Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Keine Desktopanzeige mehr (https://www.trojaner-board.de/160849-keine-desktopanzeige-mehr.html)

Kenzo_2 17.11.2014 12:34
Keine Desktopanzeige mehr
 
Hallo,
seit heute habe ich das Problem, dass bei meinem Laptop (Win 7/64bit) der Desktop nicht mehr erscheint. Genauer gesagt, habe ich nach dem Booten einen schwarzen Hintergrund, die Taskleiste ist verschwunden und auch das Startmenü ist mittels Windows-Taste nicht aufrufbar. Dafür ist der Explorer bereits geöffnet und ich kann auf meine Daten ganz normal zugreifen. Desweiteren funktioniert das Internet nicht. (Beim ersten Hochfahren öffnete sich noch ein zweites Fenster (taskeng.exe), mittlerweile jedoch nicht mehr.)

Kann mir jemand helfen?

schrauber 17.11.2014 12:48
hi,

Scan mit Farbar's Recovery Scan Tool (Recovery Mode - Windows Vista, 7, 8)
Hinweise für Windows 8-Nutzer: Anleitung 1 (FRST-Variante) und Anleitung 2 (zweiter Teil)
  • Downloade dir bitte die passende Version des Tools (im Zweifel beide) und speichere diese auf einen USB Stick: FRST Download FRST 32-Bit | FRST 64-Bit
  • Schließe den USB Stick an das infizierte System an und boote das System in die System Reparatur Option.
  • Scanne jetzt nach der bebilderten Anleitung oder verwende die folgende Kurzanleitung:
Über den Boot Manager:
  • Starte den Rechner neu.
  • Während dem Hochfahren drücke mehrmals die F8 Taste
  • Wähle nun Computer reparieren.
  • Wähle dein Betriebssystem und Benutzerkonto und klicke jeweils "Weiter".
Mit Windows CD/DVD (auch bei Windows 8 möglich):
  • Lege die Windows CD in dein Laufwerk.
  • Starte den Rechner neu und starte von der CD.
  • Wähle die Spracheinstellungen und klicke "Weiter".
  • Klicke auf Computerreparaturoptionen !
  • Wähle dein Betriebssystem und Benutzerkonto und klicke jeweils "Weiter".
Wähle in den Reparaturoptionen: Eingabeaufforderung
  • Gib nun bitte notepad ein und drücke Enter.
  • Im öffnenden Textdokument: Datei > Speichern unter... und wähle Computer.
    Hier wird dir der Laufwerksbuchstabe deines USB Sticks angezeigt, merke ihn dir.
  • Schließe Notepad wieder
  • Gib nun bitte folgenden Befehl ein.
    e:\frst.exe bzw. e:\frst64.exe
    Hinweis: e steht für den Laufwerksbuchstaben deines USB Sticks, den du dir gemerkt hast. Gegebenfalls anpassen.
  • Akzeptiere den Disclaimer mit Ja und klicke Untersuchen
Das Tool erstellt eine FRST.txt auf deinem USB Stick. Poste den Inhalt bitte hier nach Möglichkeit in Code-Tags (Anleitung).


Kenzo_2 17.11.2014 13:16
Danke für die Antwort :)

FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-11-2014 03
Ran by SYSTEM on MININT-4DPLUK6 on 17-11-2014 13:08:27
Running from H:\
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11
Boot Mode: Recovery

The current controlset is ControlSet001
ATTENTION!:=====> If the system is bootable FRST must be run from normal or Safe mode to create a complete log.

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2884880 2012-02-23] (Synaptics Incorporated)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12452456 2012-02-21] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1158248 2012-02-08] (Realtek Semiconductor)
HKLM\...\Run: [Nvtmru] => "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2463552 2014-10-03] (NVIDIA Corporation)
HKLM\...\Run: [MedionReminder] => C:\Program Files (x86)\CyberLink\PowerRecover\Reminder.exe
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [703736 2014-10-07] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-01-04] (Intel Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation)
HKLM-x32\...\Run: [Dolby Home Theater v4] => C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe [507744 2011-12-20] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [190032 2014-07-14] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [ApnTBMon] => "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe"
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\Name\...\Run: [Steam] => C:\Games\Just Cause 2\Steam.exe [1939136 2014-08-28] (Valve Corporation)
HKU\Name\...\Run: [GoogleChromeAutoLaunch_B7BAB472F6EC664C4B3EB3EEA8AE05F9] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [854344 2014-10-21] (Google Inc.)
HKU\Name\...\Run: [Amazon Music] => C:\Users\Name\AppData\Local\Amazon Music\Amazon Music Helper.exe [3162944 2014-07-01] ()
HKU\Name\...\RunOnce: [Report] => C:\AdwCleaner\AdwCleaner[S5].txt [2982 2014-11-17] ()
HKU\Name\...\Policies\Explorer: [DisallowRun] 1
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [174856 2014-09-13] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [156840 2014-09-13] (NVIDIA Corporation)
Startup: C:\Users\Name\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk ->  (No File)
Startup: C:\Users\Name\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ToggleHiddenFiles.exe.lnk
ShortcutTarget: ToggleHiddenFiles.exe.lnk -> C:\Program Files\ToggleHiddenFiles\ToggleHiddenFiles.exe ()

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-10-07] (Avira Operations GmbH & Co. KG)
S2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-10-07] (Avira Operations GmbH & Co. KG)
S2 ASLDRService; C:\Program Files (x86)\PHotkey\ASLDRSrv.exe [104968 2009-12-18] ()
S2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [141392 2014-07-14] (Avira Operations GmbH & Co. KG)
S2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1149760 2014-10-03] (NVIDIA Corporation)
S2 GFNEXSrv; C:\Program Files (x86)\PHotkey\GFNEXSrv.exe [156672 2011-10-13] ()
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2011-12-16] (Intel Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273168 2011-12-08] ()
S2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1796928 2014-10-03] (NVIDIA Corporation)
S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19440960 2014-10-03] (NVIDIA Corporation)
S2 watchmi; C:\Program Files (x86)\watchmi\TvdService.exe [70144 2012-01-31] ()
S2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [594704 2011-12-08] (Intel® Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 appliand; C:\Windows\System32\DRIVERS\appliand.sys [33888 2010-06-24] (Applian Technologies Inc.)
S3 appliandMP; C:\Windows\System32\DRIVERS\appliand.sys [33888 2010-06-24] (Applian Technologies Inc.)
S2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-10-07] (Avira Operations GmbH & Co. KG)
S1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131608 2014-10-07] (Avira Operations GmbH & Co. KG)
S1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-14] (Avira Operations GmbH & Co. KG)
S1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-08-08] (DT Soft Ltd)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20288 2014-10-03] (NVIDIA Corporation)
S3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38048 2014-09-04] (NVIDIA Corporation)
S2 PEGAGFN; C:\Program Files (x86)\PHotkey\PEGAGFN.sys [14344 2009-09-11] (PEGATRON)
S3 clwvd; system32\DRIVERS\clwvd.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-17 13:05 - 2014-11-17 13:08 - 00000000 ____D () C:\FRST
2014-11-17 01:46 - 2014-11-17 01:46 - 00001196 _____ () C:\Users\Name\Desktop\RegCure Pro.lnk
2014-11-17 01:46 - 2014-11-17 01:46 - 00000422 _____ () C:\Windows\Tasks\ParetoLogic Registration3.job
2014-11-17 01:46 - 2014-11-17 01:46 - 00000000 ____D () C:\Users\Name\AppData\Roaming\ParetoLogic
2014-11-17 01:46 - 2014-11-17 01:46 - 00000000 ____D () C:\Users\Name\AppData\Roaming\DriverCure
2014-11-17 01:46 - 2014-11-17 01:46 - 00000000 ____D () C:\ProgramData\ParetoLogic
2014-11-17 01:46 - 2014-11-17 01:46 - 00000000 ____D () C:\Program Files (x86)\ParetoLogic
2014-11-15 17:06 - 2014-11-15 17:06 - 00000000 _____ () C:\Windows\SysWOW64\sho25A9.tmp
2014-11-15 04:17 - 2014-11-15 04:17 - 00009758 _____ () C:\Users\Name\AppData\Local\recently-used.xbel
2014-11-13 23:15 - 2014-11-13 23:15 - 00000000 _____ () C:\Users\Name\Desktop\21.11. buch.txt
2014-11-12 22:51 - 2014-11-12 22:51 - 00000000 ____D () C:\Program Files (x86)\Microsoft ASP.NET
2014-11-11 22:35 - 2014-11-07 11:49 - 00388272 _____ (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2014-11-11 22:35 - 2014-11-07 11:23 - 00341168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-11-11 22:35 - 2014-11-05 20:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2014-11-11 22:35 - 2014-11-05 19:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\System32\ieetwproxystub.dll
2014-11-11 22:35 - 2014-11-05 19:35 - 00034304 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2014-11-11 22:35 - 2014-11-05 19:30 - 00114688 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollector.exe
2014-11-11 22:35 - 2014-11-05 19:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-11-11 22:35 - 2014-11-05 19:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-11-11 22:35 - 2014-11-05 19:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-11-11 22:35 - 2014-11-05 19:10 - 19781632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-11-11 22:35 - 2014-11-05 19:07 - 00077824 _____ (Microsoft Corporation) C:\Windows\System32\JavaScriptCollectionAgent.dll
2014-11-11 22:35 - 2014-11-05 19:05 - 02277376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-11-11 22:35 - 2014-11-05 19:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-11-11 22:35 - 2014-11-05 18:42 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-11-11 22:35 - 2014-11-05 18:41 - 00716800 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2014-11-11 22:35 - 2014-11-05 18:36 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-11-11 22:35 - 2014-11-05 18:34 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-11-11 22:35 - 2014-11-05 18:22 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-11-11 22:35 - 2014-11-05 18:21 - 02051072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-11-11 22:35 - 2014-11-05 18:04 - 01550336 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2014-11-11 22:35 - 2014-11-05 17:48 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-11-11 22:35 - 2014-11-05 17:47 - 00708096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-11-11 22:34 - 2014-11-05 20:03 - 25110016 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2014-11-11 22:34 - 2014-11-05 20:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollectorres.dll
2014-11-11 22:34 - 2014-11-05 19:47 - 00066560 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2014-11-11 22:34 - 2014-11-05 19:46 - 00580096 _____ (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2014-11-11 22:34 - 2014-11-05 19:44 - 00088064 _____ (Microsoft Corporation) C:\Windows\System32\MshtmlDac.dll
2014-11-11 22:34 - 2014-11-05 19:43 - 02884096 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2014-11-11 22:34 - 2014-11-05 19:36 - 00054784 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2014-11-11 22:34 - 2014-11-05 19:31 - 00633856 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll
2014-11-11 22:34 - 2014-11-05 19:30 - 00144384 _____ (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2014-11-11 22:34 - 2014-11-05 19:29 - 00814080 _____ (Microsoft Corporation) C:\Windows\System32\jscript9diag.dll
2014-11-11 22:34 - 2014-11-05 19:23 - 06040064 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2014-11-11 22:34 - 2014-11-05 19:20 - 00968704 _____ (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2014-11-11 22:34 - 2014-11-05 19:16 - 00490496 _____ (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2014-11-11 22:34 - 2014-11-05 19:13 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-11-11 22:34 - 2014-11-05 19:10 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-11-11 22:34 - 2014-11-05 19:04 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-11-11 22:34 - 2014-11-05 19:02 - 00199680 _____ (Microsoft Corporation) C:\Windows\System32\msrating.dll
2014-11-11 22:34 - 2014-11-05 19:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-11-11 22:34 - 2014-11-05 19:00 - 00092160 _____ (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2014-11-11 22:34 - 2014-11-05 18:59 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-11-11 22:34 - 2014-11-05 18:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-11-11 22:34 - 2014-11-05 18:57 - 00316928 _____ (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2014-11-11 22:34 - 2014-11-05 18:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-11-11 22:34 - 2014-11-05 18:41 - 00800768 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2014-11-11 22:34 - 2014-11-05 18:39 - 01359360 _____ (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2014-11-11 22:34 - 2014-11-05 18:38 - 02124288 _____ (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2014-11-11 22:34 - 2014-11-05 18:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-11-11 22:34 - 2014-11-05 18:30 - 14390272 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2014-11-11 22:34 - 2014-11-05 18:21 - 04298240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-11-11 22:34 - 2014-11-05 18:20 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-11-11 22:34 - 2014-11-05 18:17 - 02365440 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2014-11-11 22:34 - 2014-11-05 18:03 - 12819456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-11-11 22:34 - 2014-11-05 17:53 - 00799232 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2014-11-11 22:34 - 2014-11-05 17:52 - 01892864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-11-11 22:34 - 2014-11-05 09:56 - 00304640 _____ (Microsoft Corporation) C:\Windows\System32\generaltel.dll
2014-11-11 22:34 - 2014-11-05 09:56 - 00228864 _____ (Microsoft Corporation) C:\Windows\System32\aepdu.dll
2014-11-11 22:34 - 2014-11-05 09:52 - 00424448 _____ (Microsoft Corporation) C:\Windows\System32\aeinv.dll
2014-11-11 22:34 - 2014-10-13 18:16 - 00155064 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ksecpkg.sys
2014-11-11 22:34 - 2014-10-13 18:13 - 00683520 _____ (Microsoft Corporation) C:\Windows\System32\termsrv.dll
2014-11-11 22:34 - 2014-10-13 18:12 - 01460736 _____ (Microsoft Corporation) C:\Windows\System32\lsasrv.dll
2014-11-11 22:34 - 2014-10-13 18:09 - 00146432 _____ (Microsoft Corporation) C:\Windows\System32\msaudite.dll
2014-11-11 22:34 - 2014-10-13 18:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\System32\adtschema.dll
2014-11-11 22:34 - 2014-10-13 17:50 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-11-11 22:34 - 2014-10-13 17:49 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-11-11 22:34 - 2014-10-13 17:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2014-11-11 22:34 - 2014-10-13 17:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2014-11-11 22:32 - 2014-10-02 18:12 - 00500224 _____ (Microsoft Corporation) C:\Windows\System32\AUDIOKSE.dll
2014-11-11 22:32 - 2014-10-02 18:11 - 00680960 _____ (Microsoft Corporation) C:\Windows\System32\audiosrv.dll
2014-11-11 22:32 - 2014-10-02 18:11 - 00440832 _____ (Microsoft Corporation) C:\Windows\System32\AudioEng.dll
2014-11-11 22:32 - 2014-10-02 18:11 - 00296448 _____ (Microsoft Corporation) C:\Windows\System32\AudioSes.dll
2014-11-11 22:32 - 2014-10-02 18:11 - 00284672 _____ (Microsoft Corporation) C:\Windows\System32\EncDump.dll
2014-11-11 22:32 - 2014-10-02 17:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2014-11-11 22:32 - 2014-10-02 17:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2014-11-11 22:32 - 2014-10-02 17:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2014-11-11 22:32 - 2014-09-19 01:42 - 00728064 _____ (Microsoft Corporation) C:\Windows\System32\kerberos.dll
2014-11-11 22:32 - 2014-09-19 01:42 - 00342016 _____ (Microsoft Corporation) C:\Windows\System32\schannel.dll
2014-11-11 22:32 - 2014-09-19 01:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\System32\msv1_0.dll
2014-11-11 22:32 - 2014-09-19 01:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\System32\ncrypt.dll
2014-11-11 22:32 - 2014-09-19 01:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\System32\wdigest.dll
2014-11-11 22:32 - 2014-09-19 01:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\System32\TSpkg.dll
2014-11-11 22:32 - 2014-09-19 01:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\System32\credssp.dll
2014-11-11 22:32 - 2014-09-19 01:23 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-11-11 22:32 - 2014-09-19 01:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-11-11 22:32 - 2014-09-19 01:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-11-11 22:32 - 2014-09-19 01:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-11-11 22:32 - 2014-09-19 01:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-11-11 22:32 - 2014-09-19 01:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-11-11 22:32 - 2014-09-19 01:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-11-11 22:32 - 2014-08-20 22:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\System32\msxml3.dll
2014-11-11 22:32 - 2014-08-20 22:40 - 00002048 _____ (Microsoft Corporation) C:\Windows\System32\msxml3r.dll
2014-11-11 22:32 - 2014-08-20 22:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-11-11 22:32 - 2014-08-20 22:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-11-11 22:32 - 2014-08-11 18:02 - 00878080 _____ (Microsoft Corporation) C:\Windows\System32\IMJP10K.DLL
2014-11-11 22:32 - 2014-08-11 17:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL
2014-11-11 22:31 - 2014-10-24 17:57 - 00077824 _____ (Microsoft Corporation) C:\Windows\System32\packager.dll
2014-11-11 22:31 - 2014-10-24 17:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-11-11 22:31 - 2014-10-17 18:05 - 00861696 _____ (Microsoft Corporation) C:\Windows\System32\oleaut32.dll
2014-11-11 22:31 - 2014-10-17 17:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2014-11-11 22:31 - 2014-10-13 18:13 - 03241984 _____ (Microsoft Corporation) C:\Windows\System32\msi.dll
2014-11-11 22:31 - 2014-10-13 17:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-11-11 22:31 - 2014-10-09 16:57 - 03198976 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys
2014-11-07 13:53 - 2014-11-07 13:53 - 00001316 _____ () C:\Users\Name\Desktop\WinSCP.lnk
2014-11-07 04:22 - 2014-11-07 04:22 - 00000000 ____D () C:\Users\Name\AppData\Roaming\IrfanView
2014-11-07 04:22 - 2014-11-07 04:22 - 00000000 ____D () C:\Program Files (x86)\IrfanView
2014-10-20 07:42 - 2014-10-20 07:59 - 00053248 _____ (Interplay Productions) C:\Windows\ipuninst.exe
2014-10-20 07:42 - 2014-10-20 07:42 - 00000000 ____D () C:\Program Files\Interplay
2014-10-20 07:33 - 2014-10-20 07:33 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-10-20 07:32 - 2014-09-13 12:13 - 00613696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2014-10-20 07:31 - 2014-10-20 07:31 - 00000000 ____D () C:\Windows\SysWOW64\NV
2014-10-20 07:31 - 2014-10-20 07:31 - 00000000 ____D () C:\Windows\System32\NV
2014-10-20 07:28 - 2014-09-13 15:48 - 31887680 _____ (NVIDIA Corporation) C:\Windows\System32\nvoglv64.dll
2014-10-20 07:28 - 2014-09-13 15:48 - 24552592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-10-20 07:28 - 2014-09-13 15:48 - 20922512 _____ (NVIDIA Corporation) C:\Windows\System32\nvcompiler.dll
2014-10-20 07:28 - 2014-09-13 15:48 - 20589536 _____ (NVIDIA Corporation) C:\Windows\System32\nvwgf2umx.dll
2014-10-20 07:28 - 2014-09-13 15:48 - 19954520 _____ (NVIDIA Corporation) C:\Windows\System32\nvd3dumx.dll
2014-10-20 07:28 - 2014-09-13 15:48 - 18106152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-10-20 07:28 - 2014-09-13 15:48 - 17259664 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-10-20 07:28 - 2014-09-13 15:48 - 16875856 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-10-20 07:28 - 2014-09-13 15:48 - 14026304 _____ (NVIDIA Corporation) C:\Windows\System32\nvopencl.dll
2014-10-20 07:28 - 2014-09-13 15:48 - 13939272 _____ (NVIDIA Corporation) C:\Windows\System32\nvcuda.dll
2014-10-20 07:28 - 2014-09-13 15:48 - 13157696 _____ (NVIDIA Corporation) C:\Windows\System32\Drivers\nvlddmkm.sys
2014-10-20 07:28 - 2014-09-13 15:48 - 11392576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-10-20 07:28 - 2014-09-13 15:48 - 11330776 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-10-20 07:28 - 2014-09-13 15:48 - 04287296 _____ (NVIDIA Corporation) C:\Windows\System32\nvcuvid.dll
2014-10-20 07:28 - 2014-09-13 15:48 - 04008592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-10-20 07:28 - 2014-09-13 15:48 - 02838424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-10-20 07:28 - 2014-09-13 15:48 - 01876296 _____ (NVIDIA Corporation) C:\Windows\System32\nvdispco6434411.dll
2014-10-20 07:28 - 2014-09-13 15:48 - 01539272 _____ (NVIDIA Corporation) C:\Windows\System32\nvdispgenco6434411.dll
2014-10-20 07:28 - 2014-09-13 15:48 - 00957584 _____ (NVIDIA Corporation) C:\Windows\System32\NvIFR64.dll
2014-10-20 07:28 - 2014-09-13 15:48 - 00925896 _____ (NVIDIA Corporation) C:\Windows\System32\NvFBC64.dll
2014-10-20 07:28 - 2014-09-13 15:48 - 00919240 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-10-20 07:28 - 2014-09-13 15:48 - 00894096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-10-20 07:28 - 2014-09-13 15:48 - 00867528 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-10-20 07:28 - 2014-09-13 15:48 - 00501064 _____ (NVIDIA Corporation) C:\Windows\System32\nvEncodeAPI64.dll
2014-10-20 07:28 - 2014-09-13 15:48 - 00417096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2014-10-20 07:28 - 2014-09-13 15:48 - 00393024 _____ (NVIDIA Corporation) C:\Windows\System32\NvIFROpenGL.dll
2014-10-20 07:28 - 2014-09-13 15:48 - 00352016 _____ (NVIDIA Corporation) C:\Windows\System32\nvoglshim64.dll
2014-10-20 07:28 - 2014-09-13 15:48 - 00348304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2014-10-20 07:28 - 2014-09-13 15:48 - 00303600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-10-20 07:28 - 2014-09-13 15:48 - 00174856 _____ (NVIDIA Corporation) C:\Windows\System32\nvinitx.dll
2014-10-20 07:28 - 2014-09-13 15:48 - 00156840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-10-20 07:28 - 2014-09-13 15:48 - 00032576 _____ (NVIDIA Corporation) C:\Windows\System32\Drivers\nvpciflt.sys
2014-10-20 07:02 - 2014-09-04 11:14 - 00038048 _____ (NVIDIA Corporation) C:\Windows\System32\Drivers\nvvad64v.sys
2014-10-20 07:02 - 2014-09-04 11:14 - 00032416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2014-10-18 08:01 - 2014-10-18 08:01 - 00001294 _____ () C:\Users\Name\Desktop\Putty.lnk
2014-10-18 08:00 - 2014-10-18 08:01 - 00000000 ____D () C:\Program Files (x86)\PUTTY
2014-10-18 07:56 - 2014-11-15 06:00 - 00000600 _____ () C:\Users\Name\AppData\Roaming\winscp.rnd
2014-10-18 07:55 - 2014-11-07 13:53 - 00000000 ____D () C:\Program Files (x86)\WinSCP

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-17 04:00 - 2013-03-20 15:25 - 01562082 _____ () C:\Windows\WindowsUpdate.log
2014-11-17 03:32 - 2014-07-08 06:00 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-17 03:25 - 2014-03-17 22:19 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-11-17 03:05 - 2009-07-13 20:45 - 00024912 ____H () C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-17 03:05 - 2009-07-13 20:45 - 00024912 ____H () C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-17 03:02 - 2014-06-23 01:27 - 00000548 _____ () C:\Windows\Tasks\MATLAB R2014a Startup Accelerator.job
2014-11-17 02:58 - 2014-07-08 06:00 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-17 02:57 - 2009-07-13 21:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-17 02:57 - 2009-07-13 20:51 - 00285666 _____ () C:\Windows\setupact.log
2014-11-17 02:56 - 2012-04-13 14:43 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-11-17 02:49 - 2014-07-07 09:16 - 00000000 ___HD () C:\AdwCleaner
2014-11-17 02:40 - 2009-07-13 19:20 - 00000000 ____D () C:\Windows\System32\NDF
2014-11-17 01:47 - 2014-09-01 03:41 - 00000000 ____D () C:\Windows\pss
2014-11-17 01:33 - 2010-11-20 19:47 - 00206616 _____ () C:\Windows\PFRO.log
2014-11-16 16:04 - 2013-08-06 08:41 - 00000000 ____D () C:\Users\Name\AppData\Roaming\foobar2000
2014-11-16 15:34 - 2014-01-04 07:02 - 66874368 ___SH () C:\Users\Name\Desktop\Thumbs.db
2014-11-16 13:59 - 2013-08-06 10:11 - 00000000 ____D () C:\Users\Name\AppData\Roaming\vlc
2014-11-16 01:15 - 2014-04-30 03:01 - 00000435 _____ () C:\Users\Name\w.txt
2014-11-16 01:13 - 2014-02-03 14:42 - 00000000 ____D () C:\Users\Name\AppData\Roaming\Dropbox
2014-11-15 05:58 - 2014-10-15 11:25 - 00000600 _____ () C:\Users\Name\AppData\Local\PUTTY.RND
2014-11-15 05:57 - 2014-01-02 05:51 - 00002888 ____H () C:\Users\Name\.root_hist
2014-11-15 05:56 - 2013-10-13 08:10 - 00000000 ____D () C:\Users\Name\AppData\Roaming\CodeBlocks
2014-11-14 15:41 - 2013-08-06 06:50 - 00000000 ____D () C:\users\Name
2014-11-14 09:27 - 2014-07-08 06:00 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-11-14 09:27 - 2014-07-08 06:00 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-11-14 08:36 - 2013-08-06 09:18 - 00000000 ____D () C:\Program Files\A My Battle For Middle-Earth
2014-11-14 06:22 - 2013-09-14 02:17 - 00000000 ____D () C:\Users\Name\AppData\Roaming\SoftGrid Client
2014-11-13 15:30 - 2013-08-06 07:44 - 00000000 ___RD () C:\Users\Name\Desktop\Programme
2014-11-13 14:40 - 2014-09-01 03:38 - 00000000 ____D () C:\ProgramData\YTD Video Downloader
2014-11-13 11:19 - 2014-08-18 08:00 - 00000767 _____ () C:\Users\Name\Spiele.txt
2014-11-12 14:17 - 2009-07-13 19:20 - 00000000 ____D () C:\Windows\rescache
2014-11-12 09:29 - 2014-03-17 22:19 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-11-12 09:29 - 2014-03-01 14:48 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-11-12 09:29 - 2011-12-01 13:26 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-11-12 08:09 - 2009-07-13 20:45 - 00331360 _____ () C:\Windows\System32\FNTCACHE.DAT
2014-11-12 08:07 - 2014-06-13 15:32 - 00000000 ___SD () C:\Windows\System32\CompatTel
2014-11-11 22:56 - 2013-08-10 12:56 - 00000000 ____D () C:\Windows\System32\MRT
2014-11-11 22:52 - 2011-07-18 12:31 - 103374192 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe
2014-11-11 05:04 - 2011-05-16 06:04 - 00700118 _____ () C:\Windows\System32\perfh007.dat
2014-11-11 05:04 - 2011-05-16 06:04 - 00149968 _____ () C:\Windows\System32\perfc007.dat
2014-11-11 05:04 - 2009-07-13 21:13 - 01622228 _____ () C:\Windows\System32\PerfStringBackup.INI
2014-11-03 22:02 - 2009-07-13 21:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-10-30 08:41 - 2013-09-06 10:09 - 00000000 ____D () C:\Users\Name\AppData\Roaming\Mp3tag
2014-10-30 07:22 - 2013-09-22 10:10 - 00165376 ___SH () C:\Users\Name\Thumbs.db
2014-10-27 21:34 - 2010-11-20 19:27 - 00275080 ____N (Microsoft Corporation) C:\Windows\System32\MpSigStub.exe
2014-10-27 02:54 - 2013-08-06 08:47 - 00000000 ____D () C:\Users\Name\Documents\JDownloader
2014-10-20 07:52 - 2013-08-06 07:48 - 00000000 ____D () C:\Games
2014-10-20 07:33 - 2012-04-13 14:43 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-10-20 07:30 - 2012-04-13 14:42 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-10-20 07:04 - 2013-11-25 05:57 - 00000000 ____D () C:\Users\Name\AppData\Local\NVIDIA Corporation
2014-10-20 01:31 - 2014-10-01 08:18 - 00002067 _____ () C:\Users\Name\Desktop\ROOT.lnk

Some content of TEMP:
====================
C:\Users\Name\AppData\Local\Temp\amazonicon_v6.exe
C:\Users\Name\AppData\Local\Temp\amazoninstallernircmdc.exe
C:\Users\Name\AppData\Local\Temp\avgnt.exe
C:\Users\Name\AppData\Local\Temp\BackupSetup.exe
C:\Users\Name\AppData\Local\Temp\drm_dyndata_7370014.dll
C:\Users\Name\AppData\Local\Temp\drm_dyndata_7400009.dll
C:\Users\Name\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmplxezva.dll
C:\Users\Name\AppData\Local\Temp\Foxit Updater.exe
C:\Users\Name\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
C:\Users\Name\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
C:\Users\Name\AppData\Local\Temp\nvSCPAPISvr.exe
C:\Users\Name\AppData\Local\Temp\nvStInst.exe
C:\Users\Name\AppData\Local\Temp\PicasaUpdater_1686.exe
C:\Users\Name\AppData\Local\Temp\Quarantine.exe
C:\Users\Name\AppData\Local\Temp\sdanircmdc.exe
C:\Users\Name\AppData\Local\Temp\sdapskill.exe
C:\Users\Name\AppData\Local\Temp\sdaspwn.exe
C:\Users\Name\AppData\Local\Temp\SHSetup.exe
C:\Users\Name\AppData\Local\Temp\SIntf16.dll
C:\Users\Name\AppData\Local\Temp\SIntf32.dll
C:\Users\Name\AppData\Local\Temp\SIntfNT.dll
C:\Users\Name\AppData\Local\Temp\sqlite3.dll
C:\Users\Name\AppData\Local\Temp\sweetpage294wld_n2.exe
C:\Users\Name\AppData\Local\Temp\System.Data.SQLite.dll
C:\Users\Name\AppData\Local\Temp\System.Data.SQLite14712.dll
C:\Users\Name\AppData\Local\Temp\System.Data.SQLite19433.dll
C:\Users\Name\AppData\Local\Temp\System.Data.SQLite34620.dll
C:\Users\Name\AppData\Local\Temp\System.Data.SQLite69417.dll
C:\Users\Name\AppData\Local\Temp\System.Data.SQLite74943.dll
C:\Users\Name\AppData\Local\Temp\System.Data.SQLite80540.dll
C:\Users\Name\AppData\Local\Temp\System.Data.SQLite94435.dll
C:\Users\Name\AppData\Local\Temp\System.Data.SQLite99240.dll
C:\Users\Name\AppData\Local\Temp\ubi4983.tmp.exe


==================== Known DLLs (Whitelisted) ================


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== Restore Points  =========================

Restore point made on: 2014-11-12 22:51:34
Restore point made on: 2014-11-15 02:22:44
Restore point made on: 2014-11-15 03:12:24
Restore point made on: 2014-11-17 02:43:10

==================== Memory info ===========================

Percentage of memory in use: 16%
Total physical RAM: 3990.47 MB
Available physical RAM: 3334.55 MB
Total Pagefile: 3988.67 MB
Available Pagefile: 3329.13 MB
Total Virtual: 8192 MB
Available Virtual: 8191.88 MB

==================== Drives ================================

Drive c: (Festplatte) (Fixed) (Total:647.54 GB) (Free:363.68 GB) NTFS
Drive e: (Festplatte) (Fixed) (Total:50 GB) (Free:26.11 GB) NTFS
Drive h: (KINGSTON) (Removable) (Total:7.45 GB) (Free:7.32 GB) FAT32
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
Drive y: () (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 698.6 GB) (Disk ID: 048CECC3)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=647.5 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=50 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=1 GB) - (Type=12)

========================================================
Disk: 2 (Size: 7.5 GB) (Disk ID: 786A013C)
Partition 1: (Active) - (Size=7.5 GB) - (Type=0B)


LastRegBack: 2014-11-15 11:01

==================== End Of Log ============================
--- --- ---

--- --- ---

schrauber 18.11.2014 09:02
Drücke bitte die + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
HKU\Name\...\RunOnce: [Report] => C:\AdwCleaner\AdwCleaner[S5].txt [2982 2014-11-17] ()
HKU\Name\...\Policies\Explorer: [DisallowRun] 1
Emptytemp:
Speichere diese bitte als Fixlist.txt auf deinem USB Stick.
  • Starte deinen Rechner erneut in die Reparaturoptionen
  • Starte nun die FRST.exe erneut und klicke den Entfernen Button.

Das Tool erstellt eine Fixlog.txt auf deinem USB Stick. Poste den Inhalt bitte hier.


Nochmal testen im normalen Modus.

Kenzo_2 18.11.2014 17:14
Hab ich gemacht, funktioniert leider noch nicht.

Code:
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 17-11-2014
Ran by SYSTEM at 2014-11-18 17:10:16 Run:1
Running from G:\
Boot Mode: Recovery
==============================================

Content of fixlist:
*****************
HKU\Name\...\RunOnce: [Report] => C:\AdwCleaner\AdwCleaner[S5].txt [2982 2014-11-17] ()
HKU\Name\...\Policies\Explorer: [DisallowRun] 1
Emptytemp:
*****************

HKU\Name\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Report => value deleted successfully.
HKU\Name\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\DisallowRun => value deleted successfully.
Emptytemp: => Error: This directive works only outside recovery mode.

==== End of Fixlog ====

schrauber 19.11.2014 16:16
Drücke bitte die + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
LastRegBack: 2014-11-15 11:01
Speichere diese bitte als Fixlist.txt auf deinem USB Stick.
  • Starte deinen Rechner erneut in die Reparaturoptionen
  • Starte nun die FRST.exe erneut und klicke den Entfernen Button.

Das Tool erstellt eine Fixlog.txt auf deinem USB Stick. Poste den Inhalt bitte hier.

Kenzo_2 19.11.2014 17:38
Danke für die Antwort, aber ich denke der Thread kann geschlossen werden. Bei einem Blick in die kürzlich installierten Programme habe ich bemerkt, dass Antivir vor ein paar Tagen ein zweites Mal installiert wurde. Ich habe keine Ahnung wieso es das gemacht hat, ich war es sicherlich nicht; nachdem ich den überflüssigen Eintrag deinstalliert habe, ist alles wieder in Ordnung. :)

schrauber 20.11.2014 09:45
ok :)


Alle Zeitangaben in WEZ +1. Es ist jetzt 16:44 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131