|
Log-Analyse und Auswertung: Netbook fährt extrem langsam hoch und auch die Programme laden langsamWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
20.07.2014, 23:18 | #1 |
| Netbook fährt extrem langsam hoch und auch die Programme laden langsam Da mir grad von meinem Haupt PC im Bereich der Plagegeister so gut geholfen wurde, würd ich einfach gerne nun mal mein Netbook checken lassen. Der ist in letzter Zeit extrem langsam beim Hochfahren (ca. 120 sek.) zudem hängt der sich regelmässig auf, wenn ich dran "arbeiten" möchte. Vielleicht habt ihr ja ne Idee woran es liegen könnte Hier die ersten Logs: FRST Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:20-07-2014 Ran by Lola (administrator) on FRIGG on 20-07-2014 23:43:59 Running from C:\Users\Lola\Desktop Platform: Microsoft Windows 7 Starter Service Pack 1 (X86) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (IObit) C:\Program Files\IObit\Advanced SystemCare 7\ASCService.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe (Acer Incorporated) C:\Program Files\Acer\Registration\GregHSRW.exe (Acer Incorporated) C:\Program Files\Acer\Acer VCM\RS_Service.exe (Acer) C:\Program Files\Acer\Acer Updater\UpdaterService.exe (Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebgrd.exe (IObit) C:\Program Files\IObit\Smart Defrag 3\SmartDefrag.exe (IObit) C:\Program Files\IObit\Advanced SystemCare 7\Monitor.exe (IObit) C:\Program Files\IObit\Smart Defrag 3\AutoUpdate.exe (WiseCleaner.com) C:\Program Files\Wise\Wise Care 365\WiseTray.exe (IObit) C:\Program Files\IObit\Driver Booster\AutoUpdate.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe (Egis Technology Inc.) C:\Program Files\EgisTec Egis Software Update\EgisUpdate.exe (Egis Technology Inc.) C:\Program Files\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe (IObit) C:\Program Files\IObit\Advanced SystemCare 7\AutoCare.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (IObit) C:\Program Files\IObit\Advanced SystemCare 7\ASCTray.exe (Acer Incorporated) C:\Program Files\Acer\Acer VCM\AcerVCM.exe (Intel Corporation) C:\Windows\System32\igfxext.exe (Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe (IObit) C:\Program Files\IObit\Driver Booster\Scheduler.exe ==================== Registry (Whitelisted) ================== HKU\S-1-5-19\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe [93696 2009-07-14] (Microsoft Corporation) HKU\S-1-5-20\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe [93696 2009-07-14] (Microsoft Corporation) HKU\S-1-5-21-624116608-515939505-3949833191-1000\...\Run: [swg] => C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2009-10-29] (Google Inc.) HKU\S-1-5-21-624116608-515939505-3949833191-1000\...\Run: [Advanced SystemCare 7] => C:\Program Files\IObit\Advanced SystemCare 7\ASCTray.exe [2295584 2014-04-21] (IObit) HKU\S-1-5-21-624116608-515939505-3949833191-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1 HKU\S-1-5-21-624116608-515939505-3949833191-1000\...\MountPoints2: {6cb5ef7d-3167-11e1-ab75-0026228d678b} - D:\setup_vmb_lite.exe /checkApplicationPresence HKU\S-1-5-21-624116608-515939505-3949833191-1000\...\MountPoints2: {6cb5ef8f-3167-11e1-ab75-0026228d678b} - D:\setup_vmb_lite.exe /checkApplicationPresence HKU\S-1-5-21-624116608-515939505-3949833191-1000\...\MountPoints2: {7afbd0b5-ec44-11e1-9b77-0026228d678b} - D:\setup_vmb_lite.exe /checkApplicationPresence Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Acer VCM.lnk ShortcutTarget: Acer VCM.lnk -> C:\Program Files\Acer\Acer VCM\AcerVCM.exe (Acer Incorporated) ShellIconOverlayIdentifiers: egisPSDP -> {30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} => C:\Program Files\EgisTec\MyWinLocker 3\x86\psdprotect.dll (Egis Technology Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_one&r=27b507105865l0334ww05w48i2380r HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_one&r=27b507105865l0334ww05w48i2380r SearchScopes: HKLM - DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW SearchScopes: HKLM - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW SearchScopes: HKCU - DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_deDE390DE390 SearchScopes: HKCU - {2D46DE75-C96F-4F9F-B3BD-8BAF0983F886} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10261&src=kw&q={searchTerms}&locale=&apn_ptnrs=^AGS&apn_dtid=^YYYYYY^YY^DE&apn_uid=a7b75062-2a18-4df5-94ba-330652a94777&apn_sauid=4CA72D85-B78B-48F7-9E18-5C9266D0E392 SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_deDE390DE390 BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll (IObit) BHO: No Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} -> No File BHO: Windows Live Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) BHO: Advanced SystemCare Browser Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation) Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation) Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 03 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 04 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 05 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 06 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 07 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 08 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG) Winsock: Catalog9 19 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\Lola\AppData\Roaming\Mozilla\Firefox\Profiles\wx4ijpqa.default FF DefaultSearchEngine: Google FF SearchEngineOrder.1: Ask.com FF SelectedSearchEngine: Ask.com FF Homepage: hxxp://www.warofdragons.de/ FF NetworkProxy: "http", "85.214.71.220" FF NetworkProxy: "http_port", 3128 FF NetworkProxy: "type", 0 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_145.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin: @microsoft.com/WLPG,version=14.0.8117.0416 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Lola\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF user.js: detected! => C:\Users\Lola\AppData\Roaming\Mozilla\Firefox\Profiles\wx4ijpqa.default\user.js FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Users\Lola\AppData\Roaming\Mozilla\Firefox\Profiles\wx4ijpqa.default\searchplugins\google-images.xml FF SearchPlugin: C:\Users\Lola\AppData\Roaming\Mozilla\Firefox\Profiles\wx4ijpqa.default\searchplugins\google-maps.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Advanced SystemCare Surfing Protection - C:\Users\Lola\AppData\Roaming\Mozilla\Firefox\Profiles\wx4ijpqa.default\Extensions\ascsurfingprotection@iobit.com [2014-06-10] FF Extension: Cliqz Beta - C:\Users\Lola\AppData\Roaming\Mozilla\Firefox\Profiles\wx4ijpqa.default\Extensions\cliqz@cliqz.com.xpi [2014-06-20] FF Extension: Adblock Plus - C:\Users\Lola\AppData\Roaming\Mozilla\Firefox\Profiles\wx4ijpqa.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-05-02] FF HKCU\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\Lola\AppData\Roaming\Mozilla\Firefox\Profiles\wx4ijpqa.default\extensions\cliqz@cliqz.com Chrome: ======= CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll No File CHR Extension: (Google Docs) - C:\Users\Lola\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-09-09] CHR Extension: (Google Drive) - C:\Users\Lola\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-09-09] CHR Extension: (YouTube) - C:\Users\Lola\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-09-09] CHR Extension: (Google-Suche) - C:\Users\Lola\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-09-09] CHR Extension: (Google Wallet) - C:\Users\Lola\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-09] CHR Extension: (Google Mail) - C:\Users\Lola\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-09-09] ========================== Services (Whitelisted) ================= R2 AdvancedSystemCareService7; C:\Program Files\IObit\Advanced SystemCare 7\ASCService.exe [881952 2014-01-14] (IObit) R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [430160 2014-06-24] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [430160 2014-06-24] (Avira Operations GmbH & Co. KG) R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1028688 2014-06-24] (Avira Operations GmbH & Co. KG) R2 ePowerSvc; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [727584 2009-09-30] (Acer Incorporated) R2 Greg_Service; C:\Program Files\Acer\Registration\GregHSRW.exe [1150496 2009-08-28] (Acer Incorporated) S2 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2175264 2014-06-10] (IObit) S3 MWLService; C:\Program Files\EgisTec\MyWinLocker 3\x86\\MWLService.exe [305448 2009-09-10] (Egis Technology Inc.) R2 RS_Service; C:\Program Files\Acer\Acer VCM\RS_Service.exe [253952 2009-07-10] (Acer Incorporated) [File not signed] R2 Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [240160 2009-07-04] (Acer) S2 WiseBootAssistant; C:\Program Files\Wise\Wise Care 365\BootTime.exe [580648 2012-07-17] (WiseCleaner.com) [File not signed] ==================== Drivers (Whitelisted) ==================== R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [97648 2014-06-24] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-06-03] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-12-03] (Avira Operations GmbH & Co. KG) R3 L1C; C:\Windows\System32\DRIVERS\L1C62x86.sys [109256 2014-06-10] (Qualcomm Atheros Co., Ltd.) R1 mwlPSDFilter; C:\Windows\System32\DRIVERS\mwlPSDFilter.sys [18992 2009-06-02] (Egis Technology Inc.) R1 mwlPSDNServ; C:\Windows\System32\DRIVERS\mwlPSDNServ.sys [16432 2009-06-02] (Egis Technology Inc.) R1 mwlPSDVDisk; C:\Windows\System32\DRIVERS\mwlPSDVDisk.sys [60976 2009-06-02] (Egis Technology Inc.) R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [18624 2013-12-24] (IObit) R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-04-06] (Avira GmbH) S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [X] S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-07-20 23:43 - 2014-07-20 23:45 - 00015516 _____ () C:\Users\Lola\Desktop\FRST.txt 2014-07-20 23:12 - 2013-10-02 02:32 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe 2014-07-20 23:12 - 2013-10-02 01:45 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll 2014-07-20 23:11 - 2013-10-02 02:42 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys 2014-07-20 23:11 - 2013-10-02 02:30 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll 2014-07-20 23:11 - 2013-10-02 02:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll 2014-07-20 23:11 - 2013-10-02 02:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll 2014-07-20 23:11 - 2013-10-02 01:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2014-07-20 23:11 - 2013-10-02 01:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll 2014-07-20 23:11 - 2013-10-02 01:00 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe 2014-07-20 23:11 - 2013-10-02 00:53 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe 2014-07-20 23:11 - 2013-10-02 00:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe 2014-07-20 23:11 - 2013-10-01 22:55 - 05698048 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2014-07-20 23:10 - 2013-09-25 03:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll 2014-07-20 22:17 - 2014-07-20 23:44 - 00000000 ____D () C:\FRST 2014-07-20 21:19 - 2014-07-20 21:19 - 00380416 _____ () C:\Users\Lola\Desktop\Gmer-19357.exe 2014-07-20 21:18 - 2014-07-20 21:19 - 01080320 _____ (Farbar) C:\Users\Lola\Desktop\FRST.exe 2014-07-20 21:16 - 2014-07-20 21:16 - 00050477 _____ () C:\Users\Lola\Desktop\Defogger.exe 2014-07-20 14:42 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-07-20 14:42 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-07-20 14:42 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-07-20 14:42 - 2014-06-19 01:56 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-07-20 14:42 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-07-20 14:42 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-07-20 14:42 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-07-20 14:42 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-07-20 14:42 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-07-20 14:42 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-07-20 14:42 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-07-20 14:42 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-07-20 14:42 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-07-20 14:42 - 2014-06-19 01:23 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-07-20 14:42 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-07-20 14:42 - 2014-06-19 01:16 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-07-20 14:42 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-07-20 14:42 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-07-20 14:42 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-07-20 14:42 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-07-20 14:42 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-07-20 14:42 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-07-20 14:42 - 2014-06-19 00:52 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-07-20 14:42 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-07-20 14:42 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-07-20 14:42 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-07-20 14:42 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-07-20 14:42 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-07-20 14:42 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-07-20 14:42 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-07-20 14:42 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2014-07-20 14:42 - 2014-06-18 02:52 - 02350080 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-07-20 14:41 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-07-20 14:40 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-07-20 14:40 - 2014-05-30 08:36 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2014-07-20 14:39 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-07-20 14:39 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-07-20 14:39 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2014-07-20 14:39 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-07-20 14:39 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-07-20 14:39 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-07-20 14:38 - 2014-06-05 16:26 - 01059840 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-07-20 03:30 - 2014-07-20 03:30 - 00000000 ____D () C:\Users\Default\AppData\Roaming\IObit 2014-07-20 03:30 - 2014-07-20 03:30 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\IObit 2014-07-20 03:28 - 2014-07-20 03:29 - 00144960 _____ () C:\Windows\Minidump\072014-23836-01.dmp 2014-07-20 03:28 - 2014-07-20 03:28 - 372600835 _____ () C:\Windows\MEMORY.DMP 2014-07-16 21:32 - 2014-07-20 23:39 - 00000392 _____ () C:\Windows\setupact.log 2014-07-16 21:32 - 2014-07-20 22:47 - 00001028 _____ () C:\Windows\PFRO.log 2014-07-16 21:32 - 2014-07-16 21:32 - 00000000 _____ () C:\Windows\setuperr.log ==================== One Month Modified Files and Folders ======= 2014-07-20 23:45 - 2014-07-20 23:43 - 00015516 _____ () C:\Users\Lola\Desktop\FRST.txt 2014-07-20 23:44 - 2014-07-20 22:17 - 00000000 ____D () C:\FRST 2014-07-20 23:44 - 2014-04-29 15:38 - 02086371 _____ () C:\Windows\WindowsUpdate.log 2014-07-20 23:42 - 2012-10-25 23:37 - 00000000 ____D () C:\Users\Lola\AppData\Roaming\Wise Care 365 2014-07-20 23:41 - 2012-10-25 23:38 - 00000396 _____ () C:\Windows\Tasks\Wise Care 365.job 2014-07-20 23:41 - 2010-07-29 06:17 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-07-20 23:40 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-07-20 23:40 - 2009-07-14 06:33 - 00334608 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-07-20 23:39 - 2014-07-16 21:32 - 00000392 _____ () C:\Windows\setupact.log 2014-07-20 23:38 - 2009-07-14 06:34 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-07-20 23:38 - 2009-07-14 06:34 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-07-20 23:36 - 2012-04-17 13:17 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-07-20 23:26 - 2009-12-01 14:21 - 00000000 ____D () C:\Windows\system32\Drivers\de-DE 2014-07-20 23:26 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE 2014-07-20 23:05 - 2013-08-22 23:44 - 00000000 ____D () C:\Windows\system32\MRT 2014-07-20 22:55 - 2010-08-23 03:20 - 93585272 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-07-20 22:51 - 2010-07-29 06:17 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-07-20 22:47 - 2014-07-16 21:32 - 00001028 _____ () C:\Windows\PFRO.log 2014-07-20 22:35 - 2014-06-10 19:47 - 00000000 ____D () C:\Users\Lola\AppData\Roaming\IObit 2014-07-20 22:27 - 2014-06-10 19:47 - 00000000 ____D () C:\ProgramData\IObit 2014-07-20 21:19 - 2014-07-20 21:19 - 00380416 _____ () C:\Users\Lola\Desktop\Gmer-19357.exe 2014-07-20 21:19 - 2014-07-20 21:18 - 01080320 _____ (Farbar) C:\Users\Lola\Desktop\FRST.exe 2014-07-20 21:16 - 2014-07-20 21:16 - 00050477 _____ () C:\Users\Lola\Desktop\Defogger.exe 2014-07-20 14:08 - 2014-06-10 21:01 - 00001132 _____ () C:\Users\Public\Desktop\Driver Booster.lnk 2014-07-20 14:08 - 2014-06-10 21:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 2014-07-20 03:30 - 2014-07-20 03:30 - 00000000 ____D () C:\Users\Default\AppData\Roaming\IObit 2014-07-20 03:30 - 2014-07-20 03:30 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\IObit 2014-07-20 03:29 - 2014-07-20 03:28 - 00144960 _____ () C:\Windows\Minidump\072014-23836-01.dmp 2014-07-20 03:28 - 2014-07-20 03:28 - 372600835 _____ () C:\Windows\MEMORY.DMP 2014-07-20 03:28 - 2011-01-09 21:20 - 00000000 ____D () C:\Windows\Minidump 2014-07-18 21:33 - 2014-06-10 20:18 - 00002155 _____ () C:\Users\Public\Desktop\Advanced SystemCare 7.lnk 2014-07-17 14:44 - 2013-05-21 17:26 - 00035848 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2014-07-16 21:36 - 2012-04-17 13:17 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2014-07-16 21:36 - 2011-08-09 13:46 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2014-07-16 21:32 - 2014-07-16 21:32 - 00000000 _____ () C:\Windows\setuperr.log 2014-07-16 21:04 - 2014-06-10 20:38 - 47460352 _____ () C:\Windows\system32\config\SOFTWARE.iobit 2014-07-16 21:04 - 2014-06-10 20:38 - 35131392 _____ () C:\Windows\system32\config\COMPONENTS.iobit 2014-07-16 21:04 - 2014-06-10 20:38 - 00188416 _____ () C:\Windows\system32\config\DEFAULT.iobit 2014-07-16 21:04 - 2014-06-10 20:38 - 00057344 _____ () C:\Windows\system32\config\SAM.iobit 2014-07-16 21:04 - 2014-06-10 20:38 - 00024576 _____ () C:\Windows\system32\config\SECURITY.iobit 2014-07-16 21:04 - 2010-07-29 06:01 - 00000000 ____D () C:\Users\Lola 2014-07-16 20:39 - 2014-06-10 19:47 - 00000000 ____D () C:\ProgramData\ProductData 2014-06-24 13:24 - 2013-04-06 02:01 - 00097648 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2014-06-21 07:29 - 2012-05-02 12:34 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service 2014-06-20 21:39 - 2014-07-20 14:42 - 00240824 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll Some content of TEMP: ==================== C:\Users\Lola\AppData\Local\Temp\avgnt.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => File is digitally signed C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-07-18 00:56 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version:20-07-2014 Ran by Lola at 2014-07-20 23:47:51 Running from C:\Users\Lola\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859} AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== Update for Microsoft Office 2007 (KB2508958) (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version: - Microsoft) Acer Crystal Eye webcam (HKLM\...\{51F026FA-5146-4232-A8BA-1364740BD053}) (Version: 0.73 - Ihr Firmenname) Acer ePower Management (HKLM\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 4.05.3004 - Acer Incorporated) Acer eRecovery Management (HKLM\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 4.05.3005 - Acer Incorporated) Acer GameZone Console (HKLM\...\{8ed9688e-4f79-4308-91ca-f1c37ca142b4}_is1) (Version: 5.1.0.2 - Oberon Media, Inc.) Acer Registration (HKLM\...\Acer Registration) (Version: 1.02.3006 - Acer Incorporated) Acer ScreenSaver (HKLM\...\Acer Screensaver) (Version: 1.0.3.0303 - Acer) Acer Updater (HKLM\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.01.3017 - Acer Incorporated) Acer VCM (HKLM\...\{047F790A-7A2A-4B6A-AD02-38092BA63DAC}) (Version: 4.05.3000 - Acer Incorporated) Acrobat.com (HKLM\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated) Adobe AIR (HKLM\...\Adobe AIR) (Version: 1.5.0.7220 - Adobe Systems Inc.) Adobe AIR (Version: 1.5.0.7220 - Adobe Systems Inc.) Hidden Adobe Flash Player 10 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 10.0.32.18 - Adobe Systems Incorporated) Adobe Flash Player 14 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated) Adobe Reader X (10.1.10) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.10 - Adobe Systems Incorporated) Advanced SystemCare 7 (HKLM\...\Advanced SystemCare 7_is1) (Version: 7.3.0 - IObit) Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.10 - Atheros Communications Inc.) Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.5.464 - Avira) Center@Mail.Ru - EU (HKCU\...\GameCenterMailRu-EU) (Version: 2.310 - LLC Mail.Ru) Center@Mail.Ru (HKCU\...\GameCenterMailRu) (Version: 2.310 - LLC Mail.Ru) Cliqz (HKLM\...\{5A0C0737-6AFE-4DC6-A8B4-6DFE509ACD75}_is1) (Version: 0.4.1.3 - Cliqz.com) Compatibility Pack für 2007 Office System (HKLM\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Drachenkrieg (with media and plugins), version 1.1.29 (HKLM\...\Drachenkrieg_is1) (Version: - DwarClientDe) Driver Booster (HKLM\...\Driver Booster_is1) (Version: 1.4 - IObit) Google Chrome (HKLM\...\Google Chrome) (Version: 36.0.1985.125 - Google Inc.) Google Toolbar for Internet Explorer (HKLM\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.) Google Toolbar for Internet Explorer (Version: 1.0.0 - Google Inc.) Hidden Google Update Helper (Version: 1.3.24.15 - Google Inc.) Hidden Identity Card (HKLM\...\Identity Card) (Version: 1.00.3002 - Acer Incorporated) Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.15.10.1930 - Intel Corporation) Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version: - Intel Corporation) IObit Uninstaller (HKLM\...\IObitUninstall) (Version: 3.3.8.2663 - IObit) Junk Mail filter update (Version: 14.0.8117.416 - Microsoft Corporation) Hidden Launch Manager (HKLM\...\LManager) (Version: 3.0.03 - Acer Inc.) Legend - Legacy Of The Dragons (HKCU\...\Legend - Legacy Of The Dragons (DE)) (Version: - Mail.Ru Games GmbH) Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden Microsoft Choice Guard (Version: 2.0.48.0 - Microsoft Corporation) Hidden Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0100-0407-0000-0000000FF1CE}_OMUI.de-de_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}) (Version: - Microsoft) Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office 2007 Service Pack 3 (SP3) (Version: - Microsoft) Hidden Microsoft Office Access MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Office Groove MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Home and Student 2007 (HKLM\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office Home and Student 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office InfoPath MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Language Pack 2007 - German/Deutsch (HKLM\...\OMUI.de-de) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation) Microsoft Office O MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office OneNote MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint Viewer 2007 (German) (HKLM\...\{95120000-00AF-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Spanish) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (English) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (Version: - Microsoft) Hidden Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Shared Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office SharePoint Designer 2007 Service Pack 3 (SP3) (Version: - Microsoft) Hidden Microsoft Office SharePoint Designer MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Suite Activation Assistant (HKLM\...\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}) (Version: 2.9 - Microsoft Corporation) Microsoft Office Word MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office X MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Sync Framework Runtime Native v1.0 (x86) (HKLM\...\{8A74E887-8F0F-4017-AF53-CBA42211AAA5}) (Version: 1.0.1215.0 - Microsoft Corporation) Microsoft Sync Framework Services Native v1.0 (x86) (HKLM\...\{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}) (Version: 1.0.1215.0 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Works (HKLM\...\{62F7DA7E-CCCB-439C-A760-00C3926E761F}) (Version: 9.7.0621 - Microsoft Corporation) MoViC 1.5.5.3 (HKLM\...\MoViC 1.5) (Version: 1.5.5.3 - Studio Jet77) Mozilla Firefox 30.0 (x86 de) (HKLM\...\Mozilla Firefox 30.0 (x86 de)) (Version: 30.0 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 30.0 - Mozilla) MSVCRT (Version: 14.0.1468.721 - Microsoft) Hidden MyWinLocker (HKLM\...\{68301905-2DEA-41CE-A4D4-E8B443B099BA}) (Version: 3.1.76.0 - Egis Technology Inc.) Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7161 - Realtek Semiconductor Corp.) Realtek USB 2.0 Card Reader (HKLM\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7100.30094 - Realtek Semiconductor Corp.) Skype™ 6.11 (HKLM\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.) Smart Defrag 3 (HKLM\...\Smart Defrag 3_is1) (Version: 3.1 - IObit) Surfing Protection (HKLM\...\IObit Surfing Protection_is1) (Version: 1.0 - IObit) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.4.0 - Synaptics Incorporated) Unity Web Player (HKLM\...\UnityWebPlayer) (Version: 2.6.1f3_31223 - Unity Technologies ApS) Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) Update for Microsoft Office 2007 Help for Common Features (KB963673) (HKLM\...\{90120000-006E-0409-0000-0000000FF1CE}_HOMESTUDENTR_{AB365889-0395-4FAD-B702-CA5985D53D42}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM\...\{90120000-0100-0407-0000-0000000FF1CE}_OMUI.de-de_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft) Update for Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0409-0000-0000000FF1CE}_HOMESTUDENTR_{199DF7B6-169C-448C-B511-1054101BE9C9}) (Version: - Microsoft) Update for Microsoft Office OneNote 2007 Help (KB963670) (HKLM\...\{90120000-00A1-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2744EF05-38E1-4D5D-B333-E021EDAEA245}) (Version: - Microsoft) Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_OMUI.de-de_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version: - Microsoft) Update for Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0409-0000-0000000FF1CE}_HOMESTUDENTR_{397B1D4F-ED7B-4ACA-A637-43B670843876}) (Version: - Microsoft) Update for Microsoft Office Script Editor Help (KB963671) (HKLM\...\{90120000-006E-0409-0000-0000000FF1CE}_HOMESTUDENTR_{CD11C6A2-FFC6-4271-8EAB-79C3582F505C}) (Version: - Microsoft) Update for Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0409-0000-0000000FF1CE}_HOMESTUDENTR_{80E762AA-C921-4839-9D7D-DB62A72C0726}) (Version: - Microsoft) Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0407-0000-0000000FF1CE}_OMUI.de-de_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft) Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_OMUI.de-de_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version: - Microsoft) Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0407-0000-0000000FF1CE}_OMUI.de-de_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft) Update für Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0407-0000-0000000FF1CE}_OMUI.de-de_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft) Welcome Center (HKLM\...\Acer Welcome Center) (Version: 1.00.3008 - Acer Incorporated) Windows Live Anmelde-Assistent (HKLM\...\{52B97218-98CB-4B8B-9283-D213C85E1AA4}) (Version: 5.000.818.5 - Microsoft Corporation) Windows Live Call (Version: 14.0.8117.0416 - Microsoft Corporation) Hidden Windows Live Communications Platform (Version: 14.0.8117.416 - Microsoft Corporation) Hidden Windows Live Essentials (HKLM\...\WinLiveSuite_Wave3) (Version: 14.0.8117.0416 - Microsoft Corporation) Windows Live Essentials (Version: 14.0.8117.416 - Microsoft Corporation) Hidden Windows Live Fotogalerie (Version: 14.0.8117.416 - Microsoft Corporation) Hidden Windows Live Mail (Version: 14.0.8117.0416 - Microsoft Corporation) Hidden Windows Live Messenger (Version: 14.0.8117.0416 - Microsoft Corporation) Hidden Windows Live Movie Maker (Version: 14.0.8117.0416 - Microsoft Corporation) Hidden Windows Live Sync (HKLM\...\{586509F0-350D-48B5-B763-9CC2F8D96C4C}) (Version: 14.0.8117.416 - Microsoft Corporation) Windows Live Writer (Version: 14.0.8117.0416 - Microsoft Corporation) Hidden Windows Live-Uploadtool (HKLM\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation) WinRAR 4.10 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 4.10.0 - win.rar GmbH) Wise Care 365 version 2.05 (HKLM\...\{E864A1C8-EEE1-47D0-A7F8-00CC86D26D5E}_is1) (Version: 2.05 - WiseCleaner.com, Inc.) ==================== Restore Points ========================= 16-07-2014 22:53:04 Geplanter Prüfpunkt 20-07-2014 20:36:57 Windows Update 20-07-2014 20:53:40 Windows Update 20-07-2014 21:10:46 Windows Update 20-07-2014 21:32:37 Windows Update ==================== Hosts content: ========================== 2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {027EEB0B-E118-4C0F-B4FE-594754396DAF} - System32\Tasks\Wise Care 365 => C:\Program Files\Wise\Wise Care 365\WiseTray.exe [2012-09-24] (WiseCleaner.com) Task: {593E172A-4F74-4E44-8640-E9A9AC1DDFED} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-16] (Adobe Systems Incorporated) Task: {6362D24B-93DC-46C5-B82F-55B1ED5507A3} - System32\Tasks\SmartDefrag3_Startup => C:\Program Files\IObit\Smart Defrag 3\SmartDefrag.exe [2014-03-10] (IObit) Task: {7B41A628-97E4-4563-B738-3359F2BC7295} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-07-29] (Google Inc.) Task: {8102E4DC-C57A-4703-AAC8-5719400A1300} - System32\Tasks\Driver Booster SkipUAC (Lola) => C:\Program Files\IObit\Driver Booster\DriverBooster.exe [2014-06-19] (IObit) Task: {85704DB6-DE6E-404E-90E1-69478592EB1E} - System32\Tasks\Driver Booster Scan => C:\Program Files\IObit\Driver Booster\Scheduler.exe [2014-03-07] (IObit) Task: {99A0C569-BE46-4197-8CD7-64948A35B648} - System32\Tasks\ASC7_PerformanceMonitor => C:\Program Files\IObit\Advanced SystemCare 7\Monitor.exe [2014-05-06] (IObit) Task: {A1FA2770-DF8C-4358-B4CF-D5E08F4A9DF8} - System32\Tasks\{141B9C0F-D0AF-49B0-BCF5-A6E7443F6050} => C:\Program Files\Skype\Phone\Skype.exe [2013-11-14] (Skype Technologies S.A.) Task: {BCFB2A7A-3C5D-4C8C-87DA-2D59A998C45C} - System32\Tasks\SmartDefrag3_Update => C:\Program Files\IObit\Smart Defrag 3\AutoUpdate.exe [2014-03-10] (IObit) Task: {BEEF6F99-5415-4629-A085-9EF5DC16445B} - System32\Tasks\Uninstaller_SkipUac_Administrator => C:\Program Files\IObit\IObit Uninstaller\IObitUninstaler.exe [2014-06-07] (IObit) Task: {CF54C5D8-A70B-47A4-AF58-C633C15CEB2E} - System32\Tasks\Driver Booster Update => C:\Program Files\IObit\Driver Booster\AutoUpdate.exe [2014-06-19] (IObit) Task: {D3ED475D-EB70-4C6C-90E0-E14D708AEB4A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-07-29] (Google Inc.) Task: {EE1025C7-BC70-407F-AADB-305FADFBA539} - System32\Tasks\ASC7_SkipUac_Lola => C:\Program Files\IObit\Advanced SystemCare 7\ASC.exe [2014-05-28] (IObit) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\Wise Care 365.job => C:\Program Files\Wise\Wise Care 365\WiseTray.exe ==================== Loaded Modules (whitelisted) ============= 2014-06-10 20:17 - 2013-10-25 12:08 - 00517408 _____ () C:\Program Files\IObit\Advanced SystemCare 7\sqlite3.dll 2014-06-10 21:03 - 2012-09-05 18:55 - 00892288 _____ () C:\Program Files\IObit\Smart Defrag 3\webres.dll 2014-06-10 20:18 - 2013-01-15 18:48 - 00348992 _____ () C:\Program Files\IObit\Advanced SystemCare 7\madExcept_.bpl 2014-06-10 20:18 - 2013-01-15 18:48 - 00183616 _____ () C:\Program Files\IObit\Advanced SystemCare 7\madBasic_.bpl 2014-06-10 20:18 - 2013-01-15 18:48 - 00051008 _____ () C:\Program Files\IObit\Advanced SystemCare 7\madDisAsm_.bpl 2014-06-10 20:17 - 2013-01-15 18:47 - 00893248 _____ () C:\Program Files\IObit\Advanced SystemCare 7\webres.dll 2014-06-10 21:01 - 2013-08-02 17:07 - 00348992 _____ () C:\Program Files\IObit\Driver Booster\madExcept_.bpl 2014-06-10 21:01 - 2013-08-02 17:07 - 00183616 _____ () C:\Program Files\IObit\Driver Booster\madBasic_.bpl 2014-06-10 21:01 - 2013-08-02 17:07 - 00051008 _____ () C:\Program Files\IObit\Driver Booster\madDisAsm_.bpl 2014-06-10 20:17 - 2013-12-02 19:06 - 01281312 _____ () C:\Program Files\IObit\Advanced SystemCare 7\Scan.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\ProgramData\TEMP:0B9176C0 AlternateDataStreams: C:\ProgramData\TEMP:41099CE9 AlternateDataStreams: C:\ProgramData\TEMP:5D7E5A8F AlternateDataStreams: C:\ProgramData\TEMP:93DE1838 AlternateDataStreams: C:\ProgramData\TEMP:AB689DEA ==================== Safe Mode (whitelisted) =================== HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcmscsvc => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MpfService => ""="Service" ==================== EXE Association (whitelisted) ============= ==================== MSCONFIG/TASK MANAGER disabled items ========= MSCONFIG\startupreg: LManager => C:\Program Files\Launch Manager\LManager.exe ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (07/18/2014 01:07:04 AM) (Source: SideBySide) (EventID: 33) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0"1". Die abhängige Assemblierung "msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (07/18/2014 01:07:04 AM) (Source: SideBySide) (EventID: 33) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0"1". Die abhängige Assemblierung "msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (07/18/2014 01:07:03 AM) (Source: SideBySide) (EventID: 33) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0"1". Die abhängige Assemblierung "msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (07/18/2014 01:07:03 AM) (Source: SideBySide) (EventID: 33) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0"1". Die abhängige Assemblierung "msadctls,processorArchitecture="x86",type="win32",version="1.0.1801.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (07/18/2014 01:03:36 AM) (Source: SideBySide) (EventID: 33) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1". Die abhängige Assemblierung "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (07/18/2014 01:03:36 AM) (Source: SideBySide) (EventID: 33) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1". Die abhängige Assemblierung "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (07/18/2014 01:03:35 AM) (Source: SideBySide) (EventID: 33) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1". Die abhängige Assemblierung "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (07/18/2014 01:03:35 AM) (Source: SideBySide) (EventID: 33) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1". Die abhängige Assemblierung "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (07/18/2014 01:03:35 AM) (Source: SideBySide) (EventID: 33) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1". Die abhängige Assemblierung "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (07/18/2014 01:00:11 AM) (Source: SideBySide) (EventID: 33) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1". Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". System errors: ============= Error: (07/20/2014 11:40:56 PM) (Source: Service Control Manager) (EventID: 7026) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: cdrom Error: (07/20/2014 11:29:16 PM) (Source: Service Control Manager) (EventID: 7026) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: cdrom Error: (07/20/2014 10:50:04 PM) (Source: Service Control Manager) (EventID: 7026) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: cdrom Error: (07/20/2014 06:29:34 PM) (Source: Service Control Manager) (EventID: 7011) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst Wlansvc erreicht. Error: (07/20/2014 02:56:58 PM) (Source: DCOM) (EventID: 10010) (User: ) Description: {752073A1-23F2-4396-85F0-8FDB879ED0ED} Error: (07/20/2014 02:51:15 PM) (Source: Service Control Manager) (EventID: 7026) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: cdrom Error: (07/20/2014 01:57:53 PM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Der Dienst "Windows Update" wurde nicht richtig gestartet. Error: (07/20/2014 01:53:14 PM) (Source: Service Control Manager) (EventID: 7026) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: cdrom Error: (07/20/2014 03:31:29 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet: %%1069 Error: (07/20/2014 03:31:29 AM) (Source: Service Control Manager) (EventID: 7038) (User: ) Description: Der Dienst "WSearch" konnte sich nicht als "NT AUTHORITY\SYSTEM" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: %%50 Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC). Microsoft Office Sessions: ========================= ==================== Memory info =========================== Percentage of memory in use: 92% Total physical RAM: 1013.95 MB Available physical RAM: 72.78 MB Total Pagefile: 2037.95 MB Available Pagefile: 702.28 MB Total Virtual: 2047.88 MB Available Virtual: 1925.16 MB ==================== Drives ================================ Drive c: (Acer) (Fixed) (Total:220.78 GB) (Free:146.18 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 233 GB) (Disk ID: 69F31185) Partition 1: (Not Active) - (Size=12 GB) - (Type=27) Partition 2: (Active) - (Size=102 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=221 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
21.07.2014, 05:42 | #2 |
/// the machine /// TB-Ausbilder | Netbook fährt extrem langsam hoch und auch die Programme laden langsam hi,
__________________Scan mit Combofix
__________________ |
21.07.2014, 10:45 | #3 |
| Netbook fährt extrem langsam hoch und auch die Programme laden langsam Hier wie gewünscht der Log
__________________ComboFix hat nicht gemeckert - nur halt alles sehr, sehr lange gedauert Code:
ATTFilter ComboFix 14-07-20.02 - Lola 21.07.2014 10:41:57.1.2 - x86 Microsoft Windows 7 Starter 6.1.7601.1.1252.49.1031.18.1014.386 [GMT 2:00] ausgeführt von:: c:\users\Lola\Desktop\ComboFix.exe AV: Avira Desktop *Disabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859} SP: Avira Desktop *Disabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((((((((((((((((((( Weitere Löschungen )))))))))))))))))))))))))))))))))))))))))))))))) . . c:\program files\Common Files\Acer GameZone online.ico c:\users\Lola\AppData\Roaming\.# c:\windows\system32\roboot.exe . . ((((((((((((((((((((((((((((((((((((((( Treiber/Dienste ))))))))))))))))))))))))))))))))))))))))))))))))) . . -------\Service_WiseBootAssistant . . ((((((((((((((((((((((( Dateien erstellt von 2014-06-21 bis 2014-07-21 )))))))))))))))))))))))))))))) . . 2014-07-21 09:00 . 2014-07-21 09:03 -------- d-----w- c:\users\Lola\AppData\Local\temp 2014-07-20 21:57 . 2014-01-09 02:22 5694464 ----a-w- c:\windows\system32\mstscax.dll 2014-07-20 21:12 . 2013-10-01 23:45 32256 ----a-w- c:\windows\system32\TsUsbGDCoInstaller.dll 2014-07-20 21:12 . 2013-10-02 00:32 12800 ----a-w- c:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe 2014-07-20 21:11 . 2013-10-02 00:42 49152 ----a-w- c:\windows\system32\drivers\TsUsbFlt.sys 2014-07-20 21:11 . 2013-10-02 00:30 14336 ----a-w- c:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll 2014-07-20 21:11 . 2013-10-02 00:14 50176 ----a-w- c:\windows\system32\MsRdpWebAccess.dll 2014-07-20 21:11 . 2013-10-02 00:14 17920 ----a-w- c:\windows\system32\wksprtPS.dll 2014-07-20 21:11 . 2013-10-01 23:58 53248 ----a-w- c:\windows\system32\tsgqec.dll 2014-07-20 21:11 . 2013-10-01 23:08 855552 ----a-w- c:\windows\system32\rdvidcrl.dll 2014-07-20 21:11 . 2013-10-01 23:00 76288 ----a-w- c:\windows\system32\TSWbPrxy.exe 2014-07-20 21:11 . 2013-10-01 22:53 350208 ----a-w- c:\windows\system32\wksprt.exe 2014-07-20 21:11 . 2013-10-01 22:34 1068544 ----a-w- c:\windows\system32\mstsc.exe 2014-07-20 21:10 . 2013-09-25 01:57 792576 ----a-w- c:\windows\system32\TSWorkspace.dll 2014-07-20 20:17 . 2014-07-20 21:50 -------- d-----w- C:\FRST 2014-07-20 12:43 . 2014-06-03 09:29 936960 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\journal.dll 2014-07-20 12:41 . 2014-06-06 09:44 509440 ----a-w- c:\windows\system32\qedit.dll 2014-07-20 12:40 . 2014-05-30 06:36 338944 ----a-w- c:\windows\system32\drivers\afd.sys 2014-07-20 12:40 . 2014-05-30 07:52 247808 ----a-w- c:\windows\system32\schannel.dll 2014-07-20 12:39 . 2014-05-30 07:52 172032 ----a-w- c:\windows\system32\wdigest.dll 2014-07-20 12:39 . 2014-05-30 07:52 259584 ----a-w- c:\windows\system32\msv1_0.dll 2014-07-20 12:39 . 2014-05-30 07:52 550912 ----a-w- c:\windows\system32\kerberos.dll 2014-07-20 12:39 . 2014-05-30 07:52 65536 ----a-w- c:\windows\system32\TSpkg.dll 2014-07-20 12:39 . 2014-05-30 07:52 220160 ----a-w- c:\windows\system32\ncrypt.dll 2014-07-20 12:39 . 2014-05-30 07:52 17408 ----a-w- c:\windows\system32\credssp.dll 2014-07-20 12:38 . 2014-06-05 14:26 1059840 ----a-w- c:\windows\system32\lsasrv.dll 2014-07-20 01:30 . 2014-07-20 01:30 -------- d-----w- c:\users\Default\AppData\Roaming\IObit . . . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2014-07-17 12:44 . 2013-05-21 15:26 35848 ----a-w- c:\windows\system32\drivers\avnetflt.sys 2014-07-16 19:36 . 2012-04-17 11:17 699056 ----a-w- c:\windows\system32\FlashPlayerApp.exe 2014-07-16 19:36 . 2011-08-09 11:46 71344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2014-06-24 11:24 . 2013-04-06 00:01 97648 ----a-w- c:\windows\system32\drivers\avgntflt.sys 2014-06-10 21:28 . 2014-06-10 21:28 1783056 ----a-w- c:\windows\system32\WavesLib.dll 2014-06-10 21:28 . 2014-06-10 21:28 1821272 ----a-w- c:\windows\system32\WavesGUILib.dll 2014-06-10 21:28 . 2014-06-10 21:28 819648 ----a-w- c:\windows\system32\tadefxapo2.dll 2014-06-10 21:28 . 2014-06-10 21:28 58264 ----a-w- c:\windows\system32\TepeqAPO.dll 2014-06-10 21:28 . 2014-06-10 21:28 1379760 ----a-w- c:\windows\system32\tosade.dll 2014-06-10 21:28 . 2014-06-10 21:28 134584 ----a-w- c:\windows\system32\tadefxapo.dll 2014-06-10 21:28 . 2014-06-10 21:28 140528 ----a-w- c:\windows\system32\SRSWOW.dll 2014-06-10 21:28 . 2014-06-10 21:28 345328 ----a-w- c:\windows\system32\SRSTSXT.dll 2014-06-10 21:28 . 2014-06-10 21:28 185584 ----a-w- c:\windows\system32\SRSTSHD.dll 2014-06-10 21:28 . 2014-06-10 21:28 173296 ----a-w- c:\windows\system32\SRSHP360.dll 2014-06-10 21:28 . 2014-06-10 21:28 606968 ----a-w- c:\windows\system32\sltech32.dll 2014-06-10 21:28 . 2014-06-10 21:28 219896 ----a-w- c:\windows\system32\slprp32.dll 2014-06-10 21:28 . 2014-06-10 21:28 964856 ----a-w- c:\windows\system32\slcnt32.dll 2014-06-10 21:28 . 2014-06-10 21:28 827128 ----a-w- c:\windows\system32\sl3apo32.dll 2014-06-10 21:28 . 2014-06-10 21:28 919600 ----a-w- c:\windows\system32\SFSS_APO.dll 2014-06-10 21:28 . 2014-06-10 21:28 214368 ----a-w- c:\windows\system32\SFNHK.dll 2014-06-10 21:28 . 2014-06-10 21:28 74080 ----a-w- c:\windows\system32\SFCOM.dll 2014-06-10 21:28 . 2014-06-10 21:28 68960 ----a-w- c:\windows\system32\SFAPO.dll 2014-06-10 21:28 . 2014-06-10 21:28 1892056 ----a-w- c:\windows\system32\RTSndMgr.cpl 2014-06-10 21:28 . 2014-06-10 21:28 3001048 ----a-w- c:\windows\system32\drivers\RTKVHDA.sys 2014-06-10 21:28 . 2014-06-10 21:28 2559192 ----a-w- c:\windows\system32\RtkPgExt.dll 2014-06-10 21:28 . 2014-06-10 21:28 782040 ----a-w- c:\windows\system32\RtkApoApi.dll 2014-06-10 21:28 . 2014-06-10 21:28 13416 ----a-w- c:\windows\system32\RtkCoLDR.dll 2014-06-10 21:28 . 2014-06-10 21:28 126680 ----a-w- c:\windows\system32\RtkCoInstII.dll 2014-06-10 21:28 . 2014-06-10 21:28 2464472 ----a-w- c:\windows\system32\RtkAPO.dll 2014-06-10 21:28 . 2014-06-10 21:28 359768 ----a-w- c:\windows\system32\RTEEP32A.dll 2014-06-10 21:28 . 2014-06-10 21:28 78680 ----a-w- c:\windows\system32\RTEEL32A.dll 2014-06-10 21:28 . 2014-06-10 21:28 64856 ----a-w- c:\windows\system32\RTEEG32A.dll 2014-06-10 21:28 . 2014-06-10 21:28 170840 ----a-w- c:\windows\system32\RTEED32A.dll 2014-06-10 21:28 . 2014-06-10 21:28 295768 ----a-w- c:\windows\system32\RP3DHT32.dll 2014-06-10 21:28 . 2014-06-10 21:28 295768 ----a-w- c:\windows\system32\RP3DAA32.dll 2014-06-10 21:28 . 2014-06-10 21:28 48656896 ----a-w- c:\windows\system32\RCoRes.dat 2014-06-10 21:28 . 2014-06-10 21:28 7162128 ----a-w- c:\windows\system32\R4EEP32A.dll 2014-06-10 21:28 . 2014-06-10 21:28 62224 ----a-w- c:\windows\system32\R4EEG32A.dll 2014-06-10 21:28 . 2014-06-10 21:28 106768 ----a-w- c:\windows\system32\R4EEL32A.dll 2014-06-10 21:28 . 2014-06-10 21:28 352016 ----a-w- c:\windows\system32\R4EED32A.dll 2014-06-10 21:28 . 2014-06-10 21:28 91920 ----a-w- c:\windows\system32\R4EEA32A.dll 2014-06-10 21:28 . 2014-06-10 21:28 890160 ----a-w- c:\windows\system32\NAHIMICAPOSettingsIPC.dll 2014-06-10 21:28 . 2014-06-10 21:27 5088008 ----a-w- c:\windows\system32\NAHIMICAPOlfx.dll 2014-06-10 21:27 . 2014-06-10 21:27 852016 ----a-w- c:\windows\system32\MISS_APO.dll 2014-06-10 21:27 . 2014-06-10 21:27 509184 ----a-w- c:\windows\system32\MaxxVolumeSDAPO.dll 2014-06-10 21:27 . 2014-06-10 21:27 785496 ----a-w- c:\windows\system32\MaxxVoiceAPO20.dll 2014-06-10 21:27 . 2014-06-10 21:27 947800 ----a-w- c:\windows\system32\MaxxSpeechAPO.dll 2014-06-10 21:27 . 2014-06-10 21:27 3632216 ----a-w- c:\windows\system32\MaxxAudioVnN.dll 2014-06-10 21:27 . 2014-06-10 21:27 28013656 ----a-w- c:\windows\system32\MaxxAudioVnA.dll 2014-06-10 21:27 . 2014-06-10 21:27 1674840 ----a-w- c:\windows\system32\MaxxAudioRealtek2.dll 2014-06-10 21:27 . 2014-06-10 21:27 14444120 ----a-w- c:\windows\system32\MaxxAudioRealtek.dll 2014-06-10 21:27 . 2014-06-10 21:27 1936472 ----a-w- c:\windows\system32\MaxxAudioEQ.dll 2014-06-10 21:27 . 2014-06-10 21:27 859736 ----a-w- c:\windows\system32\MaxxAudioAPOShell.dll 2014-06-10 21:27 . 2014-06-10 21:27 1143384 ----a-w- c:\windows\system32\MaxxAudioAPO50.dll 2014-06-10 21:27 . 2014-06-10 21:27 1143384 ----a-w- c:\windows\system32\MaxxAudioAPO40.dll 2014-06-10 21:27 . 2014-06-10 21:27 509184 ----a-w- c:\windows\system32\MaxxAudioAPO30.dll 2014-06-10 21:27 . 2014-06-10 21:27 232792 ----a-w- c:\windows\system32\MaxxAudioAPO20.dll 2014-06-10 21:27 . 2014-06-10 21:27 132368 ----a-w- c:\windows\system32\MaxxAudioAPO.dll 2014-06-10 21:27 . 2014-06-10 21:27 357712 ----a-w- c:\windows\system32\KAAPORT.dll 2014-06-10 21:27 . 2014-06-10 21:27 601704 ----a-w- c:\windows\system32\DTSVoiceClarityDLL.dll 2014-06-10 21:27 . 2014-06-10 21:27 2421792 ----a-w- c:\windows\system32\FMAPO.dll 2014-06-10 21:27 . 2014-06-10 21:27 346048 ----a-w- c:\windows\system32\DTSU2PREC32.dll 2014-06-10 21:27 . 2014-06-10 21:27 426944 ----a-w- c:\windows\system32\DTSU2PLFX32.dll 2014-06-10 21:27 . 2014-06-10 21:27 403392 ----a-w- c:\windows\system32\DTSU2PGFX32.dll 2014-06-10 21:27 . 2014-06-10 21:27 631400 ----a-w- c:\windows\system32\DTSSymmetryDLL.dll 2014-06-10 21:27 . 2014-06-10 21:27 1509480 ----a-w- c:\windows\system32\DTSS2SpeakerDLL.dll 2014-06-10 21:27 . 2014-06-10 21:27 458344 ----a-w- c:\windows\system32\DTSNeoPCDLL.dll 2014-06-10 21:27 . 2014-06-10 21:27 1292904 ----a-w- c:\windows\system32\DTSS2HeadphoneDLL.dll 2014-06-10 21:27 . 2014-06-10 21:27 375400 ----a-w- c:\windows\system32\DTSLimiterDLL.dll 2014-06-10 21:27 . 2014-06-10 21:27 389736 ----a-w- c:\windows\system32\DTSGainCompensatorDLL.dll 2014-06-10 21:27 . 2014-06-10 21:27 218728 ----a-w- c:\windows\system32\DTSGFXAPONS.dll 2014-06-10 21:27 . 2014-06-10 21:27 218728 ----a-w- c:\windows\system32\DTSGFXAPO.dll 2014-06-10 21:27 . 2014-06-10 21:27 218216 ----a-w- c:\windows\system32\DTSLFXAPO.dll 2014-06-10 21:27 . 2014-06-10 21:27 1220200 ----a-w- c:\windows\system32\DTSBoostDLL.dll 2014-06-10 21:27 . 2014-06-10 21:27 654952 ----a-w- c:\windows\system32\DTSBassEnhancementDLL.dll 2014-06-10 21:27 . 2014-06-10 21:27 6176944 ----a-w- c:\windows\system32\DDPP32A.dll 2014-06-10 21:27 . 2014-06-10 21:27 272048 ----a-w- c:\windows\system32\DDPO32A.dll 2014-06-10 21:27 . 2014-06-10 21:27 1489072 ----a-w- c:\windows\system32\DDPD32A.dll 2014-06-10 21:27 . 2014-06-10 21:27 219312 ----a-w- c:\windows\system32\DDPA32.dll 2014-06-10 21:27 . 2014-06-10 21:27 92584 ----a-w- c:\windows\system32\CONEQMSAPOGUILibrary.dll 2014-06-10 21:27 . 2014-06-10 21:26 502584 ----a-w- c:\windows\system32\audioLibVc.dll 2014-06-10 21:26 . 2014-06-10 21:26 95840 ----a-w- c:\windows\system32\AERTARen.dll 2014-06-10 21:26 . 2014-06-10 21:26 188696 ----a-w- c:\windows\system32\AcpiServiceVnA.dll 2014-06-10 21:26 . 2014-06-10 21:26 182472 ----a-w- c:\windows\system32\AERTACap.dll 2014-06-10 21:24 . 2014-06-10 21:24 109256 ----a-w- c:\windows\system32\drivers\L1C62x86.sys 2014-06-10 21:21 . 2014-06-10 21:21 92464 ----a-w- c:\windows\system32\bcmwlcoi.dll 2014-06-10 21:20 . 2014-06-10 21:20 7333072 ----a-w- c:\windows\system32\drivers\BCMWL6.SYS 2014-06-10 21:20 . 2014-06-10 21:20 3657728 ----a-w- c:\windows\system32\bcmihvui.dll 2014-06-10 21:20 . 2014-06-10 21:20 4268032 ----a-w- c:\windows\system32\bcmihvsrv.dll 2014-06-10 21:19 . 2014-06-10 21:19 354840 ----a-w- c:\windows\system32\drivers\iaStor.sys 2014-06-10 18:57 . 2014-06-10 18:57 626688 ----a-w- c:\windows\system32\usp10.dll 2014-06-10 18:56 . 2014-06-10 18:56 2048 ----a-w- c:\windows\system32\msxml6r.dll 2014-06-10 18:56 . 2014-06-10 18:56 2048 ----a-w- c:\windows\system32\msxml3r.dll 2014-06-10 18:56 . 2014-06-10 18:56 1389056 ----a-w- c:\windows\system32\msxml6.dll 2014-06-10 18:56 . 2014-06-10 18:56 1237504 ----a-w- c:\windows\system32\msxml3.dll 2014-06-10 18:55 . 2014-06-10 18:55 187840 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS 2014-06-10 18:55 . 2014-06-10 18:55 1294272 ----a-w- c:\windows\system32\drivers\tcpip.sys 2014-06-10 18:50 . 2014-06-10 18:50 221184 ----a-w- c:\windows\system32\rdpudd.dll 2014-06-10 18:50 . 2014-06-10 18:50 192000 ----a-w- c:\windows\system32\rdpendp_winip.dll 2014-06-10 18:50 . 2014-06-10 18:50 14848 ----a-w- c:\windows\system32\drivers\rdpvideominiport.sys . . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_LOCAL_MACHINE\SOFTWARE\~\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}] 2014-06-10 17:47 752960 ----a-w- c:\program files\IObit\IObit Uninstaller\UninstallExplorer32.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP] @="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}" [HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}] 2009-09-10 13:41 120104 ----a-w- c:\program files\EgisTec\MyWinLocker 3\x86\PSDProtect.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1174016] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-10-29 39408] "Advanced SystemCare 7"="c:\program files\IObit\Advanced SystemCare 7\ASCTray.exe" [2014-04-21 2295584] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2014-06-10 12021464] "Acer ePower Management"="c:\program files\Acer\Acer ePower Management\ePowerTray.exe" [2009-09-30 703008] "EgisTecLiveUpdate"="c:\program files\EgisTec Egis Software Update\EgisUpdate.exe" [2009-08-04 199464] "mwlDaemon"="c:\program files\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe" [2009-09-10 349480] "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2009-09-03 1557800] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2009-09-23 141848] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-09-23 173592] "Persistence"="c:\windows\system32\igfxpers.exe" [2009-09-23 150552] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904] "avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2014-06-24 750160] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Acer VCM.lnk - c:\program files\Acer\Acer VCM\AcerVCM.exe [2009-10-29 708608] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 0 (0x0) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableLUA"= 0 (0x0) "EnableUIADesktopToggle"= 0 (0x0) "PromptOnSecureDesktop"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LManager] 2009-08-18 09:42 1157128 ----a-w- c:\program files\Launch Manager\LManager.exe . R2 LiveUpdateSvc;LiveUpdate;c:\program files\IObit\LiveUpdate\LiveUpdate.exe [2014-06-10 2175264] R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2013-10-23 172192] R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2014-06-18 108032] R3 MWLService;MyWinLocker Service;c:\program files\EgisTec\MyWinLocker 3\x86\\MWLService.exe [2009-09-10 305448] R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2014-06-10 14848] R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [2009-06-24 167424] R3 RtsUIR;Realtek IR Driver;c:\windows\system32\DRIVERS\Rts516xIR.sys [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2013-10-02 49152] S0 SmartDefragDriver;SmartDefragDriver;c:\windows\System32\Drivers\SmartDefragDriver.sys [2013-12-24 18624] S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [2013-12-03 37352] S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys [2009-06-02 18992] S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys [2009-06-02 16432] S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys [2009-06-02 60976] S2 AdvancedSystemCareService7;Advanced SystemCare Service 7;c:\program files\IObit\Advanced SystemCare 7\ASCService.exe [2014-01-14 881952] S2 AntiVirSchedulerService;Avira Planer;c:\program files\Avira\AntiVir Desktop\sched.exe [2014-06-24 430160] S2 AntiVirWebService;Avira Browser-Schutz;c:\program files\Avira\AntiVir Desktop\AVWEBGRD.EXE [2014-06-24 1028688] S2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [2009-09-30 727584] S2 Greg_Service;GRegService;c:\program files\Acer\Registration\GregHSRW.exe [2009-08-28 1150496] S2 RS_Service;Raw Socket Service;c:\program files\Acer\Acer VCM\RS_Service.exe [2009-07-10 253952] S2 Updater Service;Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe [2009-07-04 240160] S3 L1C;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x86.sys [2014-06-10 109256] . . --- Andere Dienste/Treiber im Speicher --- . *NewlyCreated* - WS2IFSL . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] LocalServiceAndNoImpersonation REG_MULTI_SZ SSDPSRV upnphost SCardSvr TBS fdrespub AppIDSvc QWAVE wcncsvc . [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}] 2014-07-17 09:57 1104200 ----a-w- c:\program files\Google\Chrome\Application\36.0.1985.125\Installer\chrmstp.exe . Inhalt des "geplante Tasks" Ordners . 2014-07-21 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-17 19:37] . 2014-07-21 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-07-29 04:17] . 2014-07-21 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-07-29 04:17] . 2014-07-21 c:\windows\Tasks\Wise Care 365.job - c:\program files\Wise\Wise Care 365\WiseTray.exe [2012-10-25 15:24] . . ------- Zusätzlicher Suchlauf ------- . uStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_one&r=27b507105865l0334ww05w48i2380r IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000 LSP: c:\program files\Avira\AntiVir Desktop\avsda.dll TCP: DhcpNameServer = 192.168.2.1 FF - ProfilePath - c:\users\Lola\AppData\Roaming\Mozilla\Firefox\Profiles\wx4ijpqa.default\ FF - prefs.js: browser.search.selectedEngine - Ask.com FF - prefs.js: browser.startup.homepage - hxxp://www.warofdragons.de/ FF - prefs.js: network.proxy.http - 85.214.71.220 FF - prefs.js: network.proxy.http_port - 3128 FF - prefs.js: network.proxy.type - 0 FF - ExtSQL: 2014-06-10 22:19; ascsurfingprotection@iobit.com; c:\users\Lola\AppData\Roaming\Mozilla\Firefox\Profiles\wx4ijpqa.default\extensions\ascsurfingprotection@iobit.com FF - ExtSQL: !HIDDEN! 2014-06-11 00:17; cliqz@cliqz.com; c:\users\Lola\AppData\Roaming\Mozilla\Firefox\Profiles\wx4ijpqa.default\extensions\cliqz@cliqz.com FF - user.js: network.http.pipelining.maxrequests - 8 FF - user.js: network.http.request.max-start-delay - 0 FF - user.js: network.http.max-connections - 48 FF - user.js: network.http.max-connections-per-server - 16 FF - user.js: network.http.max-persistent-connections-per-proxy - 16 FF - user.js: network.http.max-persistent-connections-per-server - 8 FF - user.js: browser.turbo.enabled - true FF - user.js: browser.display.show_image_placeholders - true FF - user.js: browser.chrome.favicons - false FF - user.js: browser.urlbar.autocomplete.enabled - true FF - user.js: browser.cache.memory.capacity - 16000 FF - user.js: content.notify.ontimer - true FF - user.js: content.maxtextrun - 4095 FF - user.js: content.max.tokenizing.time - 3000000 FF - user.js: content.switch.threshold - 1000000 FF - user.js: plugin.expose_full_path - true FF - user.js: ui.submenuDelay - 0 FF - user.js: dom.disable_window_status_change - true . - - - - Entfernte verwaiste Registrierungseinträge - - - - . Toolbar-Locked - (no file) SafeBoot-mcmscsvc SafeBoot-MCODS . . . --------------------- Gesperrte Registrierungsschluessel --------------------- . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . --------------------- Durch laufende Prozesse gestartete DLLs --------------------- . - - - - - - - > 'Explorer.exe'(4288) c:\program files\EgisTec\MyWinLocker 3\x86\psdprotect.dll c:\program files\EgisTec\MyWinLocker 3\x86\sysenv.dll . ------------------------ Weitere laufende Prozesse ------------------------ . c:\windows\system32\WLANExt.exe c:\windows\system32\conhost.exe c:\windows\system32\taskhost.exe c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe c:\program files\Avira\AntiVir Desktop\avguard.exe c:\program files\IObit\Smart Defrag 3\SmartDefrag.exe c:\windows\system32\conhost.exe c:\program files\Intel\Intel Matrix Storage Manager\IAANTMon.exe c:\program files\Synaptics\SynTP\SynTPHelper.exe c:\windows\system32\igfxsrvc.exe c:\windows\system32\igfxext.exe c:\windows\system32\wbem\unsecapp.exe c:\program files\Avira\AntiVir Desktop\avshadow.exe c:\program files\Windows Media Player\wmpnetwk.exe c:\windows\system32\sppsvc.exe . ************************************************************************** . Zeit der Fertigstellung: 2014-07-21 11:16:36 - PC wurde neu gestartet ComboFix-quarantined-files.txt 2014-07-21 09:16 . Vor Suchlauf: 9 Verzeichnis(se), 156.566.724.608 Bytes frei Nach Suchlauf: 16 Verzeichnis(se), 155.953.590.272 Bytes frei . - - End Of File - - E0BCC1686BD3BC64344C779B03EE1E54 A36C5E4F47E84449FF07ED3517B43A31 |
21.07.2014, 13:57 | #4 |
/// the machine /// TB-Ausbilder | Netbook fährt extrem langsam hoch und auch die Programme laden langsam Downloade Dir bitte Malwarebytes Anti-Malware
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
21.07.2014, 18:58 | #5 |
| Netbook fährt extrem langsam hoch und auch die Programme laden langsam Hallo Schrauber, habe versucht alle Logs zu bekommen, aber leider bin ich auf ein kleines Problem gestossen Für den MBAM konnte ich hier am Netbook nicht an den Button zum Exportieren rankommen. Habe auch versucht die Taskleiste ausblenden zulassen, aber das Fenster welches sich bei Ansicht geöffnet hat, war zu groß und ließ sich i-wie auch nicht verkleinern oder so verschieben, das ich die mbam.txt ertellen konnte Wenn du einen Weg kennst, wie/wo ich an den Log komme - dann reiche ich ihn dir natürlich nach... die anderen Logs folgen nun: AdwCleaner: Code:
ATTFilter # AdwCleaner v3.216 - Bericht erstellt am 21/07/2014 um 17:44:59 # Aktualisiert 17/07/2014 von Xplode # Betriebssystem : Windows 7 Starter Service Pack 1 (32 bits) # Benutzername : Lola - FRIGG # Gestartet von : C:\Users\Lola\Desktop\adwcleaner_3.216.exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** Ordner Gelöscht : C:\ProgramData\IObit\Driver Booster Ordner Gelöscht : C:\ProgramData\Partner Ordner Gelöscht : C:\Program Files\IObit\Driver Booster Ordner Gelöscht : C:\Program Files\Mail.Ru Ordner Gelöscht : C:\Users\Lola\AppData\Local\Mail.Ru Ordner Gelöscht : C:\Users\Lola\AppData\Roaming\IObit\Driver Booster Ordner Gelöscht : C:\Users\Lola\AppData\Roaming\Systweak Ordner Gelöscht : C:\Users\Lola\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mail.Ru Datei Gelöscht : C:\Users\Lola\AppData\Roaming\Mozilla\Firefox\Profiles\wx4ijpqa.default\user.js Datei Gelöscht : C:\Windows\System32\Tasks\Driver Booster Scan Datei Gelöscht : C:\Windows\System32\Tasks\Driver Booster Update ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** [#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{85704DB6-DE6E-404E-90E1-69478592EB1E} [#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{85704DB6-DE6E-404E-90E1-69478592EB1E} [#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{CF54C5D8-A70B-47A4-AF58-C633C15CEB2E} [#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CF54C5D8-A70B-47A4-AF58-C633C15CEB2E} [#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1EC9510D-A439-4950-9399-B6399EDF9EA7} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\WLXQuickTimeShellExt.DLL Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_app-launcher_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_app-launcher_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{00B11DA2-75ED-4364-ABA5-9A95B1F5E946} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2318C2B1-4965-11D4-9B18-009027A5CD4F} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2318C2B1-4965-11D4-9B18-009027A5CD4F} Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{2318C2B1-4965-11D4-9B18-009027A5CD4F}] Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{2318C2B1-4965-11D4-9B18-009027A5CD4F}] Schlüssel Gelöscht : HKCU\Software\OCS Schlüssel Gelöscht : HKCU\Software\Softonic Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4 ***** [ Browser ] ***** -\\ Internet Explorer v11.0.9600.17207 -\\ Mozilla Firefox v30.0 (de) [ Datei : C:\Users\Lola\AppData\Roaming\Mozilla\Firefox\Profiles\wx4ijpqa.default\prefs.js ] Zeile gelöscht : user_pref("splitbrowser.undo.state", "%28%7Btitle%3A%22Fox%20Splitter%20%28formerly%20Split%20Browser%29%20%3A%3A%20Firefox%20Add-ons%22%2C%20icon%3A%22hxxps%3A//addons.mozilla.org/media//img/favicon.[...] -\\ Google Chrome v36.0.1985.125 [ Datei : C:\Users\Lola\AppData\Local\Google\Chrome\User Data\Default\preferences ] Gelöscht [Search Provider] : hxxp://websearch.ask.com/redirect?client=cr&src=kw&tb=AVR-4&o=APN10261&locale=de_DE&apn_uid=a7b75062-2a18-4df5-94ba-330652a94777&apn_ptnrs=%5EAGS&apn_sauid=4CA72D85-B78B-48F7-9E18-5C9266D0E392&apn_dtid=%5EYYYYYY%5EYY%5EDE&q={searchTerms} ************************* AdwCleaner[R0].txt - [4848 octets] - [21/07/2014 17:40:20] AdwCleaner[S0].txt - [4789 octets] - [21/07/2014 17:44:59] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4849 octets] ########## Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.1.3 (03.23.2014:1) OS: Windows 7 Starter x86 Ran by Lola on 21.07.2014 at 19:23:08,22 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{2D46DE75-C96F-4F9F-B3BD-8BAF0983F886} ~~~ Files Successfully deleted: [File] "C:\Windows\Tasks\wise care 365.job" ~~~ Folders ~~~ FireFox Emptied folder: C:\Users\Lola\AppData\Roaming\mozilla\firefox\profiles\wx4ijpqa.default\minidumps [3 files] ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 21.07.2014 at 19:37:23,95 Computer was rebooted End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:20-07-2014 Ran by Lola (administrator) on FRIGG on 21-07-2014 19:37:53 Running from C:\Users\Lola\Desktop Platform: Microsoft Windows 7 Starter Service Pack 1 (X86) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (IObit) C:\Program Files\IObit\Advanced SystemCare 7\ASCService.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe (Egis Technology Inc.) C:\Program Files\EgisTec Egis Software Update\EgisUpdate.exe (Egis Technology Inc.) C:\Program Files\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe (IObit) C:\Program Files\IObit\Smart Defrag 3\SmartDefrag.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (IObit) C:\Program Files\IObit\Advanced SystemCare 7\Monitor.exe (Acer Incorporated) C:\Program Files\Acer\Registration\GregHSRW.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (IObit) C:\Program Files\IObit\Advanced SystemCare 7\ASCTray.exe (Acer Incorporated) C:\Program Files\Acer\Acer VCM\AcerVCM.exe (Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe (Acer Incorporated) C:\Program Files\Acer\Acer VCM\RS_Service.exe (Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation) C:\Windows\System32\igfxext.exe (Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbam.exe (Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebgrd.exe ==================== Registry (Whitelisted) ================== HKU\S-1-5-21-624116608-515939505-3949833191-1000\...\Run: [swg] => C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2009-10-29] (Google Inc.) HKU\S-1-5-21-624116608-515939505-3949833191-1000\...\Run: [Advanced SystemCare 7] => C:\Program Files\IObit\Advanced SystemCare 7\ASCTray.exe [2295584 2014-04-21] (IObit) HKU\S-1-5-21-624116608-515939505-3949833191-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1 Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Acer VCM.lnk ShortcutTarget: Acer VCM.lnk -> C:\Program Files\Acer\Acer VCM\AcerVCM.exe (Acer Incorporated) ShellIconOverlayIdentifiers: egisPSDP -> {30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} => C:\Program Files\EgisTec\MyWinLocker 3\x86\psdprotect.dll (Egis Technology Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_one&r=27b507105865l0334ww05w48i2380r HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKLM - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_deDE390DE390 BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll (IObit) BHO: No Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} -> No File BHO: Windows Live Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) BHO: Advanced SystemCare Browser Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit) Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation) Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation) Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\Lola\AppData\Roaming\Mozilla\Firefox\Profiles\wx4ijpqa.default FF DefaultSearchEngine: Google FF SearchEngineOrder.1: Ask.com FF SelectedSearchEngine: Ask.com FF Homepage: hxxp://www.warofdragons.de/ FF NetworkProxy: "http", "85.214.71.220" FF NetworkProxy: "http_port", 3128 FF NetworkProxy: "type", 0 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_145.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin: @microsoft.com/WLPG,version=14.0.8117.0416 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Lola\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Users\Lola\AppData\Roaming\Mozilla\Firefox\Profiles\wx4ijpqa.default\searchplugins\google-images.xml FF SearchPlugin: C:\Users\Lola\AppData\Roaming\Mozilla\Firefox\Profiles\wx4ijpqa.default\searchplugins\google-maps.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Advanced SystemCare Surfing Protection - C:\Users\Lola\AppData\Roaming\Mozilla\Firefox\Profiles\wx4ijpqa.default\Extensions\ascsurfingprotection@iobit.com [2014-06-10] FF Extension: Cliqz Beta - C:\Users\Lola\AppData\Roaming\Mozilla\Firefox\Profiles\wx4ijpqa.default\Extensions\cliqz@cliqz.com.xpi [2014-06-20] FF Extension: Adblock Plus - C:\Users\Lola\AppData\Roaming\Mozilla\Firefox\Profiles\wx4ijpqa.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-05-02] FF HKCU\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\Lola\AppData\Roaming\Mozilla\Firefox\Profiles\wx4ijpqa.default\extensions\cliqz@cliqz.com Chrome: ======= CHR HomePage: CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll No File CHR Extension: (Google Docs) - C:\Users\Lola\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-09-09] CHR Extension: (Google Drive) - C:\Users\Lola\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-09-09] CHR Extension: (YouTube) - C:\Users\Lola\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-09-09] CHR Extension: (Google-Suche) - C:\Users\Lola\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-09-09] CHR Extension: (Google Wallet) - C:\Users\Lola\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-09] CHR Extension: (Google Mail) - C:\Users\Lola\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-09-09] ========================== Services (Whitelisted) ================= R2 AdvancedSystemCareService7; C:\Program Files\IObit\Advanced SystemCare 7\ASCService.exe [881952 2014-01-14] (IObit) R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [430160 2014-06-24] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [430160 2014-06-24] (Avira Operations GmbH & Co. KG) R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1028688 2014-06-24] (Avira Operations GmbH & Co. KG) R2 ePowerSvc; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [727584 2009-09-30] (Acer Incorporated) R2 Greg_Service; C:\Program Files\Acer\Registration\GregHSRW.exe [1150496 2009-08-28] (Acer Incorporated) S2 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2175264 2014-06-10] (IObit) R2 MBAMScheduler; C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation) S3 MWLService; C:\Program Files\EgisTec\MyWinLocker 3\x86\\MWLService.exe [305448 2009-09-10] (Egis Technology Inc.) R2 RS_Service; C:\Program Files\Acer\Acer VCM\RS_Service.exe [253952 2009-07-10] (Acer Incorporated) [File not signed] S2 Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [240160 2009-07-04] (Acer) ==================== Drivers (Whitelisted) ==================== R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [97648 2014-06-24] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-06-03] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-12-03] (Avira Operations GmbH & Co. KG) R3 L1C; C:\Windows\System32\DRIVERS\L1C62x86.sys [109256 2014-06-10] (Qualcomm Atheros Co., Ltd.) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-05-12] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [110296 2014-07-21] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2014-05-12] (Malwarebytes Corporation) R1 mwlPSDFilter; C:\Windows\System32\DRIVERS\mwlPSDFilter.sys [18992 2009-06-02] (Egis Technology Inc.) R1 mwlPSDNServ; C:\Windows\System32\DRIVERS\mwlPSDNServ.sys [16432 2009-06-02] (Egis Technology Inc.) R1 mwlPSDVDisk; C:\Windows\System32\DRIVERS\mwlPSDVDisk.sys [60976 2009-06-02] (Egis Technology Inc.) R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [18624 2013-12-24] (IObit) R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-04-06] (Avira GmbH) U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation) S3 catchme; \??\C:\Users\Lola\AppData\Local\Temp\catchme.sys [X] S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [X] S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-07-21 19:37 - 2014-07-21 19:37 - 00000988 _____ () C:\Users\Lola\Desktop\JRT.txt 2014-07-21 19:10 - 2014-07-21 19:10 - 00000000 ____D () C:\Windows\ERUNT 2014-07-21 19:07 - 2014-07-21 19:07 - 00004929 _____ () C:\Users\Lola\Desktop\AdwCl.txt 2014-07-21 17:41 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll 2014-07-21 17:39 - 2014-07-21 18:57 - 00000000 ____D () C:\AdwCleaner 2014-07-21 16:45 - 2014-07-21 16:45 - 00000000 __SHD () C:\Users\Lola\AppData\Local\EmieUserList 2014-07-21 16:45 - 2014-07-21 16:45 - 00000000 __SHD () C:\Users\Lola\AppData\Local\EmieSiteList 2014-07-21 15:05 - 2014-07-21 19:22 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-07-21 15:05 - 2014-07-21 15:05 - 00001064 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-07-21 15:05 - 2014-07-21 15:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-07-21 15:04 - 2014-07-21 15:05 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 2014-07-21 15:04 - 2014-07-21 15:04 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-07-21 15:04 - 2014-05-12 07:26 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-07-21 15:04 - 2014-05-12 07:25 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-07-21 15:04 - 2014-05-12 07:25 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-07-21 15:00 - 2014-07-21 15:01 - 01016261 _____ (Thisisu) C:\Users\Lola\Desktop\JRT.exe 2014-07-21 15:00 - 2014-07-21 15:00 - 01354223 _____ () C:\Users\Lola\Desktop\adwcleaner_3.216.exe 2014-07-21 14:59 - 2014-07-21 15:01 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Lola\Desktop\mbam-setup-2.0.2.1012.exe 2014-07-21 11:16 - 2014-07-21 11:16 - 00021875 _____ () C:\ComboFix.txt 2014-07-21 10:37 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe 2014-07-21 10:37 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe 2014-07-21 10:37 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-07-21 10:37 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-07-21 10:37 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-07-21 10:37 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe 2014-07-21 10:37 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe 2014-07-21 10:37 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe 2014-07-21 10:36 - 2014-07-21 11:16 - 00000000 ____D () C:\Qoobox 2014-07-21 10:35 - 2014-07-21 11:11 - 00000000 ____D () C:\Windows\erdnt 2014-07-21 10:31 - 2014-07-21 10:32 - 05561612 ____R (Swearware) C:\Users\Lola\Desktop\ComboFix.exe 2014-07-21 10:28 - 2014-07-21 10:29 - 05561612 _____ (Swearware) C:\Users\Lola\Downloads\ComboFix.exe 2014-07-20 23:57 - 2014-01-09 04:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2014-07-20 23:47 - 2014-07-20 23:50 - 00028962 _____ () C:\Users\Lola\Desktop\Addition.txt 2014-07-20 23:43 - 2014-07-21 19:37 - 00013115 _____ () C:\Users\Lola\Desktop\FRST.txt 2014-07-20 23:12 - 2013-10-02 02:32 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe 2014-07-20 23:12 - 2013-10-02 01:45 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll 2014-07-20 23:11 - 2013-10-02 02:42 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys 2014-07-20 23:11 - 2013-10-02 02:30 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll 2014-07-20 23:11 - 2013-10-02 02:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll 2014-07-20 23:11 - 2013-10-02 02:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll 2014-07-20 23:11 - 2013-10-02 01:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2014-07-20 23:11 - 2013-10-02 01:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll 2014-07-20 23:11 - 2013-10-02 01:00 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe 2014-07-20 23:11 - 2013-10-02 00:53 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe 2014-07-20 23:11 - 2013-10-02 00:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe 2014-07-20 23:10 - 2013-09-25 03:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll 2014-07-20 22:17 - 2014-07-21 19:38 - 00000000 ____D () C:\FRST 2014-07-20 21:19 - 2014-07-20 21:19 - 00380416 _____ () C:\Users\Lola\Desktop\Gmer-19357.exe 2014-07-20 21:18 - 2014-07-20 21:19 - 01080320 _____ (Farbar) C:\Users\Lola\Desktop\FRST.exe 2014-07-20 21:16 - 2014-07-20 21:16 - 00050477 _____ () C:\Users\Lola\Desktop\Defogger.exe 2014-07-20 14:42 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-07-20 14:42 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-07-20 14:42 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-07-20 14:42 - 2014-06-19 01:56 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-07-20 14:42 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-07-20 14:42 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-07-20 14:42 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-07-20 14:42 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-07-20 14:42 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-07-20 14:42 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-07-20 14:42 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-07-20 14:42 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-07-20 14:42 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-07-20 14:42 - 2014-06-19 01:23 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-07-20 14:42 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-07-20 14:42 - 2014-06-19 01:16 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-07-20 14:42 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-07-20 14:42 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-07-20 14:42 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-07-20 14:42 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-07-20 14:42 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-07-20 14:42 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-07-20 14:42 - 2014-06-19 00:52 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-07-20 14:42 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-07-20 14:42 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-07-20 14:42 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-07-20 14:42 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-07-20 14:42 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-07-20 14:42 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-07-20 14:42 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-07-20 14:42 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2014-07-20 14:42 - 2014-06-18 02:52 - 02350080 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-07-20 14:41 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-07-20 14:40 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-07-20 14:40 - 2014-05-30 08:36 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2014-07-20 14:39 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-07-20 14:39 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-07-20 14:39 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2014-07-20 14:39 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-07-20 14:39 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-07-20 14:39 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-07-20 14:38 - 2014-06-05 16:26 - 01059840 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-07-20 03:30 - 2014-07-20 03:30 - 00000000 ____D () C:\Users\Default\AppData\Roaming\IObit 2014-07-20 03:30 - 2014-07-20 03:30 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\IObit 2014-07-20 03:28 - 2014-07-20 03:29 - 00144960 _____ () C:\Windows\Minidump\072014-23836-01.dmp 2014-07-20 03:28 - 2014-07-20 03:28 - 372600835 _____ () C:\Windows\MEMORY.DMP 2014-07-16 21:32 - 2014-07-21 19:16 - 00000616 _____ () C:\Windows\setupact.log 2014-07-16 21:32 - 2014-07-21 19:04 - 00001884 _____ () C:\Windows\PFRO.log 2014-07-16 21:32 - 2014-07-16 21:32 - 00000000 _____ () C:\Windows\setuperr.log ==================== One Month Modified Files and Folders ======= 2014-07-21 19:39 - 2014-07-20 23:43 - 00013115 _____ () C:\Users\Lola\Desktop\FRST.txt 2014-07-21 19:38 - 2014-07-20 22:17 - 00000000 ____D () C:\FRST 2014-07-21 19:37 - 2014-07-21 19:37 - 00000988 _____ () C:\Users\Lola\Desktop\JRT.txt 2014-07-21 19:36 - 2012-04-17 13:17 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-07-21 19:32 - 2009-07-14 06:34 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-07-21 19:32 - 2009-07-14 06:34 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-07-21 19:22 - 2014-07-21 15:05 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-07-21 19:16 - 2014-07-16 21:32 - 00000616 _____ () C:\Windows\setupact.log 2014-07-21 19:16 - 2010-07-29 06:17 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-07-21 19:16 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-07-21 19:15 - 2014-04-29 15:38 - 01109738 _____ () C:\Windows\WindowsUpdate.log 2014-07-21 19:10 - 2014-07-21 19:10 - 00000000 ____D () C:\Windows\ERUNT 2014-07-21 19:07 - 2014-07-21 19:07 - 00004929 _____ () C:\Users\Lola\Desktop\AdwCl.txt 2014-07-21 19:04 - 2014-07-16 21:32 - 00001884 _____ () C:\Windows\PFRO.log 2014-07-21 18:57 - 2014-07-21 17:39 - 00000000 ____D () C:\AdwCleaner 2014-07-21 18:57 - 2014-06-10 19:47 - 00000000 ____D () C:\Users\Lola\AppData\Roaming\IObit 2014-07-21 18:51 - 2010-07-29 06:17 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-07-21 17:45 - 2014-06-10 19:47 - 00000000 ____D () C:\Program Files\IObit 2014-07-21 16:45 - 2014-07-21 16:45 - 00000000 __SHD () C:\Users\Lola\AppData\Local\EmieUserList 2014-07-21 16:45 - 2014-07-21 16:45 - 00000000 __SHD () C:\Users\Lola\AppData\Local\EmieSiteList 2014-07-21 16:45 - 2010-07-29 06:08 - 00000000 ____D () C:\Users\Lola\AppData\Local\Google 2014-07-21 15:05 - 2014-07-21 15:05 - 00001064 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-07-21 15:05 - 2014-07-21 15:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-07-21 15:05 - 2014-07-21 15:04 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 2014-07-21 15:04 - 2014-07-21 15:04 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-07-21 15:02 - 2012-02-06 18:55 - 00000000 ____D () C:\Users\Lola\Desktop\Download 2014-07-21 15:01 - 2014-07-21 15:00 - 01016261 _____ (Thisisu) C:\Users\Lola\Desktop\JRT.exe 2014-07-21 15:01 - 2014-07-21 14:59 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Lola\Desktop\mbam-setup-2.0.2.1012.exe 2014-07-21 15:00 - 2014-07-21 15:00 - 01354223 _____ () C:\Users\Lola\Desktop\adwcleaner_3.216.exe 2014-07-21 12:23 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache 2014-07-21 11:16 - 2014-07-21 11:16 - 00021875 _____ () C:\ComboFix.txt 2014-07-21 11:16 - 2014-07-21 10:36 - 00000000 ____D () C:\Qoobox 2014-07-21 11:16 - 2009-07-14 04:37 - 00000000 __RHD () C:\Users\Default 2014-07-21 11:16 - 2009-07-14 04:37 - 00000000 ___RD () C:\Users\Public 2014-07-21 11:11 - 2014-07-21 10:35 - 00000000 ____D () C:\Windows\erdnt 2014-07-21 11:03 - 2009-07-14 04:04 - 00000215 _____ () C:\Windows\system.ini 2014-07-21 11:01 - 2009-07-14 04:03 - 48496640 _____ () C:\Windows\system32\config\SOFTWARE.bak 2014-07-21 11:01 - 2009-07-14 04:03 - 15990784 _____ () C:\Windows\system32\config\SYSTEM.bak 2014-07-21 11:01 - 2009-07-14 04:03 - 00262144 _____ () C:\Windows\system32\config\DEFAULT.bak 2014-07-21 11:01 - 2009-07-14 04:03 - 00057344 _____ () C:\Windows\system32\config\SAM.bak 2014-07-21 11:01 - 2009-07-14 04:03 - 00024576 _____ () C:\Windows\system32\config\SECURITY.bak 2014-07-21 10:32 - 2014-07-21 10:31 - 05561612 ____R (Swearware) C:\Users\Lola\Desktop\ComboFix.exe 2014-07-21 10:29 - 2014-07-21 10:28 - 05561612 _____ (Swearware) C:\Users\Lola\Downloads\ComboFix.exe 2014-07-21 09:42 - 2012-10-25 23:37 - 00000000 ____D () C:\Users\Lola\AppData\Roaming\Wise Care 365 2014-07-21 01:04 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE 2014-07-20 23:50 - 2014-07-20 23:47 - 00028962 _____ () C:\Users\Lola\Desktop\Addition.txt 2014-07-20 23:40 - 2009-07-14 06:33 - 00334608 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-07-20 23:26 - 2009-12-01 14:21 - 00000000 ____D () C:\Windows\system32\Drivers\de-DE 2014-07-20 23:05 - 2013-08-22 23:44 - 00000000 ____D () C:\Windows\system32\MRT 2014-07-20 22:55 - 2010-08-23 03:20 - 93585272 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-07-20 22:27 - 2014-06-10 19:47 - 00000000 ____D () C:\ProgramData\IObit 2014-07-20 21:19 - 2014-07-20 21:19 - 00380416 _____ () C:\Users\Lola\Desktop\Gmer-19357.exe 2014-07-20 21:19 - 2014-07-20 21:18 - 01080320 _____ (Farbar) C:\Users\Lola\Desktop\FRST.exe 2014-07-20 21:16 - 2014-07-20 21:16 - 00050477 _____ () C:\Users\Lola\Desktop\Defogger.exe 2014-07-20 14:08 - 2014-06-10 21:01 - 00001132 _____ () C:\Users\Public\Desktop\Driver Booster.lnk 2014-07-20 14:08 - 2014-06-10 21:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 2014-07-20 03:30 - 2014-07-20 03:30 - 00000000 ____D () C:\Users\Default\AppData\Roaming\IObit 2014-07-20 03:30 - 2014-07-20 03:30 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\IObit 2014-07-20 03:29 - 2014-07-20 03:28 - 00144960 _____ () C:\Windows\Minidump\072014-23836-01.dmp 2014-07-20 03:28 - 2014-07-20 03:28 - 372600835 _____ () C:\Windows\MEMORY.DMP 2014-07-20 03:28 - 2011-01-09 21:20 - 00000000 ____D () C:\Windows\Minidump 2014-07-18 21:33 - 2014-06-10 20:18 - 00002155 _____ () C:\Users\Public\Desktop\Advanced SystemCare 7.lnk 2014-07-17 14:44 - 2013-05-21 17:26 - 00035848 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2014-07-16 21:36 - 2012-04-17 13:17 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2014-07-16 21:36 - 2011-08-09 13:46 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2014-07-16 21:32 - 2014-07-16 21:32 - 00000000 _____ () C:\Windows\setuperr.log 2014-07-16 21:04 - 2014-06-10 20:38 - 47460352 _____ () C:\Windows\system32\config\SOFTWARE.iobit 2014-07-16 21:04 - 2014-06-10 20:38 - 35131392 _____ () C:\Windows\system32\config\COMPONENTS.iobit 2014-07-16 21:04 - 2014-06-10 20:38 - 00188416 _____ () C:\Windows\system32\config\DEFAULT.iobit 2014-07-16 21:04 - 2014-06-10 20:38 - 00057344 _____ () C:\Windows\system32\config\SAM.iobit 2014-07-16 21:04 - 2014-06-10 20:38 - 00024576 _____ () C:\Windows\system32\config\SECURITY.iobit 2014-07-16 21:04 - 2010-07-29 06:01 - 00000000 ____D () C:\Users\Lola 2014-07-16 20:39 - 2014-06-10 19:47 - 00000000 ____D () C:\ProgramData\ProductData 2014-06-24 13:24 - 2013-04-06 02:01 - 00097648 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2014-06-21 07:29 - 2012-05-02 12:34 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service Some content of TEMP: ==================== C:\Users\Lola\AppData\Local\temp\avgnt.exe C:\Users\Lola\AppData\Local\temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => File is digitally signed C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-07-18 00:56 ==================== End Of Log ============================ --- --- --- --- --- --- |
22.07.2014, 11:02 | #6 |
/// the machine /// TB-Ausbilder | Netbook fährt extrem langsam hoch und auch die Programme laden langsamESET Online Scanner
Downloade Dir bitte SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ --> Netbook fährt extrem langsam hoch und auch die Programme laden langsam |
22.07.2014, 14:50 | #7 |
| Netbook fährt extrem langsam hoch und auch die Programme laden langsam Hier die Logs ESET Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.7623 # api_version=3.0.2 # EOSSerial=0695d9f690bef44fb139d27b8bcc57cf # engine=19289 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2014-07-22 12:56:57 # local_time=2014-07-22 02:56:57 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # lang=1031 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode_1='Avira Desktop' # compatibility_mode=1810 16777213 100 100 16347 150585995 0 0 # compatibility_mode_1='' # compatibility_mode=5893 16776574 100 94 32497441 157665008 0 0 # scanned=221552 # found=9 # cleaned=0 # scan_time=9519 sh=643B9A4FA264EC06BE591FCA16C04DB3A207D59E ft=1 fh=f5ca3d5e5af4bedc vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Lola\Desktop\IObit Uninstaller - CHIP-Installer.exe" sh=D668716FAAC6BFD0A5F960084123CEF87157A9FB ft=1 fh=b4515dbfad693a34 vn="Win32/SoftonicDownloader.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Lola\Desktop\Download\SoftonicDownloader_fuer_app-launcher.exe" sh=87B4FB519B72D88F1F2659BD1B2B1327E464FF24 ft=1 fh=77b67014d1f9f560 vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Lola\PC Stube\Documents\Documents\1\SetupCovermanager.exe" sh=510B28A422922EAE1EA221B67CC8E26087D1B7F5 ft=1 fh=0da14f164a0f34fc vn="Win32/SoftonicDownloader evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Lola\PC Stube\Documents\Documents\1\SoftonicDownloader_fuer_undercoverxp.exe" sh=DD2870260963C3DB34BB63F2429B6D246468A502 ft=1 fh=f798c3c15626ed1f vn="Variante von Win32/CNETInstaller.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Lola\PC Stube\Neuer Ordner\cbsidlm-cbsi5_0_1_80-Wise_Folder_Hider-BP2-75713475.exe" sh=87B4FB519B72D88F1F2659BD1B2B1327E464FF24 ft=1 fh=77b67014d1f9f560 vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Public\PC Stube\1\SetupCovermanager.exe" sh=510B28A422922EAE1EA221B67CC8E26087D1B7F5 ft=1 fh=0da14f164a0f34fc vn="Win32/SoftonicDownloader evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Public\PC Stube\1\SoftonicDownloader_fuer_undercoverxp.exe" sh=4F16C0B8661F9C5D0D3D1C19E4F09FC39A9387EB ft=0 fh=0000000000000000 vn="JS/SecurityDisabler.A.Gen evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Public\PC Stube\Alte Firefox-Daten\prefs.js" sh=DF60DD0EF13D6084566CCCFB087920E82330FBA6 ft=0 fh=0000000000000000 vn="JS/SecurityDisabler.A.Gen evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Public\PC Stube\Alte Firefox-Daten\user.js" Code:
ATTFilter Results of screen317's Security Check version 0.99.85 Windows 7 Service Pack 1 x86 (UAC is disabled!) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` Avira Desktop Antivirus up to date! (On Access scanning disabled!) `````````Anti-malware/Other Utilities Check:````````` Adobe Flash Player 10 Flash Player out of Date! Adobe Flash Player 14.0.0.145 Adobe Reader 10.1.10 Adobe Reader out of Date! Mozilla Firefox (30.0) Google Chrome 35.0.1916.153 Google Chrome 36.0.1985.125 ````````Process Check: objlist.exe by Laurent```````` Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Malware mbam.exe Avira Antivir avgnt.exe Avira Antivir avguard.exe Malwarebytes Anti-Malware mbamscheduler.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:20-07-2014 Ran by Lola (administrator) on FRIGG on 22-07-2014 15:30:28 Running from C:\Users\Lola\Desktop Platform: Microsoft Windows 7 Starter Service Pack 1 (X86) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (IObit) C:\Program Files\IObit\Advanced SystemCare 7\ASCService.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe (IObit) C:\Program Files\IObit\Smart Defrag 3\SmartDefrag.exe (IObit) C:\Program Files\IObit\Advanced SystemCare 7\Monitor.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe (Egis Technology Inc.) C:\Program Files\EgisTec Egis Software Update\EgisUpdate.exe (Egis Technology Inc.) C:\Program Files\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Acer Incorporated) C:\Program Files\Acer\Registration\GregHSRW.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (IObit) C:\Program Files\IObit\Advanced SystemCare 7\ASCTray.exe (Acer Incorporated) C:\Program Files\Acer\Acer VCM\AcerVCM.exe (Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe (Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbam.exe (Acer Incorporated) C:\Program Files\Acer\Acer VCM\RS_Service.exe (Acer) C:\Program Files\Acer\Acer Updater\UpdaterService.exe (Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation) C:\Windows\System32\igfxext.exe (Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebgrd.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== HKU\S-1-5-21-624116608-515939505-3949833191-1000\...\Run: [swg] => C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2009-10-29] (Google Inc.) HKU\S-1-5-21-624116608-515939505-3949833191-1000\...\Run: [Advanced SystemCare 7] => C:\Program Files\IObit\Advanced SystemCare 7\ASCTray.exe [2295584 2014-04-21] (IObit) HKU\S-1-5-21-624116608-515939505-3949833191-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1 Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Acer VCM.lnk ShortcutTarget: Acer VCM.lnk -> C:\Program Files\Acer\Acer VCM\AcerVCM.exe (Acer Incorporated) ShellIconOverlayIdentifiers: egisPSDP -> {30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} => C:\Program Files\EgisTec\MyWinLocker 3\x86\psdprotect.dll (Egis Technology Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_one&r=27b507105865l0334ww05w48i2380r HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKLM - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_deDE390DE390 BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll (IObit) BHO: No Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} -> No File BHO: Windows Live Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) BHO: Advanced SystemCare Browser Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit) Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation) Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation) Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\Lola\AppData\Roaming\Mozilla\Firefox\Profiles\wx4ijpqa.default FF DefaultSearchEngine: Google FF SearchEngineOrder.1: Ask.com FF SelectedSearchEngine: Ask.com FF Homepage: hxxp://www.warofdragons.de/ FF NetworkProxy: "http", "85.214.71.220" FF NetworkProxy: "http_port", 3128 FF NetworkProxy: "type", 0 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_145.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin: @microsoft.com/WLPG,version=14.0.8117.0416 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Lola\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Users\Lola\AppData\Roaming\Mozilla\Firefox\Profiles\wx4ijpqa.default\searchplugins\google-images.xml FF SearchPlugin: C:\Users\Lola\AppData\Roaming\Mozilla\Firefox\Profiles\wx4ijpqa.default\searchplugins\google-maps.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Advanced SystemCare Surfing Protection - C:\Users\Lola\AppData\Roaming\Mozilla\Firefox\Profiles\wx4ijpqa.default\Extensions\ascsurfingprotection@iobit.com [2014-06-10] FF Extension: Cliqz Beta - C:\Users\Lola\AppData\Roaming\Mozilla\Firefox\Profiles\wx4ijpqa.default\Extensions\cliqz@cliqz.com.xpi [2014-06-20] FF Extension: Adblock Plus - C:\Users\Lola\AppData\Roaming\Mozilla\Firefox\Profiles\wx4ijpqa.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-05-02] FF HKCU\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\Lola\AppData\Roaming\Mozilla\Firefox\Profiles\wx4ijpqa.default\extensions\cliqz@cliqz.com Chrome: ======= CHR HomePage: CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll No File CHR Extension: (Google Docs) - C:\Users\Lola\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-09-09] CHR Extension: (Google Drive) - C:\Users\Lola\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-09-09] CHR Extension: (YouTube) - C:\Users\Lola\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-09-09] CHR Extension: (Google-Suche) - C:\Users\Lola\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-09-09] CHR Extension: (Google Wallet) - C:\Users\Lola\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-09] CHR Extension: (Google Mail) - C:\Users\Lola\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-09-09] ========================== Services (Whitelisted) ================= R2 AdvancedSystemCareService7; C:\Program Files\IObit\Advanced SystemCare 7\ASCService.exe [881952 2014-01-14] (IObit) R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [430160 2014-06-24] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [430160 2014-06-24] (Avira Operations GmbH & Co. KG) R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1028688 2014-06-24] (Avira Operations GmbH & Co. KG) R2 ePowerSvc; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [727584 2009-09-30] (Acer Incorporated) R2 Greg_Service; C:\Program Files\Acer\Registration\GregHSRW.exe [1150496 2009-08-28] (Acer Incorporated) S2 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2175264 2014-06-10] (IObit) R2 MBAMScheduler; C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation) S3 MWLService; C:\Program Files\EgisTec\MyWinLocker 3\x86\\MWLService.exe [305448 2009-09-10] (Egis Technology Inc.) R2 RS_Service; C:\Program Files\Acer\Acer VCM\RS_Service.exe [253952 2009-07-10] (Acer Incorporated) [File not signed] R2 Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [240160 2009-07-04] (Acer) ==================== Drivers (Whitelisted) ==================== R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [97648 2014-06-24] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-06-03] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-12-03] (Avira Operations GmbH & Co. KG) R3 L1C; C:\Windows\System32\DRIVERS\L1C62x86.sys [109256 2014-06-10] (Qualcomm Atheros Co., Ltd.) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-05-12] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [110296 2014-07-22] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2014-05-12] (Malwarebytes Corporation) R1 mwlPSDFilter; C:\Windows\System32\DRIVERS\mwlPSDFilter.sys [18992 2009-06-02] (Egis Technology Inc.) R1 mwlPSDNServ; C:\Windows\System32\DRIVERS\mwlPSDNServ.sys [16432 2009-06-02] (Egis Technology Inc.) R1 mwlPSDVDisk; C:\Windows\System32\DRIVERS\mwlPSDVDisk.sys [60976 2009-06-02] (Egis Technology Inc.) R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [18624 2013-12-24] (IObit) R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-04-06] (Avira GmbH) U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation) S3 catchme; \??\C:\Users\Lola\AppData\Local\Temp\catchme.sys [X] S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [X] S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-07-22 15:11 - 2014-07-22 15:11 - 00001098 _____ () C:\Users\Lola\Desktop\checkup.txt 2014-07-22 12:07 - 2014-07-22 12:07 - 02347384 _____ (ESET) C:\Users\Lola\Desktop\esetsmartinstaller_deu.exe 2014-07-22 12:04 - 2014-07-22 12:04 - 00854390 _____ () C:\Users\Lola\Desktop\SecurityCheck.exe 2014-07-21 19:37 - 2014-07-21 19:37 - 00000988 _____ () C:\Users\Lola\Desktop\JRT.txt 2014-07-21 19:10 - 2014-07-21 19:10 - 00000000 ____D () C:\Windows\ERUNT 2014-07-21 19:07 - 2014-07-21 19:07 - 00004929 _____ () C:\Users\Lola\Desktop\AdwCl.txt 2014-07-21 17:41 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll 2014-07-21 17:39 - 2014-07-21 18:57 - 00000000 ____D () C:\AdwCleaner 2014-07-21 16:45 - 2014-07-21 16:45 - 00000000 __SHD () C:\Users\Lola\AppData\Local\EmieUserList 2014-07-21 16:45 - 2014-07-21 16:45 - 00000000 __SHD () C:\Users\Lola\AppData\Local\EmieSiteList 2014-07-21 15:05 - 2014-07-22 13:09 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-07-21 15:05 - 2014-07-21 15:05 - 00001064 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-07-21 15:05 - 2014-07-21 15:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-07-21 15:04 - 2014-07-21 15:05 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 2014-07-21 15:04 - 2014-07-21 15:04 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-07-21 15:04 - 2014-05-12 07:26 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-07-21 15:04 - 2014-05-12 07:25 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-07-21 15:04 - 2014-05-12 07:25 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-07-21 15:00 - 2014-07-21 15:01 - 01016261 _____ (Thisisu) C:\Users\Lola\Desktop\JRT.exe 2014-07-21 15:00 - 2014-07-21 15:00 - 01354223 _____ () C:\Users\Lola\Desktop\adwcleaner_3.216.exe 2014-07-21 14:59 - 2014-07-21 15:01 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Lola\Desktop\mbam-setup-2.0.2.1012.exe 2014-07-21 11:16 - 2014-07-21 11:16 - 00021875 _____ () C:\ComboFix.txt 2014-07-21 10:37 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe 2014-07-21 10:37 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe 2014-07-21 10:37 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-07-21 10:37 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-07-21 10:37 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-07-21 10:37 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe 2014-07-21 10:37 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe 2014-07-21 10:37 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe 2014-07-21 10:36 - 2014-07-21 11:16 - 00000000 ____D () C:\Qoobox 2014-07-21 10:35 - 2014-07-21 11:11 - 00000000 ____D () C:\Windows\erdnt 2014-07-21 10:31 - 2014-07-21 10:32 - 05561612 ____R (Swearware) C:\Users\Lola\Desktop\ComboFix.exe 2014-07-21 10:28 - 2014-07-21 10:29 - 05561612 _____ (Swearware) C:\Users\Lola\Downloads\ComboFix.exe 2014-07-20 23:57 - 2014-01-09 04:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2014-07-20 23:47 - 2014-07-20 23:50 - 00028962 _____ () C:\Users\Lola\Desktop\Addition.txt 2014-07-20 23:43 - 2014-07-22 15:30 - 00013245 _____ () C:\Users\Lola\Desktop\FRST.txt 2014-07-20 23:12 - 2013-10-02 02:32 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe 2014-07-20 23:12 - 2013-10-02 01:45 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll 2014-07-20 23:11 - 2013-10-02 02:42 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys 2014-07-20 23:11 - 2013-10-02 02:30 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll 2014-07-20 23:11 - 2013-10-02 02:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll 2014-07-20 23:11 - 2013-10-02 02:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll 2014-07-20 23:11 - 2013-10-02 01:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2014-07-20 23:11 - 2013-10-02 01:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll 2014-07-20 23:11 - 2013-10-02 01:00 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe 2014-07-20 23:11 - 2013-10-02 00:53 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe 2014-07-20 23:11 - 2013-10-02 00:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe 2014-07-20 23:10 - 2013-09-25 03:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll 2014-07-20 22:17 - 2014-07-22 15:30 - 00000000 ____D () C:\FRST 2014-07-20 21:19 - 2014-07-20 21:19 - 00380416 _____ () C:\Users\Lola\Desktop\Gmer-19357.exe 2014-07-20 21:18 - 2014-07-20 21:19 - 01080320 _____ (Farbar) C:\Users\Lola\Desktop\FRST.exe 2014-07-20 21:16 - 2014-07-20 21:16 - 00050477 _____ () C:\Users\Lola\Desktop\Defogger.exe 2014-07-20 14:42 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-07-20 14:42 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-07-20 14:42 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-07-20 14:42 - 2014-06-19 01:56 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-07-20 14:42 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-07-20 14:42 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-07-20 14:42 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-07-20 14:42 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-07-20 14:42 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-07-20 14:42 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-07-20 14:42 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-07-20 14:42 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-07-20 14:42 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-07-20 14:42 - 2014-06-19 01:23 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-07-20 14:42 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-07-20 14:42 - 2014-06-19 01:16 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-07-20 14:42 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-07-20 14:42 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-07-20 14:42 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-07-20 14:42 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-07-20 14:42 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-07-20 14:42 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-07-20 14:42 - 2014-06-19 00:52 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-07-20 14:42 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-07-20 14:42 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-07-20 14:42 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-07-20 14:42 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-07-20 14:42 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-07-20 14:42 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-07-20 14:42 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-07-20 14:42 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2014-07-20 14:42 - 2014-06-18 02:52 - 02350080 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-07-20 14:41 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-07-20 14:40 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-07-20 14:40 - 2014-05-30 08:36 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2014-07-20 14:39 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-07-20 14:39 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-07-20 14:39 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2014-07-20 14:39 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-07-20 14:39 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-07-20 14:39 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-07-20 14:38 - 2014-06-05 16:26 - 01059840 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-07-20 03:30 - 2014-07-20 03:30 - 00000000 ____D () C:\Users\Default\AppData\Roaming\IObit 2014-07-20 03:30 - 2014-07-20 03:30 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\IObit 2014-07-20 03:28 - 2014-07-20 03:29 - 00144960 _____ () C:\Windows\Minidump\072014-23836-01.dmp 2014-07-20 03:28 - 2014-07-20 03:28 - 372600835 _____ () C:\Windows\MEMORY.DMP 2014-07-16 21:32 - 2014-07-22 10:12 - 00000672 _____ () C:\Windows\setupact.log 2014-07-16 21:32 - 2014-07-21 19:04 - 00001884 _____ () C:\Windows\PFRO.log 2014-07-16 21:32 - 2014-07-16 21:32 - 00000000 _____ () C:\Windows\setuperr.log ==================== One Month Modified Files and Folders ======= 2014-07-22 15:31 - 2014-07-20 23:43 - 00013245 _____ () C:\Users\Lola\Desktop\FRST.txt 2014-07-22 15:30 - 2014-07-20 22:17 - 00000000 ____D () C:\FRST 2014-07-22 15:11 - 2014-07-22 15:11 - 00001098 _____ () C:\Users\Lola\Desktop\checkup.txt 2014-07-22 14:51 - 2010-07-29 06:17 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-07-22 14:36 - 2012-04-17 13:17 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-07-22 13:09 - 2014-07-21 15:05 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-07-22 12:07 - 2014-07-22 12:07 - 02347384 _____ (ESET) C:\Users\Lola\Desktop\esetsmartinstaller_deu.exe 2014-07-22 12:04 - 2014-07-22 12:04 - 00854390 _____ () C:\Users\Lola\Desktop\SecurityCheck.exe 2014-07-22 10:27 - 2009-07-14 06:34 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-07-22 10:27 - 2009-07-14 06:34 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-07-22 10:24 - 2014-04-29 15:38 - 01124231 _____ () C:\Windows\WindowsUpdate.log 2014-07-22 10:12 - 2014-07-16 21:32 - 00000672 _____ () C:\Windows\setupact.log 2014-07-22 10:12 - 2010-07-29 06:17 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-07-22 10:12 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-07-21 19:37 - 2014-07-21 19:37 - 00000988 _____ () C:\Users\Lola\Desktop\JRT.txt 2014-07-21 19:10 - 2014-07-21 19:10 - 00000000 ____D () C:\Windows\ERUNT 2014-07-21 19:07 - 2014-07-21 19:07 - 00004929 _____ () C:\Users\Lola\Desktop\AdwCl.txt 2014-07-21 19:04 - 2014-07-16 21:32 - 00001884 _____ () C:\Windows\PFRO.log 2014-07-21 18:57 - 2014-07-21 17:39 - 00000000 ____D () C:\AdwCleaner 2014-07-21 18:57 - 2014-06-10 19:47 - 00000000 ____D () C:\Users\Lola\AppData\Roaming\IObit 2014-07-21 17:45 - 2014-06-10 19:47 - 00000000 ____D () C:\Program Files\IObit 2014-07-21 16:45 - 2014-07-21 16:45 - 00000000 __SHD () C:\Users\Lola\AppData\Local\EmieUserList 2014-07-21 16:45 - 2014-07-21 16:45 - 00000000 __SHD () C:\Users\Lola\AppData\Local\EmieSiteList 2014-07-21 16:45 - 2010-07-29 06:08 - 00000000 ____D () C:\Users\Lola\AppData\Local\Google 2014-07-21 15:05 - 2014-07-21 15:05 - 00001064 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-07-21 15:05 - 2014-07-21 15:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-07-21 15:05 - 2014-07-21 15:04 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 2014-07-21 15:04 - 2014-07-21 15:04 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-07-21 15:02 - 2012-02-06 18:55 - 00000000 ____D () C:\Users\Lola\Desktop\Download 2014-07-21 15:01 - 2014-07-21 15:00 - 01016261 _____ (Thisisu) C:\Users\Lola\Desktop\JRT.exe 2014-07-21 15:01 - 2014-07-21 14:59 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Lola\Desktop\mbam-setup-2.0.2.1012.exe 2014-07-21 15:00 - 2014-07-21 15:00 - 01354223 _____ () C:\Users\Lola\Desktop\adwcleaner_3.216.exe 2014-07-21 12:23 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache 2014-07-21 11:16 - 2014-07-21 11:16 - 00021875 _____ () C:\ComboFix.txt 2014-07-21 11:16 - 2014-07-21 10:36 - 00000000 ____D () C:\Qoobox 2014-07-21 11:16 - 2009-07-14 04:37 - 00000000 __RHD () C:\Users\Default 2014-07-21 11:16 - 2009-07-14 04:37 - 00000000 ___RD () C:\Users\Public 2014-07-21 11:11 - 2014-07-21 10:35 - 00000000 ____D () C:\Windows\erdnt 2014-07-21 11:03 - 2009-07-14 04:04 - 00000215 _____ () C:\Windows\system.ini 2014-07-21 11:01 - 2009-07-14 04:03 - 48496640 _____ () C:\Windows\system32\config\SOFTWARE.bak 2014-07-21 11:01 - 2009-07-14 04:03 - 15990784 _____ () C:\Windows\system32\config\SYSTEM.bak 2014-07-21 11:01 - 2009-07-14 04:03 - 00262144 _____ () C:\Windows\system32\config\DEFAULT.bak 2014-07-21 11:01 - 2009-07-14 04:03 - 00057344 _____ () C:\Windows\system32\config\SAM.bak 2014-07-21 11:01 - 2009-07-14 04:03 - 00024576 _____ () C:\Windows\system32\config\SECURITY.bak 2014-07-21 10:32 - 2014-07-21 10:31 - 05561612 ____R (Swearware) C:\Users\Lola\Desktop\ComboFix.exe 2014-07-21 10:29 - 2014-07-21 10:28 - 05561612 _____ (Swearware) C:\Users\Lola\Downloads\ComboFix.exe 2014-07-21 09:42 - 2012-10-25 23:37 - 00000000 ____D () C:\Users\Lola\AppData\Roaming\Wise Care 365 2014-07-21 01:04 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE 2014-07-20 23:50 - 2014-07-20 23:47 - 00028962 _____ () C:\Users\Lola\Desktop\Addition.txt 2014-07-20 23:40 - 2009-07-14 06:33 - 00334608 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-07-20 23:26 - 2009-12-01 14:21 - 00000000 ____D () C:\Windows\system32\Drivers\de-DE 2014-07-20 23:05 - 2013-08-22 23:44 - 00000000 ____D () C:\Windows\system32\MRT 2014-07-20 22:55 - 2010-08-23 03:20 - 93585272 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-07-20 22:27 - 2014-06-10 19:47 - 00000000 ____D () C:\ProgramData\IObit 2014-07-20 21:19 - 2014-07-20 21:19 - 00380416 _____ () C:\Users\Lola\Desktop\Gmer-19357.exe 2014-07-20 21:19 - 2014-07-20 21:18 - 01080320 _____ (Farbar) C:\Users\Lola\Desktop\FRST.exe 2014-07-20 21:16 - 2014-07-20 21:16 - 00050477 _____ () C:\Users\Lola\Desktop\Defogger.exe 2014-07-20 14:08 - 2014-06-10 21:01 - 00001132 _____ () C:\Users\Public\Desktop\Driver Booster.lnk 2014-07-20 14:08 - 2014-06-10 21:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 2014-07-20 03:30 - 2014-07-20 03:30 - 00000000 ____D () C:\Users\Default\AppData\Roaming\IObit 2014-07-20 03:30 - 2014-07-20 03:30 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\IObit 2014-07-20 03:29 - 2014-07-20 03:28 - 00144960 _____ () C:\Windows\Minidump\072014-23836-01.dmp 2014-07-20 03:28 - 2014-07-20 03:28 - 372600835 _____ () C:\Windows\MEMORY.DMP 2014-07-20 03:28 - 2011-01-09 21:20 - 00000000 ____D () C:\Windows\Minidump 2014-07-18 21:33 - 2014-06-10 20:18 - 00002155 _____ () C:\Users\Public\Desktop\Advanced SystemCare 7.lnk 2014-07-17 14:44 - 2013-05-21 17:26 - 00035848 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2014-07-16 21:36 - 2012-04-17 13:17 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2014-07-16 21:36 - 2011-08-09 13:46 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2014-07-16 21:32 - 2014-07-16 21:32 - 00000000 _____ () C:\Windows\setuperr.log 2014-07-16 21:04 - 2014-06-10 20:38 - 47460352 _____ () C:\Windows\system32\config\SOFTWARE.iobit 2014-07-16 21:04 - 2014-06-10 20:38 - 35131392 _____ () C:\Windows\system32\config\COMPONENTS.iobit 2014-07-16 21:04 - 2014-06-10 20:38 - 00188416 _____ () C:\Windows\system32\config\DEFAULT.iobit 2014-07-16 21:04 - 2014-06-10 20:38 - 00057344 _____ () C:\Windows\system32\config\SAM.iobit 2014-07-16 21:04 - 2014-06-10 20:38 - 00024576 _____ () C:\Windows\system32\config\SECURITY.iobit 2014-07-16 21:04 - 2010-07-29 06:01 - 00000000 ____D () C:\Users\Lola 2014-07-16 20:39 - 2014-06-10 19:47 - 00000000 ____D () C:\ProgramData\ProductData 2014-06-24 13:24 - 2013-04-06 02:01 - 00097648 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys Some content of TEMP: ==================== C:\Users\Lola\AppData\Local\temp\avgnt.exe C:\Users\Lola\AppData\Local\temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => File is digitally signed C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-07-18 00:56 ==================== End Of Log ============================ --- --- --- Antwort auf die Frage: Noch Probleme? Eine leichte Verbesserung beim Hochfahren spürbar, obwohl immernoch sehr langsam alles. Wenn ich zb bei FF versuche zu schnell eine Seite zu öffnen, oder wie hier im Beitrag zu schnell schreibe, dann bekomm ich erstmal "Keine Rückmeldung", bevor ich wieder was machen kann. Geändert von Lady Frigg (22.07.2014 um 15:36 Uhr) |
23.07.2014, 08:29 | #8 |
/// the machine /// TB-Ausbilder | Netbook fährt extrem langsam hoch und auch die Programme laden langsam Flash und Adobe updaten. Deinstalliere mal alles von IOBIT. Revo Uninstaller - Download - Filepony damit Firefox deinstallieren, keine Daten behalten, Reste entfernen lassen, neu installieren. Dann: https://support.mozilla.org/de/kb/fi...einfach-loesen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
23.07.2014, 14:12 | #9 |
| Netbook fährt extrem langsam hoch und auch die Programme laden langsam Hoffe hab nix vergessen jetzt... 1. Flash und Adobe update (zum Beweis neuen SecurityCheck, wo ich es sogar erkennen konnte^^) Code:
ATTFilter Results of screen317's Security Check version 0.99.85 Windows 7 Service Pack 1 x86 (UAC is disabled!) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` Avira Desktop Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Adobe Flash Player 14.0.0.145 Adobe Reader XI Mozilla Firefox (31.0) Google Chrome 35.0.1916.153 Google Chrome 36.0.1985.125 ````````Process Check: objlist.exe by Laurent```````` Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Malware mbam.exe Avira Antivir avgnt.exe Avira Antivir avguard.exe Malwarebytes Anti-Malware mbamscheduler.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` 3. Mit de Revo Unistaller Firefox komplett entfernt und neu installiert - danach Firerfox zurückgesetzt. Und auch wenn du es diesmal nicht extra verlangt hast, hier noch ein frisches FRST FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:23-07-2014 01 Ran by Lola (administrator) on FRIGG on 23-07-2014 15:07:18 Running from C:\Users\Lola\Desktop Platform: Microsoft Windows 7 Starter Service Pack 1 (X86) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe (Egis Technology Inc.) C:\Program Files\EgisTec Egis Software Update\EgisUpdate.exe (Egis Technology Inc.) C:\Program Files\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Acer Incorporated) C:\Program Files\Acer\Acer VCM\AcerVCM.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe (Acer Incorporated) C:\Program Files\Acer\Registration\GregHSRW.exe (Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe (Acer Incorporated) C:\Program Files\Acer\Acer VCM\RS_Service.exe (Acer) C:\Program Files\Acer\Acer Updater\UpdaterService.exe (Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation) C:\Windows\System32\igfxext.exe (Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbam.exe (Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebgrd.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== HKU\S-1-5-21-624116608-515939505-3949833191-1000\...\Run: [swg] => C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2009-10-29] (Google Inc.) HKU\S-1-5-21-624116608-515939505-3949833191-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1 Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Acer VCM.lnk ShortcutTarget: Acer VCM.lnk -> C:\Program Files\Acer\Acer VCM\AcerVCM.exe (Acer Incorporated) ShellIconOverlayIdentifiers: egisPSDP -> {30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} => C:\Program Files\EgisTec\MyWinLocker 3\x86\psdprotect.dll (Egis Technology Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_one&r=27b507105865l0334ww05w48i2380r HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKLM - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW SearchScopes: HKCU - DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_deDE390DE390 SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_deDE390DE390 BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll No File BHO: No Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} -> No File BHO: Windows Live Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation) Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation) Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\Lola\AppData\Roaming\Mozilla\Firefox\Profiles\tt8mfku8.default-1406119695655 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_145.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin: @microsoft.com/WLPG,version=14.0.8117.0416 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Lola\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml FF HKCU\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\Lola\AppData\Roaming\Mozilla\Firefox\Profiles\wx4ijpqa.default\extensions\cliqz@cliqz.com Chrome: ======= CHR HomePage: CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll No File CHR Extension: (Google Docs) - C:\Users\Lola\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-09-09] CHR Extension: (Google Drive) - C:\Users\Lola\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-09-09] CHR Extension: (YouTube) - C:\Users\Lola\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-09-09] CHR Extension: (Google-Suche) - C:\Users\Lola\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-09-09] CHR Extension: (Google Wallet) - C:\Users\Lola\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-09] CHR Extension: (Google Mail) - C:\Users\Lola\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-09-09] ========================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [430160 2014-06-24] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [430160 2014-06-24] (Avira Operations GmbH & Co. KG) R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1028688 2014-06-24] (Avira Operations GmbH & Co. KG) R2 ePowerSvc; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [727584 2009-09-30] (Acer Incorporated) R2 Greg_Service; C:\Program Files\Acer\Registration\GregHSRW.exe [1150496 2009-08-28] (Acer Incorporated) S2 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2175264 2014-06-10] (IObit) R2 MBAMScheduler; C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation) S3 MWLService; C:\Program Files\EgisTec\MyWinLocker 3\x86\\MWLService.exe [305448 2009-09-10] (Egis Technology Inc.) R2 RS_Service; C:\Program Files\Acer\Acer VCM\RS_Service.exe [253952 2009-07-10] (Acer Incorporated) [File not signed] R2 Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [240160 2009-07-04] (Acer) ==================== Drivers (Whitelisted) ==================== R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [97648 2014-06-24] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-06-03] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-12-03] (Avira Operations GmbH & Co. KG) R3 L1C; C:\Windows\System32\DRIVERS\L1C62x86.sys [109256 2014-06-10] (Qualcomm Atheros Co., Ltd.) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-05-12] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [110296 2014-07-23] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2014-05-12] (Malwarebytes Corporation) R1 mwlPSDFilter; C:\Windows\System32\DRIVERS\mwlPSDFilter.sys [18992 2009-06-02] (Egis Technology Inc.) R1 mwlPSDNServ; C:\Windows\System32\DRIVERS\mwlPSDNServ.sys [16432 2009-06-02] (Egis Technology Inc.) R1 mwlPSDVDisk; C:\Windows\System32\DRIVERS\mwlPSDVDisk.sys [60976 2009-06-02] (Egis Technology Inc.) R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-04-06] (Avira GmbH) U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation) S3 catchme; \??\C:\Users\Lola\AppData\Local\Temp\catchme.sys [X] S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [X] S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-07-23 15:07 - 2014-07-23 15:07 - 00000000 ____D () C:\Users\Lola\Desktop\FRST-OlderVersion 2014-07-23 13:06 - 2014-07-23 13:06 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk 2014-07-23 13:06 - 2014-07-23 13:06 - 00001993 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk 2014-07-23 12:34 - 2014-07-23 12:34 - 00001121 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-07-23 12:34 - 2014-07-23 12:34 - 00001109 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-07-23 12:34 - 2014-07-23 12:34 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service 2014-07-23 12:28 - 2014-07-23 12:28 - 00244408 _____ () C:\Users\Lola\Downloads\Firefox Setup Stub 31.0.exe 2014-07-23 12:20 - 2014-07-23 12:20 - 00000000 ____D () C:\Windows\Tasks\ImCleanDisabled 2014-07-23 11:39 - 2014-07-23 12:07 - 00001226 _____ () C:\Users\Lola\Desktop\Revo Uninstaller.lnk 2014-07-23 11:39 - 2014-07-23 11:39 - 00000000 ____D () C:\Program Files\VS Revo Group 2014-07-23 11:34 - 2014-07-23 11:35 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Lola\Desktop\revosetup95.exe 2014-07-22 15:11 - 2014-07-22 15:11 - 00001098 _____ () C:\Users\Lola\Desktop\checkup.txt 2014-07-22 12:07 - 2014-07-22 12:07 - 02347384 _____ (ESET) C:\Users\Lola\Desktop\esetsmartinstaller_deu.exe 2014-07-22 12:04 - 2014-07-22 12:04 - 00854390 _____ () C:\Users\Lola\Desktop\SecurityCheck.exe 2014-07-21 19:37 - 2014-07-21 19:37 - 00000988 _____ () C:\Users\Lola\Desktop\JRT.txt 2014-07-21 19:10 - 2014-07-21 19:10 - 00000000 ____D () C:\Windows\ERUNT 2014-07-21 19:07 - 2014-07-21 19:07 - 00004929 _____ () C:\Users\Lola\Desktop\AdwCl.txt 2014-07-21 17:41 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll 2014-07-21 17:39 - 2014-07-21 18:57 - 00000000 ____D () C:\AdwCleaner 2014-07-21 16:45 - 2014-07-21 16:45 - 00000000 __SHD () C:\Users\Lola\AppData\Local\EmieUserList 2014-07-21 16:45 - 2014-07-21 16:45 - 00000000 __SHD () C:\Users\Lola\AppData\Local\EmieSiteList 2014-07-21 15:05 - 2014-07-23 14:56 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-07-21 15:05 - 2014-07-21 15:05 - 00001064 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-07-21 15:05 - 2014-07-21 15:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-07-21 15:04 - 2014-07-21 15:05 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 2014-07-21 15:04 - 2014-07-21 15:04 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-07-21 15:04 - 2014-05-12 07:26 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-07-21 15:04 - 2014-05-12 07:25 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-07-21 15:04 - 2014-05-12 07:25 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-07-21 15:00 - 2014-07-21 15:01 - 01016261 _____ (Thisisu) C:\Users\Lola\Desktop\JRT.exe 2014-07-21 15:00 - 2014-07-21 15:00 - 01354223 _____ () C:\Users\Lola\Desktop\adwcleaner_3.216.exe 2014-07-21 14:59 - 2014-07-21 15:01 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Lola\Desktop\mbam-setup-2.0.2.1012.exe 2014-07-21 11:16 - 2014-07-21 11:16 - 00021875 _____ () C:\ComboFix.txt 2014-07-21 10:37 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe 2014-07-21 10:37 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe 2014-07-21 10:37 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-07-21 10:37 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-07-21 10:37 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-07-21 10:37 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe 2014-07-21 10:37 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe 2014-07-21 10:37 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe 2014-07-21 10:36 - 2014-07-21 11:16 - 00000000 ____D () C:\Qoobox 2014-07-21 10:35 - 2014-07-21 11:11 - 00000000 ____D () C:\Windows\erdnt 2014-07-21 10:31 - 2014-07-21 10:32 - 05561612 ____R (Swearware) C:\Users\Lola\Desktop\ComboFix.exe 2014-07-21 10:28 - 2014-07-21 10:29 - 05561612 _____ (Swearware) C:\Users\Lola\Downloads\ComboFix.exe 2014-07-20 23:57 - 2014-01-09 04:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2014-07-20 23:47 - 2014-07-20 23:50 - 00028962 _____ () C:\Users\Lola\Desktop\Addition.txt 2014-07-20 23:43 - 2014-07-23 15:07 - 00011692 _____ () C:\Users\Lola\Desktop\FRST.txt 2014-07-20 23:12 - 2013-10-02 02:32 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe 2014-07-20 23:12 - 2013-10-02 01:45 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll 2014-07-20 23:11 - 2013-10-02 02:42 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys 2014-07-20 23:11 - 2013-10-02 02:30 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll 2014-07-20 23:11 - 2013-10-02 02:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll 2014-07-20 23:11 - 2013-10-02 02:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll 2014-07-20 23:11 - 2013-10-02 01:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2014-07-20 23:11 - 2013-10-02 01:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll 2014-07-20 23:11 - 2013-10-02 01:00 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe 2014-07-20 23:11 - 2013-10-02 00:53 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe 2014-07-20 23:11 - 2013-10-02 00:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe 2014-07-20 23:10 - 2013-09-25 03:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll 2014-07-20 22:17 - 2014-07-23 15:07 - 00000000 ____D () C:\FRST 2014-07-20 21:19 - 2014-07-20 21:19 - 00380416 _____ () C:\Users\Lola\Desktop\Gmer-19357.exe 2014-07-20 21:18 - 2014-07-23 15:07 - 01082368 _____ (Farbar) C:\Users\Lola\Desktop\FRST.exe 2014-07-20 21:16 - 2014-07-20 21:16 - 00050477 _____ () C:\Users\Lola\Desktop\Defogger.exe 2014-07-20 14:42 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-07-20 14:42 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-07-20 14:42 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-07-20 14:42 - 2014-06-19 01:56 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-07-20 14:42 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-07-20 14:42 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-07-20 14:42 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-07-20 14:42 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-07-20 14:42 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-07-20 14:42 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-07-20 14:42 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-07-20 14:42 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-07-20 14:42 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-07-20 14:42 - 2014-06-19 01:23 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-07-20 14:42 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-07-20 14:42 - 2014-06-19 01:16 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-07-20 14:42 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-07-20 14:42 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-07-20 14:42 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-07-20 14:42 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-07-20 14:42 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-07-20 14:42 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-07-20 14:42 - 2014-06-19 00:52 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-07-20 14:42 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-07-20 14:42 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-07-20 14:42 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-07-20 14:42 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-07-20 14:42 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-07-20 14:42 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-07-20 14:42 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-07-20 14:42 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2014-07-20 14:42 - 2014-06-18 02:52 - 02350080 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-07-20 14:41 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-07-20 14:40 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-07-20 14:40 - 2014-05-30 08:36 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2014-07-20 14:39 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-07-20 14:39 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-07-20 14:39 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2014-07-20 14:39 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-07-20 14:39 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-07-20 14:39 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-07-20 14:38 - 2014-06-05 16:26 - 01059840 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-07-20 03:30 - 2014-07-20 03:30 - 00000000 ____D () C:\Users\Default\AppData\Roaming\IObit 2014-07-20 03:30 - 2014-07-20 03:30 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\IObit 2014-07-20 03:28 - 2014-07-20 03:29 - 00144960 _____ () C:\Windows\Minidump\072014-23836-01.dmp 2014-07-20 03:28 - 2014-07-20 03:28 - 372600835 _____ () C:\Windows\MEMORY.DMP 2014-07-16 21:32 - 2014-07-23 14:51 - 00005306 _____ () C:\Windows\PFRO.log 2014-07-16 21:32 - 2014-07-23 14:51 - 00000840 _____ () C:\Windows\setupact.log 2014-07-16 21:32 - 2014-07-16 21:32 - 00000000 _____ () C:\Windows\setuperr.log ==================== One Month Modified Files and Folders ======= 2014-07-23 15:08 - 2014-07-20 23:43 - 00011692 _____ () C:\Users\Lola\Desktop\FRST.txt 2014-07-23 15:07 - 2014-07-23 15:07 - 00000000 ____D () C:\Users\Lola\Desktop\FRST-OlderVersion 2014-07-23 15:07 - 2014-07-20 22:17 - 00000000 ____D () C:\FRST 2014-07-23 15:07 - 2014-07-20 21:18 - 01082368 _____ (Farbar) C:\Users\Lola\Desktop\FRST.exe 2014-07-23 15:02 - 2009-07-14 06:34 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-07-23 15:02 - 2009-07-14 06:34 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-07-23 14:56 - 2014-07-21 15:05 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-07-23 14:51 - 2014-07-16 21:32 - 00005306 _____ () C:\Windows\PFRO.log 2014-07-23 14:51 - 2014-07-16 21:32 - 00000840 _____ () C:\Windows\setupact.log 2014-07-23 14:51 - 2014-06-11 20:24 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-07-23 14:51 - 2014-06-10 19:47 - 00000000 ____D () C:\Program Files\IObit 2014-07-23 14:51 - 2010-07-29 06:17 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-07-23 14:51 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-07-23 14:50 - 2014-04-29 15:38 - 01145774 _____ () C:\Windows\WindowsUpdate.log 2014-07-23 14:36 - 2012-04-17 13:17 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-07-23 13:51 - 2010-07-29 06:17 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-07-23 13:06 - 2014-07-23 13:06 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk 2014-07-23 13:06 - 2014-07-23 13:06 - 00001993 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk 2014-07-23 13:05 - 2011-06-15 14:15 - 00000000 ____D () C:\Program Files\Common Files\Adobe 2014-07-23 13:04 - 2009-10-29 20:22 - 00000000 ____D () C:\ProgramData\Adobe 2014-07-23 13:04 - 2009-10-29 20:22 - 00000000 ____D () C:\Program Files\Adobe 2014-07-23 12:45 - 2012-04-17 13:17 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2014-07-23 12:45 - 2011-08-09 13:46 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2014-07-23 12:34 - 2014-07-23 12:34 - 00001121 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-07-23 12:34 - 2014-07-23 12:34 - 00001109 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-07-23 12:34 - 2014-07-23 12:34 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service 2014-07-23 12:28 - 2014-07-23 12:28 - 00244408 _____ () C:\Users\Lola\Downloads\Firefox Setup Stub 31.0.exe 2014-07-23 12:20 - 2014-07-23 12:20 - 00000000 ____D () C:\Windows\Tasks\ImCleanDisabled 2014-07-23 12:07 - 2014-07-23 11:39 - 00001226 _____ () C:\Users\Lola\Desktop\Revo Uninstaller.lnk 2014-07-23 11:39 - 2014-07-23 11:39 - 00000000 ____D () C:\Program Files\VS Revo Group 2014-07-23 11:35 - 2014-07-23 11:34 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Lola\Desktop\revosetup95.exe 2014-07-22 15:11 - 2014-07-22 15:11 - 00001098 _____ () C:\Users\Lola\Desktop\checkup.txt 2014-07-22 12:07 - 2014-07-22 12:07 - 02347384 _____ (ESET) C:\Users\Lola\Desktop\esetsmartinstaller_deu.exe 2014-07-22 12:04 - 2014-07-22 12:04 - 00854390 _____ () C:\Users\Lola\Desktop\SecurityCheck.exe 2014-07-21 19:37 - 2014-07-21 19:37 - 00000988 _____ () C:\Users\Lola\Desktop\JRT.txt 2014-07-21 19:10 - 2014-07-21 19:10 - 00000000 ____D () C:\Windows\ERUNT 2014-07-21 19:07 - 2014-07-21 19:07 - 00004929 _____ () C:\Users\Lola\Desktop\AdwCl.txt 2014-07-21 18:57 - 2014-07-21 17:39 - 00000000 ____D () C:\AdwCleaner 2014-07-21 18:57 - 2014-06-10 19:47 - 00000000 ____D () C:\Users\Lola\AppData\Roaming\IObit 2014-07-21 16:45 - 2014-07-21 16:45 - 00000000 __SHD () C:\Users\Lola\AppData\Local\EmieUserList 2014-07-21 16:45 - 2014-07-21 16:45 - 00000000 __SHD () C:\Users\Lola\AppData\Local\EmieSiteList 2014-07-21 16:45 - 2010-07-29 06:08 - 00000000 ____D () C:\Users\Lola\AppData\Local\Google 2014-07-21 15:05 - 2014-07-21 15:05 - 00001064 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-07-21 15:05 - 2014-07-21 15:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-07-21 15:05 - 2014-07-21 15:04 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 2014-07-21 15:04 - 2014-07-21 15:04 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-07-21 15:02 - 2012-02-06 18:55 - 00000000 ____D () C:\Users\Lola\Desktop\Download 2014-07-21 15:01 - 2014-07-21 15:00 - 01016261 _____ (Thisisu) C:\Users\Lola\Desktop\JRT.exe 2014-07-21 15:01 - 2014-07-21 14:59 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Lola\Desktop\mbam-setup-2.0.2.1012.exe 2014-07-21 15:00 - 2014-07-21 15:00 - 01354223 _____ () C:\Users\Lola\Desktop\adwcleaner_3.216.exe 2014-07-21 12:23 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache 2014-07-21 11:16 - 2014-07-21 11:16 - 00021875 _____ () C:\ComboFix.txt 2014-07-21 11:16 - 2014-07-21 10:36 - 00000000 ____D () C:\Qoobox 2014-07-21 11:16 - 2009-07-14 04:37 - 00000000 __RHD () C:\Users\Default 2014-07-21 11:16 - 2009-07-14 04:37 - 00000000 ___RD () C:\Users\Public 2014-07-21 11:11 - 2014-07-21 10:35 - 00000000 ____D () C:\Windows\erdnt 2014-07-21 11:03 - 2009-07-14 04:04 - 00000215 _____ () C:\Windows\system.ini 2014-07-21 11:01 - 2009-07-14 04:03 - 48496640 _____ () C:\Windows\system32\config\SOFTWARE.bak 2014-07-21 11:01 - 2009-07-14 04:03 - 15990784 _____ () C:\Windows\system32\config\SYSTEM.bak 2014-07-21 11:01 - 2009-07-14 04:03 - 00262144 _____ () C:\Windows\system32\config\DEFAULT.bak 2014-07-21 11:01 - 2009-07-14 04:03 - 00057344 _____ () C:\Windows\system32\config\SAM.bak 2014-07-21 11:01 - 2009-07-14 04:03 - 00024576 _____ () C:\Windows\system32\config\SECURITY.bak 2014-07-21 10:32 - 2014-07-21 10:31 - 05561612 ____R (Swearware) C:\Users\Lola\Desktop\ComboFix.exe 2014-07-21 10:29 - 2014-07-21 10:28 - 05561612 _____ (Swearware) C:\Users\Lola\Downloads\ComboFix.exe 2014-07-21 09:42 - 2012-10-25 23:37 - 00000000 ____D () C:\Users\Lola\AppData\Roaming\Wise Care 365 2014-07-21 01:04 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE 2014-07-20 23:50 - 2014-07-20 23:47 - 00028962 _____ () C:\Users\Lola\Desktop\Addition.txt 2014-07-20 23:40 - 2009-07-14 06:33 - 00334608 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-07-20 23:26 - 2009-12-01 14:21 - 00000000 ____D () C:\Windows\system32\Drivers\de-DE 2014-07-20 23:05 - 2013-08-22 23:44 - 00000000 ____D () C:\Windows\system32\MRT 2014-07-20 22:55 - 2010-08-23 03:20 - 93585272 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-07-20 22:27 - 2014-06-10 19:47 - 00000000 ____D () C:\ProgramData\IObit 2014-07-20 21:19 - 2014-07-20 21:19 - 00380416 _____ () C:\Users\Lola\Desktop\Gmer-19357.exe 2014-07-20 21:16 - 2014-07-20 21:16 - 00050477 _____ () C:\Users\Lola\Desktop\Defogger.exe 2014-07-20 14:08 - 2014-06-10 21:01 - 00001132 _____ () C:\Users\Public\Desktop\Driver Booster.lnk 2014-07-20 14:08 - 2014-06-10 21:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 2014-07-20 03:30 - 2014-07-20 03:30 - 00000000 ____D () C:\Users\Default\AppData\Roaming\IObit 2014-07-20 03:30 - 2014-07-20 03:30 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\IObit 2014-07-20 03:29 - 2014-07-20 03:28 - 00144960 _____ () C:\Windows\Minidump\072014-23836-01.dmp 2014-07-20 03:28 - 2014-07-20 03:28 - 372600835 _____ () C:\Windows\MEMORY.DMP 2014-07-20 03:28 - 2011-01-09 21:20 - 00000000 ____D () C:\Windows\Minidump 2014-07-17 14:44 - 2013-05-21 17:26 - 00035848 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2014-07-16 21:32 - 2014-07-16 21:32 - 00000000 _____ () C:\Windows\setuperr.log 2014-07-16 21:04 - 2014-06-10 20:38 - 47460352 _____ () C:\Windows\system32\config\SOFTWARE.iobit 2014-07-16 21:04 - 2014-06-10 20:38 - 35131392 _____ () C:\Windows\system32\config\COMPONENTS.iobit 2014-07-16 21:04 - 2014-06-10 20:38 - 00188416 _____ () C:\Windows\system32\config\DEFAULT.iobit 2014-07-16 21:04 - 2014-06-10 20:38 - 00057344 _____ () C:\Windows\system32\config\SAM.iobit 2014-07-16 21:04 - 2014-06-10 20:38 - 00024576 _____ () C:\Windows\system32\config\SECURITY.iobit 2014-07-16 21:04 - 2010-07-29 06:01 - 00000000 ____D () C:\Users\Lola 2014-07-16 20:39 - 2014-06-10 19:47 - 00000000 ____D () C:\ProgramData\ProductData 2014-06-24 13:24 - 2013-04-06 02:01 - 00097648 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys Some content of TEMP: ==================== C:\Users\Lola\AppData\Local\temp\avgnt.exe C:\Users\Lola\AppData\Local\temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => File is digitally signed C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-07-18 00:56 ==================== End Of Log ============================ --- --- --- --- --- --- Fazit bislang: Nach einem "Test-Neustart" ist eine deutliche Verbeserung spürbar. Hab jetzt mein Spielclient noch nicht hier wieder getestet, aber beim Firefox und bei Chrome spüre ich auch das es anfängt schneller und runder zu laufen Geändert von Lady Frigg (23.07.2014 um 14:21 Uhr) |
24.07.2014, 14:58 | #10 |
/// the machine /// TB-Ausbilder | Netbook fährt extrem langsam hoch und auch die Programme laden langsam dann teste mal noch den Spiele Client
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
24.07.2014, 16:58 | #11 |
| Netbook fährt extrem langsam hoch und auch die Programme laden langsam Da der Spiel-Client i-wie durch die ersten Aktionen hier verschwunden war musste ich neuinstallieren. Weswegen ich bislang nicht getestet hatte - denn man soll doch nix installieren ohne Anweisung, solange wir noch dran arbeiten So, hab den Client wieder drauf und muss feststellen, der ist immernoch sehr lahm. Man kann praktisch zuschauen, wie alleine die Startseite vom Client sich ähnlich einer Jallousie von oben nach unten aufbaut, bis der Client komplett geladen ist Mag mich da also vom Netbook aus erstmal nicht einloggen, denn so in nem Kampf - das wird nix. Also, mal schauen, was dir jetzt dazu noch einfällt. Firefox, Chrome weiterhin super |
25.07.2014, 08:56 | #12 |
/// the machine /// TB-Ausbilder | Netbook fährt extrem langsam hoch und auch die Programme laden langsam was genau ist das für ein Client?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
25.07.2014, 09:29 | #13 | |
| Netbook fährt extrem langsam hoch und auch die Programme laden langsam Drachenkrieg hxxp://warofdragons.de/ Wird betrieben von My.com B.V. Ein auf Chrome basierter Client Und in moment fängt Malwarebytes an auch deswegen zu meckern Bösartige Website blockiert Finde aber kein Log zu der Warnung. Screenshot hab ich liegen, weiss nur nicht, wie ich das Bild hier einfüge Zitat:
|
26.07.2014, 07:58 | #14 |
/// the machine /// TB-Ausbilder | Netbook fährt extrem langsam hoch und auch die Programme laden langsam schalt mal alle Schutzprogramme ab und starte den Client dann nochmal. Wie ist der Speed?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
26.07.2014, 09:45 | #15 |
| Netbook fährt extrem langsam hoch und auch die Programme laden langsam Hi Schrauber Auch wenn ich die Schutzprogramme ausgeschaltet habe, baut sich die Startseite des Clients sehr langsam auf. Ähnlich wie man ne Jallusie vor dem Fenster runter lässt, so zeigt sich das Bild der Startseite auch immer stückchenweise von oben nach unten. Das er Client immer vorher nach Updates/Aktuallisierungen und das dies ne Weile dauert ist ja normal, aber sobald der mir dann anzeigt, das dieses Beendet wurde und der Client nun kommen sollte, dauert das in etwa 1 Min bis die Einlog-Seite dann endlich fertig ist. Antivir hat bislang wegen dem Client noch nie gemeckert. Bin grad ziemlich überfragt - denn auf mein Haupt-PC läuft ja alles einwandfrei mit dem Client, selbst nachdem ich von hier Hilfe bei der Adware entfernung bekam Die kleine Lady ist weiblich und "blond", sitze hier schon die ganze Zeit mit Netbook am PC, damit ich ja keine Anweisung von dir verpasse und dann auch wirklich schritt für schritt alles versuche abzuarbeiten Geändert von Lady Frigg (26.07.2014 um 10:04 Uhr) |
Themen zu Netbook fährt extrem langsam hoch und auch die Programme laden langsam |
.dll, antivir, antivirus, avira, browser, defender, device driver, driver booster, error, excel, explorer, fehler, flash player, google, hängt, langsam, mozilla, port, realtek, registry, scan, services.exe, software, svchost.exe, temp, windows, winlogon.exe |