Beim starten schwarzer Bildschirm und bewegbarer Mauszeiger (Windows 7)

schneefuchs · 30.10.2013, 17:59

Ahoi liebes Trojaner-Board Team!
Schon seit einigen Tagen hatte mein PC immer mal wieder seine Hänger (neulich bei einem Antivir-Scan 27 verdächtige Files unschädlich gemacht) und gestern Abend ist er schließlich abgestürzt und hat eine Fehlerbehebung gestartet. Dann hat er über mehrere Stunden hinweg versucht sich selbst zu "reparieren" bis er schließlich neu gestartet ist.
Nur tritt jetzt das Problem auf, dass nach dem Windowslogo, da wo eigentlich die Profilauswahl ist, der Bildschirm schwarz ist. Die Maus kann ich ganz normal bewegen aber sonst auch nichts (z.B. bei Strg-Alt-Del keine Reaktion). Ich habe schon im Bootmenü versucht einen Systemwiederherstellungspunkt zu laden aber es werden keine gefunden. (Bin mir auch nicht sicher wie da meine Einstellungen waren)
Ich bin am verzweifeln, sind doch alle meine wichtigen Daten auf der Festplatte.

Ich habe über die Konsole im Reperaturmenü einen Scan mit FRST gemacht, falls das weiterhilft:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 30-10-2013
Ran by SYSTEM on MININT-E9CRILA on 30-10-2013 16:50:37
Running from F:\
Windows 7 Home Premium (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Recovery

The current controlset is ControlSet002
ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log.

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [IAAnotif] - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe [186904 2009-06-04] (Intel Corporation)
HKLM\...\Run: [Kernel and Hardware Abstraction Layer] - C:\Windows\KHALMNPR.Exe [130576 2009-06-17] (Logitech, Inc.)
HKLM\...\Run: [XboxStat] - C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe [825184 2009-10-01] (Microsoft Corporation)
HKLM\...\Run: [Eraser] - C:\Program Files\Eraser\Eraser.exe [980368 2011-11-05] (The Eraser Project)
HKLM-x32\...\Runonce: [SpUninstallCleanUp] - REG delete HKEY_LOCAL_MACHINE\Software\SearchProtect /f [x]
Winlogon\Notify\LBTWlgn: C:\Program Files\Common Files\Logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
HKLM-x32\...\Run: [HDAudDeck] - C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2472048 2010-08-11] (VIA)
HKLM-x32\...\Run: [LWS] - C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [205336 2011-08-12] (Logitech Inc.)
HKLM-x32\...\Run: [ZoneAlarm Client] - C:\Program Files (x86)\Zone Labs\ZoneAlarm\zlclient.exe [1043968 2010-06-28] (Check Point Software Technologies LTD)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-04] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKU\Grimm\...\Run: [RGSC] - C:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent
HKU\Grimm\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [2937528 2011-03-11] ()
HKU\Grimm\...\Run: [Spotify Web Helper] - C:\Users\Grimm\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1140736 2013-10-17] (Spotify Ltd)
HKU\Grimm\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20472992 2013-10-02] (Skype Technologies S.A.)
Startup: C:\Users\Grimm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MagicDisc.lnk
ShortcutTarget: MagicDisc.lnk -> C:\Program Files (x86)\MagicDisc\MagicDisc.exe (MagicISO, Inc.)

==================== Services (Whitelisted) =================

S2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-09-04] (Avira Operations GmbH & Co. KG)
S2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-04] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [815160 2013-09-04] (Avira Operations GmbH & Co. KG)
S3 CGVPNCliSrvc; C:\Program Files\S.A.D\CyberGhost VPN\CGVPNCliService.exe [2438696 2012-04-26] (mobile concepts GmbH)
S2 i2p; C:\Program Files (x86)\i2p\I2Psvc.exe [366872 2011-08-24] (Tanuki Software, Ltd.)
S2 ICQ Service; C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe [247096 2010-09-06] ()
S2 MIDISPORTAudioDevMon; C:\Program Files (x86)\M-Audio\MIDISPORT\AudioDevMon.exe [1636872 2010-10-06] (M-Audio)
S2 nHancer; C:\Program Files\nHancer\nHancerService.exe [39424 2010-05-02] (KSE - Korndörfer Software Engineering)
S2 NitroReaderDriverReadSpool2; C:\Program Files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe [341296 2011-06-21] (Nitro PDF Software)
S3 OpenVPNService; C:\Program Files (x86)\OpenVPN\bin\openvpnserv.exe [14848 2011-07-01] ()
S2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-10-08] ()
S2 vsmon; C:\Windows\SysWOW64\ZoneLabs\vsmon.exe [2435592 2010-06-28] (Check Point Software Technologies LTD)
S2 CltMngSvc; C:\PROGRA~2\SearchProtect\Main\bin\CltMngSvc.exe [x]

==================== Drivers (Whitelisted) ====================

S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2013-02-17] ()
S2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105344 2013-09-04] (Avira Operations GmbH & Co. KG)
S1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132088 2013-09-04] (Avira Operations GmbH & Co. KG)
S1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-07-29] (Avira Operations GmbH & Co. KG)
S2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2013-02-17] ()
S3 MADFUMIDISPORT2010; C:\Windows\System32\DRIVERS\MAudioMIDISPORT_DFU.sys [28680 2010-10-06] (M-Audio)
S3 MAUSBMIDISPORT; C:\Windows\System32\DRIVERS\MAudioMIDISPORT.sys [199176 2010-10-06] (M-Audio)
S3 MSIRCOMM; C:\Windows\System32\DRIVERS\MSIRCOMM.sys [30208 2009-07-14] (Microsoft Corporation)
S3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] ()
S3 STIrUsb; C:\Windows\System32\DRIVERS\irstusb.sys [33792 2008-01-19] (SigmaTel, Inc.)
S1 Vsdatant; C:\Windows\System32\DRIVERS\vsdatant.sys [458840 2010-05-15] (Check Point Software Technologies LTD)
S3 LVPr2M64; system32\DRIVERS\LVPr2M64.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-30 16:50 - 2013-10-30 16:50 - 00000000 ____D C:\FRST
2013-10-29 15:42 - 2013-10-29 15:42 - 103932228 _____ C:\Windows\SysWOW64\쭱퀒�
2013-10-28 21:09 - 2013-10-28 21:32 - 00000223 _____ C:\Users\Grimm\Desktop\Laden
2013-10-27 19:57 - 2013-10-27 19:57 - 00001641 _____ C:\Users\Grimm\Desktop\Risk Factions - Verknüpfung.lnk
2013-10-27 17:41 - 2013-10-27 17:41 - 00000000 ____D C:\Program Files (x86)\Risk
2013-10-27 14:56 - 2013-10-27 14:56 - 00000000 ____D C:\Users\Grimm\Desktop\Sun Eater - Sun Eater
2013-10-27 14:13 - 2013-10-27 14:13 - 00000000 ____D C:\Users\Grimm\Desktop\drown11
2013-10-26 12:13 - 2013-10-26 12:13 - 103108672 _____ C:\Windows\SysWOW64\襍╨�
2013-10-25 16:27 - 2013-10-28 21:34 - 00000000 ____D C:\Users\Grimm\Desktop\Im tiefen Keller
2013-10-23 19:33 - 2013-10-23 20:16 - 00000000 ____D C:\Program Files (x86)\Dear Esther
2013-10-23 01:11 - 2013-10-25 14:42 - 00000000 ____D C:\Users\Grimm\AppData\Roaming\Little Inferno
2013-10-23 01:11 - 2013-10-23 01:11 - 00001083 _____ C:\Users\Grimm\Desktop\Little Inferno.lnk
2013-10-23 01:11 - 2013-10-23 01:11 - 00000000 ____D C:\Program Files (x86)\Little Inferno
2013-10-22 23:03 - 2013-10-22 23:03 - 00000000 ____D C:\Program Files (x86)\Galactic Cafe
2013-10-22 20:19 - 2013-10-22 20:19 - 102329055 _____ C:\Windows\SysWOW64\伎綴�
2013-10-22 09:52 - 2013-10-22 09:52 - 102310053 _____ C:\Windows\SysWOW64\蘱쟵�¡
2013-10-20 02:12 - 2013-10-20 02:12 - 00007184 _____ C:\Users\Grimm\.recently-used.xbel
2013-10-18 14:31 - 2013-10-18 14:31 - 00000091 _____ C:\Users\Grimm\Desktop\radio.mp3.m3u
2013-10-16 13:34 - 2013-10-16 13:34 - 00002177 _____ C:\Users\Public\Desktop\Call of Duty Black Ops II.lnk
2013-10-16 13:34 - 2013-10-16 13:34 - 00002177 _____ C:\ProgramData\Desktop\Call of Duty Black Ops II.lnk
2013-10-14 21:16 - 2013-10-14 21:16 - 00291632 _____ C:\Windows\Minidump\101413-27939-01.dmp
2013-10-14 11:34 - 2013-10-14 11:34 - 100856651 _____ C:\Windows\SysWOW64\뭬�ž
2013-10-10 22:01 - 2013-09-23 00:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-10-10 22:01 - 2013-09-23 00:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-10-10 22:01 - 2013-09-23 00:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-10-10 22:01 - 2013-09-23 00:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-10-10 22:01 - 2013-09-23 00:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-10-10 22:01 - 2013-09-23 00:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-10-10 22:01 - 2013-09-23 00:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-10-10 22:01 - 2013-09-23 00:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-10-10 22:01 - 2013-09-23 00:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-10-10 22:01 - 2013-09-23 00:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-10-10 22:01 - 2013-09-23 00:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-10-10 22:01 - 2013-09-23 00:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-10-10 22:01 - 2013-09-23 00:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-10-10 22:01 - 2013-09-22 23:55 - 02241024 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-10-10 22:01 - 2013-09-22 23:55 - 01365504 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-10-10 22:01 - 2013-09-22 23:55 - 00051712 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-10-10 22:01 - 2013-09-22 23:54 - 19252224 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-10-10 22:01 - 2013-09-22 23:54 - 15404544 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-10-10 22:01 - 2013-09-22 23:54 - 03959296 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-10-10 22:01 - 2013-09-22 23:54 - 02647552 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-10-10 22:01 - 2013-09-22 23:54 - 00855552 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-10-10 22:01 - 2013-09-22 23:54 - 00603136 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-10-10 22:01 - 2013-09-22 23:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-10-10 22:01 - 2013-09-22 23:54 - 00136704 _____ (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-10-10 22:01 - 2013-09-22 23:54 - 00067072 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-10-10 22:01 - 2013-09-22 23:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-10-10 22:01 - 2013-09-22 23:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-10-10 22:01 - 2013-09-21 04:38 - 02706432 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-10-10 22:01 - 2013-09-21 04:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-10-10 22:01 - 2013-09-21 03:48 - 00089600 _____ (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-10-10 22:01 - 2013-09-21 03:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-10-10 21:19 - 2013-09-04 13:12 - 00343040 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbhub.sys
2013-10-10 21:19 - 2013-09-04 13:11 - 00325120 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbport.sys
2013-10-10 21:19 - 2013-09-04 13:11 - 00099840 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbccgp.sys
2013-10-10 21:19 - 2013-09-04 13:11 - 00052736 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbehci.sys
2013-10-10 21:19 - 2013-09-04 13:11 - 00030720 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbuhci.sys
2013-10-10 21:19 - 2013-09-04 13:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbohci.sys
2013-10-10 21:19 - 2013-09-04 13:11 - 00007808 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbd.sys
2013-10-10 16:01 - 2013-10-10 16:01 - 00000000 ____D C:\Users\Grimm\Documents\Battlefield 4 Beta
2013-10-10 13:01 - 2013-09-14 02:10 - 00497152 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\afd.sys
2013-10-10 13:01 - 2013-09-08 03:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-10-10 13:01 - 2013-09-08 03:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\System32\mswsock.dll
2013-10-10 13:01 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2013-10-10 13:01 - 2013-08-29 03:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2013-10-10 13:01 - 2013-08-29 03:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\System32\ntdll.dll
2013-10-10 13:01 - 2013-08-29 03:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\System32\tdh.dll
2013-10-10 13:01 - 2013-08-29 03:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\System32\wow64.dll
2013-10-10 13:01 - 2013-08-29 03:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\System32\advapi32.dll
2013-10-10 13:01 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-10-10 13:01 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-10-10 13:01 - 2013-08-29 02:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-10-10 13:01 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2013-10-10 13:01 - 2013-08-29 02:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-10-10 13:01 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2013-10-10 13:01 - 2013-08-29 01:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-10-10 13:01 - 2013-08-29 01:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-10-10 13:01 - 2013-08-29 01:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-10-10 13:01 - 2013-08-29 01:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-10-10 13:01 - 2013-08-28 02:21 - 03155968 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys
2013-10-10 13:01 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\System32\PresentationCFFRasterizerNative_v0300.dll
2013-10-10 13:01 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-10 13:01 - 2013-07-12 11:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbcir.sys
2013-10-10 13:01 - 2013-07-12 11:40 - 00109824 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\USBAUDIO.sys
2013-10-10 13:01 - 2013-07-04 13:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\System32\WebClnt.dll
2013-10-10 13:01 - 2013-07-04 13:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\System32\comctl32.dll
2013-10-10 13:01 - 2013-07-04 13:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\System32\davclnt.dll
2013-10-10 13:01 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2013-10-10 13:01 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2013-10-10 13:01 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2013-10-10 13:01 - 2013-07-04 11:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxdav.sys
2013-10-10 13:01 - 2013-07-03 05:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\hidclass.sys
2013-10-10 13:01 - 2013-07-03 05:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\hidparse.sys
2013-10-10 13:01 - 2013-06-25 23:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\Wdf01000.sys
2013-10-10 13:01 - 2013-06-06 06:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\System32\lpk.dll
2013-10-10 13:01 - 2013-06-06 06:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\System32\fontsub.dll
2013-10-10 13:01 - 2013-06-06 06:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\System32\dciman32.dll
2013-10-10 13:01 - 2013-06-06 06:47 - 00046080 _____ (Adobe Systems) C:\Windows\System32\atmlib.dll
2013-10-10 13:01 - 2013-06-06 05:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2013-10-10 13:01 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2013-10-10 13:01 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2013-10-10 13:01 - 2013-06-06 04:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\System32\atmfd.dll
2013-10-10 13:01 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-10-10 13:01 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-10-10 13:00 - 2013-08-28 02:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\System32\scavengeui.dll
2013-10-10 13:00 - 2013-08-01 13:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys
2013-10-08 21:50 - 2013-10-08 21:50 - 00000000 ____D C:\Users\Grimm\Documents\Remedy
2013-10-08 17:44 - 2013-10-08 17:44 - 00000000 ____D C:\ProgramData\Package Cache
2013-10-07 21:09 - 2013-10-07 21:25 - 00000880 _____ C:\Users\Grimm\Desktop\75min.txt
2013-10-06 11:56 - 2013-10-06 20:15 - 99477982 _____ C:\Windows\SysWOW64\珷粯�Š
2013-10-03 10:55 - 2013-10-03 10:55 - 00000115 _____ C:\Users\Grimm\Desktop\Märkte.txt
2013-10-01 15:40 - 2013-10-01 15:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

==================== One Month Modified Files and Folders =======

2013-10-30 16:50 - 2013-10-30 16:50 - 00000000 ____D C:\FRST
2013-10-30 16:27 - 2011-02-07 14:13 - 00000000 ____D C:\ProgramData\NVIDIA
2013-10-29 20:27 - 2011-05-01 14:50 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-29 20:26 - 2011-05-01 14:50 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-29 20:26 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-29 20:25 - 2011-02-25 20:26 - 00000000 _____ C:\Windows\System32\Drivers\lvuvc.hs
2013-10-29 20:25 - 2009-07-14 05:51 - 00301939 _____ C:\Windows\setupact.log
2013-10-29 20:24 - 2011-02-07 14:16 - 00256010 _____ C:\Windows\PFRO.log
2013-10-29 20:14 - 2011-02-07 18:28 - 00000000 ____D C:\Users\Grimm\AppData\Roaming\Skype
2013-10-29 20:08 - 2012-03-31 11:13 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-29 18:49 - 2011-02-07 20:37 - 01841009 _____ C:\Windows\WindowsUpdate.log
2013-10-29 17:35 - 2012-04-16 15:46 - 00000000 ____D C:\Users\Grimm\AppData\Roaming\vlc
2013-10-29 17:34 - 2011-04-21 16:03 - 00000000 ____D C:\Users\Grimm\AppData\Roaming\uTorrent
2013-10-29 16:45 - 2011-03-11 01:27 - 00000000 ____D C:\Users\Grimm\AppData\Local\PMB Files
2013-10-29 16:24 - 2009-07-14 05:45 - 00014832 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-29 16:24 - 2009-07-14 05:45 - 00014832 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-29 15:42 - 2013-10-29 15:42 - 103932228 _____ C:\Windows\SysWOW64\쭱퀒�
2013-10-28 21:34 - 2013-10-25 16:27 - 00000000 ____D C:\Users\Grimm\Desktop\Im tiefen Keller
2013-10-28 21:32 - 2013-10-28 21:09 - 00000223 _____ C:\Users\Grimm\Desktop\Laden.txt
2013-10-28 15:46 - 2009-07-14 18:58 - 00696848 _____ C:\Windows\System32\perfh007.dat
2013-10-28 15:46 - 2009-07-14 18:58 - 00148144 _____ C:\Windows\System32\perfc007.dat
2013-10-28 15:46 - 2009-07-14 06:13 - 01613412 _____ C:\Windows\System32\PerfStringBackup.INI
2013-10-27 19:57 - 2013-10-27 19:57 - 00001641 _____ C:\Users\Grimm\Desktop\Risk Factions - Verknüpfung.lnk
2013-10-27 17:41 - 2013-10-27 17:41 - 00000000 ____D C:\Program Files (x86)\Risk
2013-10-27 17:40 - 2011-02-07 20:41 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-10-27 14:56 - 2013-10-27 14:56 - 00000000 ____D C:\Users\Grimm\Desktop\Sun Eater - Sun Eater
2013-10-27 14:31 - 2011-02-19 11:59 - 00000000 ____D C:\Users\Grimm\Desktop\Bilder
2013-10-27 14:30 - 2012-06-11 19:07 - 00000000 ____D C:\Users\Grimm\Desktop\Pflanze
2013-10-27 14:17 - 2013-06-13 10:58 - 00000000 ____D C:\Users\Grimm\AppData\Roaming\Mp3tag
2013-10-27 14:13 - 2013-10-27 14:13 - 00000000 ____D C:\Users\Grimm\Desktop\drown11
2013-10-26 14:51 - 2012-11-05 16:57 - 00000000 ____D C:\Users\Grimm\AppData\Roaming\Spotify
2013-10-26 12:13 - 2013-10-26 12:13 - 103108672 _____ C:\Windows\SysWOW64\襍╨�
2013-10-25 16:26 - 2011-04-09 15:27 - 00000000 ____D C:\Users\Grimm\Documents\MAGIX_Music_Maker_17_Premium_Download-Version
2013-10-25 14:42 - 2013-10-23 01:11 - 00000000 ____D C:\Users\Grimm\AppData\Roaming\Little Inferno
2013-10-25 12:15 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\System32\NDF
2013-10-25 01:10 - 2012-11-05 16:58 - 00000000 ____D C:\Users\Grimm\AppData\Local\Spotify
2013-10-23 20:16 - 2013-10-23 19:33 - 00000000 ____D C:\Program Files (x86)\Dear Esther
2013-10-23 16:28 - 2011-04-13 15:36 - 00000000 ____D C:\Program Files (x86)\Steam
2013-10-23 01:11 - 2013-10-23 01:11 - 00001083 _____ C:\Users\Grimm\Desktop\Little Inferno.lnk
2013-10-23 01:11 - 2013-10-23 01:11 - 00000000 ____D C:\Program Files (x86)\Little Inferno
2013-10-22 23:14 - 2011-06-05 17:44 - 00000000 ____D C:\Users\Grimm\AppData\Local\SKIDROW
2013-10-22 23:03 - 2013-10-22 23:03 - 00000000 ____D C:\Program Files (x86)\Galactic Cafe
2013-10-22 20:19 - 2013-10-22 20:19 - 102329055 _____ C:\Windows\SysWOW64\伎綴�
2013-10-22 09:52 - 2013-10-22 09:52 - 102310053 _____ C:\Windows\SysWOW64\蘱쟵�¡
2013-10-20 23:00 - 2012-04-07 13:57 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-10-20 23:00 - 2011-02-07 18:28 - 00000000 ____D C:\ProgramData\Skype
2013-10-20 02:13 - 2011-08-01 11:52 - 00000000 ____D C:\Users\Grimm\.gimp-2.6
2013-10-20 02:12 - 2013-10-20 02:12 - 00007184 _____ C:\Users\Grimm\.recently-used.xbel
2013-10-20 02:12 - 2011-08-01 11:53 - 00000000 ____D C:\Users\Grimm\AppData\Roaming\gtk-2.0
2013-10-20 02:12 - 2011-02-07 20:38 - 00000000 ____D C:\users\Grimm
2013-10-19 00:11 - 2011-08-24 12:14 - 00000000 ____D C:\Program Files (x86)\i2p
2013-10-18 14:31 - 2013-10-18 14:31 - 00000091 _____ C:\Users\Grimm\Desktop\radio.mp3.m3u
2013-10-16 13:34 - 2013-10-16 13:34 - 00002177 _____ C:\Users\Public\Desktop\Call of Duty Black Ops II.lnk
2013-10-16 13:34 - 2013-10-16 13:34 - 00002177 _____ C:\ProgramData\Desktop\Call of Duty Black Ops II.lnk
2013-10-16 13:23 - 2012-03-11 22:24 - 00000000 ____D C:\Users\Grimm\Desktop\Deutschland
2013-10-16 13:23 - 2011-04-14 15:58 - 00000000 ____D C:\Users\Grimm\Desktop\Renard
2013-10-16 13:20 - 2011-06-01 21:00 - 00000000 ____D C:\Program Files (x86)\Activision
2013-10-14 21:16 - 2013-10-14 21:16 - 00291632 _____ C:\Windows\Minidump\101413-27939-01.dmp
2013-10-14 21:16 - 2011-11-20 18:01 - 501775735 _____ C:\Windows\MEMORY.DMP
2013-10-14 21:16 - 2011-11-20 18:01 - 00000000 ____D C:\Windows\Minidump
2013-10-14 11:34 - 2013-10-14 11:34 - 100856651 _____ C:\Windows\SysWOW64\뭬�ž
2013-10-13 19:16 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-10-11 14:07 - 2013-05-11 15:48 - 00290184 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2013-10-11 14:07 - 2011-04-07 17:11 - 00290184 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
2013-10-11 13:30 - 2011-02-20 13:38 - 00290184 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2013-10-11 12:05 - 2011-09-27 15:58 - 00000000 ____D C:\Program Files (x86)\Origin
2013-10-11 10:56 - 2011-04-07 17:11 - 00000000 ____D C:\Users\Grimm\AppData\Local\PunkBuster
2013-10-11 10:51 - 2011-03-08 11:54 - 00000000 ____D C:\Users\Grimm\Desktop\Sharing
2013-10-11 09:43 - 2009-07-14 05:45 - 01591456 _____ C:\Windows\System32\FNTCACHE.DAT
2013-10-11 09:37 - 2013-03-14 22:42 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-10-11 09:37 - 2013-03-14 22:42 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-10-10 22:03 - 2011-02-15 13:25 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-10-10 21:59 - 2012-06-22 13:23 - 01590370 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-10-10 21:56 - 2013-08-18 21:16 - 00000000 ____D C:\Windows\System32\MRT
2013-10-10 21:53 - 2011-02-07 14:07 - 80541720 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-10-10 16:13 - 2011-02-07 14:13 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-10-10 16:01 - 2013-10-10 16:01 - 00000000 ____D C:\Users\Grimm\Documents\Battlefield 4 Beta
2013-10-09 18:08 - 2012-03-31 11:13 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-10-09 18:08 - 2012-03-31 11:13 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-10-09 18:08 - 2011-05-18 21:20 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-10-09 12:57 - 2012-12-19 18:11 - 00000000 ____D C:\Program Files (x86)\Battlelog Web Plugins
2013-10-08 21:50 - 2013-10-08 21:50 - 00000000 ____D C:\Users\Grimm\Documents\Remedy
2013-10-08 20:22 - 2011-05-01 14:50 - 00004104 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-08 20:22 - 2011-05-01 14:50 - 00003852 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-08 17:44 - 2013-10-08 17:44 - 00000000 ____D C:\ProgramData\Package Cache
2013-10-08 17:44 - 2013-05-11 15:48 - 00076888 _____ C:\Windows\SysWOW64\PnkBstrA.exe
2013-10-08 17:43 - 2011-02-07 19:27 - 00736498 _____ C:\Windows\DirectX.log
2013-10-08 16:31 - 2011-09-27 15:59 - 00000000 ____D C:\Users\Grimm\AppData\Roaming\Origin
2013-10-08 16:31 - 2011-09-27 15:59 - 00000000 ____D C:\Users\Grimm\AppData\Local\Origin
2013-10-08 16:31 - 2011-09-27 15:58 - 00000000 ____D C:\ProgramData\Origin
2013-10-08 16:31 - 2011-09-27 15:58 - 00000000 ____D C:\Program Files (x86)\Origin Games
2013-10-07 21:25 - 2013-10-07 21:09 - 00000880 _____ C:\Users\Grimm\Desktop\75min.txt
2013-10-06 20:15 - 2013-10-06 11:56 - 99477982 _____ C:\Windows\SysWOW64\珷粯�Š
2013-10-03 19:31 - 2011-02-20 13:32 - 00000000 ____D C:\Program Files (x86)\Electronic Arts
2013-10-03 19:26 - 2011-07-03 11:54 - 00000000 ____D C:\Users\Grimm\Desktop\Meine Musik
2013-10-03 19:26 - 2011-03-27 15:36 - 00000000 ____D C:\Users\Grimm\Desktop\Zeug von Ramon
2013-10-03 19:25 - 2011-10-14 15:46 - 00000000 ____D C:\Users\Grimm\Desktop\Schule
2013-10-03 10:55 - 2013-10-03 10:55 - 00000115 _____ C:\Users\Grimm\Desktop\Märkte.txt
2013-10-02 14:44 - 2012-05-21 15:28 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-10-01 21:56 - 2011-04-07 13:36 - 00000000 ____D C:\Users\Grimm\AppData\Local\Mozilla
2013-10-01 15:40 - 2013-10-01 15:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

Files to move or delete:
====================
C:\Users\Grimm\Latein Lösungen.exe


Some content of TEMP:
====================
C:\Users\Grimm\AppData\Local\Temp\0a50e25a83046228c11dcaa7eeed09bb.exe
C:\Users\Grimm\AppData\Local\Temp\2dcd1d63cb45e6613582211c3d5f4b23.exe
C:\Users\Grimm\AppData\Local\Temp\AskSLib.dll
C:\Users\Grimm\AppData\Local\Temp\bassmod.dll
C:\Users\Grimm\AppData\Local\Temp\CGVPNPatch_4610-4716.exe
C:\Users\Grimm\AppData\Local\Temp\CGVPNPatch_4716-4718.exe
C:\Users\Grimm\AppData\Local\Temp\CGVPNPatch_4719.exe
C:\Users\Grimm\AppData\Local\Temp\CmdLineExt03.dll
C:\Users\Grimm\AppData\Local\Temp\Crysis_Patch_1_2_launcher.exe
C:\Users\Grimm\AppData\Local\Temp\drm_dyndata_7340007.dll
C:\Users\Grimm\AppData\Local\Temp\drm_dyndata_7380014.dll
C:\Users\Grimm\AppData\Local\Temp\drm_dyndata_7380015.dll
C:\Users\Grimm\AppData\Local\Temp\drm_dyndata_7390005.dll
C:\Users\Grimm\AppData\Local\Temp\Gw2.exe
C:\Users\Grimm\AppData\Local\Temp\installerdll2162766.dll
C:\Users\Grimm\AppData\Local\Temp\installerdll2172735.dll
C:\Users\Grimm\AppData\Local\Temp\installerdll3032721.dll
C:\Users\Grimm\AppData\Local\Temp\installerdll3034266.dll
C:\Users\Grimm\AppData\Local\Temp\installerdll3041114.dll
C:\Users\Grimm\AppData\Local\Temp\installerdll3664775.dll
C:\Users\Grimm\AppData\Local\Temp\installerdll3665867.dll
C:\Users\Grimm\AppData\Local\Temp\installerdll3673152.dll
C:\Users\Grimm\AppData\Local\Temp\installerdll713345.dll
C:\Users\Grimm\AppData\Local\Temp\jre-6u23-windows-i586-iftw-rv.exe
C:\Users\Grimm\AppData\Local\Temp\jre-6u24-windows-i586-iftw-rv.exe
C:\Users\Grimm\AppData\Local\Temp\jre-6u26-windows-i586-iftw-rv.exe
C:\Users\Grimm\AppData\Local\Temp\jre-6u29-windows-i586-iftw-rv.exe
C:\Users\Grimm\AppData\Local\Temp\jre-6u31-windows-i586-iftw-rv.exe
C:\Users\Grimm\AppData\Local\Temp\jre-6u33-windows-i586-iftw.exe
C:\Users\Grimm\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Grimm\AppData\Local\Temp\LOOP.EXE
C:\Users\Grimm\AppData\Local\Temp\MassEffect2-1.02.exe
C:\Users\Grimm\AppData\Local\Temp\MSVBVM60.DLL
C:\Users\Grimm\AppData\Local\Temp\nsf5317.exe
C:\Users\Grimm\AppData\Local\Temp\nsf553A.exe
C:\Users\Grimm\AppData\Local\Temp\nsp210C.exe
C:\Users\Grimm\AppData\Local\Temp\nsp57E9.exe
C:\Users\Grimm\AppData\Local\Temp\nsu2571.exe
C:\Users\Grimm\AppData\Local\Temp\nsv4A9B.exe
C:\Users\Grimm\AppData\Local\Temp\nsz2283.exe
C:\Users\Grimm\AppData\Local\Temp\nv3DVStreaming.dll
C:\Users\Grimm\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Grimm\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\Grimm\AppData\Local\Temp\nvSCPAPISvr.exe
C:\Users\Grimm\AppData\Local\Temp\nvStereoApiI.dll
C:\Users\Grimm\AppData\Local\Temp\nvStereoApiI64.dll
C:\Users\Grimm\AppData\Local\Temp\nvStInst.exe
C:\Users\Grimm\AppData\Local\Temp\OriginLauncher3032721.exe
C:\Users\Grimm\AppData\Local\Temp\OriginLauncher3664775.exe
C:\Users\Grimm\AppData\Local\Temp\ose00000.exe
C:\Users\Grimm\AppData\Local\Temp\PlaySound.dll
C:\Users\Grimm\AppData\Local\Temp\pyl5A22.tmp.exe
C:\Users\Grimm\AppData\Local\Temp\pyl8297.tmp.exe
C:\Users\Grimm\AppData\Local\Temp\pylA9A9.tmp.exe
C:\Users\Grimm\AppData\Local\Temp\pylD345.tmp.exe
C:\Users\Grimm\AppData\Local\Temp\pylD4AC.tmp.exe
C:\Users\Grimm\AppData\Local\Temp\qc_e3f0f3ef_27e6_4ca8_8a7c_a3d761aa54bb_64.exe
C:\Users\Grimm\AppData\Local\Temp\removeKCL.EXE
C:\Users\Grimm\AppData\Local\Temp\removeKTID.EXE
C:\Users\Grimm\AppData\Local\Temp\remTIDShortcut.EXE
C:\Users\Grimm\AppData\Local\Temp\rootsupd.exe
C:\Users\Grimm\AppData\Local\Temp\Second Life Setup.exe
C:\Users\Grimm\AppData\Local\Temp\Setup.exe
C:\Users\Grimm\AppData\Local\Temp\SIntf16.dll
C:\Users\Grimm\AppData\Local\Temp\SIntf32.dll
C:\Users\Grimm\AppData\Local\Temp\SIntfNT.dll
C:\Users\Grimm\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Grimm\AppData\Local\Temp\sonarinst.exe
C:\Users\Grimm\AppData\Local\Temp\swt-win32-3349.dll
C:\Users\Grimm\AppData\Local\Temp\ubi7831.tmp.exe
C:\Users\Grimm\AppData\Local\Temp\ubiFAD6.tmp.exe
C:\Users\Grimm\AppData\Local\Temp\Uninstall.exe
C:\Users\Grimm\AppData\Local\Temp\update-0.9.exe
C:\Users\Grimm\AppData\Local\Temp\uttBEDD.tmp.exe
C:\Users\Grimm\AppData\Local\Temp\uttF47D.tmp.exe
C:\Users\Grimm\AppData\Local\Temp\vcredist_x64.exe
C:\Users\Grimm\AppData\Local\Temp\vcredist_x86.exe
C:\Users\Grimm\AppData\Local\Temp\vlc-2.0.2-win32.exe
C:\Users\Grimm\AppData\Local\Temp\vlc-2.0.4-win32.exe
C:\Users\Grimm\AppData\Local\Temp\vlc-2.0.6-win32.exe
C:\Users\Grimm\AppData\Local\Temp\vlc-2.0.6-win64.exe
C:\Users\Grimm\AppData\Local\Temp\vlc-2.0.7-win64.exe
C:\Users\Grimm\AppData\Local\Temp\vlc-2.0.8-win64.exe
C:\Users\Grimm\AppData\Local\Temp\WindowsInstaller-KB893803-v2-x86.exe
C:\Users\Grimm\AppData\Local\Temp\writeLogFile.EXE
C:\Users\Grimm\AppData\Local\Temp\wusetup.exE
C:\Users\Grimm\AppData\Local\Temp\xmlUpdater.exe
C:\Users\Grimm\AppData\Local\Temp\_is4990.exe
C:\Users\Grimm\AppData\Local\Temp\_isF28B.exe


==================== Known DLLs (Whitelisted) ================


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points  =========================

6
Restore point made on: 2013-10-24 10:39:42
Restore point made on: 2013-10-26 01:03:03
Restore point made on: 2013-10-28 15:59:39
Restore point made on: 2013-10-28 21:11:51
Restore point made on: 2013-10-28 21:25:14
Restore point made on: 2013-10-29 16:23:14

==================== Memory info =========================== 

Percentage of memory in use: 16%
Total physical RAM: 4094.05 MB
Available physical RAM: 3409.06 MB
Total Pagefile: 4092.2 MB
Available Pagefile: 3421.25 MB
Total Virtual: 8192 MB
Available Virtual: 8191.87 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:931.41 GB) (Free:99.23 GB) NTFS
Drive f: (USB 1GB) (Removable) (Total:0.94 GB) (Free:0.93 GB) FAT
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
Drive y: (System-reserviert) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 039EF9D3)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 964 MB) (Disk ID: 017C098D)
Partition 1: (Active) - (Size=964 MB) - (Type=06)


LastRegBack: 2013-10-21 13:03

==================== End Of Log ============================

Ich hoffe jemand hier kann mir weiterhelfen.
Gruß,
der Fuchs

schrauber · 30.10.2013, 21:36

Hi,

geht einer der abgesicherten Modi?

schneefuchs · 30.10.2013, 22:34

Im abgesichterten Modus ist es das gleiche Problem: Schwarzer Bildschirm und der Mauszeiger, nur in niedrigerer Auflösung.

schrauber · 31.10.2013, 10:12

Systemstartreparatur in der Recovery schon versucht? Das Log ist sauber, keine Anzeichen.

schneefuchs · 31.10.2013, 15:58

Also eine Systemreparatur hab ich schon versucht aber da passiert auch nichts.

schrauber · 01.11.2013, 11:14

Zitat:

Im abgesichterten Modus ist es das gleiche Problem

Es gibt 3 dieser Modi, alle 3 machen Probleme? Schonmal von DVD drüber installiert?

schneefuchs · 01.11.2013, 18:14

Zitat:

Es gibt 3 dieser Modi, alle 3 machen Probleme?

Ja, bei allen ist es das selbe Problem.

Zitat:

Schonmal von DVD drüber installiert?

Mit der Windows-DVD habe ich noch nichts gemacht, weil ich immernoch hoffe ein paar Daten retten zu können.

schrauber · 02.11.2013, 11:29

Beim drüberinstallieren passiert nix mit den Daten, aber zur Sicherheit:

http://www.trojaner-board.de/82533-d...ted-magic.html

schneefuchs · 05.11.2013, 17:28

So, ich konnte mit Parted Magic problemlos auf meine Festplatte zugreifen und alle wichtigen Daten auf eine Externe ziehen. Eben habe ich Windows nochmal komplett neu installiert und es läuft bis jetzt alles ganz normal.
Damit, denke ich, hat sich das Problem erledigt.

Vielen Dank für die schnelle und gute Hilfe, Schrauber!

schrauber · 06.11.2013, 11:47

Gern Geschehen

30.10.2013, 21:36	#2
schrauber /// the machine /// TB-Ausbilder	Beim starten schwarzer Bildschirm und bewegbarer Mauszeiger (Windows 7) Hi, geht einer der abgesicherten Modi? __________________ __________________

31.10.2013, 10:12	#4
schrauber /// the machine /// TB-Ausbilder	Beim starten schwarzer Bildschirm und bewegbarer Mauszeiger (Windows 7) Systemstartreparatur in der Recovery schon versucht? Das Log ist sauber, keine Anzeichen. __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

06.11.2013, 11:47	#10
schrauber /// the machine /// TB-Ausbilder	Beim starten schwarzer Bildschirm und bewegbarer Mauszeiger (Windows 7) Gern Geschehen __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

Beim starten schwarzer Bildschirm und bewegbarer Mauszeiger (Windows 7)

Plagegeister aller Art und deren Bekämpfung: Beim starten schwarzer Bildschirm und bewegbarer Mauszeiger (Windows 7)