Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Interpol Trojaner Windows 7 (https://www.trojaner-board.de/146830-interpol-trojaner-windows-7-a.html)

BeGaBung 28.12.2013 20:55
Interpol Trojaner Windows 7
 
Ich habe ein Problem mit einem Trojaner...

Mein Pc lässt sich nicht im abgesicherten Modus starten.

Anbei schonmal das erste Logfile.

Bitte um Hilfe!!!

[
FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013 (ATTENTION: ====> FRST version is 50 days old and could be outdated)
Ran by SYSTEM on MININT-TP0B6KJ on 21-11-2013 22:25:38
Running from H:\
Windows 7 Home Premium (X64) OS Language: English(US)
Internet Explorer Version 10
Boot Mode: Recovery

The current controlset is ControlSet001
ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log.

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11369576 2010-08-10] (Realtek Semiconductor)
HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2586504 2010-08-05] (ELAN Microelectronics Corp.)
HKLM\...\RunOnce: [*WerKernelReporting] - %SYSTEMROOT%\SYSTEM32\WerFault.exe -k -rq [415232 2009-07-13] (Microsoft Corporation)
HKLM-x32\...\Run: [AppleSyncNotifier] - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2011-11-01] (Apple Inc.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [37296 2011-06-07] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [937920 2011-03-29] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [248552 2010-05-14] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1259376 2011-07-28] ()
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-04-30] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-01] (Apple Inc.)
HKU\Florian\...\Run: [msnmsgr] - C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [3872080 2010-04-16] (Microsoft Corporation)
HKU\Florian\...\Run: [ICQ] - C:\Program Files (x86)\ICQ7.2\ICQ.exe [133432 2011-01-05] (ICQ, LLC.)
HKU\Florian\...\Run: [MobileDocuments] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe
HKU\Florian\...\Run: [EADM] - C:\Program Files (x86)\Origin\Origin.exe [3561816 2013-10-16] (Electronic Arts)
HKU\Tanja\...\Run: [msnmsgr] - C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [3872080 2010-04-16] (Microsoft Corporation)
Startup: C:\Users\Florian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\4mqrbn7tlf.lnk
ShortcutTarget: 4mqrbn7tlf.lnk -> C:\PROGRA~3\flt7nbrqm4.dss (Sato Corporation)
Startup: C:\Users\Florian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk ->  (No File)
Startup: C:\Users\Florian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DSL Internet.lnk
ShortcutTarget: DSL Internet.lnk -> C:\Program Files (x86)\1&1\FritzDsl.exe (AVM Berlin)
Startup: C:\Users\Florian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DSL Protect.lnk
ShortcutTarget: DSL Protect.lnk -> C:\Program Files (x86)\1&1\FwebProt.exe (AVM Berlin)
Startup: C:\Users\Florian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
Startup: C:\Users\Tanja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

==================== Services (Whitelisted) =================

S2 IGDCTRL; C:\Program Files (x86)\1&1\IGDCTRL.EXE [87344 2007-10-25] (AVM Berlin)
S2 N360; C:\Program Files (x86)\Norton 360\Engine\5.2.2.3\ccSvcHst.exe [130008 2011-04-16] (Symantec Corporation)
S2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-05-31] (Symantec Corporation)
S2 WTGService; C:\Program Files (x86)\Verbindungsassistent\WTGService.exe [296400 2009-03-03] ()
S2 Winmgmt; C:\PROGRA~3\1tlfbg.pzz [x]

==================== Drivers (Whitelisted) ====================

S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2013-06-19] ()
S1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\BASHDefs\20131002.001\BHDrvx64.sys [1525848 2013-10-01] (Symantec Corporation)
S1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\BASHDefs\20131002.001\BHDrvx64.sys [1525848 2013-10-01] (Symantec Corporation)
S1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-08-28] (Symantec Corporation)
S1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-08-28] (Symantec Corporation)
S3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [140376 2013-08-28] (Symantec Corporation)
S1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\IPSDefs\20131018.001\IDSvia64.sys [521816 2013-10-15] (Symantec Corporation)
S1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\IPSDefs\20131018.001\IDSvia64.sys [521816 2013-10-15] (Symantec Corporation)
S2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2013-06-19] ()
S3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\VirusDefs\20131019.005\ENG64.SYS [126040 2013-08-30] (Symantec Corporation)
S3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\VirusDefs\20131019.005\ENG64.SYS [126040 2013-08-30] (Symantec Corporation)
S3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\VirusDefs\20131019.005\EX64.SYS [2099288 2013-08-30] (Symantec Corporation)
S3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\VirusDefs\20131019.005\EX64.SYS [2099288 2013-08-30] (Symantec Corporation)
S3 rtport; C:\Windows\SysWOW64\drivers\rtport.sys [15144 2010-09-28] (Windows (R) 2003 DDK 3790 provider)
S3 rtport; C:\Windows\SysWOW64\drivers\rtport.sys [15144 2010-09-28] (Windows (R) 2003 DDK 3790 provider)
S3 SRTSP; C:\Windows\System32\Drivers\N360x64\0502020.003\SRTSP64.SYS [744568 2011-03-30] (Symantec Corporation)
S1 SRTSPX; C:\Windows\system32\drivers\N360x64\0502020.003\SRTSPX64.SYS [40568 2011-03-30] (Symantec Corporation)
S0 SymDS; C:\Windows\System32\drivers\N360x64\0502020.003\SYMDS64.SYS [450680 2011-01-26] (Symantec Corporation)
S0 SymEFA; C:\Windows\System32\drivers\N360x64\0502020.003\SYMEFA64.SYS [912504 2011-03-14] (Symantec Corporation)
S3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [174200 2011-06-21] (Symantec Corporation)
S1 SymIRON; C:\Windows\system32\drivers\N360x64\0502020.003\Ironx64.SYS [171128 2011-01-26] (Symantec Corporation)
S1 SymNetS; C:\Windows\System32\Drivers\N360x64\0502020.003\SYMNETS.SYS [386168 2011-04-20] (Symantec Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-15 13:15 - 2009-07-13 17:14 - 00176128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ie4uinit.exe
2013-11-15 13:14 - 2010-05-06 05:00 - 01026048 _____ (Microsoft Corporation) C:\Windows\System32\mstime.dll
2013-11-15 13:14 - 2010-05-06 04:41 - 00606208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstime.dll
2013-11-15 13:14 - 2009-07-13 17:41 - 00267776 _____ (Microsoft Corporation) C:\Windows\System32\ieaksie.dll
2013-11-15 13:14 - 2009-07-13 17:41 - 00156160 _____ (Microsoft Corporation) C:\Windows\System32\ieakeng.dll
2013-11-15 13:14 - 2009-07-13 17:40 - 00090112 _____ (Microsoft Corporation) C:\Windows\System32\admparse.dll
2013-11-15 13:14 - 2009-07-13 17:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\System32\corpol.dll
2013-11-15 13:14 - 2009-07-13 17:27 - 00163840 _____ (Microsoft Corporation) C:\Windows\System32\ieakui.dll
2013-11-15 13:14 - 2009-07-13 17:15 - 00229376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieaksie.dll
2013-11-15 13:14 - 2009-07-13 17:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakeng.dll
2013-11-15 13:14 - 2009-07-13 17:15 - 00018432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\corpol.dll
2013-11-15 13:14 - 2009-07-13 17:14 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\admparse.dll
2013-11-15 13:14 - 2009-07-13 17:05 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakui.dll
2013-11-15 13:14 - 2009-06-10 12:45 - 00000003 _____ C:\Windows\System32\Drivers\MsftWdf_Kernel_01009_Inbox_Critical.Wdf
2013-11-15 13:13 - 2013-11-15 13:13 - 00274904 _____ C:\Windows\Minidump\111513-28470-01.dmp
2013-11-15 04:22 - 2013-11-15 13:13 - 492919575 _____ C:\Windows\MEMORY.DMP
2013-11-15 04:22 - 2013-11-15 04:22 - 00274904 _____ C:\Windows\Minidump\111513-30607-01.dmp
2013-11-14 13:05 - 2013-11-15 13:14 - 95025368 ____T C:\ProgramData\4mqrbn7tlf.bxx
2013-11-14 13:05 - 2013-11-15 13:14 - 00000000 _____ C:\ProgramData\4mqrbn7tlf.fvv
2013-11-14 13:05 - 2013-11-14 13:05 - 00177152 _____ (Sato Corporation) C:\ProgramData\flt7nbrqm4.dss
2013-11-14 13:05 - 2013-11-14 13:05 - 00061536 ____T (Microsoft Corporation) C:\ProgramData\4mqrbn7tlf.pss
2013-11-13 12:35 - 2013-11-13 12:35 - 00001743 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-11-13 12:34 - 2013-11-13 12:35 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-11-13 12:34 - 2013-11-13 12:35 - 00000000 ____D C:\Program Files\iTunes
2013-11-13 12:34 - 2013-11-13 12:35 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-11-13 12:34 - 2013-11-13 12:34 - 00000000 ____D C:\Program Files\iPod
2013-10-22 09:11 - 2013-10-22 09:17 - 00000000 ____D C:\Users\Florian\Desktop\Serien

==================== One Month Modified Files and Folders =======

2013-11-15 13:16 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\SysWOW64\com
2013-11-15 13:16 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\System32\oobe
2013-11-15 13:16 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\System32\com
2013-11-15 13:14 - 2013-11-14 13:05 - 95025368 ____T C:\ProgramData\4mqrbn7tlf.bxx
2013-11-15 13:14 - 2013-11-14 13:05 - 00000000 _____ C:\ProgramData\4mqrbn7tlf.fvv
2013-11-15 13:14 - 2013-01-20 11:11 - 00000000 ____D C:\Users\Florian\AppData\Roaming\Dropbox
2013-11-15 13:14 - 2012-11-15 11:51 - 00000000 ____D C:\Program Files (x86)\Origin
2013-11-15 13:14 - 2012-01-01 11:38 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-11-15 13:14 - 2011-04-26 11:12 - 00000000 ____D C:\Users\Florian\Tracing
2013-11-15 13:13 - 2013-11-15 13:13 - 00274904 _____ C:\Windows\Minidump\111513-28470-01.dmp
2013-11-15 13:13 - 2013-11-15 04:22 - 492919575 _____ C:\Windows\MEMORY.DMP
2013-11-15 13:13 - 2011-11-10 09:38 - 00000000 ____D C:\Windows\Minidump
2013-11-15 13:13 - 2009-07-13 21:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-15 13:13 - 2009-07-13 20:51 - 00218260 _____ C:\Windows\setupact.log
2013-11-15 04:23 - 2012-01-01 11:38 - 00001112 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-11-15 04:22 - 2013-11-15 04:22 - 00274904 _____ C:\Windows\Minidump\111513-30607-01.dmp
2013-11-14 13:10 - 2010-08-31 15:01 - 02029567 _____ C:\Windows\WindowsUpdate.log
2013-11-14 13:07 - 2009-07-13 20:45 - 00014144 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-14 13:07 - 2009-07-13 20:45 - 00014144 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-14 13:06 - 2010-11-19 11:16 - 00000000 ____D C:\Users\Florian\AppData\Local\CrashDumps
2013-11-14 13:05 - 2013-11-14 13:05 - 00177152 _____ (Sato Corporation) C:\ProgramData\flt7nbrqm4.dss
2013-11-14 13:05 - 2013-11-14 13:05 - 00061536 ____T (Microsoft Corporation) C:\ProgramData\4mqrbn7tlf.pss
2013-11-14 13:01 - 2013-01-20 11:13 - 00000000 ___RD C:\Users\Florian\Dropbox
2013-11-13 12:48 - 2012-04-03 12:16 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-13 12:35 - 2013-11-13 12:35 - 00001743 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-11-13 12:35 - 2013-11-13 12:34 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-11-13 12:35 - 2013-11-13 12:34 - 00000000 ____D C:\Program Files\iTunes
2013-11-13 12:35 - 2013-11-13 12:34 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-11-13 12:34 - 2013-11-13 12:34 - 00000000 ____D C:\Program Files\iPod
2013-10-23 12:56 - 2012-01-01 11:57 - 00000000 ____D C:\Users\Florian\AppData\Roaming\DivX
2013-10-23 08:16 - 2009-07-13 21:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-10-22 09:17 - 2013-10-22 09:11 - 00000000 ____D C:\Users\Florian\Desktop\Serien

Some content of TEMP:
====================
C:\Users\Florian\AppData\Local\Temp\~tmf1053072901840174725.dll


==================== Known DLLs (Whitelisted) ================


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points  =========================

2
Restore point made on: 2013-11-11 13:05:29
Restore point made on: 2013-11-13 12:32:52

==================== Memory info ===========================

Percentage of memory in use: 15%
Total physical RAM: 4060.61 MB
Available physical RAM: 3448.56 MB
Total Pagefile: 4058.76 MB
Available Pagefile: 3436.22 MB
Total Virtual: 8192 MB
Available Virtual: 8191.88 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:113 GB) (Free:10.67 GB) NTFS
Drive d: () (Fixed) (Total:167.1 GB) (Free:0 GB) NTFS
Drive f: (SAMSUNG_REC) (Fixed) (Total:17.89 GB) (Free:0.93 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive h: (Lexar) (Removable) (Total:29.21 GB) (Free:5.42 GB) FAT32
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
Drive y: (SYSTEM) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 298 GB) (Disk ID: 8074A547)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=113 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=167 GB) - (Type=OF Extended)
Partition 4: (Not Active) - (Size=18 GB) - (Type=27)

========================================================
Disk: 1 (Size: 29 GB) (Disk ID: 672E53E2)
Partition 1: (Not Active) - (Size=29 GB) - (Type=0B)


LastRegBack: 2013-11-10 01:33

==================== End Of Log ============================
--- --- ---
]

aharonov 28.12.2013 21:58
Hallo,

startet der Rechner nach diesem Fix wieder normal?


Drücke bitte die + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
Startup: C:\Users\Florian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\4mqrbn7tlf.lnk
ShortcutTarget: 4mqrbn7tlf.lnk -> C:\PROGRA~3\flt7nbrqm4.dss (Sato Corporation)
S2 Winmgmt; C:\PROGRA~3\1tlfbg.pzz [x]
2013-11-14 13:05 - 2013-11-15 13:14 - 95025368 ____T C:\ProgramData\4mqrbn7tlf.bxx
2013-11-14 13:05 - 2013-11-15 13:14 - 00000000 _____ C:\ProgramData\4mqrbn7tlf.fvv
2013-11-14 13:05 - 2013-11-14 13:05 - 00177152 _____ (Sato Corporation) C:\ProgramData\flt7nbrqm4.dss
2013-11-14 13:05 - 2013-11-14 13:05 - 00061536 ____T (Microsoft Corporation) C:\ProgramData\4mqrbn7tlf.pss
C:\Users\Florian\AppData\Local\Temp\~tmf1053072901840174725.dll
Speichere diese bitte als Fixlist.txt auf deinem USB Stick.
  • Starte deinen Rechner erneut in die Reparaturoptionen
  • Starte nun die FRST.exe erneut und klicke den Entfernen Button.

Das Tool erstellt eine Fixlog.txt auf deinem USB Stick. Poste den Inhalt bitte hier.

BeGaBung 28.12.2013 22:26
Hallo,

Rechner startet nicht normal, auch nicht im abgesicherten Modus...

aharonov 28.12.2013 23:39
Auch nach dem Fix nicht?
Poste bitte das Fixlog wie angegeben.

BeGaBung 28.12.2013 23:48
Wie soll ich denn den Text kopieren und da rein bekommen? Wenn ich den Rechner normal starte wird der Bildschirm nach ein paar Sekunden blau und startet sich dann automatisch neu

aharonov 29.12.2013 18:00
Hast du den Fix wie angegeben durchgeführt?
Zitat:
Das Tool erstellt eine Fixlog.txt auf deinem USB Stick. Poste den Inhalt bitte hier.
Mach bitte einen neuen Scan mit FRST in den Reperaturoptionen.

BeGaBung 29.12.2013 19:07
Hallo Leo,

danke schonmal für deine Hilfe.
Habe den Scan nochmal durchgeführt

Hier das neue Protokoll


FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013 (ATTENTION: ====> FRST version is 88 days old and could be outdated)
Ran by SYSTEM on MININT-PQ1FHFR on 29-12-2013 18:59:36
Running from H:\
Windows 7 Home Premium (X64) OS Language: English(US)
Internet Explorer Version 10
Boot Mode: Recovery

The current controlset is ControlSet001
ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log.

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11369576 2010-08-10] (Realtek Semiconductor)
HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2586504 2010-08-05] (ELAN Microelectronics Corp.)
HKLM\...\RunOnce: [*WerKernelReporting] - %SYSTEMROOT%\SYSTEM32\WerFault.exe -k -rq [415232 2009-07-13] (Microsoft Corporation)
HKLM-x32\...\Run: [AppleSyncNotifier] - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2011-11-01] (Apple Inc.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [37296 2011-06-07] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [937920 2011-03-29] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [248552 2010-05-14] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1259376 2011-07-28] ()
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-04-30] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-01] (Apple Inc.)
HKU\Florian\...\Run: [msnmsgr] - C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [3872080 2010-04-16] (Microsoft Corporation)
HKU\Florian\...\Run: [ICQ] - C:\Program Files (x86)\ICQ7.2\ICQ.exe [133432 2011-01-05] (ICQ, LLC.)
HKU\Florian\...\Run: [MobileDocuments] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe
HKU\Florian\...\Run: [EADM] - C:\Program Files (x86)\Origin\Origin.exe [3561816 2013-10-16] (Electronic Arts)
HKU\Tanja\...\Run: [msnmsgr] - C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [3872080 2010-04-16] (Microsoft Corporation)
Startup: C:\Users\Florian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\4mqrbn7tlf.lnk
ShortcutTarget: 4mqrbn7tlf.lnk -> C:\PROGRA~3\flt7nbrqm4.dss (Sato Corporation)
Startup: C:\Users\Florian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk ->  (No File)
Startup: C:\Users\Florian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DSL Internet.lnk
ShortcutTarget: DSL Internet.lnk -> C:\Program Files (x86)\1&1\FritzDsl.exe (AVM Berlin)
Startup: C:\Users\Florian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DSL Protect.lnk
ShortcutTarget: DSL Protect.lnk -> C:\Program Files (x86)\1&1\FwebProt.exe (AVM Berlin)
Startup: C:\Users\Florian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
Startup: C:\Users\Tanja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

==================== Services (Whitelisted) =================

S2 IGDCTRL; C:\Program Files (x86)\1&1\IGDCTRL.EXE [87344 2007-10-25] (AVM Berlin)
S2 N360; C:\Program Files (x86)\Norton 360\Engine\5.2.2.3\ccSvcHst.exe [130008 2011-04-16] (Symantec Corporation)
S2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-05-31] (Symantec Corporation)
S2 WTGService; C:\Program Files (x86)\Verbindungsassistent\WTGService.exe [296400 2009-03-03] ()
S2 Winmgmt; C:\PROGRA~3\1tlfbg.pzz [x]

==================== Drivers (Whitelisted) ====================

S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2013-06-19] ()
S1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\BASHDefs\20131002.001\BHDrvx64.sys [1525848 2013-10-01] (Symantec Corporation)
S1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\BASHDefs\20131002.001\BHDrvx64.sys [1525848 2013-10-01] (Symantec Corporation)
S1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-08-28] (Symantec Corporation)
S1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-08-28] (Symantec Corporation)
S3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [140376 2013-08-28] (Symantec Corporation)
S1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\IPSDefs\20131018.001\IDSvia64.sys [521816 2013-10-15] (Symantec Corporation)
S1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\IPSDefs\20131018.001\IDSvia64.sys [521816 2013-10-15] (Symantec Corporation)
S2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2013-06-19] ()
S3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\VirusDefs\20131019.005\ENG64.SYS [126040 2013-08-30] (Symantec Corporation)
S3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\VirusDefs\20131019.005\ENG64.SYS [126040 2013-08-30] (Symantec Corporation)
S3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\VirusDefs\20131019.005\EX64.SYS [2099288 2013-08-30] (Symantec Corporation)
S3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\VirusDefs\20131019.005\EX64.SYS [2099288 2013-08-30] (Symantec Corporation)
S3 rtport; C:\Windows\SysWOW64\drivers\rtport.sys [15144 2010-09-28] (Windows (R) 2003 DDK 3790 provider)
S3 rtport; C:\Windows\SysWOW64\drivers\rtport.sys [15144 2010-09-28] (Windows (R) 2003 DDK 3790 provider)
S3 SRTSP; C:\Windows\System32\Drivers\N360x64\0502020.003\SRTSP64.SYS [744568 2011-03-30] (Symantec Corporation)
S1 SRTSPX; C:\Windows\system32\drivers\N360x64\0502020.003\SRTSPX64.SYS [40568 2011-03-30] (Symantec Corporation)
S0 SymDS; C:\Windows\System32\drivers\N360x64\0502020.003\SYMDS64.SYS [450680 2011-01-26] (Symantec Corporation)
S0 SymEFA; C:\Windows\System32\drivers\N360x64\0502020.003\SYMEFA64.SYS [912504 2011-03-14] (Symantec Corporation)
S3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [174200 2011-06-21] (Symantec Corporation)
S1 SymIRON; C:\Windows\system32\drivers\N360x64\0502020.003\Ironx64.SYS [171128 2011-01-26] (Symantec Corporation)
S1 SymNetS; C:\Windows\System32\Drivers\N360x64\0502020.003\SYMNETS.SYS [386168 2011-04-20] (Symantec Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-28 13:23 - 2013-12-28 13:23 - 00274904 _____ C:\Windows\Minidump\122813-24460-01.dmp

==================== One Month Modified Files and Folders =======

2013-12-28 13:23 - 2013-12-28 13:23 - 00274904 _____ C:\Windows\Minidump\122813-24460-01.dmp
2013-12-28 13:23 - 2011-11-10 09:38 - 00000000 ____D C:\Windows\Minidump
2013-12-28 13:22 - 2013-11-14 13:05 - 95025368 ____T C:\ProgramData\4mqrbn7tlf.bxx
2013-12-28 13:22 - 2013-11-14 13:05 - 00000000 _____ C:\ProgramData\4mqrbn7tlf.fvv
2013-12-28 13:22 - 2011-04-26 11:12 - 00000000 ____D C:\Users\Florian\Tracing
2013-12-28 13:21 - 2012-11-15 11:51 - 00000000 ____D C:\Program Files (x86)\Origin
2013-12-28 13:21 - 2012-01-01 11:38 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-28 13:20 - 2009-07-13 21:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-28 13:20 - 2009-07-13 20:51 - 00218372 _____ C:\Windows\setupact.log

Some content of TEMP:
====================
C:\Users\Florian\AppData\Local\Temp\~tmf1053072901840174725.dll


==================== Known DLLs (Whitelisted) ================


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points  =========================

2
Restore point made on: 2013-11-11 13:05:29
Restore point made on: 2013-11-13 12:32:52

==================== Memory info ===========================

Percentage of memory in use: 14%
Total physical RAM: 4060.61 MB
Available physical RAM: 3452.24 MB
Total Pagefile: 4058.76 MB
Available Pagefile: 3446.75 MB
Total Virtual: 8192 MB
Available Virtual: 8191.88 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:113 GB) (Free:11.09 GB) NTFS
Drive d: () (Fixed) (Total:167.1 GB) (Free:0 GB) NTFS
Drive f: (SAMSUNG_REC) (Fixed) (Total:17.89 GB) (Free:0.93 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive h: (Lexar) (Removable) (Total:29.21 GB) (Free:8.33 GB) FAT32
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
Drive y: (SYSTEM) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 298 GB) (Disk ID: 8074A547)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=113 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=167 GB) - (Type=OF Extended)
Partition 4: (Not Active) - (Size=18 GB) - (Type=27)

========================================================
Disk: 1 (Size: 29 GB) (Disk ID: 672E53E2)
Partition 1: (Not Active) - (Size=29 GB) - (Type=0B)


LastRegBack: 2013-11-10 01:33

==================== End Of Log ============================
--- --- ---

aharonov 30.12.2013 12:19
Du hast den Fix offenbar nicht wie angegeben ausgeführt - das Zeugs ist alles noch da.
Wiederhole den zuvor angegebenen Fix bitte. Die erstellte fixlist.txt sollte auf neben der frst64.exe auf dem gleichen USB-Stick gespeichert werden.

BeGaBung 30.12.2013 15:28
Kannst du hiermit was anfangen?

Code:
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 02-10-2013
Ran by SYSTEM at 2013-12-30 15:17:10 Run:2
Running from H:\
Boot Mode: Recovery
==============================================

Content of fixlist:
*****************
Startup: C:\Users\Florian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\4mqrbn7tlf.lnk ShortcutTarget: 4mqrbn7tlf.lnk -> C:\PROGRA~3\flt7nbrqm4.dss (Sato Corporation) S2 Winmgmt; C:\PROGRA~3\1tlfbg.pzz [x] 2013-11-14 13:05 - 2013-11-15 13:14 - 95025368 ____T C:\ProgramData\4mqrbn7tlf.bxx 2013-11-14 13:05 - 2013-11-15 13:14 - 00000000 _____ C:\ProgramData\4mqrbn7tlf.fvv 2013-11-14 13:05 - 2013-11-14 13:05 - 00177152 _____ (Sato Corporation) C:\ProgramData\flt7nbrqm4.dss 2013-11-14 13:05 - 2013-11-14 13:05 - 00061536 ____T (Microsoft Corporation) C:\ProgramData\4mqrbn7tlf.pss C:\Users\Florian\AppData\Local\Temp\~tmf1053072901840174725.dll
*****************

C:\Users\Florian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\4mqrbn7tlf.lnk ShortcutTarget: 4mqrbn7tlf.lnk -> C:\PROGRA~3\flt7nbrqm4.dss (Sato Corporation) S2 Winmgmt; C:\PROGRA~3\1tlfbg.pzz [x] 2013-11-14 13:05 - 2013-11-15 13:14 - 95025368 ____T C:\ProgramData\4mqrbn7tlf.bxx 2013-11-14 13:05 - 2013-11-15 13:14 - 00000000 _____ C:\ProgramData\4mqrbn7tlf.fvv 2013-11-14 13:05 - 2013-11-14 13:05 - 00177152 _____ (Sato Corporation) C:\ProgramData\flt7nbrqm4.dss 2013-11-14 13:05 - 2013-11-14 13:05 - 00061536 ____T (Microsoft Corporation) C:\ProgramData\4mqrbn7tlf.pss C:\Users\Florian\AppData\Local\Temp\~tmf1053072901840174725.dll not found.
Startup: C:\Users\Florian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\4mqrbn7tlf.lnk C:\PROGRA~3\flt7nbrqm4.dss C:\ProgramData\4mqrbn7tlf.pss C:\Users\Florian\AppData\Local\Temp\~tmf1053072901840174725.dll not found.
Startup: C:\Users\Florian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\4mqrbn7tlf.lnk ShortcutTarget: 4mqrbn7tlf.lnk -> C:\PROGRA~3\flt7nbrqm4.dss (Sato Corporation) Winmgmt => Service not found.

==== End of Fixlog ====

aharonov 31.12.2013 15:38
Zitat:
Kannst du hiermit was anfangen?
Ja, jetzt sehe ich, warum das nicht klappt: Dir gehen im Fixskript die Zeilenumbrüche verloren! Wiederhole den Fix bitte und achte darauf, dass deine fixlist.txt genau so aussieht wie die Vorgabe in der Codebox. Also 8 Zeilen und nicht eine einzige.

BeGaBung 02.01.2014 14:56
so, hier noch einmal neu...
danke für deine geduld ;-)
bin leider in so sachen nicht so begabt...

Code:
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 02-10-2013
Ran by SYSTEM at 2014-01-02 14:54:19 Run:3
Running from H:\
Boot Mode: Recovery
==============================================

Content of fixlist:
*****************
Startup: C:\Users\Florian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\4mqrbn7tlf.lnk
ShortcutTarget: 4mqrbn7tlf.lnk -> C:\PROGRA~3\flt7nbrqm4.dss (Sato Corporation)
S2 Winmgmt; C:\PROGRA~3\1tlfbg.pzz [x]
2013-11-14 13:05 - 2013-11-15 13:14 - 95025368 ____T C:\ProgramData\4mqrbn7tlf.bxx
2013-11-14 13:05 - 2013-11-15 13:14 - 00000000 _____ C:\ProgramData\4mqrbn7tlf.fvv
2013-11-14 13:05 - 2013-11-14 13:05 - 00177152 _____ (Sato Corporation) C:\ProgramData\flt7nbrqm4.dss
2013-11-14 13:05 - 2013-11-14 13:05 - 00061536 ____T (Microsoft Corporation)
C:\ProgramData\4mqrbn7tlf.pss C:\Users\Florian\AppData\Local\Temp\~tmf1053072901840174725.dll
*****************

C:\Users\Florian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\4mqrbn7tlf.lnk => Moved successfully.
C:\PROGRA~3\flt7nbrqm4.dss => Moved successfully.
Winmgmt => Service restored successfully.
C:\ProgramData\4mqrbn7tlf.bxx => Moved successfully.
C:\ProgramData\4mqrbn7tlf.fvv => Moved successfully.
"C:\ProgramData\flt7nbrqm4.dss" => File/Directory not found.
"2013-11-14 13:05 - 2013-11-14 13:05 - 00061536 ____T (Microsoft Corporation)" => File/Directory not found.
"C:\ProgramData\4mqrbn7tlf.pss C:\Users\Florian\AppData\Local\Temp\~tmf1053072901840174725.dll " => File/Directory not found.

==== End of Fixlog ====

aharonov 02.01.2014 14:58
So, jetzt hat nur noch ein Zeilenumbruch gefehlt.. ;) (in deiner letzten Zeile)
Aber das spielt möglicherweise keine Rolle. Startet der Rechner jetzt wieder normal ohne den Sperrbildschirm?

BeGaBung 02.01.2014 15:05
nein, fahre den rechner normal hoch,
und nach ein paar sekunden erscheint zwar nicht mehr der interpol sperrbildschirm,
dafür erscheint ein blauer bildschirm für ein paar sekunden,
danach startet der rechner neu

aharonov 02.01.2014 16:35
Dann mach bitte einen frischen FRST-Scan.

BeGaBung 02.01.2014 19:12
hier das neue scan protokoll


FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013 (ATTENTION: ====> FRST version is 92 days old and could be outdated)
Ran by SYSTEM on MININT-VRU6Q77 on 02-01-2014 19:05:21
Running from H:\
Windows 7 Home Premium (X64) OS Language: English(US)
Internet Explorer Version 10
Boot Mode: Recovery

The current controlset is ControlSet002
ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log.

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11369576 2010-08-10] (Realtek Semiconductor)
HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2586504 2010-08-05] (ELAN Microelectronics Corp.)
HKLM\...\RunOnce: [*WerKernelReporting] - %SYSTEMROOT%\SYSTEM32\WerFault.exe -k -rq [415232 2009-07-13] (Microsoft Corporation)
HKLM\...\RunOnce: [*Restore] - C:\Windows\system32\rstrui.exe /RUNONCE [296960 2010-11-20] (Microsoft Corporation)
HKLM-x32\...\Run: [AppleSyncNotifier] - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2011-11-01] (Apple Inc.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [37296 2011-06-07] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [937920 2011-03-29] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [248552 2010-05-14] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1259376 2011-07-28] ()
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-04-30] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-01] (Apple Inc.)
HKU\Florian\...\Run: [msnmsgr] - C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [3872080 2010-04-16] (Microsoft Corporation)
HKU\Florian\...\Run: [ICQ] - C:\Program Files (x86)\ICQ7.2\ICQ.exe [133432 2011-01-05] (ICQ, LLC.)
HKU\Florian\...\Run: [MobileDocuments] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe
HKU\Florian\...\Run: [EADM] - C:\Program Files (x86)\Origin\Origin.exe [3561816 2013-10-16] (Electronic Arts)
HKU\Tanja\...\Run: [msnmsgr] - C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [3872080 2010-04-16] (Microsoft Corporation)
Startup: C:\Users\Florian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk ->  (No File)
Startup: C:\Users\Florian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DSL Internet.lnk
ShortcutTarget: DSL Internet.lnk -> C:\Program Files (x86)\1&1\FritzDsl.exe (AVM Berlin)
Startup: C:\Users\Florian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DSL Protect.lnk
ShortcutTarget: DSL Protect.lnk -> C:\Program Files (x86)\1&1\FwebProt.exe (AVM Berlin)
Startup: C:\Users\Florian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
Startup: C:\Users\Tanja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

==================== Services (Whitelisted) =================

S2 IGDCTRL; C:\Program Files (x86)\1&1\IGDCTRL.EXE [87344 2007-10-25] (AVM Berlin)
S2 N360; C:\Program Files (x86)\Norton 360\Engine\5.2.2.3\ccSvcHst.exe [130008 2011-04-16] (Symantec Corporation)
S2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-05-31] (Symantec Corporation)
S2 WTGService; C:\Program Files (x86)\Verbindungsassistent\WTGService.exe [296400 2009-03-03] ()

==================== Drivers (Whitelisted) ====================

S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2013-06-19] ()
S1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\BASHDefs\20131002.001\BHDrvx64.sys [1525848 2013-10-01] (Symantec Corporation)
S1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\BASHDefs\20131002.001\BHDrvx64.sys [1525848 2013-10-01] (Symantec Corporation)
S1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-08-28] (Symantec Corporation)
S1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-08-28] (Symantec Corporation)
S3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [140376 2013-08-28] (Symantec Corporation)
S1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\IPSDefs\20131018.001\IDSvia64.sys [521816 2013-10-15] (Symantec Corporation)
S1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\IPSDefs\20131018.001\IDSvia64.sys [521816 2013-10-15] (Symantec Corporation)
S2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2013-06-19] ()
S3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\VirusDefs\20131019.005\ENG64.SYS [126040 2013-08-30] (Symantec Corporation)
S3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\VirusDefs\20131019.005\ENG64.SYS [126040 2013-08-30] (Symantec Corporation)
S3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\VirusDefs\20131019.005\EX64.SYS [2099288 2013-08-30] (Symantec Corporation)
S3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\VirusDefs\20131019.005\EX64.SYS [2099288 2013-08-30] (Symantec Corporation)
S3 rtport; C:\Windows\SysWOW64\drivers\rtport.sys [15144 2010-09-28] (Windows (R) 2003 DDK 3790 provider)
S3 rtport; C:\Windows\SysWOW64\drivers\rtport.sys [15144 2010-09-28] (Windows (R) 2003 DDK 3790 provider)
S3 SRTSP; C:\Windows\System32\Drivers\N360x64\0502020.003\SRTSP64.SYS [744568 2011-03-30] (Symantec Corporation)
S1 SRTSPX; C:\Windows\system32\drivers\N360x64\0502020.003\SRTSPX64.SYS [40568 2011-03-30] (Symantec Corporation)
S0 SymDS; C:\Windows\System32\drivers\N360x64\0502020.003\SYMDS64.SYS [450680 2011-01-26] (Symantec Corporation)
S0 SymEFA; C:\Windows\System32\drivers\N360x64\0502020.003\SYMEFA64.SYS [912504 2011-03-14] (Symantec Corporation)
S3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [174200 2011-06-21] (Symantec Corporation)
S1 SymIRON; C:\Windows\system32\drivers\N360x64\0502020.003\Ironx64.SYS [171128 2011-01-26] (Symantec Corporation)
S1 SymNetS; C:\Windows\System32\Drivers\N360x64\0502020.003\SYMNETS.SYS [386168 2011-04-20] (Symantec Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-02 06:24 - 2014-01-02 06:25 - 00274904 _____ C:\Windows\Minidump\010214-24304-01.dmp
2014-01-02 06:21 - 2014-01-02 06:21 - 00274904 _____ C:\Windows\Minidump\010214-42369-01.dmp
2014-01-02 06:02 - 2014-01-02 06:02 - 00274904 _____ C:\Windows\Minidump\010214-36941-01.dmp
2013-12-30 06:59 - 2013-12-30 06:59 - 00274904 _____ C:\Windows\Minidump\123013-37097-01.dmp
2013-12-30 06:34 - 2013-12-30 06:35 - 00274904 _____ C:\Windows\Minidump\123013-44085-01.dmp
2013-12-30 06:27 - 2013-12-30 06:28 - 00274904 _____ C:\Windows\Minidump\123013-54506-01.dmp
2013-12-30 05:44 - 2013-12-30 05:44 - 00270608 _____ C:\Windows\Minidump\123013-104099-01.dmp
2013-12-28 13:23 - 2013-12-28 13:23 - 00274904 _____ C:\Windows\Minidump\122813-24460-01.dmp

==================== One Month Modified Files and Folders =======

2014-01-02 06:33 - 2012-01-01 11:38 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-02 06:33 - 2009-07-13 21:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-02 06:33 - 2009-07-13 20:51 - 00218764 _____ C:\Windows\setupact.log
2014-01-02 06:25 - 2014-01-02 06:24 - 00274904 _____ C:\Windows\Minidump\010214-24304-01.dmp
2014-01-02 06:24 - 2011-11-10 09:38 - 00000000 ____D C:\Windows\Minidump
2014-01-02 06:22 - 2012-11-15 11:51 - 00000000 ____D C:\Program Files (x86)\Origin
2014-01-02 06:22 - 2011-04-26 11:12 - 00000000 ____D C:\Users\Florian\Tracing
2014-01-02 06:21 - 2014-01-02 06:21 - 00274904 _____ C:\Windows\Minidump\010214-42369-01.dmp
2014-01-02 06:04 - 2013-01-20 11:11 - 00000000 ____D C:\Users\Florian\AppData\Roaming\Dropbox
2014-01-02 06:02 - 2014-01-02 06:02 - 00274904 _____ C:\Windows\Minidump\010214-36941-01.dmp
2013-12-30 06:59 - 2013-12-30 06:59 - 00274904 _____ C:\Windows\Minidump\123013-37097-01.dmp
2013-12-30 06:35 - 2013-12-30 06:34 - 00274904 _____ C:\Windows\Minidump\123013-44085-01.dmp
2013-12-30 06:28 - 2013-12-30 06:27 - 00274904 _____ C:\Windows\Minidump\123013-54506-01.dmp
2013-12-30 05:44 - 2013-12-30 05:44 - 00270608 _____ C:\Windows\Minidump\123013-104099-01.dmp
2013-12-28 13:23 - 2013-12-28 13:23 - 00274904 _____ C:\Windows\Minidump\122813-24460-01.dmp

Some content of TEMP:
====================
C:\Users\Florian\AppData\Local\Temp\~tmf1053072901840174725.dll


==================== Known DLLs (Whitelisted) ================


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points  =========================

1
Restore point made on: 2013-11-13 12:32:52

==================== Memory info ===========================

Percentage of memory in use: 15%
Total physical RAM: 4060.61 MB
Available physical RAM: 3437.43 MB
Total Pagefile: 4058.76 MB
Available Pagefile: 3430.36 MB
Total Virtual: 8192 MB
Available Virtual: 8191.88 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:113 GB) (Free:11.36 GB) NTFS
Drive d: () (Fixed) (Total:167.1 GB) (Free:0 GB) NTFS
Drive f: (SAMSUNG_REC) (Fixed) (Total:17.89 GB) (Free:0.93 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive h: (Lexar) (Removable) (Total:29.21 GB) (Free:8.33 GB) FAT32
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
Drive y: (SYSTEM) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 298 GB) (Disk ID: 8074A547)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=113 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=167 GB) - (Type=OF Extended)
Partition 4: (Not Active) - (Size=18 GB) - (Type=27)

========================================================
Disk: 1 (Size: 29 GB) (Disk ID: 672E53E2)
Partition 1: (Not Active) - (Size=29 GB) - (Type=0B)


LastRegBack: 2013-11-10 01:33

==================== End Of Log ============================
--- --- ---

aharonov 02.01.2014 19:45
Auch nach diesem Fix immer noch ein Bluescreen beim Starten?


Drücke bitte die + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
C:\Users\Florian\AppData\Local\Temp\~tmf1053072901840174725.dll
C:\ProgramData\4mqrbn7tlf.pss
Speichere diese bitte als Fixlist.txt auf deinem USB Stick.
  • Starte deinen Rechner erneut in die Reparaturoptionen
  • Starte nun die FRST.exe erneut und klicke den Entfernen Button.

Das Tool erstellt eine Fixlog.txt auf deinem USB Stick. Poste den Inhalt bitte hier.

BeGaBung 02.01.2014 22:57
hier das neue fixlog

Code:
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 02-10-2013
Ran by SYSTEM at 2014-01-02 22:44:03 Run:4
Running from H:\
Boot Mode: Recovery
==============================================

Content of fixlist:
*****************
C:\Users\Florian\AppData\Local\Temp\~tmf1053072901840174725.dll
C:\ProgramData\4mqrbn7tlf.pss
*****************

C:\Users\Florian\AppData\Local\Temp\~tmf1053072901840174725.dll => Moved successfully.
C:\ProgramData\4mqrbn7tlf.pss => Moved successfully.

==== End of Fixlog ====
leider ist der blaue bildschirm immernoch da...
hab ihn mal abfotografiert,
soll ich dir das bild mal per email schicken???

aharonov 02.01.2014 23:14
Füge dieses Bild am besten hier in den Thread ein.

BeGaBung 02.01.2014 23:32
Wie kann ich das Bild hier einfügen?

aharonov 02.01.2014 23:46
Entweder als Anhang an deinen Post anfügen oder irgendwo hochladen (z.B. pic-upload.net) und dann den Link dazu posten.

BeGaBung 02.01.2014 23:55
Liste der Anhänge anzeigen (Anzahl: 1)
so, hoffe, dass du im anhang das bild siehst

aharonov 03.01.2014 00:27
Ja da kann ich alles Wichtige sehen.
Tritt dieser Bluescreen auch auf, wenn du in den abgesicherten Modus startest?

BeGaBung 03.01.2014 11:18
Ich kann im abgesicherten Modus starten, allerdings kann ich dort sonst nicht viel machen... Aber zumindest kommt dort kein Bluescreen

aharonov 03.01.2014 13:16
Dann lass bitte FRST mal im abgesicherte Modus scannen.

BeGaBung 03.01.2014 13:34
und weiter geht's

Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-10-2013
Ran by Florian at 2014-01-03 13:31:53
Running from G:\
Boot Mode: Safe Mode (minimal)
==========================================================


==================== Security Center ========================

AV: Norton Internet Security (Disabled - Up to date) {88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Norton Internet Security (Disabled - Up to date) {33A8BBD2-AA01-20A2-213B-0B8EB45B02E8}
FW: Norton Internet Security (Disabled) {B0F2DB13-C654-2E74-30D4-99C9310F0F2E}

==================== Installed Programs ======================

1und1 Internet Explorer Add-On (x32 Version: 1.0)
1und1 Internet Explorer Add-On (x32)
7-Zip 9.20 (x32)
Adblock IE 2.3 (Version: 2.3.1756)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117)
Adobe Reader 9.4.5 - Deutsch (x32 Version: 9.4.5)
Agatha Christie - Death on the Nile (x32 Version: 2.2.0.82)
Anno 1404 (x32 Version: 1.00.0000)
ANNO 1404 (x32 Version: 1.03.0000)
Apple Application Support (x32 Version: 2.3.6)
Apple Mobile Device Support (Version: 7.0.0.117)
Apple Software Update (x32 Version: 2.1.3.127)
Atheros Client Installation Program (x32 Version: 1.0.5.0621)
ATI Catalyst Install Manager (Version: 3.0.765.0)
BatteryLifeExtender (x32 Version: 1.0.5)
Bejeweled 2 Deluxe (x32 Version: 2.2.0.95)
Bing Bar (x32 Version: 7.1.361.0)
Bing Rewards Client Installer (x32 Version: 16.0.345.0)
Bonjour (Version: 3.0.0.10)
Broadcom 802.11 Network Adapter (Version: 5.60.48.44)
Build-a-lot (x32 Version: 2.2.0.82)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center Core Implementation (x32 Version: 2010.0329.836.13543)
Catalyst Control Center Graphics Full Existing (x32 Version: 2010.0329.836.13543)
Catalyst Control Center Graphics Full New (x32 Version: 2010.0329.836.13543)
Catalyst Control Center Graphics Light (x32 Version: 2010.0329.836.13543)
Catalyst Control Center Graphics Previews Vista (x32 Version: 2010.0329.836.13543)
Catalyst Control Center InstallProxy (x32 Version: 2010.0329.836.13543)
Catalyst Control Center Localization All (x32 Version: 2010.0329.836.13543)
CCC Help Chinese Standard (x32 Version: 2010.0329.0835.13543)
CCC Help Chinese Traditional (x32 Version: 2010.0329.0835.13543)
CCC Help Czech (x32 Version: 2010.0329.0835.13543)
CCC Help Danish (x32 Version: 2010.0329.0835.13543)
CCC Help Dutch (x32 Version: 2010.0329.0835.13543)
CCC Help English (x32 Version: 2010.0329.0835.13543)
CCC Help Finnish (x32 Version: 2010.0329.0835.13543)
CCC Help French (x32 Version: 2010.0329.0835.13543)
CCC Help German (x32 Version: 2010.0329.0835.13543)
CCC Help Greek (x32 Version: 2010.0329.0835.13543)
CCC Help Hungarian (x32 Version: 2010.0329.0835.13543)
CCC Help Italian (x32 Version: 2010.0329.0835.13543)
CCC Help Japanese (x32 Version: 2010.0329.0835.13543)
CCC Help Korean (x32 Version: 2010.0329.0835.13543)
CCC Help Norwegian (x32 Version: 2010.0329.0835.13543)
CCC Help Polish (x32 Version: 2010.0329.0835.13543)
CCC Help Portuguese (x32 Version: 2010.0329.0835.13543)
CCC Help Russian (x32 Version: 2010.0329.0835.13543)
CCC Help Spanish (x32 Version: 2010.0329.0835.13543)
CCC Help Swedish (x32 Version: 2010.0329.0835.13543)
CCC Help Thai (x32 Version: 2010.0329.0835.13543)
CCC Help Turkish (x32 Version: 2010.0329.0835.13543)
ccc-core-static (x32 Version: 2010.0329.836.13543)
ccc-utility64 (Version: 2010.0329.836.13543)
Chuzzle Deluxe (x32 Version: 2.2.0.82)
CyberLink YouCam (x32 Version: 2.0.3911)
Diner Dash 2 Restaurant Rescue (x32 Version: 2.2.0.82)
DivX-Setup (x32 Version: 2.6.1.3)
Dropbox (HKCU Version: 2.0.22)
Easy Display Manager (x32 Version: 3.2)
Easy Network Manager (x32 Version: 4.4.1)
Easy SpeedUp Manager (x32 Version: 2.1.0.15)
EasyBatteryManager (x32 Version: 4.0.0.4)
ETDWare PS/2-X64 8.0.7.0_WHQL (Version: 8.0.7.0)
Farm Frenzy (x32 Version: 2.2.0.82)
FGS_Cashbook (x32 Version: 6.0.1.1)
FRITZ!Box starter (x32 Version: 2.04.02)
Google Chrome (x32 Version: 30.0.1599.101)
Google Earth (x32 Version: 7.1.1.1888)
iCloud (Version: 2.1.2.8)
ICQ7.5 (x32 Version: 7.5)
Insaniquarium Deluxe (x32 Version: 2.2.0.82)
Intel® Matrix Storage Manager
iTunes (Version: 11.1.3.8)
Java Auto Updater (x32 Version: 2.0.2.4)
Java(TM) 6 Update 23 (x32 Version: 6.0.230)
John Deere Drive Green (x32 Version: 2.2.0.82)
Junk Mail filter update (x32 Version: 14.0.8117.416)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Marvell Miniport Driver (x32 Version: 11.24.27.3)
Microsoft .NET Framework 4.5 (Version: 4.5.50709)
Microsoft .NET Framework 4.5 DEU Language Pack (Version: 4.5.50709)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Choice Guard (x32 Version: 2.0.48.0)
Microsoft Default Manager (x32 Version: 2.2.114.0)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.4763.1000)
Microsoft ReportViewer 2010 Redistributable (x32 Version: 10.0.30319)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (Version: 9.0.30729.5570)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (x32 Version: 9.0.30729.5570)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
MobileMe Control Panel (Version: 3.1.8.0)
MSVCRT (x32 Version: 14.0.1468.721)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
Norton 360 (x32 Version: 5.2.2.3)
Norton Bootable Recovery Tool Wizard (x32 Version: 5.1.0.26)
Norton Online Backup (x32 Version: 2.1.17869)
OpenAL (x32)
OpenOffice.org 3.4.1 (x32 Version: 3.41.9593)
Origin (x32 Version: 9.0.11.77)
Peggle (x32 Version: 2.2.0.82)
Penguins! (x32 Version: 2.2.0.82)
Plants vs. Zombies (x32 Version: 2.2.0.82)
PokerStars (x32)
PokerStars.net (x32)
Polar Golfer (x32 Version: 2.2.0.82)
ProtectDisc Driver, Version 11 (x32 Version: 11.0.0.14)
QuickTime (x32 Version: 7.74.80.86)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6176)
Rome - Total War - Gold Edition (x32 Version: 1.6)
Safari (x32 Version: 5.34.57.2)
Samsung AnyWeb Print (x32 Version: 1.0)
Samsung AnyWeb Print (x32 Version: 1.1.19.0)
Samsung Recovery Solution 5 (x32 Version: 5.0.0.6)
Samsung Support Center 1.0 (x32 Version: 1.1.38)
Samsung Universal Print Driver (x32 Version: 2.01.06.00:16)
Samsung Update Plus (x32 Version: 3.0.0.17)
Skype™ 6.7 (x32 Version: 6.7.102)
Update for Microsoft .NET Framework 4.5 (KB2750147) (x32 Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805221) (x32 Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805226) (x32 Version: 1)
Update Installer for WildTangent Games App (x32)
User Guide (x32 Version: 1.0)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0)
Verbindungsassistent (x32 Version: 2.1)
WildTangent Games (x32 Version: 1.0.1.5)
WildTangent Games App (x32 Version: 4.0.10.20)
Windows Live Call (x32 Version: 14.0.8117.0416)
Windows Live Communications Platform (x32 Version: 14.0.8117.416)
Windows Live Essentials (x32 Version: 14.0.8117.0416)
Windows Live Essentials (x32 Version: 14.0.8117.416)
Windows Live Family Safety (Version: 14.0.8118.427)
Windows Live Fotogalerie (x32 Version: 14.0.8117.416)
Windows Live ID Sign-in Assistant (Version: 6.500.3165.0)
Windows Live Mail (x32 Version: 14.0.8117.0416)
Windows Live Messenger (x32 Version: 14.0.8117.0416)
Windows Live Movie Maker (x32 Version: 14.0.8117.0416)
Windows Live Sync (x32 Version: 14.0.8117.416)
Windows Live Writer (x32 Version: 14.0.8117.0416)
Windows Live-Uploadtool (x32 Version: 14.0.8014.1029)
Zuma Deluxe (x32 Version: 2.2.0.95)

==================== Restore Points  =========================

13-11-2013 20:32:20 Installed iTunes

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {13B02A8E-0944-4D65-8726-6FDF7467B3B2} - System32\Tasks\Symantec\Norton Error Processor 5.2.2.3 => C:\Program Files (x86)\Norton 360\Engine\5.2.2.3\SymErr.exe [2012-06-08] (Symantec Corporation)
Task: {4BD818F6-D946-4C06-9B36-D0DAF89BC120} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-20] (Microsoft Corporation)
Task: {61B1EE8B-FAE7-4327-877E-0FD396DF3464} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {6314B01E-A90D-4A61-AB27-C938E744D1A4} - System32\Tasks\EasyDisplayMgr => C:\Program Files (x86)\Samsung\Easy Display Manager\dmhkcore.exe [2010-08-09] (Samsung Electronics Co., Ltd.)
Task: {65D24E0B-0772-4510-ACB9-ECC2E0F93E84} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-01-01] (Google Inc.)
Task: {6B5A75D0-D66E-43EF-8C27-4B06EDE690FB} - System32\Tasks\EasyBatteryManager => C:\Program Files (x86)\Samsung\EasyBatteryManager\EasyBatteryMgr4.exe [2010-07-20] (SAMSUNG Electronics co., LTD.)
Task: {983C443C-7CB2-47C5-AFAC-C3A0E8343922} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-09] (Adobe Systems Incorporated)
Task: {9CA92E41-C014-418E-A675-506C5522CBF4} - System32\Tasks\advSRS5 => C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe [2010-07-27] (SEC)
Task: {9E626AE0-7ACD-4811-9525-87AF7FED9303} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-01-01] (Google Inc.)
Task: {9EC85110-821E-4634-8345-111FD0BA6EB8} - System32\Tasks\SUPBackground => C:\Program Files (x86)\Samsung\Samsung Update Plus\SUPBackground.exe [2010-08-27] (Samsung Electronics)
Task: {ADB17B23-E301-4D04-8499-EEC695D4E114} - System32\Tasks\EasySpeedUpManager => C:\Program Files (x86)\SAMSUNG\EasySpeedUpManager\EasySpeedUpManager.exe [2010-02-10] (Samsung Electronics Co., Ltd.)
Task: {BF7FB672-BAC3-4C52-A4C6-FF1F5AF5AABE} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation)
Task: {C5146CC0-EA9D-413A-AA26-FFF695114C6C} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {C6945ED3-8B80-4BDA-A59A-B68246FDAAFE} - System32\Tasks\Symantec\Norton Error Analyzer 5.2.2.3 => C:\Program Files (x86)\Norton 360\Engine\5.2.2.3\SymErr.exe [2012-06-08] (Symantec Corporation)
Task: {D980E4FC-05CB-4725-87C2-AFFA88054865} - System32\Tasks\SamsungSupportCenter => C:\Program Files (x86)\Samsung\Samsung Support Center\SSCKbdHk.exe [2011-09-04] (SAMSUNG Electronics)
Task: {DCE395CF-4395-49B2-BC76-3CCDD1DBF626} - System32\Tasks\BatteryLifeExtender => C:\Program Files (x86)\Samsung\BatteryLifeExtender\BatteryLifeExtender.exe [2010-06-01] (Samsung Electronics. Co. Ltd.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============


==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="1"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "UseAlternateShell"="1"

==================== Faulty Device Manager Devices =============

Name: Security Processor Loader Driver
Description: Security Processor Loader Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: spldr
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (01/03/2014 01:26:06 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.

Error: (01/03/2014 01:26:06 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.

Error: (01/03/2014 01:26:06 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.

Error: (01/03/2014 01:23:37 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Vom Kryptografiedienst konnte die Katalogdatenbank nicht initialisiert werden. "ESENT"-Fehler: -515.

Error: (01/03/2014 01:23:37 PM) (Source: ESENT) (User: )
Description: Catalog Database (844) Catalog Database: Bei Datenbankwiederherstellung trat ein unerwarteter Fehler -515 auf.

Error: (01/03/2014 11:16:35 AM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.

Error: (01/03/2014 11:16:35 AM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.

Error: (01/03/2014 11:16:35 AM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.

Error: (01/03/2014 11:16:25 AM) (Source: ESENT) (User: )
Description: Catalog Database (864) Catalog Database: Rollback von Operation #74063 für Datenbank C:\Windows\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb konnte nicht durchgeführt werden. Fehler: -510. Alle zukünftigen Datenbankaktualisierungen werden zurückgewiesen.

Error: (01/03/2014 11:16:25 AM) (Source: ESENT) (User: )
Description: Catalog Database (864) Catalog Database: Die Protokolldatei-Reihenfolge in "C:\Windows\system32\CatRoot2\" wurde durch einen schwerwiegenden Fehler angehalten. Für die Datenbank, die diese Protokolldatei-Reihenfolge verwendet, sind keine weiteren Aktualisierungen möglich. Bitte korrigieren Sie das Problem, und starten Sie erneut, oder führen Sie eine Wiederherstellung aus einer Sicherung durch.


System errors:
=============
Error: (01/03/2014 01:21:50 PM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
AFD
BHDrvx64
DfsC
discache
eeCtrl
IDSVia64
NetBIOS
NetBT
nsiproxy
Psched
rdbss
SABI
spldr
SRTSPX
SymIRON
SymNetS
tdx
vwififlt
Wanarpv6
WfpLwf

Error: (01/03/2014 01:21:50 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Client Virtualization Handler" ist vom Dienst "Application Virtualization Client" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (01/03/2014 01:21:50 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NLA (Network Location Awareness)" ist vom Dienst "Netzwerkspeicher-Schnittstellendienst" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (01/03/2014 01:21:50 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "SMB 2.0-Miniredirector" ist vom Dienst "SMB-Miniredirector-Wrapper und -Modul" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (01/03/2014 01:21:50 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "SMB 1.x-Miniredirector" ist vom Dienst "SMB-Miniredirector-Wrapper und -Modul" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (01/03/2014 01:21:50 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "SMB-Miniredirector-Wrapper und -Modul" ist vom Dienst "Umgeleitetes Puffersubsystem" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%31

Error: (01/03/2014 01:21:50 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "IP-Hilfsdienst" ist vom Dienst "Netzwerkspeicher-Schnittstellendienst" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (01/03/2014 01:21:50 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Arbeitsstationsdienst" ist vom Dienst "Netzwerkspeicher-Schnittstellendienst" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (01/03/2014 01:21:50 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerkspeicher-Schnittstellendienst" ist vom Dienst "NSI proxy service driver." abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%31

Error: (01/03/2014 01:21:50 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "TCP/IP-NetBIOS-Hilfsdienst" ist vom Dienst "Ancillary Function Driver for Winsock" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%31


Microsoft Office Sessions:
=========================
Error: (01/03/2014 01:26:06 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: WmiApRplWmiApRpl8F20300004D070000

Error: (01/03/2014 01:26:06 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000

Error: (01/03/2014 01:26:06 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000

Error: (01/03/2014 01:23:37 PM) (Source: Microsoft-Windows-CAPI2)(User: )
Description: -515

Error: (01/03/2014 01:23:37 PM) (Source: ESENT)(User: )
Description: Catalog Database844Catalog Database: -515

Error: (01/03/2014 11:16:35 AM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: WmiApRplWmiApRpl8F20300004D070000

Error: (01/03/2014 11:16:35 AM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000

Error: (01/03/2014 11:16:35 AM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000

Error: (01/03/2014 11:16:25 AM) (Source: ESENT)(User: )
Description: Catalog Database864Catalog Database: 74063C:\Windows\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb-510

Error: (01/03/2014 11:16:25 AM) (Source: ESENT)(User: )
Description: Catalog Database864Catalog Database: C:\Windows\system32\CatRoot2\


==================== Memory info ===========================

Percentage of memory in use: 14%
Total physical RAM: 4060.61 MB
Available physical RAM: 3485.58 MB
Total Pagefile: 8119.41 MB
Available Pagefile: 7547.32 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:113 GB) (Free:11.25 GB) NTFS
Drive d: () (Fixed) (Total:167.1 GB) (Free:0 GB) NTFS
Drive g: (Lexar) (Removable) (Total:29.21 GB) (Free:8.33 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 298 GB) (Disk ID: 8074A547)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=113 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=167 GB) - (Type=OF Extended)
Partition 4: (Not Active) - (Size=18 GB) - (Type=27)

========================================================
Disk: 1 (Size: 29 GB) (Disk ID: 672E53E2)
Partition 1: (Not Active) - (Size=29 GB) - (Type=0B)

==================== End Of Log ============================

aharonov 03.01.2014 13:45
Ok, das ist mal die Addition.txt. Da sollte noch ein zweites Logfile (FRST.txt) erstellt worden sein. Poste diese bitte auch noch.

BeGaBung 03.01.2014 14:55

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013 (ATTENTION: ====> FRST version is 93 days old and could be outdated)
Ran by Florian (administrator) on FLO on 03-01-2014 13:25:47
Running from G:\
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Safe Mode (minimal)

==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Windows\system32\cmd.exe
(Microsoft Corporation) \\?\C:\Windows\system32\wbem\WMIADAP.EXE

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11369576 2010-08-11] (Realtek Semiconductor)
HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2586504 2010-08-05] (ELAN Microelectronics Corp.)
HKLM\...\RunOnce: [*WerKernelReporting] - %SYSTEMROOT%\SYSTEM32\WerFault.exe -k -rq [415232 2009-07-14] (Microsoft Corporation)
HKLM\...\RunOnce: [*Restore] - C:\Windows\system32\rstrui.exe /RUNONCE [296960 2010-11-20] (Microsoft Corporation)
HKCU\...\Run: [msnmsgr] - C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [3872080 2010-04-16] (Microsoft Corporation)
HKCU\...\Run: [ICQ] - C:\Program Files (x86)\ICQ7.2\ICQ.exe [133432 2011-01-05] (ICQ, LLC.)
HKCU\...\Run: [MobileDocuments] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe
HKCU\...\Run: [EADM] - C:\Program Files (x86)\Origin\Origin.exe [3561816 2013-10-16] (Electronic Arts)
MountPoints2: {462693d1-8a44-11e1-9d99-002454ce339f} - F:\AutoRun.exe
MountPoints2: {462693d8-8a44-11e1-9d99-002454ce339f} - F:\AutoRun.exe
MountPoints2: {e625f586-5d35-11e0-b4d5-002454ce339f} - F:\pushinst.exe
HKLM-x32\...\Run: [AppleSyncNotifier] - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2011-11-02] (Apple Inc.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [37296 2011-06-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [937920 2011-03-30] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [248552 2010-05-14] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1259376 2011-07-29] ()
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKU\Tanja\...\Run: [msnmsgr] - C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [3872080 2010-04-16] (Microsoft Corporation)
Startup: C:\Users\Florian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Florian\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Florian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DSL Internet.lnk
ShortcutTarget: DSL Internet.lnk -> C:\Program Files (x86)\1&1\FritzDsl.exe (AVM Berlin)
Startup: C:\Users\Florian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DSL Protect.lnk
ShortcutTarget: DSL Protect.lnk -> C:\Program Files (x86)\1&1\FwebProt.exe (AVM Berlin)
Startup: C:\Users\Florian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
Startup: C:\Users\Tanja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.1und1.de/links/home
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://samsung.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.gmx.de/
SearchScopes: HKCU - DefaultScope {8115424D-92FC-4E97-89CA-D519B5987079} URL = hxxp://go.1und1.de/suchbox/1und1suche?su={searchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {1B318616-41D9-4E4D-9573-F2EFC4F173F9} URL = hxxp://go.web.de/suchbox/google?q={searchTerms}
SearchScopes: HKCU - {52B1C64A-5ECB-44FF-9F76-07AEBE8D50BF} URL = hxxp://go.1und1.de/suchbox/amazon?tag=1und1icon-21&field-keywords={searchTerms}
SearchScopes: HKCU - {8115424D-92FC-4E97-89CA-D519B5987079} URL = hxxp://go.1und1.de/suchbox/1und1suche?su={searchTerms}
SearchScopes: HKCU - {96DA5B2C-38AB-4BCB-831E-829EB47F1C37} URL = hxxp://go.web.de/suchbox/ebay?query={searchTerms}
SearchScopes: HKCU - {CAA841D4-7AEE-4776-9B33-25EBC6A5BD15} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3242337
BHO: Windows Live Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)
BHO: Adblock IE - {667BEE43-20BD-4CE3-94AC-E63E04D4B191} - C:\Program Files\MGTEK\Adblock IE\adblockie.dll (MGTEK)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File
BHO-x32: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\5.2.2.3\coIEPlg.dll (Symantec Corporation)
BHO-x32: Adblock IE - {667BEE43-20BD-4CE3-94AC-E63E04D4B191} - C:\Program Files (x86)\MGTEK\Adblock IE\adblockie.dll (MGTEK)
BHO-x32: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\5.2.2.3\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: W2PBrowser Class - {AA609D72-8482-4076-8991-8CDAE5B93BCB} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll ()
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: 1&&1 Internet AG Browser Configuration by mquadr.at - {D48FF4B4-E68F-47D1-8E25-81A0F0EEB341} - C:\Windows\SysWow64\ieconfig_1und1.dll (mquadr.at software engineering und consulting GmbH)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\5.2.2.3\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\BingExt.dll (Microsoft Corporation.)
DPF: HKLM-x32 {C3F79A2B-B9B4-4A66-B012-3EE46475B072} hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Chrome:
=======
CHR HomePage: hxxp://www.google.com
CHR RestoreOnStartup: "hxxp://www.google.com"
CHR DefaultSearchURL: (Hola Search) - hxxp://www.holasearch.com/?q={searchTerms}&affID=121962&tt=gc_&babsrc=SP_ss&mntrId=9C3E18F46A1A54B6
CHR DefaultSuggestURL: (Hola Search) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\gcswf32.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Java Deployment Toolkit 6.0.230.5) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll (Sun Microsystems, Inc.)
CHR Plugin: (Java(TM) Platform SE 6 U23) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll No File
CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll No File
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
CHR Plugin: (DivX Plus Web Player) - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll No File
CHR Plugin: (Bing Bar) - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2237.0\npwinext.dll No File
CHR Plugin: (WildTangent Games App Presence Detector) - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\2\NP_wtapp.dll No File
CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll No File
CHR Plugin: (Default Plug-in) - default_plugin No File
CHR Extension: (YouTube) - C:\Users\Florian\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Florian\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Marvel Comics) - C:\Users\Florian\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjhfaknohpjconjoefidanhihokmkice\1.0.0.0_0
CHR Extension: (Google Wallet) - C:\Users\Florian\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0
CHR Extension: (DivX Plus Web Player HTML5 \u003Cvideo\u003E) - C:\Users\Florian\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.145_0
CHR Extension: (Gmail) - C:\Users\Florian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files (x86)\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx

==================== Services (Whitelisted) =================

S2 IGDCTRL; C:\Program Files (x86)\1&1\IGDCTRL.EXE [87344 2007-10-25] (AVM Berlin)
S2 N360; C:\Program Files (x86)\Norton 360\Engine\5.2.2.3\ccSvcHst.exe [130008 2011-04-17] (Symantec Corporation)
S2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-01] (Symantec Corporation)
S2 WTGService; C:\Program Files (x86)\Verbindungsassistent\WTGService.exe [296400 2009-03-03] ()

==================== Drivers (Whitelisted) ====================

S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2013-06-19] ()
S1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\BASHDefs\20131002.001\BHDrvx64.sys [1525848 2013-10-02] (Symantec Corporation)
S1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\BASHDefs\20131002.001\BHDrvx64.sys [1525848 2013-10-02] (Symantec Corporation)
S1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-08-28] (Symantec Corporation)
S1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-08-28] (Symantec Corporation)
S3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [140376 2013-08-28] (Symantec Corporation)
S1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\IPSDefs\20131018.001\IDSvia64.sys [521816 2013-10-15] (Symantec Corporation)
S1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\IPSDefs\20131018.001\IDSvia64.sys [521816 2013-10-15] (Symantec Corporation)
S2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2013-06-19] ()
S3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\VirusDefs\20131019.005\ENG64.SYS [126040 2013-08-30] (Symantec Corporation)
S3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\VirusDefs\20131019.005\ENG64.SYS [126040 2013-08-30] (Symantec Corporation)
S3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\VirusDefs\20131019.005\EX64.SYS [2099288 2013-08-30] (Symantec Corporation)
S3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\VirusDefs\20131019.005\EX64.SYS [2099288 2013-08-30] (Symantec Corporation)
S3 rtport; C:\Windows\SysWOW64\drivers\rtport.sys [15144 2010-09-29] (Windows (R) 2003 DDK 3790 provider)
S3 rtport; C:\Windows\SysWOW64\drivers\rtport.sys [15144 2010-09-29] (Windows (R) 2003 DDK 3790 provider)
S3 SRTSP; C:\Windows\System32\Drivers\N360x64\0502020.003\SRTSP64.SYS [744568 2011-03-31] (Symantec Corporation)
S1 SRTSPX; C:\Windows\system32\drivers\N360x64\0502020.003\SRTSPX64.SYS [40568 2011-03-31] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\N360x64\0502020.003\SYMDS64.SYS [450680 2011-01-27] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\N360x64\0502020.003\SYMEFA64.SYS [912504 2011-03-15] (Symantec Corporation)
S3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [174200 2011-06-21] (Symantec Corporation)
S1 SymIRON; C:\Windows\system32\drivers\N360x64\0502020.003\Ironx64.SYS [171128 2011-01-27] (Symantec Corporation)
S1 SymNetS; C:\Windows\System32\Drivers\N360x64\0502020.003\SYMNETS.SYS [386168 2011-04-21] (Symantec Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-03 11:11 - 2014-01-03 11:11 - 00274904 _____ C:\Windows\Minidump\010314-25381-01.dmp
2014-01-02 22:48 - 2014-01-02 22:48 - 08699272 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-01-02 15:24 - 2014-01-02 15:25 - 00274904 _____ C:\Windows\Minidump\010214-24304-01.dmp
2014-01-02 15:21 - 2014-01-02 15:21 - 00274904 _____ C:\Windows\Minidump\010214-42369-01.dmp
2014-01-02 15:02 - 2014-01-02 15:02 - 00274904 _____ C:\Windows\Minidump\010214-36941-01.dmp
2013-12-30 15:59 - 2013-12-30 15:59 - 00274904 _____ C:\Windows\Minidump\123013-37097-01.dmp
2013-12-30 15:34 - 2013-12-30 15:35 - 00274904 _____ C:\Windows\Minidump\123013-44085-01.dmp
2013-12-30 15:27 - 2013-12-30 15:28 - 00274904 _____ C:\Windows\Minidump\123013-54506-01.dmp
2013-12-30 14:44 - 2013-12-30 14:44 - 00270608 _____ C:\Windows\Minidump\123013-104099-01.dmp
2013-12-28 22:23 - 2013-12-28 22:23 - 00274904 _____ C:\Windows\Minidump\122813-24460-01.dmp

==================== One Month Modified Files and Folders =======

2014-01-03 13:26 - 2010-09-01 05:23 - 03701268 _____ C:\Windows\system32\perfh007.dat
2014-01-03 13:26 - 2010-09-01 05:23 - 01109814 _____ C:\Windows\system32\perfc007.dat
2014-01-03 13:26 - 2009-07-14 06:13 - 00006468 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-03 11:11 - 2014-01-03 11:11 - 00274904 _____ C:\Windows\Minidump\010314-25381-01.dmp
2014-01-03 11:11 - 2011-11-10 18:38 - 00000000 ____D C:\Windows\Minidump
2014-01-02 23:54 - 2010-10-30 18:31 - 00000000 ___RD C:\Users\Florian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-02 22:48 - 2014-01-02 22:48 - 08699272 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-01-02 22:48 - 2012-11-15 20:51 - 00000000 ____D C:\Program Files (x86)\Origin
2014-01-02 22:48 - 2012-04-03 21:16 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-02 22:48 - 2011-04-26 20:12 - 00000000 ____D C:\Users\Florian\Tracing
2014-01-02 22:46 - 2012-01-01 20:38 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-02 22:46 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-02 22:46 - 2009-07-14 05:51 - 00218820 _____ C:\Windows\setupact.log
2014-01-02 15:25 - 2014-01-02 15:24 - 00274904 _____ C:\Windows\Minidump\010214-24304-01.dmp
2014-01-02 15:21 - 2014-01-02 15:21 - 00274904 _____ C:\Windows\Minidump\010214-42369-01.dmp
2014-01-02 15:04 - 2013-01-20 20:11 - 00000000 ____D C:\Users\Florian\AppData\Roaming\Dropbox
2014-01-02 15:02 - 2014-01-02 15:02 - 00274904 _____ C:\Windows\Minidump\010214-36941-01.dmp
2013-12-30 15:59 - 2013-12-30 15:59 - 00274904 _____ C:\Windows\Minidump\123013-37097-01.dmp
2013-12-30 15:35 - 2013-12-30 15:34 - 00274904 _____ C:\Windows\Minidump\123013-44085-01.dmp
2013-12-30 15:28 - 2013-12-30 15:27 - 00274904 _____ C:\Windows\Minidump\123013-54506-01.dmp
2013-12-30 14:44 - 2013-12-30 14:44 - 00270608 _____ C:\Windows\Minidump\123013-104099-01.dmp
2013-12-28 22:23 - 2013-12-28 22:23 - 00274904 _____ C:\Windows\Minidump\122813-24460-01.dmp

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-10 10:33

==================== End Of Log ============================
--- --- ---

BeGaBung 04.01.2014 20:53
Wie geht's weiter?

aharonov 04.01.2014 20:58
Kannst du bitte mal folgenden Dump zippen und hier anhängen:
C:\Windows\Minidump\010314-25381-01.dmp

BeGaBung 07.01.2014 12:43
wo muss ich das eingeben?

BeGaBung 09.01.2014 16:19
???

BeGaBung 10.01.2014 18:47
Bitte hilf mir nochmal, ich brauch meinen Laptop :-(


Alle Zeitangaben in WEZ +1. Es ist jetzt 00:54 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131