| |
| |||||||
Log-Analyse und Auswertung: Netbook fährt extrem langsam hoch und auch die Programme laden langsamWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
21.07.2014, 18:58
| #5 |
 |  Netbook fährt extrem langsam hoch und auch die Programme laden langsam Hallo Schrauber, habe versucht alle Logs zu bekommen, aber leider bin ich auf ein kleines Problem gestossen Für den MBAM konnte ich hier am Netbook nicht an den Button zum Exportieren rankommen. Habe auch versucht die Taskleiste ausblenden zulassen, aber das Fenster welches sich bei Ansicht geöffnet hat, war zu groß und ließ sich i-wie auch nicht verkleinern oder so verschieben, das ich die mbam.txt ertellen konnte  Wenn du einen Weg kennst, wie/wo ich an den Log komme - dann reiche ich ihn dir natürlich nach... die anderen Logs folgen nun: AdwCleaner: Code:
ATTFilter # AdwCleaner v3.216 - Bericht erstellt am 21/07/2014 um 17:44:59
# Aktualisiert 17/07/2014 von Xplode
# Betriebssystem : Windows 7 Starter Service Pack 1 (32 bits)
# Benutzername : Lola - FRIGG
# Gestartet von : C:\Users\Lola\Desktop\adwcleaner_3.216.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\IObit\Driver Booster
Ordner Gelöscht : C:\ProgramData\Partner
Ordner Gelöscht : C:\Program Files\IObit\Driver Booster
Ordner Gelöscht : C:\Program Files\Mail.Ru
Ordner Gelöscht : C:\Users\Lola\AppData\Local\Mail.Ru
Ordner Gelöscht : C:\Users\Lola\AppData\Roaming\IObit\Driver Booster
Ordner Gelöscht : C:\Users\Lola\AppData\Roaming\Systweak
Ordner Gelöscht : C:\Users\Lola\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mail.Ru
Datei Gelöscht : C:\Users\Lola\AppData\Roaming\Mozilla\Firefox\Profiles\wx4ijpqa.default\user.js
Datei Gelöscht : C:\Windows\System32\Tasks\Driver Booster Scan
Datei Gelöscht : C:\Windows\System32\Tasks\Driver Booster Update
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{85704DB6-DE6E-404E-90E1-69478592EB1E}
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{85704DB6-DE6E-404E-90E1-69478592EB1E}
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{CF54C5D8-A70B-47A4-AF58-C633C15CEB2E}
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CF54C5D8-A70B-47A4-AF58-C633C15CEB2E}
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1EC9510D-A439-4950-9399-B6399EDF9EA7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\WLXQuickTimeShellExt.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_app-launcher_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_app-launcher_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{00B11DA2-75ED-4364-ABA5-9A95B1F5E946}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2318C2B1-4965-11D4-9B18-009027A5CD4F}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2318C2B1-4965-11D4-9B18-009027A5CD4F}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{2318C2B1-4965-11D4-9B18-009027A5CD4F}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{2318C2B1-4965-11D4-9B18-009027A5CD4F}]
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar
Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.17207
-\\ Mozilla Firefox v30.0 (de)
[ Datei : C:\Users\Lola\AppData\Roaming\Mozilla\Firefox\Profiles\wx4ijpqa.default\prefs.js ]
Zeile gelöscht : user_pref("splitbrowser.undo.state", "%28%7Btitle%3A%22Fox%20Splitter%20%28formerly%20Split%20Browser%29%20%3A%3A%20Firefox%20Add-ons%22%2C%20icon%3A%22hxxps%3A//addons.mozilla.org/media//img/favicon.[...]
-\\ Google Chrome v36.0.1985.125
[ Datei : C:\Users\Lola\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Gelöscht [Search Provider] : hxxp://websearch.ask.com/redirect?client=cr&src=kw&tb=AVR-4&o=APN10261&locale=de_DE&apn_uid=a7b75062-2a18-4df5-94ba-330652a94777&apn_ptnrs=%5EAGS&apn_sauid=4CA72D85-B78B-48F7-9E18-5C9266D0E392&apn_dtid=%5EYYYYYY%5EYY%5EDE&q={searchTerms}
*************************
AdwCleaner[R0].txt - [4848 octets] - [21/07/2014 17:40:20]
AdwCleaner[S0].txt - [4789 octets] - [21/07/2014 17:44:59]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4849 octets] ##########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.3 (03.23.2014:1)
OS: Windows 7 Starter x86
Ran by Lola on 21.07.2014 at 19:23:08,22
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{2D46DE75-C96F-4F9F-B3BD-8BAF0983F886}
~~~ Files
Successfully deleted: [File] "C:\Windows\Tasks\wise care 365.job"
~~~ Folders
~~~ FireFox
Emptied folder: C:\Users\Lola\AppData\Roaming\mozilla\firefox\profiles\wx4ijpqa.default\minidumps [3 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 21.07.2014 at 19:37:23,95
Computer was rebooted
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:20-07-2014 Ran by Lola (administrator) on FRIGG on 21-07-2014 19:37:53 Running from C:\Users\Lola\Desktop Platform: Microsoft Windows 7 Starter Service Pack 1 (X86) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (IObit) C:\Program Files\IObit\Advanced SystemCare 7\ASCService.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe (Egis Technology Inc.) C:\Program Files\EgisTec Egis Software Update\EgisUpdate.exe (Egis Technology Inc.) C:\Program Files\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe (IObit) C:\Program Files\IObit\Smart Defrag 3\SmartDefrag.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (IObit) C:\Program Files\IObit\Advanced SystemCare 7\Monitor.exe (Acer Incorporated) C:\Program Files\Acer\Registration\GregHSRW.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (IObit) C:\Program Files\IObit\Advanced SystemCare 7\ASCTray.exe (Acer Incorporated) C:\Program Files\Acer\Acer VCM\AcerVCM.exe (Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe (Acer Incorporated) C:\Program Files\Acer\Acer VCM\RS_Service.exe (Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation) C:\Windows\System32\igfxext.exe (Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbam.exe (Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebgrd.exe ==================== Registry (Whitelisted) ================== HKU\S-1-5-21-624116608-515939505-3949833191-1000\...\Run: [swg] => C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2009-10-29] (Google Inc.) HKU\S-1-5-21-624116608-515939505-3949833191-1000\...\Run: [Advanced SystemCare 7] => C:\Program Files\IObit\Advanced SystemCare 7\ASCTray.exe [2295584 2014-04-21] (IObit) HKU\S-1-5-21-624116608-515939505-3949833191-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1 Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Acer VCM.lnk ShortcutTarget: Acer VCM.lnk -> C:\Program Files\Acer\Acer VCM\AcerVCM.exe (Acer Incorporated) ShellIconOverlayIdentifiers: egisPSDP -> {30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} => C:\Program Files\EgisTec\MyWinLocker 3\x86\psdprotect.dll (Egis Technology Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_one&r=27b507105865l0334ww05w48i2380r HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKLM - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_deDE390DE390 BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll (IObit) BHO: No Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} -> No File BHO: Windows Live Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) BHO: Advanced SystemCare Browser Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit) Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation) Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation) Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\Lola\AppData\Roaming\Mozilla\Firefox\Profiles\wx4ijpqa.default FF DefaultSearchEngine: Google FF SearchEngineOrder.1: Ask.com FF SelectedSearchEngine: Ask.com FF Homepage: hxxp://www.warofdragons.de/ FF NetworkProxy: "http", "85.214.71.220" FF NetworkProxy: "http_port", 3128 FF NetworkProxy: "type", 0 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_145.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin: @microsoft.com/WLPG,version=14.0.8117.0416 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Lola\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Users\Lola\AppData\Roaming\Mozilla\Firefox\Profiles\wx4ijpqa.default\searchplugins\google-images.xml FF SearchPlugin: C:\Users\Lola\AppData\Roaming\Mozilla\Firefox\Profiles\wx4ijpqa.default\searchplugins\google-maps.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Advanced SystemCare Surfing Protection - C:\Users\Lola\AppData\Roaming\Mozilla\Firefox\Profiles\wx4ijpqa.default\Extensions\ascsurfingprotection@iobit.com [2014-06-10] FF Extension: Cliqz Beta - C:\Users\Lola\AppData\Roaming\Mozilla\Firefox\Profiles\wx4ijpqa.default\Extensions\cliqz@cliqz.com.xpi [2014-06-20] FF Extension: Adblock Plus - C:\Users\Lola\AppData\Roaming\Mozilla\Firefox\Profiles\wx4ijpqa.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-05-02] FF HKCU\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\Lola\AppData\Roaming\Mozilla\Firefox\Profiles\wx4ijpqa.default\extensions\cliqz@cliqz.com Chrome: ======= CHR HomePage: CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll No File CHR Extension: (Google Docs) - C:\Users\Lola\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-09-09] CHR Extension: (Google Drive) - C:\Users\Lola\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-09-09] CHR Extension: (YouTube) - C:\Users\Lola\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-09-09] CHR Extension: (Google-Suche) - C:\Users\Lola\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-09-09] CHR Extension: (Google Wallet) - C:\Users\Lola\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-09] CHR Extension: (Google Mail) - C:\Users\Lola\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-09-09] ========================== Services (Whitelisted) ================= R2 AdvancedSystemCareService7; C:\Program Files\IObit\Advanced SystemCare 7\ASCService.exe [881952 2014-01-14] (IObit) R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [430160 2014-06-24] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [430160 2014-06-24] (Avira Operations GmbH & Co. KG) R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1028688 2014-06-24] (Avira Operations GmbH & Co. KG) R2 ePowerSvc; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [727584 2009-09-30] (Acer Incorporated) R2 Greg_Service; C:\Program Files\Acer\Registration\GregHSRW.exe [1150496 2009-08-28] (Acer Incorporated) S2 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2175264 2014-06-10] (IObit) R2 MBAMScheduler; C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation) S3 MWLService; C:\Program Files\EgisTec\MyWinLocker 3\x86\\MWLService.exe [305448 2009-09-10] (Egis Technology Inc.) R2 RS_Service; C:\Program Files\Acer\Acer VCM\RS_Service.exe [253952 2009-07-10] (Acer Incorporated) [File not signed] S2 Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [240160 2009-07-04] (Acer) ==================== Drivers (Whitelisted) ==================== R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [97648 2014-06-24] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-06-03] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-12-03] (Avira Operations GmbH & Co. KG) R3 L1C; C:\Windows\System32\DRIVERS\L1C62x86.sys [109256 2014-06-10] (Qualcomm Atheros Co., Ltd.) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-05-12] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [110296 2014-07-21] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2014-05-12] (Malwarebytes Corporation) R1 mwlPSDFilter; C:\Windows\System32\DRIVERS\mwlPSDFilter.sys [18992 2009-06-02] (Egis Technology Inc.) R1 mwlPSDNServ; C:\Windows\System32\DRIVERS\mwlPSDNServ.sys [16432 2009-06-02] (Egis Technology Inc.) R1 mwlPSDVDisk; C:\Windows\System32\DRIVERS\mwlPSDVDisk.sys [60976 2009-06-02] (Egis Technology Inc.) R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [18624 2013-12-24] (IObit) R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-04-06] (Avira GmbH) U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation) S3 catchme; \??\C:\Users\Lola\AppData\Local\Temp\catchme.sys [X] S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [X] S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-07-21 19:37 - 2014-07-21 19:37 - 00000988 _____ () C:\Users\Lola\Desktop\JRT.txt 2014-07-21 19:10 - 2014-07-21 19:10 - 00000000 ____D () C:\Windows\ERUNT 2014-07-21 19:07 - 2014-07-21 19:07 - 00004929 _____ () C:\Users\Lola\Desktop\AdwCl.txt 2014-07-21 17:41 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll 2014-07-21 17:39 - 2014-07-21 18:57 - 00000000 ____D () C:\AdwCleaner 2014-07-21 16:45 - 2014-07-21 16:45 - 00000000 __SHD () C:\Users\Lola\AppData\Local\EmieUserList 2014-07-21 16:45 - 2014-07-21 16:45 - 00000000 __SHD () C:\Users\Lola\AppData\Local\EmieSiteList 2014-07-21 15:05 - 2014-07-21 19:22 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-07-21 15:05 - 2014-07-21 15:05 - 00001064 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-07-21 15:05 - 2014-07-21 15:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-07-21 15:04 - 2014-07-21 15:05 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 2014-07-21 15:04 - 2014-07-21 15:04 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-07-21 15:04 - 2014-05-12 07:26 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-07-21 15:04 - 2014-05-12 07:25 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-07-21 15:04 - 2014-05-12 07:25 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-07-21 15:00 - 2014-07-21 15:01 - 01016261 _____ (Thisisu) C:\Users\Lola\Desktop\JRT.exe 2014-07-21 15:00 - 2014-07-21 15:00 - 01354223 _____ () C:\Users\Lola\Desktop\adwcleaner_3.216.exe 2014-07-21 14:59 - 2014-07-21 15:01 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Lola\Desktop\mbam-setup-2.0.2.1012.exe 2014-07-21 11:16 - 2014-07-21 11:16 - 00021875 _____ () C:\ComboFix.txt 2014-07-21 10:37 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe 2014-07-21 10:37 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe 2014-07-21 10:37 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-07-21 10:37 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-07-21 10:37 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-07-21 10:37 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe 2014-07-21 10:37 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe 2014-07-21 10:37 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe 2014-07-21 10:36 - 2014-07-21 11:16 - 00000000 ____D () C:\Qoobox 2014-07-21 10:35 - 2014-07-21 11:11 - 00000000 ____D () C:\Windows\erdnt 2014-07-21 10:31 - 2014-07-21 10:32 - 05561612 ____R (Swearware) C:\Users\Lola\Desktop\ComboFix.exe 2014-07-21 10:28 - 2014-07-21 10:29 - 05561612 _____ (Swearware) C:\Users\Lola\Downloads\ComboFix.exe 2014-07-20 23:57 - 2014-01-09 04:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2014-07-20 23:47 - 2014-07-20 23:50 - 00028962 _____ () C:\Users\Lola\Desktop\Addition.txt 2014-07-20 23:43 - 2014-07-21 19:37 - 00013115 _____ () C:\Users\Lola\Desktop\FRST.txt 2014-07-20 23:12 - 2013-10-02 02:32 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe 2014-07-20 23:12 - 2013-10-02 01:45 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll 2014-07-20 23:11 - 2013-10-02 02:42 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys 2014-07-20 23:11 - 2013-10-02 02:30 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll 2014-07-20 23:11 - 2013-10-02 02:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll 2014-07-20 23:11 - 2013-10-02 02:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll 2014-07-20 23:11 - 2013-10-02 01:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2014-07-20 23:11 - 2013-10-02 01:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll 2014-07-20 23:11 - 2013-10-02 01:00 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe 2014-07-20 23:11 - 2013-10-02 00:53 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe 2014-07-20 23:11 - 2013-10-02 00:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe 2014-07-20 23:10 - 2013-09-25 03:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll 2014-07-20 22:17 - 2014-07-21 19:38 - 00000000 ____D () C:\FRST 2014-07-20 21:19 - 2014-07-20 21:19 - 00380416 _____ () C:\Users\Lola\Desktop\Gmer-19357.exe 2014-07-20 21:18 - 2014-07-20 21:19 - 01080320 _____ (Farbar) C:\Users\Lola\Desktop\FRST.exe 2014-07-20 21:16 - 2014-07-20 21:16 - 00050477 _____ () C:\Users\Lola\Desktop\Defogger.exe 2014-07-20 14:42 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-07-20 14:42 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-07-20 14:42 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-07-20 14:42 - 2014-06-19 01:56 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-07-20 14:42 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-07-20 14:42 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-07-20 14:42 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-07-20 14:42 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-07-20 14:42 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-07-20 14:42 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-07-20 14:42 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-07-20 14:42 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-07-20 14:42 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-07-20 14:42 - 2014-06-19 01:23 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-07-20 14:42 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-07-20 14:42 - 2014-06-19 01:16 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-07-20 14:42 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-07-20 14:42 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-07-20 14:42 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-07-20 14:42 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-07-20 14:42 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-07-20 14:42 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-07-20 14:42 - 2014-06-19 00:52 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-07-20 14:42 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-07-20 14:42 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-07-20 14:42 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-07-20 14:42 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-07-20 14:42 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-07-20 14:42 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-07-20 14:42 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-07-20 14:42 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2014-07-20 14:42 - 2014-06-18 02:52 - 02350080 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-07-20 14:41 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-07-20 14:40 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-07-20 14:40 - 2014-05-30 08:36 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2014-07-20 14:39 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-07-20 14:39 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-07-20 14:39 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2014-07-20 14:39 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-07-20 14:39 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-07-20 14:39 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-07-20 14:38 - 2014-06-05 16:26 - 01059840 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-07-20 03:30 - 2014-07-20 03:30 - 00000000 ____D () C:\Users\Default\AppData\Roaming\IObit 2014-07-20 03:30 - 2014-07-20 03:30 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\IObit 2014-07-20 03:28 - 2014-07-20 03:29 - 00144960 _____ () C:\Windows\Minidump\072014-23836-01.dmp 2014-07-20 03:28 - 2014-07-20 03:28 - 372600835 _____ () C:\Windows\MEMORY.DMP 2014-07-16 21:32 - 2014-07-21 19:16 - 00000616 _____ () C:\Windows\setupact.log 2014-07-16 21:32 - 2014-07-21 19:04 - 00001884 _____ () C:\Windows\PFRO.log 2014-07-16 21:32 - 2014-07-16 21:32 - 00000000 _____ () C:\Windows\setuperr.log ==================== One Month Modified Files and Folders ======= 2014-07-21 19:39 - 2014-07-20 23:43 - 00013115 _____ () C:\Users\Lola\Desktop\FRST.txt 2014-07-21 19:38 - 2014-07-20 22:17 - 00000000 ____D () C:\FRST 2014-07-21 19:37 - 2014-07-21 19:37 - 00000988 _____ () C:\Users\Lola\Desktop\JRT.txt 2014-07-21 19:36 - 2012-04-17 13:17 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-07-21 19:32 - 2009-07-14 06:34 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-07-21 19:32 - 2009-07-14 06:34 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-07-21 19:22 - 2014-07-21 15:05 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-07-21 19:16 - 2014-07-16 21:32 - 00000616 _____ () C:\Windows\setupact.log 2014-07-21 19:16 - 2010-07-29 06:17 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-07-21 19:16 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-07-21 19:15 - 2014-04-29 15:38 - 01109738 _____ () C:\Windows\WindowsUpdate.log 2014-07-21 19:10 - 2014-07-21 19:10 - 00000000 ____D () C:\Windows\ERUNT 2014-07-21 19:07 - 2014-07-21 19:07 - 00004929 _____ () C:\Users\Lola\Desktop\AdwCl.txt 2014-07-21 19:04 - 2014-07-16 21:32 - 00001884 _____ () C:\Windows\PFRO.log 2014-07-21 18:57 - 2014-07-21 17:39 - 00000000 ____D () C:\AdwCleaner 2014-07-21 18:57 - 2014-06-10 19:47 - 00000000 ____D () C:\Users\Lola\AppData\Roaming\IObit 2014-07-21 18:51 - 2010-07-29 06:17 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-07-21 17:45 - 2014-06-10 19:47 - 00000000 ____D () C:\Program Files\IObit 2014-07-21 16:45 - 2014-07-21 16:45 - 00000000 __SHD () C:\Users\Lola\AppData\Local\EmieUserList 2014-07-21 16:45 - 2014-07-21 16:45 - 00000000 __SHD () C:\Users\Lola\AppData\Local\EmieSiteList 2014-07-21 16:45 - 2010-07-29 06:08 - 00000000 ____D () C:\Users\Lola\AppData\Local\Google 2014-07-21 15:05 - 2014-07-21 15:05 - 00001064 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-07-21 15:05 - 2014-07-21 15:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-07-21 15:05 - 2014-07-21 15:04 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 2014-07-21 15:04 - 2014-07-21 15:04 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-07-21 15:02 - 2012-02-06 18:55 - 00000000 ____D () C:\Users\Lola\Desktop\Download 2014-07-21 15:01 - 2014-07-21 15:00 - 01016261 _____ (Thisisu) C:\Users\Lola\Desktop\JRT.exe 2014-07-21 15:01 - 2014-07-21 14:59 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Lola\Desktop\mbam-setup-2.0.2.1012.exe 2014-07-21 15:00 - 2014-07-21 15:00 - 01354223 _____ () C:\Users\Lola\Desktop\adwcleaner_3.216.exe 2014-07-21 12:23 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache 2014-07-21 11:16 - 2014-07-21 11:16 - 00021875 _____ () C:\ComboFix.txt 2014-07-21 11:16 - 2014-07-21 10:36 - 00000000 ____D () C:\Qoobox 2014-07-21 11:16 - 2009-07-14 04:37 - 00000000 __RHD () C:\Users\Default 2014-07-21 11:16 - 2009-07-14 04:37 - 00000000 ___RD () C:\Users\Public 2014-07-21 11:11 - 2014-07-21 10:35 - 00000000 ____D () C:\Windows\erdnt 2014-07-21 11:03 - 2009-07-14 04:04 - 00000215 _____ () C:\Windows\system.ini 2014-07-21 11:01 - 2009-07-14 04:03 - 48496640 _____ () C:\Windows\system32\config\SOFTWARE.bak 2014-07-21 11:01 - 2009-07-14 04:03 - 15990784 _____ () C:\Windows\system32\config\SYSTEM.bak 2014-07-21 11:01 - 2009-07-14 04:03 - 00262144 _____ () C:\Windows\system32\config\DEFAULT.bak 2014-07-21 11:01 - 2009-07-14 04:03 - 00057344 _____ () C:\Windows\system32\config\SAM.bak 2014-07-21 11:01 - 2009-07-14 04:03 - 00024576 _____ () C:\Windows\system32\config\SECURITY.bak 2014-07-21 10:32 - 2014-07-21 10:31 - 05561612 ____R (Swearware) C:\Users\Lola\Desktop\ComboFix.exe 2014-07-21 10:29 - 2014-07-21 10:28 - 05561612 _____ (Swearware) C:\Users\Lola\Downloads\ComboFix.exe 2014-07-21 09:42 - 2012-10-25 23:37 - 00000000 ____D () C:\Users\Lola\AppData\Roaming\Wise Care 365 2014-07-21 01:04 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE 2014-07-20 23:50 - 2014-07-20 23:47 - 00028962 _____ () C:\Users\Lola\Desktop\Addition.txt 2014-07-20 23:40 - 2009-07-14 06:33 - 00334608 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-07-20 23:26 - 2009-12-01 14:21 - 00000000 ____D () C:\Windows\system32\Drivers\de-DE 2014-07-20 23:05 - 2013-08-22 23:44 - 00000000 ____D () C:\Windows\system32\MRT 2014-07-20 22:55 - 2010-08-23 03:20 - 93585272 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-07-20 22:27 - 2014-06-10 19:47 - 00000000 ____D () C:\ProgramData\IObit 2014-07-20 21:19 - 2014-07-20 21:19 - 00380416 _____ () C:\Users\Lola\Desktop\Gmer-19357.exe 2014-07-20 21:19 - 2014-07-20 21:18 - 01080320 _____ (Farbar) C:\Users\Lola\Desktop\FRST.exe 2014-07-20 21:16 - 2014-07-20 21:16 - 00050477 _____ () C:\Users\Lola\Desktop\Defogger.exe 2014-07-20 14:08 - 2014-06-10 21:01 - 00001132 _____ () C:\Users\Public\Desktop\Driver Booster.lnk 2014-07-20 14:08 - 2014-06-10 21:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 2014-07-20 03:30 - 2014-07-20 03:30 - 00000000 ____D () C:\Users\Default\AppData\Roaming\IObit 2014-07-20 03:30 - 2014-07-20 03:30 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\IObit 2014-07-20 03:29 - 2014-07-20 03:28 - 00144960 _____ () C:\Windows\Minidump\072014-23836-01.dmp 2014-07-20 03:28 - 2014-07-20 03:28 - 372600835 _____ () C:\Windows\MEMORY.DMP 2014-07-20 03:28 - 2011-01-09 21:20 - 00000000 ____D () C:\Windows\Minidump 2014-07-18 21:33 - 2014-06-10 20:18 - 00002155 _____ () C:\Users\Public\Desktop\Advanced SystemCare 7.lnk 2014-07-17 14:44 - 2013-05-21 17:26 - 00035848 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2014-07-16 21:36 - 2012-04-17 13:17 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2014-07-16 21:36 - 2011-08-09 13:46 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2014-07-16 21:32 - 2014-07-16 21:32 - 00000000 _____ () C:\Windows\setuperr.log 2014-07-16 21:04 - 2014-06-10 20:38 - 47460352 _____ () C:\Windows\system32\config\SOFTWARE.iobit 2014-07-16 21:04 - 2014-06-10 20:38 - 35131392 _____ () C:\Windows\system32\config\COMPONENTS.iobit 2014-07-16 21:04 - 2014-06-10 20:38 - 00188416 _____ () C:\Windows\system32\config\DEFAULT.iobit 2014-07-16 21:04 - 2014-06-10 20:38 - 00057344 _____ () C:\Windows\system32\config\SAM.iobit 2014-07-16 21:04 - 2014-06-10 20:38 - 00024576 _____ () C:\Windows\system32\config\SECURITY.iobit 2014-07-16 21:04 - 2010-07-29 06:01 - 00000000 ____D () C:\Users\Lola 2014-07-16 20:39 - 2014-06-10 19:47 - 00000000 ____D () C:\ProgramData\ProductData 2014-06-24 13:24 - 2013-04-06 02:01 - 00097648 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2014-06-21 07:29 - 2012-05-02 12:34 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service Some content of TEMP: ==================== C:\Users\Lola\AppData\Local\temp\avgnt.exe C:\Users\Lola\AppData\Local\temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => File is digitally signed C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-07-18 00:56 ==================== End Of Log ============================ --- --- --- --- --- --- |
| Themen zu Netbook fährt extrem langsam hoch und auch die Programme laden langsam |
| .dll, antivir, antivirus, avira, browser, defender, device driver, driver booster, error, excel, explorer, fehler, flash player, google, hängt, langsam, mozilla, port, realtek, registry, scan, services.exe, software, svchost.exe, temp, windows, winlogon.exe |
Baum-Darstellung