Broken.OpenCommand Virus gefunden-Rechner ist extrem langsam geworden

funcopter · 24.06.2014, 21:16

Hallo Schrauber,

hier die Logs:
Results of screen317's Security Check version 0.99.83
Windows XP Service Pack 3 x86
Internet Explorer 8
``````````````Antivirus/Firewall Check:``````````````
Avira Free Antivirus
Avira SearchFree Toolbar
ESET Online Scanner v3
iolo technologies' System Mechanic
Avira successfully updated!
`````````Anti-malware/Other Utilities Check:`````````
Java 7 Update 55
Adobe Flash Player 13.0.0.206
Adobe Reader XI
````````Process Check: objlist.exe by Laurent````````
Avira Antivir avgnt.exe
Avira Antivir avguard.exe
iolo Common Lib ioloServiceManager.exe
iolo System Mechanic SystemGuardAlerter.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C::
````````````````````End of Log``````````````````````

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7587
# api_version=3.0.2
# EOSSerial=14c8863d354f794cbc79a53eca0d8a16
# engine=18762
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-06-17 08:30:52
# local_time=2014-06-17 10:30:52 (+0100, Westeuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=5.1.2600 NT Service Pack 3
# compatibility_mode_1='Avira Desktop'
# compatibility_mode=1810 16777213 100 100 16146 268460341 0 0
# scanned=82268
# found=1
# cleaned=0
# scan_time=6320
sh=3644F6FECD157D40267D8ABA4A9155AC58D80B64 ft=1 fh=052741f554da2bb1 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\System Volume Information\_restore{74D05D7E-2308-4289-8D8B-A40FD8C99D77}\RP1634\A0173438.exe"
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7587
# api_version=3.0.2
# EOSSerial=14c8863d354f794cbc79a53eca0d8a16
# engine=18846
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-06-23 08:13:44
# local_time=2014-06-23 10:13:44 (+0100, Westeuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=5.1.2600 NT Service Pack 3
# compatibility_mode_1='Avira Desktop'
# compatibility_mode=1810 16777213 100 100 24083 268977714 0 0
# scanned=80693
# found=0
# cleaned=0
# scan_time=5186
FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:22-06-2014
Ran by Roland (administrator) on ROLAND-469D9F2C on 24-06-2014 20:10:41
Running from C:\Dokumente und Einstellungen\Roland\Desktop
Platform: Microsoft Windows XP Home Edition Service Pack 3 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 8
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\sched.exe
() C:\Programme\AAVUpdateManager\aavus.exe
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Programme\AskPartnerNetwork\Toolbar\apnmcp.exe
(iolo technologies, LLC) C:\Programme\iolo\Common\Lib\ioloServiceManager.exe
(NVIDIA Corporation) C:\WINDOWS\system32\nvsvc32.exe
(iolo technologies, LLC) C:\Programme\iolo\System Mechanic\SystemGuardAlerter.exe
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avwebgrd.exe
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avgnt.exe
(Microsoft Corporation) C:\Programme\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Programme\Internet Explorer\iexplore.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [nwiz] => nwiz.exe /install
HKLM\...\Run: [avgnt] => C:\Programme\Avira\AntiVir Desktop\avgnt.exe [737872 2014-06-05] (Avira Operations GmbH & Co. KG)
HKLM\...\Runonce: [SMRequiresRestart] - [X]
BootExecute: autocheck autochk /p \??\J:autocheck autochk /p \??\K:autocheck autochk * 

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.ebay.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {E048E9E7-473E-4DA0-9D49-2392C5509B4D} URL = hxxp://www.google.de/search?q={searchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {E048E9E7-473E-4DA0-9D49-2392C5509B4D} URL = hxxp://www.google.de/search?q={searchTerms}
BHO: No Name - {41564952-412D-5637-00A7-7A786E7484D7} -  No File
Toolbar: HKLM - No Name - {41564952-412D-5637-00A7-7A786E7484D7} -  No File
Toolbar: HKCU - &Adresse - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
Toolbar: HKCU - &Links - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU - No Name - {41564952-412D-5637-00A7-7A786E7484D7} -  No File
DPF: {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/8/b/d/8bd77752-5704-4d68-a152-f7252adaa4f2/LegitCheckControl.cab
DPF: {41564D57-9980-0010-8000-00AA00389B71} hxxp://download.microsoft.com/download/0/A/9/0A9F8B32-9F8C-4D74-A130-E4CAB36EB01F/wmvadvd.cab
DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} hxxp://express.foto.com/ImageUploader5.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_40-windows-i586.cab
DPF: {C1FDEE68-98D5-4F42-A4DD-D0BECF5077EB} hxxp://tools.ebayimg.com/eps/wl/activex/eBay_Enhanced_Picture_Control_v1-0-29-0.cab
DPF: {CAFEEFAC-0017-0000-0040-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_40-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_40-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_13_0_0_206.dll ()
FF Plugin: @canon.com/MycameraPlugin - C:\Programme\Canon\ZoomBrowser EX\Program\NPCIG.dll (CANON INC.)
FF Plugin: @java.com/DTPlugin,version=10.55.2 - C:\Programme\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.55.2 - C:\Programme\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: Adobe Reader - C:\Programme\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-08-14]

========================== Services (Whitelisted) =================

R2 AAV UpdateService; C:\Programme\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()
R2 AntiVirSchedulerService; C:\Programme\Avira\AntiVir Desktop\sched.exe [430160 2014-06-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Programme\Avira\AntiVir Desktop\avguard.exe [430160 2014-06-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Programme\Avira\AntiVir Desktop\AVWEBGRD.EXE [1039440 2014-06-05] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Programme\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2014-02-13] (APN LLC.)
S4 CCALib8; C:\Programme\Canon\CAL\CALMAIN.exe [96370 2007-01-31] (Canon Inc.) [File not signed]
R2 ioloSystemService; C:\Programme\iolo\Common\Lib\ioloServiceManager.exe [1027792 2012-09-05] (iolo technologies, LLC)
S4 JavaQuickStarterService; C:\Programme\Java\jre7\bin\jqs.exe [182696 2014-05-01] (Oracle Corporation)
S4 MagicTuneEngine; C:\Programme\MagicTune Premium\MagicTuneEngine.exe [45056 2007-08-23] () [File not signed]
S4 MDM; C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\MDM.EXE [322120 2003-06-19] (Microsoft Corporation)
S3 ose; C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE [89136 2003-07-28] (Microsoft Corporation)
S4 WMPNetworkSvc; C:\Programme\Windows Media Player\WMPNetwk.exe [920576 2006-11-03] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R3 ALCXWDM; C:\WINDOWS\System32\drivers\ALCXWDM.SYS [3964352 2006-04-21] (Realtek Semiconductor Corp.)
R2 avgntflt; C:\WINDOWS\System32\DRIVERS\avgntflt.sys [93528 2014-06-05] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\WINDOWS\System32\DRIVERS\avipbb.sys [136216 2014-06-05] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\WINDOWS\System32\DRIVERS\avkmgr.sys [37352 2013-10-01] (Avira Operations GmbH & Co. KG)
R3 DC21x4; C:\WINDOWS\System32\DRIVERS\dc21x4.sys [63208 2001-08-17] (Intel Corporation.)
R3 gameenum; C:\WINDOWS\System32\DRIVERS\gameenum.sys [10624 2008-04-13] (Microsoft Corporation)
S3 giveio; C:\WINDOWS\system32\giveio.sys [5248 2010-08-18] () [File not signed]
S3 hidgame; C:\WINDOWS\System32\DRIVERS\hidgame.sys [8576 2001-08-17] (Microsoft Corporation)
S3 MagicTune; C:\WINDOWS\System32\drivers\MTiCtwl.sys [14080 2009-06-04] (Samsung Electronics, Inc. ) [File not signed]
S3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [110296 2014-06-22] (Malwarebytes Corporation)
R2 PDFsFilter; C:\WINDOWS\System32\DRIVERS\PDFsFilter.sys [68464 2012-09-05] (Raxco Software, Inc.)
R1 ssmdrv; C:\WINDOWS\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
S3 wceusbsh; C:\WINDOWS\System32\DRIVERS\wceusbsh.sys [28672 2006-11-06] (Microsoft Corporation)
S3 catchme; \??\C:\DOKUME~1\Roland\LOKALE~1\Temp\catchme.sys [X]
S4 IntelIde; No ImagePath
U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation)
S3 SymIM; system32\DRIVERS\SymIM.sys [X]
U3 TlntSvr; 

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-24 20:07 - 2014-06-24 20:07 - 00000000 ____D () C:\Dokumente und Einstellungen\Roland\Desktop\FRST-OlderVersion
2014-06-24 20:06 - 2014-06-24 20:06 - 00000883 _____ () C:\Dokumente und Einstellungen\Roland\Desktop\checkup.txt
2014-06-23 22:33 - 2014-06-23 22:33 - 00854367 _____ () C:\Dokumente und Einstellungen\Roland\Desktop\SecurityCheck.exe
2014-06-23 20:41 - 2014-06-23 20:41 - 02347384 _____ (ESET) C:\Dokumente und Einstellungen\Roland\Desktop\esetsmartinstaller_deu.exe
2014-06-22 21:59 - 2014-06-24 20:11 - 00009512 _____ () C:\Dokumente und Einstellungen\Roland\Desktop\FRST.txt
2014-06-22 21:58 - 2014-06-24 20:07 - 01073152 _____ (Farbar) C:\Dokumente und Einstellungen\Roland\Desktop\FRST.exe
2014-06-22 21:54 - 2014-06-22 21:57 - 00000582 _____ () C:\Dokumente und Einstellungen\Roland\Desktop\JRT.txt
2014-06-22 21:48 - 2014-06-22 21:48 - 01016261 _____ (Thisisu) C:\Dokumente und Einstellungen\Roland\Desktop\JRT.exe
2014-06-22 21:48 - 2014-06-22 21:48 - 00000789 _____ () C:\Dokumente und Einstellungen\Roland\Desktop\AdwCleaner[S0].txt
2014-06-22 21:26 - 2014-06-22 21:37 - 00000000 ____D () C:\AdwCleaner
2014-06-22 21:26 - 2014-06-22 21:26 - 01333465 _____ () C:\Dokumente und Einstellungen\Roland\Desktop\adwcleaner_3.212.exe
2014-06-22 21:25 - 2014-06-22 21:25 - 00001464 _____ () C:\Dokumente und Einstellungen\Roland\Desktop\mbam.txt
2014-06-22 19:31 - 2014-06-22 21:23 - 00110296 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-06-22 19:28 - 2014-06-22 19:28 - 00000749 _____ () C:\Dokumente und Einstellungen\All Users\Desktop\ Malwarebytes Anti-Malware .lnk
2014-06-22 19:28 - 2014-06-22 19:28 - 00000000 ____D () C:\Programme\ Malwarebytes Anti-Malware 
2014-06-22 19:28 - 2014-06-22 19:28 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\ Malwarebytes Anti-Malware 
2014-06-22 19:28 - 2014-05-12 07:26 - 00053208 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-06-22 19:28 - 2014-05-12 07:25 - 00023256 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-06-22 13:53 - 2014-06-22 13:53 - 17292760 _____ (Malwarebytes Corporation ) C:\Dokumente und Einstellungen\Roland\Desktop\mbam-setup-2.0.2.1012.exe
2014-06-21 13:53 - 2014-06-21 17:13 - 00000000 ___SD () C:\ComboFix
2014-06-21 10:01 - 2014-06-21 10:01 - 00000000 ____D () C:\Qoobox
2014-06-21 10:01 - 2011-06-26 08:45 - 00256000 _____ () C:\WINDOWS\PEV.exe
2014-06-21 10:01 - 2010-11-07 19:20 - 00208896 _____ () C:\WINDOWS\MBR.exe
2014-06-21 10:01 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\WINDOWS\NIRCMD.exe
2014-06-21 10:01 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\WINDOWS\SWREG.exe
2014-06-21 10:01 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\WINDOWS\SWSC.exe
2014-06-21 10:01 - 2000-08-31 02:00 - 00212480 _____ (SteelWerX) C:\WINDOWS\SWXCACLS.exe
2014-06-21 10:01 - 2000-08-31 02:00 - 00098816 _____ () C:\WINDOWS\sed.exe
2014-06-21 10:01 - 2000-08-31 02:00 - 00080412 _____ () C:\WINDOWS\grep.exe
2014-06-21 10:01 - 2000-08-31 02:00 - 00068096 _____ () C:\WINDOWS\zip.exe
2014-06-19 21:03 - 2014-06-24 20:10 - 00000000 ____D () C:\FRST
2014-06-17 20:39 - 2014-06-17 20:39 - 00000000 ____D () C:\Programme\ESET
2014-06-05 19:40 - 2014-06-05 20:17 - 00035328 _____ () C:\Dokumente und Einstellungen\Roland\Eigene Dateien\BG Unfall Valentin.xls
2014-05-30 23:46 - 2014-05-30 23:46 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2808679$
2014-05-30 23:45 - 2014-05-30 23:45 - 00007652 _____ () C:\WINDOWS\KB2632503-IE8.log
2014-05-30 23:44 - 2014-05-30 23:45 - 00006598 _____ () C:\WINDOWS\KB2598845-IE8.log
2014-05-30 23:43 - 2014-05-30 23:46 - 00008566 _____ () C:\WINDOWS\KB2808679.log
2014-05-26 15:39 - 2014-05-26 15:39 - 00035328 _____ () C:\Dokumente und Einstellungen\Roland\Desktop\BG Unfall Valentin.xls

==================== One Month Modified Files and Folders =======

2014-06-24 20:11 - 2014-06-22 21:59 - 00009512 _____ () C:\Dokumente und Einstellungen\Roland\Desktop\FRST.txt
2014-06-24 20:11 - 2013-10-11 21:54 - 00000000 ____D () C:\Dokumente und Einstellungen\Roland\Lokale Einstellungen\temp
2014-06-24 20:10 - 2014-06-19 21:03 - 00000000 ____D () C:\FRST
2014-06-24 20:08 - 2010-01-15 19:58 - 00000418 ____H () C:\WINDOWS\Tasks\User_Feed_Synchronization-{7ECA2FDA-3924-46EF-86A0-4D266F44C228}.job
2014-06-24 20:07 - 2014-06-24 20:07 - 00000000 ____D () C:\Dokumente und Einstellungen\Roland\Desktop\FRST-OlderVersion
2014-06-24 20:07 - 2014-06-22 21:58 - 01073152 _____ (Farbar) C:\Dokumente und Einstellungen\Roland\Desktop\FRST.exe
2014-06-24 20:06 - 2014-06-24 20:06 - 00000883 _____ () C:\Dokumente und Einstellungen\Roland\Desktop\checkup.txt
2014-06-24 19:32 - 2014-03-22 09:26 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-06-24 19:00 - 2008-04-26 11:04 - 01852242 _____ () C:\WINDOWS\WindowsUpdate.log
2014-06-24 18:55 - 2014-03-30 18:37 - 00000224 _____ () C:\WINDOWS\Tasks\Ende des Supports für Microsoft Windows XP –  Benachrichtigung – Anmeldung.job
2014-06-24 18:54 - 2008-04-26 11:58 - 00000159 _____ () C:\WINDOWS\wiadebug.log
2014-06-24 18:54 - 2008-04-26 11:58 - 00000050 _____ () C:\WINDOWS\wiaservc.log
2014-06-24 18:54 - 2008-04-26 11:09 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-06-24 18:54 - 2004-08-04 14:00 - 00013646 _____ () C:\WINDOWS\system32\wpa.dbl
2014-06-23 22:34 - 2008-04-26 11:09 - 00032022 _____ () C:\WINDOWS\SchedLgU.Txt
2014-06-23 22:33 - 2014-06-23 22:33 - 00854367 _____ () C:\Dokumente und Einstellungen\Roland\Desktop\SecurityCheck.exe
2014-06-23 22:33 - 2008-04-26 11:11 - 00000300 ___SH () C:\Dokumente und Einstellungen\Roland\ntuser.ini
2014-06-23 22:33 - 2008-04-26 11:11 - 00000000 ____D () C:\Dokumente und Einstellungen\Roland
2014-06-23 20:41 - 2014-06-23 20:41 - 02347384 _____ (ESET) C:\Dokumente und Einstellungen\Roland\Desktop\esetsmartinstaller_deu.exe
2014-06-22 21:57 - 2014-06-22 21:54 - 00000582 _____ () C:\Dokumente und Einstellungen\Roland\Desktop\JRT.txt
2014-06-22 21:48 - 2014-06-22 21:48 - 01016261 _____ (Thisisu) C:\Dokumente und Einstellungen\Roland\Desktop\JRT.exe
2014-06-22 21:48 - 2014-06-22 21:48 - 00000789 _____ () C:\Dokumente und Einstellungen\Roland\Desktop\AdwCleaner[S0].txt
2014-06-22 21:37 - 2014-06-22 21:26 - 00000000 ____D () C:\AdwCleaner
2014-06-22 21:26 - 2014-06-22 21:26 - 01333465 _____ () C:\Dokumente und Einstellungen\Roland\Desktop\adwcleaner_3.212.exe
2014-06-22 21:25 - 2014-06-22 21:25 - 00001464 _____ () C:\Dokumente und Einstellungen\Roland\Desktop\mbam.txt
2014-06-22 21:23 - 2014-06-22 19:31 - 00110296 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-06-22 19:28 - 2014-06-22 19:28 - 00000749 _____ () C:\Dokumente und Einstellungen\All Users\Desktop\ Malwarebytes Anti-Malware .lnk
2014-06-22 19:28 - 2014-06-22 19:28 - 00000000 ____D () C:\Programme\ Malwarebytes Anti-Malware 
2014-06-22 19:28 - 2014-06-22 19:28 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\ Malwarebytes Anti-Malware 
2014-06-22 19:28 - 2008-04-26 11:55 - 00000000 ___RD () C:\Programme
2014-06-22 19:28 - 2008-04-26 11:55 - 00000000 ___RD () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme
2014-06-22 13:53 - 2014-06-22 13:53 - 17292760 _____ (Malwarebytes Corporation ) C:\Dokumente und Einstellungen\Roland\Desktop\mbam-setup-2.0.2.1012.exe
2014-06-21 17:13 - 2014-06-21 13:53 - 00000000 ___SD () C:\ComboFix
2014-06-21 10:01 - 2014-06-21 10:01 - 00000000 ____D () C:\Qoobox
2014-06-17 20:39 - 2014-06-17 20:39 - 00000000 ____D () C:\Programme\ESET
2014-06-13 21:41 - 2014-05-02 19:50 - 00000000 ____D () C:\Dokumente und Einstellungen\Roland\Eigene Dateien\SigmaDataCenter3
2014-06-13 14:38 - 2013-10-12 14:12 - 00001780 _____ () C:\DelFix.txt
2014-06-12 11:50 - 2011-01-02 15:02 - 00000000 ____D () C:\WINDOWS\system32\NtmsData
2014-06-12 09:58 - 2008-04-26 11:02 - 00000000 ____D () C:\WINDOWS\Registration
2014-06-11 12:49 - 2013-07-19 16:01 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-06-11 12:42 - 2008-04-26 13:10 - 92708840 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-06-09 17:43 - 2014-03-30 18:37 - 00000218 _____ () C:\WINDOWS\Tasks\Ende des Supports für Microsoft Windows XP – Monatliche Benachrichtigung.job
2014-06-05 20:17 - 2014-06-05 19:40 - 00035328 _____ () C:\Dokumente und Einstellungen\Roland\Eigene Dateien\BG Unfall Valentin.xls
2014-06-05 09:53 - 2008-04-28 20:17 - 00000190 ___SH () C:\Dokumente und Einstellungen\Vonni\ntuser.ini
2014-06-05 09:53 - 2008-04-28 20:17 - 00000000 ____D () C:\Dokumente und Einstellungen\Vonni
2014-06-05 08:41 - 2013-08-22 17:15 - 00136216 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys
2014-06-05 08:41 - 2013-08-22 17:15 - 00093528 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys
2014-06-05 08:28 - 2008-04-28 20:17 - 00000000 ____D () C:\Dokumente und Einstellungen\Vonni\Lokale Einstellungen\Temp
2014-05-30 23:46 - 2014-05-30 23:46 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2808679$
2014-05-30 23:46 - 2014-05-30 23:43 - 00008566 _____ () C:\WINDOWS\KB2808679.log
2014-05-30 23:46 - 2013-08-14 08:38 - 00303559 _____ () C:\WINDOWS\FaxSetup.log
2014-05-30 23:46 - 2013-08-14 08:38 - 00183020 _____ () C:\WINDOWS\setupapi.log
2014-05-30 23:46 - 2013-08-14 08:38 - 00147657 _____ () C:\WINDOWS\ocgen.log
2014-05-30 23:46 - 2013-08-14 08:38 - 00117160 _____ () C:\WINDOWS\tsoc.log
2014-05-30 23:46 - 2013-08-14 08:38 - 00061142 _____ () C:\WINDOWS\ntdtcsetup.log
2014-05-30 23:46 - 2013-08-14 08:38 - 00048436 _____ () C:\WINDOWS\iis6.log
2014-05-30 23:46 - 2013-08-14 08:38 - 00016885 _____ () C:\WINDOWS\ocmsn.log
2014-05-30 23:46 - 2013-08-14 08:38 - 00015311 _____ () C:\WINDOWS\msgsocm.log
2014-05-30 23:46 - 2013-08-14 08:38 - 00001374 _____ () C:\WINDOWS\imsins.log
2014-05-30 23:45 - 2014-05-30 23:45 - 00007652 _____ () C:\WINDOWS\KB2632503-IE8.log
2014-05-30 23:45 - 2014-05-30 23:44 - 00006598 _____ () C:\WINDOWS\KB2598845-IE8.log
2014-05-30 23:45 - 2013-08-14 08:38 - 00032132 _____ () C:\WINDOWS\updspapi.log
2014-05-30 23:45 - 2009-07-05 12:37 - 00000000 ____D () C:\WINDOWS\ie8updates
2014-05-30 23:45 - 2008-04-26 11:19 - 00000000 ___HD () C:\WINDOWS\$hf_mig$
2014-05-29 16:17 - 2011-10-15 19:05 - 00000000 ___RD () C:\Dokumente und Einstellungen\Roland\Eigene Dateien\Eigene Bilder
2014-05-26 15:39 - 2014-05-26 15:39 - 00035328 _____ () C:\Dokumente und Einstellungen\Roland\Desktop\BG Unfall Valentin.xls

Some content of TEMP:
====================
C:\Dokumente und Einstellungen\Roland\Lokale Einstellungen\temp\avgnt.exe
C:\Dokumente und Einstellungen\Vonni\Lokale Einstellungen\temp\AskSLib.dll
C:\Dokumente und Einstellungen\Vonni\Lokale Einstellungen\temp\avgnt.exe
C:\Dokumente und Einstellungen\Vonni\Lokale Einstellungen\temp\wiz99.exe


==================== Bamital & volsnap Check =================

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

==================== End Of Log ============================

--- --- ---

Es scheint dass das Problem gelöst ist.

Genau kann ich das aber erst in einigen Tagen sagen.

Kann ich mit irgendwie besser schützen oder hängt das mit XP zusammen?
Was kann ich vorbeugend noch tun?
Am besten mit dem Rechner/XP gar nicht mehr online gehen?

Vielen Dank für Deine kompetente und schnelle Hilfe

Gruß

Funcopter

Broken.OpenCommand Virus gefunden-Rechner ist extrem langsam geworden

Plagegeister aller Art und deren Bekämpfung: Broken.OpenCommand Virus gefunden-Rechner ist extrem langsam geworden

Broken.OpenCommand Virus gefunden-Rechner ist extrem langsam geworden

Ähnliche Themen: Broken.OpenCommand Virus gefunden-Rechner ist extrem langsam geworden