:57:25 | 000,163,328 | ---- | C] (Adobe Systems Incorporated) -- D:\Windows\SysWow64\FlashPlayerUpdateService.exe
[2013/06/25 12:57:23 | 000,000,000 | ---D | C] -- D:\Users\Dering\AppData\Roaming\File Scout
[2013/06/24 14:27:24 | 000,000,000 | ---D | C] -- D:\Users\TGF\AppData\Local\Apple Computer
[2013/06/24 13:43:33 | 000,000,000 | ---D | C] -- D:\Users\TGF\Desktop\Arbeitsbeschreibung Parkhausgesellschaft Stadt Kassel
[2013/06/12 01:00:12 | 001,887,232 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\d3d11.dll
[2013/06/12 01:00:11 | 001,505,280 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\d3d11.dll
[2013/06/12 00:58:18 | 000,751,104 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\win32spl.dll
[2013/06/12 00:58:17 | 000,492,544 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\win32spl.dll
[2013/06/12 00:58:11 | 000,030,720 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\cryptdlg.dll
[2013/06/12 00:58:11 | 000,024,576 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\cryptdlg.dll
[2013/06/12 00:57:58 | 001,192,448 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\certutil.exe
[2013/06/12 00:57:57 | 001,464,320 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\crypt32.dll
[2013/06/12 00:57:57 | 000,903,168 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\certutil.exe
[2013/06/12 00:57:56 | 000,139,776 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\cryptnet.dll
[2013/06/12 00:57:55 | 000,052,224 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\certenc.dll
[2013/06/12 00:57:54 | 000,043,008 | ---- | C] (Microsoft Corporation) -- D:\Windows\SysWow64\certenc.dll
[2009/10/29 01:58:47 | 000,036,136 | ---- | C] (Oberon Media) -- D:\ProgramData\FullRemove.exe
 
========== Files - Modified Within 30 Days ==========
 
[2013/07/06 09:15:41 | 000,067,584 | --S- | M] () -- D:\Windows\bootstat.dat
[2013/07/06 09:12:23 | 3217,199,104 | -HS- | M] () -- D:\hiberfil.sys
[2013/06/26 17:28:54 | 275,295,072 | ---- | M] () -- D:\Windows\MEMORY.DMP
[2013/06/26 10:30:02 | 000,000,884 | ---- | M] () -- D:\Windows\tasks\Adobe Flash Player Updater.job
[2013/06/26 06:14:18 | 000,659,672 | ---- | M] () -- D:\Windows\System32\perfh007.dat
[2013/06/26 06:14:18 | 000,621,514 | ---- | M] () -- D:\Windows\System32\perfh009.dat
[2013/06/26 06:14:18 | 000,132,708 | ---- | M] () -- D:\Windows\System32\perfc007.dat
[2013/06/26 06:14:18 | 000,109,090 | ---- | M] () -- D:\Windows\System32\perfc009.dat
[2013/06/26 06:02:27 | 000,022,832 | -H-- | M] () -- D:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013/06/26 06:02:27 | 000,022,832 | -H-- | M] () -- D:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013/06/25 13:51:10 | 000,000,000 | ---D | M] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
[2013/06/25 13:51:09 | 000,001,243 | ---- | M] () -- D:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
[2013/06/25 13:51:08 | 000,001,306 | ---- | M] () -- D:\Users\Public\Desktop\Free YouTube Download.lnk
[2013/06/25 13:12:19 | 003,958,784 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\jscript9.dll
[2013/06/25 13:12:19 | 002,877,440 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\jscript9.dll
[2013/06/25 13:12:19 | 001,509,376 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\inetcpl.cpl
[2013/06/25 13:12:19 | 001,441,280 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\inetcpl.cpl
[2013/06/25 13:12:19 | 001,400,416 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\ieapfltr.dat
[2013/06/25 13:12:19 | 001,400,416 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\ieapfltr.dat
[2013/06/25 13:12:19 | 001,054,720 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\MsSpellCheckingFacility.exe
[2013/06/25 13:12:19 | 000,905,728 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\mshtmlmedia.dll
[2013/06/25 13:12:19 | 000,855,552 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\jscript.dll
[2013/06/25 13:12:19 | 000,762,368 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\ieapfltr.dll
[2013/06/25 13:12:19 | 000,719,360 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\mshtmlmedia.dll
[2013/06/25 13:12:19 | 000,690,688 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\jscript.dll
[2013/06/25 13:12:19 | 000,629,248 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\ieapfltr.dll
[2013/06/25 13:12:19 | 000,603,136 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\msfeeds.dll
[2013/06/25 13:12:19 | 000,599,552 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\vbscript.dll
[2013/06/25 13:12:19 | 000,526,336 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\ieui.dll
[2013/06/25 13:12:19 | 000,493,056 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\msfeeds.dll
[2013/06/25 13:12:19 | 000,452,096 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\dxtmsft.dll
[2013/06/25 13:12:19 | 000,441,856 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\html.iec
[2013/06/25 13:12:19 | 000,391,168 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\ieui.dll
[2013/06/25 13:12:19 | 000,361,984 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\html.iec
[2013/06/25 13:12:19 | 000,357,888 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\dxtmsft.dll
[2013/06/25 13:12:19 | 000,281,600 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\dxtrans.dll
[2013/06/25 13:12:19 | 000,235,008 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\url.dll
[2013/06/25 13:12:19 | 000,232,960 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\url.dll
[2013/06/25 13:12:19 | 000,226,816 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\dxtrans.dll
[2013/06/25 13:12:19 | 000,226,304 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\elshyph.dll
[2013/06/25 13:12:19 | 000,216,064 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\msls31.dll
[2013/06/25 13:12:19 | 000,197,120 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\msrating.dll
[2013/06/25 13:12:19 | 000,185,344 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\elshyph.dll
[2013/06/25 13:12:19 | 000,173,568 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\ieUnatt.exe
[2013/06/25 13:12:19 | 000,167,424 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\iexpress.exe
[2013/06/25 13:12:19 | 000,163,840 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\msrating.dll
[2013/06/25 13:12:19 | 000,158,720 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\msls31.dll
[2013/06/25 13:12:19 | 000,150,528 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\iexpress.exe
[2013/06/25 13:12:19 | 000,149,504 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\occache.dll
[2013/06/25 13:12:19 | 000,144,896 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\wextract.exe
[2013/06/25 13:12:19 | 000,138,752 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\wextract.exe
[2013/06/25 13:12:19 | 000,137,216 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\ieUnatt.exe
[2013/06/25 13:12:19 | 000,136,704 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\iesysprep.dll
[2013/06/25 13:12:19 | 000,136,192 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\iepeers.dll
[2013/06/25 13:12:19 | 000,135,680 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\IEAdvpack.dll
[2013/06/25 13:12:19 | 000,125,440 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\occache.dll
[2013/06/25 13:12:19 | 000,117,248 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\iepeers.dll
[2013/06/25 13:12:19 | 000,110,592 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\IEAdvpack.dll
[2013/06/25 13:12:19 | 000,109,056 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\iesysprep.dll
[2013/06/25 13:12:19 | 000,102,912 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\inseng.dll
[2013/06/25 13:12:19 | 000,097,280 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\mshtmled.dll
[2013/06/25 13:12:19 | 000,092,160 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\SetIEInstalledDate.exe
[2013/06/25 13:12:19 | 000,089,600 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\RegisterIEPKEYs.exe
[2013/06/25 13:12:19 | 000,082,432 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\inseng.dll
[2013/06/25 13:12:19 | 000,081,408 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\icardie.dll
[2013/06/25 13:12:19 | 000,079,872 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\mshtmled.dll
[2013/06/25 13:12:19 | 000,077,312 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\tdc.ocx
[2013/06/25 13:12:19 | 000,073,728 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\SetIEInstalledDate.exe
[2013/06/25 13:12:19 | 000,071,680 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\RegisterIEPKEYs.exe
[2013/06/25 13:12:19 | 000,069,120 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\icardie.dll
[2013/06/25 13:12:19 | 000,067,072 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\iesetup.dll
[2013/06/25 13:12:19 | 000,062,976 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\pngfilt.dll
[2013/06/25 13:12:19 | 000,061,952 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\tdc.ocx
[2013/06/25 13:12:19 | 000,061,440 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\iesetup.dll
[2013/06/25 13:12:19 | 000,057,344 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\pngfilt.dll
[2013/06/25 13:12:19 | 000,051,712 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\ie4uinit.exe
[2013/06/25 13:12:19 | 000,051,200 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\imgutil.dll
[2013/06/25 13:12:19 | 000,048,640 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\mshtmler.dll
[2013/06/25 13:12:19 | 000,048,640 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\mshtmler.dll
[2013/06/25 13:12:19 | 000,039,936 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\iernonce.dll
[2013/06/25 13:12:19 | 000,038,400 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\imgutil.dll
[2013/06/25 13:12:19 | 000,033,280 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\iernonce.dll
[2013/06/25 13:12:19 | 000,027,648 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\licmgr10.dll
[2013/06/25 13:12:19 | 000,025,185 | ---- | M] () -- D:\Windows\SysWow64\ieuinit.inf
[2013/06/25 13:12:19 | 000,025,185 | ---- | M] () -- D:\Windows\System32\ieuinit.inf
[2013/06/25 13:12:19 | 000,023,040 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\licmgr10.dll
[2013/06/25 13:12:19 | 000,013,824 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\mshta.exe
[2013/06/25 13:12:19 | 000,012,800 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\msfeedssync.exe
[2013/06/25 13:12:19 | 000,011,776 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\msfeedssync.exe
[2013/06/25 13:10:11 | 003,928,064 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\d2d1.dll
[2013/06/25 13:10:11 | 003,419,136 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\d2d1.dll
[2013/06/25 13:10:11 | 002,776,576 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\msmpeg2vdec.dll
[2013/06/25 13:10:11 | 002,565,120 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\d3d10warp.dll
[2013/06/25 13:10:11 | 002,284,544 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\msmpeg2vdec.dll
[2013/06/25 13:10:11 | 001,988,096 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\d3d10warp.dll
[2013/06/25 13:10:11 | 001,682,432 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\XpsPrint.dll
[2013/06/25 13:10:11 | 001,643,520 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\DWrite.dll
[2013/06/25 13:10:11 | 001,424,384 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\WindowsCodecs.dll
[2013/06/25 13:10:11 | 001,247,744 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\DWrite.dll
[2013/06/25 13:10:11 | 001,238,528 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\d3d10.dll
[2013/06/25 13:10:11 | 001,158,144 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\XpsPrint.dll
[2013/06/25 13:10:11 | 001,080,832 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\d3d10.dll
[2013/06/25 13:10:11 | 000,648,192 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\d3d10level9.dll
[2013/06/25 13:10:11 | 000,604,160 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\d3d10level9.dll
[2013/06/25 13:10:11 | 000,522,752 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\XpsGdiConverter.dll
[2013/06/25 13:10:11 | 000,465,920 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\WMPhoto.dll
[2013/06/25 13:10:11 | 000,417,792 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\WMPhoto.dll
[2013/06/25 13:10:11 | 000,364,544 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\XpsGdiConverter.dll
[2013/06/25 13:10:11 | 000,363,008 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\dxgi.dll
[2013/06/25 13:10:11 | 000,333,312 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\d3d10_1core.dll
[2013/06/25 13:10:11 | 000,296,960 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\d3d10core.dll
[2013/06/25 13:10:11 | 000,293,376 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\dxgi.dll
[2013/06/25 13:10:11 | 000,249,856 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\d3d10_1core.dll
[2013/06/25 13:10:11 | 000,245,248 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\WindowsCodecsExt.dll
[2013/06/25 13:10:11 | 000,221,184 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\UIAnimation.dll
[2013/06/25 13:10:11 | 000,220,160 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\d3d10core.dll
[2013/06/25 13:10:11 | 000,207,872 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\WindowsCodecsExt.dll
[2013/06/25 13:10:11 | 000,194,560 | ---- | M] (Microsoft Corporation) -- D:\Windows\System32\d3d10_1.dll
[2013/06/25 13:10:11 | 000,187,392 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\UIAnimation.dll
[2013/06/25 13:10:11 | 000,161,792 | ---- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\d3d10_1.dll
[2013/06/25 13:10:11 | 000,010,752 | -H-- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll
[2013/06/25 13:10:11 | 000,010,752 | -H-- | M] (Microsoft Corporation) -- D:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
[2013/06/25 13:10:11 | 000,009,728 | -H-- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
[2013/06/25 13:10:11 | 000,009,728 | -H-- | M] (Microsoft Corporation) -- D:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
[2013/06/25 13:10:11 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
[2013/06/25 13:10:11 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- D:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
[2013/06/25 13:10:11 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll
[2013/06/25 13:10:11 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- D:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
[2013/06/25 13:10:11 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll
[2013/06/25 13:10:11 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- D:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
[2013/06/25 13:10:11 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll
[2013/06/25 13:10:11 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- D:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
[2013/06/25 13:10:11 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll
[2013/06/25 13:10:11 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- D:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
[2013/06/25 13:10:11 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll
[2013/06/25 13:10:11 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- D:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
[2013/06/25 13:10:11 | 000,002,560 | -H-- | M] (Microsoft Corporation) -- D:\Windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll
[2013/06/25 13:10:11 | 000,002,560 | -H-- | M] (Microsoft Corporation) -- D:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
[2013/06/25 13:07:25 | 000,001,021 | ---- | M] () -- D:\Users\Public\Desktop\CCleaner.lnk
[2013/06/25 12:58:58 | 000,001,926 | ---- | M] () -- D:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2013/06/25 12:58:50 | 000,000,000 | ---- | M] () -- D:\Windows\SysWow64\config.nt
[2013/06/12 09:32:15 | 000,692,104 | ---- | M] (Adobe Systems Incorporated) -- D:\Windows\SysWow64\FlashPlayerApp.exe
[2013/06/12 09:32:14 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- D:\Windows\SysWow64\FlashPlayerCPLApp.cpl
 
========== Files Created - No Company Name ==========
 
[2013/06/26 17:28:54 | 275,295,072 | ---- | C] () -- D:\Windows\MEMORY.DMP
[2013/06/25 13:51:09 | 000,001,243 | ---- | C] () -- D:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
[2013/06/25 13:51:08 | 000,001,306 | ---- | C] () -- D:\Users\Public\Desktop\Free YouTube Download.lnk
[2013/06/25 13:12:19 | 000,025,185 | ---- | C] () -- D:\Windows\SysWow64\ieuinit.inf
[2013/06/25 13:12:19 | 000,025,185 | ---- | C] () -- D:\Windows\System32\ieuinit.inf
[2013/04/14 13:07:16 | 000,000,063 | ---- | C] () -- D:\Windows\wininit.ini
[2013/02/18 13:56:33 | 000,000,057 | ---- | C] () -- D:\ProgramData\Ament.ini
[2013/01/09 04:34:34 | 000,002,918 | ---- | C] () -- D:\ProgramData\dsgsdgdsgdsgw.js
[2012/12/08 06:57:01 | 000,001,453 | ---- | C] () -- D:\Users\Dering\AppData\Local\recently-used.xbel
[2012/02/14 10:01:32 | 001,456,640 | ---- | C] () -- D:\Program Files (x86)\Common Files\Falk Navi-Manager.msi
[2011/12/15 11:30:13 | 000,000,000 | ---- | C] () -- D:\Users\Dering\AppData\Local\{1DDB9783-CE94-4ECB-89A1-8C362A9DF922}
[2011/12/15 01:13:41 | 000,000,000 | ---- | C] () -- D:\Users\Dering\AppData\Local\{52B52355-5DFD-4D50-B371-DB08B18B0887}
[2011/12/14 03:22:41 | 000,000,000 | ---- | C] () -- D:\Users\Dering\AppData\Local\{D9907929-9510-4658-B2DB-5941CE94C9AD}
[2011/12/10 06:45:05 | 000,000,000 | ---- | C] () -- D:\Users\Dering\AppData\Local\{BDA0F482-7997-4722-9547-27C61B1D89D0}
[2011/12/09 10:57:27 | 000,000,000 | ---- | C] () -- D:\Users\Dering\AppData\Local\{128C8FD9-055B-4B96-8EB7-CE04F088CFFE}
[2011/12/07 09:32:04 | 000,000,000 | ---- | C] () -- D:\Users\Dering\AppData\Local\{8A3E6A7C-F122-4CBF-8C02-C0C5A74D9A55}
[2011/12/07 07:02:52 | 000,000,000 | ---- | C] () -- D:\Users\Dering\AppData\Local\{7C4EC87C-FA47-40ED-8630-05D41DC44A66}
[2011/11/21 10:03:30 | 000,000,000 | ---- | C] () -- D:\Users\Dering\AppData\Local\{D536E06A-85E8-4689-8CFC-EA5D4FF55583}
[2011/11/14 13:35:59 | 000,000,000 | ---- | C] () -- D:\Users\Dering\AppData\Local\{D64CD1DD-F621-466F-A280-36E3D08D6E5C}
[2011/11/14 13:22:39 | 000,000,000 | ---- | C] () -- D:\Users\Dering\AppData\Local\{CA496DC1-EC49-4993-A9FF-7EBDD029F2E8}
[2011/11/14 00:19:46 | 000,000,000 | ---- | C] () -- D:\Users\Dering\AppData\Local\{D0392F49-AA52-4D67-9A34-0E8B08663C19}
[2011/11/13 11:04:47 | 000,000,000 | ---- | C] () -- D:\Users\Dering\AppData\Local\{01A69873-4AAD-4646-A45A-73FB4A463529}
[2011/11/09 07:18:11 | 000,000,000 | ---- | C] () -- D:\Users\Dering\AppData\Local\{460DDFA1-3F8C-4EAE-B641-7308C269A428}
[2011/11/02 13:04:41 | 000,000,000 | ---- | C] () -- D:\Users\Dering\AppData\Local\{32C30D43-7B70-43CF-B0A7-68DFD29F22BA}
[2011/10/30 13:44:25 | 000,000,000 | ---- | C] () -- D:\Users\Dering\AppData\Local\{5F19DD9B-AE0F-4461-BBFC-7A74760927EE}
[2011/10/30 04:46:52 | 000,000,000 | ---- | C] () -- D:\Users\Dering\AppData\Local\{6170A097-C28E-40DF-A800-814BFF246185}
[2011/10/23 14:32:31 | 000,000,000 | ---- | C] () -- D:\Users\Dering\AppData\Local\{E7B73B1D-5BA1-48FB-B6E8-406B83F5C39C}
[2011/10/23 14:19:27 | 000,000,000 | ---- | C] () -- D:\Users\Dering\AppData\Local\{2AE83C55-69DA-4133-A32F-79FF7D9720ED}
[2011/10/23 06:50:56 | 000,000,000 | ---- | C] () -- D:\Users\Dering\AppData\Local\{6A33DB10-EDF3-4ED3-81E3-4A1C625D4ADE}
[2011/10/23 03:21:07 | 000,000,000 | ---- | C] () -- D:\Users\Dering\AppData\Local\{2CC1D5EF-14FB-4DEB-B1B6-0D74351EE10A}
[2011/10/20 13:23:51 | 000,000,000 | ---- | C] () -- D:\Users\Dering\AppData\Local\{E0135E79-D6D9-4288-8AE1-75474B26854E}
[2011/10/16 23:53:27 | 000,000,000 | ---- | C] () -- D:\Users\Dering\AppData\Local\{05911F29-EA20-47D4-B63F-1BB93897EF72}
[2011/10/04 11:58:12 | 000,000,000 | ---- | C] () -- D:\Users\Dering\AppData\Local\{B033988B-6BAA-4252-AB7C-12198EFB7306}
[2011/09/22 13:59:03 | 000,006,144 | ---- | C] () -- D:\Users\Dering\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/09/19 14:18:47 | 000,000,000 | ---- | C] () -- D:\Users\Dering\AppData\Local\{83ADFF90-3BD2-4B1A-879A-A981C423676A}
[2011/09/19 04:05:18 | 000,000,000 | ---- | C] () -- D:\Users\Dering\AppData\Local\{50BC20CF-DEEF-4352-849F-2563DAC3480E}
[2011/09/17 03:25:55 | 000,000,000 | ---- | C] () -- D:\Users\Dering\AppData\Local\{05D17433-36F9-4826-9007-57161425891F}
[2011/09/13 11:36:28 | 000,000,000 | ---- | C] () -- D:\Users\Dering\AppData\Local\{CC2A56B2-D340-498C-B3B4-58EDD8F12C86}
[2011/09/13 04:32:13 | 000,000,000 | ---- | C] () -- D:\Users\Dering\AppData\Local\{20E3CC42-28A0-41F1-8D1F-D176DA32204B}
[2011/09/12 03:45:22 | 000,000,000 | ---- | C] () -- D:\Users\Dering\AppData\Local\{402AC76F-C600-4A86-BDAE-6265231CF5F1}
[2011/09/07 12:27:54 | 000,000,000 | ---- | C] () -- D:\Users\Dering\AppData\Local\{5D5DFB8A-D971-4A7C-AC1B-8FABFFD48AEF}
[2011/08/30 02:54:54 | 000,000,000 | ---- | C] () -- D:\Users\Dering\AppData\Local\{2053A0A0-A632-4823-9FE7-D70E28BBE453}
[2011/08/29 06:22:36 | 001,552,498 | ---- | C] () -- D:\Windows\SysWow64\PerfStringBackup.INI
[2011/08/14 06:04:47 | 000,053,248 | ---- | C] () -- D:\Windows\SysWow64\CommonDL.dll
[2011/08/14 06:04:47 | 000,002,413 | ---- | C] () -- D:\Windows\SysWow64\lgAxconfig.ini
[2011/07/23 05:27:18 | 000,000,000 | ---- | C] () -- D:\Users\Dering\AppData\Local\{64B0CD9C-83AE-44AB-9DE1-17A8B0A39EC2}
[2011/07/04 09:48:50 | 000,000,000 | ---- | C] () -- D:\Users\Dering\AppData\Local\{AD843891-0F2F-4FFB-8C8B-4AEB08C37EB2}
[2011/06/14 01:33:15 | 000,252,928 | ---- | C] () -- D:\Windows\SysWow64\DShowRdpFilter.dll
[2011/02/26 14:58:36 | 000,000,741 | ---- | C] () -- D:\Windows\wiso.ini
[2010/11/16 14:03:25 | 000,482,408 | ---- | C] () -- D:\Windows\ssndii.exe
[2010/07/01 14:20:42 | 000,000,000 | ---- | C] () -- D:\Windows\nsreg.dat
[2010/04/12 19:49:22 | 000,001,744 | ---- | C] () -- D:\Windows\WPatchProgress.ini
[2010/04/12 10:28:41 | 000,000,033 | ---- | C] () -- D:\Windows\LaunApp.ini
[2010/04/12 10:15:12 | 000,200,704 | ---- | C] () -- D:\Windows\PLFSetI.exe
[2010/04/12 10:15:12 | 000,000,188 | ---- | C] () -- D:\Windows\PidList.ini
[2010/04/12 10:15:11 | 000,106,496 | ---- | C] () -- D:\Windows\FixUVC.exe
[2009/10/28 13:54:34 | 000,000,193 | ---- | C] () -- D:\Windows\Prelaunch.ini
[2009/10/28 13:54:34 | 000,000,168 | ---- | C] () -- D:\Windows\WisLangCode.ini
[2009/10/28 13:54:34 | 000,000,147 | ---- | C] () -- D:\Windows\WisPriority.ini
[2009/07/14 01:38:36 | 000,067,584 | --S- | C] () -- D:\Windows\bootstat.dat
[2009/07/13 22:35:51 | 000,000,741 | ---- | C] () -- D:\Windows\SysWow64\NOISE.DAT
[2009/07/13 22:34:42 | 000,215,943 | ---- | C] () -- D:\Windows\SysWow64\dssec.dat
[2009/07/13 20:10:29 | 000,043,131 | ---- | C] () -- D:\Windows\mib.bin
[2009/07/13 19:42:10 | 000,064,000 | ---- | C] () -- D:\Windows\SysWow64\BWContextHandler.dll
[2009/07/13 18:25:04 | 000,197,632 | ---- | C] () -- D:\Windows\SysWow64\ir32_32.dll
[2009/07/13 17:59:36 | 000,982,196 | ---- | C] () -- D:\Windows\SysWow64\igkrng500.bin
[2009/07/13 17:59:36 | 000,139,824 | ---- | C] () -- D:\Windows\SysWow64\igfcg500.bin
[2009/07/13 17:59:36 | 000,097,448 | ---- | C] () -- D:\Windows\SysWow64\igfcg500m.bin
[2009/07/13 17:59:35 | 000,417,344 | ---- | C] () -- D:\Windows\SysWow64\igcompkrng500.bin
[2009/07/13 17:03:59 | 000,364,544 | ---- | C] () -- D:\Windows\SysWow64\msjetoledb40.dll
[2009/06/10 17:26:10 | 000,673,088 | ---- | C] () -- D:\Windows\SysWow64\mlang.dat
[2008/10/07 03:13:30 | 000,197,912 | ---- | C] () -- D:\Windows\SysWow64\physxcudart_20.dll
[2008/10/07 03:13:22 | 000,058,648 | ---- | C] () -- D:\Windows\SysWow64\AgCPanelTraditionalChinese.dll
[2008/10/07 03:13:20 | 000,058,648 | ---- | C] () -- D:\Windows\SysWow64\AgCPanelSwedish.dll
[2008/10/07 03:13:20 | 000,058,648 | ---- | C] () -- D:\Windows\SysWow64\AgCPanelSpanish.dll
[2008/10/07 03:13:20 | 000,058,648 | ---- | C] () -- D:\Windows\SysWow64\AgCPanelSimplifiedChinese.dll
[2008/10/07 03:13:20 | 000,058,648 | ---- | C] () -- D:\Windows\SysWow64\AgCPanelPortugese.dll
[2008/10/07 03:13:20 | 000,058,648 | ---- | C] () -- D:\Windows\SysWow64\AgCPanelKorean.dll
[2008/10/07 03:13:20 | 000,058,648 | ---- | C] () -- D:\Windows\SysWow64\AgCPanelJapanese.dll
[2008/10/07 03:13:20 | 000,058,648 | ---- | C] () -- D:\Windows\SysWow64\AgCPanelGerman.dll
[2008/10/07 03:13:20 | 000,058,648 | ---- | C] () -- D:\Windows\SysWow64\AgCPanelFrench.dll
 
========== LOP Check ==========
 
[2009/10/28 13:36:55 | 000,000,000 | ---D | M] -- D:\ProgramData\Acer
[2010/06/03 10:41:59 | 000,000,000 | ---D | M] -- D:\ProgramData\Alawar Entertainment
[2010/05/15 07:23:09 | 000,000,000 | ---D | M] -- D:\ProgramData\Alwil Software
[2010/05/15 05:12:30 | 000,000,000 | -HSD | M] -- D:\ProgramData\Anwendungsdaten
[2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- D:\ProgramData\Application Data
[2010/05/15 10:33:08 | 000,000,000 | ---D | M] -- D:\ProgramData\Arcade Lab
[2013/01/09 05:07:09 | 000,000,000 | ---D | M] -- D:\ProgramData\AVAST Software
[2013/05/02 03:51:37 | 000,000,000 | ---D | M] -- D:\ProgramData\Babylon
[2009/10/29 02:10:22 | 000,000,000 | ---D | M] -- D:\ProgramData\BackupManager
[2010/06/03 04:21:26 | 000,000,000 | ---D | M] -- D:\ProgramData\BanzaiInteractive
[2010/06/02 14:20:38 | 000,000,000 | ---D | M] -- D:\ProgramData\BC Soft Games
[2010/06/04 12:40:45 | 000,000,000 | ---D | M] -- D:\ProgramData\Becky Brogan
[2013/06/04 08:25:31 | 000,000,000 | ---D | M] -- D:\ProgramData\BrowserProtect
[2012/03/08 05:36:56 | 000,000,000 | ---D | M] -- D:\ProgramData\Buhl Data Service GmbH
[2011/04/30 10:08:00 | 000,000,000 | ---D | M] -- D:\ProgramData\Canneverbe Limited
[2012/05/08 14:21:47 | 000,000,000 | -H-D | M] -- D:\ProgramData\Common Files
[2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- D:\ProgramData\Desktop
[2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- D:\ProgramData\Documents
[2010/05/15 05:12:30 | 000,000,000 | -HSD | M] -- D:\ProgramData\Dokumente
[2010/04/12 10:14:31 | 000,000,000 | ---D | M] -- D:\ProgramData\EgisTec
[2009/10/29 03:46:17 | 000,000,000 | ---D | M] -- D:\ProgramData\eSobi
[2012/12/13 15:02:33 | 000,000,000 | ---D | M] -- D:\ProgramData\f-secure
[2010/07/11 13:35:24 | 000,000,000 | ---D | M] -- D:\ProgramData\FarmFrenzy2
[2010/05/15 05:12:30 | 000,000,000 | -HSD | M] -- D:\ProgramData\Favoriten
[2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- D:\ProgramData\Favorites
[2010/06/28 04:04:37 | 000,000,000 | ---D | M] -- D:\ProgramData\Flood Light Games
[2010/06/01 05:54:59 | 000,000,000 | ---D | M] -- D:\ProgramData\Friends Games
[2012/12/08 06:31:28 | 000,000,000 | ---D | M] -- D:\ProgramData\fssg
[2010/06/03 14:55:05 | 000,000,000 | ---D | M] -- D:\ProgramData\fullscreen=true
[2013/07/06 08:45:15 | 000,000,000 | ---D | M] -- D:\ProgramData\HitmanPro
[2010/06/28 05:29:09 | 000,000,000 | ---D | M] -- D:\ProgramData\Intenium
[2010/06/05 16:04:30 | 000,000,000 | ---D | M] -- D:\ProgramData\JollyBear
[2011/08/14 06:10:39 | 000,000,000 | ---D | M] -- D:\ProgramData\LGMOBILEAX
[2010/05/15 05:14:44 | 000,000,000 | ---D | M] -- D:\ProgramData\McQcModifier-5c47-a7b0
[2012/04/05 13:07:52 | 000,000,000 | ---D | M] -- D:\ProgramData\Nokia
[2011/09/22 13:22:46 | 000,000,000 | ---D | M] -- D:\ProgramData\NokiaInstallerCache
[2010/05/15 05:12:50 | 000,000,000 | ---D | M] -- D:\ProgramData\OEM
[2010/07/02 01:17:34 | 000,000,000 | ---D | M] -- D:\ProgramData\Partner
[2011/11/13 11:06:09 | 000,000,000 | ---D | M] -- D:\ProgramData\PC Suite
[2010/06/01 07:07:26 | 000,000,000 | ---D | M] -- D:\ProgramData\PlayFirst
[2010/06/27 07:05:33 | 000,000,000 | ---D | M] -- D:\ProgramData\Playrix Entertainment
[2010/05/26 19:27:06 | 000,000,000 | ---D | M] -- D:\ProgramData\Sandlot Games
[2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- D:\ProgramData\Start Menu
[2010/05/15 05:12:30 | 000,000,000 | -HSD | M] -- D:\ProgramData\Startmenü
[2010/06/04 12:46:09 | 000,000,000 | ---D | M] -- D:\ProgramData\SugarGames
[2011/05/08 08:26:16 | 000,000,000 | ---D | M] -- D:\ProgramData\Temp
[2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- D:\ProgramData\Templates
[2012/05/08 14:22:24 | 000,000,000 | ---D | M] -- D:\ProgramData\TuneUp Software
[2010/05/15 05:12:30 | 000,000,000 | -HSD | M] -- D:\ProgramData\Vorlagen
[2012/05/08 14:21:47 | 000,000,000 | -HSD | M] -- D:\ProgramData\{32364CEA-7855-4A3C-B674-53D8E9B97936}
[2012/06/13 10:55:07 | 000,000,000 | ---D | M] -- D:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
[2013/05/31 05:33:36 | 000,032,632 | ---- | M] () -- D:\Windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 171 bytes -> D:\ProgramData\Temp:E2458802
@Alternate Data Stream - 153 bytes -> D:\ProgramData\Temp:4D066AD2
@Alternate Data Stream - 148 bytes -> D:\ProgramData\Temp:C22674B6
@Alternate Data Stream - 146 bytes -> D:\ProgramData\Temp:AB689DEA
@Alternate Data Stream - 144 bytes -> D:\ProgramData\Temp:78E0DF72
@Alternate Data Stream - 137 bytes -> D:\ProgramData\Temp:2556A8A0
@Alternate Data Stream - 133 bytes -> D:\ProgramData\Temp:93DE1838
@Alternate Data Stream - 129 bytes -> D:\ProgramData\Temp:4673E9EA
@Alternate Data Stream - 125 bytes -> D:\ProgramData\Temp:E3C56885
@Alternate Data Stream - 124 bytes -> D:\ProgramData\Temp:E1F04E8D
@Alternate Data Stream - 122 bytes -> D:\ProgramData\Temp:ABE89FFE
@Alternate Data Stream - 122 bytes -> D:\ProgramData\Temp:444C53BA
@Alternate Data Stream - 121 bytes -> D:\ProgramData\Temp:0B9176C0
@Alternate Data Stream - 118 bytes -> D:\ProgramData\Temp:4CF61E54
< End of report >

--- --- ---
OTL Logfile:

Code:

ATTFilter

OTL Extras logfile created on: 7/6/2013 5:05:04 PM - Run 
OTLPE by OldTimer - Version 3.1.48.0     Folder = X:\Programs\OTLPE
64bit-Windows 7 Home Premium Service Pack 1 (Version = 6.1.7601) - Type = System
Internet Explorer (Version = 9.10.9200.16618)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 87.00% Memory free
3.00 Gb Paging File | 3.00 Gb Available in Paging File | 97.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = D: | %SystemRoot% = D:\Windows | %ProgramFiles% = D:\Program Files (x86)
Drive C: | 100.00 Mb Total Space | 74.34 Mb Free Space | 74.35% Space Free | Partition Type: NTFS
Drive D: | 286.27 Gb Total Space | 162.61 Gb Free Space | 56.80% Space Free | Partition Type: NTFS
Drive E: | 3.76 Gb Total Space | 0.01 Gb Free Space | 0.34% Space Free | Partition Type: FAT32
Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
 
Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet001
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- D:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.url[@ = InternetShortcut] -- D:\Windows\System32\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- D:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- D:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %* File not found
cmdfile [open] -- "%1" %* File not found
comfile [open] -- "%1" %* File not found
exefile [open] -- "%1" %* File not found
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1" File not found
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %* File not found
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1" File not found
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l File not found
scrfile [open] -- "%1" /S File not found
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- "C:\Users\Dering\AppData\Roaming\File Scout\filescout.exe" /open "%1" ()
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- "C:\Users\Dering\AppData\Roaming\File Scout\filescout.exe" /open "%1" ()
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
========== Authorized Applications List ==========
 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{4D668D4F-FAA2-4726-834C-31F4614F312E}" = MSVC80_x64_v2
"{680EDA59-9266-44B4-949E-0C24F65DFF82}" = Microsoft_VC100_CRT_SP1_x64
"{6A76BEAF-6D1F-4273-A79B-DA8410A2E56B}" = Apple Mobile Device Support
"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour
"{840A3BAA-4C68-4581-9C7A-6F8D6CF531B9}" = iTunes
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0407-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (German) 2007
"{90120000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2007
"{90120000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007
"{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{96F70DF8-160F-4F9C-9B9E-2A9B439B4EB9}" = Broadcom Gigabit NetLink Controller
"{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}" = ALPS Touch Pad Driver
"{AB071C8B-873C-459F-ACA9-9EBE03C3E89B}" = MSVC90_x64
"{AF43C18E-693D-4126-B190-8F55E3623D5D}" = HP Officejet 6500 E710n-z - Grundlegende Software für das Gerät
"{F28BD099-9FC0-4A03-A605-E069B8D17D47}" = HP Officejet 6500 E710a-f - Grundlegende Software für das Gerät
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"CCleaner" = CCleaner
"LSI Soft Modem" = LSI HDA Modem
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"NVIDIA Drivers" = NVIDIA Drivers
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{4D668D4F-FAA2-4726-834C-31F4614F312E}" = MSVC80_x64_v2
"{680EDA59-9266-44B4-949E-0C24F65DFF82}" = Microsoft_VC100_CRT_SP1_x64
"{6A76BEAF-6D1F-4273-A79B-DA8410A2E56B}" = Apple Mobile Device Support
"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour
"{840A3BAA-4C68-4581-9C7A-6F8D6CF531B9}" = iTunes
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0407-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (German) 2007
"{90120000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2007
"{90120000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007
"{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{96F70DF8-160F-4F9C-9B9E-2A9B439B4EB9}" = Broadcom Gigabit NetLink Controller
"{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}" = ALPS Touch Pad Driver
"{AB071C8B-873C-459F-ACA9-9EBE03C3E89B}" = MSVC90_x64
"{AF43C18E-693D-4126-B190-8F55E3623D5D}" = HP Officejet 6500 E710n-z - Grundlegende Software für das Gerät
"{F28BD099-9FC0-4A03-A605-E069B8D17D47}" = HP Officejet 6500 E710a-f - Grundlegende Software für das Gerät
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"CCleaner" = CCleaner
"LSI Soft Modem" = LSI HDA Modem
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"NVIDIA Drivers" = NVIDIA Drivers
 
< End of report >

--- --- ---

markusg · 06.07.2013, 15:17

hmm zeigt keine Autostart einträge.
kannst du es noch mal konfigurieren wie eben, und folgenes Script ausführen
Kopiere nun den Inhalt in die

Textbox.

Code:

ATTFilter

activex
netsvcs
msconfig
%SYSTEMDRIVE%\*.
%PROGRAMFILES%\*.exe
%LOCALAPPDATA%\*.exe
%systemroot%\*. /mp /s
/md5start
userinit.exe
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
ws2ifsl.sys
sceclt.dll
ntelogon.dll
winlogon.exe
logevent.dll
user32.DLL
explorer.exe
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
/md5stop
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%USERPROFILE%\*.*
%USERPROFILE%\Local Settings\Temp\*.exe
%USERPROFILE%\Local Settings\Temp\*.dll
%USERPROFILE%\Application Data\*.exe

• Drücke Run Scan um den Scan zu starten.
• Wenn er fertig ist werden die Dateien in C:\otl.txt gesichert
• Kopiere diesen Ordner auf deinen USB-Stick wenn du keine Internetverbindung auf diesem System hast.
poste beide logs

Lisa88 · 06.07.2013, 15:22

Ähm, sorry. Was soll ich machen? ;-)

06.07.2013, 12:55	#6
markusg /// Malware-holic	Schwarzer Bildschirm mit Mauspfeil nach dem Hochfahren OK verbesserung? teste, falls noch nicht besser ob du: 1. den taskmanager aufrufen kasnst und über neuer Task die Explorer.exe starten kannst. bzw über Rechtsklick auf den Desktop, Ansicht, Symbole einblenden, anhaken __________________ --> Schwarzer Bildschirm mit Mauspfeil nach dem Hochfahren

Schwarzer Bildschirm mit Mauspfeil nach dem Hochfahren

Plagegeister aller Art und deren Bekämpfung: Schwarzer Bildschirm mit Mauspfeil nach dem Hochfahren