|
Log-Analyse und Auswertung: Windows 7 starte nicht mehr, Wiederherstellung klappt auch nicht!Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
29.07.2014, 21:47 | #1 |
| Windows 7 starte nicht mehr, Wiederherstellung klappt auch nicht! Hallo, ich habe einen PC von einem Kumpel bzw. seinem Vater hier stehen, der nix gemacht hat wie immer halt. Windows hat ein Update installiert meinte er und boote der Laptop nicht mehr. Kommt nur noch das Windows mit den Systemreparaturoptionen, wo von aber keine Funktioniert. Ich habe mal mit dem TOOL FRST64.exe eine Logdatei erstellt. Wie kann ich den Laptop retten? Bin für Tipps dankbar. FRST.txt Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-07-2014 Ran by SYSTEM on MININT-AJLEVGV on 29-07-2014 22:33:55 Running from G:\ Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Recovery The current controlset is ControlSet001 ATTENTION!:=====> If the system is bootable FRST must be run from normal or Safe mode to create a complete log. The only official download link for FRST: Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1158248 2012-02-27] (Realtek Semiconductor) HKLM\...\Run: [AtherosBtStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [1016992 2012-01-19] (Atheros Communications) HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [800416 2012-01-19] (Atheros Commnucations) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2870032 2012-03-15] (Synaptics Incorporated) HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2726728 2010-03-24] (CANON INC.) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [343168 2012-01-18] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation) HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-27] (Intel Corporation) HKLM-x32\...\Run: [ISBMgr.exe] => C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [60552 2011-09-20] (Sony Corporation) HKLM-x32\...\Run: [PMBVolumeWatcher] => c:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [693608 2012-02-21] (Sony Corporation) HKLM-x32\...\Run: [CanonSolutionMenuEx] => C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1185112 2010-04-02] (CANON INC.) HKLM-x32\...\Run: [IJNetworkScanUtility] => C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe [140640 2010-03-02] (CANON INC.) HKU\Default\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation) HKU\Default User\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation) Startup: C:\Users\Alfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Canon IJ Status Monitor Canon MG5200 series Printer.lnk ShortcutTarget: Canon IJ Status Monitor Canon MG5200 series Printer.lnk -> C:\Users\Alfred\CNMSSC~1.DLL,SMStarterEntryPoint CNBJNP_888717B635F4;Canon MG5200 series Printer;cnmss Canon MG5200 series Printer (Local).dll;Canon IJ Status Monitor Canon MG5200 series Printer.lnk (No File) ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.) S2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2013-10-17] (Kaspersky Lab ZAO) S3 DCDhcpService; C:\Program Files\Sony\VAIO Smart Network\WFDA\DCDhcpService.exe [112256 2012-03-21] (Atheros Communication Inc.) S2 ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [377768 2013-11-01] (Intel Corporation) S2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [116104 2010-04-05] () S2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [121344 2012-02-07] () S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-07] (Intel Corporation) S3 McComponentHostServiceSony; C:\Program Files (x86)\Sony\MSS\3.8.130\McCHSvc.exe [235216 2013-10-16] (McAfee, Inc.) S2 PMBDeviceInfoProvider; c:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [473960 2012-02-21] (Sony Corporation) S2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [105024 2011-02-23] (ArcSoft, Inc.) S3 USER_ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [377768 2013-11-01] (Intel Corporation) S2 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [960160 2011-12-29] (Sony Corporation) S3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1368624 2013-08-01] (Sony Corporation) S2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [158880 2012-01-19] (Atheros) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.) S3 BTATH_VDP; C:\Windows\System32\drivers\btath_vdp.sys [421664 2012-01-19] (Atheros) S0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2014-01-28] (Kaspersky Lab ZAO) S4 klflt; C:\Windows\System32\DRIVERS\klflt.sys [115296 2014-03-25] (Kaspersky Lab ZAO) S1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [625248 2014-03-25] (Kaspersky Lab ZAO) S1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29792 2013-10-17] (Kaspersky Lab ZAO) S3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2014-02-18] (Kaspersky Lab ZAO) S3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-10-17] (Kaspersky Lab ZAO) S1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO) S1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55904 2013-05-14] (Kaspersky Lab ZAO) S1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178272 2014-01-28] (Kaspersky Lab ZAO) S0 Tcpip; C:\Windows\System32\drivers\tcpip.sys [0 2014-04-05] () S3 TCPIP6; C:\Windows\System32\DRIVERS\tcpip.sys [0 2014-04-05] () ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-07-29 22:33 - 2014-07-29 22:33 - 00000000 ____D () C:\FRST 2014-07-17 09:01 - 2014-07-17 09:01 - 27843432 _____ (pdfforge ) C:\Users\Alfred\Downloads\PDFCreator-1_7_3_setup.exe 2014-07-09 14:56 - 2014-06-30 03:09 - 00519168 _____ (Microsoft Corporation) C:\Windows\System32\aepdu.dll 2014-07-09 14:56 - 2014-06-30 03:04 - 00424448 _____ (Microsoft Corporation) C:\Windows\System32\aeinv.dll 2014-07-09 14:56 - 2014-06-18 03:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\System32\osk.exe 2014-07-09 14:56 - 2014-06-18 02:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe 2014-07-09 14:56 - 2014-06-18 02:10 - 03157504 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys 2014-07-09 14:55 - 2014-06-20 21:14 - 00266424 _____ (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll 2014-07-09 14:55 - 2014-06-20 20:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-07-09 14:55 - 2014-06-19 02:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll 2014-07-09 14:55 - 2014-06-19 02:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb 2014-07-09 14:55 - 2014-06-19 02:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollectorres.dll 2014-07-09 14:55 - 2014-06-19 01:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll 2014-07-09 14:55 - 2014-06-19 01:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\System32\vbscript.dll 2014-07-09 14:55 - 2014-06-19 01:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll 2014-07-09 14:55 - 2014-06-19 01:41 - 00083968 _____ (Microsoft Corporation) C:\Windows\System32\MshtmlDac.dll 2014-07-09 14:55 - 2014-06-19 01:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\System32\ieetwproxystub.dll 2014-07-09 14:55 - 2014-06-19 01:32 - 00051200 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll 2014-07-09 14:55 - 2014-06-19 01:31 - 00033792 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll 2014-07-09 14:55 - 2014-06-19 01:26 - 00598016 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll 2014-07-09 14:55 - 2014-06-19 01:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe 2014-07-09 14:55 - 2014-06-19 01:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollector.exe 2014-07-09 14:55 - 2014-06-19 01:23 - 00752640 _____ (Microsoft Corporation) C:\Windows\System32\jscript9diag.dll 2014-07-09 14:55 - 2014-06-19 01:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-07-09 14:55 - 2014-06-19 01:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe 2014-07-09 14:55 - 2014-06-19 01:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll 2014-07-09 14:55 - 2014-06-19 00:59 - 00038400 _____ (Microsoft Corporation) C:\Windows\System32\JavaScriptCollectionAgent.dll 2014-07-09 14:55 - 2014-06-19 00:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-07-09 14:55 - 2014-06-19 00:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\System32\msrating.dll 2014-07-09 14:55 - 2014-06-19 00:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll 2014-07-09 14:55 - 2014-06-19 00:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\System32\mshtmled.dll 2014-07-09 14:55 - 2014-06-19 00:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\System32\dxtrans.dll 2014-07-09 14:55 - 2014-06-19 00:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe 2014-07-09 14:55 - 2014-06-19 00:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-07-09 14:55 - 2014-06-19 00:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-07-09 14:55 - 2014-06-19 00:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-07-09 14:55 - 2014-06-19 00:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-07-09 14:55 - 2014-06-19 00:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll 2014-07-09 14:55 - 2014-06-19 00:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-07-09 14:55 - 2014-06-19 00:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-07-09 14:55 - 2014-06-19 00:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-07-09 14:55 - 2014-06-19 00:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl 2014-07-09 14:55 - 2014-06-19 00:27 - 01249280 _____ (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll 2014-07-09 14:55 - 2014-06-19 00:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-07-09 14:55 - 2014-06-19 00:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-07-09 14:55 - 2014-06-19 00:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-07-09 14:55 - 2014-06-19 00:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-07-09 14:55 - 2014-06-19 00:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-07-09 14:55 - 2014-06-19 00:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-07-09 14:55 - 2014-06-18 23:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-07-09 14:55 - 2014-06-18 23:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll 2014-07-09 14:55 - 2014-06-18 23:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-07-09 14:55 - 2014-06-18 23:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-07-09 14:55 - 2014-06-18 23:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll 2014-07-09 14:55 - 2014-06-18 23:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-07-09 14:55 - 2014-06-18 23:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-07-09 14:55 - 2014-06-18 23:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-07-09 14:55 - 2014-06-18 23:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-07-09 14:55 - 2014-06-18 23:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll 2014-07-09 14:55 - 2014-06-18 23:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll 2014-07-09 14:55 - 2014-06-18 23:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-07-09 14:55 - 2014-06-18 23:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-07-09 14:55 - 2014-06-18 23:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-07-09 14:55 - 2014-06-06 11:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\System32\qedit.dll 2014-07-09 14:55 - 2014-06-06 10:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2014-07-09 14:55 - 2014-06-05 15:45 - 01460736 _____ (Microsoft Corporation) C:\Windows\System32\lsasrv.dll 2014-07-09 14:55 - 2014-06-05 15:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-07-09 14:55 - 2014-06-05 15:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-07-09 14:55 - 2014-05-30 09:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\System32\kerberos.dll 2014-07-09 14:55 - 2014-05-30 09:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\System32\schannel.dll 2014-07-09 14:55 - 2014-05-30 09:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\System32\msv1_0.dll 2014-07-09 14:55 - 2014-05-30 09:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\System32\ncrypt.dll 2014-07-09 14:55 - 2014-05-30 09:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\System32\wdigest.dll 2014-07-09 14:55 - 2014-05-30 09:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\System32\TSpkg.dll 2014-07-09 14:55 - 2014-05-30 09:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\System32\credssp.dll 2014-07-09 14:55 - 2014-05-30 08:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-07-09 14:55 - 2014-05-30 08:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2014-07-09 14:55 - 2014-05-30 08:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-07-09 14:55 - 2014-05-30 08:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2014-07-09 14:55 - 2014-05-30 08:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2014-07-09 14:55 - 2014-05-30 08:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2014-07-09 14:55 - 2014-05-30 08:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2014-07-09 14:55 - 2014-05-30 07:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\afd.sys 2014-07-02 09:27 - 2014-07-02 09:27 - 00000000 ____D () C:\Users\Alfred\AppData\Local\{C154B5AD-93EF-4FFC-93DE-991C02D5EF8B} 2014-07-02 09:27 - 2014-07-02 09:27 - 00000000 ____D () C:\Users\Alfred\AppData\Local\{1E226010-767B-46FE-B1A3-5B52BBF5DA4A} ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-07-29 22:33 - 2014-07-29 22:33 - 00000000 ____D () C:\FRST 2014-07-29 21:56 - 2012-11-16 12:50 - 00000000 ____D () C:\users\Alfred 2014-07-29 21:55 - 2014-05-06 14:42 - 00000000 ___SD () C:\Windows\System32\CompatTel 2014-07-29 21:55 - 2014-01-29 17:12 - 00000000 ___HD () C:\ProgramData\CanonIJScan 2014-07-29 21:55 - 2014-01-28 15:50 - 00000000 ____D () C:\ProgramData\CanonIJ 2014-07-29 21:55 - 2013-03-13 23:08 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-07-29 21:55 - 2013-03-13 23:08 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight 2014-07-29 21:55 - 2012-09-07 03:46 - 00000000 ____D () C:\Windows\System32\Macromed 2014-07-29 21:55 - 2012-02-24 05:01 - 00000000 ____D () C:\Program Files\Windows Journal 2014-07-29 21:55 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism 2014-07-29 21:55 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\System32\NDF 2014-07-29 21:55 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\System32\Dism 2014-07-29 21:55 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache 2014-07-29 21:55 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration 2014-07-29 21:55 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-07-29 21:55 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat 2014-07-29 21:55 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared 2014-07-29 21:53 - 2014-01-28 11:59 - 00000000 ____D () C:\ProgramData\Kaspersky Lab 2014-07-29 21:53 - 2012-11-16 20:59 - 00000000 __RHD () C:\MSOCache 2014-07-24 21:00 - 2012-09-07 03:05 - 01738630 _____ () C:\Windows\WindowsUpdate.log 2014-07-24 20:16 - 2012-09-07 03:46 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-07-24 09:42 - 2012-11-25 11:53 - 00000000 ____D () C:\ProgramData\CanonIJPLM 2014-07-24 08:57 - 2009-07-14 05:45 - 00021200 ____H () C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-07-24 08:57 - 2009-07-14 05:45 - 00021200 ____H () C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-07-24 08:49 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-07-24 08:48 - 2009-07-14 05:51 - 00093489 _____ () C:\Windows\setupact.log 2014-07-17 09:01 - 2014-07-17 09:01 - 27843432 _____ (pdfforge ) C:\Users\Alfred\Downloads\PDFCreator-1_7_3_setup.exe 2014-07-11 18:43 - 2013-10-20 12:52 - 00000000 ____D () C:\Users\Alfred\Documents\Bluetooth Folder 2014-07-10 08:44 - 2009-07-14 05:45 - 00446960 _____ () C:\Windows\System32\FNTCACHE.DAT 2014-07-09 20:16 - 2012-11-16 21:00 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-07-09 20:11 - 2013-08-05 09:49 - 00000000 ____D () C:\Windows\System32\MRT 2014-07-09 20:09 - 2012-11-16 21:55 - 96441528 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe 2014-07-09 14:50 - 2012-09-07 03:46 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-07-09 14:50 - 2012-09-07 03:46 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-07-09 14:50 - 2012-09-07 03:46 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-07-08 11:36 - 2014-03-26 11:14 - 00166912 ___SH () C:\Users\Alfred\Desktop\Thumbs.db 2014-07-02 09:27 - 2014-07-02 09:27 - 00000000 ____D () C:\Users\Alfred\AppData\Local\{C154B5AD-93EF-4FFC-93DE-991C02D5EF8B} 2014-07-02 09:27 - 2014-07-02 09:27 - 00000000 ____D () C:\Users\Alfred\AppData\Local\{1E226010-767B-46FE-B1A3-5B52BBF5DA4A} 2014-06-30 03:09 - 2014-07-09 14:56 - 00519168 _____ (Microsoft Corporation) C:\Windows\System32\aepdu.dll 2014-06-30 03:04 - 2014-07-09 14:56 - 00424448 _____ (Microsoft Corporation) C:\Windows\System32\aeinv.dll 2014-06-29 09:34 - 2012-11-16 21:26 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service Files to move or delete: ==================== C:\Users\Alfred\cnmss Canon MG5200 series Printer (Local).dll Some content of TEMP: ==================== C:\Users\Alfred\AppData\Local\Temp\catalyst_mobility_64-bit_util.exe C:\Users\Alfred\AppData\Local\Temp\raptrpatch.exe ==================== Known DLLs (Whitelisted) ================ ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit ==================== Restore Points ========================= Restore point made on: 2014-07-02 08:55:37 Restore point made on: 2014-07-08 07:57:51 Restore point made on: 2014-07-09 20:07:08 Restore point made on: 2014-07-15 08:27:36 Restore point made on: 2014-07-18 09:15:19 Restore point made on: 2014-07-22 09:19:11 Restore point made on: 2014-07-24 21:00:34 ==================== Memory info =========================== Percentage of memory in use: 15% Total physical RAM: 4066.36 MB Available physical RAM: 3439.56 MB Total Pagefile: 4064.56 MB Available Pagefile: 3433 MB Total Virtual: 8192 MB Available Virtual: 8191.88 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:448.71 GB) (Free:389.78 GB) NTFS Drive e: (Sicherung Windows 7) (Fixed) (Total:16.71 GB) (Free:1.08 GB) NTFS ==>[System with boot components (obtained from reading drive)] Drive f: (Reparaturdatenträger Windows 7 6) (CDROM) (Total:0.17 GB) (Free:0 GB) UDF Drive g: (PENDRIVE) (Removable) (Total:3.76 GB) (Free:0.15 GB) FAT32 Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS Drive y: (System Reserved) (Fixed) (Total:0.34 GB) (Free:0.3 GB) NTFS ==>[System with boot components (obtained from reading drive)] ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: F19EAAEA) Partition 1: (Not Active) - (Size=17 GB) - (Type=27) Partition 2: (Active) - (Size=350 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=449 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (Size: 4 GB) (Disk ID: B0BCD68E) No partition Table on disk 1. LastRegBack: 2014-07-18 10:50 ==================== End Of Log ============================ |
30.07.2014, 07:15 | #2 |
/// the machine /// TB-Ausbilder | Windows 7 starte nicht mehr, Wiederherstellung klappt auch nicht! hi,
__________________Drücke bitte die + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter LastRegBack: 2014-07-18 10:50
Das Tool erstellt eine Fixlog.txt auf deinem USB Stick. Poste den Inhalt bitte hier.
__________________ |
30.07.2014, 08:32 | #3 |
| Windows 7 starte nicht mehr, Wiederherstellung klappt auch nicht! anbei die Datei.
__________________Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 26-07-2014 Ran by SYSTEM at 2014-07-30 09:13:13 Run:1 Running from G:\ Boot Mode: Recovery ============================================== Content of fixlist: ***************** LastRegBack: 2014-07-18 10:50 ***************** Could not copy DEFAULT hive. Could not restore DEFAULT hive from registry back up. Could not copy SAM hive. Could not restore SAM hive from registry back up. Could not copy SECURITY hive. Could not restore SECURITY hive from registry back up. Could not copy SOFTWARE hive. Could not restore SOFTWARE hive from registry back up. Could not copy SYSTEM hive. Could not restore SYSTEM hive from registry back up. ==== End of Fixlog ==== Andi |
30.07.2014, 15:20 | #4 |
/// the machine /// TB-Ausbilder | Windows 7 starte nicht mehr, Wiederherstellung klappt auch nicht! Joah, das is ja eher nit so doll. Keine Ahnung was da ist. Ich würd jetzt die scheibe einlegen und Win neu drüber installieren.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
31.07.2014, 08:03 | #5 |
| Windows 7 starte nicht mehr, Wiederherstellung klappt auch nicht! OK, dann mache ich den Laptop platt, habe die Daten mit einer Knoppix CD gesichert. gruß Andi |
31.07.2014, 22:41 | #6 |
/// the machine /// TB-Ausbilder | Windows 7 starte nicht mehr, Wiederherstellung klappt auch nicht! ok.
__________________ --> Windows 7 starte nicht mehr, Wiederherstellung klappt auch nicht! |
Themen zu Windows 7 starte nicht mehr, Wiederherstellung klappt auch nicht! |
.dll, adobe, adobe flash player, avp, desktop, download, explorer, file, flash player, home, kaspersky, microsoft, monitor, mozilla, realtek, registry, scan, security, services.exe, svchost.exe, temp, usb, win 7 - pc fährt nicht hoch, windows, winlogon.exe, wlan |