Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Windows startet-Desktop und Taskleiste leer

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

Antwort
Alt 03.11.2013, 20:35   #1
MKK
 
Windows startet-Desktop und Taskleiste leer - Standard

Windows startet-Desktop und Taskleiste leer



Schritt 3 ESET

Code:
ATTFilter
ESETSmartInstaller@High as downloader log:
all ok
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=45769097e25e5745ab1c8c3a4b2ea801
# engine=15736
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-11-03 07:24:01
# local_time=2013-11-03 08:24:01 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.0.6001 NT Service Pack 1
# compatibility_mode=5892 16776574 100 100 7863098 221039369 0 0
# scanned=111800
# found=0
# cleaned=0
# scan_time=5652
         
Schritt 4
FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 31-10-2013
Ran by MK (administrator) on MK-PC on 03-11-2013 20:34:12
Running from C:\Users\MK\Desktop
Microsoft® Windows Vista™ Home Premium  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 7
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(ATI Technologies Inc.) C:\Windows\system32\Ati2evxx.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
(ATI Technologies Inc.) C:\Windows\system32\Ati2evxx.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Facebook Inc.) C:\Users\MK\AppData\Local\Facebook\Update\FacebookUpdate.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe
(Zhorn Software) C:\Program Files\Stickies\stickies.exe
(Realtek Semiconductor Corp.) C:\Users\MK\AppData\Local\Temp\RtkBtMnt.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\system32\wuauclt.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [61440 2009-01-27] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [6957600 2009-03-10] (Realtek Semiconductor)
HKLM\...\Run: [Skytel] - C:\Program Files\Realtek\Audio\HDA\SkyTel.exe [1833504 2009-03-10] (Realtek Semiconductor Corp.)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKCU\...\Run: [Facebook Update] - C:\Users\MK\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2012-07-12] (Facebook Inc.)
HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [17418928 2012-07-13] (Skype Technologies S.A.)
HKCU\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\wmpnscfg.exe [202240 2008-01-21] (Microsoft Corporation)
HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\Default User\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
Startup: C:\Users\MK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
Startup: C:\Users\MK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Stickies.lnk
ShortcutTarget: Stickies.lnk -> C:\Program Files\Stickies\stickies.exe (Zhorn Software)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Sign In
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - No Name - !{98889811-442D-49dd-99D7-DC866BE87DBC} -  No File
DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} https://juniper.net/dana-cached/sc/JuniperSetupClient.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 193.189.244.202 193.189.244.194

FireFox:
========
FF ProfilePath: C:\Users\MK\AppData\Roaming\Mozilla\Firefox\Profiles\vjh2equ8.default
FF Homepage: Google
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @java.com/DTPlugin,version=10.40.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\MK\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF SearchPlugin: C:\Users\MK\AppData\Roaming\Mozilla\Firefox\Profiles\vjh2equ8.default\searchplugins\cafeuni.xml
FF SearchPlugin: C:\Users\MK\AppData\Roaming\Mozilla\Firefox\Profiles\vjh2equ8.default\searchplugins\englische-ergebnisse.xml
FF SearchPlugin: C:\Users\MK\AppData\Roaming\Mozilla\Firefox\Profiles\vjh2equ8.default\searchplugins\gmx-suche.xml
FF SearchPlugin: C:\Users\MK\AppData\Roaming\Mozilla\Firefox\Profiles\vjh2equ8.default\searchplugins\lastminute.xml
FF SearchPlugin: C:\Users\MK\AppData\Roaming\Mozilla\Firefox\Profiles\vjh2equ8.default\searchplugins\webde-suche.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
FF Extension: toolbar - C:\Users\MK\AppData\Roaming\Mozilla\Firefox\Profiles\vjh2equ8.default\Extensions\toolbar@web.de.xpi
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

========================== Services (Whitelisted) =================

R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [235216 2013-09-06] (McAfee, Inc.)
R2 Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3064000 2012-10-02] (Skype Technologies S.A.)
S2 EvtEng; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [x]
S2 RegSrvc; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [x]

==================== Drivers (Whitelisted) ====================

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
R3 RTHDMIAzAudService; C:\Windows\System32\drivers\RtHDMIV.sys [153952 2009-02-20] (Realtek Semiconductor Corp.)
S3 U6000ALL; C:\Windows\System32\DRIVERS\U6000ALL.sys [230784 2007-07-13] ()
S0 51817044; system32\drivers\82296768.sys [x]
U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-21] (Microsoft Corporation)
S3 catchme; \??\C:\Users\MK\AppData\Local\Temp\catchme.sys [x]
S2 DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys [x]
S0 dvymu; System32\drivers\vkiekgwf.sys [x]
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]
S2 SSPORT; \??\C:\Windows\system32\Drivers\SSPORT.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-03 18:42 - 2013-11-03 18:47 - 02347384 _____ (ESET) C:\Users\MK\Downloads\esetsmartinstaller_enu(1).exe
2013-11-03 18:27 - 2013-11-03 18:27 - 00000816 _____ C:\Users\MK\Desktop\Fixlist.txt
2013-11-03 18:23 - 2013-11-03 18:23 - 00023563 _____ C:\Users\MK\Downloads\FRST.txt
2013-11-03 16:52 - 2013-11-03 16:52 - 00023009 _____ C:\Users\MK\Desktop\2. FRST.txt
2013-11-03 16:48 - 2013-11-03 16:48 - 01089445 _____ (Farbar) C:\Users\MK\Downloads\FRST(1).exe
2013-11-03 16:38 - 2013-11-03 16:38 - 00009652 _____ C:\ComboFix.txt
2013-11-03 16:27 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2013-11-03 16:27 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2013-11-03 16:27 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-11-03 16:27 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-11-03 16:27 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-11-03 16:27 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2013-11-03 16:27 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2013-11-03 16:27 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2013-11-03 16:15 - 2013-11-03 16:38 - 00000000 ____D C:\Qoobox
2013-11-03 16:15 - 2013-11-03 16:37 - 00000000 ____D C:\Windows\erdnt
2013-11-03 16:10 - 2013-11-03 16:12 - 05143677 ____R (Swearware) C:\Users\MK\Desktop\ComboFix.exe
2013-11-03 16:09 - 2013-11-03 16:09 - 00034371 _____ C:\Users\MK\Desktop\AdwCleaner[R0].txt
2013-11-03 16:09 - 2013-11-03 16:09 - 00034307 _____ C:\Users\MK\Desktop\AdwCleaner[S0].txt
2013-11-03 15:42 - 2013-11-03 18:00 - 00000000 ____D C:\AdwCleaner
2013-11-03 15:41 - 2013-11-03 15:41 - 01060070 _____ C:\Users\MK\Desktop\adwcleaner.exe
2013-11-03 13:41 - 2013-11-03 13:41 - 00026188 _____ C:\Users\MK\Desktop\Gmer.log
2013-11-03 11:31 - 2013-11-03 11:31 - 00377856 _____ C:\Users\MK\Downloads\gmer_2.1.19163.exe
2013-11-03 11:30 - 2013-11-03 11:30 - 00017886 _____ C:\Users\MK\Desktop\Addition.txt
2013-11-03 11:24 - 2013-11-03 11:26 - 00017886 _____ C:\Users\MK\Downloads\Addition.txt
2013-11-03 11:23 - 2013-11-03 11:23 - 01089445 _____ (Farbar) C:\Users\MK\Desktop\FRST.exe
2013-11-03 11:23 - 2013-11-03 11:23 - 00000000 ____D C:\FRST
2013-11-03 11:21 - 2013-11-03 11:21 - 00000000 _____ C:\Users\MK\defogger_reenable
2013-11-03 11:20 - 2013-11-03 11:20 - 00050477 _____ C:\Users\MK\Downloads\Defogger.exe
2013-11-03 10:52 - 2013-11-03 10:52 - 00000906 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-11-03 10:52 - 2013-11-03 10:52 - 00000000 ____D C:\Users\MK\AppData\Roaming\Malwarebytes
2013-11-03 10:52 - 2013-11-03 10:52 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-11-03 10:52 - 2013-11-03 10:52 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-11-03 10:52 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-11-03 10:50 - 2013-11-03 10:51 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\MK\Downloads\mbam-setup-1.75.0.1300.exe
2013-11-03 10:24 - 2013-11-03 10:24 - 00000000 ____D C:\Program Files\ESET
2013-11-03 10:23 - 2013-11-03 10:24 - 02347384 _____ (ESET) C:\Users\MK\Downloads\esetsmartinstaller_enu.exe
2013-11-03 10:10 - 2013-11-03 10:10 - 00000000 ____D C:\TDSSKiller_Quarantine
2013-11-03 10:07 - 2013-11-03 10:08 - 02237968 _____ (Kaspersky Lab ZAO) C:\Users\MK\Downloads\tdsskiller.exe
2013-11-02 18:29 - 2013-11-02 18:29 - 104684788 _____ C:\Windows\system32\③縕ᰤŽ
2013-11-01 13:47 - 2013-11-01 13:47 - 00915368 _____ (Oracle Corporation) C:\Users\MK\Downloads\jxpiinstall(5).exe
2013-11-01 13:36 - 2013-11-01 13:36 - 00915368 _____ (Oracle Corporation) C:\Users\MK\Downloads\jxpiinstall(4).exe
2013-11-01 13:35 - 2013-11-01 13:35 - 00915368 _____ (Oracle Corporation) C:\Users\MK\Downloads\jxpiinstall(3).exe
2013-10-31 12:43 - 2013-10-31 12:43 - 00000000 ____D C:\Users\MK\AppData\Local\Google
2013-10-27 16:22 - 2013-10-27 16:22 - 103334033 _____ C:\Windows\system32\犳᭄*
2013-10-15 17:56 - 2013-10-15 17:56 - 101148298 _____ C:\Windows\system32\몘鮹᭄“
2013-10-15 16:46 - 2013-10-15 16:46 - 00000000 ____D C:\ProgramData\Oracle
2013-10-15 16:46 - 2013-10-15 16:46 - 00000000 ____D C:\Program Files\Common Files\Java
2013-10-15 16:46 - 2013-10-15 16:45 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-10-15 16:45 - 2013-10-15 16:45 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-10-15 16:45 - 2013-10-15 16:45 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-10-15 16:45 - 2013-10-15 16:45 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-10-15 16:45 - 2013-10-15 16:45 - 00000000 ____D C:\Program Files\Java
2013-10-15 16:41 - 2013-10-15 16:41 - 00913832 _____ (Oracle Corporation) C:\Users\MK\Downloads\jxpiinstall(2).exe
2013-10-06 15:14 - 2013-10-06 15:17 - 00000000 ____D C:\Users\MK\Desktop\Islam. Lit
2013-10-05 10:41 - 2013-10-05 10:41 - 00000000 ____D C:\ProgramData\䇈ƽ㹸ƽÄƽ㋘ƽ8520-1533-40C5-AD09-953C574F14BCÄƽ㞨ƽ
2013-10-04 22:03 - 2013-10-04 22:03 - 00000000 ____D C:\Users\MK\AppData\Local\BeamriseUninstall

==================== One Month Modified Files and Folders =======

2013-11-03 20:28 - 2008-01-21 02:35 - 01711480 _____ C:\Windows\WindowsUpdate.log
2013-11-03 18:47 - 2013-11-03 18:42 - 02347384 _____ (ESET) C:\Users\MK\Downloads\esetsmartinstaller_enu(1).exe
2013-11-03 18:40 - 2008-01-21 08:16 - 01445310 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-03 18:36 - 2008-01-21 03:47 - 00216432 _____ C:\Windows\PFRO.log
2013-11-03 18:36 - 2006-11-02 13:47 - 00004192 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-03 18:36 - 2006-11-02 13:47 - 00004192 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-03 18:27 - 2013-11-03 18:27 - 00000816 _____ C:\Users\MK\Desktop\Fixlist.txt
2013-11-03 18:23 - 2013-11-03 18:23 - 00023563 _____ C:\Users\MK\Downloads\FRST.txt
2013-11-03 18:00 - 2013-11-03 15:42 - 00000000 ____D C:\AdwCleaner
2013-11-03 17:50 - 2011-09-30 15:44 - 00001356 _____ C:\Users\MK\AppData\Local\d3d9caps.dat
2013-11-03 16:52 - 2013-11-03 16:52 - 00023009 _____ C:\Users\MK\Desktop\2. FRST.txt
2013-11-03 16:48 - 2013-11-03 16:48 - 01089445 _____ (Farbar) C:\Users\MK\Downloads\FRST(1).exe
2013-11-03 16:38 - 2013-11-03 16:38 - 00009652 _____ C:\ComboFix.txt
2013-11-03 16:38 - 2013-11-03 16:15 - 00000000 ____D C:\Qoobox
2013-11-03 16:38 - 2006-11-02 12:18 - 00000000 __RHD C:\Users\Default
2013-11-03 16:38 - 2006-11-02 12:18 - 00000000 ___RD C:\Users\Public
2013-11-03 16:37 - 2013-11-03 16:15 - 00000000 ____D C:\Windows\erdnt
2013-11-03 16:36 - 2006-11-02 11:23 - 00000215 _____ C:\Windows\system.ini
2013-11-03 16:35 - 2011-09-30 15:44 - 00000000 ____D C:\Users\MK
2013-11-03 16:22 - 2013-08-06 05:53 - 00000000 ____D C:\ProgramData\Avira
2013-11-03 16:12 - 2013-11-03 16:10 - 05143677 ____R (Swearware) C:\Users\MK\Desktop\ComboFix.exe
2013-11-03 16:09 - 2013-11-03 16:09 - 00034371 _____ C:\Users\MK\Desktop\AdwCleaner[R0].txt
2013-11-03 16:09 - 2013-11-03 16:09 - 00034307 _____ C:\Users\MK\Desktop\AdwCleaner[S0].txt
2013-11-03 15:46 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\Resources
2013-11-03 15:44 - 2013-01-15 09:29 - 00000000 ____D C:\ProgramData\Uniblue
2013-11-03 15:41 - 2013-11-03 15:41 - 01060070 _____ C:\Users\MK\Desktop\adwcleaner.exe
2013-11-03 13:41 - 2013-11-03 13:41 - 00026188 _____ C:\Users\MK\Desktop\Gmer.log
2013-11-03 11:31 - 2013-11-03 11:31 - 00377856 _____ C:\Users\MK\Downloads\gmer_2.1.19163.exe
2013-11-03 11:30 - 2013-11-03 11:30 - 00017886 _____ C:\Users\MK\Desktop\Addition.txt
2013-11-03 11:26 - 2013-11-03 11:24 - 00017886 _____ C:\Users\MK\Downloads\Addition.txt
2013-11-03 11:23 - 2013-11-03 11:23 - 01089445 _____ (Farbar) C:\Users\MK\Desktop\FRST.exe
2013-11-03 11:23 - 2013-11-03 11:23 - 00000000 ____D C:\FRST
2013-11-03 11:21 - 2013-11-03 11:21 - 00000000 _____ C:\Users\MK\defogger_reenable
2013-11-03 11:21 - 2011-10-13 09:30 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-11-03 11:20 - 2013-11-03 11:20 - 00050477 _____ C:\Users\MK\Downloads\Defogger.exe
2013-11-03 10:52 - 2013-11-03 10:52 - 00000906 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-11-03 10:52 - 2013-11-03 10:52 - 00000000 ____D C:\Users\MK\AppData\Roaming\Malwarebytes
2013-11-03 10:52 - 2013-11-03 10:52 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-11-03 10:52 - 2013-11-03 10:52 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-11-03 10:51 - 2013-11-03 10:50 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\MK\Downloads\mbam-setup-1.75.0.1300.exe
2013-11-03 10:24 - 2013-11-03 10:24 - 00000000 ____D C:\Program Files\ESET
2013-11-03 10:24 - 2013-11-03 10:23 - 02347384 _____ (ESET) C:\Users\MK\Downloads\esetsmartinstaller_enu.exe
2013-11-03 10:10 - 2013-11-03 10:10 - 00000000 ____D C:\TDSSKiller_Quarantine
2013-11-03 10:08 - 2013-11-03 10:07 - 02237968 _____ (Kaspersky Lab ZAO) C:\Users\MK\Downloads\tdsskiller.exe
2013-11-02 18:29 - 2013-11-02 18:29 - 104684788 _____ C:\Windows\system32\③縕ᰤŽ
2013-11-01 20:12 - 2012-08-08 13:05 - 00000000 ____D C:\Users\MK\AppData\Roaming\Skype
2013-11-01 19:45 - 2011-10-06 10:39 - 00032768 _____ C:\Users\MK\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-11-01 19:40 - 2012-10-31 10:41 - 00000000 ____D C:\Users\MK\AppData\Roaming\stickies
2013-11-01 19:14 - 2011-12-13 09:27 - 00000000 ____D C:\Users\MK\AppData\Roaming\vlc
2013-11-01 14:40 - 2012-05-02 20:46 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-11-01 14:40 - 2012-05-02 20:46 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-01 14:40 - 2011-10-13 20:18 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-11-01 13:47 - 2013-11-01 13:47 - 00915368 _____ (Oracle Corporation) C:\Users\MK\Downloads\jxpiinstall(5).exe
2013-11-01 13:36 - 2013-11-01 13:36 - 00915368 _____ (Oracle Corporation) C:\Users\MK\Downloads\jxpiinstall(4).exe
2013-11-01 13:35 - 2013-11-01 13:35 - 00915368 _____ (Oracle Corporation) C:\Users\MK\Downloads\jxpiinstall(3).exe
2013-10-31 12:43 - 2013-10-31 12:43 - 00000000 ____D C:\Users\MK\AppData\Local\Google
2013-10-30 20:23 - 2012-01-04 09:58 - 00000000 ____D C:\Users\MK\Desktop\Gesundheit
2013-10-27 16:22 - 2013-10-27 16:22 - 103334033 _____ C:\Windows\system32\犳᭄*
2013-10-20 21:36 - 2011-10-26 19:15 - 00000000 ____D C:\Users\MK\Desktop\Offizielles
2013-10-20 20:33 - 2011-10-13 20:16 - 00000000 ____D C:\Program Files\McAfee Security Scan
2013-10-15 17:56 - 2013-10-15 17:56 - 101148298 _____ C:\Windows\system32\몘鮹᭄“
2013-10-15 16:46 - 2013-10-15 16:46 - 00000000 ____D C:\ProgramData\Oracle
2013-10-15 16:46 - 2013-10-15 16:46 - 00000000 ____D C:\Program Files\Common Files\Java
2013-10-15 16:45 - 2013-10-15 16:46 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-10-15 16:45 - 2013-10-15 16:45 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-10-15 16:45 - 2013-10-15 16:45 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-10-15 16:45 - 2013-10-15 16:45 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-10-15 16:45 - 2013-10-15 16:45 - 00000000 ____D C:\Program Files\Java
2013-10-15 16:45 - 2013-03-25 22:33 - 00868264 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll
2013-10-15 16:45 - 2011-10-14 05:09 - 00790440 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll
2013-10-15 16:41 - 2013-10-15 16:41 - 00913832 _____ (Oracle Corporation) C:\Users\MK\Downloads\jxpiinstall(2).exe
2013-10-09 02:05 - 2013-04-24 10:27 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-10-06 15:20 - 2012-08-09 00:12 - 00000000 ____D C:\Users\MK\Desktop\Uni OS
2013-10-06 15:17 - 2013-10-06 15:14 - 00000000 ____D C:\Users\MK\Desktop\Islam. Lit
2013-10-06 15:09 - 2012-04-27 18:41 - 00000000 ____D C:\Users\MK\Desktop\Sufismus
2013-10-05 10:41 - 2013-10-05 10:41 - 00000000 ____D C:\ProgramData\䇈ƽ㹸ƽÄƽ㋘ƽ8520-1533-40C5-AD09-953C574F14BCÄƽ㞨ƽ
2013-10-04 22:03 - 2013-10-04 22:03 - 00000000 ____D C:\Users\MK\AppData\Local\BeamriseUninstall

Some content of TEMP:
====================
C:\Users\MK\AppData\Local\temp\RtkBtMnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-03 18:46

==================== End Of Log ============================
         
--- --- ---

--- --- ---

Antwort

Themen zu Windows startet-Desktop und Taskleiste leer
bandoo, branding, farbar, farbar recovery scan tool, newtab, ntdll.dll, plug-in, pup.datamngr, pup.optional.babylon.a, pup.optional.babylontoolbar.a, pup.optional.bandoo.a, pup.optional.conduit.a, pup.optional.crossrider, pup.optional.crossrider.a, pup.optional.datamngr.a, pup.optional.delta.a, pup.optional.desk365.a, pup.optional.domaiq.a, pup.optional.iminent.a, pup.optional.installcore.a, pup.optional.lyricsad, pup.optional.minibar.a, pup.optional.optimzerpro.a, pup.optional.plushd.a, pup.optional.quickshare.a, pup.optional.searchqu, pup.optional.somoto, pup.optional.somoto.a, pup.optional.wsys.a, smartbar, tracker, trojan.banker, vcredist




Ähnliche Themen: Windows startet-Desktop und Taskleiste leer


  1. Windows 7 nach Start Blackscreen, keine Taskleiste , kein desktop NUR Arbeitsplatz offen
    Plagegeister aller Art und deren Bekämpfung - 03.12.2014 (3)
  2. Windows 7: Nach Anmeldung schwarzer Desktop und fehlende Taskleiste
    Log-Analyse und Auswertung - 12.10.2014 (13)
  3. Windows 7 Desktop wird leer und löscht alle Dateien auf dem PC
    Alles rund um Windows - 27.12.2013 (4)
  4. Windows 7: Desktop leer, Virenfund
    Log-Analyse und Auswertung - 29.11.2013 (3)
  5. Windows 7: startet und bleibt mit grauem Bildschirm leer, komme nicht weiter.
    Plagegeister aller Art und deren Bekämpfung - 16.11.2013 (6)
  6. Windows 7: Taskleiste bzw. Desktop wird regelmäßig gelockt (PUP.Optional.Somoto.A)
    Log-Analyse und Auswertung - 23.09.2013 (13)
  7. Windows 8: Desktop schwarz, Taskleiste leer, Explorer nicht ausführbar
    Alles rund um Windows - 14.09.2013 (3)
  8. Windows 7 Ultimate alle Desktop Folder waren ploetzlich leer
    Log-Analyse und Auswertung - 19.05.2013 (0)
  9. Windows 7 startet und bleib mit einem grauen Bildschirm leer vielleicht GVU Trojaner
    Plagegeister aller Art und deren Bekämpfung - 20.01.2013 (25)
  10. Nach obskuren Festplattenmeldungen ist Desktop leer, Benutzerdaten verschwunden, Taskleiste leer
    Plagegeister aller Art und deren Bekämpfung - 07.11.2012 (1)
  11. Desktop leer, Taskleiste und Taskmanager weg
    Log-Analyse und Auswertung - 20.04.2012 (27)
  12. Desktop leer, Taskleiste weg und TaskManager fehlt!
    Log-Analyse und Auswertung - 26.03.2012 (5)
  13. Gema Trojaner Win XP - Desktop leer, Taskleiste weg
    Plagegeister aller Art und deren Bekämpfung - 20.01.2012 (49)
  14. HDD Fehler, Desktop leer, Windows Rescue...
    Plagegeister aller Art und deren Bekämpfung - 24.06.2011 (34)
  15. Windows system alert - Desktop schwarz - explorer und Startmenue fast leer
    Plagegeister aller Art und deren Bekämpfung - 31.05.2011 (32)
  16. Windwos Explorer startet nicht — Fehlende Taskleiste — Blankes Desktop
    Log-Analyse und Auswertung - 21.12.2007 (17)
  17. 0k mpg Datei auf Desktop - windows explorer bleibt leer
    Plagegeister aller Art und deren Bekämpfung - 25.10.2007 (1)

Zum Thema Windows startet-Desktop und Taskleiste leer - Schritt 3 ESET Code: Alles auswählen Aufklappen ATTFilter ESETSmartInstaller@High as downloader log: all ok ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=45769097e25e5745ab1c8c3a4b2ea801 - Windows startet-Desktop und Taskleiste leer...
Archiv
Du betrachtest: Windows startet-Desktop und Taskleiste leer auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.