| |
| |||||||
Log-Analyse und Auswertung: Netbook fährt extrem langsam hoch und auch die Programme laden langsamWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
23.07.2014, 14:12
| #9 |
 |  Netbook fährt extrem langsam hoch und auch die Programme laden langsam Hoffe hab nix vergessen jetzt... 1. Flash und Adobe update (zum Beweis neuen SecurityCheck, wo ich es sogar erkennen konnte^^) Code:
ATTFilter Results of screen317's Security Check version 0.99.85 Windows 7 Service Pack 1 x86 (UAC is disabled!) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` Avira Desktop Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Adobe Flash Player 14.0.0.145 Adobe Reader XI Mozilla Firefox (31.0) Google Chrome 35.0.1916.153 Google Chrome 36.0.1985.125 ````````Process Check: objlist.exe by Laurent```````` Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Malware mbam.exe Avira Antivir avgnt.exe Avira Antivir avguard.exe Malwarebytes Anti-Malware mbamscheduler.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` 3. Mit de Revo Unistaller Firefox komplett entfernt und neu installiert - danach Firerfox zurückgesetzt. Und auch wenn du es diesmal nicht extra verlangt hast, hier noch ein frisches FRST FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:23-07-2014 01 Ran by Lola (administrator) on FRIGG on 23-07-2014 15:07:18 Running from C:\Users\Lola\Desktop Platform: Microsoft Windows 7 Starter Service Pack 1 (X86) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe (Egis Technology Inc.) C:\Program Files\EgisTec Egis Software Update\EgisUpdate.exe (Egis Technology Inc.) C:\Program Files\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Acer Incorporated) C:\Program Files\Acer\Acer VCM\AcerVCM.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe (Acer Incorporated) C:\Program Files\Acer\Registration\GregHSRW.exe (Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe (Acer Incorporated) C:\Program Files\Acer\Acer VCM\RS_Service.exe (Acer) C:\Program Files\Acer\Acer Updater\UpdaterService.exe (Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation) C:\Windows\System32\igfxext.exe (Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbam.exe (Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebgrd.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== HKU\S-1-5-21-624116608-515939505-3949833191-1000\...\Run: [swg] => C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2009-10-29] (Google Inc.) HKU\S-1-5-21-624116608-515939505-3949833191-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1 Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Acer VCM.lnk ShortcutTarget: Acer VCM.lnk -> C:\Program Files\Acer\Acer VCM\AcerVCM.exe (Acer Incorporated) ShellIconOverlayIdentifiers: egisPSDP -> {30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} => C:\Program Files\EgisTec\MyWinLocker 3\x86\psdprotect.dll (Egis Technology Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_one&r=27b507105865l0334ww05w48i2380r HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKLM - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW SearchScopes: HKCU - DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_deDE390DE390 SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_deDE390DE390 BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll No File BHO: No Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} -> No File BHO: Windows Live Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation) Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation) Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\Lola\AppData\Roaming\Mozilla\Firefox\Profiles\tt8mfku8.default-1406119695655 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_145.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin: @microsoft.com/WLPG,version=14.0.8117.0416 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Lola\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml FF HKCU\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\Lola\AppData\Roaming\Mozilla\Firefox\Profiles\wx4ijpqa.default\extensions\cliqz@cliqz.com Chrome: ======= CHR HomePage: CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll No File CHR Extension: (Google Docs) - C:\Users\Lola\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-09-09] CHR Extension: (Google Drive) - C:\Users\Lola\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-09-09] CHR Extension: (YouTube) - C:\Users\Lola\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-09-09] CHR Extension: (Google-Suche) - C:\Users\Lola\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-09-09] CHR Extension: (Google Wallet) - C:\Users\Lola\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-09] CHR Extension: (Google Mail) - C:\Users\Lola\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-09-09] ========================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [430160 2014-06-24] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [430160 2014-06-24] (Avira Operations GmbH & Co. KG) R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1028688 2014-06-24] (Avira Operations GmbH & Co. KG) R2 ePowerSvc; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [727584 2009-09-30] (Acer Incorporated) R2 Greg_Service; C:\Program Files\Acer\Registration\GregHSRW.exe [1150496 2009-08-28] (Acer Incorporated) S2 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2175264 2014-06-10] (IObit) R2 MBAMScheduler; C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation) S3 MWLService; C:\Program Files\EgisTec\MyWinLocker 3\x86\\MWLService.exe [305448 2009-09-10] (Egis Technology Inc.) R2 RS_Service; C:\Program Files\Acer\Acer VCM\RS_Service.exe [253952 2009-07-10] (Acer Incorporated) [File not signed] R2 Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [240160 2009-07-04] (Acer) ==================== Drivers (Whitelisted) ==================== R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [97648 2014-06-24] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-06-03] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-12-03] (Avira Operations GmbH & Co. KG) R3 L1C; C:\Windows\System32\DRIVERS\L1C62x86.sys [109256 2014-06-10] (Qualcomm Atheros Co., Ltd.) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-05-12] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [110296 2014-07-23] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2014-05-12] (Malwarebytes Corporation) R1 mwlPSDFilter; C:\Windows\System32\DRIVERS\mwlPSDFilter.sys [18992 2009-06-02] (Egis Technology Inc.) R1 mwlPSDNServ; C:\Windows\System32\DRIVERS\mwlPSDNServ.sys [16432 2009-06-02] (Egis Technology Inc.) R1 mwlPSDVDisk; C:\Windows\System32\DRIVERS\mwlPSDVDisk.sys [60976 2009-06-02] (Egis Technology Inc.) R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-04-06] (Avira GmbH) U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation) S3 catchme; \??\C:\Users\Lola\AppData\Local\Temp\catchme.sys [X] S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [X] S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-07-23 15:07 - 2014-07-23 15:07 - 00000000 ____D () C:\Users\Lola\Desktop\FRST-OlderVersion 2014-07-23 13:06 - 2014-07-23 13:06 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk 2014-07-23 13:06 - 2014-07-23 13:06 - 00001993 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk 2014-07-23 12:34 - 2014-07-23 12:34 - 00001121 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-07-23 12:34 - 2014-07-23 12:34 - 00001109 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-07-23 12:34 - 2014-07-23 12:34 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service 2014-07-23 12:28 - 2014-07-23 12:28 - 00244408 _____ () C:\Users\Lola\Downloads\Firefox Setup Stub 31.0.exe 2014-07-23 12:20 - 2014-07-23 12:20 - 00000000 ____D () C:\Windows\Tasks\ImCleanDisabled 2014-07-23 11:39 - 2014-07-23 12:07 - 00001226 _____ () C:\Users\Lola\Desktop\Revo Uninstaller.lnk 2014-07-23 11:39 - 2014-07-23 11:39 - 00000000 ____D () C:\Program Files\VS Revo Group 2014-07-23 11:34 - 2014-07-23 11:35 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Lola\Desktop\revosetup95.exe 2014-07-22 15:11 - 2014-07-22 15:11 - 00001098 _____ () C:\Users\Lola\Desktop\checkup.txt 2014-07-22 12:07 - 2014-07-22 12:07 - 02347384 _____ (ESET) C:\Users\Lola\Desktop\esetsmartinstaller_deu.exe 2014-07-22 12:04 - 2014-07-22 12:04 - 00854390 _____ () C:\Users\Lola\Desktop\SecurityCheck.exe 2014-07-21 19:37 - 2014-07-21 19:37 - 00000988 _____ () C:\Users\Lola\Desktop\JRT.txt 2014-07-21 19:10 - 2014-07-21 19:10 - 00000000 ____D () C:\Windows\ERUNT 2014-07-21 19:07 - 2014-07-21 19:07 - 00004929 _____ () C:\Users\Lola\Desktop\AdwCl.txt 2014-07-21 17:41 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll 2014-07-21 17:39 - 2014-07-21 18:57 - 00000000 ____D () C:\AdwCleaner 2014-07-21 16:45 - 2014-07-21 16:45 - 00000000 __SHD () C:\Users\Lola\AppData\Local\EmieUserList 2014-07-21 16:45 - 2014-07-21 16:45 - 00000000 __SHD () C:\Users\Lola\AppData\Local\EmieSiteList 2014-07-21 15:05 - 2014-07-23 14:56 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-07-21 15:05 - 2014-07-21 15:05 - 00001064 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-07-21 15:05 - 2014-07-21 15:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-07-21 15:04 - 2014-07-21 15:05 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 2014-07-21 15:04 - 2014-07-21 15:04 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-07-21 15:04 - 2014-05-12 07:26 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-07-21 15:04 - 2014-05-12 07:25 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-07-21 15:04 - 2014-05-12 07:25 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-07-21 15:00 - 2014-07-21 15:01 - 01016261 _____ (Thisisu) C:\Users\Lola\Desktop\JRT.exe 2014-07-21 15:00 - 2014-07-21 15:00 - 01354223 _____ () C:\Users\Lola\Desktop\adwcleaner_3.216.exe 2014-07-21 14:59 - 2014-07-21 15:01 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Lola\Desktop\mbam-setup-2.0.2.1012.exe 2014-07-21 11:16 - 2014-07-21 11:16 - 00021875 _____ () C:\ComboFix.txt 2014-07-21 10:37 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe 2014-07-21 10:37 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe 2014-07-21 10:37 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-07-21 10:37 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-07-21 10:37 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-07-21 10:37 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe 2014-07-21 10:37 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe 2014-07-21 10:37 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe 2014-07-21 10:36 - 2014-07-21 11:16 - 00000000 ____D () C:\Qoobox 2014-07-21 10:35 - 2014-07-21 11:11 - 00000000 ____D () C:\Windows\erdnt 2014-07-21 10:31 - 2014-07-21 10:32 - 05561612 ____R (Swearware) C:\Users\Lola\Desktop\ComboFix.exe 2014-07-21 10:28 - 2014-07-21 10:29 - 05561612 _____ (Swearware) C:\Users\Lola\Downloads\ComboFix.exe 2014-07-20 23:57 - 2014-01-09 04:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2014-07-20 23:47 - 2014-07-20 23:50 - 00028962 _____ () C:\Users\Lola\Desktop\Addition.txt 2014-07-20 23:43 - 2014-07-23 15:07 - 00011692 _____ () C:\Users\Lola\Desktop\FRST.txt 2014-07-20 23:12 - 2013-10-02 02:32 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe 2014-07-20 23:12 - 2013-10-02 01:45 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll 2014-07-20 23:11 - 2013-10-02 02:42 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys 2014-07-20 23:11 - 2013-10-02 02:30 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll 2014-07-20 23:11 - 2013-10-02 02:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll 2014-07-20 23:11 - 2013-10-02 02:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll 2014-07-20 23:11 - 2013-10-02 01:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2014-07-20 23:11 - 2013-10-02 01:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll 2014-07-20 23:11 - 2013-10-02 01:00 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe 2014-07-20 23:11 - 2013-10-02 00:53 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe 2014-07-20 23:11 - 2013-10-02 00:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe 2014-07-20 23:10 - 2013-09-25 03:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll 2014-07-20 22:17 - 2014-07-23 15:07 - 00000000 ____D () C:\FRST 2014-07-20 21:19 - 2014-07-20 21:19 - 00380416 _____ () C:\Users\Lola\Desktop\Gmer-19357.exe 2014-07-20 21:18 - 2014-07-23 15:07 - 01082368 _____ (Farbar) C:\Users\Lola\Desktop\FRST.exe 2014-07-20 21:16 - 2014-07-20 21:16 - 00050477 _____ () C:\Users\Lola\Desktop\Defogger.exe 2014-07-20 14:42 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-07-20 14:42 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-07-20 14:42 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-07-20 14:42 - 2014-06-19 01:56 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-07-20 14:42 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-07-20 14:42 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-07-20 14:42 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-07-20 14:42 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-07-20 14:42 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-07-20 14:42 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-07-20 14:42 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-07-20 14:42 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-07-20 14:42 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-07-20 14:42 - 2014-06-19 01:23 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-07-20 14:42 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-07-20 14:42 - 2014-06-19 01:16 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-07-20 14:42 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-07-20 14:42 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-07-20 14:42 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-07-20 14:42 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-07-20 14:42 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-07-20 14:42 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-07-20 14:42 - 2014-06-19 00:52 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-07-20 14:42 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-07-20 14:42 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-07-20 14:42 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-07-20 14:42 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-07-20 14:42 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-07-20 14:42 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-07-20 14:42 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-07-20 14:42 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2014-07-20 14:42 - 2014-06-18 02:52 - 02350080 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-07-20 14:41 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-07-20 14:40 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-07-20 14:40 - 2014-05-30 08:36 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2014-07-20 14:39 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-07-20 14:39 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-07-20 14:39 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2014-07-20 14:39 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-07-20 14:39 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-07-20 14:39 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-07-20 14:38 - 2014-06-05 16:26 - 01059840 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-07-20 03:30 - 2014-07-20 03:30 - 00000000 ____D () C:\Users\Default\AppData\Roaming\IObit 2014-07-20 03:30 - 2014-07-20 03:30 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\IObit 2014-07-20 03:28 - 2014-07-20 03:29 - 00144960 _____ () C:\Windows\Minidump\072014-23836-01.dmp 2014-07-20 03:28 - 2014-07-20 03:28 - 372600835 _____ () C:\Windows\MEMORY.DMP 2014-07-16 21:32 - 2014-07-23 14:51 - 00005306 _____ () C:\Windows\PFRO.log 2014-07-16 21:32 - 2014-07-23 14:51 - 00000840 _____ () C:\Windows\setupact.log 2014-07-16 21:32 - 2014-07-16 21:32 - 00000000 _____ () C:\Windows\setuperr.log ==================== One Month Modified Files and Folders ======= 2014-07-23 15:08 - 2014-07-20 23:43 - 00011692 _____ () C:\Users\Lola\Desktop\FRST.txt 2014-07-23 15:07 - 2014-07-23 15:07 - 00000000 ____D () C:\Users\Lola\Desktop\FRST-OlderVersion 2014-07-23 15:07 - 2014-07-20 22:17 - 00000000 ____D () C:\FRST 2014-07-23 15:07 - 2014-07-20 21:18 - 01082368 _____ (Farbar) C:\Users\Lola\Desktop\FRST.exe 2014-07-23 15:02 - 2009-07-14 06:34 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-07-23 15:02 - 2009-07-14 06:34 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-07-23 14:56 - 2014-07-21 15:05 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-07-23 14:51 - 2014-07-16 21:32 - 00005306 _____ () C:\Windows\PFRO.log 2014-07-23 14:51 - 2014-07-16 21:32 - 00000840 _____ () C:\Windows\setupact.log 2014-07-23 14:51 - 2014-06-11 20:24 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-07-23 14:51 - 2014-06-10 19:47 - 00000000 ____D () C:\Program Files\IObit 2014-07-23 14:51 - 2010-07-29 06:17 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-07-23 14:51 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-07-23 14:50 - 2014-04-29 15:38 - 01145774 _____ () C:\Windows\WindowsUpdate.log 2014-07-23 14:36 - 2012-04-17 13:17 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-07-23 13:51 - 2010-07-29 06:17 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-07-23 13:06 - 2014-07-23 13:06 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk 2014-07-23 13:06 - 2014-07-23 13:06 - 00001993 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk 2014-07-23 13:05 - 2011-06-15 14:15 - 00000000 ____D () C:\Program Files\Common Files\Adobe 2014-07-23 13:04 - 2009-10-29 20:22 - 00000000 ____D () C:\ProgramData\Adobe 2014-07-23 13:04 - 2009-10-29 20:22 - 00000000 ____D () C:\Program Files\Adobe 2014-07-23 12:45 - 2012-04-17 13:17 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2014-07-23 12:45 - 2011-08-09 13:46 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2014-07-23 12:34 - 2014-07-23 12:34 - 00001121 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-07-23 12:34 - 2014-07-23 12:34 - 00001109 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-07-23 12:34 - 2014-07-23 12:34 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service 2014-07-23 12:28 - 2014-07-23 12:28 - 00244408 _____ () C:\Users\Lola\Downloads\Firefox Setup Stub 31.0.exe 2014-07-23 12:20 - 2014-07-23 12:20 - 00000000 ____D () C:\Windows\Tasks\ImCleanDisabled 2014-07-23 12:07 - 2014-07-23 11:39 - 00001226 _____ () C:\Users\Lola\Desktop\Revo Uninstaller.lnk 2014-07-23 11:39 - 2014-07-23 11:39 - 00000000 ____D () C:\Program Files\VS Revo Group 2014-07-23 11:35 - 2014-07-23 11:34 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Lola\Desktop\revosetup95.exe 2014-07-22 15:11 - 2014-07-22 15:11 - 00001098 _____ () C:\Users\Lola\Desktop\checkup.txt 2014-07-22 12:07 - 2014-07-22 12:07 - 02347384 _____ (ESET) C:\Users\Lola\Desktop\esetsmartinstaller_deu.exe 2014-07-22 12:04 - 2014-07-22 12:04 - 00854390 _____ () C:\Users\Lola\Desktop\SecurityCheck.exe 2014-07-21 19:37 - 2014-07-21 19:37 - 00000988 _____ () C:\Users\Lola\Desktop\JRT.txt 2014-07-21 19:10 - 2014-07-21 19:10 - 00000000 ____D () C:\Windows\ERUNT 2014-07-21 19:07 - 2014-07-21 19:07 - 00004929 _____ () C:\Users\Lola\Desktop\AdwCl.txt 2014-07-21 18:57 - 2014-07-21 17:39 - 00000000 ____D () C:\AdwCleaner 2014-07-21 18:57 - 2014-06-10 19:47 - 00000000 ____D () C:\Users\Lola\AppData\Roaming\IObit 2014-07-21 16:45 - 2014-07-21 16:45 - 00000000 __SHD () C:\Users\Lola\AppData\Local\EmieUserList 2014-07-21 16:45 - 2014-07-21 16:45 - 00000000 __SHD () C:\Users\Lola\AppData\Local\EmieSiteList 2014-07-21 16:45 - 2010-07-29 06:08 - 00000000 ____D () C:\Users\Lola\AppData\Local\Google 2014-07-21 15:05 - 2014-07-21 15:05 - 00001064 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-07-21 15:05 - 2014-07-21 15:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-07-21 15:05 - 2014-07-21 15:04 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 2014-07-21 15:04 - 2014-07-21 15:04 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-07-21 15:02 - 2012-02-06 18:55 - 00000000 ____D () C:\Users\Lola\Desktop\Download 2014-07-21 15:01 - 2014-07-21 15:00 - 01016261 _____ (Thisisu) C:\Users\Lola\Desktop\JRT.exe 2014-07-21 15:01 - 2014-07-21 14:59 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Lola\Desktop\mbam-setup-2.0.2.1012.exe 2014-07-21 15:00 - 2014-07-21 15:00 - 01354223 _____ () C:\Users\Lola\Desktop\adwcleaner_3.216.exe 2014-07-21 12:23 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache 2014-07-21 11:16 - 2014-07-21 11:16 - 00021875 _____ () C:\ComboFix.txt 2014-07-21 11:16 - 2014-07-21 10:36 - 00000000 ____D () C:\Qoobox 2014-07-21 11:16 - 2009-07-14 04:37 - 00000000 __RHD () C:\Users\Default 2014-07-21 11:16 - 2009-07-14 04:37 - 00000000 ___RD () C:\Users\Public 2014-07-21 11:11 - 2014-07-21 10:35 - 00000000 ____D () C:\Windows\erdnt 2014-07-21 11:03 - 2009-07-14 04:04 - 00000215 _____ () C:\Windows\system.ini 2014-07-21 11:01 - 2009-07-14 04:03 - 48496640 _____ () C:\Windows\system32\config\SOFTWARE.bak 2014-07-21 11:01 - 2009-07-14 04:03 - 15990784 _____ () C:\Windows\system32\config\SYSTEM.bak 2014-07-21 11:01 - 2009-07-14 04:03 - 00262144 _____ () C:\Windows\system32\config\DEFAULT.bak 2014-07-21 11:01 - 2009-07-14 04:03 - 00057344 _____ () C:\Windows\system32\config\SAM.bak 2014-07-21 11:01 - 2009-07-14 04:03 - 00024576 _____ () C:\Windows\system32\config\SECURITY.bak 2014-07-21 10:32 - 2014-07-21 10:31 - 05561612 ____R (Swearware) C:\Users\Lola\Desktop\ComboFix.exe 2014-07-21 10:29 - 2014-07-21 10:28 - 05561612 _____ (Swearware) C:\Users\Lola\Downloads\ComboFix.exe 2014-07-21 09:42 - 2012-10-25 23:37 - 00000000 ____D () C:\Users\Lola\AppData\Roaming\Wise Care 365 2014-07-21 01:04 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE 2014-07-20 23:50 - 2014-07-20 23:47 - 00028962 _____ () C:\Users\Lola\Desktop\Addition.txt 2014-07-20 23:40 - 2009-07-14 06:33 - 00334608 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-07-20 23:26 - 2009-12-01 14:21 - 00000000 ____D () C:\Windows\system32\Drivers\de-DE 2014-07-20 23:05 - 2013-08-22 23:44 - 00000000 ____D () C:\Windows\system32\MRT 2014-07-20 22:55 - 2010-08-23 03:20 - 93585272 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-07-20 22:27 - 2014-06-10 19:47 - 00000000 ____D () C:\ProgramData\IObit 2014-07-20 21:19 - 2014-07-20 21:19 - 00380416 _____ () C:\Users\Lola\Desktop\Gmer-19357.exe 2014-07-20 21:16 - 2014-07-20 21:16 - 00050477 _____ () C:\Users\Lola\Desktop\Defogger.exe 2014-07-20 14:08 - 2014-06-10 21:01 - 00001132 _____ () C:\Users\Public\Desktop\Driver Booster.lnk 2014-07-20 14:08 - 2014-06-10 21:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 2014-07-20 03:30 - 2014-07-20 03:30 - 00000000 ____D () C:\Users\Default\AppData\Roaming\IObit 2014-07-20 03:30 - 2014-07-20 03:30 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\IObit 2014-07-20 03:29 - 2014-07-20 03:28 - 00144960 _____ () C:\Windows\Minidump\072014-23836-01.dmp 2014-07-20 03:28 - 2014-07-20 03:28 - 372600835 _____ () C:\Windows\MEMORY.DMP 2014-07-20 03:28 - 2011-01-09 21:20 - 00000000 ____D () C:\Windows\Minidump 2014-07-17 14:44 - 2013-05-21 17:26 - 00035848 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2014-07-16 21:32 - 2014-07-16 21:32 - 00000000 _____ () C:\Windows\setuperr.log 2014-07-16 21:04 - 2014-06-10 20:38 - 47460352 _____ () C:\Windows\system32\config\SOFTWARE.iobit 2014-07-16 21:04 - 2014-06-10 20:38 - 35131392 _____ () C:\Windows\system32\config\COMPONENTS.iobit 2014-07-16 21:04 - 2014-06-10 20:38 - 00188416 _____ () C:\Windows\system32\config\DEFAULT.iobit 2014-07-16 21:04 - 2014-06-10 20:38 - 00057344 _____ () C:\Windows\system32\config\SAM.iobit 2014-07-16 21:04 - 2014-06-10 20:38 - 00024576 _____ () C:\Windows\system32\config\SECURITY.iobit 2014-07-16 21:04 - 2010-07-29 06:01 - 00000000 ____D () C:\Users\Lola 2014-07-16 20:39 - 2014-06-10 19:47 - 00000000 ____D () C:\ProgramData\ProductData 2014-06-24 13:24 - 2013-04-06 02:01 - 00097648 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys Some content of TEMP: ==================== C:\Users\Lola\AppData\Local\temp\avgnt.exe C:\Users\Lola\AppData\Local\temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => File is digitally signed C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-07-18 00:56 ==================== End Of Log ============================ --- --- --- --- --- --- Fazit bislang: Nach einem "Test-Neustart" ist eine deutliche Verbeserung spürbar. Hab jetzt mein Spielclient noch nicht hier wieder getestet, aber beim Firefox und bei Chrome spüre ich auch das es anfängt schneller und runder zu laufen  Geändert von Lady Frigg (23.07.2014 um 14:21 Uhr) |
| Themen zu Netbook fährt extrem langsam hoch und auch die Programme laden langsam |
| .dll, antivir, antivirus, avira, browser, defender, device driver, driver booster, error, excel, explorer, fehler, flash player, google, hängt, langsam, mozilla, port, realtek, registry, scan, services.exe, software, svchost.exe, temp, windows, winlogon.exe |
Baum-Darstellung