|
Plagegeister aller Art und deren Bekämpfung: Prgramme lassen sich nicht startenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
22.03.2014, 18:04 | #1 |
| Prgramme lassen sich nicht starten Hallo, ich habe einen Rechner mit Windows 7. Ich habe vor ein paar Tagen in großer Hektik openoffice runterladen wollen. In der Hektik habe ich anscheinend eine Datei erwischt, die nicht sauber war. Nach Öffnen des Downloads öffnete sich ein Programm, das die Windowsgeschwindigkeit steigern wollte. Als es sich das zweite oder dritte Mal automatisch starte, habe ich den Vorgang abgebrochen. Dann wurde mein Rechner von Werbung zugemüllt. Um das Schauspiel zu beenden, habe ich das System auf einen Wiederherstellungspunkt zurückgesetzt, der vor dem Download lag. Und hier beginnt mein Problem. Seit dem ich das getan habe, starten Programme wie GoogleChrome oder Word nicht mehr. Wenn ich Word starte kommt folgender Fehler. "das betriebssystem ist momentan nicht zum ausführen dieser anwendung konfiguriert". Im Internet Explorer kann ich genau einmal eine Seite aufrufen. Danach kann ich keine Adresse mehr eintippen.Bilder die auf dem Rechner gespeichert wurden, kann man nicht ansehen. Wenn ich den Sart-Button drücke und dann alle Programme anwähle, sollte eigentlich ein Liste mit Programme bzw. Ordnern kommen. Aber dort steht nur ein Ordner Windows-Update und ein Ordner Standardprogramme. Ich habe mal alles geschrieben, was ich so beobachtet habe. Ich hoffe Ihr könnt mir helfen. |
22.03.2014, 18:11 | #2 |
/// the machine /// TB-Ausbilder | Prgramme lassen sich nicht starten hi,
__________________Scan mit Farbar's Recovery Scan Tool (Recovery Mode - Windows Vista, 7, 8) Hinweise für Windows 8-Nutzer: Anleitung 1 (FRST-Variante) und Anleitung 2 (zweiter Teil)
__________________ |
23.03.2014, 11:10 | #3 |
| Prgramme lassen sich nicht starten Hier die Antwort.
__________________Leider hat es nicht geklappt. FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014 Ran by SYSTEM on MININT-MH1G5BV on 23-03-2014 10:49:35 Running from G:\ Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Recovery The current controlset is ControlSet003 ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log. ==================== Registry (Whitelisted) ================== HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2723624 2011-03-27] (Synaptics Incorporated) HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11860072 2011-06-08] (Realtek Semiconductor) HKLM\...\Run: [Power Management] - C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1831016 2011-08-02] (Acer Incorporated) HKLM-x32\...\Run: [SuiteTray] - C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [341360 2011-09-20] (Egis Technology Inc.) HKLM-x32\...\Run: [Norton Online Backup] - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-01] (Symantec Corporation) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [BackupManagerTray] - C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [296984 2012-01-05] (NTI Corporation) HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1103440 2011-06-30] (Dritek System Inc.) HKLM-x32\...\Run: [ArcadeMovieService] - C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe [177448 2011-08-26] (CyberLink Corp.) HKLM-x32\...\Run: [] - [X] HKLM-x32\...\Run: [ApnUpdater] - C:\Program Files (x86)\Ask.com\Updater\Updater.exe [1644680 2013-02-08] (Ask) HKLM-x32\...\Run: [CanonQuickMenu] - C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1273448 2012-04-03] (CANON INC.) HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] - C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [449168 2012-03-26] (CANON INC.) HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-01] (Oracle Corporation) HKLM-x32\...\Run: [24x7HELP] - C:\Program Files (x86)\24x7Help\App24x7Help.exe [1887824 2013-11-05] (Crawler, LLC) HKLM-x32\...\Run: [DivXMediaServer] - C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-08-21] (DivX, LLC) HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2013-08-28] () Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\Default\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe [154144 2010-07-29] () HKU\Default User\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe [154144 2010-07-29] () ==================== Services (Whitelisted) ================= S2 24x7HelpSvc; C:\Program Files (x86)\24x7Help\App24x7Svc.exe [342608 2013-03-11] (PCRx.com, LLC) S2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG) S2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG) S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1017424 2014-02-20] (Avira Operations GmbH & Co. KG) S3 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [240736 2013-09-05] (WildTangent) S2 HPSLPSVC; C:\Users\hwm\AppData\Local\Temp\7zS0AC8\hpslpsvc64.dll [1039360 2012-11-14] (Hewlett-Packard Co.) S2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [140456 2012-03-28] () S2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-01] (Symantec Corporation) S2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256536 2012-01-05] (NTI Corporation) ==================== Drivers (Whitelisted) ==================== S2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-12] (Avira Operations GmbH & Co. KG) S1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-12] (Avira Operations GmbH & Co. KG) S1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-01] (Avira Operations GmbH & Co. KG) S3 InputFilter_Hid_FlexDef2b; C:\Windows\System32\DRIVERS\InputFilter_FlexDef2b.sys [17920 2010-06-18] (Siliten) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-03-23 10:49 - 2014-03-23 10:49 - 00000000 ____D () C:\FRST 2014-03-22 08:35 - 2014-03-22 08:35 - 00000000 __SHD () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} 2014-03-22 05:55 - 2014-03-22 05:55 - 00000000 ____D () C:\ProgramData\Virtualized Applications 2014-03-21 23:08 - 2014-01-08 18:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2014-03-21 23:08 - 2014-01-03 14:44 - 06574592 _____ (Microsoft Corporation) C:\Windows\System32\mstscax.dll 2014-03-21 07:32 - 2013-10-01 18:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\TsUsbFlt.sys 2014-03-21 07:32 - 2013-10-01 18:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\TsUsbFlt(63).sys 2014-03-21 07:32 - 2013-10-01 18:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\System32\TsUsbRedirectionGroupPolicyControl.exe 2014-03-21 07:32 - 2013-10-01 18:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\System32\TsUsbRedirectionGroupPolicyExtension.dll 2014-03-21 07:32 - 2013-10-01 17:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\System32\MsRdpWebAccess.dll 2014-03-21 07:32 - 2013-10-01 17:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\System32\wksprtPS.dll 2014-03-21 07:32 - 2013-10-01 17:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\System32\tsgqec.dll 2014-03-21 07:32 - 2013-10-01 17:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\System32\TsUsbGDCoInstaller.dll 2014-03-21 07:32 - 2013-10-01 16:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\System32\rdvidcrl.dll 2014-03-21 07:32 - 2013-10-01 16:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll 2014-03-21 07:32 - 2013-10-01 16:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll 2014-03-21 07:32 - 2013-10-01 16:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\System32\TSWbPrxy.exe 2014-03-21 07:32 - 2013-10-01 16:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\System32\wksprt.exe 2014-03-21 07:32 - 2013-10-01 15:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll 2014-03-21 07:32 - 2013-10-01 15:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\System32\mstsc.exe 2014-03-21 07:32 - 2013-10-01 15:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll 2014-03-21 07:32 - 2013-10-01 14:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe 2014-03-21 07:31 - 2012-08-23 06:13 - 00243200 _____ (Microsoft Corporation) C:\Windows\System32\rdpudd.dll 2014-03-21 07:31 - 2012-08-23 06:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\rdpvideominiport.sys 2014-03-21 07:31 - 2012-08-23 06:08 - 00030208 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\TsUsbGD.sys 2014-03-21 07:31 - 2012-08-23 05:24 - 00015360 _____ (Microsoft Corporation) C:\Windows\System32\RdpGroupPolicyExtension.dll 2014-03-21 07:31 - 2012-08-23 03:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll 2014-03-21 07:31 - 2012-08-23 02:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\System32\rdpendp_winip.dll 2014-03-21 07:31 - 2012-08-23 01:51 - 03174912 _____ (Microsoft Corporation) C:\Windows\System32\rdpcorets.dll 2014-03-21 07:30 - 2013-09-24 18:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\System32\TSWorkspace.dll 2014-03-21 07:30 - 2013-09-24 17:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll 2014-03-21 07:29 - 2012-05-04 03:00 - 00366592 _____ (Microsoft Corporation) C:\Windows\System32\qdvd.dll 2014-03-21 07:29 - 2012-05-04 01:59 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll 2014-03-21 06:00 - 2014-03-21 07:12 - 00000000 ____D () C:\Users\hwm\AppData\Local\newplayer 2014-03-21 05:59 - 2014-03-21 07:14 - 00000000 ____D () C:\ProgramData\WPM 2014-03-21 05:59 - 2014-03-21 07:14 - 00000000 ____D () C:\ProgramData\IePluginService 2014-03-21 05:59 - 2014-03-21 07:14 - 00000000 ____D () C:\Program Files (x86)\SupTab 2014-03-21 05:59 - 2014-03-21 06:00 - 00002866 _____ () C:\Users\hwm\AppData\Roaming\aps.scan.results 2014-03-21 05:59 - 2014-03-21 06:00 - 00001192 _____ () C:\Users\hwm\AppData\Roaming\aps.scan.quick.results 2014-03-21 05:59 - 2014-03-21 06:00 - 00000320 _____ () C:\Users\hwm\AppData\Roaming\aps.uninstall.scan.results 2014-03-21 05:58 - 2014-03-21 07:13 - 00000000 ____D () C:\Program Files (x86)\NewPlayer 2014-03-21 05:58 - 2014-03-21 07:13 - 00000000 ____D () C:\Program Files (x86)\MyPC Backup 2014-03-21 05:58 - 2014-03-21 05:58 - 00000000 ____D () C:\Users\hwm\AppData\Roaming\Uniblue 2014-03-21 05:58 - 2014-03-21 05:58 - 00000000 ____D () C:\Program Files (x86)\Uniblue 2014-03-21 05:57 - 2014-03-21 07:13 - 00000000 ____D () C:\Program Files (x86)\media enhance 2014-03-21 05:57 - 2014-03-21 07:13 - 00000000 ____D () C:\Program Files (x86)\AnyProtectEx 2014-03-21 05:57 - 2014-03-21 05:57 - 01172736 _____ (AnyProtect.com) C:\Users\hwm\AppData\Local\nsd24D2.tmp 2014-03-21 05:56 - 2014-03-22 07:42 - 00000000 ____D () C:\Program Files (x86)\free ven 2014-03-19 08:36 - 2014-03-21 05:55 - 00000000 _____ () C:\END 2014-03-19 08:36 - 2014-03-19 08:36 - 00000000 ____D () C:\Users\hwm\AppData\Local\SearchProtect 2014-03-18 09:56 - 2014-03-22 07:43 - 00000000 ____D () C:\Users\hwm\AppData\Roaming\IminentToolbar 2014-03-18 09:56 - 2014-03-22 07:40 - 00000000 ____D () C:\Program Files (x86)\IminentToolbar 2014-03-18 09:56 - 2014-03-22 07:40 - 00000000 ____D () C:\Program Files (x86)\Iminent 2014-03-18 09:56 - 2014-03-21 07:12 - 00000000 ____D () C:\Users\hwm\AppData\Roaming\systweak 2014-03-18 09:56 - 2014-03-18 09:56 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-03-18 09:55 - 2014-03-21 07:13 - 00000000 ____D () C:\Program Files (x86)\View-Password-soft 2014-03-18 09:55 - 2014-03-21 07:13 - 00000000 ____D () C:\Program Files (x86)\Plus-HD-9.5 2014-03-13 01:08 - 2014-02-28 21:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollectorres.dll 2014-03-13 01:08 - 2014-02-28 20:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll 2014-03-13 01:08 - 2014-02-28 19:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-03-13 01:08 - 2014-02-28 19:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-03-13 01:08 - 2014-02-06 17:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys 2014-03-13 01:08 - 2014-01-28 18:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\System32\wer.dll 2014-03-13 01:08 - 2014-01-28 18:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll 2014-03-13 01:08 - 2014-01-27 18:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\System32\wwansvc.dll 2014-03-13 01:07 - 2014-02-28 22:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll 2014-03-13 01:07 - 2014-02-28 22:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\System32\mshtml(64).dll 2014-03-13 01:07 - 2014-02-28 21:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb 2014-03-13 01:07 - 2014-02-28 20:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll 2014-03-13 01:07 - 2014-02-28 20:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\System32\ieetwproxystub.dll 2014-03-13 01:07 - 2014-02-28 20:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll 2014-03-13 01:07 - 2014-02-28 20:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll 2014-03-13 01:07 - 2014-02-28 20:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll 2014-03-13 01:07 - 2014-02-28 20:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe 2014-03-13 01:07 - 2014-02-28 20:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollector.exe 2014-03-13 01:07 - 2014-02-28 20:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\System32\jscript9diag.dll 2014-03-13 01:07 - 2014-02-28 20:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-03-13 01:07 - 2014-02-28 20:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe 2014-03-13 01:07 - 2014-02-28 20:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe 2014-03-13 01:07 - 2014-02-28 20:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-03-13 01:07 - 2014-02-28 20:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\System32\msrating.dll 2014-03-13 01:07 - 2014-02-28 19:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll 2014-03-13 01:07 - 2014-02-28 19:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-03-13 01:07 - 2014-02-28 19:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-03-13 01:07 - 2014-02-28 19:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-03-13 01:07 - 2014-02-28 19:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll 2014-03-13 01:07 - 2014-02-28 19:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-03-13 01:07 - 2014-02-28 19:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-03-13 01:07 - 2014-02-28 19:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-03-13 01:07 - 2014-02-28 19:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl 2014-03-13 01:07 - 2014-02-28 19:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll 2014-03-13 01:07 - 2014-02-28 19:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-03-13 01:07 - 2014-02-28 19:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-03-13 01:07 - 2014-02-28 19:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll 2014-03-13 01:07 - 2014-02-28 19:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-03-13 01:07 - 2014-02-28 19:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-03-13 01:07 - 2014-02-28 18:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-03-13 01:07 - 2014-02-28 18:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll 2014-03-13 01:07 - 2014-02-28 18:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-03-13 01:07 - 2014-02-28 18:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-03-13 01:07 - 2014-02-28 18:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll 2014-03-13 01:07 - 2014-02-28 18:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-03-13 01:06 - 2014-02-03 18:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll 2014-03-13 01:06 - 2014-02-03 18:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\System32\qedit.dll 2014-03-13 01:06 - 2014-02-03 18:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2014-03-13 01:06 - 2014-02-03 18:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2014-03-10 06:16 - 2014-03-12 02:39 - 00000000 ____D () C:\Users\hwm\Desktop\Bilder Regina 2014-02-25 04:50 - 2014-02-25 04:50 - 00000000 ___RD () C:\Program Files (x86)\Skype ==================== One Month Modified Files and Folders ======= 2014-03-23 10:49 - 2014-03-23 10:49 - 00000000 ____D () C:\FRST 2014-03-23 01:41 - 2012-05-25 11:51 - 00001100 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-03-23 01:41 - 2009-07-13 21:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-03-23 01:41 - 2009-07-13 20:51 - 00180137 _____ () C:\Windows\setupact.log 2014-03-22 13:07 - 2011-11-29 14:59 - 01721605 _____ () C:\Windows\WindowsUpdate.log 2014-03-22 13:06 - 2012-05-25 11:51 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-03-22 13:06 - 2012-04-11 00:08 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-03-22 09:46 - 2009-07-13 19:20 - 00000000 ____D () C:\Windows\rescache 2014-03-22 08:41 - 2012-01-21 06:06 - 00000000 ____D () C:\Users\hwm\AppData\Roaming\SoftGrid Client 2014-03-22 08:35 - 2014-03-22 08:35 - 00000000 __SHD () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} 2014-03-22 07:43 - 2014-03-18 09:56 - 00000000 ____D () C:\Users\hwm\AppData\Roaming\IminentToolbar 2014-03-22 07:43 - 2012-01-21 05:21 - 00000000 ____D () C:\Users\hwm\AppData\Local\PowerCinema 2014-03-22 07:43 - 2011-10-27 04:12 - 00000000 ____D () C:\Windows\System32\Macromed 2014-03-22 07:43 - 2009-07-13 19:20 - 00000000 ____D () C:\Windows\schemas 2014-03-22 07:43 - 2009-07-13 19:20 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-03-22 07:43 - 2009-07-13 19:20 - 00000000 ____D () C:\Windows\L2Schemas 2014-03-22 07:42 - 2014-03-21 05:56 - 00000000 ____D () C:\Program Files (x86)\free ven 2014-03-22 07:42 - 2013-03-13 01:20 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-03-22 07:42 - 2013-03-13 01:20 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight 2014-03-22 07:42 - 2012-01-22 01:09 - 00000000 ____D () C:\ProgramData\clear.fi 2014-03-22 07:42 - 2011-10-27 04:14 - 00000000 ____D () C:\ProgramData\BackupManager 2014-03-22 07:42 - 2009-07-13 19:20 - 00000000 ____D () C:\Windows\registration 2014-03-22 07:40 - 2014-03-18 09:56 - 00000000 ____D () C:\Program Files (x86)\IminentToolbar 2014-03-22 07:40 - 2014-03-18 09:56 - 00000000 ____D () C:\Program Files (x86)\Iminent 2014-03-22 07:40 - 2012-01-22 05:05 - 00000000 __RHD () C:\MSOCache 2014-03-22 07:20 - 2011-11-29 23:46 - 00700134 _____ () C:\Windows\System32\perfh007.dat 2014-03-22 07:20 - 2011-11-29 23:46 - 00149984 _____ () C:\Windows\System32\perfc007.dat 2014-03-22 07:20 - 2009-07-13 21:13 - 01622236 _____ () C:\Windows\System32\PerfStringBackup.INI 2014-03-22 06:56 - 2009-07-13 20:45 - 00016752 ____H () C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-03-22 06:56 - 2009-07-13 20:45 - 00016752 ____H () C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-03-22 05:56 - 2012-01-21 06:06 - 00000000 ____D () C:\Users\hwm\AppData\Local\SoftGrid Client 2014-03-22 05:55 - 2014-03-22 05:55 - 00000000 ____D () C:\ProgramData\Virtualized Applications 2014-03-21 23:47 - 2013-08-17 05:49 - 00000000 ____D () C:\Windows\System32\MRT 2014-03-21 23:45 - 2012-04-11 00:14 - 90015360 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe 2014-03-21 22:59 - 2012-01-21 05:21 - 00000000 ____D () C:\users\hwm 2014-03-21 07:14 - 2014-03-21 05:59 - 00000000 ____D () C:\ProgramData\WPM 2014-03-21 07:14 - 2014-03-21 05:59 - 00000000 ____D () C:\ProgramData\IePluginService 2014-03-21 07:14 - 2014-03-21 05:59 - 00000000 ____D () C:\Program Files (x86)\SupTab 2014-03-21 07:13 - 2014-03-21 05:58 - 00000000 ____D () C:\Program Files (x86)\NewPlayer 2014-03-21 07:13 - 2014-03-21 05:58 - 00000000 ____D () C:\Program Files (x86)\MyPC Backup 2014-03-21 07:13 - 2014-03-21 05:57 - 00000000 ____D () C:\Program Files (x86)\media enhance 2014-03-21 07:13 - 2014-03-21 05:57 - 00000000 ____D () C:\Program Files (x86)\AnyProtectEx 2014-03-21 07:13 - 2014-03-18 09:55 - 00000000 ____D () C:\Program Files (x86)\View-Password-soft 2014-03-21 07:13 - 2014-03-18 09:55 - 00000000 ____D () C:\Program Files (x86)\Plus-HD-9.5 2014-03-21 07:12 - 2014-03-21 06:00 - 00000000 ____D () C:\Users\hwm\AppData\Local\newplayer 2014-03-21 07:12 - 2014-03-18 09:56 - 00000000 ____D () C:\Users\hwm\AppData\Roaming\systweak 2014-03-21 06:00 - 2014-03-21 05:59 - 00002866 _____ () C:\Users\hwm\AppData\Roaming\aps.scan.results 2014-03-21 06:00 - 2014-03-21 05:59 - 00001192 _____ () C:\Users\hwm\AppData\Roaming\aps.scan.quick.results 2014-03-21 06:00 - 2014-03-21 05:59 - 00000320 _____ () C:\Users\hwm\AppData\Roaming\aps.uninstall.scan.results 2014-03-21 05:58 - 2014-03-21 05:58 - 00000000 ____D () C:\Users\hwm\AppData\Roaming\Uniblue 2014-03-21 05:58 - 2014-03-21 05:58 - 00000000 ____D () C:\Program Files (x86)\Uniblue 2014-03-21 05:57 - 2014-03-21 05:57 - 01172736 _____ (AnyProtect.com) C:\Users\hwm\AppData\Local\nsd24D2.tmp 2014-03-21 05:55 - 2014-03-19 08:36 - 00000000 _____ () C:\END 2014-03-19 08:36 - 2014-03-19 08:36 - 00000000 ____D () C:\Users\hwm\AppData\Local\SearchProtect 2014-03-18 09:56 - 2014-03-18 09:56 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-03-18 01:00 - 2012-10-30 01:24 - 00003914 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{0B938386-96E1-440C-888B-AF774E0BF8E8} 2014-03-16 08:54 - 2012-05-25 11:54 - 00002179 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2014-03-13 02:57 - 2009-07-13 20:45 - 00291832 _____ () C:\Windows\System32\FNTCACHE.DAT 2014-03-13 02:49 - 2012-04-11 00:08 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-03-13 02:49 - 2012-04-11 00:08 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-03-13 02:49 - 2011-10-27 04:12 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-03-12 02:39 - 2014-03-10 06:16 - 00000000 ____D () C:\Users\hwm\Desktop\Bilder Regina 2014-03-04 09:51 - 2013-08-02 04:52 - 00000000 ____D () C:\ProgramData\CanonIJPLM 2014-03-02 02:36 - 2009-07-13 21:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-02-28 22:05 - 2014-03-13 01:07 - 23133696 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll 2014-02-28 22:05 - 2014-03-13 01:07 - 23133696 _____ (Microsoft Corporation) C:\Windows\System32\mshtml(64).dll 2014-02-28 21:17 - 2014-03-13 01:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb 2014-02-28 21:16 - 2014-03-13 01:08 - 00004096 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollectorres.dll 2014-02-28 20:58 - 2014-03-13 01:08 - 02765824 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll 2014-02-28 20:52 - 2014-03-13 01:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll 2014-02-28 20:51 - 2014-03-13 01:07 - 00048640 _____ (Microsoft Corporation) C:\Windows\System32\ieetwproxystub.dll 2014-02-28 20:42 - 2014-03-13 01:07 - 00053760 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll 2014-02-28 20:40 - 2014-03-13 01:07 - 00033792 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll 2014-02-28 20:37 - 2014-03-13 01:07 - 00574976 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll 2014-02-28 20:33 - 2014-03-13 01:07 - 00139264 _____ (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe 2014-02-28 20:33 - 2014-03-13 01:07 - 00111616 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollector.exe 2014-02-28 20:32 - 2014-03-13 01:07 - 00708608 _____ (Microsoft Corporation) C:\Windows\System32\jscript9diag.dll 2014-02-28 20:30 - 2014-03-13 01:07 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-02-28 20:23 - 2014-03-13 01:07 - 00940032 _____ (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe 2014-02-28 20:17 - 2014-03-13 01:07 - 00218624 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe 2014-02-28 20:11 - 2014-03-13 01:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-02-28 20:02 - 2014-03-13 01:07 - 00195584 _____ (Microsoft Corporation) C:\Windows\System32\msrating.dll 2014-02-28 19:54 - 2014-03-13 01:07 - 05768704 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll 2014-02-28 19:52 - 2014-03-13 01:07 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-02-28 19:51 - 2014-03-13 01:07 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-02-28 19:47 - 2014-03-13 01:08 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-02-28 19:43 - 2014-03-13 01:08 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-02-28 19:43 - 2014-03-13 01:07 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-02-28 19:42 - 2014-03-13 01:07 - 00627200 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll 2014-02-28 19:40 - 2014-03-13 01:07 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-02-28 19:38 - 2014-03-13 01:07 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-02-28 19:37 - 2014-03-13 01:07 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-02-28 19:35 - 2014-03-13 01:07 - 02041856 _____ (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl 2014-02-28 19:18 - 2014-03-13 01:07 - 13051904 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll 2014-02-28 19:16 - 2014-03-13 01:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-02-28 19:14 - 2014-03-13 01:07 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-02-28 19:10 - 2014-03-13 01:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll 2014-02-28 19:03 - 2014-03-13 01:07 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-02-28 19:00 - 2014-03-13 01:07 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-02-28 18:57 - 2014-03-13 01:07 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-02-28 18:38 - 2014-03-13 01:07 - 01393664 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll 2014-02-28 18:32 - 2014-03-13 01:07 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-02-28 18:27 - 2014-03-13 01:07 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-02-28 18:25 - 2014-03-13 01:07 - 00817664 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll 2014-02-28 18:25 - 2014-03-13 01:07 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-02-27 08:39 - 2012-01-21 06:06 - 01596516 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-02-25 05:24 - 2010-11-20 19:47 - 00194780 _____ () C:\Windows\PFRO.log 2014-02-25 04:50 - 2014-02-25 04:50 - 00000000 ___RD () C:\Program Files (x86)\Skype 2014-02-25 04:50 - 2011-10-27 03:41 - 00000000 ____D () C:\ProgramData\Skype Files to move or delete: ==================== C:\Users\hwm\JavaSetup7u7.exe Some content of TEMP: ==================== C:\Users\hwm\AppData\Local\Temp\APNStub.exe C:\Users\hwm\AppData\Local\Temp\AskSLib.dll C:\Users\hwm\AppData\Local\Temp\avgnt.exe C:\Users\hwm\AppData\Local\Temp\DivXInstaller.exe C:\Users\hwm\AppData\Local\Temp\DivXSetup.exe C:\Users\hwm\AppData\Local\Temp\jre-7u17-windows-i586-iftw.exe C:\Users\hwm\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe C:\Users\hwm\AppData\Local\Temp\jre-7u40-windows-i586-iftw.exe C:\Users\hwm\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe C:\Users\hwm\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe C:\Users\hwm\AppData\Local\Temp\jre-7u9-windows-i586-iftw.exe C:\Users\hwm\AppData\Local\Temp\MSETUP4.EXE C:\Users\hwm\AppData\Local\Temp\Setup.exe C:\Users\hwm\AppData\Local\Temp\_isF23A.exe ==================== Known DLLs (Whitelisted) ================ ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit ==================== EXE ASSOCIATION ===================== HKLM\...\.exe: exefile => OK HKLM\...\exefile\DefaultIcon: %1 => OK HKLM\...\exefile\open\command: "%1" %* => OK ==================== Restore Points ========================= Restore point made on: 2014-03-18 01:10:44 Restore point made on: 2014-03-18 10:21:24 Restore point made on: 2014-03-19 09:04:01 Restore point made on: 2014-03-19 09:39:32 Restore point made on: 2014-03-21 05:29:00 Restore point made on: 2014-03-21 05:57:29 Restore point made on: 2014-03-21 07:08:20 Restore point made on: 2014-03-21 07:30:55 Restore point made on: 2014-03-21 07:45:08 Restore point made on: 2014-03-21 13:25:31 Restore point made on: 2014-03-21 23:44:51 Restore point made on: 2014-03-22 05:28:35 Restore point made on: 2014-03-22 08:40:52 Restore point made on: 2014-03-22 08:58:58 Restore point made on: 2014-03-22 09:25:23 Restore point made on: 2014-03-22 10:57:01 ==================== Memory info =========================== Percentage of memory in use: 19% Total physical RAM: 3764.86 MB Available physical RAM: 3039.81 MB Total Pagefile: 3763.06 MB Available Pagefile: 3036.27 MB Total Virtual: 8192 MB Available Virtual: 8191.88 MB ==================== Drives ================================ Drive c: (Acer) (Fixed) (Total:452.66 GB) (Free:352.57 GB) NTFS Drive e: (PQSERVICE) (Fixed) (Total:13 GB) (Free:0.81 GB) NTFS Drive g: () (Removable) (Total:15.94 GB) (Free:15.94 GB) FAT32 Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS Drive y: (SYSTEM RESERVED) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[System with boot components (obtained from reading drive)] ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 4368A231) Partition 1: (Not Active) - (Size=13 GB) - (Type=27) Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=453 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (Size: 16 GB) (Disk ID: 00000000) Partition: GPT Partition Type. LastRegBack: 2014-03-22 07:17 ==================== End Of Log ============================ |
24.03.2014, 10:13 | #4 |
/// the machine /// TB-Ausbilder | Prgramme lassen sich nicht starten was nicht geklappt?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
24.03.2014, 17:21 | #5 |
| Prgramme lassen sich nicht starten Mein Fehler. Das war nur eine Analyse des Problems richtig? Ich habe im Moment des Schreibens gedacht, es wäre ein Reparaturprogramm. Sorry |
25.03.2014, 12:05 | #6 |
/// the machine /// TB-Ausbilder | Prgramme lassen sich nicht starten genau Downloade dir bitte Windows Repair (All In One) von hier.
__________________ --> Prgramme lassen sich nicht starten |
26.03.2014, 21:36 | #7 |
| Prgramme lassen sich nicht startenDas Ding läuft wieder wie ne eins. Kann ich das Programm auch "einfach so" über nen Rechner laufen lassen, der ein ziemlich langsames XP drauf hat? |
27.03.2014, 12:32 | #8 |
/// the machine /// TB-Ausbilder | Prgramme lassen sich nicht starten Ja kannste machen. Sonst keine Probleme mehr?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu Prgramme lassen sich nicht starten |
adresse, anwendung, automatisch, beenden, betriebssystem, datei, erwischt, explorer, folge, gespeichert, interne, internet, internet explorer, liste, office, ordner, programm, programme, rechner, seite, starten, system, werbung, windows, windows-update |