Hallo,

seit einigen Tagen startet mein Windows langsam ( ist generell langsamer! ) und mit einer Auflösung von 800x600 ich wüsste echt nicht was ich gemacht hab das das auf einmal so ist

CCleaner hab ich schon durchlaufen lassen, war danach aber immernoch so.

hijackthis:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:17:48, on 21.06.2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18248)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Users\*****\Desktop\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = h**p://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = h**p://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = h**p://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = h**p://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = h**p://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = h**p://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Gears Helper - {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - C:\Program Files (x86)\Google\Google Gears\Internet Explorer\0.5.23.0\gears.dll
O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
O3 - Toolbar: TextAloud - {F053C368-5458-45B2-9B4D-D8914BDDDBFF} - C:\PROGRA~2\TEXTAL~1\TAForIE.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [P17RunE] RunDll32 P17RunE.dll,RunDLLEntry
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [Steam] "c:\program files (x86)\steam\steam.exe" -silent
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O8 - Extra context menu item: Download All by FlashGet - C:\Program Files (x86)\FlashGet\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - C:\Program Files (x86)\FlashGet\jc_link.htm
O9 - Extra button: (no name) - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files (x86)\Google\Google Gears\Internet Explorer\0.5.23.0\gears.dll
O9 - Extra 'Tools' menuitem: &Gears Settings - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files (x86)\Google\Google Gears\Internet Explorer\0.5.23.0\gears.dll
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~2\FlashGet\flashget.exe (file missing)
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~2\FlashGet\flashget.exe (file missing)
O13 - Gopher Prefix: 
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\System32\TUProgSt.exe,-1 (TuneUp.ProgramStatisticsSvc) - Unknown owner - C:\Windows\System32\TUProgSt.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 6857 bytes
         

uninstall_list:

2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
3DMark Vantage
3DMark03
3DMark06
7 Wonders 2
Adobe AIR
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader 9.1.1 - Deutsch
Age of Chivalry Dedicated Server
AGEIA PhysX v7.09.13
AMD OverDrive
America's Army 3
Apple Software Update
Audacity 1.3.7 (Unicode)
Autodesk Backburner 2008.1
AutoHotkey 1.0.48.02
avast! Antivirus
Battlefield Heroes
Battleforge Demo
Beyond Good and Evil
Braid Demo
Camtasia Studio 5
Catalyst Control Center - Branding
CCleaner (remove only)
Choice Guard
Creative-Audiokonsole
Crystal Reports Basic for Visual Studio 2008
D.I.P.R.I.P. Dedicated Server
Dark Messiah Might and Magic Dedicated Server
Dark Messiah Might and Magic Multi-Player
Dark Messiah Might and Magic Single Player
Darwinia
dBpoweramp [Arrange Audio] Codec
dBpoweramp [Audio Info] Codec
dBpoweramp [Channel Split] Codec
dBpoweramp [ID Tag Update] Codec
dBpoweramp [Length Split] Codec
dBpoweramp [Multi Encoder] Codec
dBpoweramp [ReplayGain] Codec
dBpoweramp [Tag From Filename] Codec
dBpoweramp DSP Effects
dBpoweramp Music Converter
Dead Space™
Defense Grid: The Awakening
Dev-C++ 5 beta 9 release (4.9.9.2)
DivX Codec
DivX Plus DirectShow Filters
DivX Web Player
Dystopia Dedicated Server
Eets
Empire: Total War Demo
Eternal-Silence Dedicated Server
EVE Online
Far Cry
Far Cry 2
FastImageResizer (remove only)
FileZilla Client 3.2.4
Fraps (remove only)
Freedom Force vs. the 3rd Reich - Demo
Futuremark SystemInfo
GCFScape 1.3.1
Google Gears
Google Update Helper
Grand Theft Auto IV
Gravitron 2
GRID
GTR Evolution Demo Dedicated Server
GUILD WARS
Hamachi 1.0.3.0
Hauppauge German Help Files and Resources
Hauppauge MCE XP/Vista Software Encoder (2.0.26057)
Hauppauge WinTV
Hauppauge WinTV DVB-T EPG Service
Hauppauge WinTV Infrared Remote
Hauppauge WinTV IR Blaster
Hauppauge WinTV Radio
Hauppauge WinTV Scheduler
Hauppauge WinTV Soft PVR
HijackThis 2.0.2
HLSW v1.3.1
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Microsoft Visual Studio 2008 Professional Edition - ENU (KB952241)
Hotfix for Office (KB950278)
Hypercube version 2
I-Fluid
IL-2 Sturmovik: 1946
Insurgency Dedicated Server
InterVideo FilterSDK for Hauppauge
Java Platform, Enterprise Edition 5 SDK
Java(TM) 6 Update 7
Killing Floor SDK
LADSPA_plugins-win-0.4.15
LAME v3.98.2 for Audacity
Left 4 Dead
Left 4 Dead Authoring Tools Beta
Left 4 Dead Dedicated Server
Light of Altair Demo
LogonStudio Vista
Luxor 2
Magic Bullet Editors 2.0 Vegas
Malwarebytes' Anti-Malware
Melodyne 3.2 Demo
Messenger Plus! Live
Microsoft Document Explorer 2008
Microsoft Document Explorer 2008
Microsoft Games for Windows - LIVE 
Microsoft Games for Windows - LIVE Redistributable
Microsoft MSDN 2005 Express Edition - DEU
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Visual Web Developer 2007
Microsoft Office Visual Web Developer MUI (English) 2007
Microsoft Office Word Viewer 2003
Microsoft Silverlight
Microsoft SQL Server 2005
Microsoft SQL Server 2005 Express Edition (SQLEXPRESS)
Microsoft SQL Server 2005 Tools Express Edition
Microsoft SQL Server 2008 Management Objects
Microsoft SQL Server Compact 3.5 for Devices ENU
Microsoft SQL Server Compact 3.5 SP1 Design Tools English
Microsoft SQL Server Compact 3.5 SP1 English
Microsoft SQL Server Database Publishing Wizard 1.3
Microsoft SQL Server Setup Support Files (English)
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ Compilers 2008 Standard Edition - enu - x86
Microsoft Visual Studio 2005 Tools for Office Runtime
Microsoft Visual Studio 2008 Professional Edition - ENU
Microsoft Visual Studio 2008 Professional Edition - ENU Service Pack 1 (KB945140)
Microsoft Visual Studio 2008 Remote Debugger - ENU Service Pack 1 (KB945140)
Microsoft Visual Studio Web Authoring Component
Monster Trucks Nitro
Mozilla Firefox (3.0.11)
MSDN Library for Visual Studio 2008 - ENU
MSDN Library for Visual Studio 2008 - ENU
MSVCRT
MSXML 4.0 SP2 (KB954430)
Multiwinia
NewBlue 3D Explosions for Vegas
NewBlue 3D Transformations for Vegas
NewBlue Art Blends 2.0 for Vegas
NewBlue Art Effects 2.0 for Vegas
NewBlue Film Effects for Vegas
NewBlue Motion Blends 2.0 for Vegas
NewBlue Motion Effects 2.0 for Vegas
Nexus - The Jupiter Incident
Nullsoft Install System
Obsidian Conflict Beta 1.34
Oddworld: Abe's Exoddus
Oddworld: Abe's Oddysee
OpenAL
Philips SPC210NC Webcam 
Philips VLounge
Plants Vs Zombies Demo
PolderbitS Sound Recorder und Editor (32-bit Ausgabe)
Port Royale 2
PunkBuster Services
PuTTY version 0.60
QuickTime
RACE 07 Demo
Raycatcher Demo
Realtek 8169, 8168, 8101E and 8102E Ethernet Network Card Driver for Windows Vista
Revo Uninstaller 1.83
Rockstar Games Social Club
Security Update for 2007 Microsoft Office System (KB951550)
Security Update for 2007 Microsoft Office System (KB951944)
Security Update for Microsoft Office system 2007 (KB954326)
Serif MoviePlus X3
Serif MoviePlus X3 Resources
Sony Vegas Pro 8.0
SpiceMASTER 2.5 PRO for Vegas
SPORE™
Spotify
SQL Server System CLR Types
StarCodec
STCC Demo Dedicated Server
Steam
Sweet Home 3D version 1.8
Sword of the Stars - Argos Naval Yard Expansion
Sword of the Stars:  Ultimate Collection
Synergy Dedicated Server
Team Fortress 2 Dedicated Server
TextAloud
The Ship Dedicated Server
Tom Clancy's H.A.W.X - Demo
Trials 2: Second Edition
TuneUp Utilities 2009
Tweetr
Universe at War Earth Assault (DEMO)
Universe at War Earth Assault (DEMO)
Universe at War: Earth Assault
Unreal Tournament 3
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft Office 2007 Help for Common Features (KB963673)
Update for Microsoft Office Script Editor Help (KB963671)
Update for Microsoft Visual Studio Web Authoring Component (KB945140)
Uplink
VC Runtimes MSI
VC80CRTRedist - 8.0.50727.762
Visual C++ 2008 IA64 Runtime - (v9.0.30729)
Visual C++ 2008 IA64 Runtime - v9.0.30729.01
Visual C++ 2008 x64 Runtime - (v9.0.30729)
Visual C++ 2008 x64 Runtime - v9.0.30729.01
Visual C++ 2008 x86 Runtime - (v9.0.30729)
Visual C++ 2008 x86 Runtime - v9.0.30729.01
Visual Studio 2005 Tools for Office Second Edition Runtime
Visual Studio Tools for the Office system 3.0 Runtime
Visual Studio Tools for the Office system 3.0 Runtime
Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258)
VTFEdit 1.2.5
VTPlus32 für WinTV (German)
Warhammer 40,000: Dawn of War II - Single-player Demo
WhiteCap
Windows Live Anmelde-Assistent
Windows Live Call
Windows Live Communications Platform
Windows Live Essentials
Windows Live Essentials
Windows Live Messenger
Windows Live-Uploadtool
Windows Media Player Firefox Plugin
Windows Mobile 5.0 SDK R2 for Pocket PC
Windows Mobile 5.0 SDK R2 for Smartphone
WinRAR archiver
WinSCP 4.1.9
World of Goo
World of Warcraft FREE Trial
Xfire (remove only)
Xilisoft DVD Ripper Platinum 5
Zeno Clash Demo
Zombie Panic! Source
         

Der Log von Malwarebytes' kommt sobalt er fertig ist

Mit freundlichen Grüßen,
bryan226

Malwarebytes':

Malwarebytes' Anti-Malware 1.37
Datenbank Version: 2265
Windows 6.0.6001 Service Pack 1

21.06.2009 13:28:55
mbam-log-2009-06-21 (13-28-55).txt

Scan-Methode: Vollständiger Scan (C:\|D:\|)
Durchsuchte Objekte: 572278
Laufzeit: 1 hour(s), 5 minute(s), 8 second(s)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 1

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
d:\system volume information\_restore{d461777f-ae6a-48e7-8c91-17b871dfb14c}\RP570\A0166029.dll (Worm.AutoRun) -> Quarantined and deleted successfully.
         

*push*/(sorry falls pushen hier nicht erlaubt ist )

Das köntte durchaus was mit dem Worm zutun haben.
Aber ich hatte das selbe Problem schon einmal und es lag an der Grafikkarte.
Probier einfach mal eine neuinstalation deines Grafikkarten Treibers.
Ansonsten lass dir nochmal von den Kompetentzlern helfen , denn mit dem Worm ist nicht zu spaßen und im HJT log kommt mir auch einiges verdächtig vor...

Grüße Space

PS: Achja die Worm datei hat sich warscheinlich wieder hergestellt da sie im system volume information hängt.
Deaktiviere am besten noch einmal schnell die Systemwiederherstellung ,Neustart , MBAM nochmal laufen lassen, Funde löschen lassen, Neustart , Systemwiederherstellung wieder Aktivieren , Neustart.

@Space
Wie wärs wenn du ihm auch ne Seite angibst wo er nachlesen kann wie das geht. Vlt weiß er das ja nicht.
Also Aktivieren und Deaktivieren der Systemwiederherstellung in Windows XP

Hab auf die schnelle keine gefunden :P

Lol xD
Is ne Sache von 10 sek xD

@.keNNy#

Habe Vista, dein Link hat mir nicht viel geholfen :P

Habe das gemacht was du gesagt hast space26, hat nichts weiter gefunden

Hat noch jemand ideen? Das ist ziemlich nervig mit der Auflösung :S

PS: Der Aktuelle Treiber ist installiert

DrWeb.csv:

ResultReporter.exe;C:\Program Files (x86)\Steam\steamapps\*****\race07 demo;Trojan.DownLoad.30694;Gelöscht.;
17434cd0-439c09e8;D:\Backup's\*****\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\16;BackDoor.IRC.Sdbot.4636;Gelöscht.;;
         

Nach stunden langem warten hat er meine fast 2 TB gescannt :S

Ist aber immernoch so mit der auflösung

*/*push*/*

%!% .push. %!%