weißer Bildschirm nach Systemstart

Sasch_arr · 03.11.2013, 18:23

so es hat ein wenig gedaurt bis die suchläufe durch waren, aber hier nun die Logs:

Malwarebites:

Zitat:

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.11.03.01

Windows Vista Service Pack 2 x64 NTFS
Internet Explorer 7.0.6002.18005
Underclass_Hero :: UNDERCLASS-HERO [Administrator]

03.11.2013 13:18:20
mbam-log-2013-11-03 (13-18-20).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 513654
Laufzeit: 4 Stunde(n), 7 Minute(n), 53 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 2
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C689C99E-3A8C-4c87-A79C-C80DC9C81632} (Trojan.Banker) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\Software\VB and VBA Program Settings\SrvID (Malware.Trace) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 9
C:\$Recycle.Bin\S-1-5-21-2652013535-828162384-4242843444-1000\$RRWO1BW.exe (PUP.Optional.Installex) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\FRST\Quarantine\ms0003B3F3.dat (Trojan.MSIL) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\FRST\Quarantine\skype.dat (Trojan.Ransom) -> Löschen bei Neustart.
C:\Users\Underclass_Hero\Desktop\setup_codec_3dx.exe (PUP.LoadTubes) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Underclass_Hero\AppData\Local\Temp\wpbt0.dll (Exploit.Drop.GS) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Public\Documents\Server\admin.txt (Malware.Trace) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Public\Documents\Server\server.dat (Malware.Trace) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Underclass_Hero\AppData\Local\Temp\WinDefender.Exe.vir (Trojan.Agent) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\ProgramData\Windows\ccdxmmde.dat (Malware.Trace) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)

ADW Cleaner
AdwCleaner Logfile:

Code:

ATTFilter

# AdwCleaner v3.010 - Bericht erstellt am 03/11/2013 um 17:40:39
# Updated 20/10/2013 von Xplode
# Betriebssystem : Windows (TM) Vista Home Premium Service Pack 2 (64 bits)
# Benutzername : Underclass_Hero - UNDERCLASS-HERO
# Gestartet von : C:\Users\Underclass_Hero\Desktop\desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

[!] Ordner Gelöscht : C:\ProgramData\ICQ\ICQToolbar
[!] Ordner Gelöscht : C:\Program Files (x86)\facemoods.com
[!] Ordner Gelöscht : C:\Program Files (x86)\ICQ6Toolbar
[!] Ordner Gelöscht : C:\Program Files (x86)\Search Settings
[!] Ordner Gelöscht : C:\Users\Underclass_Hero\AppData\LocalLow\facemoods.com
Datei Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eBay.lnk
Datei Gelöscht : C:\Users\Underclass_Hero\AppData\Roaming\Mozilla\Firefox\Profiles\ddi17mw2.default\user.js

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\ihflimipbcaljfnojhhknppphnnciiif
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\Search Settings
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\escort.escortIEPane
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\escort.escrtBtn.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\esrv.escrtSrvc
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\esrv.escrtSrvc.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\facemoods.dskBnd
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\facemoods.dskBnd.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\facemoods.facemoodsHlpr
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\facemoods.facemoodsHlpr.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\facemoods.xtrnl
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\facemoods.xtrnl.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\facemoodsApp.appCore
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\facemoodsApp.appCore.1
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [facemoods]
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{5B1881D1-D9C7-46DF-B041-1E593282C7D0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{AD25754E-D76C-42B3-A335-2F81478B722F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{64182481-4F71-486B-A045-B233BD0DA8FC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{761F6A83-F007-49E4-8EAC-CDB6808EF06F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{76C45B18-A29E-43EA-AAF8-AF55C2E1AE17}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{96EF404C-24C7-43D0-9096-4CCC8BB7CCAC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{97720195-206A-42AE-8E65-260B9BA5589F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{97D69524-BB57-4185-9C7F-5F05593B771A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{986F7A5A-9676-47E1-8642-F41F8C3FCF82}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A5B99E41-E157-4209-8AAC-DB003A816079}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AD20D01C-C939-4DD2-8C55-56935A48987E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{B18788A4-92BD-440E-A4D1-380C36531119}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{DB4E9724-F518-4DFD-9C7C-78B52103CAB9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{DDE2C74F-58CC-4D71-8CE1-09DEBB8CFB78}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E95EAD3F-18C6-4304-9DC6-BD6FD8E11D37}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{542FA950-C57A-4E17-B3E1-D935DFE15DEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5B035F86-41B5-40F1-AAAD-3D219F30244E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{6365AC7B-9920-4D8B-AF5D-3BDFEAC340A8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{6A934270-717F-4BC3-BA59-BC9BED47A8D2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{74C012C4-00FB-4F04-9AFB-4AD5449D2018}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{78888F8B-D5E4-43CE-89F5-C8C18223AF64}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{79B13431-CCAC-4097-8889-D0289E5E924F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8B8558F6-DC26-4F39-8417-34B8934AA459}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8C8D5C57-3CAD-4CF9-BCAD-F873678DA883}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{981334CB-7B8B-431F-B86D-67B7426B125B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9E393F82-2644-4AB6-B994-1AD39D6C59EE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A3A2A5C0-1306-4D1A-A093-9CECA4230002}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A9379648-F6EB-4F65-A624-1C10411A15D0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C1C2FC43-F042-4F17-AEDB-C5ABF3B42E4B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C8D424EF-CB21-49A0-8659-476FBAB0F8E8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D5A1EF9A-7948-435D-8B87-D6A598317288}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F16AB1DB-15C0-4456-A29E-4DF24FB9E3D2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F7EC6286-297C-4981-9DCC-FD7F57BC24C9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{09C554C3-109B-483C-A06B-F14172F1A947}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{12A5F606-B1EC-474C-83ED-95E99FD8058E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{AD25754E-D76C-42B3-A335-2F81478B722F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64182481-4F71-486B-A045-B233BD0DA8FC}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{32099AAC-C132-4136-9E9A-4E364A424E17}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{64182481-4F71-486B-A045-B233BD0DA8FC}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DB4E9724-F518-4DFD-9C7C-78B52103CAB9}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FFDF9EF3-3C3A-4F05-9A6E-5D3B778EC567}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{18EAB056-9057-F224-FD4C-1F6569C4D8D2}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4FC7-90CC-5EA0ABBE9EB8}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{DB4E9724-F518-4DFD-9C7C-78B52103CAB9}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{32099AAC-C132-4136-9E9A-4E364A424E17}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{E312764E-7706-43F1-8DAB-FCDD2B1E416D}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}
Wert Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{32099AAC-C132-4136-9E9A-4E364A424E17}]
Schlüssel Gelöscht : HKCU\Software\facemoods.com
Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar
Schlüssel Gelöscht : HKLM\Software\facemoods.com
Schlüssel Gelöscht : HKLM\Software\ICQ\ICQToolbar
Schlüssel Gelöscht : HKLM\Software\Search Settings
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{0B1AAC97-8563-41D9-AE47-58E6A222F0E1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1AE46C09-2AB8-4EE5-88FB-08CD0FF7F2DF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\facemoods
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{0B1AAC97-8563-41D9-AE47-58E6A222F0E1}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{1AE46C09-2AB8-4EE5-88FB-08CD0FF7F2DF}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\facemoods

***** [ Browser ] *****

-\\ Internet Explorer v7.0.6002.18005


-\\ Mozilla Firefox v13.0 (de)

[ Datei : C:\Users\Underclass_Hero\AppData\Roaming\Mozilla\Firefox\Profiles\ddi17mw2.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [11604 octets] - [03/11/2013 17:37:26]
AdwCleaner[S0].txt - [8752 octets] - [03/11/2013 17:40:39]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [8812 octets] ##########

--- --- ---

Junkware Removal tool

Zitat:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.7 (10.15.2013:3)
OS: Windows (TM) Vista Home Premium x64
Ran by Underclass_Hero on 03.11.2013 at 17:52:34,10
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

Successfully stopped: [Service] msgplusservice
Successfully deleted: [Service] msgplusservice

~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\messengerplusforskypeservice
Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\plusservice
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL

~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\dt soft\daemon tools toolbar
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\yuna software
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\yuna software
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\messenger plus! for skype
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{7C638C6B-5B27-4A85-83CB-40250D1E4AC4}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{CA8FE908-E845-4081-937D-C045FEC0FC98}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{7C638C6B-5B27-4A85-83CB-40250D1E4AC4}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{CA8FE908-E845-4081-937D-C045FEC0FC98}

~~~ Files

~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\messenger plus! for skype"
Successfully deleted: [Folder] "C:\Program Files (x86)\yuna software"
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{14FF75EC-F00C-47C9-B73A-8F50A5C009D5}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{2C14D585-B1A0-45D9-88BE-1A113CBC9018}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{2DA0267E-E66C-4359-95AE-D0002335900D}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{316D018F-7A12-4893-9899-6D2FB3827A48}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{36B98EB5-9C94-4A2C-8FC3-67856E3E7EBF}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{3B5C24AA-9F86-4ED9-B2FF-255DD184274B}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{3EFC59D6-B29F-4D3E-9380-0BBAB557D086}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{420DD96C-DD8F-4802-9E59-BEB8C74614DC}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{4B19720D-075D-4167-AE16-44A52C8935C8}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{4E456E03-03D5-4565-B0BF-83FA925AFF21}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{51A3710D-308A-4B73-AC47-3F0C5B8E5428}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{5D62B0E9-CDCD-4318-8815-47E78ABA32D4}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{5EF8B174-B9E7-442B-8F64-BAFF71102349}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{60716548-3B07-4E18-88E6-CC555085D6C9}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{61B57F1A-6680-41A0-8FC8-61BDAE761049}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{62A50126-2428-448F-9CA2-9AFB9ACD6380}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{63A568D4-5FA6-4658-A32F-B3096739FF46}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{65966AB2-86EA-4A25-9CC0-34320F3E5E66}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{785AE593-FE9B-4FFE-9267-FA3D012E4D90}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{7D6B14A3-D46A-4BB6-8C07-C8EA193E87F0}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{7FFDC3A5-533B-4A73-A0C4-7986493DE616}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{81A4DA99-E3DD-49F0-9617-ADD365543117}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{85F043E9-B8AE-486D-B011-4B98168DD8E4}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{86E98662-0752-4868-9140-5AB55487E03F}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{8763AFF4-7A68-4593-9FA8-D07FB9680BC2}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{8C5AAB40-4A6E-43D2-BA7F-29A3899C127F}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{9136D152-A6B9-4DDE-BAEF-DE70EA940B57}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{933EA89B-21E7-49B7-9E76-62D180A0F42B}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{93A89A65-4F1B-4C20-817D-F88E57D9D6D4}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{93D78B03-21A3-49A3-90F3-F461E58A3B3D}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{95681270-1BFB-4EF8-88EB-E0D633D4DFC9}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{963A5B18-C225-491A-A64F-AB44921D30BD}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{9BC95AD6-94B0-4403-852A-2DA8877F309D}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{9E373C5F-F480-43F4-A062-2A2E9B70E49A}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{9EE2DD9B-A60C-4E4F-A321-56EFE8A30373}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{A11E6E0C-051A-4E8D-AFD4-300AB1177D29}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{A4A4C582-3CEF-4429-95D1-8CBCE6EF38A5}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{AC00FC3B-BBAA-4C2B-ADE6-8F35DD41FAC9}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{B16C2212-A75B-4D94-B0B0-9071B55055F0}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{B844ED1D-8DBD-44C7-B3AA-56734CD29EF0}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{C20471A9-1854-42DE-9291-1AB9A566BBA6}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{C9F8CA25-5451-4144-A786-7C2D9629AE7C}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{D9B173D2-7A91-4FBA-8810-358725C5B1A9}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{DBB5A743-75DA-42B5-AFDC-B347D0ED9F84}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{E164E8E3-0F3D-4734-9E46-822685513887}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{E3FBF41E-F850-4040-9111-73B363C3D9A3}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{E4031C34-190A-4D54-938D-C22E4BF17B7B}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{EA86E4E8-59C5-4E1D-B981-74E0E24B789A}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{F08CBCA5-22C3-49DA-9DBE-DD5F76A23C63}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{F1BDD1E9-4CF1-41CE-840F-D35B64CF5D41}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{F39E75FE-4EA3-4252-83ED-26CD68DC74AC}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{F85D42B1-C715-48CA-B5EE-D691081E2E81}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{FAD6D277-7B7B-4914-A1CD-84B7AF0A7975}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{FC0BE416-1F04-4B16-A35C-2D9D1189B65A}
Successfully deleted: [Empty Folder] C:\Users\Underclass_Hero\appdata\local\{FFD74101-C4E3-4C13-9F34-C68A4DE2347D}

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 03.11.2013 at 18:02:26,50
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST Log

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 30-10-2013
Ran by SYSTEM on MINWINPC on 03-11-2013 18:12:28
Running from G:\
Windows Vista (TM) Home Premium Service Pack 1 (X64) OS Language: English(US)
Internet Explorer Version 7
Boot Mode: Recovery

The current controlset is ControlSet002
ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log.

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1584184 2008-01-20] (Microsoft Corporation)
HKLM\...\Run: [SmartMenu] - C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [914224 2008-11-18] (Hewlett-Packard)
HKLM\...\Run: [Windows Mobile Device Center] - C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)
HKLM\...\Run: [PAC7302_Monitor] - C:\Windows\PixArt\PAC7302\Monitor.exe [323584 2007-12-10] (PixArt Imaging Incorporation)
HKLM\...\Run: [Windows Mobile-based device management] - C:\Windows\WindowsMobile\wmdSync.exe [225792 2008-01-20] (Microsoft Corporation)
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1281512 2013-01-27] (Microsoft Corporation)
HKLM-x32\...\Run: [hpsysdrv] - C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe [62768 2008-11-20] (Hewlett-Packard)
HKLM-x32\...\Run: [UpdateP2GoShortCut] - C:\Program Files (x86)\Cyberlink\Power2Go\MUITransfer\MUIStartMenu.exe [210216 2008-10-30] (CyberLink Corp.)
HKLM-x32\...\Run: [TVAgent] - C:\Program Files (x86)\Hewlett-Packard\Media\TV\TVAgent.exe [210216 2008-12-31] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateLBPShortCut] - C:\Program Files (x86)\Cyberlink\LabelPrint\MUITransfer\MUIStartMenu.exe [210216 2008-06-13] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdatePDIRShortCut] - C:\Program Files (x86)\Cyberlink\PowerDirector\MUITransfer\MUIStartMenu.exe [210216 2008-06-13] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdatePSTShortCut] - C:\Program Files (x86)\Cyberlink\CyberLink DVD Suite Deluxe\MUITransfer\MUIStartMenu.exe [210216 2008-11-26] (CyberLink Corp.)
HKLM-x32\...\Run: [TSMAgent] - C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe [1152296 2008-12-15] (CyberLink Corp.)
HKLM-x32\...\Run: [CLMLServer for HP TouchSmart] - C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe [189736 2008-12-15] (CyberLink)
HKLM-x32\...\Run: [DVDAgent] - C:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe [1148200 2008-11-28] (CyberLink Corp.)
HKLM-x32\...\Run: [VirtualCloneDrive] - E:\Programme\VirtualCloneDrive\VCDDaemon.exe [85160 2009-05-26] (Elaborate Bytes AG)
HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1230704 2011-01-10] ()
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2011-07-05] (Apple Inc.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe [35696 2009-10-02] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [935288 2009-09-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59240 2011-09-26] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [421736 2011-10-09] (Apple Inc.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [348664 2012-08-09] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [TrojanScanner] - C:\Program Files (x86)\Trojan Remover\Trjscan.exe [1247504 2012-09-14] (Simply Super Software)
HKU\Default\...\Run: [HPADVISOR] - C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe [966656 2008-12-01] (Hewlett-Packard)
HKU\Default User\...\Run: [HPADVISOR] - C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe [966656 2008-12-01] (Hewlett-Packard)
HKU\Underclass_Hero\...\Run: [msnmsgr] - C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4280184 2012-03-08] (Microsoft Corporation)
HKU\Underclass_Hero\...\Run: [WMPNSCFG] - C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe
HKU\UpdatusUser\...\Run: [HPADVISOR] - C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe [966656 2008-12-01] (Hewlett-Packard)
BootExecute: autocheck autochk * lsdelete

==================== Services (Whitelisted) =================

S2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [86224 2012-05-08] (Avira Operations GmbH & Co. KG)
S2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [110032 2012-05-08] (Avira Operations GmbH & Co. KG)
S2 Lavasoft Ad-Aware Service; C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe [2152152 2011-10-30] (Lavasoft Limited)
S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)
S2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22056 2013-01-27] (Microsoft Corporation)
S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [379360 2013-01-27] (Microsoft Corporation)
S2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [75064 2009-09-04] ()
S3 sdAuxService; C:\Program Files (x86)\Spyware Doctor\pctsAuxs.exe [348824 2009-09-28] (PC Tools)
S3 sdCoreService; C:\Program Files (x86)\Spyware Doctor\pctsSvc.exe [1097096 2009-07-22] (PC Tools)
S3 TuneUp.Defrag; C:\Windows\System32\TuneUpDefragService.exe [506696 2009-12-14] (TuneUp Software)
S2 TuneUp.ProgramStatisticsSvc; C:\Windows\System32\TUProgSt.exe [842056 2009-12-14] (TuneUp Software)
S2 ezSharedSvc; C:\Windows\System32\ezsvc7.dll [x]

==================== Drivers (Whitelisted) ====================

S2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [98848 2012-05-08] (Avira GmbH)
S1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132832 2012-05-08] (Avira GmbH)
S1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [27760 2011-10-19] (Avira GmbH)
S3 camfilt2; C:\Windows\System32\DRIVERS\camfilt2.sys [139264 2007-08-29] (Guillemot Corporation)
S3 hcw88rc5; C:\Windows\System32\Drivers\hcw88rc5.sys [15872 2008-04-18] (Hauppauge Computer Works, Inc.)
S3 Lavasoft Kernexplorer; C:\Program Files (x86)\Lavasoft\Ad-Aware\KernExplorer64.sys [17152 2011-10-30] ()
S0 Lbd; C:\Windows\System32\DRIVERS\Lbd.sys [69376 2011-08-18] (Lavasoft AB)
S0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [230320 2013-01-20] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [130008 2013-01-20] (Microsoft Corporation)
S3 OM0530; C:\Windows\System32\Drivers\ov530vx.sys [172928 2007-07-13] (OmniVision Technology Inc.)
S3 PAC7302; C:\Windows\System32\DRIVERS\PAC7302.SYS [531456 2008-02-29] (PixArt Imaging Inc.)
S3 Ph3xIB64; C:\Windows\System32\DRIVERS\Ph3xIB64.sys [1418112 2007-04-03] (Philips Semiconductors GmbH)
S3 Ps2; C:\Windows\System32\DRIVERS\PS2.sys [21504 2006-09-07] ()
S0 sptd; C:\Windows\System32\Drivers\sptd.sys [834544 2009-12-26] (Duplex Secure Ltd.)
S2 {55662437-DA8C-40c0-AADA-2C816A897A49}; c:\Program Files (x86)\Hewlett-Packard\Media\DVD\000.fcl [146928 2008-11-28] (CyberLink Corp.)
S1 bncudelp; \??\C:\Windows\system32\drivers\bncudelp.sys [x]
S1 dzgrubzs; \??\C:\Windows\system32\drivers\dzgrubzs.sys [x]
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
S1 lmrjlnxr; \??\C:\Windows\system32\drivers\lmrjlnxr.sys [x]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]
S3 PCD5SRVC{8AAF211B-043E02A9-05040000}; \??\C:\PROGRA~1\PC-DOC~1\PCD5SRVC_x64.pkms [x]
S1 qiqottig; \??\C:\Windows\system32\drivers\qiqottig.sys [x]
S1 rgbdxhyw; \??\C:\Windows\system32\drivers\rgbdxhyw.sys [x]
S1 ujprsheu; \??\C:\Windows\system32\drivers\ujprsheu.sys [x]
S1 uqtsvqiv; \??\C:\Windows\system32\drivers\uqtsvqiv.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-03 09:09 - 2013-11-03 09:09 - 00001117 _____ C:\Program Files (x86)\active-update.xml
2013-11-03 09:09 - 2013-11-03 09:09 - 00000057 _____ C:\Program Files (x86)\updates.xml
2013-11-03 09:02 - 2013-11-03 09:02 - 00008631 _____ C:\Users\Underclass_Hero\Desktop\JRT.txt
2013-11-03 08:52 - 2013-11-03 08:52 - 00000000 ____D C:\Windows\ERUNT
2013-11-03 08:27 - 2013-11-03 09:04 - 00000000 ____D C:\Users\Underclass_Hero\Desktop\PC Reperatur
2013-11-03 08:26 - 2013-11-03 08:40 - 00000000 ____D C:\AdwCleaner
2013-11-03 04:13 - 2013-11-03 04:13 - 00000000 ____D C:\Users\Underclass_Hero\AppData\Roaming\Malwarebytes
2013-11-03 04:02 - 2013-11-03 04:02 - 00000910 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-11-03 04:02 - 2013-11-03 04:02 - 00000910 _____ C:\ProgramData\Desktop\ Malwarebytes Anti-Malware .lnk
2013-10-31 10:02 - 2013-10-31 10:02 - 00000000 ____D C:\FRST

==================== One Month Modified Files and Folders =======

2013-11-03 09:10 - 2009-06-23 09:49 - 00000012 _____ C:\Windows\bthservsdp.dat
2013-11-03 09:10 - 2009-03-09 07:05 - 01737574 _____ C:\Windows\WindowsUpdate.log
2013-11-03 09:10 - 2006-11-02 07:42 - 00032586 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-11-03 09:10 - 2006-11-02 07:42 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-03 09:10 - 2006-11-02 07:22 - 00003744 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-03 09:10 - 2006-11-02 07:22 - 00003744 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-03 09:09 - 2013-11-03 09:09 - 00001117 _____ C:\Program Files (x86)\active-update.xml
2013-11-03 09:09 - 2013-11-03 09:09 - 00000057 _____ C:\Program Files (x86)\updates.xml
2013-11-03 09:09 - 2009-02-04 18:46 - 00618204 _____ C:\Windows\System32\perfh007.dat
2013-11-03 09:09 - 2009-02-04 18:46 - 00122636 _____ C:\Windows\System32\perfc007.dat
2013-11-03 09:09 - 2006-11-02 04:46 - 01418806 _____ C:\Windows\System32\PerfStringBackup.INI
2013-11-03 09:04 - 2013-11-03 08:27 - 00000000 ____D C:\Users\Underclass_Hero\Desktop\PC Reperatur
2013-11-03 09:02 - 2013-11-03 09:02 - 00008631 _____ C:\Users\Underclass_Hero\Desktop\JRT.txt
2013-11-03 09:00 - 2009-12-27 04:18 - 00000534 _____ C:\Windows\Tasks\1-Klick-Wartung.job
2013-11-03 08:52 - 2013-11-03 08:52 - 00000000 ____D C:\Windows\ERUNT
2013-11-03 08:46 - 2009-05-31 01:05 - 00000000 ___HD C:\Users\Underclass_Hero\Tracing
2013-11-03 08:44 - 2009-02-04 11:12 - 00000000 ____D C:\ProgramData\NVIDIA
2013-11-03 08:43 - 2012-05-15 14:17 - 00105390 _____ C:\aaw7boot.log
2013-11-03 08:40 - 2013-11-03 08:26 - 00000000 ____D C:\AdwCleaner
2013-11-03 08:30 - 2008-01-20 19:26 - 00823738 _____ C:\Windows\PFRO.log
2013-11-03 08:27 - 2012-05-10 12:10 - 00000000 ____D C:\ProgramData\Windows
2013-11-03 08:27 - 2010-09-13 12:23 - 00000000 ___HD C:\Users\Public\Documents\Server
2013-11-03 08:27 - 2010-09-13 12:23 - 00000000 ___HD C:\ProgramData\Documents\Server
2013-11-03 04:13 - 2013-11-03 04:13 - 00000000 ____D C:\Users\Underclass_Hero\AppData\Roaming\Malwarebytes
2013-11-03 04:08 - 2010-09-13 13:19 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-11-03 04:02 - 2013-11-03 04:02 - 00000910 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-11-03 04:02 - 2013-11-03 04:02 - 00000910 _____ C:\ProgramData\Desktop\ Malwarebytes Anti-Malware .lnk
2013-11-03 03:50 - 2012-05-15 12:37 - 00000408 _____ C:\Windows\Tasks\Ad-Aware Update (Weekly).job
2013-11-01 07:03 - 2011-11-02 10:10 - 00000064 _____ C:\Windows\SysWOW64\rp_stats.dat
2013-11-01 07:03 - 2011-11-02 10:10 - 00000044 _____ C:\Windows\SysWOW64\rp_rules.dat
2013-10-31 10:02 - 2013-10-31 10:02 - 00000000 ____D C:\FRST

Some content of TEMP:
====================
C:\Users\Underclass_Hero\AppData\Local\Temp\0005a775.exe
C:\Users\Underclass_Hero\AppData\Local\Temp\0026cc92.exe
C:\Users\Underclass_Hero\AppData\Local\Temp\Quarantine.exe
C:\Users\Underclass_Hero\AppData\Local\Temp\SecurityScan_Release.exe


==================== Known DLLs (Whitelisted) ================


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points  =========================

2
Restore point made on: 2013-11-02 01:06:50
Restore point made on: 2013-11-03 04:28:09

==================== Memory info =========================== 

Percentage of memory in use: 14%
Total physical RAM: 6142.33 MB
Available physical RAM: 5275.79 MB
Total Pagefile: 5712.5 MB
Available Pagefile: 5254.14 MB
Total Virtual: 8192 MB
Available Virtual: 8191.89 MB

==================== Drives ================================

Drive c: (HP) (Fixed) (Total:582.33 GB) (Free:252.74 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (FACTORY_IMAGE) (Fixed) (Total:13.84 GB) (Free:1.91 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive e: (HP2) (Fixed) (Total:596.17 GB) (Free:191.04 GB) NTFS
Drive f: (DIR-615) (CDROM) (Total:0.05 GB) (Free:0 GB) UDF
Drive g: (USB DISK) (Removable) (Total:0.94 GB) (Free:0.91 GB) FAT32
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 596 GB) (Disk ID: 1549F232)
Partition 1: (Active) - (Size=582 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=14 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 596 GB) (Disk ID: D2921899)
Partition 1: (Not Active) - (Size=596 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (MBR Code: Windows XP) (Size: 968 MB) (Disk ID: C3072E18)
Partition 1: (Active) - (Size=967 MB) - (Type=0B)


LastRegBack: 2013-11-03 09:10

==================== End Of Log ============================

--- --- ---

LG

weißer Bildschirm nach Systemstart

Log-Analyse und Auswertung: weißer Bildschirm nach Systemstart

weißer Bildschirm nach Systemstart

Ähnliche Themen: weißer Bildschirm nach Systemstart