|
Log-Analyse und Auswertung: Grauer Bildschirm bei Windows Start (Win 7)Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
13.11.2013, 01:34 | #1 |
| Grauer Bildschirm bei Windows Start (Win 7) Hallo, seitdem ich gestern Abend meinen Rechner neugestartet habe erscheint immer ein Grauer Bildschirm beim Start und ich bin nicht in der Lage etwas zu machen, nach langer suche kam ich zu eurem Forum und dachte mir das ihr mich hoffentlich helfen könnte, einen Suchlauf mit frst habe ich bereits gemacht und den Log findet ihr in den Anhängen, danke im Vorraus ! Achja und der abgesicherte Modus sowie der abgesicherter Modus mit Netzwerk funktioniert. Hier nochmal das Log als Code FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-11-2013 01 Ran by SYSTEM on MININT-CH471KH on 13-11-2013 01:21:02 Running from E:\ Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Recovery The current controlset is ControlSet001 ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log. ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12558440 2011-07-07] (Realtek Semiconductor) HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware ] - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent [532040 2013-04-04] (Malwarebytes Corporation) HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware (cleanup)] - rundll32.exe "C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\cleanup.dll",ProcessCleanupScript [1127496 2013-04-04] (Malwarebytes Corporation) HKLM-x32\...\Run: [VirtualCloneDrive] - C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [89456 2011-03-07] (Elaborate Bytes AG) HKLM-x32\...\Run: [SSDMonitor] - C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe [103896 2011-10-25] (PC Tools) HKLM-x32\...\Run: [amd_dc_opt] - C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD) HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642656 2013-03-28] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKU\Marcel\...\Run: [HW_OPENEYE_OUC_Telekom Internet Manager] - C:\Program Files (x86)\Telekom\InternetManager_H\UpdateDog\ouc.exe [110592 2009-12-31] (Huawei Technologies Co., Ltd.) HKU\Marcel\...\Run: [Facebook Update] - C:\Users\Marcel\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2012-07-28] (Facebook Inc.) HKU\Marcel\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1820584 2013-10-30] (Valve Corporation) HKU\Marcel\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [19875432 2013-06-21] (Skype Technologies S.A.) HKU\Marcel\...\Run: [Spotify Web Helper] - C:\Users\Marcel\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1140736 2013-10-25] (Spotify Ltd) HKU\Marcel\...\Run: [Akamai NetSession Interface] - C:\Users\Marcel\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.) HKU\Marcel\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd) HKU\Marcel\...\RunOnce: [Report] - C:\AdwCleaner\AdwCleaner[S0].txt [57411 2013-11-13] () AppInit_DLLs: [0 ] () IMEO\desura.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe" IMEO\desura_uninstaller.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe" IMEO\dllfixer.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe" IMEO\facebookmessenger.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe" IMEO\helplauncher.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe" IMEO\quickstart.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe" IMEO\sbase.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe" IMEO\scalc.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe" IMEO\sdraw.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe" IMEO\simpress.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe" IMEO\smath.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe" IMEO\soffice.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe" IMEO\swriter.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe" IMEO\unins000.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe" IMEO\usbconfig.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe" IMEO\vcd-uninst.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe" IMEO\vcdmount.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe" IMEO\vcdprefs.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe" Startup: C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip () Startup: C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> (No File) Startup: C:\Users\Marcel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () BootExecute: autocheck autochk * bootdelete ==================== Services (Whitelisted) ================= S2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2013-03-28] (Advanced Micro Devices, Inc.) S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2013-05-11] () S2 DCService.exe; C:\ProgramData\DatacardService\DCService.exe [229376 2010-08-19] () S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [288776 2013-09-06] (McAfee, Inc.) S4 Mobile Broadband HL Service; C:\ProgramData\MobileBrServ\mbbservice.exe [232288 2012-03-12] () S4 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] () S2 PCToolsSSDMonitorSvc; C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe [793048 2011-10-25] (PC Tools) S2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-06-16] () S4 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [117264 2010-06-25] (CACE Technologies, Inc.) S2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2100024 2013-08-30] (TuneUp Software) S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [759192 2013-09-03] (Tunngle.net GmbH) S4 UsbService; C:\Program Files\Eltima Software\USB Network Gate\UsbService64.exe [3287856 2012-09-13] (ELTIMA Software) ==================== Drivers (Whitelisted) ==================== S2 AODDriver4.01; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [57472 2012-04-09] (Advanced Micro Devices) S2 AODDriver4.2; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [57472 2012-04-09] (Advanced Micro Devices) S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2011-11-26] () S0 BMLoad; C:\Windows\System32\drivers\BMLoad.sys [16512 2009-12-15] (Bytemobile, Inc.) S1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2013-11-04] (Disc Soft Ltd) S3 E100B; C:\Windows\System32\DRIVERS\efe5b32e.sys [192256 2009-06-10] (Intel Corporation) S3 ELTIMA_USB_HUB_FILTER; C:\Program Files\Eltima Software\USB Network Gate\drv\NT6x64\fusbhub.sys [78128 2012-09-13] (ELTIMA Software) S3 eustub; C:\Windows\System32\DRIVERS\eusbstub.sys [16176 2012-09-13] (ELTIMA Software) S3 hwusbdev; C:\Windows\System32\DRIVERS\ewusbdev.sys [114304 2009-10-12] (Huawei Technologies Co., Ltd.) S2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2011-11-26] () S2 NPF; C:\Windows\System32\drivers\npf.sys [35344 2010-06-25] (CACE Technologies, Inc.) S3 nvamacpi; C:\Windows\system32\drivers\NVAMACPI.sys [28192 2009-07-17] (NVIDIA Corporation) S2 SecDrv; C:\Windows\SysWow64\drivers\SECDRV.SYS [163644 2013-06-23] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) S3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net) S1 tcpipBM; C:\Windows\system32\drivers\tcpipBM.sys [39552 2009-12-15] (Bytemobile, Inc.) S3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-08-21] (TuneUp Software) S3 vuhub; C:\Windows\System32\DRIVERS\vuhub.sys [67376 2012-09-13] (ELTIMA Software) S5 ewusbnet; C:\Windows\System32\Drivers\ewusbnet.sys [256000 2010-08-31] (Huawei Technologies Co., Ltd.) S3 motmodem; system32\DRIVERS\motmodem.sys [x] S3 X6va007; \??\C:\Users\Marcel\AppData\Local\Temp\00798D1.tmp [x] S3 X6va008; \??\C:\Windows\SysWOW64\Drivers\X6va008 [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-11-13 01:08 - 2013-11-13 01:08 - 00000000 _____ C:\ProgramData\rebootpending.txt 2013-11-13 01:01 - 2013-11-13 01:01 - 00012872 _____ (SurfRight B.V.) C:\Windows\System32\bootdelete.exe 2013-11-13 01:01 - 2013-11-13 01:01 - 00000286 _____ C:\Windows\System32\bootdelete.lst 2013-11-13 00:55 - 2013-11-13 01:02 - 00000000 ____D C:\ProgramData\HitmanPro 2013-11-13 00:41 - 2013-11-13 00:47 - 00000000 ____D C:\AdwCleaner 2013-11-13 00:41 - 2013-11-13 00:41 - 01085542 _____ C:\Users\Marcel\Downloads\adwcleaner.exe 2013-11-13 00:25 - 2013-11-13 00:25 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Marcel\Downloads\mbam-setup-1.75.0.1300.exe 2013-11-13 00:16 - 2013-11-13 00:16 - 00000000 ____D C:\FRST 2013-11-12 23:49 - 2013-11-12 23:49 - 00000000 ____D C:\Windows\LastGood 2013-11-12 23:28 - 2013-11-12 23:28 - 00000000 ____D C:\Windows\LastGood.Tmp 2013-11-10 21:25 - 2013-11-10 21:25 - 00000945 _____ C:\Users\Marcel\Desktop\Open Broadcaster Software.lnk 2013-11-10 21:25 - 2013-11-10 21:25 - 00000000 ____D C:\Users\Marcel\AppData\Roaming\OBS 2013-11-10 21:25 - 2013-11-10 21:25 - 00000000 ____D C:\Program Files\OBS 2013-11-10 21:25 - 2013-11-10 21:25 - 00000000 ____D C:\Program Files (x86)\OBS 2013-11-10 21:24 - 2013-11-10 21:24 - 07630870 _____ C:\Users\Marcel\Downloads\OBS_0_583b_Installer.exe 2013-11-09 22:24 - 2013-11-09 22:24 - 04413104 _____ (CCP hf.) C:\Users\Marcel\Downloads\EVE_Online_Installer_640633.exe 2013-11-09 15:44 - 2013-11-09 15:44 - 00000000 ____D C:\ProgramData\Oracle 2013-11-09 15:43 - 2013-10-08 07:50 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2013-11-09 15:43 - 2013-10-08 07:46 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2013-11-09 15:43 - 2013-10-08 07:46 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2013-11-09 15:43 - 2013-10-08 07:46 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2013-11-09 15:40 - 2013-11-09 15:43 - 00004886 _____ C:\Windows\SysWOW64\jupdate-1.7.0_45-b18.log 2013-11-09 15:32 - 2013-11-09 15:32 - 00915368 _____ (Oracle Corporation) C:\Users\Marcel\Downloads\jxpiinstall.exe 2013-11-09 15:28 - 2013-11-09 15:30 - 04897880 _____ (Adobe Systems Inc.) C:\Users\Marcel\Downloads\Shockwave_Installer_Slim.exe 2013-11-09 15:20 - 2013-11-09 15:20 - 00626688 _____ C:\Users\Marcel\Downloads\Detection.msi 2013-11-07 22:27 - 2013-11-07 22:51 - 00000000 ____D C:\Program Files (x86)\Hearthstone 2013-11-07 22:23 - 2013-11-07 22:23 - 05913048 _____ (Blizzard Entertainment) C:\Users\Marcel\Downloads\Hearthstone-Beta-Setup-deDE(1).exe 2013-11-06 06:20 - 2013-11-06 06:21 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-11-04 16:53 - 2013-11-04 16:54 - 00283064 _____ (Disc Soft Ltd) C:\Windows\System32\Drivers\dtsoftbus01.sys 2013-11-04 16:53 - 2013-11-04 16:53 - 00000000 ____D C:\Program Files (x86)\DAEMON Tools Lite 2013-11-04 16:44 - 2013-11-04 16:48 - 820998144 _____ C:\Users\Marcel\Documents\OfficeProfessionalPlus_x64_de-de.img 2013-11-04 16:44 - 2013-11-04 16:44 - 10025728 _____ (Akamai Technologies, Inc.) C:\Users\Marcel\Downloads\my_downloader_installer.exe 2013-11-04 16:44 - 2013-11-04 16:44 - 00000000 ____D C:\Users\Marcel\AppData\Local\Akamai 2013-11-01 20:45 - 2013-11-01 20:45 - 00000000 ____D C:\Users\Marcel\AppData\Local\Blizzard 2013-11-01 20:21 - 2013-11-01 20:21 - 05913048 _____ (Blizzard Entertainment) C:\Users\Marcel\Downloads\Hearthstone-Beta-Setup-deDE.exe 2013-10-28 21:26 - 2013-10-28 22:05 - 00000000 ____D C:\Program Files (x86)\NARUTO SHIPPUDEN Ultimate Ninja STORM 3 Full Burst 2013-10-27 19:19 - 2013-10-27 19:19 - 00000000 ____D C:\Users\Marcel\Documents\How To Survive Saves 2013-10-24 22:07 - 2013-10-29 19:53 - 00000000 ____D C:\Users\Marcel\Batman Arkham Origins 2013-10-24 21:02 - 2012-01-20 12:58 - 01386496 _____ (Microsoft Corporation) C:\Windows\System32\Msvbvm60.dll 2013-10-24 20:58 - 2013-10-24 20:59 - 50449456 _____ (Microsoft Corporation) C:\Users\Marcel\Downloads\dotNetFx40_Full_x86_x64.exe 2013-10-24 20:45 - 2013-10-24 20:45 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies 2013-10-24 19:34 - 2013-10-24 20:23 - 00000000 ____D C:\Program Files (x86)\Batman Arkham Origins 2013-10-24 18:31 - 2013-09-04 13:12 - 00343040 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbhub.sys 2013-10-24 18:31 - 2013-09-04 13:11 - 00325120 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbport.sys 2013-10-24 18:31 - 2013-09-04 13:11 - 00099840 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbccgp.sys 2013-10-24 18:31 - 2013-09-04 13:11 - 00052736 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbehci.sys 2013-10-24 18:31 - 2013-09-04 13:11 - 00030720 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbuhci.sys 2013-10-24 18:31 - 2013-09-04 13:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbohci.sys 2013-10-24 18:31 - 2013-09-04 13:11 - 00007808 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbd.sys 2013-10-22 15:01 - 2013-10-29 18:36 - 00000000 ____D C:\Users\Marcel\AppData\Roaming\.minecraft 2013-10-21 20:22 - 2013-10-21 20:22 - 00000000 ____D C:\Program Files (x86)\Galactic Cafe 2013-10-19 00:23 - 2013-10-19 00:23 - 00000000 ____D C:\Program Files (x86)\Viscera Cleanup Detail Shadow Warrior 2013-10-18 22:56 - 2013-11-12 22:57 - 00000000 ____D C:\Users\Marcel\AppData\Local\Battle.net 2013-10-18 22:56 - 2013-11-12 20:35 - 00000000 ____D C:\Program Files (x86)\Battle.net 2013-10-18 22:56 - 2013-10-18 22:58 - 00000000 ____D C:\Users\Marcel\AppData\Roaming\Battle.net 2013-10-18 22:56 - 2013-10-18 22:56 - 00000000 ____D C:\Users\Marcel\AppData\Local\Blizzard Entertainment 2013-10-18 20:35 - 2013-10-18 20:39 - 00000000 ____D C:\Program Files (x86)\Shadow Warrior 2013-10-18 20:28 - 2013-10-18 20:28 - 00000000 ____D C:\Users\Marcel\Documents\Shadow Warrior 2013-10-18 19:38 - 2013-10-29 20:59 - 00000000 ____D C:\Foul Play 2013-10-18 18:00 - 2013-10-18 18:00 - 00000000 ____D C:\Program Files (x86)\Subatomic Studios LLC 2013-10-15 19:17 - 2013-10-15 19:26 - 00000000 ____D C:\Program Files (x86)\The Wolf Among Us ==================== One Month Modified Files and Folders ======= 2013-11-13 01:12 - 2011-09-29 14:30 - 02012002 _____ C:\Windows\WindowsUpdate.log 2013-11-13 01:08 - 2013-11-13 01:08 - 00000000 _____ C:\ProgramData\rebootpending.txt 2013-11-13 01:02 - 2013-11-13 00:55 - 00000000 ____D C:\ProgramData\HitmanPro 2013-11-13 01:01 - 2013-11-13 01:01 - 00012872 _____ (SurfRight B.V.) C:\Windows\System32\bootdelete.exe 2013-11-13 01:01 - 2013-11-13 01:01 - 00000286 _____ C:\Windows\System32\bootdelete.lst 2013-11-13 01:01 - 2011-09-29 14:30 - 00000000 ____D C:\users\Marcel 2013-11-13 00:49 - 2013-09-04 19:35 - 00010875 _____ C:\Windows\setupact.log 2013-11-13 00:49 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-11-13 00:47 - 2013-11-13 00:41 - 00000000 ____D C:\AdwCleaner 2013-11-13 00:41 - 2013-11-13 00:41 - 01085542 _____ C:\Users\Marcel\Downloads\adwcleaner.exe 2013-11-13 00:37 - 2013-09-05 10:58 - 00252024 _____ C:\Windows\PFRO.log 2013-11-13 00:26 - 2012-02-02 23:12 - 00001119 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-11-13 00:26 - 2012-02-02 23:12 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-11-13 00:25 - 2013-11-13 00:25 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Marcel\Downloads\mbam-setup-1.75.0.1300.exe 2013-11-13 00:16 - 2013-11-13 00:16 - 00000000 ____D C:\FRST 2013-11-13 00:09 - 2011-04-12 08:43 - 00697090 _____ C:\Windows\System32\perfh007.dat 2013-11-13 00:09 - 2011-04-12 08:43 - 00148128 _____ C:\Windows\System32\perfc007.dat 2013-11-13 00:09 - 2009-07-14 06:13 - 01614112 _____ C:\Windows\System32\PerfStringBackup.INI 2013-11-12 23:49 - 2013-11-12 23:49 - 00000000 ____D C:\Windows\LastGood 2013-11-12 23:28 - 2013-11-12 23:28 - 00000000 ____D C:\Windows\LastGood.Tmp 2013-11-12 23:24 - 2012-05-05 21:45 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-11-12 23:24 - 2012-05-02 15:39 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-11-12 23:20 - 2012-06-03 01:22 - 00000000 ____D C:\Users\Marcel\AppData\Roaming\uTorrent 2013-11-12 23:02 - 2011-10-12 19:56 - 00000000 ____D C:\Users\Marcel\AppData\Roaming\Skype 2013-11-12 22:58 - 2013-06-11 22:33 - 00000000 ____D C:\Program Files (x86)\Steam 2013-11-12 22:57 - 2013-10-18 22:56 - 00000000 ____D C:\Users\Marcel\AppData\Local\Battle.net 2013-11-12 22:55 - 2011-10-01 21:48 - 00000000 ____D C:\Users\Marcel\Documents\My Games 2013-11-12 22:55 - 2011-07-26 06:40 - 01591070 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2013-11-12 21:25 - 2011-09-26 06:59 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2013-11-12 20:39 - 2013-09-15 21:55 - 00000000 ____D C:\Users\Marcel\AppData\Roaming\Dropbox 2013-11-12 20:35 - 2013-10-18 22:56 - 00000000 ____D C:\Program Files (x86)\Battle.net 2013-11-12 03:05 - 2011-10-12 16:38 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-11-12 01:40 - 2012-06-16 18:10 - 00000000 ___HD C:\Users\Marcel\AppData\Roaming\Spotify 2013-11-11 13:51 - 2012-06-16 18:10 - 00000000 ____D C:\Users\Marcel\AppData\Local\Spotify 2013-11-10 21:25 - 2013-11-10 21:25 - 00000945 _____ C:\Users\Marcel\Desktop\Open Broadcaster Software.lnk 2013-11-10 21:25 - 2013-11-10 21:25 - 00000000 ____D C:\Users\Marcel\AppData\Roaming\OBS 2013-11-10 21:25 - 2013-11-10 21:25 - 00000000 ____D C:\Program Files\OBS 2013-11-10 21:25 - 2013-11-10 21:25 - 00000000 ____D C:\Program Files (x86)\OBS 2013-11-10 21:24 - 2013-11-10 21:24 - 07630870 _____ C:\Users\Marcel\Downloads\OBS_0_583b_Installer.exe 2013-11-09 22:24 - 2013-11-09 22:24 - 04413104 _____ (CCP hf.) C:\Users\Marcel\Downloads\EVE_Online_Installer_640633.exe 2013-11-09 15:57 - 2011-10-26 22:07 - 00000000 ____D C:\Program Files (x86)\SystemRequirementsLab 2013-11-09 15:44 - 2013-11-09 15:44 - 00000000 ____D C:\ProgramData\Oracle 2013-11-09 15:43 - 2013-11-09 15:40 - 00004886 _____ C:\Windows\SysWOW64\jupdate-1.7.0_45-b18.log 2013-11-09 15:43 - 2011-09-29 16:27 - 00000000 ____D C:\Program Files (x86)\Java 2013-11-09 15:32 - 2013-11-09 15:32 - 00915368 _____ (Oracle Corporation) C:\Users\Marcel\Downloads\jxpiinstall.exe 2013-11-09 15:30 - 2013-11-09 15:28 - 04897880 _____ (Adobe Systems Inc.) C:\Users\Marcel\Downloads\Shockwave_Installer_Slim.exe 2013-11-09 15:20 - 2013-11-09 15:20 - 00626688 _____ C:\Users\Marcel\Downloads\Detection.msi 2013-11-07 22:51 - 2013-11-07 22:27 - 00000000 ____D C:\Program Files (x86)\Hearthstone 2013-11-07 22:23 - 2013-11-07 22:23 - 05913048 _____ (Blizzard Entertainment) C:\Users\Marcel\Downloads\Hearthstone-Beta-Setup-deDE(1).exe 2013-11-06 18:15 - 2012-11-03 17:49 - 00000073 _____ C:\Users\Marcel\Desktop\Neues Textdokument.txt 2013-11-06 06:21 - 2013-11-06 06:20 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-11-04 17:00 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared 2013-11-04 16:54 - 2013-11-04 16:53 - 00283064 _____ (Disc Soft Ltd) C:\Windows\System32\Drivers\dtsoftbus01.sys 2013-11-04 16:53 - 2013-11-04 16:53 - 00000000 ____D C:\Program Files (x86)\DAEMON Tools Lite 2013-11-04 16:48 - 2013-11-04 16:44 - 820998144 _____ C:\Users\Marcel\Documents\OfficeProfessionalPlus_x64_de-de.img 2013-11-04 16:44 - 2013-11-04 16:44 - 10025728 _____ (Akamai Technologies, Inc.) C:\Users\Marcel\Downloads\my_downloader_installer.exe 2013-11-04 16:44 - 2013-11-04 16:44 - 00000000 ____D C:\Users\Marcel\AppData\Local\Akamai 2013-11-02 10:18 - 2011-09-29 16:00 - 00000000 ____D C:\Users\Marcel\Desktop\Games 2013-11-01 23:19 - 2012-03-21 23:15 - 00000000 ____D C:\Users\Marcel\AppData\Roaming\vlc 2013-11-01 22:42 - 2013-03-16 02:14 - 00000000 ____D C:\Program Files (x86)\StarCraft II 2013-11-01 20:45 - 2013-11-01 20:45 - 00000000 ____D C:\Users\Marcel\AppData\Local\Blizzard 2013-11-01 20:21 - 2013-11-01 20:21 - 05913048 _____ (Blizzard Entertainment) C:\Users\Marcel\Downloads\Hearthstone-Beta-Setup-deDE.exe 2013-11-01 20:21 - 2012-04-23 23:30 - 00000000 ____D C:\Program Files (x86)\World of Warcraft 2013-10-31 17:42 - 2009-07-14 05:45 - 00021680 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-10-31 17:42 - 2009-07-14 05:45 - 00021680 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-10-31 17:32 - 2013-09-15 21:58 - 00000000 ___RD C:\Users\Marcel\Dropbox 2013-10-29 20:59 - 2013-10-18 19:38 - 00000000 ____D C:\Foul Play 2013-10-29 19:59 - 2013-07-14 06:22 - 00000000 ____D C:\Program Files (x86)\Sid Meier's Civilization V 2013-10-29 19:58 - 2013-08-20 14:21 - 00000000 ____D C:\Program Files (x86)\The Bureau 2013-10-29 19:54 - 2013-08-23 23:21 - 00000000 ____D C:\Program Files (x86)\Saints Row IV 2013-10-29 19:53 - 2013-10-24 22:07 - 00000000 ____D C:\Users\Marcel\Batman Arkham Origins 2013-10-29 19:53 - 2013-09-03 19:33 - 00000000 ____D C:\Program Files (x86)\Total War ROME II 2013-10-29 18:36 - 2013-10-22 15:01 - 00000000 ____D C:\Users\Marcel\AppData\Roaming\.minecraft 2013-10-28 22:41 - 2012-06-03 18:36 - 00000000 ____D C:\Games 2013-10-28 22:40 - 2013-04-25 11:49 - 00000000 ____D C:\Program Files (x86)\Don't Starve 2013-10-28 22:05 - 2013-10-28 21:26 - 00000000 ____D C:\Program Files (x86)\NARUTO SHIPPUDEN Ultimate Ninja STORM 3 Full Burst 2013-10-27 19:19 - 2013-10-27 19:19 - 00000000 ____D C:\Users\Marcel\Documents\How To Survive Saves 2013-10-26 12:49 - 2011-10-08 09:39 - 00000000 ____D C:\Users\Marcel\AppData\Local\SKIDROW 2013-10-25 11:03 - 2012-09-14 16:17 - 00000000 ____D C:\Users\Marcel\Documents\WB Games 2013-10-24 20:59 - 2013-10-24 20:58 - 50449456 _____ (Microsoft Corporation) C:\Users\Marcel\Downloads\dotNetFx40_Full_x86_x64.exe 2013-10-24 20:45 - 2013-10-24 20:45 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies 2013-10-24 20:45 - 2013-04-05 23:47 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2013-10-24 20:36 - 2013-09-06 14:33 - 00141583 _____ C:\Windows\DirectX.log 2013-10-24 20:23 - 2013-10-24 19:34 - 00000000 ____D C:\Program Files (x86)\Batman Arkham Origins 2013-10-23 01:15 - 2012-05-18 17:14 - 00003694 _____ C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm 2013-10-21 20:22 - 2013-10-21 20:22 - 00000000 ____D C:\Program Files (x86)\Galactic Cafe 2013-10-19 00:23 - 2013-10-19 00:23 - 00000000 ____D C:\Program Files (x86)\Viscera Cleanup Detail Shadow Warrior 2013-10-18 22:58 - 2013-10-18 22:56 - 00000000 ____D C:\Users\Marcel\AppData\Roaming\Battle.net 2013-10-18 22:56 - 2013-10-18 22:56 - 00000000 ____D C:\Users\Marcel\AppData\Local\Blizzard Entertainment 2013-10-18 20:39 - 2013-10-18 20:35 - 00000000 ____D C:\Program Files (x86)\Shadow Warrior 2013-10-18 20:28 - 2013-10-18 20:28 - 00000000 ____D C:\Users\Marcel\Documents\Shadow Warrior 2013-10-18 18:00 - 2013-10-18 18:00 - 00000000 ____D C:\Program Files (x86)\Subatomic Studios LLC 2013-10-17 17:20 - 2013-10-12 18:25 - 00000000 ____D C:\Users\Marcel\Documents\FIFA 14 2013-10-15 19:36 - 2012-04-25 18:38 - 00000000 ____D C:\Users\Marcel\Documents\Telltale Games 2013-10-15 19:26 - 2013-10-15 19:17 - 00000000 ____D C:\Program Files (x86)\The Wolf Among Us ZeroAccess: C:\Windows\Installer\{03107599-fc96-4cc7-5d56-7b281c3629d4} Some content of TEMP: ==================== C:\Users\Marcel\AppData\Local\Temp\HitmanPro.exe C:\Users\Marcel\AppData\Local\Temp\Kickstarter.exe C:\Users\Marcel\AppData\Local\Temp\Quarantine.exe ==================== Known DLLs (Whitelisted) ================ ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit ==================== EXE ASSOCIATION ===================== HKLM\...\.exe: exefile => OK HKLM\...\exefile\DefaultIcon: %1 => OK HKLM\...\exefile\open\command: "%1" %* => OK ==================== Restore Points ========================= ==================== Memory info =========================== Percentage of memory in use: 14% Total physical RAM: 4094.46 MB Available physical RAM: 3485.13 MB Total Pagefile: 4092.66 MB Available Pagefile: 3472.34 MB Total Virtual: 8192 MB Available Virtual: 8191.87 MB ==================== Drives ================================ Drive c: (System) (Fixed) (Total:465.76 GB) (Free:96.56 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive e: () (Removable) (Total:1.96 GB) (Free:1.95 GB) FAT Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 4A4EAA14) Partition 1: (Active) - (Size=466 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (Size: 2 GB) (Disk ID: 00CB60C2) Partition 1: (Active) - (Size=2 GB) - (Type=06) LastRegBack: 2013-11-10 06:20 ==================== End Of Log ============================ --- --- --- --- --- --- |
13.11.2013, 06:33 | #2 |
/// the machine /// TB-Ausbilder | Grauer Bildschirm bei Windows Start (Win 7) Hi,
__________________wann genau erscheint der graue Bildschirm?
__________________ |
13.11.2013, 07:08 | #3 |
| Grauer Bildschirm bei Windows Start (Win 7) Der Bildschirm erscheint direkt nach dem Willkommensbildschirm, normalerweise sollte ja der Desktop booten aber da erscheint dann halt der grauer Bildschirm.
__________________ |
13.11.2013, 12:46 | #4 |
/// the machine /// TB-Ausbilder | Grauer Bildschirm bei Windows Start (Win 7) Gibt es mehrere Benutzer auf dem Rechner?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
13.11.2013, 12:55 | #5 |
| Grauer Bildschirm bei Windows Start (Win 7) Nein ich bin der einzige Benutzer |
14.11.2013, 08:54 | #6 |
/// the machine /// TB-Ausbilder | Grauer Bildschirm bei Windows Start (Win 7) Schon die Startreparatur versucht? Als nächstes wäre ne Rep-Installation dran, malware ist das nicht.
__________________ --> Grauer Bildschirm bei Windows Start (Win 7) |
Themen zu Grauer Bildschirm bei Windows Start (Win 7) |
abgesicherte, abgesicherter, anhänge, anhängen, association, bereits, bildschirm, erscheint, farbar, farbar recovery scan tool, forum, funktioniert, gen, gestern, grauer, hoffe, hänge, hängen, langer, log, modus, netzwerk, rechner, seitdem, spotify web helper, start, suche, windows, windows start |