|
Log-Analyse und Auswertung: Laptop Toshiba Satellite || Sehr Schlechte Performance, langsamWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
09.05.2013, 11:50 | #1 | ||
| Laptop Toshiba Satellite || Sehr Schlechte Performance, langsam Hallo Leute, mein 3 Jahre alter Toshiba Satellite Laptop wird in letzter Zeit richtig langsam. Ich kann z.B. so gut wie kein Programm neben Firefox gleichzeitig offen haben. Das letzte mal wurde das System vor ca. einem Jahr aufgesetzt. OS ist Windows 7 Home Premium. Ich habe die Tools die in eurer Checkliste sind durchlaufen lassen, anbei die Logs. Was mir Sorgen macht ist, dieser GMER Check ist bei mir nach ca. 10 Minuten mit der Meldung "Gmer.exe" hast stopped responding, end now" abgebrochen und das Programm musste beendet werden. Virenscanner war aus, nichts lief, Netzwerk war getrennt und am Computer wurde nicht gearbeitet. Ich hoffe Ihr könnt mir evtl. weiterhelfen defogger Log Zitat:
Zitat:
|
09.05.2013, 17:04 | #2 |
/// TB-Ausbilder | Laptop Toshiba Satellite || Sehr Schlechte Performance, langsam Da ist ein Citrix-Client installiert, ist das ein gewerblich genutzter Laptop?
__________________
__________________ |
10.05.2013, 11:25 | #3 |
| Laptop Toshiba Satellite || Sehr Schlechte Performance, langsam Nein, den brauchte ich vorgestern bloß um mich ausnahmweise in der Arbeit anzumelden.
__________________Sonst benutze ich dazu einen extra Laptop welcher mir von der Arbeit gestellt wurde. Den Client würde ich nur nutzen falls ich über Home Office arbeiten würde, was aber selten der Fall sein wird. |
10.05.2013, 20:22 | #4 |
/// TB-Ausbilder | Laptop Toshiba Satellite || Sehr Schlechte Performance, langsam Achso ich verstehe. !! Hinweis an Mitlesende !! Dieses Thema und die Anweisungen sind nur für diesen speziellen Fall gedacht. Sie könnten andere Computer schwer beschädigen. Öffnet bitte euer eigenes Thema. Ich werde dir bei deinem Problem helfen. Die Bereinigung funktioniert nur, wenn du dich an die folgenden Regeln hälst: Bitte lesen: Regeln für die Bereinigung
Schritt 1: (Erinnerung: Antworte mir erst, wenn du alle Schritte abgearbeitet hast!) Deinstallation von Programmen
Schritt 2: AdwCleaner: Werbeprogramme suchen und löschen Downloade Dir bitte AdwCleaner auf deinen Desktop.
Schritt 3: Scan mit DDS+ (mit attach) Downloade dir bitte DDS (von sUBs) und speichere die Datei auf deinem Desktop.
__________________ Digitale Freibeuter gegen Malware! Keine Hilfe per PM! |
11.05.2013, 14:02 | #5 |
| Laptop Toshiba Satellite || Sehr Schlechte Performance, langsam Hallo, erstmal danke für die Hilfe! Hier die Logfiles AdwCleaner Code:
ATTFilter # AdwCleaner v2.300 - Logfile created 05/11/2013 at 14:46:12 # Updated 28/04/2013 by Xplode # Operating system : Windows 7 Home Premium Service Pack 1 (32 bits) # User : Sani - SANI-PC # Boot Mode : Normal # Running from : C:\Users\Sani\Downloads\Trojaboard\adwcleaner.exe # Option [Delete] ***** [Services] ***** ***** [Files / Folders] ***** Folder Deleted : C:\Program Files\Delta Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Delta Folder Deleted : C:\Users\Sani\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Delta Folder Deleted : C:\Users\Sani\AppData\Roaming\Mozilla\Firefox\Profiles\079emyz8.default\jetpack ***** [Registry] ***** Key Deleted : HKCU\Software\Delta Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\063A857434EDED11A893800002C0A966 ***** [Internet Browsers] ***** -\\ Internet Explorer v10.0.9200.16537 [OK] Registry is clean. -\\ Mozilla Firefox v20.0.1 (de) File : C:\Users\Sani\AppData\Roaming\Mozilla\Firefox\Profiles\079emyz8.default\prefs.js C:\Users\Sani\AppData\Roaming\Mozilla\Firefox\Profiles\079emyz8.default\user.js ... Deleted ! [OK] File is clean. -\\ Google Chrome v26.0.1410.64 File : C:\Users\Sani\AppData\Local\Google\Chrome\User Data\Default\Preferences [OK] File is clean. ************************* AdwCleaner[S1].txt - [1390 octets] - [11/05/2013 14:46:12] ########## EOF - C:\AdwCleaner[S1].txt - [1450 octets] ########## DDS Logfile: DDS Logfile: Code:
ATTFilter DDS (Ver_2012-11-20.01) - NTFS_x86 Internet Explorer: 10.0.9200.16537 BrowserJavaVersion: 10.21.2 Run by Sani at 14:51:35 on 2013-05-11 #Option MBR scan is disabled. Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.2766.1707 [GMT 2:00] . AV: Avira Desktop *Enabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C} SP: Avira Desktop *Enabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . ============== Running Processes ================ . C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe C:\Windows\UnsignedThemesSvc.exe C:\Program Files\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe C:\Windows\System32\spoolsv.exe C:\Program Files\Avira\AntiVir Desktop\sched.exe C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe C:\Program Files\Avira\AntiVir Desktop\avguard.exe C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\CPUCooL\CooLSrv.exe C:\Windows\system32\taskhost.exe C:\Windows\system32\Dwm.exe C:\Windows\system32\taskeng.exe C:\Windows\Explorer.EXE C:\Windows\System32\igfxtray.exe C:\Windows\System32\hkcmd.exe C:\Windows\System32\igfxpers.exe C:\Program Files\Avira\AntiVir Desktop\avgnt.exe C:\Program Files\Avira\AntiVir Desktop\avshadow.exe C:\Windows\system32\conhost.exe C:\Windows\System32\WUDFHost.exe C:\Windows\system32\SearchIndexer.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Windows Media Player\wmpnetwk.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\Synaptics\SynTP\SynTPHelper.exe C:\Windows\system32\wbem\wmiprvse.exe C:\Windows\system32\sppsvc.exe C:\Windows\system32\wbem\wmiprvse.exe C:\Windows\servicing\TrustedInstaller.exe C:\Windows\system32\conhost.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k GPSvcGroup C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Windows\system32\svchost.exe -k imgsvc C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Windows\System32\svchost.exe -k LocalServicePeerNet C:\Windows\System32\svchost.exe -k secsvcs . ============== Pseudo HJT Report =============== . BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre7\bin\ssv.dll BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre7\bin\jp2ssv.dll uRun: [WhatPulse] "c:\program files\whatpulse\whatpulse\whatpulse.exe" mRun: [IgfxTray] c:\windows\system32\igfxtray.exe mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe mRun: [Persistence] c:\windows\system32\igfxpers.exe mRun: [avgnt] "c:\program files\avira\antivir desktop\avgnt.exe" /min mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe mRun: [SmartAudio] c:\program files\conexant\saii\SAIICpl.exe /t mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe" mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe" mRun: [CitrixReceiver] "c:\programdata\microsoft\windows\start menu\programs\citrix\Receiver Updater.lnk" mRun: [ConnectionCenter] "c:\program files\citrix\ica client\concentr.exe" /startup StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\rainme~1.lnk - c:\program files\rainmeter\Rainmeter.exe mPolicies-System: ConsentPromptBehaviorAdmin = dword:5 mPolicies-System: ConsentPromptBehaviorUser = dword:3 mPolicies-System: EnableUIADesktopToggle = dword:0 mPolicies-Windows\System: UseOEMBackground = dword:1 IE: Nach Microsoft E&xel exportieren - c:\progra~1\micros~2\office12\EXCEL.EXE/3000 IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab DPF: {CAFEEFAC-0017-0000-0021-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://active.macromedia.com/flash2/cabs/swflash.cab TCP: NameServer = 192.168.90.254 TCP: Interfaces\{7079C8E7-8903-47D6-9BE7-EBF5E17644A2} : DHCPNameServer = 192.168.90.254 TCP: Interfaces\{7079C8E7-8903-47D6-9BE7-EBF5E17644A2}\2375942554836303 : DHCPNameServer = 192.168.1.254 TCP: Interfaces\{7079C8E7-8903-47D6-9BE7-EBF5E17644A2}\46C696E6B6 : DHCPNameServer = 83.169.185.161 192.168.0.1 TCP: Interfaces\{7079C8E7-8903-47D6-9BE7-EBF5E17644A2}\47D6F62696C656 : DHCPNameServer = 10.176.83.252 10.184.83.252 TCP: Interfaces\{D07437D0-833D-482B-85E8-DE10C79C60E2} : DHCPNameServer = 192.168.1.1 Filter: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - c:\program files\citrix\ica client\IcaMimeFilter.dll Filter: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - c:\program files\citrix\ica client\IcaMimeFilter.dll Filter: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - c:\program files\citrix\ica client\IcaMimeFilter.dll Filter: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - c:\program files\citrix\ica client\IcaMimeFilter.dll Filter: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - c:\program files\citrix\ica client\IcaMimeFilter.dll Filter: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - c:\program files\citrix\ica client\IcaMimeFilter.dll Filter: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - c:\program files\citrix\ica client\IcaMimeFilter.dll Filter: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - c:\program files\citrix\ica client\IcaMimeFilter.dll Filter: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - c:\program files\citrix\ica client\IcaMimeFilter.dll Filter: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - c:\program files\citrix\ica client\IcaMimeFilter.dll Filter: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - c:\program files\citrix\ica client\IcaMimeFilter.dll Filter: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - c:\program files\citrix\ica client\IcaMimeFilter.dll Filter: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - c:\program files\citrix\ica client\IcaMimeFilter.dll Filter: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - c:\program files\citrix\ica client\IcaMimeFilter.dll Filter: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - c:\program files\citrix\ica client\IcaMimeFilter.dll Filter: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - c:\program files\citrix\ica client\IcaMimeFilter.dll Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\program files\common files\skype\Skype4COM.dll Notify: igfxcui - igfxdev.dll AppInit_DLLs= c:\progra~1\citrix\icacli~1\RSHook.dll SSODL: WebCheck - <orphaned> mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "c:\program files\google\chrome\application\26.0.1410.64\installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome . ================= FIREFOX =================== . FF - ProfilePath - c:\users\sani\appdata\roaming\mozilla\firefox\profiles\079emyz8.default\ FF - prefs.js: browser.search.selectedEngine - Wikipedia (de) FF - prefs.js: browser.startup.homepage - about:home FF - prefs.js: network.proxy.type - 0 FF - plugin: c:\program files\adobe\reader 10.0\reader\air\nppdf32.dll FF - plugin: c:\program files\citrix\ica client\npicaN.dll FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll FF - plugin: c:\program files\google\update\1.3.21.145\npGoogleUpdate3.dll FF - plugin: c:\program files\java\jre7\bin\plugin2\npjp2.dll FF - plugin: c:\program files\microsoft silverlight\5.1.20125.0\npctrlui.dll FF - plugin: c:\program files\pando networks\media booster\npPandoWebPlugin.dll FF - plugin: c:\users\sani\appdata\local\facebook\video\skype\npFacebookVideoCalling.dll FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_7_700_169.dll FF - ExtSQL: 2013-03-18 19:31; mediahint@jetpack; c:\users\sani\appdata\roaming\mozilla\firefox\profiles\079emyz8.default\extensions\mediahint@jetpack.xpi . ============= SERVICES / DRIVERS =============== . R1 avkmgr;avkmgr;c:\windows\system32\drivers\avkmgr.sys [2012-3-8 36000] R1 ctxusbm;Citrix USB Monitor Driver;c:\windows\system32\drivers\ctxusbm.sys [2012-12-5 73544] R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [2012-4-20 242240] R2 AntiVirSchedulerService;Avira Planer;c:\program files\avira\antivir desktop\sched.exe [2012-3-8 86224] R2 AntiVirService;Avira Echtzeit Scanner;c:\program files\avira\antivir desktop\avguard.exe [2012-3-8 110032] R2 avgntflt;avgntflt;c:\windows\system32\drivers\avgntflt.sys [2012-3-8 83392] R2 UnsignedThemes;Unsigned Themes;c:\windows\UnsignedThemesSvc.exe [2009-7-13 21096] R2 uxpatch;uxpatch;c:\windows\system32\drivers\uxpatch.sys [2009-7-13 25448] R2 vpnagent;Cisco AnyConnect Secure Mobility Agent;c:\program files\cisco\cisco anyconnect secure mobility client\vpnagent.exe [2011-9-9 475088] R3 acsock;acsock;c:\windows\system32\drivers\acsock.sys [2011-9-9 87976] R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\drivers\L1C62x86.sys [2011-2-9 68720] R3 MEI;Intel(R) Management Engine Interface ;c:\windows\system32\drivers\HECI.sys [2010-10-20 41088] R3 PGEffect;Pangu effect driver;c:\windows\system32\drivers\PGEffect.sys [2012-3-8 33616] R3 RTL8192Ce;Realtek Wireless LAN 802.11n PCI-E NIC Driver;c:\windows\system32\drivers\rtl8192ce.sys [2012-3-8 1004136] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384] S2 SkypeUpdate;Skype Updater;c:\program files\skype\updater\Updater.exe [2013-2-28 161384] S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-14 229888] S3 epmntdrv;epmntdrv;c:\windows\system32\epmntdrv.sys [2012-8-19 14216] S3 EuGdiDrv;EuGdiDrv;c:\windows\system32\EuGdiDrv.sys [2012-8-19 8456] S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2013-2-28 14848] S3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\TsUsbFlt.sys [2013-2-28 49664] S3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2013-2-28 27136] S3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\wat\WatAdminSvc.exe [2012-3-8 1343400] . =============== Created Last 30 ================ . 2013-05-10 08:39:11 6906960 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{077c3f75-f9f1-46be-9598-bf42803eb590}\mpengine.dll 2013-05-09 15:41:05 -------- d-----w- c:\users\sani\4.0 2013-05-09 15:41:04 -------- d-----w- c:\users\sani\.tfo4 2013-05-07 13:54:54 -------- d-----w- c:\users\sani\appdata\roaming\ICAClient 2013-05-07 13:54:37 -------- d-----w- c:\programdata\Citrix 2013-05-07 13:53:52 -------- d-----w- c:\users\sani\appdata\local\Citrix 2013-05-07 13:53:52 -------- d-----w- c:\program files\common files\Citrix 2013-05-07 13:53:51 -------- d-----w- c:\program files\Citrix 2013-04-24 10:46:47 1211752 ----a-w- c:\windows\system32\drivers\ntfs.sys 2013-04-19 17:54:35 94112 ----a-w- c:\windows\system32\WindowsAccessBridge.dll . ==================== Find3M ==================== . 2013-05-02 00:06:08 238872 ------w- c:\windows\system32\MpSigStub.exe 2013-04-12 18:28:42 691592 ----a-w- c:\windows\system32\FlashPlayerApp.exe 2013-04-12 18:28:41 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2013-03-19 05:04:13 3968856 ----a-w- c:\windows\system32\ntkrnlpa.exe 2013-03-19 05:04:10 3913560 ----a-w- c:\windows\system32\ntoskrnl.exe 2013-03-19 04:48:45 38912 ----a-w- c:\windows\system32\csrsrv.dll 2013-03-19 02:49:16 69632 ----a-w- c:\windows\system32\smss.exe 2013-03-17 18:59:03 861088 ----a-w- c:\windows\system32\npdeployJava1.dll 2013-03-17 18:59:03 782240 ----a-w- c:\windows\system32\deployJava1.dll 2013-03-01 03:09:59 2347008 ----a-w- c:\windows\system32\win32k.sys 2013-02-21 10:30:16 1766912 ----a-w- c:\windows\system32\wininet.dll 2013-02-21 10:29:39 2877440 ----a-w- c:\windows\system32\jscript9.dll 2013-02-21 10:29:37 61440 ----a-w- c:\windows\system32\iesetup.dll 2013-02-21 10:29:37 109056 ----a-w- c:\windows\system32\iesysprep.dll 2013-02-19 12:01:03 2706432 ----a-w- c:\windows\system32\mshtml.tlb 2013-02-19 11:10:53 71680 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe 2013-02-12 03:32:45 15872 ----a-w- c:\windows\system32\drivers\usb8023.sys . ============= FINISH: 14:53:24.19 =============== --- --- --- Code:
ATTFilter . UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_2012-11-20.01) . Microsoft Windows 7 Home Premium Boot Device: \Device\HarddiskVolume1 Install Date: 3/7/2012 11:43:14 PM System Uptime: 5/11/2013 2:47:41 PM (0 hours ago) . Motherboard: TOSHIBA | | Portable PC Processor: Intel(R) Core(TM) i3-2310M CPU @ 2.10GHz | CPU | 2100/1333mhz . ==== Disk Partitions ========================= . C: is FIXED (NTFS) - 285 GiB total, 54.303 GiB free. D: is CDROM () E: is Removable F: is CDROM () . ==== Disabled Device Manager Items ============= . Class GUID: Description: Device ID: ACPI\TOS1901\2&DABA3FF&2 Manufacturer: Name: PNP Device ID: ACPI\TOS1901\2&DABA3FF&2 Service: . Class GUID: Description: SM Bus Controller Device ID: PCI\VEN_8086&DEV_1C22&SUBSYS_FF1E1179&REV_04\3&11583659&0&FB Manufacturer: Name: SM Bus Controller PNP Device ID: PCI\VEN_8086&DEV_1C22&SUBSYS_FF1E1179&REV_04\3&11583659&0&FB Service: . Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318} Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows Device ID: ROOT\NET\0000 Manufacturer: Cisco Systems Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows PNP Device ID: ROOT\NET\0000 Service: vpnva . ==== System Restore Points =================== . RP225: 4/23/2013 5:06:49 PM - Windows Update RP226: 4/25/2013 3:00:13 AM - Windows Update RP227: 4/30/2013 7:15:01 PM - Windows Update RP228: 5/4/2013 3:42:51 PM - Windows Update RP229: 5/9/2013 12:05:49 PM - Removed Microsoft Games for Windows - LIVE Redistributable RP230: 5/10/2013 10:38:48 AM - Windows Update RP231: 5/11/2013 2:42:49 PM - Removed Java(TM) 6 Update 31 . ==== Installed Programs ====================== . 2007 Microsoft Office Suite Service Pack 3 (SP3) Adobe Flash Player 11 ActiveX Adobe Flash Player 11 Plugin Adobe Reader X (10.1.6) - Deutsch Apple Application Support Apple Mobile Device Support Apple Software Update Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver Avira Free Antivirus Bonjour CD Art Display 3.0.1504 Beta Cisco AnyConnect Secure Mobility Client Cisco AnyConnect Secure Mobility Client Citrix Authentication Manager Citrix Receiver Citrix Receiver (HDX Flash Redirection) Citrix Receiver Inside Citrix Receiver Updater Citrix Receiver(Aero) Citrix Receiver(DV) Citrix Receiver(USB) Conexant HD Audio Counter-Strike: Source CPUCooL (remove only) DAEMON Tools Lite Dungeon Keeper 2 EASEUS Partition Master 9.1.1 Home Edition Facebook Video Calling 1.2.0.287 Google Chrome Google Earth Plug-in Google Update Helper Hotfix for Microsoft .NET Framework 4 Client Profile (KB2461678) ImgBurn Intel(R) Processor Graphics iTunes Java 7 Update 21 Java Auto Updater Java(TM) SE Development Kit 7 Update 3 JavaFX 2.0.3 SDK JavaFX 2.1.1 JDownloader 0.9 League of Legends Logitech Gaming Software 5.10 Malwarebytes Anti-Malware Version 1.70.0.1100 MATLAB R2011b Microsoft .NET Framework 4 Client Profile Microsoft .NET Framework 4 Client Profile DEU Language Pack Microsoft .NET Framework 4 Extended Microsoft .NET Framework 4 Extended DEU Language Pack Microsoft Office Access MUI (German) 2007 Microsoft Office Excel MUI (German) 2007 Microsoft Office File Validation Add-In Microsoft Office InfoPath MUI (German) 2007 Microsoft Office Outlook MUI (German) 2007 Microsoft Office PowerPoint MUI (German) 2007 Microsoft Office Professional Plus 2007 Microsoft Office Proof (English) 2007 Microsoft Office Proof (French) 2007 Microsoft Office Proof (German) 2007 Microsoft Office Proof (Italian) 2007 Microsoft Office Proofing (German) 2007 Microsoft Office Publisher MUI (German) 2007 Microsoft Office Shared MUI (German) 2007 Microsoft Office Word MUI (German) 2007 Microsoft Silverlight Microsoft Visual C++ 2005 Redistributable Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.51106 Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.51106 Mozilla Firefox 20.0.1 (x86 de) Mozilla Maintenance Service MyFreeCodec Notepad++ Online Plug-in OpenAL Pando Media Booster Portal 2 Project64 1.6 Rainmeter Realm of the Mad God Realtek WLAN Driver Rock of Ages Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870) Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078) Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121) Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405) Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827) Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449) Security Update for Microsoft .NET Framework 4 Client Profile (KB2736428) Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019) Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595) Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642) Security Update for Microsoft .NET Framework 4 Extended (KB2487367) Security Update for Microsoft .NET Framework 4 Extended (KB2656351) Security Update for Microsoft .NET Framework 4 Extended (KB2736428) Security Update for Microsoft .NET Framework 4 Extended (KB2742595) Security Update for Microsoft Office 2007 suites (KB2596615) 32-Bit Edition Security Update for Microsoft Office 2007 suites (KB2596672) 32-Bit Edition Security Update for Microsoft Office 2007 suites (KB2596744) 32-Bit Edition Security Update for Microsoft Office 2007 suites (KB2596754) 32-Bit Edition Security Update for Microsoft Office 2007 suites (KB2596785) 32-Bit Edition Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition Security Update for Microsoft Office 2007 suites (KB2687311) 32-Bit Edition Security Update for Microsoft Office 2007 suites (KB2687439) 32-Bit Edition Security Update for Microsoft Office 2007 suites (KB2687441) 32-Bit Edition Security Update for Microsoft Office 2007 suites (KB2687499) 32-Bit Edition Security Update for Microsoft Office 2007 suites (KB2760416) 32-Bit Edition Security Update for Microsoft Office Excel 2007 (KB2687307) 32-Bit Edition Security Update for Microsoft Office InfoPath 2007 (KB2687440) 32-Bit Edition Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition Security Update for Microsoft Office Publisher 2007 (KB2596705) 32-Bit Edition Security Update for Microsoft Office Word 2007 (KB2760421) 32-Bit Edition Self-service Plug-in Skype™ 6.3 Steam Synaptics Pointing Device Driver System Requirements Lab CYRI System Requirements Lab Test TeamSpeak 3 Client TOSHIBA Web Camera Application Update für Microsoft Office Excel 2007 Help (KB963678) Update für Microsoft Office Outlook 2007 Help (KB963677) Update für Microsoft Office Powerpoint 2007 Help (KB963669) Update für Microsoft Office Word 2007 Help (KB963665) Update for 2007 Microsoft Office System (KB967642) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) Update for Microsoft .NET Framework 4 Extended (KB2468871) Update for Microsoft .NET Framework 4 Extended (KB2533523) Update for Microsoft .NET Framework 4 Extended (KB2600217) Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition Update for Microsoft Office 2007 suites (KB2596802) 32-Bit Edition Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2768021) 32-Bit Edition UxStyle Core Beta Vista Shortcut Manager VLC media player 2.0.0 WBFS Manager 3.0 WhatPulse 1.7.1 WinRAR 4.11 (32-Bit) . ==== Event Viewer Messages From Past Week ======== . 5/9/2013 12:04:00 PM, Error: Microsoft-Windows-WMPNSS-Service [14332] - Service 'WMPNetworkSvc' did not start correctly because CoCreateInstance(CLSID_UPnPDeviceFinder) encountered error '0x80004005'. Verify that the UPnPHost service is running and that the UPnPHost component of Windows is installed properly. . ==== End Of File =========================== |
11.05.2013, 14:12 | #6 |
/// TB-Ausbilder | Laptop Toshiba Satellite || Sehr Schlechte Performance, langsam Okay dann weiter: Scan mit Combofix
__________________ --> Laptop Toshiba Satellite || Sehr Schlechte Performance, langsam |
12.05.2013, 17:58 | #7 |
| Laptop Toshiba Satellite || Sehr Schlechte Performance, langsam Hi, so, Combofix is durch, hier der Log Code:
ATTFilter ComboFix 13-05-11.01 - Sani 05/11/2013 16:48:22.1.4 - x86 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.2766.1849 [GMT 2:00] Running from: c:\users\Sani\Downloads\Trojaboard\ComboFix.exe AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C} SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\users\Sani\4.0 c:\windows\IsUn0407.exe c:\windows\system32\muzapp.exe . . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . . -------\Legacy_NPF . . ((((((((((((((((((((((((( Files Created from 2013-04-11 to 2013-05-11 ))))))))))))))))))))))))))))))) . . 2013-05-11 14:56 . 2013-05-11 15:06 -------- d-----w- c:\users\Sani\AppData\Local\temp 2013-05-11 14:56 . 2013-05-11 14:56 -------- d-----w- c:\users\Default\AppData\Local\temp 2013-05-10 08:39 . 2013-04-10 03:08 6906960 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{077C3F75-F9F1-46BE-9598-BF42803EB590}\mpengine.dll 2013-05-09 15:41 . 2013-05-09 15:42 -------- d-----w- c:\users\Sani\.tfo4 2013-05-07 13:54 . 2013-05-07 13:59 -------- d-----w- c:\users\Sani\AppData\Roaming\ICAClient 2013-05-07 13:54 . 2013-05-07 13:55 -------- d-----w- c:\programdata\Citrix 2013-05-07 13:53 . 2013-05-07 13:55 -------- d-----w- c:\users\Sani\AppData\Local\Citrix 2013-05-07 13:53 . 2013-05-07 13:53 -------- d-----w- c:\program files\Common Files\Citrix 2013-05-07 13:53 . 2013-05-07 13:55 -------- d-----w- c:\program files\Citrix 2013-04-24 10:46 . 2013-04-12 13:45 1211752 ----a-w- c:\windows\system32\drivers\ntfs.sys 2013-04-19 18:06 . 2013-04-19 18:06 -------- d-----w- c:\program files\Common Files\Java 2013-04-19 17:54 . 2013-04-04 03:35 94112 ----a-w- c:\windows\system32\WindowsAccessBridge.dll 2013-04-17 19:09 . 2013-04-17 19:09 -------- d-----w- c:\program files\Common Files\Skype . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2013-05-02 00:06 . 2012-03-08 00:23 238872 ------w- c:\windows\system32\MpSigStub.exe 2013-04-12 18:28 . 2012-03-30 10:47 691592 ----a-w- c:\windows\system32\FlashPlayerApp.exe 2013-04-12 18:28 . 2012-03-08 01:24 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2013-03-19 05:04 . 2013-04-10 17:38 3968856 ----a-w- c:\windows\system32\ntkrnlpa.exe 2013-03-19 05:04 . 2013-04-10 17:38 3913560 ----a-w- c:\windows\system32\ntoskrnl.exe 2013-03-19 04:48 . 2013-04-10 17:38 38912 ----a-w- c:\windows\system32\csrsrv.dll 2013-03-19 02:49 . 2013-04-10 17:38 69632 ----a-w- c:\windows\system32\smss.exe 2013-03-17 18:59 . 2012-03-21 11:11 861088 ----a-w- c:\windows\system32\npdeployJava1.dll 2013-03-17 18:59 . 2012-03-08 01:28 782240 ----a-w- c:\windows\system32\deployJava1.dll 2013-03-16 02:01 . 2013-03-16 02:01 745472 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe 2013-03-16 02:01 . 2013-03-16 02:01 73728 ----a-w- c:\windows\system32\SetIEInstalledDate.exe 2013-03-16 02:01 . 2013-03-16 02:01 523264 ----a-w- c:\windows\system32\vbscript.dll 2013-03-16 02:01 . 2013-03-16 02:01 48640 ----a-w- c:\windows\system32\mshtmler.dll 2013-03-16 02:01 . 2013-03-16 02:01 38400 ----a-w- c:\windows\system32\imgutil.dll 2013-03-16 02:01 . 2013-03-16 02:01 185344 ----a-w- c:\windows\system32\elshyph.dll 2013-03-16 02:01 . 2013-03-16 02:01 158720 ----a-w- c:\windows\system32\msls31.dll 2013-03-16 02:01 . 2013-03-16 02:01 150528 ----a-w- c:\windows\system32\iexpress.exe 2013-03-16 02:01 . 2013-03-16 02:01 138752 ----a-w- c:\windows\system32\wextract.exe 2013-03-16 02:01 . 2013-03-16 02:01 137216 ----a-w- c:\windows\system32\ieUnatt.exe 2013-03-16 02:01 . 2013-03-16 02:01 12800 ----a-w- c:\windows\system32\mshta.exe 2013-03-16 02:01 . 2013-03-16 02:01 110592 ----a-w- c:\windows\system32\IEAdvpack.dll 2013-03-16 02:01 . 2013-03-16 02:01 719360 ----a-w- c:\windows\system32\mshtmlmedia.dll 2013-03-16 02:01 . 2013-03-16 02:01 61952 ----a-w- c:\windows\system32\tdc.ocx 2013-03-16 02:01 . 2013-03-16 02:01 361984 ----a-w- c:\windows\system32\html.iec 2013-03-16 02:01 . 2013-03-16 02:01 23040 ----a-w- c:\windows\system32\licmgr10.dll 2013-03-16 02:01 . 2013-03-16 02:01 1441280 ----a-w- c:\windows\system32\inetcpl.cpl 2013-03-01 03:09 . 2013-04-10 17:38 2347008 ----a-w- c:\windows\system32\win32k.sys 2013-02-21 10:30 . 2013-04-10 18:28 1766912 ----a-w- c:\windows\system32\wininet.dll 2013-02-21 10:29 . 2013-04-10 18:28 2877440 ----a-w- c:\windows\system32\jscript9.dll 2013-02-21 10:29 . 2013-04-10 18:28 61440 ----a-w- c:\windows\system32\iesetup.dll 2013-02-21 10:29 . 2013-04-10 18:28 109056 ----a-w- c:\windows\system32\iesysprep.dll 2013-02-19 12:01 . 2013-04-10 18:28 2706432 ----a-w- c:\windows\system32\mshtml.tlb 2013-02-19 11:10 . 2013-04-10 18:28 71680 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe 2013-02-12 03:32 . 2013-03-15 11:23 15872 ----a-w- c:\windows\system32\drivers\usb8023.sys 2013-04-14 00:06 . 2013-04-14 00:06 263064 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-04-07 142680] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-04-07 175960] "Persistence"="c:\windows\system32\igfxpers.exe" [2011-04-07 177496] "avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2012-08-08 348664] "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-08-14 1348904] "SmartAudio"="c:\program files\CONEXANT\SAII\SAIICpl.exe" [2010-12-14 316032] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-12-03 946352] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2013-02-20 152392] "ConnectionCenter"="c:\program files\Citrix\ICA Client\concentr.exe" [2012-12-14 383544] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Rainmeter.lnk - c:\program files\Rainmeter\Rainmeter.exe [2013-5-5 37048] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows] "AppInit_DLLs"=c:\progra~1\Citrix\ICACLI~1\RSHook.dll . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon] 2013-01-28 12:08 59720 ----a-w- c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Facebook Update] 2012-07-11 23:19 138096 ----atw- c:\users\Sani\AppData\Local\Facebook\Update\FacebookUpdate.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype] 2013-02-28 16:50 18642024 ----a-r- c:\program files\Skype\Phone\Skype.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Start WingMan Profiler] 2010-06-14 23:10 153672 ----a-w- c:\program files\Logitech\Gaming Software\LWEMon.exe . [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-] "DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" -autorun "Facebook Update"="c:\users\Sani\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" "Cisco AnyConnect Secure Mobility Agent for Windows"="c:\program files\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe" -minimized . R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [x] R3 epmntdrv;epmntdrv;c:\windows\system32\epmntdrv.sys [x] R3 EuGdiDrv;EuGdiDrv;c:\windows\system32\EuGdiDrv.sys [x] R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x] R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [x] R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [x] S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [x] S1 ctxusbm;Citrix USB Monitor Driver;c:\windows\system32\DRIVERS\ctxusbm.sys [x] S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x] S2 AntiVirSchedulerService;Avira Planer;c:\program files\Avira\AntiVir Desktop\sched.exe [x] S2 UnsignedThemes;Unsigned Themes;c:\windows\UnsignedThemesSvc.exe [x] S2 uxpatch;uxpatch;c:\windows\system32\drivers\uxpatch.sys [x] S2 vpnagent;Cisco AnyConnect Secure Mobility Agent;c:\program files\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe [x] S3 acsock;acsock;c:\windows\system32\DRIVERS\acsock.sys [x] S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x86.sys [x] S3 MEI;Intel(R) Management Engine Interface ;c:\windows\system32\DRIVERS\HECI.sys [x] S3 PGEffect;Pangu effect driver;c:\windows\system32\DRIVERS\pgeffect.sys [x] S3 RTL8192Ce;Realtek Wireless LAN 802.11n PCI-E NIC Driver;c:\windows\system32\DRIVERS\rtl8192Ce.sys [x] . . --- Other Services/Drivers In Memory --- . *NewlyCreated* - WS2IFSL . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] LocalServiceAndNoImpersonation REG_MULTI_SZ SSDPSRV upnphost SCardSvr TBS fdrespub AppIDSvc QWAVE wcncsvc Mcx2Svc SensrSvc GPSvcGroup REG_MULTI_SZ GPSvc . HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - LocalService FontCache . . [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}] 2013-04-10 17:26 1642448 ----a-w- c:\program files\Google\Chrome\Application\26.0.1410.64\Installer\chrmstp.exe . Contents of the 'Scheduled Tasks' folder . 2013-05-11 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-03-30 18:28] . 2013-05-08 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2989433806-3352534356-4191440-1000Core.job - c:\users\Sani\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-05-13 23:19] . 2013-05-11 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2989433806-3352534356-4191440-1000UA.job - c:\users\Sani\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-05-13 23:19] . 2013-05-11 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2012-11-12 07:58] . 2013-05-11 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2012-11-12 07:58] . 2013-05-11 c:\windows\Tasks\MATLAB R2011b Startup Accelerator.job - c:\program files\MATLAB\R2011b\bin\win32\MATLABStartupAccelerator.exe [2012-03-20 14:36] . . ------- Supplementary Scan ------- . uInternet Settings,ProxyOverride = *.local IE: Nach Microsoft E&xel exportieren - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000 TCP: DhcpNameServer = 192.168.90.254 FF - ProfilePath - c:\users\Sani\AppData\Roaming\Mozilla\Firefox\Profiles\079emyz8.default\ FF - prefs.js: browser.search.selectedEngine - Wikipedia (de) FF - prefs.js: browser.startup.homepage - about:home FF - prefs.js: network.proxy.type - 0 FF - ExtSQL: 2013-03-18 19:31; mediahint@jetpack; c:\users\Sani\AppData\Roaming\Mozilla\Firefox\Profiles\079emyz8.default\extensions\mediahint@jetpack.xpi . - - - - ORPHANS REMOVED - - - - . HKCU-Run-WhatPulse - c:\program files\WhatPulse\WhatPulse\whatpulse.exe MSConfigStartUp-KiesAirMessage - c:\program files\Samsung\Kies\KiesAirMessage.exe MSConfigStartUp-KiesPDLR - c:\program files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe MSConfigStartUp-KiesPreload - c:\program files\Samsung\Kies\Kies.exe MSConfigStartUp-KiesTrayAgent - c:\program files\Samsung\Kies\KiesTrayAgent.exe AddRemove-Dungeon Keeper II - c:\windows\IsUn0407.exe . . . --------------------- LOCKED REGISTRY KEYS --------------------- . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . ------------------------ Other Running Processes ------------------------ . c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe c:\program files\Avira\AntiVir Desktop\avguard.exe c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe c:\program files\Bonjour\mDNSResponder.exe c:\program files\CPUCooL\CooLSrv.exe c:\program files\Avira\AntiVir Desktop\avshadow.exe c:\windows\system32\conhost.exe c:\windows\System32\WUDFHost.exe c:\program files\Windows Media Player\wmpnetwk.exe c:\windows\system32\taskhost.exe c:\windows\system32\conhost.exe c:\program files\Citrix\Receiver\Receiver.exe c:\program files\Citrix\SelfServicePlugin\SelfServicePlugin.exe c:\program files\Citrix\ICA Client\wfcrun32.exe c:\program files\iPod\bin\iPodService.exe . ************************************************************************** . Completion time: 2013-05-11 17:10:07 - machine was rebooted ComboFix-quarantined-files.txt 2013-05-11 15:10 . Pre-Run: 75,380,895,744 bytes free Post-Run: 77,823,049,728 bytes free . - - End Of File - - B3233035A61C925EF4C994C3CA46C441 |
12.05.2013, 20:52 | #8 |
/// TB-Ausbilder | Laptop Toshiba Satellite || Sehr Schlechte Performance, langsam Gut! Soweit ich das sehe haben wir damit alles Schädliche entfernt. Um sicher sein zu können müssen jetzt noch ein paar Kontrollen machen und werden dann deinen Computer noch auf einen sicheren Stand bringen. Da diese Scans jetzt sehr lange dauern können bitte ich dich mir erst wieder zu schreiben, wenn du auch wirklich alles erledigt hast oder Probleme auftreten sollten. Schritt 1: Quick-Scan mit Malwarebytes Downloade Dir bitte Malwarebytes Anti-MalwareSchritt 2: Hinweis: Der Scan kann sehr lange (einige Stunden) dauern! Schritt 3: Scan mit SecurityCheck Downloade Dir bitte SecurityCheck und:
Schritt 4: Windows-Defender abschalten Da du einen anderen Virenscanner benutzt solltest du dringend den windowseigenen Scanner abschalten:
Mehr zu den Hintergründen und einer tieferen Deaktivierung: LINK
__________________ Digitale Freibeuter gegen Malware! Keine Hilfe per PM! |
15.05.2013, 16:53 | #9 |
/// TB-Ausbilder | Laptop Toshiba Satellite || Sehr Schlechte Performance, langsam Hallo, benötigst Du noch weiterhin Hilfe ? Sollte ich innerhalb der nächsten 24 Stunden keine Antwort von dir erhalten, werde ich dein Thema aus meinen Abos nehmen und bekomme dadurch keine Nachricht über neue Antworten. Das Verschwinden der Symptome bedeutet nicht, dass dein System schon sauber ist
__________________ Digitale Freibeuter gegen Malware! Keine Hilfe per PM! |
18.05.2013, 10:30 | #10 |
/// TB-Ausbilder | Laptop Toshiba Satellite || Sehr Schlechte Performance, langsam Fehlende Rückmeldung Dieses Thema wurde aus den Abos gelöscht. Somit bekomm ich keine Benachrichtigung über neue Antworten. PM an mich falls Du denoch weiter machen willst. Keine Logfiles einsenden, nur kurzer Hinweis, nachdem du deine Logfiles hier eingestellt hast. Hinweis: Das Verschwinden der Symptome bedeutet nicht, dass Dein Rechner schon sauber ist. Jeder andere bitte hier klicken und einen eigenen Thread erstellen
__________________ Digitale Freibeuter gegen Malware! Keine Hilfe per PM! |
Themen zu Laptop Toshiba Satellite || Sehr Schlechte Performance, langsam |
adblock, avira, bho, bonjour, checkliste, computer, desktop, error, excel, failed, firefox, flash player, google, home, install.exe, langsam, logfile, object, programm, realtek, registry, scan, schlechte performance, security, software, svchost.exe, system, teamspeak, windows |