Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Windows 7 weisser Sperbildschirm

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

 
Alt 16.12.2014, 14:28   #1
MickeyMonday
 
Windows 7 weisser Sperbildschirm - Standard

Windows 7 weisser Sperbildschirm



Hallo,

ich kann seit einiger Zeit mein Laptop nicht mehr nutzen. Kurz nach dem ich ihn anschalte kommt ein weißer Sperrbildschirm und ich kann nichts mehr machen. Das geschieht auch im abgesicherten Modus und reparieren lässt er sich auch nicht mehr.

Die OTLPE-CD hab ich schon gebrannt und diese OTL Logfile erstellt:OTL Logfile:
Code:
ATTFilter
OTL logfile created on: 12/16/2014 1:27:50 PM - Run 
OTLPE by OldTimer - Version 3.1.48.0 Folder = X:\Programs\OTLPE
Windows 7 Professional Service Pack 1 (Version = 6.1.7601) - Type = System
Internet Explorer (Version = 9.11.9600.17420)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

2.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 87.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 97.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = D: | %SystemRoot% = D:\Windows | %ProgramFiles% = D:\Program Files
Drive C: | 100.00 Mb Total Space | 74.34 Mb Free Space | 74.35% Space Free | Partition Type: NTFS
Drive D: | 138.94 Gb Total Space | 106.26 Gb Free Space | 76.47% Space Free | Partition Type: NTFS
Drive E: | 135.05 Gb Total Space | 107.05 Gb Free Space | 79.27% Space Free | Partition Type: NTFS
Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet002

========== Win32 Services (SafeList) ==========

SRV - [2014/11/15 20:01:12 | 000,102,912 | ---- | M] (Microsoft Corporation) [On_Demand] -- D:\Windows\System32\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV - [2014/09/21 05:32:26 | 000,276,376 | R--- | M] (Symantec Corporation) [Auto] -- D:\Program Files\Norton Internet Security\Engine\21.6.0.32\NIS.exe -- (NIS)
SRV - [2014/03/17 18:52:40 | 000,327,680 | ---- | M] () [Auto] -- D:\Program Files\Serviio\bin\ServiioService.exe -- (Serviio)
SRV - [2013/05/26 23:57:27 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand] -- D:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2009/09/21 09:55:12 | 000,858,384 | ---- | M] (Intel(R) Corporation) [Auto] -- D:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng) Intel(R)
SRV - [2009/09/21 09:31:36 | 000,473,360 | ---- | M] (Intel(R) Corporation) [Auto] -- D:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc) Intel(R)
SRV - [2009/07/13 20:16:15 | 000,016,384 | ---- | M] (Microsoft Corporation) [On_Demand] -- D:\Windows\System32\StorSvc.dll -- (StorSvc)
SRV - [2009/07/13 20:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand] -- D:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009/07/13 20:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand] -- D:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)


========== Driver Services (SafeList) ==========

DRV - [2014/12/07 19:23:35 | 001,636,696 | ---- | M] (Symantec Corporation) [Kernel | On_Demand] -- D:\Program Files\Norton Internet Security\NortonData\21.6.0.32\Definitions\VirusDefs\20141209.019\NAVEX15.SYS -- (NAVEX15)
DRV - [2014/12/07 19:23:35 | 000,095,704 | ---- | M] (Symantec Corporation) [Kernel | On_Demand] -- D:\Program Files\Norton Internet Security\NortonData\21.6.0.32\Definitions\VirusDefs\20141209.019\NAVENG.SYS -- (NAVENG)
DRV - [2014/12/05 12:33:54 | 000,479,448 | ---- | M] (Symantec Corporation) [Kernel | System] -- D:\Program Files\Norton Internet Security\NortonData\21.6.0.32\Definitions\IPSDefs\20141209.001\IDSvix86.sys -- (IDSVix86)
DRV - [2014/12/02 19:45:46 | 001,138,392 | ---- | M] (Symantec Corporation) [Kernel | System] -- D:\Program Files\Norton Internet Security\NortonData\21.6.0.32\Definitions\BASHDefs\20141203.001_cc9\BHDrvx86.sys -- (BHDrvx86)
DRV - [2014/11/12 15:04:35 | 000,142,936 | ---- | M] (Symantec Corporation) [Kernel | On_Demand] -- D:\Windows\System32\drivers\SYMEVENT.SYS -- (SymEvent)
DRV - [2014/08/26 15:08:29 | 000,378,672 | ---- | M] (Symantec Corporation) [Kernel | System] -- D:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl)
DRV - [2014/08/26 15:08:28 | 000,111,408 | ---- | M] (Symantec Corporation) [Kernel | On_Demand] -- D:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)
DRV - [2014/08/25 21:26:58 | 000,447,704 | R--- | M] (Symantec Corporation) [Kernel | System] -- D:\Windows\system32\drivers\NIS\1506000.020\SYMNETS.SYS -- (SymNetS)
DRV - [2014/08/25 21:26:57 | 000,936,152 | R--- | M] (Symantec Corporation) [File_System | Boot] -- D:\Windows\System32\drivers\NIS\1506000.020\SymEFA.sys -- (SymEFA)
DRV - [2014/08/25 21:26:57 | 000,063,576 | R--- | M] (Symantec Corporation) [Kernel | System] -- D:\Windows\System32\drivers\SymIMV.sys -- (SymIM)
DRV - [2014/08/25 21:26:56 | 000,367,704 | R--- | M] (Symantec Corporation) [Kernel | Boot] -- D:\Windows\System32\drivers\NIS\1506000.020\SymDS.sys -- (SymDS)
DRV - [2014/08/25 21:20:22 | 000,664,792 | R--- | M] (Symantec Corporation) [File_System | On_Demand] -- D:\Windows\system32\drivers\NIS\1506000.020\SRTSP.SYS -- (SRTSP)
DRV - [2014/08/25 21:20:22 | 000,032,984 | R--- | M] (Symantec Corporation) [Kernel | System] -- D:\Windows\system32\drivers\NIS\1506000.020\SRTSPX.SYS -- (SRTSPX) Symantec Real Time Storage Protection (PEL)
DRV - [2014/08/06 14:48:16 | 000,209,624 | R--- | M] (Symantec Corporation) [Kernel | System] -- D:\Windows\system32\drivers\NIS\1506000.020\Ironx86.SYS -- (SymIRON)
DRV - [2014/02/20 18:14:34 | 000,127,064 | R--- | M] (Symantec Corporation) [Kernel | System] -- D:\Windows\system32\drivers\NIS\1506000.020\ccSetx86.sys -- (ccSet_NIS)
DRV - [2010/11/20 16:29:24 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010/11/20 16:29:03 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\Windows\system32\drivers\vmbus.sys -- (vmbus)
DRV - [2010/11/20 16:29:03 | 000,062,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\Windows\system32\drivers\dmvsc.sys -- (dmvsc)
DRV - [2010/11/20 16:29:03 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot] -- D:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
DRV - [2010/11/20 16:29:03 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2010/11/20 16:29:03 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\Windows\system32\drivers\storvsc.sys -- (storvsc)
DRV - [2010/11/20 16:29:03 | 000,027,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\Windows\system32\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV - [2010/11/20 16:29:03 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\Windows\system32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2010/11/20 16:29:03 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\Windows\system32\drivers\vms3cap.sys -- (s3cap)
DRV - [2009/09/15 06:40:18 | 006,114,816 | ---- | M] (Intel Corporation) [Kernel | On_Demand] -- D:\Windows\System32\drivers\NETw5s32.sys -- (NETw5s32) Intel(R)
DRV - [2009/08/11 06:58:30 | 000,488,448 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand] -- D:\Windows\System32\drivers\CHDRT32.sys -- (CnxtHdAudService)
DRV - [2009/08/06 11:16:00 | 009,824,000 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand] -- D:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2009/07/27 09:06:44 | 000,051,712 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand] -- D:\Windows\System32\drivers\L1C62x86.sys -- (L1C) NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========



IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\diseck_ON_D\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp
IE - HKU\diseck_ON_D\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKU\diseck_ON_D\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = BB 83 BD F4 B1 FE CF 01 [binary data]
IE - HKU\diseck_ON_D\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0




FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.5.0: D:\Windows\System32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.5.0: D:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: D:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: D:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.5: D:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.6.0.32\IPSFF [2014/11/12 15:06:23 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.6.0.32\coFFPlgn\ [2014/12/11 04:07:39 | 000,000,000 | ---D | M]


O1 HOSTS File: ([2009/06/10 16:39:37 | 000,000,824 | ---- | M]) - D:\Windows\System32\drivers\etc\hosts
O2 - BHO: (Norton Identity Protection) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - D:\Program Files\Norton Internet Security\Engine\21.6.0.32\CoIEPlg.dll (Symantec Corporation)
O2 - BHO: (Norton Vulnerability Protection) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - D:\Program Files\Norton Internet Security\Engine\21.6.0.32\IPS\IPSBHO.dll (Symantec Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - D:\Program Files\Norton Internet Security\Engine\21.6.0.32\CoIEPlg.dll (Symantec Corporation)
O3 - HKU\diseck_ON_D\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - D:\Program Files\Norton Internet Security\Engine\21.6.0.32\CoIEPlg.dll (Symantec Corporation)
O4 - HKLM..\Run: [cAudioFilterAgent] D:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent.exe (Conexant Systems, Inc.)
O4 - HKLM..\Run: [NvCplDaemon] D:\Windows\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [PDFPrint] D:\Program Files\PDF24\pdf24.exe (Geek Software GmbH)
O4 - HKU\diseck_ON_D..\Run: [EPSON SX210 Series] D:\Windows\System32\spool\DRIVERS\W32X86\3\E_FATIFDE.EXE (SEIKO EPSON CORPORATION)
O4 - HKLM..\RunOnce: [*Restore] D:\Windows\System32\rstrui.exe (Microsoft Corporation)
O4 - HKU\LocalService_ON_D..\RunOnce: [mctadmin] D:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\NetworkService_ON_D..\RunOnce: [mctadmin] D:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - Startup: D:\Users\diseck\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AutoStarter.lnk ()
O4 - Startup: D:\Users\diseck\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ja.lnk ()
O4 - Startup: D:\Users\diseck\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Serviio.lnk ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
O20 - HKLM Winlogon: Shell - (explorer.exe) - D:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - D:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKU\diseck_ON_D Winlogon: Shell - (C:\Users\diseck\AppData\Roaming\loadit.exe) - D:\Users\diseck\AppData\Roaming\loadit.exe ()
O20 - HKU\diseck_ON_D Winlogon: UserInit - (C:\Users\diseck\AppData\Roaming\loadit.exe) - D:\Users\diseck\AppData\Roaming\loadit.exe ()
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 16:42:20 | 000,000,024 | ---- | M] () - D:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2006/03/24 06:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2014/12/10 08:35:38 | 000,000,000 | ---D | C] -- D:\Users\diseck\AppData\Local\PDF24
[2014/12/10 08:34:08 | 000,000,000 | ---D | C] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF24
[2014/12/10 08:34:04 | 000,000,000 | ---D | C] -- D:\Program Files\PDF24
[2014/12/10 08:33:56 | 000,000,000 | ---D | C] -- D:\Users\diseck\AppData\Local\Programs
[2014/12/10 07:37:49 | 000,000,000 | -HSD | C] -- D:\Users\diseck\AppData\Local\EmieUserList
[2014/12/10 07:37:49 | 000,000,000 | -HSD | C] -- D:\Users\diseck\AppData\Local\EmieSiteList
[2014/12/10 07:37:49 | 000,000,000 | -HSD | C] -- D:\Users\diseck\AppData\Local\EmieBrowserModeList
[2014/12/04 17:47:33 | 000,000,000 | ---D | C] -- D:\Users\diseck\Documents\Daten Wichtig
[2014/12/04 06:11:33 | 000,000,000 | ---D | C] -- D:\ProgramData\McAfee
[2014/12/04 06:11:32 | 000,000,000 | ---D | C] -- D:\Program Files\McAfee Security Scan
[2014/12/04 06:10:03 | 000,000,000 | ---D | C] -- D:\Program Files\Common Files\Adobe
[2014/12/04 06:10:03 | 000,000,000 | ---D | C] -- D:\Program Files\Adobe
[2014/12/04 06:09:35 | 000,000,000 | ---D | C] -- D:\ProgramData\Adobe
[2014/12/04 06:08:25 | 000,000,000 | ---D | C] -- D:\Users\diseck\AppData\Local\Adobe
[2014/12/02 12:03:43 | 000,000,000 | ---D | C] -- D:\Users\diseck\AppData\Roaming\WinRAR
[2014/11/24 18:52:22 | 000,000,000 | ---D | C] -- D:\Users\diseck\AppData\Local\CrashDumps
[2014/11/23 11:15:18 | 000,000,000 | ---D | C] -- D:\Users\diseck\AppData\Local\Diagnostics
[2014/11/23 08:28:13 | 000,342,016 | ---- | C] (Seiko Epson Corporation) -- D:\Windows\System32\eswiaud.dll
[2014/11/23 08:28:13 | 000,128,392 | ---- | C] (Seiko Epson Corporation) -- D:\Windows\System32\esdevapp.exe
[2014/11/23 08:28:13 | 000,015,872 | ---- | C] (SEIKO EPSON CORP.) -- D:\Windows\System32\escdev.dll
[2014/11/23 08:28:12 | 000,000,000 | ---D | C] -- D:\Program Files\epson
[2014/11/22 16:43:43 | 000,000,000 | ---D | C] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
[2014/11/22 16:42:35 | 000,086,528 | ---- | C] (SEIKO EPSON CORPORATION) -- D:\Windows\System32\E_FLBFDE.DLL
[2014/11/22 16:42:35 | 000,008,192 | ---- | C] (SEIKO EPSON CORP.) -- D:\Windows\System32\E_DCINST.DLL
[2014/11/22 16:42:34 | 000,078,848 | ---- | C] (SEIKO EPSON CORPORATION) -- D:\Windows\System32\E_FD4BFDE.DLL
[2014/11/22 16:42:33 | 000,000,000 | ---D | C] -- D:\Windows\System32\DRVSTORE
[2014/11/22 16:41:13 | 000,000,000 | ---D | C] -- D:\ProgramData\EPSON
[2014/11/18 16:28:46 | 000,000,000 | ---D | C] -- D:\Users\diseck\AppData\Roaming\vlc
[2014/11/18 16:28:31 | 000,000,000 | ---D | C] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
[2014/11/18 16:27:50 | 000,000,000 | ---D | C] -- D:\Program Files\VideoLAN
[2014/11/18 06:45:49 | 000,000,000 | ---D | C] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
[2014/11/18 06:45:48 | 000,000,000 | ---D | C] -- D:\Users\diseck\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
[2014/11/18 06:45:43 | 000,000,000 | ---D | C] -- D:\Program Files\WinRAR
[2014/11/18 06:31:26 | 000,000,000 | ---D | C] -- D:\Users\diseck\Documents\UseNeXT
[2014/11/18 06:31:25 | 000,000,000 | ---D | C] -- D:\Users\diseck\AppData\Roaming\UseNeXT
[2014/11/18 06:31:15 | 000,000,000 | ---D | C] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\UseNeXT
[2014/11/18 06:31:15 | 000,000,000 | ---D | C] -- D:\Program Files\UseNeXT
[2014/11/17 05:47:03 | 002,285,056 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\msmpeg2vdec.dll
[2014/11/17 04:31:23 | 000,000,000 | ---D | C] -- D:\Users\diseck\AppData\Roaming\OpenOffice
[2014/11/17 04:20:39 | 000,000,000 | --SD | C] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1
[2014/11/17 04:19:59 | 000,000,000 | ---D | C] -- D:\Program Files\OpenOffice 4
[2014/11/17 04:14:55 | 000,000,000 | ---D | C] -- D:\Users\diseck\Desktop\OpenOffice 4.1.1 (de) Installation Files
[2014/11/17 03:55:11 | 001,699,328 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\esent.dll
[2014/11/17 03:55:11 | 000,074,240 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\fsutil.exe
[2014/11/17 03:55:08 | 000,417,792 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\WMPhoto.dll
[2014/11/17 03:54:57 | 001,987,584 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\d3d10warp.dll
[2014/11/17 03:54:56 | 002,616,320 | ---- | C] (Microsoft Corporation) -- D:\Windows\explorer.exe
[2014/11/17 03:54:53 | 000,006,144 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\KBDYAK.DLL
[2014/11/17 03:54:53 | 000,006,144 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\KBDTAT.DLL
[2014/11/17 03:54:53 | 000,006,144 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\KBDRU1.DLL
[2014/11/17 03:54:53 | 000,006,144 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\KBDBASH.DLL
[2014/11/17 03:54:53 | 000,005,632 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\KBDRU.DLL
[2014/11/17 03:54:51 | 003,419,136 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\d2d1.dll
[2014/11/17 03:54:50 | 000,667,648 | ---- | C] (Microsoft Corporation) -- D:\Windows\System32\MsSpellCheckingFacility.exe
[2014/11/17 03:51:19 | 000,181,344 | ---- | C] (SoftwareNetz) -- D:\Windows\snui.exe
[2014/11/17 03:51:19 | 000,000,000 | ---D | C] -- D:\Users\diseck\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SoftwareNetz
[2014/11/17 03:51:18 | 000,000,000 | ---D | C] -- D:\Softwarenetz
[2014/11/17 03:45:48 | 000,000,000 | ---D | C] -- D:\Users\diseck\AppData\Roaming\Adobe

========== Files - Modified Within 30 Days ==========

[2014/12/14 19:31:12 | 000,067,584 | --S- | M] () -- D:\Windows\bootstat.dat
[2014/12/14 19:31:12 | 000,000,110 | ---- | M] () -- D:\.dir
[2014/12/14 19:30:42 | 000,001,094 | ---- | M] () -- D:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2014/12/14 19:30:18 | 1606,623,232 | -HS- | M] () -- D:\hiberfil.sys
[2014/12/10 19:21:35 | 000,027,248 | -H-- | M] () -- D:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2014/12/10 19:21:35 | 000,027,248 | -H-- | M] () -- D:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2014/12/10 19:20:17 | 000,000,681 | ---- | M] () -- D:\Users\diseck\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ja.lnk
[2014/12/10 19:20:04 | 000,691,924 | ---- | M] () -- D:\Users\diseck\AppData\Roaming\loadit.exe
[2014/12/10 19:14:19 | 000,000,708 | ---- | M] () -- D:\Users\diseck\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AutoStarter.lnk
[2014/12/10 18:23:00 | 000,001,098 | ---- | M] () -- D:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2014/12/10 08:34:08 | 000,001,823 | ---- | M] () -- D:\Users\Public\Desktop\PDF24 Creator.lnk
[2014/12/10 08:34:08 | 000,001,803 | ---- | M] () -- D:\Users\Public\Desktop\PDF24 Fax.lnk
[2014/12/10 08:34:08 | 000,000,000 | ---D | M] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF24
[2014/12/10 02:55:16 | 000,002,121 | ---- | M] () -- D:\Users\Public\Desktop\Google Chrome.lnk
[2014/12/08 09:33:11 | 000,698,926 | ---- | M] () -- D:\Windows\System32\perfh007.dat
[2014/12/08 09:33:11 | 000,653,724 | ---- | M] () -- D:\Windows\System32\perfh009.dat
[2014/12/08 09:33:11 | 000,149,034 | ---- | M] () -- D:\Windows\System32\perfc007.dat
[2014/12/08 09:33:11 | 000,121,596 | ---- | M] () -- D:\Windows\System32\perfc009.dat
[2014/12/05 18:10:25 | 102,609,385 | ---- | M] () -- D:\Users\diseck\AppData\Roaming\autostarter.exe
[2014/12/04 06:45:54 | 000,015,192 | ---- | M] () -- D:\Users\diseck\Desktop\1.Januar 2013.ods
[2014/11/23 08:28:15 | 000,000,934 | ---- | M] () -- D:\Users\Public\Desktop\EPSON Scan.lnk
[2014/11/23 08:28:15 | 000,000,000 | ---D | M] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
[2014/11/22 16:36:18 | 000,012,615 | ---- | M] () -- D:\Users\diseck\Desktop\Unbenannt 1.odt
[2014/11/21 05:28:17 | 000,001,807 | ---- | M] () -- D:\Users\diseck\Desktop\UseNeXT by Tangysoft.lnk
[2014/11/21 05:28:17 | 000,000,000 | ---D | M] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\UseNeXT
[2014/11/19 06:18:29 | 000,286,616 | ---- | M] () -- D:\Windows\System32\FNTCACHE.DAT
[2014/11/18 16:28:31 | 000,001,028 | ---- | M] () -- D:\Users\Public\Desktop\VLC media player.lnk
[2014/11/18 16:28:31 | 000,000,000 | ---D | M] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
[2014/11/18 06:45:51 | 000,000,000 | ---D | M] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
[2014/11/17 04:46:31 | 000,000,000 | -H-- | M] () -- D:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2014/11/17 04:21:08 | 000,000,000 | --SD | M] -- D:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1
[2014/11/17 04:20:41 | 000,001,074 | ---- | M] () -- D:\Users\Public\Desktop\OpenOffice 4.1.1.lnk
[2014/11/17 03:55:57 | 000,001,667 | ---- | M] () -- D:\Users\diseck\Desktop\Rechnung3.lnk
[2014/11/17 03:51:21 | 000,001,667 | ---- | M] () -- D:\Users\diseck\Desktop\Rechnung5.lnk

========== Files Created - No Company Name ==========

[2014/12/10 19:20:16 | 000,000,681 | ---- | C] () -- D:\Users\diseck\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ja.lnk
[2014/12/10 19:20:03 | 000,691,924 | ---- | C] () -- D:\Users\diseck\AppData\Roaming\loadit.exe
[2014/12/10 19:14:19 | 000,000,708 | ---- | C] () -- D:\Users\diseck\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AutoStarter.lnk
[2014/12/10 19:14:17 | 102,609,385 | ---- | C] () -- D:\Users\diseck\AppData\Roaming\autostarter.exe
[2014/12/10 08:34:08 | 000,001,823 | ---- | C] () -- D:\Users\Public\Desktop\PDF24 Creator.lnk
[2014/12/10 08:34:08 | 000,001,803 | ---- | C] () -- D:\Users\Public\Desktop\PDF24 Fax.lnk
[2014/12/04 06:45:50 | 000,015,192 | ---- | C] () -- D:\Users\diseck\Desktop\1.Januar 2013.ods
[2014/11/23 08:28:15 | 000,000,934 | ---- | C] () -- D:\Users\Public\Desktop\EPSON Scan.lnk
[2014/11/22 16:36:15 | 000,012,615 | ---- | C] () -- D:\Users\diseck\Desktop\Unbenannt 1.odt
[2014/11/18 16:28:31 | 000,001,028 | ---- | C] () -- D:\Users\Public\Desktop\VLC media player.lnk
[2014/11/18 06:31:15 | 000,001,807 | ---- | C] () -- D:\Users\diseck\Desktop\UseNeXT by Tangysoft.lnk
[2014/11/17 04:46:31 | 000,000,000 | -H-- | C] () -- D:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2014/11/17 04:20:41 | 000,001,074 | ---- | C] () -- D:\Users\Public\Desktop\OpenOffice 4.1.1.lnk
[2014/11/17 03:55:57 | 000,001,667 | ---- | C] () -- D:\Users\diseck\Desktop\Rechnung3.lnk
[2014/11/17 03:51:21 | 000,001,667 | ---- | C] () -- D:\Users\diseck\Desktop\Rechnung5.lnk
[2011/04/11 20:30:05 | 000,698,926 | ---- | C] () -- D:\Windows\System32\perfh007.dat
[2011/04/11 20:30:05 | 000,295,922 | ---- | C] () -- D:\Windows\System32\perfi007.dat
[2011/04/11 20:30:05 | 000,149,034 | ---- | C] () -- D:\Windows\System32\perfc007.dat
[2011/04/11 20:30:05 | 000,038,104 | ---- | C] () -- D:\Windows\System32\perfd007.dat
[2010/11/20 16:29:26 | 000,066,048 | ---- | C] () -- D:\Windows\System32\PrintBrmUi.exe
[2010/11/20 16:29:24 | 000,252,928 | ---- | C] () -- D:\Windows\System32\DShowRdpFilter.dll
[2009/07/14 06:29:50 | 000,006,088 | ---- | C] () -- D:\Windows\System32\drivers\CDConfig.bin
[2009/07/13 23:57:37 | 000,067,584 | --S- | C] () -- D:\Windows\bootstat.dat
[2009/07/13 23:33:53 | 000,286,616 | ---- | C] () -- D:\Windows\System32\FNTCACHE.DAT
[2009/07/13 21:05:48 | 000,653,724 | ---- | C] () -- D:\Windows\System32\perfh009.dat
[2009/07/13 21:05:48 | 000,291,294 | ---- | C] () -- D:\Windows\System32\perfi009.dat
[2009/07/13 21:05:48 | 000,121,596 | ---- | C] () -- D:\Windows\System32\perfc009.dat
[2009/07/13 21:05:48 | 000,031,548 | ---- | C] () -- D:\Windows\System32\perfd009.dat
[2009/07/13 21:05:05 | 000,000,741 | ---- | C] () -- D:\Windows\System32\NOISE.DAT
[2009/07/13 21:04:11 | 000,215,943 | ---- | C] () -- D:\Windows\System32\dssec.dat
[2009/07/13 18:55:01 | 000,043,131 | ---- | C] () -- D:\Windows\mib.bin
[2009/07/13 18:51:43 | 000,073,728 | ---- | C] () -- D:\Windows\System32\BthpanContextHandler.dll
[2009/07/13 18:42:10 | 000,064,000 | ---- | C] () -- D:\Windows\System32\BWContextHandler.dll
[2009/06/10 16:26:10 | 000,673,088 | ---- | C] () -- D:\Windows\System32\mlang.dat

========== LOP Check ==========

[2014/11/12 12:49:39 | 000,000,000 | -HSD | M] -- D:\ProgramData\Anwendungsdaten
[2009/07/13 23:53:55 | 000,000,000 | -HSD | M] -- D:\ProgramData\Application Data
[2009/07/13 23:53:55 | 000,000,000 | -HSD | M] -- D:\ProgramData\Desktop
[2009/07/13 23:53:55 | 000,000,000 | -HSD | M] -- D:\ProgramData\Documents
[2014/11/12 12:49:39 | 000,000,000 | -HSD | M] -- D:\ProgramData\Dokumente
[2014/11/22 16:43:55 | 000,000,000 | ---D | M] -- D:\ProgramData\EPSON
[2014/11/12 12:49:39 | 000,000,000 | -HSD | M] -- D:\ProgramData\Favoriten
[2009/07/13 23:53:55 | 000,000,000 | -HSD | M] -- D:\ProgramData\Favorites
[2009/07/13 23:53:55 | 000,000,000 | -HSD | M] -- D:\ProgramData\Start Menu
[2014/11/12 12:49:39 | 000,000,000 | -HSD | M] -- D:\ProgramData\Startmenü
[2009/07/13 23:53:55 | 000,000,000 | -HSD | M] -- D:\ProgramData\Templates
[2014/11/12 12:49:39 | 000,000,000 | -HSD | M] -- D:\ProgramData\Vorlagen
[2009/07/13 23:53:46 | 000,011,468 | ---- | M] () -- D:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========


< End of report >
         
--- --- ---

Ich hoffe mir kann einer helfen!


Vielen Dank im Vorraus!

 

Themen zu Windows 7 weisser Sperbildschirm
autorun, bho, cdrom, defender, desktop, explorer, explorer.exe, firefox, format, helper, installation, laptop, logfile, microsoft, norton internet security, nvidia, registry, scan, security, software, symantec, system32, update, windows, winlogon




Ähnliche Themen: Windows 7 weisser Sperbildschirm


  1. weisser Bildschirm im BS Windows 7
    Plagegeister aller Art und deren Bekämpfung - 15.08.2015 (3)
  2. Windows XP: Weisser Bildschirm
    Log-Analyse und Auswertung - 06.08.2014 (32)
  3. windows 7 profesional weisser bildschirm
    Log-Analyse und Auswertung - 03.01.2014 (1)
  4. Weisser Bildschirm bei Windows 7
    Alles rund um Windows - 26.11.2013 (1)
  5. Windows 7 Start Weisser Bildschirm OTL Auswertung
    Log-Analyse und Auswertung - 18.11.2013 (3)
  6. Weisser Bildschirm - Windows Vista
    Log-Analyse und Auswertung - 13.07.2013 (7)
  7. Weisser Bildschirm bei Windows 7 64 Bit
    Log-Analyse und Auswertung - 11.07.2013 (4)
  8. weisser Bildschirm nach booten von Windows 7
    Plagegeister aller Art und deren Bekämpfung - 30.06.2013 (16)
  9. weisser Bildschirm nach dem booten von windows 7
    Plagegeister aller Art und deren Bekämpfung - 26.06.2013 (1)
  10. Weisser Bildschirm Windows Vista
    Plagegeister aller Art und deren Bekämpfung - 13.06.2013 (3)
  11. weisser Schirm nach Windows start
    Plagegeister aller Art und deren Bekämpfung - 31.05.2013 (9)
  12. Windows XP weisser Bildschirm
    Log-Analyse und Auswertung - 27.05.2013 (12)
  13. Weisser Bildschirm bei Start Windows 7 - nur Systemadministrator
    Plagegeister aller Art und deren Bekämpfung - 22.03.2013 (9)
  14. Windows XP weisser Bildschirm
    Log-Analyse und Auswertung - 08.02.2013 (8)
  15. weisser Bilschirm Windows 7
    Log-Analyse und Auswertung - 16.10.2012 (1)
  16. Weisser Bildschirm - Windows Vista - otl.txt
    Log-Analyse und Auswertung - 23.04.2012 (10)
  17. Windows Bootet nicht. Weisser strich
    Plagegeister aller Art und deren Bekämpfung - 05.08.2007 (8)

Zum Thema Windows 7 weisser Sperbildschirm - Hallo, ich kann seit einiger Zeit mein Laptop nicht mehr nutzen. Kurz nach dem ich ihn anschalte kommt ein weißer Sperrbildschirm und ich kann nichts mehr machen. Das geschieht auch - Windows 7 weisser Sperbildschirm...
Archiv
Du betrachtest: Windows 7 weisser Sperbildschirm auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.