![]() |
|
Log-Analyse und Auswertung: Windows 7: Programme und Internet extrem LangsamWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #1 |
![]() ![]() | ![]() Windows 7: Programme und Internet extrem Langsam Hallo, ich bräuchte mal wieder eure Hilfe ![]() Seit gestern ist mein zweites Book extrem langsam, wenn ich im Internet bin oder Programme öffne. Es braucht sehr lange. Sogar für einfache Programme wie Word. Es ist gerade so schlimm, dass ich von dem Book nicht mal mehr Posten kann ![]() FRST ist durchgelaufen hat mir aber kein Additions.txt rausgeworfen. Gmer hat mitten drin aufgehört, eine Fehlermeldung angezeigt, das book ging dann aus und startete wieder neu. Ich wäre wieder super dankbar, wenn mir da jemand von hilft ![]() Hier erst mal das defogger und frst.: Defogger Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1) Log created at 15:27 on 29/06/2014 (***) Checking for autostart values... HKCU\~\Run values retrieved. HKLM\~\Run values retrieved. Checking for services/drivers... Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:28-06-2014 02 Ran by *** (administrator) on TOSHIBA on 29-06-2014 16:01:19 Running from C:\Users\***\Desktop Platform: Microsoft Windows 7 Professional Service Pack 1 (X86) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\VS7DEBUG\mdm.exe (Secunia) C:\Program Files\Secunia\PSI\psia.exe (Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (shbox.de) C:\Program Files\FreePDF_XP\fpassist.exe (Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynToshiba.exe () C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe (Geek Software GmbH) C:\Program Files\PDF24\pdf24.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (Brother Industries, Ltd.) C:\Program Files\Brother\ControlCenter3\BrccMCtl.exe (Secunia) C:\Program Files\Secunia\PSI\psi_tray.exe (Dropbox, Inc.) C:\Users\***\AppData\Roaming\Dropbox\bin\Dropbox.exe (Brother Industries, Ltd.) C:\Program Files\Brother\Brmfcmon\BrMfimon.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avmailc7.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebgrd.exe (Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1316136 2008-06-20] (Synaptics, Inc.) HKLM\...\Run: [FreePDF Assistant] => C:\Program Files\FreePDF_XP\fpassist.exe [371200 2011-02-23] (shbox.de) HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM\...\Run: [BrMfcWnd] => C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe [1163264 2012-09-25] () HKLM\...\Run: [ControlCenter3] => C:\Program Files\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.) HKLM\...\Run: [PDFPrint] => C:\Program Files\PDF24\pdf24.exe [189480 2014-02-06] (Geek Software GmbH) HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [750160 2014-06-26] (Avira Operations GmbH & Co. KG) HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [256896 2014-05-07] (Oracle Corporation) HKU\S-1-5-21-1019774711-1455369172-2651612590-1000\...\MountPoints2: {169bd3e5-e2e0-11e1-85a0-806e6f6e6963} - E:\start.exe Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files\Secunia\PSI\psi_tray.exe (Secunia) Startup: C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\***\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ShellIconOverlayIdentifiers: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => No File ShellIconOverlayIdentifiers: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => No File ShellIconOverlayIdentifiers: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => No File ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.googl.de/ HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.dell.com HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKCU - {687293DB-9727-4EEA-B56A-0314263A4611} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?su={searchTerms} SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear SearchScopes: HKCU - {A8999728-B95C-4439-8291-2007452BE524} URL = hxxp://go.gmx.net/tb/ie_searchplugin/?su={searchTerms} SearchScopes: HKCU - {D3F652E0-3103-4B8F-917E-3AF6FDB8DA19} URL = hxxp://search.gmx.com/web?q={searchTerms}&origin=tb_splugin_ie SearchScopes: HKCU - {F70C5623-AD96-4662-9D73-8C009114F57C} URL = hxxp://go.web.de/tb/ie_searchplugin/?su={searchTerms} BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKCU - No Name - {41564952-412D-5637-4300-7A786E7484D7} - No File Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\2dg3ck1q.default FF DefaultSearchEngine: LEO Eng-Deu FF SelectedSearchEngine: LEO Eng-Deu FF Homepage: www.google.de FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_125.dll () FF Plugin: @java.com/DTPlugin,version=10.60.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.60.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @videolan.org/vlc,version=2.1.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: WOT - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\2dg3ck1q.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2014-06-22] FF Extension: Adblock Plus - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\2dg3ck1q.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-06-22] ========================== Services (Whitelisted) ================= R2 AntiVirMailService; C:\Program Files\Avira\AntiVir Desktop\avmailc7.exe [811088 2014-05-22] (Avira Operations GmbH & Co. KG) R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [430160 2014-06-26] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [430160 2014-06-26] (Avira Operations GmbH & Co. KG) R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1028688 2014-06-26] (Avira Operations GmbH & Co. KG) R2 MDM; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [335872 2006-10-26] (Microsoft Corporation) [File not signed] R2 Secunia PSI Agent; C:\Program Files\Secunia\PSI\PSIA.exe [1229528 2013-12-06] (Secunia) S2 Secunia Update Agent; C:\Program Files\Secunia\PSI\sua.exe [662232 2013-12-06] (Secunia) ==================== Drivers (Whitelisted) ==================== R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [97648 2014-06-26] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-05-22] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2014-02-25] (Avira Operations GmbH & Co. KG) R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [69240 2014-02-25] (Avira Operations GmbH & Co. KG) R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_x86.sys [16024 2013-12-06] (Secunia) R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2014-02-25] (Avira GmbH) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-06-29 15:36 - 2014-06-29 16:01 - 00008853 _____ () C:\Users\***\Desktop\FRST.txt 2014-06-29 15:27 - 2014-06-29 15:36 - 00000444 _____ () C:\Users\***\Desktop\defogger_disable.log 2014-06-29 15:27 - 2014-06-29 15:27 - 00000000 _____ () C:\Users\***\defogger_reenable 2014-06-29 15:16 - 2014-06-29 15:18 - 00380416 _____ () C:\Users\***\Desktop\Gmer-19357.exe 2014-06-29 15:09 - 2014-06-29 15:14 - 01073664 _____ (Farbar) C:\Users\***\Desktop\FRST.exe 2014-06-29 14:58 - 2014-06-29 14:59 - 00050477 _____ () C:\Users\***\Desktop\Defogger.exe 2014-06-29 13:42 - 2014-06-29 13:42 - 00131072 ____N () C:\Windows\Minidump\062914-23868-01.dmp 2014-06-28 15:40 - 2014-06-28 15:40 - 00131072 ____N () C:\Windows\Minidump\062814-22776-01.dmp 2014-06-25 13:49 - 2014-06-25 13:49 - 00131072 ____N () C:\Windows\Minidump\062514-24070-01.dmp 2014-06-23 16:40 - 2014-06-23 16:41 - 00000000 ____D () C:\Users\***\Desktop\Pc-check 2014-06-22 22:08 - 2014-06-22 22:08 - 00000000 ____D () C:\Users\***\AppData\Local\Adobe 2014-06-22 21:49 - 2014-06-29 15:44 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-06-22 21:49 - 2014-06-22 21:56 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2014-06-22 21:49 - 2014-06-22 21:56 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2014-06-22 21:36 - 2014-06-22 21:36 - 00000952 _____ () C:\Users\Public\Desktop\VLC media player.lnk 2014-06-22 21:34 - 2014-06-22 21:56 - 00001245 _____ () C:\Windows\SecuniaPackage.log 2014-06-22 21:29 - 2014-06-22 21:29 - 00001031 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secunia PSI.lnk 2014-06-22 21:29 - 2014-06-22 21:29 - 00000000 ____D () C:\Users\***\AppData\Local\Secunia PSI 2014-06-22 21:29 - 2014-06-22 21:29 - 00000000 ____D () C:\Program Files\Secunia 2014-06-22 21:22 - 2014-06-29 14:35 - 00000000 ____D () C:\ProgramData\TEMP 2014-06-22 21:22 - 2014-06-29 14:27 - 00000000 ____D () C:\Program Files\SpywareBlaster 2014-06-22 21:22 - 2014-06-22 21:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpywareBlaster 2014-06-22 21:22 - 2014-06-22 21:22 - 00000000 ____D () C:\ProgramData\Licenses 2014-06-22 21:21 - 2014-06-22 21:21 - 04095448 _____ (BrightFort LLC ) C:\Users\***\Downloads\spywareblastersetup50.exe 2014-06-22 17:18 - 2014-06-22 22:16 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-06-22 17:18 - 2014-06-22 17:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-06-22 17:18 - 2014-06-22 17:18 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-06-22 17:18 - 2014-06-22 17:18 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 2014-06-22 17:18 - 2014-05-12 07:26 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-06-22 17:18 - 2014-05-12 07:25 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-06-22 17:18 - 2014-05-12 07:25 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-06-22 17:16 - 2014-06-22 17:17 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\***\Downloads\mbam-setup-2.0.2.1012.exe 2014-06-22 09:01 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll 2014-06-20 19:20 - 2014-06-29 16:01 - 00000000 ____D () C:\FRST 2014-06-18 15:24 - 2014-06-18 15:24 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-06-17 18:26 - 2014-06-17 18:26 - 00131072 ____N () C:\Windows\Minidump\061714-22495-01.dmp 2014-06-17 18:24 - 2014-06-17 18:24 - 00131072 ____N () C:\Windows\Minidump\061714-22011-01.dmp 2014-06-15 17:44 - 2014-06-15 17:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-06-15 17:44 - 2014-06-15 17:44 - 00000000 ____D () C:\Program Files\Common Files\Java 2014-06-15 17:44 - 2014-05-07 15:02 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll 2014-06-15 17:44 - 2014-05-07 14:59 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2014-06-15 17:44 - 2014-05-07 14:59 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2014-06-15 17:44 - 2014-05-07 14:58 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2014-06-15 17:43 - 2014-06-15 17:44 - 00004528 _____ () C:\Windows\system32\jupdate-1.7.0_60-b19.log 2014-06-15 16:09 - 2014-01-09 04:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2014-06-15 16:05 - 2014-05-08 11:06 - 02742784 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2014-06-15 16:05 - 2014-05-08 11:06 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll 2014-06-15 15:55 - 2013-10-02 02:42 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys 2014-06-15 15:55 - 2013-10-02 02:32 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe 2014-06-15 15:55 - 2013-10-02 02:30 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll 2014-06-15 15:55 - 2013-10-02 02:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll 2014-06-15 15:55 - 2013-10-02 02:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll 2014-06-15 15:55 - 2013-10-02 01:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2014-06-15 15:55 - 2013-10-02 01:45 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll 2014-06-15 15:55 - 2013-10-02 01:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll 2014-06-15 15:55 - 2013-10-02 01:00 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe 2014-06-15 15:55 - 2013-10-02 00:53 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe 2014-06-15 15:55 - 2013-10-02 00:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe 2014-06-15 15:55 - 2012-08-23 16:48 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll 2014-06-15 15:55 - 2012-08-23 16:44 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys 2014-06-15 15:55 - 2012-08-23 13:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll 2014-06-15 15:53 - 2013-09-25 03:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll 2014-06-13 17:00 - 2014-06-13 17:01 - 00011278 _____ () C:\Users\***\Desktop\putzplan.xlsx 2014-06-12 17:24 - 2014-06-13 17:39 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird 2014-06-12 17:10 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-06-12 17:10 - 2014-05-30 11:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-06-12 17:10 - 2014-05-30 11:02 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-06-12 17:10 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-06-12 17:10 - 2014-05-30 10:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-06-12 17:10 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-06-12 17:10 - 2014-05-30 10:34 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-06-12 17:10 - 2014-05-30 10:33 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-06-12 17:10 - 2014-05-30 10:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-06-12 17:10 - 2014-05-30 10:28 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-06-12 17:10 - 2014-05-30 10:28 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-06-12 17:10 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-06-12 17:10 - 2014-05-30 10:21 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-06-12 17:10 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-06-12 17:10 - 2014-05-30 10:10 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-06-12 17:10 - 2014-05-30 10:06 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-06-12 17:10 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-06-12 17:10 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-06-12 17:10 - 2014-05-30 09:57 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-06-12 17:10 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-06-12 17:10 - 2014-05-30 09:50 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-06-12 17:10 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-06-12 17:10 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-06-12 17:10 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-06-12 17:10 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-06-12 17:10 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-06-12 17:10 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2014-06-12 17:10 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-06-12 17:10 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll 2014-06-12 17:10 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2014-06-12 17:09 - 2014-06-08 10:48 - 00391680 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-06-12 17:09 - 2014-06-08 10:43 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-06-12 17:09 - 2014-05-30 10:44 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-06-12 17:09 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-06-12 17:09 - 2014-04-05 04:25 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2014-06-12 17:09 - 2014-04-05 04:24 - 00187840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2014-06-12 17:08 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2014-06-03 18:30 - 2014-06-25 16:52 - 00039498 _____ () C:\Users\***\Documents\IntelliPlanArchive.zip 2014-06-03 18:27 - 2014-06-25 16:42 - 00004096 _____ () C:\Users\Public\Documents\0000181D.LCS 2014-06-03 18:27 - 2014-06-03 18:27 - 00000000 ____D () C:\Users\***\AppData\Roaming\ProtectDISC 2014-05-30 18:25 - 2014-05-30 18:25 - 00131072 ____N () C:\Windows\Minidump\053014-25942-01.dmp ==================== One Month Modified Files and Folders ======= 2014-06-29 16:03 - 2014-06-29 15:36 - 00008853 _____ () C:\Users\***\Desktop\FRST.txt 2014-06-29 16:01 - 2014-06-20 19:20 - 00000000 ____D () C:\FRST 2014-06-29 15:44 - 2014-06-22 21:49 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-06-29 15:43 - 2009-07-14 06:34 - 00033904 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-06-29 15:43 - 2009-07-14 06:34 - 00033904 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-06-29 15:41 - 2012-08-10 13:42 - 01982274 _____ () C:\Windows\WindowsUpdate.log 2014-06-29 15:36 - 2014-06-29 15:27 - 00000444 _____ () C:\Users\***\Desktop\defogger_disable.log 2014-06-29 15:35 - 2014-05-02 23:18 - 00000000 ____D () C:\Users\***\AppData\Roaming\DropboxMaster 2014-06-29 15:35 - 2012-08-13 21:28 - 00000000 ___RD () C:\Users\***\Dropbox 2014-06-29 15:35 - 2012-08-13 20:51 - 00000000 ____D () C:\Users\***\AppData\Roaming\Dropbox 2014-06-29 15:34 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-06-29 15:34 - 2009-07-14 06:39 - 00195303 _____ () C:\Windows\setupact.log 2014-06-29 15:27 - 2014-06-29 15:27 - 00000000 _____ () C:\Users\***\defogger_reenable 2014-06-29 15:27 - 2012-08-10 13:49 - 00000000 ____D () C:\Users\*** 2014-06-29 15:18 - 2014-06-29 15:16 - 00380416 _____ () C:\Users\***\Desktop\Gmer-19357.exe 2014-06-29 15:14 - 2014-06-29 15:09 - 01073664 _____ (Farbar) C:\Users\***\Desktop\FRST.exe 2014-06-29 14:59 - 2014-06-29 14:58 - 00050477 _____ () C:\Users\***\Desktop\Defogger.exe 2014-06-29 14:35 - 2014-06-22 21:22 - 00000000 ____D () C:\ProgramData\TEMP 2014-06-29 14:27 - 2014-06-22 21:22 - 00000000 ____D () C:\Program Files\SpywareBlaster 2014-06-29 13:42 - 2014-06-29 13:42 - 00131072 ____N () C:\Windows\Minidump\062914-23868-01.dmp 2014-06-29 13:42 - 2012-08-11 10:29 - 00000000 ____D () C:\Windows\Minidump 2014-06-28 15:40 - 2014-06-28 15:40 - 00131072 ____N () C:\Windows\Minidump\062814-22776-01.dmp 2014-06-26 13:37 - 2014-05-12 18:07 - 00097648 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2014-06-25 16:52 - 2014-06-03 18:30 - 00039498 _____ () C:\Users\***\Documents\IntelliPlanArchive.zip 2014-06-25 16:42 - 2014-06-03 18:27 - 00004096 _____ () C:\Users\Public\Documents\0000181D.LCS 2014-06-25 13:49 - 2014-06-25 13:49 - 00131072 ____N () C:\Windows\Minidump\062514-24070-01.dmp 2014-06-23 16:41 - 2014-06-23 16:40 - 00000000 ____D () C:\Users\***\Desktop\Pc-check 2014-06-23 10:14 - 2012-08-10 15:01 - 00000000 ____D () C:\Program Files\WinRAR 2014-06-23 10:14 - 2010-11-20 23:48 - 00236546 _____ () C:\Windows\PFRO.log 2014-06-22 22:16 - 2014-06-22 17:18 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-06-22 22:08 - 2014-06-22 22:08 - 00000000 ____D () C:\Users\***\AppData\Local\Adobe 2014-06-22 21:56 - 2014-06-22 21:49 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2014-06-22 21:56 - 2014-06-22 21:49 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2014-06-22 21:56 - 2014-06-22 21:34 - 00001245 _____ () C:\Windows\SecuniaPackage.log 2014-06-22 21:36 - 2014-06-22 21:36 - 00000952 _____ () C:\Users\Public\Desktop\VLC media player.lnk 2014-06-22 21:36 - 2012-08-10 16:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN 2014-06-22 21:29 - 2014-06-22 21:29 - 00001031 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secunia PSI.lnk 2014-06-22 21:29 - 2014-06-22 21:29 - 00000000 ____D () C:\Users\***\AppData\Local\Secunia PSI 2014-06-22 21:29 - 2014-06-22 21:29 - 00000000 ____D () C:\Program Files\Secunia 2014-06-22 21:22 - 2014-06-22 21:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpywareBlaster 2014-06-22 21:22 - 2014-06-22 21:22 - 00000000 ____D () C:\ProgramData\Licenses 2014-06-22 21:21 - 2014-06-22 21:21 - 04095448 _____ (BrightFort LLC ) C:\Users\***\Downloads\spywareblastersetup50.exe 2014-06-22 17:18 - 2014-06-22 17:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-06-22 17:18 - 2014-06-22 17:18 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-06-22 17:18 - 2014-06-22 17:18 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 2014-06-22 17:17 - 2014-06-22 17:16 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\***\Downloads\mbam-setup-2.0.2.1012.exe 2014-06-22 09:16 - 2013-11-22 00:39 - 00000000 ____D () C:\AdwCleaner 2014-06-19 19:13 - 2012-09-27 17:16 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service 2014-06-18 19:09 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache 2014-06-18 15:24 - 2014-06-18 15:24 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-06-17 18:26 - 2014-06-17 18:26 - 00131072 ____N () C:\Windows\Minidump\061714-22495-01.dmp 2014-06-17 18:24 - 2014-06-17 18:24 - 00131072 ____N () C:\Windows\Minidump\061714-22011-01.dmp 2014-06-15 17:44 - 2014-06-15 17:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-06-15 17:44 - 2014-06-15 17:44 - 00000000 ____D () C:\Program Files\Common Files\Java 2014-06-15 17:44 - 2014-06-15 17:43 - 00004528 _____ () C:\Windows\system32\jupdate-1.7.0_60-b19.log 2014-06-15 17:44 - 2013-10-03 12:59 - 00000000 ____D () C:\ProgramData\Oracle 2014-06-15 17:44 - 2013-10-03 12:58 - 00000000 ____D () C:\Program Files\Java 2014-06-15 16:36 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE 2014-06-15 15:59 - 2009-07-14 04:37 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories 2014-06-15 15:57 - 2012-08-10 23:36 - 00000000 ____D () C:\Windows\system32\Drivers\de-DE 2014-06-15 14:30 - 2014-05-09 18:25 - 00000000 ____D () C:\Users\***\Desktop\Stick *** 2014-06-13 17:39 - 2014-06-12 17:24 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird 2014-06-13 17:01 - 2014-06-13 17:00 - 00011278 _____ () C:\Users\***\Desktop\putzplan.xlsx 2014-06-13 09:15 - 2010-11-20 23:01 - 01658652 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-06-13 09:08 - 2014-05-06 15:39 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-06-12 20:08 - 2013-08-14 15:56 - 00000000 ____D () C:\Windows\system32\MRT 2014-06-12 20:07 - 2012-08-10 16:26 - 92708840 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-06-08 10:48 - 2014-06-12 17:09 - 00391680 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-06-08 10:43 - 2014-06-12 17:09 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-06-06 20:51 - 2014-05-22 23:03 - 00040015 _____ () C:\Users\***\Desktop\20140308_Modul_17.2_Sexualdelikte_Karsten_Bettels.odt 2014-06-03 18:27 - 2014-06-03 18:27 - 00000000 ____D () C:\Users\***\AppData\Roaming\ProtectDISC 2014-06-02 18:07 - 2012-08-13 20:56 - 00000000 ____D () C:\Users\***\Desktop\PA 2014-06-02 17:20 - 2009-07-14 06:53 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-05-30 18:25 - 2014-05-30 18:25 - 00131072 ____N () C:\Windows\Minidump\053014-25942-01.dmp 2014-05-30 11:18 - 2014-06-12 17:10 - 17271296 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-05-30 11:02 - 2014-06-12 17:10 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-05-30 11:02 - 2014-06-12 17:10 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-05-30 10:44 - 2014-06-12 17:09 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-05-30 10:43 - 2014-06-12 17:10 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-05-30 10:42 - 2014-06-12 17:10 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-05-30 10:38 - 2014-06-12 17:10 - 02179072 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-05-30 10:34 - 2014-06-12 17:10 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-05-30 10:33 - 2014-06-12 17:10 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-05-30 10:30 - 2014-06-12 17:10 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-05-30 10:28 - 2014-06-12 17:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-05-30 10:28 - 2014-06-12 17:10 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-05-30 10:27 - 2014-06-12 17:10 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-05-30 10:21 - 2014-06-12 17:10 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-05-30 10:16 - 2014-06-12 17:10 - 00368128 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-05-30 10:10 - 2014-06-12 17:10 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-05-30 10:06 - 2014-06-12 17:10 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-05-30 10:04 - 2014-06-12 17:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-05-30 10:02 - 2014-06-12 17:10 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-05-30 09:57 - 2014-06-12 17:10 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-05-30 09:56 - 2014-06-12 17:09 - 04244992 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-05-30 09:54 - 2014-06-12 17:10 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-05-30 09:50 - 2014-06-12 17:10 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-05-30 09:49 - 2014-06-12 17:10 - 01964544 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-05-30 09:40 - 2014-06-12 17:10 - 11725312 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-05-30 09:21 - 2014-06-12 17:10 - 01790976 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-05-30 09:15 - 2014-06-12 17:10 - 01143296 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-05-30 09:13 - 2014-06-12 17:10 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll Files to move or delete: ==================== C:\ProgramData\EBLib.dll Some content of TEMP: ==================== C:\Users\***\AppData\Local\Temp\avgnt.exe C:\Users\***\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpbfsofs.dll ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => File is digitally signed C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-06-18 19:01 ==================== End Of Log ============================ |
Themen zu Windows 7: Programme und Internet extrem Langsam |
administrator, adobe, adobe flash player, antivir, avira, browser, explorer, fehlermeldung, flash player, homepage, internet, langsam, modul, mozilla, opera, programme, registry, scan, services.exe, software, stick, super, svchost.exe, system, windows, winlogon.exe |