![]() |
|
Plagegeister aller Art und deren Bekämpfung: PC bootet wegen aswrvrt sys nicht mehrWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() | #1 |
| ![]() PC bootet wegen aswrvrt sys nicht mehr Hallo alle miteinander, ich habe seit heute ein Problem wenn ich meinen Laptop hochfahren möchte. Er bleibt immer bei "windows wird gestartet" stehen und macht dann gar nichts mehr. Hab bereis den abgesicherten modus versucht und dann blieb er bei aswrvrt sys stehen... Systemreperatur und andere Versuche haben alle nichts gebracht. Ich hab dann einen Scan mit FRST durchgeführt. Hier das Ergebnis: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015 Ran by SYSTEM on MININT-E7ITML8 on 25-03-2015 14:39:54 Running from F:\ Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 10 Boot Mode: Recovery The current controlset is ControlSet002 ATTENTION!:=====> If the system is bootable FRST must be run from normal or Safe mode to create a complete log. Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6548112 2012-06-04] (Realtek Semiconductor) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2885904 2012-04-06] (Synaptics Incorporated) HKLM\...\Run: [InstallerLauncher] => "C:\Program Files\Common Files\Bitdefender\SetupInformation\{6F57816A-791A-4159-A75F-CFD0C7EA4FBF}\setuplauncher.exe" /run:"C:\Program Files\Common Files\Bitdefender\SetupInformation\{6F57816A-791A-41 (the data entry has 36 more characters). HKLM-x32\...\Run: [HP Quick Launch] => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [578944 2012-03-05] (Hewlett-Packard Development Company, L.P.) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5225064 2014-11-23] (AVAST Software) HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101584 2014-04-25] (Safer-Networking Ltd.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [335232 2015-02-10] (Oracle Corporation) HKLM\...\RunOnce: [*Restore] => C:\Windows\system32\rstrui.exe [296960 2015-01-14] (Microsoft Corporation) Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X] HKU\Kerstie\...\Run: [HP Deskjet 3520 series (NET)] => C:\Program Files\HP\HP Deskjet 3520 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.) HKU\Kerstie\...\Run: [pdiface] => C:\Program Files\Bitdefender\60-Second Virus Scanner\pdiface.exe [283608 2013-10-30] (Bitdefender) HKU\Kerstie\...\Run: [Amazon Music] => C:\Users\Kerstie\AppData\Local\Amazon Music\Amazon Music Helper.exe [6277952 2014-12-08] () HKU\Kerstie\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\AvastSS.scr [43152 2014-11-23] (AVAST Software) AppInit_DLLs: C:\PROGRA~2\SEARCH~1\Datamngr\x64\datamngr.dll => C:\PROGRA~2\SEARCH~1\Datamngr\x64\datamngr.dll File Not Found AppInit_DLLs: C:\PROGRA~2\SEARCH~1\Datamngr\x64\IEBHO.dll => C:\PROGRA~2\SEARCH~1\Datamngr\x64\IEBHO.dll File Not Found AppInit_DLLs-x32: C:\PROGRA~2\SEARCH~1\Datamngr\datamngr.dll => "C:\PROGRA~2\SEARCH~1\Datamngr\datamngr.dll" File Not Found AppInit_DLLs-x32: C:\PROGRA~2\SEARCH~1\Datamngr\IEBHO.dll => "C:\PROGRA~2\SEARCH~1\Datamngr\IEBHO.dll" File Not Found Startup: C:\Users\Kerstie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> (No File) Startup: C:\Users\Kerstie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Deskjet 3520 series (Netzwerk).lnk ShortcutTarget: Tintenwarnungen überwachen - HP Deskjet 3520 series (Netzwerk).lnk -> C:\Program Files\HP\HP Deskjet 3520 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.) BootExecute: autocheck autochk * sdnclean64.exe ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-02-14] (Advanced Micro Devices, Inc.) S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-11-23] (AVAST Software) S2 pdserv; C:\Program Files\Bitdefender\60-Second Virus Scanner\pdscan.exe [1445424 2013-11-11] (Bitdefender) S2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738200 2014-04-25] (Safer-Networking Ltd.) S2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2081752 2014-04-25] (Safer-Networking Ltd.) S2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.) S2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S2 AODDriver4.1; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [55936 2012-01-03] (Advanced Micro Devices) S2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-11-23] () S2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-11-23] (AVAST Software) S1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-11-23] (AVAST Software) S0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-11-23] () S1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-11-23] (AVAST Software) S1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-11-23] (AVAST Software) S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-11-23] (AVAST Software) S0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-11-23] () S3 RSP2STOR; C:\Windows\System32\DRIVERS\RtsP2Stor.sys [259688 2011-10-28] (Realtek Semiconductor Corp.) S3 RTL2832UBDA; C:\Windows\SysWOW64\drivers\RTL2832UBDA.sys [117152 2009-10-26] (REALTEK SEMICONDUCTOR Corp.) S3 RTL2832UUSB; C:\Windows\SysWOW64\Drivers\RTL2832UUSB.sys [38944 2009-10-26] (REALTEK SEMICONDUCTOR Corp.) S3 RTL2832U_IRHID; C:\Windows\SysWOW64\DRIVERS\RTL2832U_IRHID.sys [44320 2009-10-05] (Realtek) S0 sfdrv01; C:\Windows\System32\drivers\sfdrv01.sys [75384 2009-02-03] (Protection Technology (StarForce)) S0 sfsync04; C:\Windows\System32\drivers\sfsync04.sys [79800 2012-06-19] (Protection Technology (StarForce)) S0 sfvfs02; C:\Windows\System32\drivers\sfvfs02.sys [107384 2007-02-08] (Protection Technology (StarForce)) S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-01-20] (Anchorfree Inc.) S3 vpnva; C:\Windows\System32\DRIVERS\vpnva64-6.sys [52080 2013-06-19] (Cisco Systems, Inc.) S2 avgntflt; system32\DRIVERS\avgntflt.sys [X] S1 avipbb; system32\DRIVERS\avipbb.sys [X] S1 avkmgr; system32\DRIVERS\avkmgr.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-03-25 14:39 - 2015-03-25 14:39 - 00000000 ____D () C:\FRST 2015-03-17 11:06 - 2015-03-17 11:32 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2015-03-17 11:06 - 2015-03-17 11:32 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-02-23 22:06 - 2015-01-15 09:14 - 00155072 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ksecpkg.sys 2015-02-23 22:06 - 2015-01-15 09:14 - 00095680 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ksecdd.sys 2015-02-23 22:06 - 2015-01-15 09:09 - 01461760 _____ (Microsoft Corporation) C:\Windows\System32\lsasrv.dll 2015-02-23 22:06 - 2015-01-15 09:09 - 00136192 _____ (Microsoft Corporation) C:\Windows\System32\sspicli.dll 2015-02-23 22:06 - 2015-01-15 09:09 - 00031232 _____ (Microsoft Corporation) C:\Windows\System32\lsass.exe 2015-02-23 22:06 - 2015-01-15 09:09 - 00029184 _____ (Microsoft Corporation) C:\Windows\System32\sspisrv.dll 2015-02-23 22:06 - 2015-01-15 09:09 - 00028160 _____ (Microsoft Corporation) C:\Windows\System32\secur32.dll 2015-02-23 22:06 - 2015-01-15 09:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\System32\auditpol.exe 2015-02-23 22:06 - 2015-01-15 09:04 - 00686080 _____ (Microsoft Corporation) C:\Windows\System32\adtschema.dll 2015-02-23 22:06 - 2015-01-15 08:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2015-02-23 22:06 - 2015-01-15 08:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2015-02-23 22:06 - 2015-01-15 08:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2015-02-23 22:06 - 2015-01-15 08:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2015-02-23 22:06 - 2015-01-15 05:22 - 00458824 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\cng.sys 2015-02-23 22:06 - 2014-11-26 04:53 - 00861696 _____ (Microsoft Corporation) C:\Windows\System32\oleaut32.dll 2015-02-23 22:06 - 2014-11-26 04:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll 2015-02-23 22:05 - 2015-01-15 09:06 - 00146432 _____ (Microsoft Corporation) C:\Windows\System32\msaudite.dll 2015-02-23 22:05 - 2015-01-15 09:06 - 00060416 _____ (Microsoft Corporation) C:\Windows\System32\msobjs.dll 2015-02-23 22:05 - 2015-01-15 08:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2015-02-23 22:05 - 2015-01-15 08:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2015-02-23 22:04 - 2015-01-14 07:09 - 05554112 _____ (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe 2015-02-23 22:04 - 2015-01-14 06:44 - 03972544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2015-02-23 22:04 - 2015-01-14 06:44 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2015-02-23 22:04 - 2014-12-12 06:31 - 01480192 _____ (Microsoft Corporation) C:\Windows\System32\crypt32.dll 2015-02-23 22:04 - 2014-12-12 06:07 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2015-02-23 22:04 - 2014-07-07 03:07 - 00229376 _____ (Microsoft Corporation) C:\Windows\System32\wintrust.dll 2015-02-23 22:04 - 2014-07-07 03:06 - 00187904 _____ (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll 2015-02-23 22:04 - 2014-07-07 02:40 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2015-02-23 22:04 - 2014-07-07 02:40 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2015-02-23 22:03 - 2015-01-14 07:05 - 00503808 _____ (Microsoft Corporation) C:\Windows\System32\srcore.dll 2015-02-23 22:03 - 2015-01-14 07:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\System32\srclient.dll 2015-02-23 22:03 - 2015-01-14 07:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\System32\rstrui.exe 2015-02-23 22:03 - 2015-01-14 06:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2015-02-23 22:03 - 2015-01-13 04:10 - 01424384 _____ (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll 2015-02-23 22:03 - 2015-01-13 03:49 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2015-02-23 22:03 - 2014-12-08 04:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\System32\scesrv.dll 2015-02-23 22:03 - 2014-12-08 03:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll 2015-02-23 22:02 - 2015-01-13 07:58 - 19291136 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll 2015-02-23 22:02 - 2015-01-13 06:00 - 14373376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2015-02-23 22:02 - 2015-01-09 03:03 - 03201536 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys 2015-02-23 22:01 - 2015-01-13 07:59 - 02237952 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll 2015-02-23 22:01 - 2015-01-13 07:59 - 01409536 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll 2015-02-23 22:01 - 2015-01-13 07:59 - 00600576 _____ (Microsoft Corporation) C:\Windows\System32\vbscript.dll 2015-02-23 22:01 - 2015-01-13 07:59 - 00051712 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe 2015-02-23 22:01 - 2015-01-13 07:58 - 00603136 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll 2015-02-23 22:01 - 2015-01-13 07:58 - 00197120 _____ (Microsoft Corporation) C:\Windows\System32\msrating.dll 2015-02-23 22:01 - 2015-01-13 07:58 - 00097280 _____ (Microsoft Corporation) C:\Windows\System32\mshtmled.dll 2015-02-23 22:01 - 2015-01-13 07:57 - 15403008 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll 2015-02-23 22:01 - 2015-01-13 07:57 - 03959296 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll 2015-02-23 22:01 - 2015-01-13 07:57 - 02655744 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll 2015-02-23 22:01 - 2015-01-13 07:57 - 01509376 _____ (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl 2015-02-23 22:01 - 2015-01-13 07:57 - 00855552 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll 2015-02-23 22:01 - 2015-01-13 07:57 - 00526336 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll 2015-02-23 22:01 - 2015-01-13 07:57 - 00451584 _____ (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll 2015-02-23 22:01 - 2015-01-13 07:57 - 00281600 _____ (Microsoft Corporation) C:\Windows\System32\dxtrans.dll 2015-02-23 22:01 - 2015-01-13 07:57 - 00255488 _____ (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll 2015-02-23 22:01 - 2015-01-13 07:57 - 00136704 _____ (Microsoft Corporation) C:\Windows\System32\iesysprep.dll 2015-02-23 22:01 - 2015-01-13 07:57 - 00067072 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll 2015-02-23 22:01 - 2015-01-13 07:57 - 00053248 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll 2015-02-23 22:01 - 2015-01-13 07:57 - 00039936 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll 2015-02-23 22:01 - 2015-01-13 06:01 - 01762816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2015-02-23 22:01 - 2015-01-13 06:01 - 01181696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2015-02-23 22:01 - 2015-01-13 06:01 - 00523264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2015-02-23 22:01 - 2015-01-13 06:00 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2015-02-23 22:01 - 2015-01-13 06:00 - 02861568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2015-02-23 22:01 - 2015-01-13 06:00 - 02055168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2015-02-23 22:01 - 2015-01-13 06:00 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2015-02-23 22:01 - 2015-01-13 06:00 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2015-02-23 22:01 - 2015-01-13 06:00 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2015-02-23 22:01 - 2015-01-13 06:00 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2015-02-23 22:01 - 2015-01-13 06:00 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2015-02-23 22:01 - 2015-01-13 06:00 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2015-02-23 22:01 - 2015-01-13 06:00 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2015-02-23 22:01 - 2015-01-13 06:00 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2015-02-23 22:01 - 2015-01-13 06:00 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2015-02-23 22:01 - 2015-01-13 06:00 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2015-02-23 22:01 - 2015-01-13 06:00 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2015-02-23 22:01 - 2015-01-13 06:00 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2015-02-23 22:01 - 2015-01-13 06:00 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2015-02-23 22:01 - 2015-01-13 05:42 - 02706432 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb 2015-02-23 22:01 - 2015-01-13 05:17 - 00441856 _____ (Microsoft Corporation) C:\Windows\System32\html.iec 2015-02-23 22:01 - 2015-01-13 05:10 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2015-02-23 22:01 - 2015-01-13 04:43 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2015-02-23 15:53 - 2015-02-18 13:44 - 00245248 _____ () C:\Users\Kerstie\Desktop\OEffentlDienst SS 4 Rechtsschutz bei Ernennung.ppt ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-03-25 13:50 - 2012-10-12 18:11 - 00000000 ____D () C:\Windows\System32\Macromed 2015-03-25 13:50 - 2012-10-12 17:23 - 00000000 ____D () C:\users\Kerstie 2015-03-25 13:50 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\servicing 2015-03-25 13:50 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared 2015-03-25 13:49 - 2013-08-17 09:57 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2015-03-25 13:49 - 2012-10-26 22:54 - 00000000 ____D () C:\Program Files (x86)\IrfanView 2015-03-25 13:48 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration 2015-03-25 13:45 - 2014-10-31 09:45 - 00000000 ___RD () C:\Users\Kerstie\Dropbox 2015-03-25 13:45 - 2013-12-05 14:58 - 00000000 ____D () C:\Users\Kerstie\AppData\Roaming\Dropbox 2015-03-25 13:43 - 2014-10-21 08:40 - 00000000 ____D () C:\Program Files (x86)\Java 2015-03-20 17:40 - 2015-02-09 22:49 - 00000000 ____D () C:\Users\Kerstie\Desktop\Dienstpläne 2015-03-17 11:32 - 2012-10-12 18:11 - 00778928 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-03-17 11:32 - 2012-10-12 18:11 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-03-17 11:29 - 2015-01-25 14:52 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2015-03-17 11:15 - 2012-08-10 10:27 - 01637409 _____ () C:\Windows\WindowsUpdate.log 2015-03-17 11:13 - 2009-07-14 05:45 - 00021840 ____H () C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-03-17 11:13 - 2009-07-14 05:45 - 00021840 ____H () C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-03-17 11:11 - 2013-01-30 21:23 - 00001070 _____ () C:\Users\Public\Desktop\VLC media player.lnk 2015-03-17 11:08 - 2013-02-15 23:45 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-03-17 10:57 - 2013-02-15 23:45 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-03-17 10:47 - 2013-03-03 23:26 - 00101937 _____ () C:\Windows\setupact.log 2015-03-17 10:47 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-02-25 00:46 - 2011-04-12 08:43 - 00699568 _____ () C:\Windows\System32\perfh007.dat 2015-02-25 00:46 - 2011-04-12 08:43 - 00149676 _____ () C:\Windows\System32\perfc007.dat 2015-02-25 00:46 - 2009-07-14 06:13 - 01620196 _____ () C:\Windows\System32\PerfStringBackup.INI 2015-02-24 00:44 - 2009-07-14 05:45 - 00304728 _____ () C:\Windows\System32\FNTCACHE.DAT 2015-02-23 22:29 - 2013-08-01 08:42 - 00000000 ____D () C:\Windows\System32\MRT 2015-02-23 22:17 - 2012-11-03 13:02 - 116773704 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe 2015-02-23 21:25 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\System32\NDF Some content of TEMP: ==================== C:\Users\Kerstie\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpyly63f.dll C:\Users\Kerstie\AppData\Local\Temp\_isF3B1.exe ==================== Known DLLs (Whitelisted) ================ ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit ==================== Restore Points ========================= Restore point made on: 2015-02-23 22:09:19 Restore point made on: 2015-03-17 11:34:38 ==================== Memory info =========================== Percentage of memory in use: 9% Total physical RAM: 7785.37 MB Available physical RAM: 7011.85 MB Total Pagefile: 7783.57 MB Available Pagefile: 7000.93 MB Total Virtual: 8192 MB Available Virtual: 8191.88 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:697.94 GB) (Free:516.78 GB) NTFS Drive f: (INTENSO USB) (Removable) (Total:1.87 GB) (Free:1.68 GB) FAT Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS Drive y: (System-reserviert) (Fixed) (Total:0.7 GB) (Free:0.64 GB) NTFS ==>[System with boot components (obtained from reading drive)] ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 698.6 GB) (Disk ID: A99CE8E0) Partition 1: (Active) - (Size=717 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=697.9 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows XP) (Size: 1.9 GB) (Disk ID: C3072E18) Partition 1: (Active) - (Size=1.9 GB) - (Type=06) LastRegBack: 2015-02-18 16:00 ==================== End Of Log ============================ Wäre echt nett, da auf dem PC meine Hausarbeit ist, die ich idiotischerweise nur dort gespeichert habe ![]() |
Themen zu PC bootet wegen aswrvrt sys nicht mehr |
.dll, adobe, antivirus, avg, defender, desktop, explorer, file, flash player, helper.exe, home, mozilla, netzwerk, problem, realtek, registry, scan, secur, services.exe, software, svchost.exe, temp, virus, windows, windows xp, winlogon.exe |