Trojaner-Board - Computer hängt sich immer kurzzeitig auf / Windows neuinstalliert

Hallo,

ich habe leider seit einigen Tagen das Problem, dass sich mein Rechner immer wieder aufhängt und sich nur langsam wieder fängt. Ich habe darauf hin mir Mbam runtergeladen und durchlaufen lassen. Daraufhin wurde auch eine Meldung angezeigt mit dem Namen "Boot/Cidox.b". Also versuchte ich diesen Schädling in die Quarantäne zu verschieben und hoffte auf Besserung . Dies geschah jedoch nicht, also dachte ich an eine Windowsneuinstallation. Ich habe alle Partionen über den Windowsinstallationsmodus formatiert und anschließend neu aufgesetzt. Doch das Problem blieb weiterhin bestehen. Somit kann ich leider auch keinen Log mehr vom Antimalwareprogramm liefern.

Ich möchte hier noch einmal kurz ein paar Auffälligkeiten darstellen.

1. Nach kurzen Intervallen lässt sich nichts mehr anwählen
2. Nach dem Drücken von Strg+Alt+Entf habe ich wieder kurzzeitigen Zugriff
3. Bei Chrome wird schon beim Anklicken der Tab gelöscht, ohne das dafür vorgesehene Kreuz zu nutzen.
4. Plötzlich scrolle ich meine Seite herunter ohne den Befehl dafür ausgelöst zu haben.

Code:

defogger_disable by jpshortstuff (23.02.10.1)

Log created at 13:36 on 05/08/2014 (Reloaded)
 

Checking for autostart values...

HKCU\~\Run values retrieved.

HKLM\~\Run values retrieved.
 

Checking for services/drivers...
 
 

-=E.O.F=-

Code:


 

LastRegBack: 2014-08-05 10:58
 

==================== End Of Log ============================

FRST Additions Logfile:

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-08-2014

Ran by Reloaded at 2014-08-05 13:38:20

Running from C:\Users\Reloaded\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 36.0.1985.125 - Google Inc.)

Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden

Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 
 

==================== Restore Points  =========================
 
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {72E77F13-D68C-409D-AA1B-2C9CFE47495E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-08-05] (Google Inc.)

Task: {732BA0B5-CC0D-4AD3-B0C0-02BA1A76D79B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-08-05] (Google Inc.)

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) =============
 

2014-08-05 11:42 - 2014-07-15 11:24 - 08537928 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\pdf.dll

2014-08-05 11:42 - 2014-07-15 11:24 - 00353096 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\ppGoogleNaClPluginChrome.dll

2014-08-05 11:42 - 2014-07-15 11:24 - 01732936 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\ffmpegsumo.dll

2014-08-05 11:42 - 2014-07-15 11:24 - 14664008 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\PepperFlash\pepflashplayer.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
 

==================== EXE Association (whitelisted) =============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 

==================== MSCONFIG/TASK MANAGER disabled items =========
 

(Currently there is no automatic fix for this section.)
 
 

==================== Faulty Device Manager Devices =============
 

Name: 

Description: 

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 

Name: Standardtastatur (PS/2)

Description: Standardtastatur (PS/2)

Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}

Manufacturer: (Standardtastaturen)

Service: i8042prt

Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.

Devices stay in this state if they have been prepared for removal.

After you remove the device, this error disappears.Remove the device, and this error should be resolved.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (08/05/2014 01:30:46 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (08/05/2014 11:12:35 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
 

System errors:

=============

Error: (08/05/2014 01:27:18 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Aufgabenplanung" ist vom Dienst "Windows-Ereignisprotokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1058
 

Error: (08/05/2014 00:08:15 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Aufgabenplanung" ist vom Dienst "Windows-Ereignisprotokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1058
 
 

Microsoft Office Sessions:

=========================

Error: (08/05/2014 01:30:46 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (08/05/2014 11:12:35 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 27%

Total physical RAM: 4095.12 MB

Available physical RAM: 2964.86 MB

Total Pagefile: 8188.43 MB

Available Pagefile: 7011.22 MB

Total Virtual: 8192 MB

Available Virtual: 8191.81 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:596.07 GB) (Free:581.27 GB) NTFS

Drive d: () (Fixed) (Total:0.1 GB) (Free:0.08 GB) NTFS

Drive e: () (Fixed) (Total:368.1 GB) (Free:368 GB) NTFS

Drive g: () (Removable) (Total:7.45 GB) (Free:4.33 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 323EB6B7)

Partition 1: (Active) - (Size=98 GB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=368 GB) - (Type=07 NTFS)
 

========================================================

Disk: 1 (MBR Code: Windows 7 or 8) (Size: 596 GB) (Disk ID: 7448B8B1)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=596 GB) - (Type=07 NTFS)
 

========================================================

Disk: 2 (MBR Code: Windows 7 or 8) (Size: 7 GB) (Disk ID: 00000000)
 

Partition: GPT Partition Type.
 

==================== End Of Log ============================

--- --- ---

[CODE]
GMER Logfile:

Code:

GMER 2.1.19357 - hxxp://www.gmer.net

Rootkit scan 2014-08-05 14:05:24

Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk1\DR1 -> \Device\Ide\IdeDeviceP3T1L0-8 WDC_WD6400AAKS-65A7B0 rev.01.03B01 596,17GB

Running: Gmer-19357.exe; Driver: C:\Users\Reloaded\AppData\Local\Temp\uwdyikog.sys
 
 

---- Threads - GMER 2.1 ----
 

Thread  C:\Windows\System32\svchost.exe [1184:2328]  000007fef6b39688
 

---- EOF - GMER 2.1 ----

--- --- ---

Ich danke schon einmal im Voraus.:dankeschoen: