Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung
Rechner nach ein paar Monaten deutlich langsamer - Trojaner?

Rechner nach ein paar Monaten deutlich langsamer - Trojaner?


Log-Analyse und Auswertung: Rechner nach ein paar Monaten deutlich langsamer - Trojaner?

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

 
Vorheriger Beitrag Vorheriger Beitrag   Nächster Beitrag Nächster Beitrag
Alt 17.05.2014, 14:58   #1
LaraMary
 
Rechner nach ein paar Monaten deutlich langsamer - Trojaner? - Standard

Rechner nach ein paar Monaten deutlich langsamer - Trojaner?


Hallo zusammen,

meine Oma hat sich vor ein paar Monaten ihr erstes Notebook gekauft. Nun klagt sie darüber, dass ihr PC super langsam geworden ist... Ich hab das getestet, und das kann wirklich nicht normal sein, vor allem, weil sie ihn gar nicht soooo oft benutzt.

Ich habe die Vermutung, dass evtl ein Trojaner drauf sein könnte oder andere Schadsoftware. Vielleicht könnt ihr mir ja helfen.

Folgende Scans konnte ich bisher machen:

Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-05-2014
Ran by Dorothea (administrator) on OMAPC on 17-05-2014 10:11:31
Running from C:\Users\Dorothea\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\COLNTHC3
Platform: Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
() C:\Program Files (x86)\LPT\srpts.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
() C:\Users\Dorothea\AppData\Roaming\VOPackage\VOsrv.exe
(McAfee, Inc.) C:\Program Files\mcafee\msc\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
(ASUS) C:\Program Files\ASUS\P4G\InsOnSrv.exe
() C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\AMCore\mcshield.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(McAfee, Inc.) C:\Program Files\mcafee\vul\McVulCtr.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files\ASUS\P4G\InsOnWMI.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McUICnt.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(PC Utilities Software Limited) C:\Program Files (x86)\Optimizer Pro\OptProSmartScan.exe
(PC Utilities Software Limited) C:\Program Files (x86)\Optimizer Pro\OptProReminder.exe
(MyPCBackup.com) C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4406.1205_x64__8wekyb3d8bbwe\LiveComm.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Config.Msi\66437e64.rbf
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(Smartbar) C:\Users\Dorothea\AppData\Local\Smartbar\Application\Smartbar.exe


==================== Registry (Whitelisted) ==================

HKLM-x32\...\Run: [mcpltui_exe] => C:\Program Files\McAfee.com\Agent\mcagent.exe [537992 2014-01-28] (McAfee, Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-14] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [180304 2014-04-15] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-2143913025-1667243613-3775918603-1001\...\Run: [Optimizer Pro] => C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe [135128 2014-04-22] (PC Utilities Software Limited)
HKU\S-1-5-21-2143913025-1667243613-3775918603-1001\...\Run: [Browser Infrastructure Helper] => C:\Users\Dorothea\AppData\Local\Smartbar\Application\Smartbar.exe [28192 2014-05-05] (Smartbar)
AppInit_DLLs: C:\PROGRA~2\OPTIMI~1\OPTPRO~3.DLL => C:\Program Files (x86)\Optimizer Pro\OptProCrash_x64.dll [2721072 2014-04-26] ()
AppInit_DLLs-x32: c:\progra~2\optimi~1\optpro~2.dll => C:\Program Files (x86)\Optimizer Pro\OptProCrash.dll [3000792 2014-04-26] ()
Startup: C:\Users\Dorothea\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
ShortcutTarget: MyPC Backup.lnk -> C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe (MyPCBackup.com)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?publisher=ShoppingHelper&dpid=OB_[[PubID]]_CH&co=DE&userid=8b77cece-85d9-f863-ca98-033f55e63e71&searchtype=ds&q={searchTerms}&installDate={installDate}&barcodeid={barcodeID}&um={UM}
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hp&ts=1398531032&from=tugs&uid=HGSTXHTS545050A7E680_TMA55CPY1RMTPM1RMTPMX
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snapdo.com/?publisher=ShoppingHelper&dpid=OB_[[PubID]]_CH&co=DE&userid=8b77cece-85d9-f863-ca98-033f55e63e71&searchtype=ds&q={searchTerms}&installDate={installDate}&barcodeid={barcodeID}&um={UM}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1398531032&from=tugs&uid=HGSTXHTS545050A7E680_TMA55CPY1RMTPM1RMTPMX&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hp&ts=1398531032&from=tugs&uid=HGSTXHTS545050A7E680_TMA55CPY1RMTPM1RMTPMX
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://istart.webssearches.com/?type=hp&ts=1398531032&from=tugs&uid=HGSTXHTS545050A7E680_TMA55CPY1RMTPM1RMTPMX
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1398531032&from=tugs&uid=HGSTXHTS545050A7E680_TMA55CPY1RMTPM1RMTPMX&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1398531032&from=tugs&uid=HGSTXHTS545050A7E680_TMA55CPY1RMTPM1RMTPMX&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hp&ts=1398531032&from=tugs&uid=HGSTXHTS545050A7E680_TMA55CPY1RMTPM1RMTPMX
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://istart.webssearches.com/?type=hp&ts=1398531032&from=tugs&uid=HGSTXHTS545050A7E680_TMA55CPY1RMTPM1RMTPMX
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1398531032&from=tugs&uid=HGSTXHTS545050A7E680_TMA55CPY1RMTPM1RMTPMX&q={searchTerms}
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1398531032&from=tugs&uid=HGSTXHTS545050A7E680_TMA55CPY1RMTPM1RMTPMX&q={searchTerms}
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1398531032&from=tugs&uid=HGSTXHTS545050A7E680_TMA55CPY1RMTPM1RMTPMX&q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS
SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=ShoppingHelper&dpid=OB_[[PubID]]_CH&co=DE&userid=8b77cece-85d9-f863-ca98-033f55e63e71&searchtype=ds&q={searchTerms}&installDate={installDate}&barcodeid={barcodeID}&um={UM}
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=ShoppingHelper&dpid=OB_[[PubID]]_CH&co=DE&userid=8b77cece-85d9-f863-ca98-033f55e63e71&searchtype=ds&q={searchTerms}&installDate={installDate}&barcodeid={barcodeID}&um={UM}
BHO: SmartbarInternetExplorerBHOEngine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\Windows\system32\mscoree.dll (Microsoft Corporation)
BHO: Adblock IE - {667BEE43-20BD-4CE3-94AC-E63E04D4B191} - C:\Program Files\MGTEK\Adblock IE\adblockie.dll (MGTEK)
BHO-x32: SmartbarInternetExplorerBHOEngine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: Adblock IE - {667BEE43-20BD-4CE3-94AC-E63E04D4B191} - C:\Program Files (x86)\MGTEK\Adblock IE\adblockie.dll (MGTEK)
Toolbar: HKLM - Shopping Helper Smartbar - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\system32\mscoree.dll (Microsoft Corporation)
Toolbar: HKLM-x32 - Shopping Helper Smartbar - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files\mcafee\msc\McSnIePl64.dll (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files (x86)\McAfee\msc\McSnIePl.dll (McAfee, Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF Plugin: @mcafee.com/MSC,version=10 - c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 - c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2013-04-26]

==================== Services (Whitelisted) =================

R2 70e6ca8c; C:\Program Files (x86)\Optimizer Pro\OptProCrashSvc.dll [186496 2014-04-26] ()
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-14] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-14] (Avira Operations GmbH & Co. KG)
R3 ASUS InstantOn; C:\Program Files\ASUS\P4G\InsOnSrv.exe [277120 2013-06-19] (ASUS)
R3 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe [72192 2012-12-19] ()
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [122448 2014-04-15] (Avira Operations GmbH & Co. KG)
S2 BackupStack; C:\Program Files (x86)\MyPC Backup\BackupStack.exe [36392 2014-03-14] (Just Develop It)
R3 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R3 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)
R3 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 LPTSystemUpdater; C:\Program Files (x86)\LPT\srpts.exe [32288 2014-02-09] ()
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [178528 2014-01-28] (McAfee, Inc.)
S3 McAWFwk; C:\Program Files\Common Files\mcafee\ActWiz\McAWFwk.exe [334760 2012-12-21] (McAfee, Inc.)
R3 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [602944 2013-08-02] (McAfee, Inc.)
S4 McOobeSv2; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R3 McProxy; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R3 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1025712 2014-01-21] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-01-27] (McAfee, Inc.)
R2 mfevtp; C:\windows\system32\mfevtps.exe [185792 2014-01-27] (McAfee, Inc.)
R3 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 vosr; C:\Users\Dorothea\AppData\Roaming\VOPackage\VOsrv.exe [355328 2014-04-26] ()
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-10-25] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [70928 2013-11-08] (ASUS Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2014-02-14] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131576 2014-02-14] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-02-14] (Avira Operations GmbH & Co. KG)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70592 2014-01-27] (McAfee, Inc.)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
R2 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [180272 2014-01-27] (McAfee, Inc.)
R2 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [311600 2014-01-27] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [69352 2014-01-27] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [520696 2014-01-27] (McAfee, Inc.)
R2 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [783864 2014-01-27] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [422712 2014-01-21] (McAfee, Inc.)
S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [96592 2014-01-21] (McAfee, Inc.)
R2 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [344688 2014-01-27] (McAfee, Inc.)
U0 msahci; 

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-17 10:11 - 2014-05-17 10:11 - 00000000 ____D () C:\FRST
2014-05-17 10:02 - 2014-05-17 10:03 - 00000000 ____D () C:\Users\Dorothea\AppData\Local\LPT
2014-05-17 10:02 - 2014-05-17 10:02 - 00000478 _____ () C:\Users\Dorothea\Desktop\defogger_disable.log
2014-05-17 10:02 - 2014-05-17 10:02 - 00000000 _____ () C:\Users\Dorothea\defogger_reenable
2014-05-17 09:59 - 2014-05-17 09:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2014-05-04 18:09 - 2014-04-29 16:14 - 19275264 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-04 18:09 - 2014-04-29 14:47 - 14357504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-04 18:09 - 2014-04-29 14:36 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-04 18:09 - 2014-04-29 14:25 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-27 16:19 - 2014-05-17 10:10 - 00206496 _____ () C:\Windows\WindowsUpdate.log
2014-04-27 13:35 - 2014-04-27 13:35 - 00002778 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-04-27 13:35 - 2014-04-27 13:35 - 00000824 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-04-27 13:35 - 2014-04-27 13:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-04-27 13:35 - 2014-04-27 13:35 - 00000000 ____D () C:\Program Files\CCleaner
2014-04-27 13:29 - 2014-04-27 13:29 - 03710504 _____ (Piriform Ltd) C:\Users\Dorothea\Downloads\ccsetup412_slim.exe
2014-04-27 13:29 - 2014-04-27 13:29 - 03710504 _____ (Piriform Ltd) C:\Users\Dorothea\Downloads\ccsetup412_slim (1).exe
2014-04-27 13:15 - 2014-04-27 13:55 - 00001059 _____ () C:\Users\Dorothea\Desktop\Continue VuuPC Installation.lnk
2014-04-26 19:03 - 2014-05-17 10:03 - 00000000 ____D () C:\Program Files (x86)\LPT
2014-04-26 19:03 - 2014-04-26 19:03 - 00000318 _____ () C:\Users\Dorothea\AppData\Roaming\aps.uninstall.scan.results
2014-04-26 19:03 - 2014-04-26 19:03 - 00000000 ____D () C:\Users\Dorothea\AppData\Local\com
2014-04-26 19:01 - 2014-05-17 10:02 - 00000000 ____D () C:\Users\Dorothea\AppData\Local\Smartbar
2014-04-26 19:01 - 2014-04-26 19:01 - 01107768 _____ (AnyProtect.com) C:\Users\Dorothea\AppData\Local\nsj930C.tmp
2014-04-26 19:01 - 2014-04-26 19:01 - 00000000 ____D () C:\Users\Dorothea\AppData\Roaming\VOPackage
2014-04-26 19:01 - 2014-04-26 19:01 - 00000000 ____D () C:\Users\Dorothea\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage
2014-04-26 19:00 - 2014-04-26 19:00 - 00001164 _____ () C:\Users\Public\Desktop\Activeris AntiMalware.lnk
2014-04-26 19:00 - 2014-04-26 19:00 - 00001068 _____ () C:\Users\Dorothea\Desktop\Optimizer Pro.lnk
2014-04-26 19:00 - 2014-04-26 19:00 - 00000000 ____D () C:\Users\Dorothea\Documents\Optimizer Pro
2014-04-26 19:00 - 2014-04-26 19:00 - 00000000 ____D () C:\Users\Dorothea\AppData\Roaming\Optimizer Pro
2014-04-26 19:00 - 2014-04-26 19:00 - 00000000 ____D () C:\Users\Dorothea\AppData\Roaming\Activeris
2014-04-26 19:00 - 2014-04-26 19:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Optimizer Pro v3.2
2014-04-26 19:00 - 2014-04-26 19:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Activeris AntiMalware
2014-04-26 19:00 - 2014-04-26 19:00 - 00000000 ____D () C:\ProgramData\Activeris
2014-04-26 19:00 - 2014-04-26 19:00 - 00000000 ____D () C:\Program Files (x86)\Optimizer Pro
2014-04-26 19:00 - 2014-04-26 19:00 - 00000000 ____D () C:\Program Files (x86)\Activeris AntiMalware
2014-04-26 19:00 - 2012-09-26 19:03 - 00020480 _____ () C:\Windows\system32\acrisnative64.exe
2014-04-26 18:59 - 2014-04-26 18:59 - 00502184 _____ () C:\Users\Dorothea\Downloads\Player Setup (1).exe
2014-04-26 18:59 - 2014-04-26 18:59 - 00001139 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-04-26 18:59 - 2014-04-26 18:59 - 00000000 ____D () C:\Program Files\003
2014-04-26 18:58 - 2014-04-26 18:58 - 00502184 _____ () C:\Users\Dorothea\Downloads\Player Setup.exe
2014-04-26 18:57 - 2014-04-26 18:57 - 00458136 _____ () C:\Users\Dorothea\Downloads\FreeVideoPlayerSetup.exe
2014-04-26 18:57 - 2014-04-26 18:57 - 00458136 _____ () C:\Users\Dorothea\Downloads\FreeVideoPlayerSetup (1).exe
2014-04-26 18:54 - 2014-04-26 18:54 - 00001975 _____ () C:\Users\Dorothea\Desktop\Sync Folder.lnk
2014-04-26 18:51 - 2014-04-26 18:54 - 00000000 ____D () C:\Program Files (x86)\MyPC Backup
2014-04-26 18:51 - 2014-04-26 18:51 - 00001093 _____ () C:\Users\Dorothea\Desktop\MyPC Backup.lnk
2014-04-26 18:51 - 2014-04-26 18:51 - 00000000 ____D () C:\Users\Dorothea\AppData\Roaming\Uniblue
2014-04-26 18:51 - 2014-04-26 18:51 - 00000000 ____D () C:\Users\Dorothea\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
2014-04-26 18:51 - 2014-04-26 18:51 - 00000000 ____D () C:\Program Files (x86)\Uniblue
2014-04-26 18:51 - 2014-04-26 18:51 - 00000000 ____D () C:\Program Files (x86)\MediaPlayerplus
2014-04-26 18:50 - 2014-04-26 18:50 - 00000000 ____D () C:\Users\Dorothea\AppData\Local\fst_de_6
2014-04-26 18:50 - 2014-04-26 18:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\free_soft_today
2014-04-26 18:50 - 2014-04-26 18:50 - 00000000 ____D () C:\Program Files (x86)\fst_de_6
2014-04-26 18:50 - 2014-04-26 18:50 - 00000000 ____D () C:\Program Files (x86)\Freeven pro 1.2

==================== One Month Modified Files and Folders =======

2014-05-17 10:11 - 2014-05-17 10:11 - 00000000 ____D () C:\FRST
2014-05-17 10:10 - 2014-04-27 16:19 - 00206496 _____ () C:\Windows\WindowsUpdate.log
2014-05-17 10:03 - 2014-05-17 10:02 - 00000000 ____D () C:\Users\Dorothea\AppData\Local\LPT
2014-05-17 10:03 - 2014-04-26 19:03 - 00000000 ____D () C:\Program Files (x86)\LPT
2014-05-17 10:03 - 2014-02-11 18:04 - 00000000 ____D () C:\Users\Dorothea\AppData\Local\VirtualStore
2014-05-17 10:03 - 2013-12-24 01:09 - 00003268 _____ () C:\Windows\System32\Tasks\AsusVibeSchedule
2014-05-17 10:03 - 2013-12-24 01:04 - 00003024 _____ () C:\Windows\System32\Tasks\ASUS USB Charger Plus
2014-05-17 10:03 - 2013-12-24 00:56 - 00003540 _____ () C:\Windows\System32\Tasks\ASUS Smart Gesture Launcher
2014-05-17 10:02 - 2014-05-17 10:02 - 00000478 _____ () C:\Users\Dorothea\Desktop\defogger_disable.log
2014-05-17 10:02 - 2014-05-17 10:02 - 00000000 _____ () C:\Users\Dorothea\defogger_reenable
2014-05-17 10:02 - 2014-04-26 19:01 - 00000000 ____D () C:\Users\Dorothea\AppData\Local\Smartbar
2014-05-17 10:02 - 2014-02-11 18:25 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2143913025-1667243613-3775918603-1001
2014-05-17 10:02 - 2014-02-11 18:03 - 00000000 ____D () C:\Users\Dorothea
2014-05-17 10:01 - 2014-02-11 18:06 - 00000062 _____ () C:\Users\Dorothea\AppData\Roaming\sp_data.sys
2014-05-17 10:00 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\sru
2014-05-17 09:59 - 2014-05-17 09:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2014-05-17 09:59 - 2013-12-24 01:05 - 00002988 _____ () C:\Windows\System32\Tasks\ASUS Splendid ACMON
2014-05-17 09:59 - 2013-12-24 01:04 - 00003474 _____ () C:\Windows\System32\Tasks\ASUS Live Update1
2014-05-17 09:59 - 2013-12-24 01:04 - 00003464 _____ () C:\Windows\System32\Tasks\ASUS Live Update2
2014-05-17 09:59 - 2013-12-24 01:03 - 00003052 _____ () C:\Windows\System32\Tasks\ASUS P4G
2014-05-17 09:56 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\AUInstallAgent
2014-05-04 18:23 - 2013-12-24 01:05 - 00003004 _____ () C:\Windows\System32\Tasks\ASUS Splendid ColorU
2014-04-29 16:14 - 2014-05-04 18:09 - 19275264 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-29 14:47 - 2014-05-04 18:09 - 14357504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-29 14:36 - 2014-05-04 18:09 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-29 14:25 - 2014-05-04 18:09 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-27 13:55 - 2014-04-27 13:15 - 00001059 _____ () C:\Users\Dorothea\Desktop\Continue VuuPC Installation.lnk
2014-04-27 13:39 - 2012-08-03 00:24 - 00000000 ____D () C:\Windows\Panther
2014-04-27 13:35 - 2014-04-27 13:35 - 00002778 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-04-27 13:35 - 2014-04-27 13:35 - 00000824 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-04-27 13:35 - 2014-04-27 13:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-04-27 13:35 - 2014-04-27 13:35 - 00000000 ____D () C:\Program Files\CCleaner
2014-04-27 13:29 - 2014-04-27 13:29 - 03710504 _____ (Piriform Ltd) C:\Users\Dorothea\Downloads\ccsetup412_slim.exe
2014-04-27 13:29 - 2014-04-27 13:29 - 03710504 _____ (Piriform Ltd) C:\Users\Dorothea\Downloads\ccsetup412_slim (1).exe
2014-04-27 13:24 - 2012-07-26 09:22 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-27 13:23 - 2012-07-26 07:26 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-04-26 19:03 - 2014-04-26 19:03 - 00000318 _____ () C:\Users\Dorothea\AppData\Roaming\aps.uninstall.scan.results
2014-04-26 19:03 - 2014-04-26 19:03 - 00000000 ____D () C:\Users\Dorothea\AppData\Local\com
2014-04-26 19:01 - 2014-04-26 19:01 - 01107768 _____ (AnyProtect.com) C:\Users\Dorothea\AppData\Local\nsj930C.tmp
2014-04-26 19:01 - 2014-04-26 19:01 - 00000000 ____D () C:\Users\Dorothea\AppData\Roaming\VOPackage
2014-04-26 19:01 - 2014-04-26 19:01 - 00000000 ____D () C:\Users\Dorothea\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage
2014-04-26 19:00 - 2014-04-26 19:00 - 00001164 _____ () C:\Users\Public\Desktop\Activeris AntiMalware.lnk
2014-04-26 19:00 - 2014-04-26 19:00 - 00001068 _____ () C:\Users\Dorothea\Desktop\Optimizer Pro.lnk
2014-04-26 19:00 - 2014-04-26 19:00 - 00000000 ____D () C:\Users\Dorothea\Documents\Optimizer Pro
2014-04-26 19:00 - 2014-04-26 19:00 - 00000000 ____D () C:\Users\Dorothea\AppData\Roaming\Optimizer Pro
2014-04-26 19:00 - 2014-04-26 19:00 - 00000000 ____D () C:\Users\Dorothea\AppData\Roaming\Activeris
2014-04-26 19:00 - 2014-04-26 19:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Optimizer Pro v3.2
2014-04-26 19:00 - 2014-04-26 19:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Activeris AntiMalware
2014-04-26 19:00 - 2014-04-26 19:00 - 00000000 ____D () C:\ProgramData\Activeris
2014-04-26 19:00 - 2014-04-26 19:00 - 00000000 ____D () C:\Program Files (x86)\Optimizer Pro
2014-04-26 19:00 - 2014-04-26 19:00 - 00000000 ____D () C:\Program Files (x86)\Activeris AntiMalware
2014-04-26 18:59 - 2014-04-26 18:59 - 00502184 _____ () C:\Users\Dorothea\Downloads\Player Setup (1).exe
2014-04-26 18:59 - 2014-04-26 18:59 - 00001139 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-04-26 18:59 - 2014-04-26 18:59 - 00000000 ____D () C:\Program Files\003
2014-04-26 18:59 - 2014-02-18 16:09 - 00000000 ____D () C:\ProgramData\Package Cache
2014-04-26 18:59 - 2014-02-18 16:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-04-26 18:58 - 2014-04-26 18:58 - 00502184 _____ () C:\Users\Dorothea\Downloads\Player Setup.exe
2014-04-26 18:58 - 2014-02-18 16:09 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-04-26 18:57 - 2014-04-26 18:57 - 00458136 _____ () C:\Users\Dorothea\Downloads\FreeVideoPlayerSetup.exe
2014-04-26 18:57 - 2014-04-26 18:57 - 00458136 _____ () C:\Users\Dorothea\Downloads\FreeVideoPlayerSetup (1).exe
2014-04-26 18:54 - 2014-04-26 18:54 - 00001975 _____ () C:\Users\Dorothea\Desktop\Sync Folder.lnk
2014-04-26 18:54 - 2014-04-26 18:51 - 00000000 ____D () C:\Program Files (x86)\MyPC Backup
2014-04-26 18:54 - 2012-07-26 07:26 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2014-04-26 18:51 - 2014-04-26 18:51 - 00001093 _____ () C:\Users\Dorothea\Desktop\MyPC Backup.lnk
2014-04-26 18:51 - 2014-04-26 18:51 - 00000000 ____D () C:\Users\Dorothea\AppData\Roaming\Uniblue
2014-04-26 18:51 - 2014-04-26 18:51 - 00000000 ____D () C:\Users\Dorothea\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
2014-04-26 18:51 - 2014-04-26 18:51 - 00000000 ____D () C:\Program Files (x86)\Uniblue
2014-04-26 18:51 - 2014-04-26 18:51 - 00000000 ____D () C:\Program Files (x86)\MediaPlayerplus
2014-04-26 18:50 - 2014-04-26 18:50 - 00000000 ____D () C:\Users\Dorothea\AppData\Local\fst_de_6
2014-04-26 18:50 - 2014-04-26 18:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\free_soft_today
2014-04-26 18:50 - 2014-04-26 18:50 - 00000000 ____D () C:\Program Files (x86)\fst_de_6
2014-04-26 18:50 - 2014-04-26 18:50 - 00000000 ____D () C:\Program Files (x86)\Freeven pro 1.2
2014-04-23 01:47 - 2014-03-14 17:52 - 00694232 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-04-23 01:47 - 2014-03-14 17:52 - 00078296 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

Files to move or delete:
====================
C:\ProgramData\SetStretch.exe
C:\ProgramData\SetStretch.VBS


Some content of TEMP:
====================
C:\Users\Dorothea\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-04 18:18

==================== End Of Log ============================
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15-05-2014
Ran by Dorothea at 2014-05-17 10:13:06
Running from C:\Users\Dorothea\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\COLNTHC3
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: McAfee Anti-Virus und Anti-Spyware (Disabled - Up to date) {ADA629C7-7F48-5689-624A-3B76997E0892}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: McAfee Anti-Virus und Anti-Spyware (Disabled - Out of date) {16C7C823-5972-5907-58FA-0004E2F9422F}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: McAfee Firewall (Disabled) {959DA8E2-3527-57D1-4915-924367AD4FE9}

==================== Installed Programs ======================

Activeris AntiMalware (HKLM-x32\...\94EAE98D-444B-4817-858C-13DB943DF4F1_Activeris_A~741EE3A2_is1) (Version: 1.0.0.1 - Activeris)
Adblock IE 3.0 (HKLM\...\{58162496-037B-42CD-B575-AF804A2F0F47}) (Version: 3.0.2496 - MGTEK)
Adobe Reader X (10.1.9) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.9 - Adobe Systems Incorporated)
ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.2.6 - ASUS)
ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 3.0.4 - ASUS)
ASUS Screen Saver (HKLM\...\{0FBEEDF8-30FA-4FA3-B31F-C9C7E7E8DFA2}) (Version: 1.0.1 - ASUS)
ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 2.2.7 - ASUS)
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 2.01.0018 - ASUS)
ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 2.1.5 - ASUS)
ASUS WebStorage Sync Agent (HKLM-x32\...\ASUS WebStorage) (Version: 1.1.18.159 - ASUS Cloud Corporation)
ASUSDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.5710.52 - CyberLink Corp.)
ASUSDVD (x32 Version: 10.0.5710.52 - CyberLink Corp.) Hidden
AsusVibe2.0 (HKLM-x32\...\Asus Vibe2.0) (Version: 2.0.12.311 - ASUSTEK)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0030 - ASUS)
Avira (HKLM-x32\...\{c13d72f9-bcdd-4c16-a942-7373a528171e}) (Version: 1.0.5218.31571 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.0.5218.31571 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
Azteca (x32 Version: 2.2.0.97 - WildTangent) Hidden
Bejeweled 3 (x32 Version: 2.2.0.97 - WildTangent) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.12 - Piriform)
Cut the Rope (x32 Version: 3.0.2.38 - WildTangent) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Die*Sims™*3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.0.631 - Electronic Arts)
Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Freeven pro 1.2 (HKLM-x32\...\Freeven pro 1.2) (Version: 1.34.4.10 - Freeven) <==== ATTENTION
fst_de_6 (HKLM-x32\...\fst_de_6_is1) (Version:  - free_soft_today)
Galerie de photos (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.3114 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.24.388.1 - Intel Corporation) Hidden
LPT System Updater Service (x32 Version: 1.0.0.0 - LPT) Hidden <==== ATTENTION
McAfee LiveSafe – Internet Security (HKLM-x32\...\MSC) (Version: 12.8.934 - McAfee, Inc.)
MediaPlayerplus (HKLM-x32\...\MediaPlayerplus) (Version: 1.34.4.10 - Freeven) <==== ATTENTION
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
MyBitCast 2.0 (HKLM-x32\...\MyBitCast) (Version: 2.0 - ASUS)
MyPC Backup  (HKLM\...\MyPC Backup) (Version:  - JDi Backup Ltd) <==== ATTENTION
Optimizer Pro v3.2 (HKLM-x32\...\Optimizer Pro_is1) (Version:  - ) <==== ATTENTION
Origin (HKLM-x32\...\Origin) (Version: 8.4.1.210 - Electronic Arts, Inc.)
Peggle (x32 Version: 2.2.0.95 - WildTangent) Hidden
Penguins! (x32 Version: 2.2.0.98 - WildTangent) Hidden
Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros)
Raccolta foto (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.14.327.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6976 - Realtek Semiconductor Corp.)
Realtek PCIE Card Reader (HKLM-x32\...\{C9661090-C134-46E8-90B2-76D72355C2A6}) (Version: 6.2.9200.27038 - Realtek Semiconductor Corp.)
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Shopping Helper Smartbar (HKLM-x32\...\{1F288D91-CACB-47A1-A7EC-27DAC3512CEE}) (Version: 11.55.63.16956 - ReSoft Ltd.) <==== ATTENTION
Shopping Helper Smartbar Engine (HKCU\...\{42bea517-2b19-41e8-8683-427bf4e71192}) (Version: 11.55.63.16956 - ReSoft Ltd.) <==== ATTENTION
Tales of Lagoona (x32 Version: 2.2.0.110 - WildTangent) Hidden
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
VO Package (HKLM-x32\...\VOPackage) (Version: 1.0.0.0 - ) <==== ATTENTION
WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.0.0 - WildTangent)
WildTangent Games App (x32 Version: 4.0.10.5 - WildTangent) Hidden
Windows Driver Package - ASUS (ATP) Mouse  (10/31/2013 1.0.0.191) (HKLM\...\15591935E93BF0A0E42CA53B578EE5E630971E15) (Version: 10/31/2013 1.0.0.191 - ASUS)
Windows Live (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.42.0 - ASUS)

==================== Restore Points  =========================

26-03-2014 12:41:42 Windows Update
30-03-2014 15:09:10 Sprachpaketdeinstallation
08-04-2014 12:24:47 Geplanter Prüfpunkt
12-04-2014 17:42:05 Windows Update
04-05-2014 16:18:13 Windows Update

==================== Hosts content: ==========================

2012-07-26 07:26 - 2012-07-26 07:26 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {393E55AC-936A-4270-940D-8523EFDAE6D9} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2012-09-18] (ASUSTek Computer Inc.)
Task: {48FEF6BC-0F8A-4FD0-9DBA-B62743205E48} - System32\Tasks\ASUS Splendid ColorU => C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe [2013-08-16] (ASUSTeK Computer Inc.)
Task: {4D279672-9BF8-4709-8188-A6C0B9FF430C} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-03-18] (Piriform Ltd)
Task: {5A95426B-3811-4239-B7F7-839125B3B9D5} - System32\Tasks\ASUS InstantOn Config => C:\Program Files\ASUS\P4G\InsOnCfg.exe
Task: {79AD6DE9-2A39-4B68-9E5E-688D44F3B277} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2013-08-19] (ASUS)
Task: {7A80E0D3-151A-488C-B074-155C9895CF74} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2013-11-08] (AsusTek)
Task: {84418C40-44E2-4417-9916-6288B8179E67} - System32\Tasks\ASUS Live Update2 => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2013-08-28] (ASUSTeK Computer Inc.)
Task: {8DE31732-2817-4530-A0C8-E0993B710484} - System32\Tasks\AsusVibeSchedule => C:\Program Files (x86)\Asus\AsusVibe\AsusVibeLauncher.exe [2013-11-04] ()
Task: {96F95B73-6DD1-44AD-BEF8-FC6FC11B200B} - System32\Tasks\ASUS Live Update1 => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2013-08-28] (ASUSTeK Computer Inc.)
Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {AE709F22-4128-4F8D-8F85-03F46E943877} - System32\Tasks\ASUS P4G => C:\Program Files\ASUS\P4G\BatteryLife.exe [2013-06-19] (ASUS)
Task: {C1E74106-781B-4B81-8F69-2F8C4CE8560E} - System32\Tasks\Microsoft\Windows\Setup\Pre-staged GDR Notification => C:\Windows\system32\NotificationUI.exe [2014-01-31] (Microsoft Corporation)
Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask

==================== Loaded Modules (whitelisted) =============

2014-02-09 12:41 - 2014-02-09 12:41 - 00032288 _____ () C:\Program Files (x86)\LPT\srpts.exe
2014-04-26 11:01 - 2014-04-26 11:01 - 00355328 _____ () C:\Users\Dorothea\AppData\Roaming\VOPackage\VOsrv.exe
2012-12-19 08:10 - 2012-12-19 08:10 - 00072192 _____ () C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe
2014-03-14 16:06 - 2014-03-14 16:06 - 00012288 _____ () C:\Program Files (x86)\MyPC Backup\GetText.dll
2014-03-14 16:00 - 2014-03-14 16:00 - 01102336 _____ () C:\Program Files (x86)\MyPC Backup\x64\System.Data.SQLite.dll
2014-05-05 12:49 - 2014-05-05 12:49 - 00023072 _____ () C:\Users\Dorothea\AppData\Local\Smartbar\Application\Lrcnta.exe
2013-06-19 22:49 - 2013-06-19 22:49 - 00031360 _____ () C:\Program Files\ASUS\P4G\DevMng.dll
2013-11-22 04:41 - 2013-06-04 05:02 - 00094208 _____ () C:\Windows\system32\IccLibDll_x64.dll
2014-02-18 16:11 - 2014-02-14 12:00 - 00394808 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2014-04-26 19:00 - 2014-04-26 19:00 - 00186496 _____ () C:\Program Files (x86)\Optimizer Pro\OptProCrashSvc.dll
2014-04-26 19:00 - 2014-04-26 19:00 - 03000792 _____ () C:\Program Files (x86)\Optimizer Pro\OptProCrash.dll
2014-02-09 12:41 - 2014-02-09 12:41 - 00070176 _____ () C:\Program Files (x86)\LPT\srpt.dll
2014-02-09 12:41 - 2014-02-09 12:41 - 00022048 _____ () C:\Program Files (x86)\LPT\srptc.dll
2014-02-09 12:41 - 2014-02-09 12:41 - 00018976 _____ () C:\Program Files (x86)\LPT\Smartbar.Common.dll
2014-04-15 18:34 - 2014-04-15 18:34 - 00138320 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.NativeCore.dll
2014-04-15 18:33 - 2014-04-15 18:33 - 00064592 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.AvConnectorNative.dll
2013-12-24 00:49 - 2012-06-25 12:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2014-02-18 16:14 - 2014-04-15 18:33 - 00049744 _____ () C:\Users\Dorothea\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
2013-04-27 12:24 - 2013-04-27 12:24 - 00071680 _____ () C:\Program Files (x86)\ASUS\ASUS Live Update\checkmetro.dll
2014-05-05 12:49 - 2014-05-05 12:49 - 00032288 _____ () C:\Users\Dorothea\AppData\Local\Smartbar\Application\lrcnt.dll
2014-05-05 12:50 - 2014-05-05 12:50 - 00066080 _____ () C:\Users\Dorothea\AppData\Local\Smartbar\Application\sppsm.dll
2014-05-05 12:50 - 2014-05-05 12:50 - 00024440 _____ () C:\Users\Dorothea\AppData\Local\Smartbar\Application\Smartbar.Personalization.Common.dll
2014-05-05 12:50 - 2014-05-05 12:50 - 00057888 _____ () C:\Users\Dorothea\AppData\Local\Smartbar\Application\srut.dll
2014-05-05 12:50 - 2014-05-05 12:50 - 00165408 _____ () C:\Users\Dorothea\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Utilities.dll
2013-08-19 19:16 - 2013-08-19 19:16 - 00015440 _____ () C:\Program Files (x86)\ASUS\Splendid\DetectDisplayDC.dll
2013-08-16 12:03 - 2013-08-16 12:03 - 00023040 _____ () C:\Program Files (x86)\ASUS\Splendid\CCTAdjust.dll
2014-02-09 12:41 - 2014-02-09 12:41 - 00101408 _____ () C:\Users\Dorothea\AppData\Local\Smartbar\Application\SmartbarInternetExplorerExtension.dll
2014-02-09 12:41 - 2014-02-09 12:41 - 00141344 _____ () C:\Users\Dorothea\AppData\Local\Smartbar\Application\SmartbarInternetExplorerBHO.dll
2014-05-05 12:50 - 2014-05-05 12:50 - 00047136 _____ () C:\Users\Dorothea\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Core.dll
2014-05-05 12:50 - 2014-05-05 12:50 - 00069152 _____ () C:\Users\Dorothea\AppData\Local\Smartbar\Application\srau.dll
2014-05-05 12:50 - 2014-05-05 12:50 - 02336288 _____ () C:\Users\Dorothea\AppData\Local\Smartbar\Application\Smartbar.GUI.MainClient.dll
2014-05-05 12:50 - 2014-05-05 12:50 - 00067104 _____ () C:\Users\Dorothea\AppData\Local\Smartbar\Application\spbl.dll
2014-05-05 12:50 - 2014-05-05 12:50 - 00155680 _____ () C:\Users\Dorothea\AppData\Local\Smartbar\Application\Smartbar.Resources.HistoryAndStatsWrapper.dll
2014-05-05 12:49 - 2014-05-05 12:49 - 00014368 _____ () C:\Users\Dorothea\AppData\Local\Smartbar\Application\siem.dll
2014-05-05 12:49 - 2014-05-05 12:49 - 00696864 _____ () C:\Users\Dorothea\AppData\Local\Smartbar\Application\Smartbar.GUI.Controls.dll
2014-05-05 12:50 - 2014-05-05 12:50 - 00014880 _____ () C:\Users\Dorothea\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.BusinessEntities.dll
2014-05-05 12:49 - 2014-05-05 12:49 - 00078880 _____ () C:\Users\Dorothea\AppData\Local\Smartbar\Application\Smartbar.GUI.Docking.dll
2014-05-05 12:50 - 2014-05-05 12:50 - 00029216 _____ () C:\Users\Dorothea\AppData\Local\Smartbar\Application\srsbs.dll
2014-05-05 12:50 - 2014-05-05 12:50 - 00065568 _____ () C:\Users\Dorothea\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.InternetExplorerLocalPlugin.dll
2014-05-05 12:50 - 2014-05-05 12:50 - 00054816 _____ () C:\Users\Dorothea\AppData\Local\Smartbar\Application\smti.dll
2014-05-05 12:50 - 2014-05-05 12:50 - 00031264 _____ () C:\Users\Dorothea\AppData\Local\Smartbar\Application\srom.dll
2014-05-05 12:50 - 2014-05-05 12:50 - 00030752 _____ () C:\Users\Dorothea\AppData\Local\Smartbar\Application\smtu.dll
2014-05-05 12:50 - 2014-05-05 12:50 - 00038944 _____ () C:\Users\Dorothea\AppData\Local\Smartbar\Application\smta.dll
2014-05-05 12:50 - 2014-05-05 12:50 - 00044064 _____ () C:\Users\Dorothea\AppData\Local\Smartbar\Application\srbu.dll
2014-05-05 12:49 - 2014-05-05 12:49 - 00024096 _____ () C:\Users\Dorothea\AppData\Local\Smartbar\Application\sgml.dll
2014-05-05 12:50 - 2014-05-05 12:50 - 00061984 _____ () C:\Users\Dorothea\AppData\Local\Smartbar\Application\Smartbar.Resources.LanguageSettings.dll
2014-05-05 12:50 - 2014-05-05 12:50 - 00024608 _____ () C:\Users\Dorothea\AppData\Local\Smartbar\Application\srpdm.dll
2014-05-05 12:49 - 2014-05-05 12:49 - 00043040 _____ () C:\Users\Dorothea\AppData\Local\Smartbar\Application\MACTrackBarLib.dll
2014-05-05 12:48 - 2014-05-05 12:48 - 00026656 _____ () C:\Users\Dorothea\AppData\Local\Smartbar\Application\de\Smartbar.Resources.LanguageSettings.resources.dll
2014-05-05 12:50 - 2014-05-05 12:50 - 00035360 _____ () C:\Users\Dorothea\AppData\Local\Smartbar\Application\Smartbar.Resources.SocialNetsSharer.dll
2014-05-05 12:49 - 2014-05-05 12:49 - 00193056 _____ () C:\Users\Dorothea\AppData\Local\Smartbar\Application\sgmu.dll
2014-05-05 12:46 - 2014-05-05 12:46 - 00061440 _____ () C:\Users\Dorothea\AppData\Local\Smartbar\Application\AxInterop.WMPLib.dll
2014-05-05 12:50 - 2014-05-05 12:50 - 00255520 _____ () C:\Users\Dorothea\AppData\Local\Smartbar\Application\srns.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"

==================== EXE Association (whitelisted) =============


==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
MSCONFIG\startupreg: ASUSPRP => "C:\Program Files (x86)\ASUS\APRP\APRP.EXE"
MSCONFIG\startupreg: ASUSWebStorage => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSPanel.exe /S
MSCONFIG\startupreg: DisableS3S4 => c:\windows\temp\DisableS3S464\sethigh.cmd
MSCONFIG\startupreg: HotKeysCmds => C:\Windows\system32\hkcmd.exe
MSCONFIG\startupreg: IgfxTray => C:\Windows\system32\igfxtray.exe
MSCONFIG\startupreg: mcpltui_exe => "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
MSCONFIG\startupreg: RemoteControl10 => "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
MSCONFIG\startupreg: RtHDVBg => "C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /MAXX4
MSCONFIG\startupreg: RTHDVCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (05/17/2014 10:00:02 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: FBAgent.exe, Version: 2.0.0.3, Zeitstempel: 0x52245705
Name des fehlerhaften Moduls: FBAgent.exe, Version: 2.0.0.3, Zeitstempel: 0x52245705
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000002118b
ID des fehlerhaften Prozesses: 0x414
Startzeit der fehlerhaften Anwendung: 0xFBAgent.exe0
Pfad der fehlerhaften Anwendung: FBAgent.exe1
Pfad des fehlerhaften Moduls: FBAgent.exe2
Berichtskennung: FBAgent.exe3
Vollständiger Name des fehlerhaften Pakets: FBAgent.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: FBAgent.exe5

Error: (05/17/2014 09:59:32 AM) (Source: MsiInstaller) (EventID: 1002) (User: OMAPC)
Description: Nicht erwarteter oder fehlender Wert (Name: "PackageCode", Wert: "GUID") für Schlüssel "HKLM\Software\Classes\Installer\Products\B476F94747628E7478C965620AB6A219".

Error: (05/17/2014 09:57:30 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: OMAPC)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail“ ist folgender Fehler aufgetreten: -2147467263. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (05/17/2014 09:57:30 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: OMAPC)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail“ ist folgender Fehler aufgetreten: -2147467263. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (05/17/2014 09:57:30 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: OMAPC)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail“ ist folgender Fehler aufgetreten: -2147467263. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (04/26/2014 07:03:28 PM) (Source: MsiInstaller) (EventID: 1002) (User: OMAPC)
Description: Nicht erwarteter oder fehlender Wert (Name: "PackageCode", Wert: "GUID") für Schlüssel "HKLM\Software\Classes\Installer\Products\B476F94747628E7478C965620AB6A219".

Error: (04/26/2014 07:00:39 PM) (Source: MsiInstaller) (EventID: 1002) (User: OMAPC)
Description: Nicht erwarteter oder fehlender Wert (Name: "PackageCode", Wert: "GUID") für Schlüssel "HKLM\Software\Classes\Installer\Products\B476F94747628E7478C965620AB6A219".

Error: (04/26/2014 06:58:35 PM) (Source: MsiInstaller) (EventID: 1002) (User: NT-AUTORITÄT)
Description: Nicht erwarteter oder fehlender Wert (Name: "PackageCode", Wert: "GUID") für Schlüssel "HKLM\Software\Classes\Installer\Products\B476F94747628E7478C965620AB6A219".

Error: (04/26/2014 06:51:11 PM) (Source: MsiInstaller) (EventID: 1002) (User: OMAPC)
Description: Nicht erwarteter oder fehlender Wert (Name: "PackageCode", Wert: "GUID") für Schlüssel "HKLM\Software\Classes\Installer\Products\B476F94747628E7478C965620AB6A219".

Error: (04/26/2014 06:50:45 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Users\Dorothea\AppData\Local\Temp\is-QEQ92.tmp\speedupmypc.tmp /SL5="$403D0,785340,542208,C:\Users\Dorothea\AppData\Local\Temp\93dfd1da-615d-462c-9c87-90b064f8c93c\software\speedupmypc.exe" /verysilent; Beschreibung = Uniblue SpeedUpMyPC installation; Fehler = 0x800706be).


System errors:
=============
Error: (05/17/2014 10:00:26 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "AFBAgent" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (05/04/2014 06:34:51 PM) (Source: DCOM) (EventID: 10010) (User: OMAPC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

Error: (05/04/2014 06:34:51 PM) (Source: DCOM) (EventID: 10010) (User: OMAPC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

Error: (05/04/2014 06:34:51 PM) (Source: DCOM) (EventID: 10010) (User: OMAPC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

Error: (05/04/2014 06:34:51 PM) (Source: DCOM) (EventID: 10010) (User: OMAPC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

Error: (05/04/2014 06:25:23 PM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )
Description: 4

Error: (04/27/2014 06:06:40 PM) (Source: DCOM) (EventID: 10010) (User: OMAPC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

Error: (04/27/2014 06:06:40 PM) (Source: DCOM) (EventID: 10010) (User: OMAPC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

Error: (04/27/2014 06:06:40 PM) (Source: DCOM) (EventID: 10010) (User: OMAPC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

Error: (04/27/2014 06:06:40 PM) (Source: DCOM) (EventID: 10010) (User: OMAPC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}


Microsoft Office Sessions:
=========================
Error: (05/17/2014 10:00:02 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: FBAgent.exe2.0.0.352245705FBAgent.exe2.0.0.352245705c0000005000000000002118b41401cf620b4131b090C:\Windows\system32\FBAgent.exeC:\Windows\system32\FBAgent.exe3fa94a28-dd99-11e3-be81-e03f4932d5fe

Error: (05/17/2014 09:59:32 AM) (Source: MsiInstaller) (EventID: 1002) (User: OMAPC)
Description: PackageCodeGUIDHKLM\Software\Classes\Installer\Products\B476F94747628E7478C965620AB6A219(NULL)(NULL)(NULL)

Error: (05/17/2014 09:57:30 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: OMAPC)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2147467263

Error: (05/17/2014 09:57:30 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: OMAPC)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2147467263

Error: (05/17/2014 09:57:30 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: OMAPC)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2147467263

Error: (04/26/2014 07:03:28 PM) (Source: MsiInstaller) (EventID: 1002) (User: OMAPC)
Description: PackageCodeGUIDHKLM\Software\Classes\Installer\Products\B476F94747628E7478C965620AB6A219(NULL)(NULL)(NULL)

Error: (04/26/2014 07:00:39 PM) (Source: MsiInstaller) (EventID: 1002) (User: OMAPC)
Description: PackageCodeGUIDHKLM\Software\Classes\Installer\Products\B476F94747628E7478C965620AB6A219(NULL)(NULL)(NULL)

Error: (04/26/2014 06:58:35 PM) (Source: MsiInstaller) (EventID: 1002) (User: NT-AUTORITÄT)
Description: PackageCodeGUIDHKLM\Software\Classes\Installer\Products\B476F94747628E7478C965620AB6A219(NULL)(NULL)(NULL)

Error: (04/26/2014 06:51:11 PM) (Source: MsiInstaller) (EventID: 1002) (User: OMAPC)
Description: PackageCodeGUIDHKLM\Software\Classes\Installer\Products\B476F94747628E7478C965620AB6A219(NULL)(NULL)(NULL)

Error: (04/26/2014 06:50:45 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: C:\Users\Dorothea\AppData\Local\Temp\is-QEQ92.tmp\speedupmypc.tmp /SL5="$403D0,785340,542208,C:\Users\Dorothea\AppData\Local\Temp\93dfd1da-615d-462c-9c87-90b064f8c93c\software\speedupmypc.exe" /verysilentUniblue SpeedUpMyPC installation0x800706be


==================== Memory info =========================== 

Percentage of memory in use: 62%
Total physical RAM: 3981.73 MB
Available physical RAM: 1479.45 MB
Total Pagefile: 4685.73 MB
Available Pagefile: 1916.53 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:186.3 GB) (Free:137.75 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (Data) (Fixed) (Total:258.34 GB) (Free:258.22 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 57788C0B)

Partition: GPT Partition Type.

==================== End Of Log ============================
Gmer hat nicht funktioniert, da gabs ne Fehlermeldung (würde von einem anderen Programm benutzt werden oder so).

 

Themen zu Rechner nach ein paar Monaten deutlich langsamer - Trojaner?
association, ccsetup, continue, explorer, fehlermeldung, js/toolbar.crossrider.b, mcafee firewall, msil/advancedsystemprotector.a, msil/domaiq.a, msil/toolbar.linkury.c, programm, services.exe, shopping helper smartbar, super, svchost.exe, win32/adware.eorezo.au, win32/adware.speedingupmypc.d, win32/agent.szw, win32/anyprotect.d, win32/bundled.toolbar.ask.d, win32/installcore.pb, win32/packed.vmdetector.e, win32/sprotector.e, win32/sprotector.f, win32/toolbar.linkury.d, win32/vopackage.d, win64/sprotector.a, windowsapps


« Mein Handy spinnt ! | Yahoo versendet Spam Mails mit meinem Mail-Konto »


Ähnliche Themen: Rechner nach ein paar Monaten deutlich langsamer - Trojaner?


  1. Laptop läuft seit Kurzem deutlich langsamer
    Plagegeister aller Art und deren Bekämpfung - 22.06.2015 (9)
  2. Symantec-Meldung "NTOSKRNL.EXE", System bootet auch deutlich langsamer
    Log-Analyse und Auswertung - 20.05.2015 (15)
  3. Langsamer Rechner und ominöse Musik nach Installation von Youtube to MP3
    Log-Analyse und Auswertung - 08.11.2014 (38)
  4. Windows 7:Computer deutlich langsamer geworden
    Log-Analyse und Auswertung - 17.10.2014 (3)
  5. Rechner wird nach Bundesamtvirus immer Langsamer
    Plagegeister aller Art und deren Bekämpfung - 20.06.2014 (3)
  6. Windows 8: Laptop plötzlich deutlich langsamer
    Log-Analyse und Auswertung - 22.03.2014 (7)
  7. Rechner läuft immer langsamer nach unbeabsichtigten Download
    Log-Analyse und Auswertung - 04.03.2014 (20)
  8. TV-Sender Sky infomiert Kunden über Datenleck - nach drei Monaten
    Nachrichten - 03.02.2014 (0)
  9. Netbook deutlich langsamer ohne erkennbaren Grund - Evtl. Lüfter kaputt?
    Log-Analyse und Auswertung - 06.01.2014 (9)
  10. Pc ist langsamer geworden ... hier ein paar Logs
    Log-Analyse und Auswertung - 15.06.2013 (7)
  11. Computer deutlich langsamer; wirklich ein Virus/Malware?
    Log-Analyse und Auswertung - 18.04.2012 (15)
  12. Avira meldet skype.exe als Malware - Rechner deutlich langsamer - Logfiles fehlerfrei
    Plagegeister aller Art und deren Bekämpfung - 15.01.2012 (2)
  13. Rechner hakt alle paar sekunden, Programme öffnen erst nach mehreren Minuten, JAVA/Stutter.I.1
    Log-Analyse und Auswertung - 01.08.2011 (1)
  14. Google deutlich langsamer
    Plagegeister aller Art und deren Bekämpfung - 29.05.2011 (32)
  15. Internet deutlich langsamer (DSLtest=700DSL, ich habe=6000DSL)
    Log-Analyse und Auswertung - 22.03.2011 (14)
  16. Rechner läuft nach Trojanerbefall langsamer
    Mülltonne - 25.08.2008 (0)
  17. ESist wieder soweit nach 6 monaten bitte mal schauen
    Mülltonne - 25.08.2006 (2)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Rechner nach ein paar Monaten deutlich langsamer - Trojaner? - Hallo zusammen, meine Oma hat sich vor ein paar Monaten ihr erstes Notebook gekauft. Nun klagt sie darüber, dass ihr PC super langsam geworden ist... Ich hab das getestet, und - Rechner nach ein paar Monaten deutlich langsamer - Trojaner?...
Archiv
Du betrachtest: Rechner nach ein paar Monaten deutlich langsamer - Trojaner? auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19