Virus! Nur schwarzer Bildschirm mit Maus! Windows Vista

christopherm · 19.07.2013, 07:25

Guten Tag,
ich habe einen Vista Rechner, wo nach dem Booten nur noch ein schwarzer Bildschrim mit einem Mauszeiger zu sehen ist. FRST.EXE wurde durchgeführt, siehe Tag!

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 17-07-2013
Ran by SYSTEM on 19-07-2013 08:16:19
Running from G:\
Windows Vista (TM) Business Service Pack 1 (X86) OS Language: English(US)
Internet Explorer Version 9
Boot Mode: Recovery

The current controlset is ControlSet001
ATTENTION!:=====> FRST is updated to run from normal or Safe mode to produce a full FRST.txt log and Addition.txt log.

==================== Registry (Whitelisted) ==================

Winlogon\Notify\psfus: C:\Windows\system32\psqlpwd.dll (UPEK Inc.)
HKU\Default\...\RunOnce: [] -  [x]
HKU\Default\...\RunOnce: [Lenovoautosdrive] - C:\PROGRA~1\Common~1\Lenovo\Lenovo~1\LenovoAutorunreg.exe /DRIVE=S [ 2008-07-29] ()
HKU\Default\...\RunOnce: [Lenovoautoqdrive] - C:\PROGRA~1\Common~1\Lenovo\Lenovo~1\LenovoAutorunreg.exe /DRIVE=Q [ 2008-07-29] ()
HKU\Default User\...\RunOnce: [] -  [x]
HKU\Default User\...\RunOnce: [Lenovoautosdrive] - C:\PROGRA~1\Common~1\Lenovo\Lenovo~1\LenovoAutorunreg.exe /DRIVE=S [ 2008-07-29] ()
HKU\Default User\...\RunOnce: [Lenovoautoqdrive] - C:\PROGRA~1\Common~1\Lenovo\Lenovo~1\LenovoAutorunreg.exe /DRIVE=Q [ 2008-07-29] ()
HKU\Nela\...\Run: [TomTomHOME.exe] - "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe" [x]
HKU\Nela\...\Run: [HW_OPENEYE_OUC_T-Mobile Internet Manager] - "C:\Program Files\T-Mobile\T-Mobile Internet Manager\UpdateDog\ouc.exe" [x]
HKU\Nela\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\WMPNSCFG.exe [ 2008-01-20] (Microsoft Corporation)
Lsa: [Notification Packages] scecli psqlpwd ACGina
lution\cssauth.exe [3077432 2008-06-25] (Lenovo Group Limited)
HKLM\...\Run: [Message Center Plus] - C:\Program Files\LENOVO\Message Center Plus\MCPLaunch.exe [49976 2009-05-27] ()
HKLM\...\Run: [DataCardMonitor] - C:\Program Files\T-Mobile\T-Mobile Internet Manager\DataCardMonitor.exe [253952 2010-06-29] (Huawei Technologies Co., Ltd.)
HKLM\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [41056 2013-05-08] (Adobe Systems Incorporated)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [iSaverCtrl] - C:\Program Files\iSaver\iSaverCtrl.exe [1142784 2008-07-07] (infoMantis GmbH)
HKLM\...\Run: [BingDesktop] - C:\Program Files\Microsoft\BingDesktop\BingDesktop.exe [2249352 2013-06-20] (Microsoft Corp.)
HKLM\...\Run: [AVP] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [218880 2012-05-31] (Kaspersky Lab ZAO)
HKLM\...\RunOnce: [*Restore] - C:\Windows\system32\rstrui.exe /RUNONCE [318464 2008-01-20] (Microsoft Corporation)
Startup: C:\Users\Nela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\Nela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote Inhaltsverzeichnis.onetoc2 ()

========================== Services (Whitelisted) =================

S2 ASLDRService; C:\Program Files\Lenovo\ATK Hotkey\ASLDRSrv.exe [94208 2007-10-02] ()
S2 ATKGFNEXSrv; C:\Program Files\Lenovo\ATK Hotkey\GFNEXSrv.exe [94208 2007-10-30] ()
S2 AVP; C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [218880 2012-05-31] (Kaspersky Lab ZAO)
S2 BingDesktopUpdate; C:\Program Files\Microsoft\BingDesktop\BingDesktopUpdater.exe [173192 2013-06-20] (Microsoft Corp.)
S2 LFKAS; C:\Program Files\Lenovo\ATK Hotkey\LFKAS.exe [208896 2008-03-19] ()
S3 MSSQL$MSSMLBIZ; c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29293408 2010-12-10] (Microsoft Corporation)
S3 Roxio UPnP Renderer 10; C:\Program Files\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [313840 2008-04-24] (Sonic Solutions)
S2 Roxio Upnp Server 10; C:\Program Files\Roxio\Digital Home 10\RoxioUpnpService10.exe [362992 2008-04-24] (Sonic Solutions)
S2 RoxLiveShare10; C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxLiveShare10.exe [309744 2008-04-24] (Sonic Solutions)
S2 SUService; C:\Program Files\Lenovo\System Update\SUService.exe [28672 2008-10-20] (Lenovo Group Limited)
S2 TSSCoreService; C:\Program Files\Lenovo\Client Security Solution\tvttcsd.exe [779576 2008-06-13] (Lenovo)
S2 TVT Backup Protection Service; C:\Program Files\Lenovo\Rescue and Recovery\rrpservice.exe [520192 2008-05-24] ()
S2 TVT Scheduler; c:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe [1155072 2008-05-24] (Lenovo Group Limited)
S2 SessionLauncher; C:\Users\ADMINI~1\AppData\Local\Temp\DX9\SessionLauncher.exe [x]

==================== Drivers (Whitelisted) ====================

S2 ASMMAP; C:\Program Files\Lenovo\ATK Hotkey\ASMMAP.sys [13880 2007-07-24] ()
S3 DCamUSBGene; C:\Windows\System32\DRIVERS\usbstk.sys [173584 2008-07-30] ()
S0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [135984 2012-04-13] (Kaspersky Lab ZAO)
S1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [584536 2012-05-29] (Kaspersky Lab)
S1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [23856 2012-03-27] (Kaspersky Lab ZAO)
S3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [25432 2012-05-25] (Kaspersky Lab)
S3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [25944 2012-05-25] (Kaspersky Lab)
S1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [43696 2012-05-12] (Kaspersky Lab)
S1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [140120 2012-05-24] (Kaspersky Lab)
S3 lnvobus; C:\Windows\System32\DRIVERS\lnvobus.sys [302464 2008-08-01] (MCCI Corporation)
S3 lnvocard; C:\Windows\System32\DRIVERS\lnvocard.sys [378496 2008-08-01] (MCCI Corporation)
S3 lnvogps; C:\Windows\System32\DRIVERS\lnvogps.sys [76328 2008-08-05] (Ericsson AB)
S3 lnvomdfl; C:\Windows\System32\DRIVERS\lnvomdfl.sys [15104 2008-08-01] (MCCI Corporation)
S3 lnvomdfl2; C:\Windows\System32\DRIVERS\lnvomdfl2.sys [15104 2008-08-01] (MCCI Corporation)
S3 lnvomdm; C:\Windows\System32\DRIVERS\lnvomdm.sys [387072 2008-08-01] (MCCI Corporation)
S3 lnvomdm2; C:\Windows\System32\DRIVERS\lnvomdm2.sys [431488 2008-08-01] (MCCI Corporation)
S3 lnvond5; C:\Windows\System32\DRIVERS\lnvond5.sys [25984 2008-08-01] (MCCI Corporation)
S3 lnvounic; C:\Windows\System32\DRIVERS\lnvounic.sys [402944 2008-08-01] (MCCI Corporation)
S3 MTsensor; C:\Windows\System32\DRIVERS\A0101V32.sys [7680 2006-12-14] (ATK0100)
S3 NETwNv32; C:\Windows\System32\DRIVERS\NETwNv32.sys [7346176 2011-10-31] (Intel Corporation)
S2 smihlp; C:\Program Files\Common Files\ThinkVantage Fingerprint Software\Drivers\smihlp.sys [12560 2008-06-24] (UPEK Inc.)
S3 Sony_EricssonWWSC; C:\Windows\System32\DRIVERS\lnvoscard.sys [24232 2008-07-08] (Sony Ericsson)
S1 TPPWRIF; C:\Windows\System32\drivers\Tppwr32v.sys [12080 2008-09-18] ()
S3 UsbserFilt; C:\Windows\System32\DRIVERS\usbser_lowerfltj.sys [8064 2008-05-02] (Windows (R) Codename Longhorn DDK provider)
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]

========================== Drivers MD5 =======================

C:\Windows\System32\drivers\acpi.sys 82B296AE1892FE3DBEE00C9CF92F8AC7
C:\Windows\system32\drivers\adp94xx.sys 04F0FCAC69C7C71A3AC4EB97FAFC8303
C:\Windows\system32\drivers\adpahci.sys 60505E0041F7751BDBB80F88BF45C2CE
C:\Windows\system32\drivers\adpu160m.sys 8A42779B02AEC986EAB64ECFC98F8BD7
C:\Windows\system32\drivers\adpu320.sys 241C9E37F8CE45EF51C3DE27515CA4E5
C:\Windows\system32\drivers\afd.sys 3911B972B55FEA0478476B2E777B29FA
C:\Windows\system32\drivers\agp440.sys 13F9E33747E6B41A3FF305C37DB0D360
C:\Windows\system32\drivers\djsvs.sys ==> MD5 is legit
C:\Windows\system32\drivers\aliide.sys 9EAEF5FC9B8E351AFA7E78A6FAE91F91
C:\Windows\system32\drivers\amdagp.sys C47344BC706E5F0B9DCE369516661578
C:\Windows\system32\drivers\amdide.sys 9B78A39A4C173FDBC1321E0DD659B34C
C:\Windows\system32\drivers\amdk7.sys 18F29B49AD23ECEE3D2A826C725C8D48
C:\Windows\system32\drivers\amdk8.sys 93AE7F7DD54AB986A6F1A1B37BE7442D
C:\Windows\system32\drivers\arc.sys 5D2888182FB46632511ACEE92FDAD522
C:\Windows\system32\drivers\arcsas.sys 5E2A321BD7C8B3624E41FDEC3E244945
C:\Program Files\Lenovo\ATK Hotkey\ASMMAP.sys 7B4D08D2017AC06689D422E06C43F0AA
C:\Windows\System32\DRIVERS\asyncmac.sys 53B202ABEE6455406254444303E87BE1
C:\Windows\system32\drivers\atapi.sys 2D9C903DC76A66813D350A562DE40ED9
C:\Windows\System32\Drivers\Beep.sys 67E506B75BD5326A3EC7B70BD014DFB6
C:\Windows\system32\drivers\blbdrive.sys D4DF28447741FD3D953526E33A617397
C:\Windows\System32\drivers\BMLoad.sys D002033C1A37F6AF51B5F0BA6D0211BC
C:\Windows\System32\DRIVERS\bowser.sys 35F376253F687BDE63976CCB3F2108CA
C:\Windows\system32\drivers\brfiltlo.sys ==> MD5 is legit
C:\Windows\system32\drivers\brfiltup.sys ==> MD5 is legit
C:\Windows\system32\drivers\brserid.sys ==> MD5 is legit
C:\Windows\system32\drivers\brserwdm.sys ==> MD5 is legit
C:\Windows\system32\drivers\brusbmdm.sys ==> MD5 is legit
C:\Windows\system32\drivers\brusbser.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\BthEnum.sys 6D39C954799B63BA866910234CF7D726
C:\Windows\System32\DRIVERS\bthmodem.sys 9A966A8E86D1771911AE34A20D11BFF3
C:\Windows\System32\DRIVERS\bthpan.sys 5904EFA25F829BF84EA6FB045134A1D8
C:\Windows\System32\Drivers\BTHport.sys 611FF3F2F095C8D4A6D4CFD9DCC09793
C:\Windows\System32\Drivers\BTHUSB.sys D330803EAB2A15CAEC7F011F1D4CB30E
C:\Windows\System32\drivers\btwaudio.sys F2F7342742180D5060285499DEE50F99
C:\Windows\System32\drivers\btwavdt.sys 32F59F26A30CFC508DA11DB3EA0F8B77
C:\Windows\System32\DRIVERS\btwl2cap.sys ECB98391C756A7B9CFBAE89D9D1235E1
C:\Windows\System32\DRIVERS\btwrchid.sys 03658734EF7D0F3B3F4636D3E8A38964
C:\Windows\System32\DRIVERS\cdfs.sys 7ADD03E75BEB9E6DD102C3081D29840A
C:\Windows\System32\DRIVERS\cdrom.sys 6B4BFFB9BECD728097024276430DB314
C:\Windows\system32\drivers\circlass.sys E5D4133F37219DBCFE102BC61072589D
C:\Windows\System32\CLFS.sys D7659D3B5B92C31E84E53C1431F35132
C:\Windows\System32\DRIVERS\CmBatt.sys 99AFC3795B58CC478FBBBCDC658FCB56
C:\Windows\system32\drivers\cmdide.sys 0CA25E686A4928484E9FDABD168AB629
C:\Windows\System32\drivers\CHDRT32.sys 9EE20B227083B6E8A0D1C61B2A122B0B
C:\Windows\System32\DRIVERS\compbatt.sys 6AFEF0B60FA25DE07C0968983EE4F60A
C:\Windows\System32\drivers\crcdisk.sys 741E9DFF4F42D2D8477D0FC1DC0DF871
C:\Windows\system32\drivers\crusoe.sys 1F07BECDCA750766A96CDA811BA86410
C:\Windows\System32\drivers\csc.sys 9BDB2E89BE8D0EF37B1F25C3D3FC192C
C:\Windows\System32\DRIVERS\usbstk.sys 4C98AA9BE8E95F6665240977CF4AD26B
C:\Windows\System32\Drivers\dfsc.sys 622C41A07CA7E6DD91770F50D532CB6C
C:\Windows\System32\drivers\disk.sys 5D4AEFC3386920236A548271F8F1AF6A
C:\Windows\System32\DLA\DLABMFSM.SYS 5B149CCFE275F4DE0B4B8EC6B9F6821E
C:\Windows\System32\DLA\DLABOIOM.SYS AD4CB3D783634C90A9D0CE360933A63C
C:\Windows\System32\Drivers\DLACDBHM.SYS 5230CDB7E715F3A3B4A882E254CDD35D
C:\Windows\System32\DLA\DLADResM.SYS DAE193B1DDC6914F56B767A4F1406351
C:\Windows\System32\DLA\DLAIFS_M.SYS 6A82F77C4A6F5235BF352F0028E2EF52
C:\Windows\System32\DLA\DLAOPIOM.SYS 0E6052C0ADA37504896A847231A3907D
C:\Windows\System32\DLA\DLAPoolM.SYS 29670BB4E2B973C5B55A76107D4910B2
C:\Windows\System32\Drivers\DLARTL_M.SYS 77FE51F0F8D86804CB81F6EF6BFB86DD
C:\Windows\System32\DLA\DLAUDFAM.SYS 6B087732B86C1D866D69DBBE463EA90A
C:\Windows\System32\DLA\DLAUDF_M.SYS BBEECB95F2841AE4A3E3690D46D7153D
C:\Windows\System32\drivers\drmkaud.sys 97FEF831AB90BEE128C9AF390E243F80
C:\Windows\System32\Drivers\DRVMCDB.SYS 83106585494D5EB96F59187200C144BD
C:\Windows\System32\Drivers\DRVNDDM.SYS FFC371525AA55D1BAE18715EBCB8797C
C:\Windows\System32\drivers\dxgkrnl.sys 5DE0FAEC9E5D1AAE74F8568897891A01
C:\Windows\System32\DRIVERS\e1e6032.sys 908ED85B7806E8AF3AF5E9B74F7809D4
C:\Windows\System32\DRIVERS\E1G60I32.sys 5425F74AC0C1DBD96A1E04F17D63F94C
C:\Windows\System32\drivers\ecache.sys 7F64EA048DCFAC7ACF8B4D7B4E6FE371
C:\Windows\system32\drivers\elxstor.sys 23B62471681A124889978F6295B3F4C6
C:\Windows\system32\drivers\errdev.sys 3DB974F3935483555D7148663F726C61
C:\Windows\System32\Drivers\exfat.sys 22B408651F9123527BCEE54B4F6C5CAE
C:\Windows\System32\Drivers\fastfat.sys 1E9B9A70D332103C52995E957DC09EF8
C:\Windows\System32\DRIVERS\fdc.sys AFE1E8B9782A0DD7FB46BBD88E43F89A
C:\Windows\System32\drivers\fileinfo.sys A8C0139A884861E3AAE9CFE73B208A9F
C:\Windows\System32\drivers\filetrace.sys 0AE429A696AECBC5970E3CF2C62635AE
C:\Windows\System32\DRIVERS\flpydisk.sys 85B7CF99D532820495D68D747FDA9EBD
C:\Windows\System32\drivers\fltmgr.sys 01334F9EA68E6877C4EF05D3EA8ABB05
C:\Windows\System32\Drivers\Fs_Rec.sys B972A66758577E0BFD1DE0F91AAA27B5
C:\Windows\system32\drivers\gagp30kx.sys 34582A6E6573D54A07ECE5FE24A126B5
C:\Windows\System32\drivers\HdAudio.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\HDAudBus.sys 062452B7FFD68C8C042A6261FE8DFF4A
C:\Windows\system32\drivers\hidbth.sys ==> MD5 is legit
C:\Windows\system32\drivers\hidir.sys ==> MD5 is legit
C:\Windows\system32\drivers\hidusb.sys ==> MD5 is legit
C:\Windows\system32\drivers\hpcisss.sys 16EE7B23A009E00D835CDB79574A91A6
C:\Windows\System32\DRIVERS\VSTAZL3.SYS 46D67209550973257601A533E2AC5785
C:\Windows\System32\DRIVERS\HSX_DPV.sys FADD7095163CB3CB4073793EBB50FE75
C:\Windows\System32\DRIVERS\HSXHWAZL.sys 058783BEDD17615D1FECE09F77960436
C:\Windows\System32\drivers\HTTP.sys F870AA3E254628EBEAFE754108D664DE
C:\Windows\System32\DRIVERS\ewusbmdm.sys 92CA47DA32009CCC00A5ADED04ABBD78
C:\Windows\system32\drivers\i2omp.sys C6B032D69650985468160FC9937CF5B4
C:\Windows\System32\DRIVERS\i8042prt.sys 22D56C8184586B7A1F6FA60BE5F5A2BD
C:\Windows\System32\drivers\iastor.sys 8EF427C54497C5F8A7A645990E4278C7
C:\Windows\system32\drivers\iastorv.sys 54155EA1B0DF185878E0FC9EC3AC3A14
C:\Windows\System32\DRIVERS\ibmpmdrv.sys 4A8AB38FDF3649C1FE3E9D16BF79927D
C:\Windows\System32\DRIVERS\igdkmd32.sys AA1636107C0C05A881BFBCE41142C70F
C:\Windows\system32\drivers\iirsp.sys ==> MD5 is legit
C:\Windows\System32\drivers\IntcHdmi.sys AB8B0206BCDFF0ED03CEC500FA03A32A
C:\Windows\system32\drivers\intelide.sys 83AA759F3189E6370C30DE5DC5590718
C:\Windows\System32\DRIVERS\intelppm.sys 224191001E78C89DFA78924C3EA595FF
C:\Windows\System32\DRIVERS\ipfltdrv.sys 62C265C38769B864CB25B4BCF62DF6C3
C:\Windows\system32\drivers\ipmidrv.sys B25AAF203552B7B3491139D582B39AD1
C:\Windows\System32\DRIVERS\ipnat.sys 8793643A67B42CEC66490B2A0CF92D68
C:\Windows\System32\drivers\irenum.sys 109C0DFB82C3632FBD11949B73AEEAC9
C:\Windows\system32\drivers\isapnp.sys 6C70698A3E5C4376C6AB5C7C17FB0614
C:\Windows\System32\DRIVERS\msiscsi.sys 232FA340531D940AAC623B121A595034
C:\Windows\system32\drivers\iteatapi.sys ==> MD5 is legit
C:\Windows\system32\drivers\iteraid.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\kbdclass.sys 37605E0A8CF00CBBA538E753E4344C6E
C:\Windows\system32\drivers\kbdhid.sys 18247836959BA67E3511B62846B9C2E0
C:\Windows\System32\DRIVERS\kl1.sys 0C78F66259B312DA2A2B565659FD5EBF
C:\Windows\System32\DRIVERS\klif.sys 7F1EC06AE3A9E263E5588667DC16DBA7
C:\Windows\System32\DRIVERS\klim6.sys EA32C661DB397A4F8FCB3FC5C6AE1C8F
C:\Windows\System32\DRIVERS\klkbdflt.sys 5447813494C727E80119520ABBAA9224
C:\Windows\System32\DRIVERS\klmouflt.sys 7B6774A2D4C6B9CF818D858D623BB9C1
C:\Windows\System32\DRIVERS\kltdi.sys 378FD5C977D56D08AF4316F815B35FD6
C:\Windows\System32\DRIVERS\kneps.sys 1C488D4B7808D20C382A0D54F72DF01C
C:\Windows\System32\Drivers\ksecdd.sys 4A1445EFA932A3BAF5BDB02D7131EE20
C:\Windows\System32\DRIVERS\smiif32.sys 3C3F7F424E324C6971632C5DE5FF458F
C:\Windows\System32\DRIVERS\lltdio.sys D1C5883087A0C3F1344D9D55A44901F6
C:\Windows\System32\DRIVERS\lnvobus.sys 433A0F74D9BEEE658ABD57A3BAE6BCB5
C:\Windows\System32\DRIVERS\lnvocard.sys AE3ABC964E2507EEF9F9D1E59DFDF731
C:\Windows\System32\DRIVERS\lnvogps.sys ADEC0EA55E370A3136A30F89D265866C
C:\Windows\System32\DRIVERS\lnvomdfl.sys 5EB59877DF9E8F1E20222E1FA4A4A8E0
C:\Windows\System32\DRIVERS\lnvomdfl2.sys 3EEABDEE0B76040A1F6DD8426BD7407E
C:\Windows\System32\DRIVERS\lnvomdm.sys DC58C9DF74DE3911CFB4DD215D504DC0
C:\Windows\System32\DRIVERS\lnvomdm2.sys 0C2553A93A38CE22D9990F5F45A136D9
C:\Windows\System32\DRIVERS\lnvond5.sys 98A8662778AD6ACFC2C7F6FEAB6AA2EA
C:\Windows\System32\DRIVERS\lnvounic.sys 9D8474E04A513685C7AF6CCDBAF1A770
C:\Windows\system32\drivers\lsi_fc.sys C7E15E82879BF3235B559563D4185365
C:\Windows\system32\drivers\lsi_sas.sys EE01EBAE8C9BF0FA072E0FF68718920A
C:\Windows\system32\drivers\lsi_scsi.sys 912A04696E9CA30146A62AFA1463DD5C
C:\Windows\system32\drivers\luafv.sys 8F5C7426567798E62A3B3614965D62CC
C:\Windows\System32\DRIVERS\mdmxsdk.sys 0CEA2D0D3FA284B85ED5B68365114F76
C:\Windows\system32\drivers\megasas.sys 0001CE609D66632FA17B84705F658879
C:\Windows\system32\drivers\megasr.sys C252F32CD9A49DBFC25ECF26EBD51A99
C:\Windows\System32\drivers\modem.sys E13B5EA0F51BA5B1512EC671393D09BA
C:\Windows\System32\DRIVERS\monitor.sys 0A9BB33B56E294F686ABB7C1E4E2D8A8
C:\Windows\System32\DRIVERS\mouclass.sys 5BF6A1326A335C5298477754A506D263
C:\Windows\system32\drivers\mouhid.sys 93B8D4869E12CFBE663915502900876F
C:\Windows\System32\drivers\mountmgr.sys BDAFC88AA6B92F7842416EA6A48E1600
C:\Windows\system32\drivers\mpio.sys 511D011289755DD9F9A7579FB0B064E6
C:\Windows\System32\drivers\mpsdrv.sys 22241FEBA9B2DEFA669C8CB0A8DD7D2E
C:\Windows\system32\drivers\mraid35x.sys ==> MD5 is legit
C:\Windows\system32\drivers\mrxdav.sys 82CEA0395524AACFEB58BA1448E8325C
C:\Windows\System32\DRIVERS\mrxsmb.sys 1E94971C4B446AB2290DEB71D01CF0C2
C:\Windows\System32\DRIVERS\mrxsmb10.sys 4FCCB34D793B116423209C0F8B7A3B03
C:\Windows\System32\DRIVERS\mrxsmb20.sys C3CB1B40AD4A0124D617A1199B0B9D7C
C:\Windows\system32\drivers\msahci.sys 28023E86F17001F7CD9B15A5BC9AE07D
C:\Windows\system32\drivers\msdsm.sys 4468B0F385A86ECDDAF8D3CA662EC0E7
C:\Windows\System32\Drivers\Msfs.sys A9927F4A46B816C92F461ACB90CF8515
C:\Windows\System32\drivers\msisadrv.sys 0F400E306F385C56317357D6DEA56F62
C:\Windows\System32\drivers\MSKSSRV.sys D8C63D34D9C9E56C059E24EC7185CC07
C:\Windows\System32\drivers\MSPCLOCK.sys 1D373C90D62DDB641D50E55B9E78D65E
C:\Windows\System32\drivers\MSPQM.sys B572DA05BF4E098D4BBA3A4734FB505B
C:\Windows\System32\Drivers\MsRPC.sys B49456D70555DE905C311BCDA6EC6ADB
C:\Windows\System32\DRIVERS\mssmbios.sys E384487CB84BE41D09711C30CA79646C
C:\Windows\System32\drivers\MSTEE.sys 7199C1EEC1E4993CAF96B8C0A26BD58A
C:\Windows\System32\DRIVERS\A0101V32.sys 97AFFA9D95FFE20EEE6229BC6BE166CF
C:\Windows\System32\Drivers\mup.sys 6A57B5733D4CB702C8EA4542E836B96C
C:\Windows\System32\DRIVERS\nwifi.sys 85C44FDFF9CF7E72A40DCB7EC06A4416
C:\Windows\System32\drivers\ndis.sys 1357274D1883F68300AEADD15D7BBB42
C:\Windows\System32\DRIVERS\ndistapi.sys 0E186E90404980569FB449BA7519AE61
C:\Windows\System32\DRIVERS\ndisuio.sys D6973AA34C4D5D76C0430B181C3CD389
C:\Windows\System32\DRIVERS\ndiswan.sys 818F648618AE34F729FDB47EC68345C3
C:\Windows\System32\Drivers\NDProxy.sys 71DAB552B41936358F3B541AE5997FB3
C:\Windows\System32\DRIVERS\netbios.sys BCD093A5A6777CF626434568DC7DBA78
C:\Windows\System32\DRIVERS\netbt.sys ECD64230A59CBD93C85F1CD1CAB9F3F6
C:\Windows\System32\DRIVERS\NETw5v32.sys BA420E8EBFCAD35581FE8E4C64F71469
C:\Windows\System32\DRIVERS\NETwNv32.sys 383712AEC962B72BF6D368A4A64CFE09
C:\Windows\system32\drivers\nfrd960.sys ==> MD5 is legit
C:\Windows\System32\drivers\ccdcmb.sys C82F4CC10AD315B6D6BCB14D0A7CAD66
C:\Windows\System32\drivers\ccdcmbo.sys 60EF5F5621D7832F00A3F190A0C905E2
C:\Windows\System32\Drivers\Npfs.sys D36F239D7CCE1931598E8FB90A0DBC26
C:\Windows\System32\drivers\nsiproxy.sys 609773E344A97410CE4EBF74A8914FCF
C:\Windows\System32\Drivers\Ntfs.sys 2C1121F2B87E9A6B12485DF53CD848C7
C:\Windows\system32\drivers\ntrigdigi.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Null.sys C5DBBCDA07D780BDA9B685DF333BB41E
C:\Windows\system32\drivers\nvraid.sys 2EDF9E7751554B42CBB60116DE727101
C:\Windows\system32\drivers\nvstor.sys ABED0C09758D1D97DB0042DBB2688177
C:\Windows\system32\drivers\nv_agp.sys 18BBDF913916B71BD54575BDB6EEAC0B
C:\Windows\System32\DRIVERS\ohci1394.sys 6F310E890D46E246E0E261A63D9B36B4
C:\Windows\system32\drivers\parport.sys ==> MD5 is legit
C:\Windows\System32\drivers\partmgr.sys B9C2B89F08670E159F7181891E449CD9
C:\Windows\system32\drivers\parvdm.sys ==> MD5 is legit
C:\Windows\System32\drivers\pci.sys 941DC1D19E7E8620F40BBC206981EFDB
C:\Windows\system32\drivers\pciide.sys FC175F5DDAB666D7F4D17449A547626F
C:\Windows\system32\DRIVERS\pcmcia.sys B7C5A8769541900F6DFA6FE0C5E4D513
C:\Windows\System32\drivers\peauth.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\raspptp.sys ECFFFAEC0C1ECD8DBC77F39070EA1DB1
C:\Windows\system32\drivers\processr.sys 2027293619DD0F047C584CF2E7DF4FFD
C:\Windows\System32\DRIVERS\psadd.sys F8A25F1DD8B2C332CBC663E3579566E7
C:\Windows\System32\DRIVERS\pacer.sys 99514FAA8DF93D34B5589187DB3AA0BA
C:\Windows\System32\Drivers\PxHelp20.sys 153D02480A0A2F45785522E814C634B6
C:\Windows\system32\drivers\ql2300.sys 0A6DB55AFB7820C99AA1F3A1D270F4F6
C:\Windows\system32\drivers\ql40xx.sys ==> MD5 is legit
C:\Windows\system32\drivers\qwavedrv.sys 9F5E0E1926014D17486901C88ECA2DB7
C:\Windows\System32\DRIVERS\rasacd.sys 147D7F9C556D259924351FEB0DE606C3
C:\Windows\System32\DRIVERS\rasl2tp.sys A214ADBAF4CB47DD2728859EF31F26B0
C:\Windows\System32\DRIVERS\raspppoe.sys 509A98DD18AF4375E1FC40BC175F1DEF
C:\Windows\System32\DRIVERS\rassstp.sys 2005F4A1E05FA09389AC85840F0A9E4D
C:\Windows\System32\DRIVERS\rdbss.sys B14C9D5B9ADD2F84F70570BBBFAA7935
C:\Windows\System32\DRIVERS\RDPCDD.sys 89E59BE9A564262A3FB6C4F4F1CD9899
C:\Windows\System32\DRIVERS\rdpdr.sys 943B18305EAE3935598A9B4A3D560B4C
C:\Windows\System32\drivers\rdpencdd.sys 9D91FE5286F748862ECFFA05F8A0710C
C:\Windows\System32\Drivers\RDPWD.sys C127EBD5AFAB31524662C48DFCEB773A
C:\Windows\System32\DRIVERS\rfcomm.sys 6482707F9F4DA0ECBAB43B2E0398A101
C:\Windows\System32\DRIVERS\rimmptsk.sys A5B12A4B3B774432DB9B9FA221190E59
C:\Windows\System32\DRIVERS\rimsptsk.sys C398BCA91216755B098679A8DA8A2300
C:\Windows\System32\DRIVERS\rixdptsk.sys 2A2554CB24506E0A0508FC395C4A1B42
C:\Windows\System32\DRIVERS\rspndr.sys 9C508F4074A39E8B4B31D27198146FAD
C:\Windows\System32\DRIVERS\Rtlh86.sys 2D19A7469EA19993D0C12E627F4530BC
C:\Windows\system32\drivers\sbp2port.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\sdbus.sys 8F36B54688C31EED4580129040C6A3D3
C:\Windows\System32\Drivers\secdrv.sys ==> MD5 is legit
C:\Windows\system32\drivers\serenum.sys ==> MD5 is legit
C:\Windows\system32\drivers\serial.sys ==> MD5 is legit
C:\Windows\system32\drivers\sermouse.sys 8AF3D28A879BF75DB53A0EE7A4289624
C:\Windows\System32\DRIVERS\sffdisk.sys 3EFA810BDCA87F6ECC24F9832243FE86
C:\Windows\system32\drivers\sffp_mmc.sys E95D451F7EA3E583AEC75F3B3EE42DC5
C:\Windows\System32\DRIVERS\sffp_sd.sys 9F66A46C55D6F1CCABC79BB7AFCCC545
C:\Windows\system32\drivers\sfloppy.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\Apsx86.sys 1310C5E81966E86B2CED7AE8CE3D74F1
C:\Windows\system32\drivers\sisagp.sys 1D76624A09A054F682D746B924E2DBC3
C:\Windows\system32\drivers\sisraid2.sys 43CB7AA756C7DB280D01DA9B676CFDE2
C:\Windows\system32\drivers\sisraid4.sys A99C6C8B0BAA970D8AA59DDC50B57F94
C:\Windows\System32\DRIVERS\smb.sys 7B75299A4D201D6A6533603D6914AB04
C:\Program Files\Common Files\ThinkVantage Fingerprint Software\Drivers\smihlp.sys FCC8EDD602B50247C3E75BD23D4FACE6
C:\Windows\System32\DRIVERS\lnvoscard.sys DEAF30A1A325168BF823ECDA2FB89F6E
C:\Windows\System32\Drivers\spldr.sys 7AEBDEEF071FE28B0EEF2CDD69102BFF
C:\Windows\System32\DRIVERS\srv.sys 41987F9FC0E61ADF54F581E15029AD91
C:\Windows\System32\DRIVERS\srv2.sys FF33AFF99564B1AA534F58868CBE41EF
C:\Windows\System32\DRIVERS\srvnet.sys 7605C0E1D01A08F3ECD743F38B834A44
C:\Windows\System32\DRIVERS\swenum.sys 7BA58ECF0C0A9A69D44B3DCA62BECF56
C:\Windows\system32\drivers\symc8xx.sys ==> MD5 is legit
C:\Windows\system32\drivers\sym_hi.sys ==> MD5 is legit
C:\Windows\system32\drivers\sym_u3.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\SynTP.sys F92350E343B056A83093BC0D8F750F05
C:\Windows\System32\drivers\tcpip.sys 548E198BAE21EFC21F8B5F0C1728AD27
C:\Windows\System32\DRIVERS\tcpip.sys 548E198BAE21EFC21F8B5F0C1728AD27
C:\Windows\System32\Drivers\tcpipBM.sys DCFEB82CA988598CEB8F83148616038E
C:\Windows\System32\drivers\tcpipreg.sys 608C345A255D82A6289C2D468EB41FD7
C:\Windows\System32\Drivers\tcusb.sys 72B9E77565DA5FA564581976E000D29B
C:\Windows\System32\drivers\tdpipe.sys 5DCF5E267BE67A1AE926F2DF77FBCC56
C:\Windows\System32\drivers\tdtcp.sys 389C63E32B3CEFED425B61ED92D3F021
C:\Windows\System32\DRIVERS\tdx.sys 76B06EB8A01FC8624D699E7045303E54
C:\Windows\System32\DRIVERS\termdd.sys 3CAD38910468EAB9A6479E2F01DB43C7
C:\Windows\System32\DRIVERS\ApsHM86.sys D7A29E343632E2FC5F7EBFC886F12675
C:\Windows\System32\drivers\tpm.sys CB258C2F726F1BE73C507022BE33EBB3
C:\Windows\System32\drivers\Tppwr32v.sys 1BD5719EF160E0AB739CD0FF3BA5E298
C:\Windows\System32\DRIVERS\tssecsrv.sys DCF0F056A2E4F52287264F5AB29CF206
C:\Windows\System32\DRIVERS\tunmp.sys CAECC0120AC49E3D2F758B9169872D38
C:\Windows\System32\DRIVERS\tunnel.sys 300DB877AC094FEAB0BE7688C3454A9C
C:\Windows\System32\DRIVERS\tvtfilter.sys 49258A02A1E8D304ED88B0F1C56B1738
C:\Windows\System32\DRIVERS\tvtumon.sys 2D1EC233C89416BA8187C9D7D49A075A
C:\Windows\system32\drivers\uagp35.sys 7D33C4DB2CE363C8518D2DFCF533941F
C:\Windows\System32\DRIVERS\udfs.sys D9728AF68C4C7693CB100B8441CBDEC6
C:\Windows\system32\drivers\uliagpkx.sys B0ACFDC9E4AF279E9116C03E014B2B27
C:\Windows\system32\drivers\uliahci.sys 9224BB254F591DE4CA8D572A5F0D635C
C:\Windows\system32\drivers\ulsata.sys ==> MD5 is legit
C:\Windows\system32\drivers\ulsata2.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\umbus.sys 32CFF9F809AE9AED85464492BF3E32D2
C:\Windows\System32\DRIVERS\usbser_lowerflt.sys 78B74AF8727A28C128E164E9B53A5413
C:\Windows\System32\DRIVERS\usbccgp.sys CAF811AE4C147FFCD5B51750C7F09142
C:\Windows\system32\drivers\usbcir.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\usbehci.sys 79E96C23A97CE7B8F14D310DA2DB0C9B
C:\Windows\System32\DRIVERS\usbhub.sys 4673BBCB006AF60E7ABDDBE7A130BA42
C:\Windows\system32\drivers\usbohci.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\usbprint.sys E75C4B5269091D15A2E7DC0B6D35F2F5
C:\Windows\System32\drivers\usbser.sys D575246188F63DE0ACCF6EAC5FB59E6A
C:\Windows\System32\DRIVERS\usbser_lowerfltj.sys E748D50B3B2EC7F40A2BA67FB094CF01
C:\Windows\System32\DRIVERS\USBSTOR.SYS BE3DA31C191BC222D9AD503C5224F2AD
C:\Windows\System32\DRIVERS\usbuhci.sys 814D653EFC4D48BE3B04A307ECEFF56F
C:\Windows\System32\Drivers\usbvideo.sys E67998E8F14CB0627A769F6530BCB352
C:\Windows\System32\DRIVERS\vgapnp.sys 87B06E1F30B749A114F74622D013F8D4
C:\Windows\System32\drivers\vga.sys 2E93AC0A1D8C79D019DB6C51F036636C
C:\Windows\system32\drivers\viaagp.sys 5D7159DEF58A800D5781BA3A879627BC
C:\Windows\system32\drivers\viac7.sys C4F3A691B5BAD343E6249BD8C2D45DEE
C:\Windows\system32\drivers\viaide.sys AADF5587A4063F52C2C3FED7887426FC
C:\Windows\System32\drivers\volmgr.sys 69503668AC66C77C6CD7AF86FBDF8C43
C:\Windows\System32\drivers\volmgrx.sys 23E41B834759917BFD6B9A0D625D0C28
C:\Windows\System32\drivers\volsnap.sys 147281C01FCB1DF9252DE2A10D5E7093
C:\Windows\system32\drivers\vsmraid.sys 587253E09325E6BF226B299774B728A9
C:\Windows\system32\drivers\wacompen.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\wanarp.sys 55201897378CCA7AF8B5EFD874374A26
C:\Windows\System32\DRIVERS\wanarp.sys 55201897378CCA7AF8B5EFD874374A26
C:\Windows\system32\drivers\wd.sys 78FE9542363F297B18C027B2D7E7C07F
C:\Windows\System32\drivers\Wdf01000.sys A840213F1ACDCC175B4D1D5AAEAC0D7A
C:\Windows\System32\DRIVERS\wimfltr.sys F9AD3A5E3FD7E0BDB18B8202B0FDD4E4
C:\Windows\System32\DRIVERS\HSX_CNXT.sys BB9CBAF6AC20452B245C324F1F50EE81
C:\Windows\System32\DRIVERS\wmiacpi.sys 2E7255D172DF0B8283CDFB7B433B864E
C:\Windows\System32\DRIVERS\wpdusb.sys DE9D36F91A4DF3D911626643DEBF11EA
C:\Windows\system32\drivers\ws2ifsl.sys E3A3CB253C0EC2494D4A61F5E43A389C
C:\Windows\System32\drivers\WudfPf.sys 06E6F32C8D0A3F66D956F57B43A2E070
C:\Windows\System32\DRIVERS\WUDFRd.sys 867C301E8B790040AE9CF6486E8041DF
C:\Windows\System32\DRIVERS\xaudio.sys DAB33CFA9DD24251AAA389FF36B64D4B

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-19 08:15 - 2013-07-19 08:15 - 00000000 ____D C:\FRST

==================== One Month Modified Files and Folders =======

2013-07-19 08:15 - 2013-07-19 08:15 - 00000000 ____D C:\FRST
2013-07-18 22:03 - 2008-11-20 01:17 - 02411200 _____ C:\Windows\System32\TPAPSLOG.LOG
2013-07-18 22:00 - 2013-06-11 06:31 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-07-18 22:00 - 2006-11-02 04:47 - 00003616 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-18 22:00 - 2006-11-02 04:47 - 00003616 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-18 16:33 - 2009-02-02 09:47 - 00000000 ____D C:\users\Nela
2013-07-18 16:33 - 2006-11-02 02:22 - 58982400 _____ C:\Windows\System32\config\software_previous
2013-07-18 16:32 - 2012-08-20 11:36 - 00000000 ____D C:\Users\Nela\AppData\Roaming\ScreeNet iSaver
2013-07-18 16:32 - 2010-06-29 21:11 - 00000000 ____D C:\Users\Nela\AppData\Roaming\T-Mobile Internet Manager
2013-07-18 16:32 - 2009-02-02 05:56 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-07-18 16:32 - 2008-11-20 09:36 - 00000000 ____D C:\SWShare
2013-07-18 16:32 - 2008-11-20 01:47 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-07-18 16:32 - 2008-11-20 01:26 - 00000000 ____D C:\ProgramData\Lenovo
2013-07-18 16:32 - 2006-11-02 04:37 - 00000000 ____D C:\Windows\System32\XPSViewer
2013-07-18 16:32 - 2006-11-02 04:37 - 00000000 ____D C:\Windows\ShellNew
2013-07-18 16:32 - 2006-11-02 04:37 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-18 16:32 - 2006-11-02 03:18 - 00000000 __RSD C:\Windows\Media
2013-07-18 16:32 - 2006-11-02 03:18 - 00000000 ____D C:\Windows\System32\spool
2013-07-18 16:32 - 2006-11-02 03:18 - 00000000 ____D C:\Windows\System32\Msdtc
2013-07-18 16:32 - 2006-11-02 03:18 - 00000000 ____D C:\Windows\registration
2013-07-18 16:25 - 2006-11-02 02:22 - 93847552 _____ C:\Windows\System32\config\system_previous
2013-07-18 16:23 - 2006-11-02 02:22 - 00262144 _____ C:\Windows\System32\config\security_previous
2013-07-18 16:23 - 2006-11-02 02:22 - 00262144 _____ C:\Windows\System32\config\sam_previous
2013-07-18 04:26 - 2009-10-01 23:45 - 01466803 _____ C:\Windows\WindowsUpdate.log
2013-07-10 22:52 - 2006-11-02 02:22 - 42467328 _____ C:\Windows\System32\config\components_previous
2013-07-10 22:51 - 2006-11-02 02:22 - 00262144 _____ C:\Windows\System32\config\default_previous
2013-07-10 18:35 - 2006-11-02 03:18 - 00000000 ____D C:\Windows\Microsoft.NET
2013-07-05 15:21 - 2008-11-20 01:06 - 00001076 _____ C:\Windows\bthservsdp.dat
2013-06-27 23:30 - 2009-02-14 09:21 - 00000000 _____ C:\Users\Public\Documents\AcSvc.dmp

Files to move or delete:
====================
C:\ProgramData\ntuser.dat

==================== Known DLLs (Whitelisted) ============


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points  =========================

Restore point made on: 2013-06-27 02:25:25
Restore point made on: 2013-06-27 23:29:45
Restore point made on: 2013-06-27 23:52:41
Restore point made on: 2013-06-28 23:40:47
Restore point made on: 2013-07-03 11:00:53
Restore point made on: 2013-07-04 01:54:24
Restore point made on: 2013-07-04 20:53:29
Restore point made on: 2013-07-06 01:13:22
Restore point made on: 2013-07-06 14:00:25
Restore point made on: 2013-07-08 00:21:46
Restore point made on: 2013-07-09 02:40:44
Restore point made on: 2013-07-10 05:26:14
Restore point made on: 2013-07-10 14:29:24

==================== BCD ================================


Windows-Start-Manager
---------------------
Bezeichner              {bootmgr}
device                  partition=Y:
description             Windows Boot Manager
locale                  de-DE
inherit                 {globalsettings}
extendedinput           Yes
default                 {default}
resumeobject            {3657ebe2-d4e6-11dc-88f0-ec9c0d1f1864}
displayorder            {default}
toolsdisplayorder       {memdiag}
timeout                 1
resume                  No
customactions           0x10000ba000001
                        0x54000001
custom:54000001         {572bcd55-ffa7-11d9-aae0-0007e994107d}

Windows-Startladeprogramm
-------------------------
Bezeichner              {default}
device                  partition=C:
path                    \Windows\system32\winload.exe
description             Microsoft Windows Vista
locale                  de-DE
inherit                 {bootloadersettings}
recoverysequence        {current}
recoveryenabled         Yes
testsigning             No
osdevice                partition=C:
systemroot              \Windows
resumeobject            {3657ebe2-d4e6-11dc-88f0-ec9c0d1f1864}
nx                      OptIn

Windows-Startladeprogramm
-------------------------
Bezeichner              {572bcd55-ffa7-11d9-aae0-0007e994107d}
device                  ramdisk=[boot]\tvtos\winpe.wim,{ramdiskoptions}
path                    \windows\system32\boot\winload.exe
description             WinPE
osdevice                ramdisk=[boot]\tvtos\winpe.wim,{ramdiskoptions}
systemroot              \windows
nx                      OptIn
bootstatuspolicy        IgnoreShutdownFailures
detecthal               Yes
winpe                   Yes

Windows-Startladeprogramm
-------------------------
Bezeichner              {current}
device                  ramdisk=[Y:]\winre.wim,{ramdiskoptions}
path                    \windows\system32\boot\winload.exe
description             Windows Recovery Environment
osdevice                ramdisk=[Y:]\winre.wim,{ramdiskoptions}
systemroot              \windows
nx                      OptIn
bootstatuspolicy        IgnoreShutdownFailures
detecthal               Yes
winpe                   Yes

Wiederaufnahme aus dem Ruhezustand
----------------------------------
Bezeichner              {3657ebe2-d4e6-11dc-88f0-ec9c0d1f1864}
device                  partition=C:
path                    \Windows\system32\winresume.exe
description             Windows Resume Application
locale                  de-DE
inherit                 {resumeloadersettings}
filedevice              partition=C:
filepath                \hiberfil.sys
pae                     Yes
debugoptionenabled      No

Windows-Speichertestprogramm
----------------------------
Bezeichner              {memdiag}
device                  partition=Y:
path                    \boot\memtest.exe
description             Windows-Speicherdiagnose
locale                  de-DE
inherit                 {globalsettings}
badmemoryaccess         Yes

Windows-Legacybetriebssystem-Ladeprogramm
-----------------------------------------
Bezeichner              {ntldr}
device                  partition=Y:
path                    \ntldr
description             Frhere Windows-Version

EMS-Einstellungen
-----------------
Bezeichner              {emssettings}
bootems                 Yes

Debuggereinstellungen
---------------------
Bezeichner              {dbgsettings}
debugtype               Serial
debugport               1
baudrate                115200

RAM-Defekte
-----------
Bezeichner              {badmemory}

Globale Einstellungen
---------------------
Bezeichner              {globalsettings}
inherit                 {dbgsettings}
                        {emssettings}
                        {badmemory}

Startladeprogramm-Einstellungen
-------------------------------
Bezeichner              {bootloadersettings}
inherit                 {globalsettings}
bootstatuspolicy        IgnoreShutdownFailures

Einstellungen zur Ladeprogrammfortsetzung
-----------------------------------------
Bezeichner              {resumeloadersettings}
inherit                 {globalsettings}

Optionen zum RAM-Datentr„gersetup
---------------------------------
Bezeichner              {ramdiskoptions}
description             Ramdisk options
ramdisksdidevice        partition=Y:
ramdisksdipath          \boot\boot.sdi


==================== Memory info =========================== 

Percentage of memory in use: 26%
Total physical RAM: 2012.54 MB
Available physical RAM: 1482.64 MB
Total Pagefile: 1801.59 MB
Available Pagefile: 1609.29 MB
Total Virtual: 2047.88 MB
Available Virtual: 1952.21 MB

==================== Drives ================================

Drive c: (SW_Preload) (Fixed) (Total:137.82 GB) (Free:41.28 GB) NTFS
Drive d: (SW_Preload) (Fixed) (Total:137.82 GB) (Free:41.28 GB) NTFS
Drive e: (Lenovo) (Fixed) (Total:9.77 GB) (Free:3.53 GB) NTFS
Drive g: () (Removable) (Total:7.46 GB) (Free:7.46 GB) FAT32
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
Drive y: (SERVICEV003) (Fixed) (Total:1.46 GB) (Free:0.28 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 149 GB) (Disk ID: 91B7680D)
Partition 1: (Active) - (Size=1 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=138 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=10 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 7 GB) (Disk ID: 00000000)
Partition 1: (Not Active) - (Size=7 GB) - (Type=0B)


LastRegBack: 2013-07-10 22:56

==================== End Of Log ============================

schrauber · 19.07.2013, 08:39

Hi,

nix zu sehen. Kannst Du abgesichert booten?

christopherm · 19.07.2013, 11:34

im abgesicherten Modus, gleicher Fehler... Systemwiederherstellung schlägt auch fehl!

schrauber · 19.07.2013, 12:19

Was hast Du alles als Auswahl wenn Du F8 drückst?

christopherm · 19.07.2013, 12:37

habe jetzt recovery gemacht, trotzdem danke

schrauber · 19.07.2013, 14:01

ok.

19.07.2013, 08:39	#2
schrauber /// the machine /// TB-Ausbilder	Virus! Nur schwarzer Bildschirm mit Maus! Windows Vista Hi, nix zu sehen. Kannst Du abgesichert booten? __________________ __________________

19.07.2013, 12:19	#4
schrauber /// the machine /// TB-Ausbilder	Virus! Nur schwarzer Bildschirm mit Maus! Windows Vista Was hast Du alles als Auswahl wenn Du F8 drückst? __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

19.07.2013, 14:01	#6
schrauber /// the machine /// TB-Ausbilder	Virus! Nur schwarzer Bildschirm mit Maus! Windows Vista ok. __________________ --> Virus! Nur schwarzer Bildschirm mit Maus! Windows Vista

Virus! Nur schwarzer Bildschirm mit Maus! Windows Vista

Log-Analyse und Auswertung: Virus! Nur schwarzer Bildschirm mit Maus! Windows Vista

Virus! Nur schwarzer Bildschirm mit Maus! Windows Vista

Virus! Nur schwarzer Bildschirm mit Maus! Windows Vista

Virus! Nur schwarzer Bildschirm mit Maus! Windows Vista

Virus! Nur schwarzer Bildschirm mit Maus! Windows Vista

Virus! Nur schwarzer Bildschirm mit Maus! Windows Vista

Virus! Nur schwarzer Bildschirm mit Maus! Windows Vista

Ähnliche Themen: Virus! Nur schwarzer Bildschirm mit Maus! Windows Vista

19.07.2013, 11:34	#3
christopherm	Virus! Nur schwarzer Bildschirm mit Maus! Windows Vista im abgesicherten Modus, gleicher Fehler... Systemwiederherstellung schlägt auch fehl! __________________

19.07.2013, 12:37	#5
christopherm	Virus! Nur schwarzer Bildschirm mit Maus! Windows Vista habe jetzt recovery gemacht, trotzdem danke