![]() |
|
Log-Analyse und Auswertung: Windows 7 weisser SperbildschirmWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #1 |
![]() | ![]() Windows 7 weisser Sperbildschirm Hallo, ich kann seit einiger Zeit mein Laptop nicht mehr nutzen. Kurz nach dem ich ihn anschalte kommt ein weißer Sperrbildschirm und ich kann nichts mehr machen. Das geschieht auch im abgesicherten Modus und reparieren lässt er sich auch nicht mehr. Die OTLPE-CD hab ich schon gebrannt und diese OTL Logfile erstellt:OTL Logfile: Code:
ATTFilter OTL logfile created on: 12/16/2014 1:27:50 PM - Run OTLPE by OldTimer - Version 3.1.48.0 Folder = X:\Programs\OTLPE Windows 7 Professional Service Pack 1 (Version = 6.1.7601) - Type = System Internet Explorer (Version = 9.11.9600.17420) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 2.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 87.00% Memory free 2.00 Gb Paging File | 2.00 Gb Available in Paging File | 97.00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = D: | %SystemRoot% = D:\Windows | %ProgramFiles% = D:\Program Files Drive C: | 100.00 Mb Total Space | 74.34 Mb Free Space | 74.35% Space Free | Partition Type: NTFS Drive D: | 138.94 Gb Total Space | 106.26 Gb Free Space | 76.47% Space Free | Partition Type: NTFS Drive E: | 135.05 Gb Total Space | 107.05 Gb Free Space | 79.27% Space Free | Partition Type: NTFS Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS Computer Name: REATOGO | User Name: SYSTEM Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days Using ControlSet: ControlSet002 ========== Win32 Services (SafeList) ========== SRV - [2014/11/15 20:01:12 | 000,102,912 | ---- | M] (Microsoft Corporation) [On_Demand] -- D:\Windows\System32\IEEtwCollector.exe -- (IEEtwCollectorService) SRV - [2014/09/21 05:32:26 | 000,276,376 | R--- | M] (Symantec Corporation) [Auto] -- D:\Program Files\Norton Internet Security\Engine\21.6.0.32\NIS.exe -- (NIS) SRV - [2014/03/17 18:52:40 | 000,327,680 | ---- | M] () [Auto] -- D:\Program Files\Serviio\bin\ServiioService.exe -- (Serviio) SRV - [2013/05/26 23:57:27 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand] -- D:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2009/09/21 09:55:12 | 000,858,384 | ---- | M] (Intel(R) Corporation) [Auto] -- D:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng) Intel(R) SRV - [2009/09/21 09:31:36 | 000,473,360 | ---- | M] (Intel(R) Corporation) [Auto] -- D:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc) Intel(R) SRV - [2009/07/13 20:16:15 | 000,016,384 | ---- | M] (Microsoft Corporation) [On_Demand] -- D:\Windows\System32\StorSvc.dll -- (StorSvc) SRV - [2009/07/13 20:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand] -- D:\Windows\System32\sensrsvc.dll -- (SensrSvc) SRV - [2009/07/13 20:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand] -- D:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc) ========== Driver Services (SafeList) ========== DRV - [2014/12/07 19:23:35 | 001,636,696 | ---- | M] (Symantec Corporation) [Kernel | On_Demand] -- D:\Program Files\Norton Internet Security\NortonData\21.6.0.32\Definitions\VirusDefs\20141209.019\NAVEX15.SYS -- (NAVEX15) DRV - [2014/12/07 19:23:35 | 000,095,704 | ---- | M] (Symantec Corporation) [Kernel | On_Demand] -- D:\Program Files\Norton Internet Security\NortonData\21.6.0.32\Definitions\VirusDefs\20141209.019\NAVENG.SYS -- (NAVENG) DRV - [2014/12/05 12:33:54 | 000,479,448 | ---- | M] (Symantec Corporation) [Kernel | System] -- D:\Program Files\Norton Internet Security\NortonData\21.6.0.32\Definitions\IPSDefs\20141209.001\IDSvix86.sys -- (IDSVix86) DRV - [2014/12/02 19:45:46 | 001,138,392 | ---- | M] (Symantec Corporation) [Kernel | System] -- D:\Program Files\Norton Internet Security\NortonData\21.6.0.32\Definitions\BASHDefs\20141203.001_cc9\BHDrvx86.sys -- (BHDrvx86) DRV - [2014/11/12 15:04:35 | 000,142,936 | ---- | M] (Symantec Corporation) [Kernel | On_Demand] -- D:\Windows\System32\drivers\SYMEVENT.SYS -- (SymEvent) DRV - [2014/08/26 15:08:29 | 000,378,672 | ---- | M] (Symantec Corporation) [Kernel | System] -- D:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl) DRV - [2014/08/26 15:08:28 | 000,111,408 | ---- | M] (Symantec Corporation) [Kernel | On_Demand] -- D:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv) DRV - [2014/08/25 21:26:58 | 000,447,704 | R--- | M] (Symantec Corporation) [Kernel | System] -- D:\Windows\system32\drivers\NIS\1506000.020\SYMNETS.SYS -- (SymNetS) DRV - [2014/08/25 21:26:57 | 000,936,152 | R--- | M] (Symantec Corporation) [File_System | Boot] -- D:\Windows\System32\drivers\NIS\1506000.020\SymEFA.sys -- (SymEFA) DRV - [2014/08/25 21:26:57 | 000,063,576 | R--- | M] (Symantec Corporation) [Kernel | System] -- D:\Windows\System32\drivers\SymIMV.sys -- (SymIM) DRV - [2014/08/25 21:26:56 | 000,367,704 | R--- | M] (Symantec Corporation) [Kernel | Boot] -- D:\Windows\System32\drivers\NIS\1506000.020\SymDS.sys -- (SymDS) DRV - [2014/08/25 21:20:22 | 000,664,792 | R--- | M] (Symantec Corporation) [File_System | On_Demand] -- D:\Windows\system32\drivers\NIS\1506000.020\SRTSP.SYS -- (SRTSP) DRV - [2014/08/25 21:20:22 | 000,032,984 | R--- | M] (Symantec Corporation) [Kernel | System] -- D:\Windows\system32\drivers\NIS\1506000.020\SRTSPX.SYS -- (SRTSPX) Symantec Real Time Storage Protection (PEL) DRV - [2014/08/06 14:48:16 | 000,209,624 | R--- | M] (Symantec Corporation) [Kernel | System] -- D:\Windows\system32\drivers\NIS\1506000.020\Ironx86.SYS -- (SymIRON) DRV - [2014/02/20 18:14:34 | 000,127,064 | R--- | M] (Symantec Corporation) [Kernel | System] -- D:\Windows\system32\drivers\NIS\1506000.020\ccSetx86.sys -- (ccSet_NIS) DRV - [2010/11/20 16:29:24 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV - [2010/11/20 16:29:03 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\Windows\system32\drivers\vmbus.sys -- (vmbus) DRV - [2010/11/20 16:29:03 | 000,062,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\Windows\system32\drivers\dmvsc.sys -- (dmvsc) DRV - [2010/11/20 16:29:03 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot] -- D:\Windows\System32\drivers\vmstorfl.sys -- (storflt) DRV - [2010/11/20 16:29:03 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\Windows\System32\drivers\winusb.sys -- (WinUsb) DRV - [2010/11/20 16:29:03 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\Windows\system32\drivers\storvsc.sys -- (storvsc) DRV - [2010/11/20 16:29:03 | 000,027,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\Windows\system32\drivers\TsUsbGD.sys -- (TsUsbGD) DRV - [2010/11/20 16:29:03 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\Windows\system32\drivers\VMBusHID.sys -- (VMBusHID) DRV - [2010/11/20 16:29:03 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\Windows\system32\drivers\vms3cap.sys -- (s3cap) DRV - [2009/09/15 06:40:18 | 006,114,816 | ---- | M] (Intel Corporation) [Kernel | On_Demand] -- D:\Windows\System32\drivers\NETw5s32.sys -- (NETw5s32) Intel(R) DRV - [2009/08/11 06:58:30 | 000,488,448 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand] -- D:\Windows\System32\drivers\CHDRT32.sys -- (CnxtHdAudService) DRV - [2009/08/06 11:16:00 | 009,824,000 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand] -- D:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm) DRV - [2009/07/27 09:06:44 | 000,051,712 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand] -- D:\Windows\System32\drivers\L1C62x86.sys -- (L1C) NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\diseck_ON_D\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp IE - HKU\diseck_ON_D\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de IE - HKU\diseck_ON_D\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = BB 83 BD F4 B1 FE CF 01 [binary data] IE - HKU\diseck_ON_D\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.5.0: D:\Windows\System32\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.5.0: D:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: D:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: D:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.5: D:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.6.0.32\IPSFF [2014/11/12 15:06:23 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.6.0.32\coFFPlgn\ [2014/12/11 04:07:39 | 000,000,000 | ---D | M] O1 HOSTS File: ([2009/06/10 16:39:37 | 000,000,824 | ---- | M]) - D:\Windows\System32\drivers\etc\hosts O2 - BHO: (Norton Identity Protection) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - D:\Program Files\Norton Internet Security\Engine\21.6.0.32\CoIEPlg.dll (Symantec Corporation) O2 - BHO: (Norton Vulnerability Protection) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - D:\Program Files\Norton Internet Security\Engine\21.6.0.32\IPS\IPSBHO.dll (Symantec Corporation) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - D:\Program Files\Norton Internet Security\Engine\21.6.0.32\CoIEPlg.dll (Symantec Corporation) O3 - HKU\diseck_ON_D\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - D:\Program Files\Norton Internet Security\Engine\21.6.0.32\CoIEPlg.dll (Symantec Corporation) O4 - HKLM..\Run: [cAudioFilterAgent] D:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent.exe (Conexant Systems, Inc.) O4 - HKLM..\Run: [NvCplDaemon] D:\Windows\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [PDFPrint] D:\Program Files\PDF24\pdf24.exe (Geek Software GmbH) O4 - HKU\diseck_ON_D..\Run: [EPSON SX210 Series] D:\Windows\System32\spool\DRIVERS\W32X86\3\E_FATIFDE.EXE (SEIKO EPSON CORPORATION) O4 - HKLM..\RunOnce: [*Restore] D:\Windows\System32\rstrui.exe (Microsoft Corporation) O4 - HKU\LocalService_ON_D..\RunOnce: [mctadmin] D:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - HKU\NetworkService_ON_D..\RunOnce: [mctadmin] D:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - Startup: D:\Users\diseck\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AutoStarter.lnk () O4 - Startup: D:\Users\diseck\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ja.lnk () O4 - Startup: D:\Users\diseck\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Serviio.lnk () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O13 - gopher Prefix: missing O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1 O20 - HKLM Winlogon: Shell - (explorer.exe) - D:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - D:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKU\diseck_ON_D Winlogon: Shell - (C:\Users\diseck\AppData\Roaming\loadit.exe) - D:\Users\diseck\AppData\Roaming\loadit.exe () O20 - HKU\diseck_ON_D Winlogon: UserInit - (C:\Users\diseck\AppData\Roaming\loadit.exe) - D:\Users\diseck\AppData\Roaming\loadit.exe () O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009/06/10 16:42:20 | 000,000,024 | ---- | M] () - D:\autoexec.bat -- [ NTFS ] O32 - AutoRun File - [2006/03/24 06:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2014/12/10 08:35:38 | 000,000,000 | ---D | C] -- D:\Users\diseck\AppData\Local\PDF24 [2014/12/10 08:34:08 | 000,000,000 | ---D | C] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF24 [2014/12/10 08:34:04 | 000,000,000 | ---D | C] -- D:\Program Files\PDF24 [2014/12/10 08:33:56 | 000,000,000 | ---D | C] -- D:\Users\diseck\AppData\Local\Programs [2014/12/10 07:37:49 | 000,000,000 | -HSD | C] -- D:\Users\diseck\AppData\Local\EmieUserList [2014/12/10 07:37:49 | 000,000,000 | -HSD | C] -- D:\Users\diseck\AppData\Local\EmieSiteList [2014/12/10 07:37:49 | 000,000,000 | -HSD | C] -- D:\Users\diseck\AppData\Local\EmieBrowserModeList [2014/12/04 17:47:33 | 000,000,000 | ---D | C] -- D:\Users\diseck\Documents\Daten Wichtig [2014/12/04 06:11:33 | 000,000,000 | ---D | C] -- D:\ProgramData\McAfee [2014/12/04 06:11:32 | 000,000,000 | ---D | C] -- D:\Program Files\McAfee Security Scan [2014/12/04 06:10:03 | 000,000,000 | ---D | C] -- D:\Program Files\Common Files\Adobe [2014/12/04 06:10:03 | 000,000,000 | ---D | C] -- D:\Program Files\Adobe [2014/12/04 06:09:35 | 000,000,000 | ---D | C] -- D:\ProgramData\Adobe [2014/12/04 06:08:25 | 000,000,000 | ---D | C] -- D:\Users\diseck\AppData\Local\Adobe [2014/12/02 12:03:43 | 000,000,000 | ---D | C] -- D:\Users\diseck\AppData\Roaming\WinRAR [2014/11/24 18:52:22 | 000,000,000 | ---D | C] -- D:\Users\diseck\AppData\Local\CrashDumps [2014/11/23 11:15:18 | 000,000,000 | ---D | C] -- D:\Users\diseck\AppData\Local\Diagnostics [2014/11/23 08:28:13 | 000,342,016 | ---- | C] (Seiko Epson Corporation) -- D:\Windows\System32\eswiaud.dll [2014/11/23 08:28:13 | 000,128,392 | ---- | C] (Seiko Epson Corporation) -- D:\Windows\System32\esdevapp.exe [2014/11/23 08:28:13 | 000,015,872 | ---- | C] (SEIKO EPSON CORP.) -- D:\Windows\System32\escdev.dll [2014/11/23 08:28:12 | 000,000,000 | ---D | C] -- D:\Program Files\epson [2014/11/22 16:43:43 | 000,000,000 | ---D | C] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON [2014/11/22 16:42:35 | 000,086,528 | ---- | C] (SEIKO EPSON CORPORATION) -- D:\Windows\System32\E_FLBFDE.DLL [2014/11/22 16:42:35 | 000,008,192 | ---- | C] (SEIKO EPSON CORP.) -- D:\Windows\System32\E_DCINST.DLL [2014/11/22 16:42:34 | 000,078,848 | ---- | C] (SEIKO EPSON CORPORATION) -- D:\Windows\System32\E_FD4BFDE.DLL [2014/11/22 16:42:33 | 000,000,000 | ---D | C] -- D:\Windows\System32\DRVSTORE [2014/11/22 16:41:13 | 000,000,000 | ---D | C] -- D:\ProgramData\EPSON [2014/11/18 16:28:46 | 000,000,000 | ---D | C] -- D:\Users\diseck\AppData\Roaming\vlc [2014/11/18 16:28:31 | 000,000,000 | ---D | C] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN [2014/11/18 16:27:50 | 000,000,000 | ---D | C] -- D:\Program Files\VideoLAN [2014/11/18 06:45:49 | 000,000,000 | ---D | C] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR [2014/11/18 06:45:48 | 000,000,000 | ---D | C] -- D:\Users\diseck\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR [2014/11/18 06:45:43 | 000,000,000 | ---D | C] -- D:\Program Files\WinRAR [2014/11/18 06:31:26 | 000,000,000 | ---D | C] -- D:\Users\diseck\Documents\UseNeXT [2014/11/18 06:31:25 | 000,000,000 | ---D | C] -- D:\Users\diseck\AppData\Roaming\UseNeXT [2014/11/18 06:31:15 | 000,000,000 | ---D | C] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\UseNeXT [2014/11/18 06:31:15 | 000,000,000 | ---D | C] -- D:\Program Files\UseNeXT [2014/11/17 05:47:03 | 002,285,056 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\msmpeg2vdec.dll [2014/11/17 04:31:23 | 000,000,000 | ---D | C] -- D:\Users\diseck\AppData\Roaming\OpenOffice [2014/11/17 04:20:39 | 000,000,000 | --SD | C] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1 [2014/11/17 04:19:59 | 000,000,000 | ---D | C] -- D:\Program Files\OpenOffice 4 [2014/11/17 04:14:55 | 000,000,000 | ---D | C] -- D:\Users\diseck\Desktop\OpenOffice 4.1.1 (de) Installation Files [2014/11/17 03:55:11 | 001,699,328 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\esent.dll [2014/11/17 03:55:11 | 000,074,240 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\fsutil.exe [2014/11/17 03:55:08 | 000,417,792 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\WMPhoto.dll [2014/11/17 03:54:57 | 001,987,584 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\d3d10warp.dll [2014/11/17 03:54:56 | 002,616,320 | ---- | C] (Microsoft Corporation) -- D:\Windows\explorer.exe [2014/11/17 03:54:53 | 000,006,144 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\KBDYAK.DLL [2014/11/17 03:54:53 | 000,006,144 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\KBDTAT.DLL [2014/11/17 03:54:53 | 000,006,144 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\KBDRU1.DLL [2014/11/17 03:54:53 | 000,006,144 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\KBDBASH.DLL [2014/11/17 03:54:53 | 000,005,632 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\KBDRU.DLL [2014/11/17 03:54:51 | 003,419,136 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\d2d1.dll [2014/11/17 03:54:50 | 000,667,648 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\MsSpellCheckingFacility.exe [2014/11/17 03:51:19 | 000,181,344 | ---- | C] (SoftwareNetz) -- D:\Windows\snui.exe [2014/11/17 03:51:19 | 000,000,000 | ---D | C] -- D:\Users\diseck\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SoftwareNetz [2014/11/17 03:51:18 | 000,000,000 | ---D | C] -- D:\Softwarenetz [2014/11/17 03:45:48 | 000,000,000 | ---D | C] -- D:\Users\diseck\AppData\Roaming\Adobe ========== Files - Modified Within 30 Days ========== [2014/12/14 19:31:12 | 000,067,584 | --S- | M] () -- D:\Windows\bootstat.dat [2014/12/14 19:31:12 | 000,000,110 | ---- | M] () -- D:\.dir [2014/12/14 19:30:42 | 000,001,094 | ---- | M] () -- D:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2014/12/14 19:30:18 | 1606,623,232 | -HS- | M] () -- D:\hiberfil.sys [2014/12/10 19:21:35 | 000,027,248 | -H-- | M] () -- D:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2014/12/10 19:21:35 | 000,027,248 | -H-- | M] () -- D:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2014/12/10 19:20:17 | 000,000,681 | ---- | M] () -- D:\Users\diseck\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ja.lnk [2014/12/10 19:20:04 | 000,691,924 | ---- | M] () -- D:\Users\diseck\AppData\Roaming\loadit.exe [2014/12/10 19:14:19 | 000,000,708 | ---- | M] () -- D:\Users\diseck\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AutoStarter.lnk [2014/12/10 18:23:00 | 000,001,098 | ---- | M] () -- D:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2014/12/10 08:34:08 | 000,001,823 | ---- | M] () -- D:\Users\Public\Desktop\PDF24 Creator.lnk [2014/12/10 08:34:08 | 000,001,803 | ---- | M] () -- D:\Users\Public\Desktop\PDF24 Fax.lnk [2014/12/10 08:34:08 | 000,000,000 | ---D | M] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF24 [2014/12/10 02:55:16 | 000,002,121 | ---- | M] () -- D:\Users\Public\Desktop\Google Chrome.lnk [2014/12/08 09:33:11 | 000,698,926 | ---- | M] () -- D:\Windows\System32\perfh007.dat [2014/12/08 09:33:11 | 000,653,724 | ---- | M] () -- D:\Windows\System32\perfh009.dat [2014/12/08 09:33:11 | 000,149,034 | ---- | M] () -- D:\Windows\System32\perfc007.dat [2014/12/08 09:33:11 | 000,121,596 | ---- | M] () -- D:\Windows\System32\perfc009.dat [2014/12/05 18:10:25 | 102,609,385 | ---- | M] () -- D:\Users\diseck\AppData\Roaming\autostarter.exe [2014/12/04 06:45:54 | 000,015,192 | ---- | M] () -- D:\Users\diseck\Desktop\1.Januar 2013.ods [2014/11/23 08:28:15 | 000,000,934 | ---- | M] () -- D:\Users\Public\Desktop\EPSON Scan.lnk [2014/11/23 08:28:15 | 000,000,000 | ---D | M] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON [2014/11/22 16:36:18 | 000,012,615 | ---- | M] () -- D:\Users\diseck\Desktop\Unbenannt 1.odt [2014/11/21 05:28:17 | 000,001,807 | ---- | M] () -- D:\Users\diseck\Desktop\UseNeXT by Tangysoft.lnk [2014/11/21 05:28:17 | 000,000,000 | ---D | M] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\UseNeXT [2014/11/19 06:18:29 | 000,286,616 | ---- | M] () -- D:\Windows\System32\FNTCACHE.DAT [2014/11/18 16:28:31 | 000,001,028 | ---- | M] () -- D:\Users\Public\Desktop\VLC media player.lnk [2014/11/18 16:28:31 | 000,000,000 | ---D | M] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN [2014/11/18 06:45:51 | 000,000,000 | ---D | M] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR [2014/11/17 04:46:31 | 000,000,000 | -H-- | M] () -- D:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf [2014/11/17 04:21:08 | 000,000,000 | --SD | M] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1 [2014/11/17 04:20:41 | 000,001,074 | ---- | M] () -- D:\Users\Public\Desktop\OpenOffice 4.1.1.lnk [2014/11/17 03:55:57 | 000,001,667 | ---- | M] () -- D:\Users\diseck\Desktop\Rechnung3.lnk [2014/11/17 03:51:21 | 000,001,667 | ---- | M] () -- D:\Users\diseck\Desktop\Rechnung5.lnk ========== Files Created - No Company Name ========== [2014/12/10 19:20:16 | 000,000,681 | ---- | C] () -- D:\Users\diseck\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ja.lnk [2014/12/10 19:20:03 | 000,691,924 | ---- | C] () -- D:\Users\diseck\AppData\Roaming\loadit.exe [2014/12/10 19:14:19 | 000,000,708 | ---- | C] () -- D:\Users\diseck\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AutoStarter.lnk [2014/12/10 19:14:17 | 102,609,385 | ---- | C] () -- D:\Users\diseck\AppData\Roaming\autostarter.exe [2014/12/10 08:34:08 | 000,001,823 | ---- | C] () -- D:\Users\Public\Desktop\PDF24 Creator.lnk [2014/12/10 08:34:08 | 000,001,803 | ---- | C] () -- D:\Users\Public\Desktop\PDF24 Fax.lnk [2014/12/04 06:45:50 | 000,015,192 | ---- | C] () -- D:\Users\diseck\Desktop\1.Januar 2013.ods [2014/11/23 08:28:15 | 000,000,934 | ---- | C] () -- D:\Users\Public\Desktop\EPSON Scan.lnk [2014/11/22 16:36:15 | 000,012,615 | ---- | C] () -- D:\Users\diseck\Desktop\Unbenannt 1.odt [2014/11/18 16:28:31 | 000,001,028 | ---- | C] () -- D:\Users\Public\Desktop\VLC media player.lnk [2014/11/18 06:31:15 | 000,001,807 | ---- | C] () -- D:\Users\diseck\Desktop\UseNeXT by Tangysoft.lnk [2014/11/17 04:46:31 | 000,000,000 | -H-- | C] () -- D:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf [2014/11/17 04:20:41 | 000,001,074 | ---- | C] () -- D:\Users\Public\Desktop\OpenOffice 4.1.1.lnk [2014/11/17 03:55:57 | 000,001,667 | ---- | C] () -- D:\Users\diseck\Desktop\Rechnung3.lnk [2014/11/17 03:51:21 | 000,001,667 | ---- | C] () -- D:\Users\diseck\Desktop\Rechnung5.lnk [2011/04/11 20:30:05 | 000,698,926 | ---- | C] () -- D:\Windows\System32\perfh007.dat [2011/04/11 20:30:05 | 000,295,922 | ---- | C] () -- D:\Windows\System32\perfi007.dat [2011/04/11 20:30:05 | 000,149,034 | ---- | C] () -- D:\Windows\System32\perfc007.dat [2011/04/11 20:30:05 | 000,038,104 | ---- | C] () -- D:\Windows\System32\perfd007.dat [2010/11/20 16:29:26 | 000,066,048 | ---- | C] () -- D:\Windows\System32\PrintBrmUi.exe [2010/11/20 16:29:24 | 000,252,928 | ---- | C] () -- D:\Windows\System32\DShowRdpFilter.dll [2009/07/14 06:29:50 | 000,006,088 | ---- | C] () -- D:\Windows\System32\drivers\CDConfig.bin [2009/07/13 23:57:37 | 000,067,584 | --S- | C] () -- D:\Windows\bootstat.dat [2009/07/13 23:33:53 | 000,286,616 | ---- | C] () -- D:\Windows\System32\FNTCACHE.DAT [2009/07/13 21:05:48 | 000,653,724 | ---- | C] () -- D:\Windows\System32\perfh009.dat [2009/07/13 21:05:48 | 000,291,294 | ---- | C] () -- D:\Windows\System32\perfi009.dat [2009/07/13 21:05:48 | 000,121,596 | ---- | C] () -- D:\Windows\System32\perfc009.dat [2009/07/13 21:05:48 | 000,031,548 | ---- | C] () -- D:\Windows\System32\perfd009.dat [2009/07/13 21:05:05 | 000,000,741 | ---- | C] () -- D:\Windows\System32\NOISE.DAT [2009/07/13 21:04:11 | 000,215,943 | ---- | C] () -- D:\Windows\System32\dssec.dat [2009/07/13 18:55:01 | 000,043,131 | ---- | C] () -- D:\Windows\mib.bin [2009/07/13 18:51:43 | 000,073,728 | ---- | C] () -- D:\Windows\System32\BthpanContextHandler.dll [2009/07/13 18:42:10 | 000,064,000 | ---- | C] () -- D:\Windows\System32\BWContextHandler.dll [2009/06/10 16:26:10 | 000,673,088 | ---- | C] () -- D:\Windows\System32\mlang.dat ========== LOP Check ========== [2014/11/12 12:49:39 | 000,000,000 | -HSD | M] -- D:\ProgramData\Anwendungsdaten [2009/07/13 23:53:55 | 000,000,000 | -HSD | M] -- D:\ProgramData\Application Data [2009/07/13 23:53:55 | 000,000,000 | -HSD | M] -- D:\ProgramData\Desktop [2009/07/13 23:53:55 | 000,000,000 | -HSD | M] -- D:\ProgramData\Documents [2014/11/12 12:49:39 | 000,000,000 | -HSD | M] -- D:\ProgramData\Dokumente [2014/11/22 16:43:55 | 000,000,000 | ---D | M] -- D:\ProgramData\EPSON [2014/11/12 12:49:39 | 000,000,000 | -HSD | M] -- D:\ProgramData\Favoriten [2009/07/13 23:53:55 | 000,000,000 | -HSD | M] -- D:\ProgramData\Favorites [2009/07/13 23:53:55 | 000,000,000 | -HSD | M] -- D:\ProgramData\Start Menu [2014/11/12 12:49:39 | 000,000,000 | -HSD | M] -- D:\ProgramData\Startmenü [2009/07/13 23:53:55 | 000,000,000 | -HSD | M] -- D:\ProgramData\Templates [2014/11/12 12:49:39 | 000,000,000 | -HSD | M] -- D:\ProgramData\Vorlagen [2009/07/13 23:53:46 | 000,011,468 | ---- | M] () -- D:\Windows\Tasks\SCHEDLGU.TXT ========== Purity Check ========== < End of report > Ich hoffe mir kann einer helfen! Vielen Dank im Vorraus! |
Themen zu Windows 7 weisser Sperbildschirm |
autorun, bho, cdrom, defender, desktop, explorer, explorer.exe, firefox, format, helper, installation, laptop, logfile, microsoft, norton internet security, nvidia, registry, scan, security, software, symantec, system32, update, windows, winlogon |