Weißer Bildschirm nach Laptopstart - weitere Vorgehensweise

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 08-08-2013 02
Ran by SYSTEM on 09-08-2013 11:08:43
Running from G:\
Windows 7 Professional (X86) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Recovery

The current controlset is ControlSet003
ATTENTION!:=====> FRST is updated to run from normal or Safe mode to produce a full FRST.txt log and Addition.txt log.

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [TOSDCR] - C:\Program Files\TOSHIBA\PasswordUtility\TOSDCR.exe [169296 2007-08-28] ()
HKLM\...\Run: [TPwrMain] - C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [476512 2009-08-21] (TOSHIBA Corporation)
HKLM\...\Run: [SmoothView] - C:\Program Files\Toshiba\SmoothView\SmoothView.exe [521528 2009-08-13] (TOSHIBA Corporation)
HKLM\...\Run: [00TCrdMain] - C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [738616 2009-08-05] (TOSHIBA Corporation)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [7625248 2009-07-28] (Realtek Semiconductor)
HKLM\...\Run: [Apoint] - C:\Program Files\Apoint2K\Apoint.exe [184320 2009-03-29] (Alps Electric Co., Ltd.)
HKLM\...\Run: [TNRotate] - C:\Program Files\TOSHIBA\TNRotate\TNRotate.exe [607616 2008-06-12] (TOSHIBA Corporation)
HKLM\...\Run: [TWebCamera] - C:\Program Files\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe [2446648 2009-08-11] (TOSHIBA CORPORATION.)
HKLM\...\Run: [SmartFaceVWatcher] - C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatcher.exe [163840 2009-07-29] (TOSHIBA Corporation)
HKLM\...\Run: [Teco] - C:\Program Files\TOSHIBA\TECO\Teco.exe [1324384 2009-08-26] (TOSHIBA Corporation)
HKLM\...\Run: [TosSENotify] - C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe [611672 2009-08-03] (TOSHIBA Corporation)
HKLM\...\Run: [ThpSrv] - C:\windows\system32\thpsrv /logon [x]
HKLM\...\Run: [ToshibaServiceStation] - C:\Program Files\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe [1294136 2009-08-17] (TOSHIBA Corporation)
HKLM\...\Run: [TosWaitSrv] - C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [611672 2009-08-06] (TOSHIBA Corporation)
HKLM\...\Run: [TosReelTimeMonitor] - C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe [29528 2009-08-06] (TOSHIBA Corporation)
HKLM\...\Run: [TosNC] - C:\Program Files\Toshiba\BulletinBoard\TosNcCore.exe [466792 2009-08-06] (TOSHIBA Corporation)
HKLM\...\Run: [TosVolRegulator] - C:\Windows\TosVolRegulator.exe [46904 2009-09-04] (TOSHIBA Corporation)
HKLM\...\Run: [Toshiba TEMPRO] - C:\Program Files\Toshiba TEMPRO\TemproTray.exe [1050000 2009-08-26] (Toshiba Europe GmbH)
HKLM\...\Run: [Toshiba Registration] - C:\Program Files\Toshiba\Registration\ToshibaReminder.exe [134032 2009-08-25] (Toshiba Europe GmbH)
HKLM\...\Run: [lxdrmon.exe] - C:\Program Files\Lexmark 4900 Series\lxdrmon.exe [676520 2008-09-10] ()
HKLM\...\Run: [lxdramon] - C:\Program Files\Lexmark 4900 Series\lxdramon.exe [16040 2008-09-10] ()
HKLM\...\Run: [FaxCenterServer] - C:\Program Files\Lexmark Fax Solutions\fm3032.exe [320168 2008-09-10] ()
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [417792 2009-11-10] (Apple Inc.)
HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [141600 2009-11-12] (Apple Inc.)
HKLM\...\Run: [AppleSyncNotifier] - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe [177440 2009-08-13] (Apple Inc.)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [946352 2012-12-03] (Adobe Systems Incorporated)
HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [947152 2013-01-27] (Microsoft Corporation)
HKLM\...\Run: [DATAMNGR] - C:\PROGRA~1\SEARCH~1\Datamngr\DATAMN~1.EXE [1825720 2012-07-08] (Bandoo Media, inc)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)
HKLM\...\Run: [] -  [x]
HKLM\...\Run: [ApnUpdater] - C:\Program Files\Ask.com\Updater\Updater.exe [1573576 2012-10-17] (Ask)
HKU\Default\...\Run: [TOSHIBA Online Product Information] - C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe [ 2009-08-12] (TOSHIBA)
HKU\Default User\...\Run: [TOSHIBA Online Product Information] - C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe [ 2009-08-12] (TOSHIBA)
HKU\Katrin\...\Run: [msnmsgr] - C:\Program Files\Windows Live\Messenger\msnmsgr.exe [ 2009-07-26] (Microsoft Corporation)
HKU\Katrin\...\Run: [Facebook Update] - C:\Users\Katrin\AppData\Local\Facebook\Update\FacebookUpdate.exe [ 2012-07-14] (Facebook Inc.)
HKU\Katrin\...\Run: [ooVoo.exe] - C:\Program Files\ooVoo\oovoo.exe [ 2012-10-04] (ooVoo LLC)
HKU\Katrin\...\Run: [swg] - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [ 2011-10-08] (Google Inc.)
HKU\Katrin\...\Run: [Nyvuedux] - C:\Users\Katrin\AppData\Roaming\Ydynup\xiudw.exe [x]
HKU\Katrin\...\Winlogon: [Shell] explorer.exe,C:\Users\Katrin\AppData\Roaming\cache.dat [ 2011-11-17] () <==== ATTENTION 
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files\Toshiba\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files\Toshiba\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\Katrin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)

========================== Services (Whitelisted) =================

S2 Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [144712 2009-06-05] (Apple Inc.)
S2 cfWiMAXService; C:\Program Files\TOSHIBA\ConfigFree\CFIWmxSvcs.exe [185712 2009-08-10] (TOSHIBA CORPORATION)
S2 ConfigFree Service; C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe [46448 2009-03-10] (TOSHIBA CORPORATION)
S2 lxdrCATSCustConnectService; C:\windows\system32\spool\DRIVERS\W32X86\3\\lxdrserv.exe [98984 2008-05-16] (Lexmark International, Inc.)
S2 lxdr_device; C:\windows\system32\lxdrcoms.exe [594600 2008-05-16] ( )
S2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [20456 2013-01-27] (Microsoft Corporation)
S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [295232 2013-01-27] (Microsoft Corporation)
S2 TemproMonitoringService; C:\Program Files\Toshiba TEMPRO\TemproSvc.exe [116104 2009-08-26] (Toshiba Europe GmbH)
S3 TMachInfo; C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe [51512 2009-08-17] (TOSHIBA Corporation)
S2 TOSHIBA eco Utility Service; C:\Program Files\TOSHIBA\TECO\TecoService.exe [185712 2009-08-27] (TOSHIBA Corporation)
S3 TOSHIBA HDD SSD Alert Service; C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe [111960 2009-08-03] (TOSHIBA Corporation)
S3 TPCHSrv; C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe [685424 2009-08-06] (TOSHIBA Corporation)
S2 WTGService; C:\Program Files\3DataManager\WTGService.exe [333264 2010-07-08] ()

==================== Drivers (Whitelisted) ====================

S0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [195296 2013-01-20] (Microsoft Corporation)
S3 PGEffect; C:\Windows\System32\DRIVERS\pgeffect.sys [24064 2009-06-22] (TOSHIBA Corporation)
S2 TVALZFL; C:\Windows\System32\DRIVERS\TVALZFL.sys [12920 2009-06-19] (TOSHIBA Corporation)
S1 nimfptvz; \??\C:\windows\system32\drivers\nimfptvz.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-31 12:58 - 2013-08-09 10:00 - 00000004 _____ C:\Users\Katrin\AppData\Roaming\cache.ini
2013-07-31 10:10 - 2013-07-31 10:10 - 00002749 _____ C:\Users\Katrin\Downloads\benutzerdaten.fdf
2013-07-29 20:01 - 2013-07-29 20:01 - 00040170 _____ C:\ProgramData\SPL9FF.tmp
2013-07-29 10:55 - 2013-07-29 10:55 - 00000000 ____D C:\Windows\System32\MRT
2013-07-27 08:57 - 2013-07-31 10:12 - 00000000 ____D C:\Users\Katrin\Desktop\Monika
2013-07-12 20:35 - 2013-07-12 20:35 - 273988988 _____ C:\Windows\MEMORY.DMP
2013-07-12 20:35 - 2013-07-12 20:35 - 00236432 _____ C:\Windows\Minidump\071213-31605-01.dmp
2013-07-12 20:35 - 2013-07-12 20:35 - 00000000 ____D C:\Windows\Minidump
2013-07-12 15:37 - 2013-06-12 00:43 - 14329856 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-07-12 15:37 - 2013-06-12 00:43 - 02877440 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-07-12 15:37 - 2013-06-12 00:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-07-12 15:37 - 2013-06-12 00:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-07-12 15:37 - 2013-06-12 00:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-07-12 15:37 - 2013-06-12 00:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-07-12 15:37 - 2013-06-12 00:43 - 00042496 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-07-12 15:37 - 2013-06-12 00:43 - 00039424 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-07-12 15:37 - 2013-06-12 00:42 - 13760512 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-07-12 15:37 - 2013-06-12 00:42 - 02046976 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-07-12 15:37 - 2013-06-12 00:42 - 00391168 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-07-12 15:37 - 2013-06-12 00:42 - 00109056 _____ (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-07-12 15:37 - 2013-06-12 00:42 - 00061440 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-07-12 15:37 - 2013-06-12 00:42 - 00033280 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-07-12 15:37 - 2013-06-11 23:51 - 00071680 _____ (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-07-12 15:37 - 2013-06-07 03:37 - 02706432 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-07-10 22:16 - 2013-06-05 04:05 - 02347520 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys
2013-07-10 22:16 - 2013-06-04 05:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\System32\qedit.dll
2013-07-10 22:16 - 2013-05-06 05:56 - 01620480 _____ (Microsoft Corporation) C:\Windows\System32\WMVDECOD.DLL
2013-07-10 22:16 - 2013-04-10 00:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\System32\DWrite.dll

==================== One Month Modified Files and Folders =======

2013-08-09 11:07 - 2013-08-09 11:07 - 00000000 ____D C:\FRST
2013-08-09 10:00 - 2013-07-31 12:58 - 00000004 _____ C:\Users\Katrin\AppData\Roaming\cache.ini
2013-08-09 10:00 - 2010-07-10 16:12 - 00000000 ____D C:\Users\Katrin\Tracing
2013-08-09 10:00 - 2009-10-21 23:16 - 01763654 _____ C:\Windows\WindowsUpdate.log
2013-08-09 10:00 - 2009-07-14 05:39 - 00158867 _____ C:\Windows\setupact.log
2013-08-09 09:52 - 2009-07-14 05:34 - 00017504 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-09 09:52 - 2009-07-14 05:34 - 00017504 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-04 14:22 - 2009-07-14 05:34 - 00021504 _____ C:\Windows\System32\umstartup.etl
2013-07-31 13:07 - 2011-07-05 14:53 - 00000000 ____D C:\Users\Katrin\AppData\Roaming\3DataManager
2013-07-31 10:12 - 2013-07-27 08:57 - 00000000 ____D C:\Users\Katrin\Desktop\Monika
2013-07-31 10:10 - 2013-07-31 10:10 - 00002749 _____ C:\Users\Katrin\Downloads\benutzerdaten.fdf
2013-07-29 20:09 - 2009-12-29 11:33 - 00000000 ____D C:\ProgramData\Lx_cats
2013-07-29 20:01 - 2013-07-29 20:01 - 00040170 _____ C:\ProgramData\SPL9FF.tmp
2013-07-29 10:58 - 2013-07-29 10:55 - 00000000 ____D C:\Windows\System32\MRT
2013-07-28 14:39 - 2013-04-07 14:23 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-07-27 08:58 - 2009-12-28 17:53 - 00000000 ___RD C:\Users\Katrin\Desktop\Katrin Schule
2013-07-13 10:20 - 2011-10-10 13:50 - 00002140 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-07-12 21:19 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Microsoft.NET
2013-07-12 20:35 - 2013-07-12 20:35 - 273988988 _____ C:\Windows\MEMORY.DMP
2013-07-12 20:35 - 2013-07-12 20:35 - 00236432 _____ C:\Windows\Minidump\071213-31605-01.dmp
2013-07-12 20:35 - 2013-07-12 20:35 - 00000000 ____D C:\Windows\Minidump
2013-07-12 20:23 - 2009-07-14 05:33 - 00415016 _____ C:\Windows\System32\FNTCACHE.DAT
2013-07-12 20:21 - 2009-09-16 00:39 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-07-12 15:42 - 2009-07-14 09:57 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-12 15:42 - 2009-07-14 05:52 - 00000000 ____D C:\Program Files\Windows Defender
2013-07-12 15:40 - 2009-09-16 00:35 - 01520734 _____ C:\Windows\System32\PerfStringBackup.INI
2013-07-12 15:37 - 2009-09-16 00:41 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-07-10 15:28 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache

Files to move or delete:
====================
C:\ProgramData\rundll32.exe
C:\ProgramData\vv1d.pad
C:\Users\Katrin\AppData\Roaming\AltShell.dat
C:\Users\Katrin\AppData\Roaming\cache.dat
C:\Users\Katrin\AppData\Roaming\cache.ini

==================== Known DLLs (Whitelisted) ============


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points  =========================

Restore point made on: 2013-05-29 18:40:12
Restore point made on: 2013-06-01 00:31:08
Restore point made on: 2013-06-05 20:13:16
Restore point made on: 2013-06-08 21:15:24
Restore point made on: 2013-06-16 21:09:09
Restore point made on: 2013-06-19 20:11:08
Restore point made on: 2013-06-24 06:34:11
Restore point made on: 2013-06-28 20:55:10
Restore point made on: 2013-07-02 15:24:49
Restore point made on: 2013-07-10 14:19:28
Restore point made on: 2013-07-12 15:20:03
Restore point made on: 2013-07-19 17:30:08
Restore point made on: 2013-07-26 09:53:17
Restore point made on: 2013-07-29 10:54:49
Restore point made on: 2013-08-05 12:40:47

==================== Memory info =========================== 

Percentage of memory in use: 23%
Total physical RAM: 1913.18 MB
Available physical RAM: 1472.61 MB
Total Pagefile: 1913.18 MB
Available Pagefile: 1483.2 MB
Total Virtual: 2047.88 MB
Available Virtual: 1921.06 MB

==================== Drives ================================

Drive c: (TI30371300A) (Fixed) (Total:225.78 GB) (Free:153.51 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (System) (Fixed) (Total:1.46 GB) (Free:1.29 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive e: (Reparaturdatenträger Windows 7 3) (CDROM) (Total:0.14 GB) (Free:0 GB) UDF
Drive f: (3DataManager) (CDROM) (Total:0.01 GB) (Free:0 GB) CDFS
Drive g: () (Removable) (Total:0.97 GB) (Free:0.35 GB) FAT
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 233 GB) (Disk ID: 151623C9)
Partition 1: (Active) - (Size=1 GB) - (Type=27)
Partition 2: (Not Active) - (Size=226 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=6 GB) - (Type=17)

========================================================
Disk: 1 (Size: 996 MB) (Disk ID: 00000000)
Partition 1: (Active) - (Size=996 MB) - (Type=06)


LastRegBack: 2013-08-05 12:33

==================== End Of Log ============================