| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Internet extrem langsam an Desktop PC. An anderen Geräten normal!Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
| |
12.08.2014, 18:27
| #1 |
| |  Internet extrem langsam an Desktop PC. An anderen Geräten normal! Malwarebytes Anti-Malware Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 12.08.2014 Suchlauf-Zeit: 18:55:49 Logdatei: mbam.txt Administrator: Ja Version: 2.00.2.1012 Malware Datenbank: v2014.08.12.09 Rootkit Datenbank: v2014.08.04.01 Lizenz: Testversion Malware Schutz: Aktiviert Bösartiger Webseiten Schutz: Aktiviert Self-protection: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: TheButton Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 372236 Verstrichene Zeit: 12 Min, 55 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristics: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registrierungsschlüssel: 0 (No malicious items detected) Registrierungswerte: 0 (No malicious items detected) Registrierungsdaten: 0 (No malicious items detected) Ordner: 0 (No malicious items detected) Dateien: 0 (No malicious items detected) Physische Sektoren: 0 (No malicious items detected) (end) FRST FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-08-2014 01 Ran by TheButton (administrator) on THEBUTTON-PC on 12-08-2014 19:12:57 Running from C:\Users\TheButton\Downloads Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AMD) C:\Windows\System32\atiesrxx.exe (Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe (AMD) C:\Windows\System32\atieclxx.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe () C:\Program Files (x86)\Common Files\Portrait Displays\Plugins\AM\dtsslsrv.exe (BlueStack Systems, Inc.) C:\Program Files (x86)\Bluestacks\HD-LogRotatorService.exe (BlueStack Systems, Inc.) C:\Program Files (x86)\Bluestacks\HD-UpdaterService.exe () C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe (Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Valve Corporation) F:\Spiele\Steam\Steam.exe () C:\Program Files (x86)\RocketDock\RocketDock.exe (Microsoft Corporation) C:\Users\TheButton\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Spotify Ltd) C:\Users\TheButton\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe () C:\Program Files (x86)\Belkin\F7D4101\V1\PBN.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (FNet Co., Ltd.) C:\Program Files (x86)\XFastUSB\XFastUsb.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Creative Technology Ltd) C:\Program Files (x86)\Creative\THX TruStudio\THXNBSet\THXAudNB.exe (Portrait Displays, Inc) C:\Program Files (x86)\Acer Display\eDisplay Management\dthtml.exe () C:\Program Files\Rainmeter\Rainmeter.exe (ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Isku Keyboard\IskuMonitor.exe (Portrait Displays Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Shared\HookManager.exe (ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Kone[+] Mouse\Kone[+]Monitor.exe (Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe () C:\Windows\SysWOW64\PnkBstrA.exe (ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Talk\TalkMonitor.exe () C:\Program Files (x86)\Portrait Displays\Pivot Pro Plugin\wpCtrl.exe () C:\Program Files (x86)\Portrait Displays\Pivot Pro Plugin\Floater.exe (Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winampa.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\9.0\bin\pg_ctl.exe (Sony DADC Austria AG.) C:\Windows\SysWOW64\UAService7.exe () C:\Program Files (x86)\Belkin\F7D4101\V1\wlansrv.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\9.0\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\9.0\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\9.0\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\9.0\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\9.0\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\9.0\bin\postgres.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (BlueStack Systems, Inc.) C:\Program Files (x86)\Bluestacks\HD-Service.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (BlueStack Systems) C:\Program Files (x86)\Bluestacks\HD-Network.exe (BlueStack Systems) C:\Program Files (x86)\Bluestacks\HD-BlockDevice.exe (BlueStack Systems) C:\Program Files (x86)\Bluestacks\HD-SharedFolder.exe (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (Opera Software) C:\Program Files (x86)\Opera\23.0.1522.75\opera.exe () C:\Program Files (x86)\Opera\23.0.1522.75\opera_crashreporter.exe (Opera Software) C:\Program Files (x86)\Opera\23.0.1522.75\opera.exe (Opera Software) C:\Program Files (x86)\Opera\23.0.1522.75\opera.exe (Opera Software) C:\Program Files (x86)\Opera\23.0.1522.75\opera.exe (Opera Software) C:\Program Files (x86)\Opera\23.0.1522.75\opera.exe (Opera Software) C:\Program Files (x86)\Opera\23.0.1522.75\opera.exe (Opera Software) C:\Program Files (x86)\Opera\23.0.1522.75\opera.exe (Opera Software) C:\Program Files (x86)\Opera\23.0.1522.75\opera.exe (Opera Software) C:\Program Files (x86)\Opera\23.0.1522.75\opera.exe (Opera Software) C:\Program Files (x86)\Opera\23.0.1522.75\opera.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [THXCfg64] => C:\Windows\system32\RunDLL32.exe C:\Windows\system32\THXCfg64.dll,RunDLLEntry THXCfg64 HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation) HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-10-01] (Microsoft Corporation) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13307496 2011-10-17] (Realtek Semiconductor) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated) HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation) HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [133400 2012-02-07] (Intel Corporation) HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-01-26] (Intel Corporation) HKLM-x32\...\Run: [XFastUSB] => C:\Program Files (x86)\XFastUSB\XFastUsb.exe [5019360 2012-08-09] (FNet Co., Ltd.) HKLM-x32\...\Run: [THX TruStudio NB Settings] => C:\Program Files (x86)\Creative\THX TruStudio\THXNBSet\THXAudNB.exe [909824 2011-05-19] (Creative Technology Ltd) HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.) HKLM-x32\...\Run: [PivotSoftware] => C:\Program Files (x86)\Portrait Displays\Pivot Pro Plugin\Pivot_startup.exe [110192 2010-05-13] () HKLM-x32\...\Run: [DT ACR] => C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DT_startup.exe [121456 2010-06-30] () HKLM-x32\...\Run: [RoccatIsku] => C:\Program Files (x86)\ROCCAT\Isku Keyboard\IskuMonitor.EXE [536576 2011-07-12] (ROCCAT GmbH) HKLM-x32\...\Run: [RoccatKone+] => C:\Program Files (x86)\ROCCAT\Kone[+] Mouse\Kone[+]Monitor.EXE [552960 2011-07-12] (ROCCAT GmbH) HKLM-x32\...\Run: [ROCCATTalk] => C:\Program Files (x86)\ROCCAT\Talk\TalkMonitor.EXE [2154496 2011-07-12] (ROCCAT GmbH) HKLM-x32\...\Run: [WinampAgent] => C:\Program Files (x86)\Winamp\winampa.exe [74752 2012-06-20] (Nullsoft, Inc.) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-07-31] (AVAST Software) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-12-06] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-11] (Oracle Corporation) HKU\S-1-5-21-2974934581-1780135931-607018039-1000\...\Run: [Steam] => F:\Spiele\Steam\steam.exe [1753280 2014-07-16] (Valve Corporation) HKU\S-1-5-21-2974934581-1780135931-607018039-1000\...\Run: [RocketDock] => C:\Program Files (x86)\RocketDock\RocketDock.exe [495616 2007-09-02] () HKU\S-1-5-21-2974934581-1780135931-607018039-1000\...\Run: [GoogleChromeAutoLaunch_B6326C0527610C67CD45E3194530BE8A] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [860488 2014-07-15] (Google Inc.) HKU\S-1-5-21-2974934581-1780135931-607018039-1000\...\Run: [SkyDrive] => C:\Users\TheButton\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [251040 2014-08-02] (Microsoft Corporation) HKU\S-1-5-21-2974934581-1780135931-607018039-1000\...\Run: [Spotify Web Helper] => C:\Users\TheButton\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1178168 2014-07-17] (Spotify Ltd) HKU\S-1-5-21-2974934581-1780135931-607018039-1000\...\Run: [PokerStrategy.com SideKick] => "C:\Users\TheButton\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PokerStrategy.com\PokerStrategy.com SideKick.appref-ms" HKU\S-1-5-21-2974934581-1780135931-607018039-1000\...\RunOnce: [Uninstall C:\Users\TheButton\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\TheButton\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64" HKU\S-1-5-21-2974934581-1780135931-607018039-1000\...\RunOnce: [Uninstall C:\Users\TheButton\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\TheButton\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530\amd64" HKU\S-1-5-21-2974934581-1780135931-607018039-1000\...\RunOnce: [Uninstall C:\Users\TheButton\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\TheButton\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\amd64" HKU\S-1-5-21-2974934581-1780135931-607018039-1000\...\RunOnce: [Uninstall C:\Users\TheButton\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\TheButton\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64" HKU\S-1-5-21-2974934581-1780135931-607018039-1000\...\RunOnce: [Uninstall C:\Users\TheButton\AppData\Local\Microsoft\SkyDrive\17.0.4029.0217\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\TheButton\AppData\Local\Microsoft\SkyDrive\17.0.4029.0217\amd64" HKU\S-1-5-21-2974934581-1780135931-607018039-1000\...\RunOnce: [Uninstall C:\Users\TheButton\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\TheButton\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64" HKU\S-1-5-21-2974934581-1780135931-607018039-1000\...\RunOnce: [Uninstall C:\Users\TheButton\AppData\Local\Microsoft\SkyDrive\17.0.4041.0512\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\TheButton\AppData\Local\Microsoft\SkyDrive\17.0.4041.0512\amd64" HKU\S-1-5-21-2974934581-1780135931-607018039-1000\...\RunOnce: [Uninstall C:\Users\TheButton\AppData\Local\Microsoft\SkyDrive\17.3.1165.0612\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\TheButton\AppData\Local\Microsoft\SkyDrive\17.3.1165.0612\amd64" HKU\S-1-5-21-2974934581-1780135931-607018039-1000\...\RunOnce: [Uninstall C:\Users\TheButton\AppData\Local\Microsoft\SkyDrive\17.3.1166.0618\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\TheButton\AppData\Local\Microsoft\SkyDrive\17.3.1166.0618\amd64" HKU\S-1-5-21-2974934581-1780135931-607018039-1000\...\MountPoints2: {da350050-e25d-11e1-83b1-806e6f6e6963} - D:\ASRSetup.exe HKU\S-1-5-21-2974934581-1780135931-607018039-1000\...\Winlogon: [Shell] C:\Windows\explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ATTENTION Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Play Wireless USB Adapter Utility.lnk ShortcutTarget: Play Wireless USB Adapter Utility.lnk -> C:\Program Files (x86)\Belkin\F7D4101\V1\PBN.exe () Startup: C:\Users\TheButton\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\TheButton\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\TheButton\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation) Startup: C:\Users\TheButton\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk ShortcutTarget: Rainmeter.lnk -> C:\Program Files\Rainmeter\Rainmeter.exe () ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software) ShellIconOverlayIdentifiers: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\TheButton\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\TheButton\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\TheButton\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers: DropboxExt4 -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\TheButton\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers: GDriveBlacklistedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google) ShellIconOverlayIdentifiers: GDriveSharedEditOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google) ShellIconOverlayIdentifiers: GDriveSharedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google) ShellIconOverlayIdentifiers: GDriveSharedViewOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google) ShellIconOverlayIdentifiers: GDriveSyncedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google) ShellIconOverlayIdentifiers: GDriveSyncingOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google) ShellIconOverlayIdentifiers-x32: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\TheButton\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\TheButton\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\TheButton\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.) BootExecute: autocheck autochk * sdnclean64.exe ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=AV01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x4EA8549F2A43CE01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.msn.com/?pc=AV01 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=AV01 SearchScopes: HKLM-x32 - {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01 SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=SPLEP1&pc=SPLH SearchScopes: HKCU - {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01 SearchScopes: HKCU - {A7E984AA-C910-4b87-B88D-C90083D1E9B1} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=PROTOSV SearchScopes: HKCU - {F1B49914-12F7-4397-ABD3-16C6246E4429} URL = hxxp://www.google.com/cse?cx=partner-pub-3794288947762788%3A4107735745&ie=UTF-8&q=&sa=Search&siteurl=www.google.com%2Fcse%2Fhome%3Fcx%3Dpartner-pub-3794288947762788%3A4107735745&q={searchTerms} BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> c:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> c:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll () FF Plugin: @java.com/DTPlugin,version=10.60.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.60.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll () FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB) FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll (ESN Social Software AB) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\TheButton\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF Plugin HKCU: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll () FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-10-09] Chrome: ======= CHR HomePage: hxxp://www.msn.com/?pc=AV01 CHR StartupUrls: "hxxp://www.msn.com/?pc=AV01" CHR DefaultSearchKeyword: bing1.com CHR DefaultNewTabURL: CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.89\PepperFlash\pepflashplayer.dll No File CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\gcswf32.dll No File CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_265.dll No File CHR Plugin: (Remoting Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\pdf.dll () CHR Plugin: (Norton Confidential) - C:\Users\TheButton\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2012.5.5.11_0\npcoplgn.dll No File CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll No File CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File CHR Plugin: (Intel® Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) CHR Plugin: (Intel® Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) CHR Plugin: (Unity Player) - C:\Users\TheButton\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) CHR Extension: (ProxFlow) - C:\Users\TheButton\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2013-09-14] CHR Extension: (Grooveshark Germany unlocker) - C:\Users\TheButton\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejcnhmeicafddjdaeecddemnhnomiaai [2014-04-29] CHR Extension: (avast! Online Security) - C:\Users\TheButton\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2013-05-26] CHR Extension: (Google Wallet) - C:\Users\TheButton\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-04] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-07-20] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 Asset Management Daemon; C:\Program Files (x86)\Common Files\Portrait Displays\Plugins\AM\dtsslsrv.exe [129648 2010-06-30] () R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-07-20] (AVAST Software) R2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [402192 2014-05-01] (BlueStack Systems, Inc.) R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [385808 2014-05-01] (BlueStack Systems, Inc.) R2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [774928 2014-05-01] (BlueStack Systems, Inc.) S3 Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2013-01-19] (Creative Labs) [File not signed] S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2013-01-19] (Creative Labs) [File not signed] R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [423424 2011-10-19] (Creative Technology Ltd) [File not signed] R2 DTSRVC; C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe [121456 2010-06-30] () R2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9216 2013-04-23] (Hi-Rez Studios) [File not signed] R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128280 2012-02-07] () R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-07] (Intel Corporation) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-09-08] () S3 Sony PC Companion; C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe [155320 2012-01-18] (Avanquest Software) [File not signed] R2 Themes; C:\Windows\system32\themeservice.dll [44544 2013-12-22] (Microsoft Corporation) [File not signed] R2 UserAccess7; C:\Windows\SysWOW64\UAService7.exe [143360 2012-09-01] (Sony DADC Austria AG.) [File not signed] R2 WLANBelkinService; C:\Program Files (x86)\Belkin\F7D4101\V1\wlansrv.exe [36864 2009-12-28] () [File not signed] R2 postgresql-x64-9.0; C:/Program Files (x86)/PostgreSQL/9.0/bin/pg_ctl.exe runservice -N "postgresql-x64-9.0" -D "C:/Program Files/PostgreSQL/9.0/data" -w [X] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R0 asahci64; C:\Windows\System32\DRIVERS\asahci64.sys [49760 2011-09-21] (Asmedia Technology) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-07-20] () R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-07-20] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-07-20] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-07-20] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-07-20] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427360 2014-07-20] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-07-20] (AVAST Software) R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2014-01-22] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-07-20] () R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [123152 2014-05-01] (BlueStack Systems) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-12-09] (DT Soft Ltd) R3 FNETTBOH_305; C:\Windows\System32\drivers\FNETTBOH_305.SYS [32320 2014-06-17] (FNet Co., Ltd.) R1 FNETURPX; C:\Windows\System32\drivers\FNETURPX.SYS [15936 2012-08-09] (FNet Co., Ltd.) S3 HabuFltr; C:\Windows\System32\drivers\habu.sys [13696 2006-10-26] (Razer (Asia-Pacific) Pte Ltd) S3 ikbevent; C:\Windows\System32\DRIVERS\ikbevent.sys [25536 2012-02-09] () S3 imsevent; C:\Windows\System32\DRIVERS\imsevent.sys [25536 2012-02-09] () S3 ISCT; C:\Windows\System32\DRIVERS\ISCTD64.sys [44992 2012-02-09] () R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-08-12] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation) S3 NPF; C:\Windows\system32\drivers\npf.sys [40464 2007-11-07] (CACE Technologies) R3 PdiPorts; C:\Windows\System32\DRIVERS\PdiPorts.sys [20592 2010-04-16] (Portrait Displays, Inc.) R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.) S3 UHSfiltv; C:\Windows\System32\drivers\UHSfiltv.sys [23552 2012-09-28] (Creative Technology Ltd.) S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X] S3 tsusbhub; system32\drivers\tsusbhub.sys [X] S3 VGPU; System32\drivers\rdvgkmd.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-08-12 19:12 - 2014-08-12 19:12 - 00032331 _____ () C:\Users\TheButton\Downloads\FRST.txt 2014-08-12 19:10 - 2014-08-12 19:10 - 00001161 _____ () C:\Users\TheButton\Desktop\mbam.txt 2014-08-12 18:54 - 2014-08-12 18:55 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-08-12 18:53 - 2014-08-12 18:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-08-12 18:53 - 2014-08-12 18:53 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-08-12 18:53 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-08-12 18:53 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-08-12 18:32 - 2014-08-12 18:32 - 00001264 _____ () C:\Users\TheButton\Desktop\Revo Uninstaller.lnk 2014-08-12 18:32 - 2014-08-12 18:32 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group 2014-08-11 19:37 - 2014-08-11 19:37 - 00000759 _____ () C:\Users\TheButton\Desktop\JRT.txt 2014-08-11 19:26 - 2014-08-11 19:26 - 00000000 ____D () C:\Windows\ERUNT 2014-08-11 19:19 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll 2014-08-11 19:18 - 2014-08-11 19:21 - 00000000 ____D () C:\AdwCleaner 2014-08-11 19:13 - 2014-08-11 19:16 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\TheButton\Desktop\mbam-setup-2.0.2.1012.exe 2014-08-11 19:13 - 2014-08-11 19:14 - 01016261 _____ (Thisisu) C:\Users\TheButton\Desktop\JRT.exe 2014-08-11 19:09 - 2014-08-11 19:10 - 01366203 _____ () C:\Users\TheButton\Desktop\adwcleaner_3.304.exe 2014-08-11 18:53 - 2014-08-11 18:54 - 00000085 _____ () C:\Windows\wininit.ini 2014-08-11 18:13 - 2014-08-11 18:14 - 00067354 _____ () C:\Users\TheButton\Desktop\Addition.txt 2014-08-11 18:11 - 2014-08-12 19:13 - 00000000 ____D () C:\FRST 2014-08-11 18:11 - 2014-08-11 18:14 - 00045210 _____ () C:\Users\TheButton\Desktop\FRST.txt 2014-08-11 18:10 - 2014-08-11 18:11 - 02099712 _____ (Farbar) C:\Users\TheButton\Downloads\FRST64.exe 2014-08-03 11:06 - 2014-08-03 11:05 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-08-03 11:05 - 2014-08-03 11:05 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-08-03 11:05 - 2014-08-03 11:05 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-08-03 11:05 - 2014-08-03 11:05 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-08-03 11:05 - 2014-08-03 11:05 - 00000000 ____D () C:\Program Files (x86)\Java 2014-08-01 16:17 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2014-08-01 16:17 - 2014-05-14 18:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2014-08-01 16:17 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2014-08-01 16:17 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2014-08-01 16:17 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2014-08-01 16:17 - 2014-05-14 18:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2014-08-01 16:17 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2014-08-01 16:17 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2014-08-01 16:17 - 2014-05-14 18:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2014-08-01 16:17 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2014-08-01 16:17 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2014-08-01 16:17 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2014-08-01 16:17 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2014-08-01 16:17 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2014-07-25 19:12 - 2014-07-25 19:12 - 00000000 ____D () C:\Users\TheButton\Documents\giana sisters - twisted dreams 2014-07-25 11:22 - 2014-07-25 11:22 - 00151036 _____ () C:\Users\TheButton\Desktop\Kontrollansicht.xps 2014-07-25 09:25 - 2014-07-25 09:25 - 00001071 _____ () C:\Users\TheButton\Desktop\Cookie.txt 2014-07-25 08:29 - 2014-07-25 08:29 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking 2014-07-25 08:28 - 2014-08-11 18:55 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2 2014-07-25 08:28 - 2014-08-11 18:54 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy 2014-07-20 20:24 - 2014-07-20 20:24 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2014-07-15 18:47 - 2014-07-15 18:47 - 00003016 _____ () C:\Windows\System32\Tasks\{02C07EE8-6EAD-4F11-9C65-394BDCCD2BAB} ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-08-12 19:13 - 2014-08-12 19:12 - 00032331 _____ () C:\Users\TheButton\Downloads\FRST.txt 2014-08-12 19:13 - 2014-08-11 18:11 - 00000000 ____D () C:\FRST 2014-08-12 19:11 - 2014-04-17 20:44 - 00000000 ___RD () C:\Users\TheButton\Dropbox 2014-08-12 19:10 - 2014-08-12 19:10 - 00001161 _____ () C:\Users\TheButton\Desktop\mbam.txt 2014-08-12 19:05 - 2012-09-03 19:08 - 00001116 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-08-12 18:58 - 2012-08-09 19:14 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-08-12 18:58 - 2009-07-14 06:45 - 00014512 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-08-12 18:58 - 2009-07-14 06:45 - 00014512 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-08-12 18:55 - 2014-08-12 18:54 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-08-12 18:54 - 2012-08-09 17:10 - 01578311 _____ () C:\Windows\WindowsUpdate.log 2014-08-12 18:53 - 2014-08-12 18:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-08-12 18:53 - 2014-08-12 18:53 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-08-12 18:53 - 2013-01-24 22:25 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-08-12 18:52 - 2012-10-09 16:16 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update 2014-08-12 18:51 - 2013-03-22 17:50 - 00000000 ___RD () C:\Users\TheButton\SkyDrive 2014-08-12 18:50 - 2014-04-17 16:23 - 00000000 ____D () C:\Users\TheButton\AppData\Roaming\Dropbox 2014-08-12 18:50 - 2014-02-02 16:12 - 00000000 ____D () C:\Users\postgres 2014-08-12 18:49 - 2012-09-03 19:08 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-08-12 18:49 - 2012-08-09 20:14 - 00214914 _____ () C:\Windows\SysWOW64\DTSSL.log 2014-08-12 18:49 - 2012-08-09 17:47 - 01029462 _____ () C:\Windows\PFRO.log 2014-08-12 18:49 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-08-12 18:49 - 2009-07-14 06:51 - 00176318 _____ () C:\Windows\setupact.log 2014-08-12 18:32 - 2014-08-12 18:32 - 00001264 _____ () C:\Users\TheButton\Desktop\Revo Uninstaller.lnk 2014-08-12 18:32 - 2014-08-12 18:32 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group 2014-08-12 18:30 - 2014-06-03 18:08 - 00003858 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1388924536 2014-08-12 18:30 - 2012-08-09 20:34 - 00000000 ____D () C:\Program Files (x86)\Opera 2014-08-11 19:37 - 2014-08-11 19:37 - 00000759 _____ () C:\Users\TheButton\Desktop\JRT.txt 2014-08-11 19:26 - 2014-08-11 19:26 - 00000000 ____D () C:\Windows\ERUNT 2014-08-11 19:21 - 2014-08-11 19:18 - 00000000 ____D () C:\AdwCleaner 2014-08-11 19:16 - 2014-08-11 19:13 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\TheButton\Desktop\mbam-setup-2.0.2.1012.exe 2014-08-11 19:14 - 2014-08-11 19:13 - 01016261 _____ (Thisisu) C:\Users\TheButton\Desktop\JRT.exe 2014-08-11 19:10 - 2014-08-11 19:09 - 01366203 _____ () C:\Users\TheButton\Desktop\adwcleaner_3.304.exe 2014-08-11 18:55 - 2014-07-25 08:28 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2 2014-08-11 18:54 - 2014-08-11 18:53 - 00000085 _____ () C:\Windows\wininit.ini 2014-08-11 18:54 - 2014-07-25 08:28 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy 2014-08-11 18:14 - 2014-08-11 18:13 - 00067354 _____ () C:\Users\TheButton\Desktop\Addition.txt 2014-08-11 18:14 - 2014-08-11 18:11 - 00045210 _____ () C:\Users\TheButton\Desktop\FRST.txt 2014-08-11 18:11 - 2014-08-11 18:10 - 02099712 _____ (Farbar) C:\Users\TheButton\Downloads\FRST64.exe 2014-08-04 18:16 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2014-08-04 16:15 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-08-03 11:05 - 2014-08-03 11:06 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-08-03 11:05 - 2014-08-03 11:05 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-08-03 11:05 - 2014-08-03 11:05 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-08-03 11:05 - 2014-08-03 11:05 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-08-03 11:05 - 2014-08-03 11:05 - 00000000 ____D () C:\Program Files (x86)\Java 2014-08-02 14:46 - 2013-10-23 15:32 - 00000000 ____D () C:\Program Files (x86)\Overwolf 2014-08-02 14:40 - 2014-02-20 17:46 - 00002210 _____ () C:\Users\TheButton\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk 2014-07-30 19:34 - 2014-06-27 13:38 - 00000000 ____D () C:\Users\TheButton\Desktop\Nadine das ist hier alles dein SCHEISS 2014-07-29 11:51 - 2009-07-14 19:58 - 00699432 _____ () C:\Windows\system32\perfh007.dat 2014-07-29 11:51 - 2009-07-14 19:58 - 00149572 _____ () C:\Windows\system32\perfc007.dat 2014-07-29 11:51 - 2009-07-14 07:13 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-07-29 11:44 - 2012-08-27 19:27 - 00000000 ____D () C:\Users\TheButton\AppData\Roaming\Spotify 2014-07-26 07:48 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF 2014-07-25 19:12 - 2014-07-25 19:12 - 00000000 ____D () C:\Users\TheButton\Documents\giana sisters - twisted dreams 2014-07-25 12:05 - 2012-08-27 19:29 - 00000000 ____D () C:\Users\TheButton\AppData\Local\Spotify 2014-07-25 11:22 - 2014-07-25 11:22 - 00151036 _____ () C:\Users\TheButton\Desktop\Kontrollansicht.xps 2014-07-25 09:25 - 2014-07-25 09:25 - 00001071 _____ () C:\Users\TheButton\Desktop\Cookie.txt 2014-07-25 08:29 - 2014-07-25 08:29 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking 2014-07-25 08:05 - 2014-02-26 17:54 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-07-25 08:05 - 2014-02-26 17:54 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight 2014-07-24 23:53 - 2014-02-26 17:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2014-07-24 22:16 - 2013-11-01 18:08 - 00000000 ____D () C:\Users\TheButton\AppData\Local\Battle.net 2014-07-24 21:59 - 2014-04-17 16:24 - 00000000 ____D () C:\Users\TheButton\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-07-20 20:24 - 2014-07-20 20:24 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2014-07-20 20:24 - 2014-06-20 09:04 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys 2014-07-20 20:24 - 2014-02-21 17:15 - 00092008 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys 2014-07-20 20:24 - 2013-04-09 15:45 - 00224896 _____ () C:\Windows\system32\Drivers\aswVmm.sys 2014-07-20 20:24 - 2013-04-09 15:45 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys 2014-07-20 20:24 - 2012-10-09 16:17 - 01041168 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys 2014-07-20 20:24 - 2012-10-09 16:17 - 00427360 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys 2014-07-20 20:24 - 2012-10-09 16:17 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2014-07-20 20:24 - 2012-10-09 16:16 - 00307344 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2014-07-20 20:24 - 2012-10-09 16:16 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2014-07-20 19:41 - 2009-07-14 06:45 - 00717272 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-07-20 19:40 - 2012-08-09 17:24 - 00115672 _____ () C:\Users\TheButton\AppData\Local\GDIPFONTCACHEV1.DAT 2014-07-16 19:02 - 2012-08-10 17:19 - 00000000 ____D () C:\Users\TheButton\AppData\Roaming\TS3Client 2014-07-16 18:55 - 2014-06-25 14:28 - 00000000 ____D () C:\Program Files (x86)\TeamSpeak 3 Client 2014-07-15 18:47 - 2014-07-15 18:47 - 00003016 _____ () C:\Windows\System32\Tasks\{02C07EE8-6EAD-4F11-9C65-394BDCCD2BAB} 2014-07-14 18:23 - 2012-08-15 21:30 - 00664401 _____ () C:\Windows\DirectX.log 2014-07-13 15:10 - 2012-09-01 16:01 - 00000441 _____ () C:\Windows\system32\Drivers\etc\hosts.ics Files to move or delete: ==================== C:\ProgramData\hash.dat Some content of TEMP: ==================== C:\Users\TheButton\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp08amga.dll C:\Users\TheButton\AppData\Local\Temp\ose00000.exe C:\Users\TheButton\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-08-07 17:33 ==================== End Of Log ============================ |
|
13.08.2014, 09:13
| #2 |
| /// TB-Ausbilder   | Internet extrem langsam an Desktop PC. An anderen Geräten normal! OK , dann noch ESET (dauert länger):
__________________ESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
__________________ |
|
15.08.2014, 21:15
| #3 |
| | Internet extrem langsam an Desktop PC. An anderen Geräten normal!Code:
ATTFilter ESETSmartInstaller@High as downloader log:
Can not read file from internet.ESETSmartInstaller@High as downloader log:
Can not read file from internet.Can not read file from internet.ESETSmartInstaller@High as downloader log:
Can not read file from internet.esets_scanner_update returned -1 esets_gle=36882
esets_scanner_update returned -1 esets_gle=36882
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=5f1da03d21fff947825320b6bdccf655
# engine=19676
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-08-15 07:53:09
# local_time=2014-08-15 09:53:09 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='avast! Antivirus'
# compatibility_mode=783 16777213 100 97 1251576 172556479 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 96218 159762239 0 0
# scanned=703299
# found=12
# cleaned=0
# scan_time=18832
sh=8992F72873D09212597E582A16F8D9BC60E6A22A ft=1 fh=e21391a34e842ffc vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Common Files\DVDVideoSoft\TB\ConduitInstaller.exe.vir"
sh=257BA1FF6C3AD011AC3D8F456A990677BEA8F3CB ft=1 fh=bfeab316cc3d45a7 vn="möglicherweise Variante von Win32/Packed.Themida evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\PokerTracker 4\Data\Bin\iPokerCommunicator.pt4"
sh=74945D15923FF9ED8ADF2AE7EE28559E2D8463BD ft=1 fh=dd930364d7addc9f vn="möglicherweise Variante von Win32/Packed.Themida evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\PokerTracker 4\Data\Bin\PartyCommunicator.pt4"
sh=C32E6DFE49935A64A25FA706FEEBD4B76EE5318B ft=1 fh=579dae9bad35b7b5 vn="möglicherweise Variante von Win32/Packed.Themida evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\PokerTracker 4\Data\Bin\StarsCommunicator.pt4"
sh=3569FFFCD42127C3F5F70846CEDFB8E3AC23BDDE ft=1 fh=b9961421b186dde1 vn="möglicherweise Variante von Win32/Packed.Themida evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\PokerTracker 4\Data\Bin\TiltCommunicator.pt3"
sh=87B0F646E73574C7E88FFD141FD3DA080D519326 ft=0 fh=0000000000000000 vn="Mehrere Bedrohungen" ac=I fn="C:\Users\TheButton\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\31\5cecb6df-29d02e81"
sh=87B0F646E73574C7E88FFD141FD3DA080D519326 ft=0 fh=0000000000000000 vn="Mehrere Bedrohungen" ac=I fn="C:\Users\TheButton\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\31\5cecb6df-50eb6d25"
sh=279D2F9BAFF21E1DE119CE808D86122CF95A79D7 ft=0 fh=0000000000000000 vn="Mehrere Bedrohungen" ac=I fn="C:\Users\TheButton\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\40\799ee1a8-2d77c045"
sh=9698D8EB4B3DFA968A7EFCD72EBE066A63027E1B ft=0 fh=0000000000000000 vn="Variante von MSIL/Injector.AZM Trojaner" ac=I fn="C:\Users\TheButton\AppData\Roaming\GrabIt\Temp\RollerCoaster Tycoon Collection.rar"
sh=426A18084C747751E03BC30BCDC1FB4269125FFF ft=0 fh=0000000000000000 vn="Mehrere Bedrohungen" ac=I fn="H:\THEBUTTON-PC\Backup Set 2014-06-15 190002\Backup Files 2014-06-15 190002\Backup files 25.zip"
sh=FDFE6ED587FAF8C5C510D7DE51D0857FE661CB0E ft=0 fh=0000000000000000 vn="Variante von Win32/DomaIQ.BG evtl. unerwünschte Anwendung" ac=I fn="H:\THEBUTTON-PC\Backup Set 2014-06-15 190002\Backup Files 2014-06-15 190002\Backup files 3.zip"
sh=74D7CB801DAF3FF2A706D059378E300DCF6CEF49 ft=0 fh=0000000000000000 vn="Variante von MSIL/Injector.AZM Trojaner" ac=I fn="H:\THEBUTTON-PC\Backup Set 2014-06-15 190002\Backup Files 2014-06-15 190002\Backup files 46.zip"
Code:
ATTFilter Results of screen317's Security Check version 0.99.87 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` avast! Antivirus Antivirus up to date! (On Access scanning disabled!) `````````Anti-malware/Other Utilities Check:````````` Java 7 Update 65 Java version out of Date! Adobe Flash Player 14.0.0.145 Adobe Reader XI Mozilla Thunderbird 15.0. Thunderbird out of Date! Google Chrome 36.0.1985.125 Google Chrome 36.0.1985.143 ````````Process Check: objlist.exe by Laurent```````` Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Malware mbam.exe Malwarebytes Anti-Malware mbamscheduler.exe AVAST Soft `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` |
|
17.08.2014, 12:42
| #4 |
| /// TB-Ausbilder | Internet extrem langsam an Desktop PC. An anderen Geräten normal! Java + Thunderbird updaten. Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter C:\Users\TheButton\AppData\Roaming\GrabIt\Temp\RollerCoaster Tycoon Collection.rar"
EmptyTemp:
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Also Malwaretechnisch hätten wir alles entfernt, wie schauts denn aus mit der Internetgeschwindigkeit ?
__________________ Lerne, zurück zu schlagen und unterstütze uns! TB Akademie | Spende | Lob & Kritik |
|
17.08.2014, 19:26
| #5 |
| | Internet extrem langsam an Desktop PC. An anderen Geräten normal!Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 16-08-2014 04
Ran by TheButton at 2014-08-17 20:15:05 Run:3
Running from C:\Users\TheButton\Downloads
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
C:\Users\TheButton\AppData\Roaming\GrabIt\Temp\RollerCoaster Tycoon Collection.rar"
EmptyTemp:
*****************
C:\Users\TheButton\AppData\Roaming\GrabIt\Temp\RollerCoaster Tycoon Collection.rar => Moved successfully.
EmptyTemp: => Removed 610.4 MB temporary data.
The system needed a reboot.
==== End of Fixlog ====
Zur Zeit funktioniert es  |
|
18.08.2014, 12:40
| #6 |
| /// TB-Ausbilder | Internet extrem langsam an Desktop PC. An anderen Geräten normal! Ok, dann schliessen wir hiermit die Malwareentfernung ab, die Logs sind soweit jetzt sauber. Falls noch Probleme mit dem Internet auftreten, dann schreib am besten im Windows Forum einen neuen Thread. Die Reihenfolge ist hier entscheidend.
Abschließend habe ich noch ein paar Tipps zur Absicherung deines Systems. Ich kann gar nicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti-Viren-Programm und zusätzlicher Schutz
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden. Mozilla Firefox
Performance
Was du vermeiden solltest:
Nun bleibt mir nur noch dir viel Spaß beim sicheren Surfen zu wünschen... ... und vielleicht möchtest du ja das Trojaner-Board unterstützen? Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann.
__________________ --> Internet extrem langsam an Desktop PC. An anderen Geräten normal! |
|
18.08.2014, 16:58
| #7 |
| | Internet extrem langsam an Desktop PC. An anderen Geräten normal! Alles erledigt. Vielen vielen Dank!! |
|
| Themen zu Internet extrem langsam an Desktop PC. An anderen Geräten normal! |
| anderen, anderer, befall, desktop, forum, freundin, heute, interne, internet, internetseite, langsam, laptop, lädt, minute, natürlich, nicht mehr, problem, rechner, schnell, schonmal, schädling, seite, seiten, steam, virus |
Hybrid-Darstellung
