Hallo,
zunächst möchte ich mich schonmal kurz bedanken, dass ihr euch hier soviel Zeit nehmt und euch um die Vierenprobleme anderer User kümmert!
Ich fang einfach mal an:
Problembeschreibung: Ich fange gerade an meine Diplomarbeit zu schreiben und habe mir dazu auch einige Programme (Literaturverwaltung, Mind Map, Vorleseprog etc.) installiert. Gestern hat dann mein Antivir Alarm geschlagen und den Trojaner (?) TR/Cryp.XPACK.Gen gemeldet. Die infizierten Dateien wurden sofort in Quarantäne verschoben.
Seit dem ist mein Laptop jedoch viel langsamer als sonst. Das Hochfahren dauert länger und auch das öffnen / hin und her wechseln von Programmen. Sonst gibt es bisher keine Probleme.
Da ich am Montag in dem Betrieb Anfange für den ich die Diplomarbeit schreibe, möchte ich natürlich einen "sauberen" Laptop haben. Nicht dass ich denen noch über meinen USB Stick irgendwas einschleppe.
Es wäre daher super nett wenn ihr mir sagen könntet, ob ich die Sache ohne Formatierung beheben kann!
Hier die geforderten Logs:
Zitat:
defogger_disable by jpshortstuff (23.02.10.1)
Log created at 17:11 on 31/03/2012 (Medion)
Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
Checking for services/drivers...
-=E.O.F=-
|
DDS:
Zitat:
.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421
Run by Medion at 17:24:53 on 2012-03-31
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.3893.1476 [GMT 2:00]
.
AV: Avira Desktop *Enabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Enabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\ShrewSoft\VPN Client\dtpd.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files\ShrewSoft\VPN Client\iked.exe
C:\Program Files\ShrewSoft\VPN Client\ipsecd.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
C:\Program Files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe
c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\System32\igfxpers.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files (x86)\RocketDock\RocketDock.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files (x86)\Launch Manager\HotkeyApp.exe
C:\Program Files (x86)\Launch Manager\OSD.exe
C:\Program Files (x86)\Launch Manager\WButton.exe
C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Launch Manager\WisLMSvc.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\DllHost.exe
C:\Program Files (x86)\Citavi 3\bin\Citavi.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\svchost.exe -k SDRSVC
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Users\Medion\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Windows\system32\msiexec.exe
C:\Windows\System32\svchost.exe -k swprv
C:\program files (x86)\avira\antivir desktop\avcenter.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\conhost.exe
C:\Windows\SysWOW64\cscript.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.aldi.com
uDefault_Page_URL = hxxp://www.aldi.com
mWinlogon: Userinit=userinit.exe
BHO: ContributeBHO Class: {074c1dc5-9320-4a9a-947d-c042949c6216} - C:\Program Files (x86)\Adobe\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: SwissAcademic.Citavi.Picker.IEPicker: {609d670f-b735-4da7-ac6d-f3bd358e325e} - mscoree.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Office Document Cache Handler: {b4f3a835-0e21-4959-ba22-42b3008e02ff} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
TB: Contribute Toolbar: {517bdde4-e3a7-4570-b21e-2b52b6139fc7} - C:\Program Files (x86)\Adobe\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll
uRun: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
uRun: [RocketDock] "C:\Program Files (x86)\RocketDock\RocketDock.exe"
uRun: [AdobeBridge]
mRun: [HotkeyApp] "C:\Program Files (x86)\Launch Manager\HotkeyApp.exe"
mRun: [LMgrVolOSD] "C:\Program Files (x86)\Launch Manager\OSD.exe"
mRun: [LMgrOSD] "C:\Program Files (x86)\Launch Manager\OSDCtrl.exe"
mRun: [Wbutton] "C:\Program Files (x86)\Launch Manager\Wbutton.exe"
mRun: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
mRun: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
mRun: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
mRun: [UnlockerAssistant] "C:\Program Files (x86)\Unlocker\UnlockerAssistant.exe"
mRun: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
mRun: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
mRunOnce: [ Malwarebytes Anti-Malware ] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
StartupFolder: C:\Users\Medion\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\Dropbox.lnk - C:\Users\Medion\AppData\Roaming\Dropbox\bin\Dropbox.exe
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: An OneNote s&enden - C:\PROGRA~2\MICROS~2\Office14\ONBttnIE.dll/105
IE: Nach Microsoft E&xcel exportieren - C:\PROGRA~2\MICROS~2\Office14\EXCEL.EXE/3000
IE: {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - hxxp://rover.ebay.com/rover/1/707-37276-17534-31/4
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
IE: {619D670F-B735-4da7-AC6D-F3BD358E325E} - {609D670F-B735-4da7-AC6D-F3BD358E325E} - mscoree.dll
IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
TCP: DhcpNameServer = 192.168.1.1
TCP: Interfaces\{2EF10FBF-411D-4C8F-B9AD-23F13842F55B} : NameServer = 193.174.193.80
TCP: Interfaces\{B87CFC5D-C9D8-40D5-8E3F-3DA2CB49407E} : DhcpNameServer = 82.212.62.62 192.168.123.254
TCP: Interfaces\{E4BEC6CA-6CB9-41F2-814D-28C04FDB7390} : DhcpNameServer = 192.168.1.1
TCP: Interfaces\{E4BEC6CA-6CB9-41F2-814D-28C04FDB7390}\142736F627D2647343731393 : DhcpNameServer = 192.168.2.1
TCP: Interfaces\{E4BEC6CA-6CB9-41F2-814D-28C04FDB7390}\14C4943454D275C414E42313 : DhcpNameServer = 192.168.1.1
TCP: Interfaces\{E4BEC6CA-6CB9-41F2-814D-28C04FDB7390}\5416379724F687D2242403440343 : DhcpNameServer = 192.168.2.1
TCP: Interfaces\{EAC909A7-8AE8-4073-8B52-B8ECE46C3265} : DhcpNameServer = 82.212.62.62 192.168.123.254
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL
{074C1DC5-9320-4A9A-947D-C042949C6216}
{18DF081C-E8AD-4283-A596-FA578C2EBDC3}
{609D670F-B735-4da7-AC6D-F3BD358E325E}
{72853161-30C5-4D22-B7F9-0BBC1D38A37E}
{9030D464-4C02-4ABF-8ECC-5164760863C6}
{B4F3A835-0E21-4959-BA22-42B3008E02FF}
{DBC80044-A445-435b-BC74-9C25C1C588A9}
{517BDDE4-E3A7-4570-B21E-2B52B6139FC7}
mRun-x64: [HotkeyApp] "C:\Program Files (x86)\Launch Manager\HotkeyApp.exe"
mRun-x64: [LMgrVolOSD] "C:\Program Files (x86)\Launch Manager\OSD.exe"
mRun-x64: [LMgrOSD] "C:\Program Files (x86)\Launch Manager\OSDCtrl.exe"
mRun-x64: [Wbutton] "C:\Program Files (x86)\Launch Manager\Wbutton.exe"
mRun-x64: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
mRun-x64: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
mRun-x64: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
mRun-x64: [UnlockerAssistant] "C:\Program Files (x86)\Unlocker\UnlockerAssistant.exe"
mRun-x64: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
mRun-x64: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
mRunOnce-x64: [ Malwarebytes Anti-Malware ] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
IE-X64: {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - hxxp://rover.ebay.com/rover/1/707-37276-17534-31/4
IE-X64: {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - hxxp://rover.ebay.com/rover/1/707-37276-17534-31/4
AppInit_DLLs-X64: C:\Windows\SysWOW64\nvinit.dll
SEH-X64: {B5A7F190-DDA6-4420-B3BA-52453494E6CD}: Groove GFS Stub Execution Hook
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\Medion\AppData\Roaming\Mozilla\Firefox\Profiles\sg5phlfu.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.gmx.net/
FF - plugin: C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL
FF - plugin: C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL
FF - plugin: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll
FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll
FF - plugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrlui.dll
FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npwachk.dll
FF - plugin: C:\Program Files (x86)\Nitro PDF\Reader 2\npdf.dll
FF - plugin: C:\Program Files (x86)\Nitro PDF\Reader 2\npnitromozilla.dll
FF - plugin: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
FF - plugin: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_228.dll
.
============= SERVICES / DRIVERS ===============
.
R0 nvpciflt;nvpciflt;C:\Windows\system32\DRIVERS\nvpciflt.sys --> C:\Windows\system32\DRIVERS\nvpciflt.sys [?]
R0 PxHlpa64;PxHlpa64;C:\Windows\system32\Drivers\PxHlpa64.sys --> C:\Windows\system32\Drivers\PxHlpa64.sys [?]
R1 avkmgr;avkmgr;C:\Windows\system32\DRIVERS\avkmgr.sys --> C:\Windows\system32\DRIVERS\avkmgr.sys [?]
R1 vflt;Shrew Soft Lightweight Filter;C:\Windows\system32\DRIVERS\vfilter.sys --> C:\Windows\system32\DRIVERS\vfilter.sys [?]
R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\system32\DRIVERS\vwififlt.sys --> C:\Windows\system32\DRIVERS\vwififlt.sys [?]
R2 AntiVirSchedulerService;Avira Planer;C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [2011-11-1 86224]
R2 AntiVirService;Avira Echtzeit Scanner;C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [2011-11-1 110032]
R2 avgntflt;avgntflt;C:\Windows\system32\DRIVERS\avgntflt.sys --> C:\Windows\system32\DRIVERS\avgntflt.sys [?]
R2 dtpd;ShrewSoft DNS Proxy Daemon;C:\Program Files\ShrewSoft\VPN Client\dtpd.exe -service --> C:\Program Files\ShrewSoft\VPN Client\dtpd.exe -service [?]
R3 HECIx64;Intel(R) Management Engine Interface;C:\Windows\system32\DRIVERS\HECIx64.sys --> C:\Windows\system32\DRIVERS\HECIx64.sys [?]
R3 Impcd;Impcd;C:\Windows\system32\DRIVERS\Impcd.sys --> C:\Windows\system32\DRIVERS\Impcd.sys [?]
R3 IntcDAud;Intel(R) Display-Audio;C:\Windows\system32\DRIVERS\IntcDAud.sys --> C:\Windows\system32\DRIVERS\IntcDAud.sys [?]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;C:\Windows\system32\DRIVERS\L1C62x64.sys --> C:\Windows\system32\DRIVERS\L1C62x64.sys [?]
R3 MBAMProtector;MBAMProtector;\??\C:\Windows\system32\drivers\mbam.sys --> C:\Windows\system32\drivers\mbam.sys [?]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;C:\Windows\system32\DRIVERS\nusb3hub.sys --> C:\Windows\system32\DRIVERS\nusb3hub.sys [?]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;C:\Windows\system32\DRIVERS\nusb3xhc.sys --> C:\Windows\system32\DRIVERS\nusb3xhc.sys [?]
R3 rtl8192se;Realtek Wireless LAN 802.11n PCI-E NIC NT Driver;C:\Windows\system32\DRIVERS\rtl8192se.sys --> C:\Windows\system32\DRIVERS\rtl8192se.sys [?]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-19 138576]
S2 gupdate;Google Update Service (gupdate);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-5-24 136176]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-3-29 253600]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;C:\Windows\system32\Drivers\RtsUStor.sys --> C:\Windows\system32\Drivers\RtsUStor.sys [?]
S3 RTL8167;Realtek 8167 NT Driver;C:\Windows\system32\DRIVERS\Rt64win7.sys --> C:\Windows\system32\DRIVERS\Rt64win7.sys [?]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsusbflt.sys --> C:\Windows\system32\drivers\tsusbflt.sys [?]
S3 vnet;Shrew Soft Virtual Adapter;C:\Windows\system32\DRIVERS\virtualnet.sys --> C:\Windows\system32\DRIVERS\virtualnet.sys [?]
.
=============== Created Last 30 ================
.
2012-03-31 14:51:46 -------- d-----w- C:\Users\Medion\AppData\Roaming\Malwarebytes
2012-03-31 14:51:39 23152 ----a-w- C:\Windows\System32\drivers\mbam.sys
2012-03-31 14:51:39 -------- d-----w- C:\ProgramData\Malwarebytes
2012-03-31 14:51:38 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2012-03-30 12:41:13 -------- d-----w- C:\Users\Medion\AppData\Roaming\e-academy Inc
2012-03-30 12:41:13 -------- d-----w- C:\Users\Medion\AppData\Local\e-academy Inc
2012-03-30 11:23:45 -------- d-----w- C:\Program Files (x86)\Common Files\L&H
2012-03-30 11:22:42 57436 ----a-w- C:\Windows\DASShp.dll
2012-03-30 11:22:42 217174 ----a-w- C:\Program Files (x86)\Common Files\Microsoft Shared\ClearType\ctras.dll
2012-03-30 11:22:42 -------- d-----w- C:\Program Files (x86)\Microsoft Reader
2012-03-30 11:22:39 77824 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Engine\6\Intel 32\ctor.dll
2012-03-30 11:22:39 602244 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Engine\6\Intel 32\IKernel.exe
2012-03-30 11:22:39 32768 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Engine\6\Intel 32\objectps.dll
2012-03-30 11:22:39 221184 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\IScript\iscript.dll
2012-03-30 11:22:39 221184 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Engine\6\Intel 32\iuser.dll
2012-03-30 08:08:06 -------- d-----w- C:\Users\Medion\AppData\Local\assembly
2012-03-30 06:57:31 8669240 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{F20FBEA8-3B20-4129-A9EA-E5A5674BFBF0}\mpengine.dll
2012-03-29 20:27:25 -------- d-----w- C:\Users\Medion\AppData\Roaming\Thinstall
2012-03-29 18:10:24 -------- d-----w- C:\Users\Medion\.freemind
2012-03-29 15:58:13 8767136 ----a-w- C:\Windows\SysWow64\FlashPlayerInstaller.exe
2012-03-29 15:38:09 418464 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe
2012-03-29 11:21:58 -------- d-----w- C:\Program Files (x86)\XMind
2012-03-29 11:12:50 -------- d-----w- C:\Users\Medion\AppData\Local\Mindjet
2012-03-29 11:11:47 6656 ----a-w- C:\Windows\System32\pxc35pm.dll
2012-03-29 11:10:02 -------- d-----w- C:\Program Files (x86)\Mindjet
2012-03-29 11:08:02 -------- d-----w- C:\Users\Medion\AppData\Local\{30CD70D3-9EBA-4E1E-8C2B-34AE86533BD9}
2012-03-25 16:53:35 -------- d-----w- C:\ProgramData\Gibraltar
2012-03-25 15:55:16 -------- d-----w- C:\Users\Medion\AppData\Roaming\Swiss Academic Software
2012-03-25 15:53:10 -------- d-----w- C:\Program Files (x86)\Citavi 3
2012-03-25 15:49:43 -------- d-----w- C:\ProgramData\Swiss Academic Software
2012-03-20 11:18:38 -------- d-----w- C:\Users\Medion\AppData\Roaming\PlagiarismFinder
2012-03-20 11:18:38 -------- d-----w- C:\ProgramData\PlagiarismFinder
2012-03-20 11:18:36 870682 ----a-w- C:\Windows\PlagiarismFinder 2.0 Uninstaller.exe
2012-03-20 11:18:35 -------- d-----w- C:\Program Files (x86)\PlagiarismFinder 2.0
2012-03-18 11:17:17 592824 ----a-w- C:\Program Files (x86)\Mozilla Firefox\gkmedias.dll
2012-03-18 11:17:17 44472 ----a-w- C:\Program Files (x86)\Mozilla Firefox\mozglue.dll
2012-03-14 13:29:17 5559152 ----a-w- C:\Windows\System32\ntoskrnl.exe
2012-03-14 13:29:17 3968368 ----a-w- C:\Windows\SysWow64\ntkrnlpa.exe
2012-03-14 13:29:16 3913584 ----a-w- C:\Windows\SysWow64\ntoskrnl.exe
2012-03-14 09:08:17 3145728 ----a-w- C:\Windows\System32\win32k.sys
2012-03-14 09:08:16 1544192 ----a-w- C:\Windows\System32\DWrite.dll
2012-03-14 09:08:16 1077248 ----a-w- C:\Windows\SysWow64\DWrite.dll
2012-03-14 09:07:59 9216 ----a-w- C:\Windows\System32\rdrmemptylst.exe
2012-03-14 09:07:59 77312 ----a-w- C:\Windows\System32\rdpwsx.dll
2012-03-14 09:07:59 149504 ----a-w- C:\Windows\System32\rdpcorekmts.dll
2012-03-14 09:07:58 826880 ----a-w- C:\Windows\SysWow64\rdpcore.dll
2012-03-14 09:07:58 210944 ----a-w- C:\Windows\System32\drivers\rdpwd.sys
2012-03-14 09:07:58 1031680 ----a-w- C:\Windows\System32\rdpcore.dll
2012-03-14 09:07:57 23552 ----a-w- C:\Windows\System32\drivers\tdtcp.sys
2012-03-13 17:27:25 -------- d-----w- C:\Windows\SysWow64\Wat
2012-03-13 17:27:25 -------- d-----w- C:\Windows\System32\Wat
2012-03-12 21:59:27 -------- d-----w- C:\Program Files\VideoLAN
2012-03-12 12:54:22 -------- d-----w- C:\Users\Medion\Citrix
2012-03-12 11:14:56 30200 ----a-w- C:\Windows\System32\nitrolocalmon2.dll
2012-03-12 11:14:56 18424 ----a-w- C:\Windows\System32\nitrolocalui2.dll
2012-03-12 11:14:52 -------- d-----w- C:\Program Files\Common Files\Nitro PDF
2012-03-12 11:14:51 -------- d-----w- C:\Program Files (x86)\Nitro PDF
2012-03-12 11:14:51 -------- d-----w- C:\Program Files (x86)\Common Files\Nitro PDF
2012-03-12 11:13:14 -------- d-----w- C:\Users\Medion\AppData\Roaming\Downloaded Installations
2012-03-09 12:52:46 -------- d-----w- C:\Program Files\ShrewSoft
2012-03-09 12:49:56 -------- d-----w- C:\Program Files (x86)\VPN_Client_FH_Kempten
2012-03-07 18:11:24 -------- d-----w- C:\NVIDIA
2012-03-07 17:10:18 -------- d-----w- C:\Medion
2012-03-07 16:59:35 -------- d-----w- C:\Program Files (x86)\Unlocker
2012-03-07 13:30:08 -------- d-----w- C:\Windows\pss
2012-03-07 11:35:02 -------- d-----w- C:\Windows\SysWow64\wbem\en-US
2012-03-07 11:34:57 -------- d-----w- C:\Windows\System32\wbem\en-US
.
==================== Find3M ====================
.
2012-03-29 15:58:24 70304 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2012-02-23 07:18:36 279656 ------w- C:\Windows\System32\MpSigStub.exe
2012-02-10 03:14:04 6074176 ----a-w- C:\Windows\System32\nvcpl.dll
2012-02-10 03:14:01 3089728 ----a-w- C:\Windows\System32\nvsvc64.dll
2012-02-10 03:07:03 2561856 ----a-w- C:\Windows\System32\nvsvcr.dll
2012-02-10 03:07:00 889664 ----a-w- C:\Windows\System32\nvvsvc.exe
2012-02-10 03:07:00 849728 ----a-w- C:\Windows\System32\nv3dappshext.dll
2012-02-10 03:07:00 63296 ----a-w- C:\Windows\System32\nvshext.dll
2012-02-10 03:07:00 55616 ----a-w- C:\Windows\System32\nv3dappshextr.dll
2012-02-10 03:07:00 118080 ----a-w- C:\Windows\System32\nvmctray.dll
2012-02-10 03:05:59 2497985 ----a-w- C:\Windows\System32\nvcoproc.bin
2012-02-09 19:05:44 416064 ----a-w- C:\Windows\SysWow64\nvStreaming.exe
2012-01-14 12:05:32 175616 ----a-w- C:\Windows\System32\msclmd.dll
2012-01-14 12:05:32 152576 ----a-w- C:\Windows\SysWow64\msclmd.dll
2012-01-10 21:43:30 167704 ----a-w- C:\Windows\System32\igfxtray.exe
2012-01-10 21:43:28 510232 ----a-w- C:\Windows\System32\igfxsrvc.exe
2012-01-10 21:43:26 417560 ----a-w- C:\Windows\System32\igfxpers.exe
2012-01-10 21:43:20 239896 ----a-w- C:\Windows\System32\igfxext.exe
2012-01-10 21:43:08 4379416 ----a-w- C:\Windows\System32\GfxUI.exe
2012-01-10 21:43:08 392984 ----a-w- C:\Windows\System32\hkcmd.exe
2012-01-10 21:43:06 184600 ----a-w- C:\Windows\System32\difx64.exe
2012-01-10 21:37:38 90112 ----a-w- C:\Windows\System32\igfxCoIn_v2622.dll
2012-01-10 21:28:32 8313856 ----a-w- C:\Windows\System32\igdumd64.dll
2012-01-10 21:28:18 12311904 ----a-w- C:\Windows\System32\drivers\igdkmd64.sys
2012-01-10 21:27:26 867020 ----a-w- C:\Windows\SysWow64\igkrng575.bin
2012-01-10 21:27:26 867020 ----a-w- C:\Windows\System32\igkrng575.bin
2012-01-10 21:27:26 128204 ----a-w- C:\Windows\SysWow64\igcompkrng575.bin
2012-01-10 21:27:26 128204 ----a-w- C:\Windows\System32\igcompkrng575.bin
2012-01-10 21:27:26 105608 ----a-w- C:\Windows\SysWow64\igfcg575m.bin
2012-01-10 21:27:26 105608 ----a-w- C:\Windows\System32\igfcg575m.bin
2012-01-10 21:18:36 6323712 ----a-w- C:\Windows\SysWow64\igdumd32.dll
2012-01-10 21:12:26 581120 ----a-w- C:\Windows\SysWow64\igdumdx32.dll
2012-01-10 21:06:22 9528832 ----a-w- C:\Windows\System32\igd10umd64.dll
2012-01-10 20:55:08 7988224 ----a-w- C:\Windows\SysWow64\igd10umd32.dll
2012-01-10 20:42:26 18653696 ----a-w- C:\Windows\System32\ig4icd64.dll
2012-01-10 20:29:54 13904384 ----a-w- C:\Windows\SysWow64\ig4icd32.dll
2012-01-10 20:19:58 378368 ----a-w- C:\Windows\System32\igfxTMM.dll
2012-01-10 20:19:52 28672 ----a-w- C:\Windows\System32\igfxexps.dll
2012-01-10 20:19:42 62464 ----a-w- C:\Windows\System32\igfxsrvc.dll
2012-01-10 20:19:14 110080 ----a-w- C:\Windows\System32\hccutils.dll
2012-01-10 20:19:06 4096 ----a-w- C:\Windows\System32\IGFXDEVLib.dll
2012-01-10 20:19:06 390656 ----a-w- C:\Windows\System32\igfxdev.dll
2012-01-10 20:19:06 146432 ----a-w- C:\Windows\System32\gfxSrvc.dll
2012-01-10 20:18:36 285696 ----a-w- C:\Windows\System32\igfxrenu.lrc
2012-01-10 20:18:32 9014784 ----a-w- C:\Windows\System32\igfxress.dll
2012-01-10 20:18:32 142336 ----a-w- C:\Windows\System32\igfxdo.dll
2012-01-10 20:15:16 24576 ----a-w- C:\Windows\SysWow64\igfxexps32.dll
2012-01-10 20:14:34 294400 ----a-w- C:\Windows\SysWow64\igfxdv32.dll
2012-01-10 20:12:12 98304 ----a-w- C:\Windows\SysWow64\iglhcp32.dll
2012-01-10 20:12:12 98304 ----a-w- C:\Windows\System32\iglhcp64.dll
2012-01-10 20:12:12 94208 ----a-w- C:\Windows\System32\IccLibDll_x64.dll
2012-01-10 20:12:12 376832 ----a-w- C:\Windows\SysWow64\iglhsip32.dll
2012-01-10 20:12:12 376832 ----a-w- C:\Windows\System32\iglhsip64.dll
2012-01-10 20:12:12 2177536 ----a-w- C:\Windows\System32\igfxcmjit64.dll
2012-01-10 20:12:12 171520 ----a-w- C:\Windows\SysWow64\igfxcmrt32.dll
2012-01-10 20:12:12 1663488 ----a-w- C:\Windows\SysWow64\igfxcmjit32.dll
2012-01-10 20:12:12 148480 ----a-w- C:\Windows\System32\igfxcmrt64.dll
2012-01-04 10:44:20 509952 ----a-w- C:\Windows\System32\ntshrui.dll
2012-01-04 08:58:41 442880 ----a-w- C:\Windows\SysWow64\ntshrui.dll
.
============= FINISH: 17:27:32,41 ===============
|
Attach:
Zitat:
.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-08-26.01)
.
Microsoft Windows 7 Home Premium
Boot Device: \Device\HarddiskVolume1
Install Date: 24.05.2011 15:36:20
System Uptime: 31.03.2012 16:40:38 (1 hours ago)
.
Motherboard: N/A | | M10B3
Processor: Intel(R) Core(TM) i3 CPU M 390 @ 2.67GHz | CPU 1 | 2660/532mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 546 GiB total, 346,46 GiB free.
D: is FIXED (NTFS) - 49 GiB total, 22,971 GiB free.
E: is CDROM ()
.
==== Disabled Device Manager Items =============
.
Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
Description: Shrew Soft Virtual Adapter
Device ID: ROOT\VNET\0000
Manufacturer: Shrew Soft
Name: Shrew Soft Virtual Adapter
PNP Device ID: ROOT\VNET\0000
Service: vnet
.
==== System Restore Points ===================
.
RP103: 25.03.2012 17:43:48 - Windows Update
RP104: 25.03.2012 17:50:08 - Citavi wird installiert
RP105: 29.03.2012 13:08:40 - Installed Mindjet MindManager 2012.
RP106: 30.03.2012 08:56:50 - Windows Update
RP107: 30.03.2012 13:23:13 - Microsoft Reader Text-to-Speech deutsch wird installiert
RP108: 30.03.2012 14:40:34 - Secure Download Manager wird installiert
RP109: 30.03.2012 15:33:05 - Installed Microsoft Visio Professional 2010
RP110: 30.03.2012 19:29:33 - Windows Update
RP111: 31.03.2012 15:53:43 - Windows Update
RP112: 31.03.2012 17:18:15 - Removed Mindjet MindManager 2012.
.
==== Installed Programs ======================
.
Acrobat.com
ActiveX-kontroll för fjärranslutningar för Windows Live Mesh
Adobe AIR
Adobe Community Help
Adobe Creative Suite 5 Master Collection
Adobe Media Player
Adobe Reader 9.4.0 MUI
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver
Avira Free Antivirus
Cisco EAP-FAST Module
Cisco LEAP Module
Cisco PEAP Module
Citavi
Contrôle ActiveX Windows Live Mesh pour connexions à distance
Control ActiveX de Windows Live Mesh para conexiones remotas
Controlo ActiveX do Windows Live Mesh para Ligações Remotas
D3DX10
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition
Dropbox
Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsluge polaczen zdalnych
Fotogalerija Windows Live
Galeria de Fotografias do Windows Live
Galeria fotografii uslugi Windows Live
Galerie de photos Windows Live
Galería fotográfica de Windows Live
Google Update Helper
Haali Media Splitter
Intel(R) Graphics Media Accelerator Driver
Intel(R) Management Engine Components
Intel(R) Rapid Storage Technology
Java Auto Updater
Java(TM) 6 Update 22
JDownloader 0.9
Junk Mail filter update
Kontrolnik Windows Live Mesh ActiveX za oddaljene povezave
Launch Manager
Malwarebytes Anti-Malware Version 1.60.1.1000
Media Converter SA Edition 0.8
Mesh Runtime
Microsoft Office 2010 Language Pack Service Pack 1 (SP1)
Microsoft Office 2010 Service Pack 1 (SP1)
Microsoft Office Access MUI (German) 2010
Microsoft Office Excel MUI (German) 2010
Microsoft Office Groove MUI (German) 2010
Microsoft Office InfoPath MUI (German) 2010
Microsoft Office OneNote MUI (German) 2010
Microsoft Office Outlook MUI (German) 2010
Microsoft Office PowerPoint MUI (German) 2010
Microsoft Office Professional Plus 2010
Microsoft Office Proof (English) 2010
Microsoft Office Proof (French) 2010
Microsoft Office Proof (German) 2010
Microsoft Office Proof (Italian) 2010
Microsoft Office Proofing (German) 2010
Microsoft Office Publisher MUI (German) 2010
Microsoft Office Shared MUI (German) 2010
Microsoft Office Visio 2010
Microsoft Office Visio MUI (German) 2010
Microsoft Office Word MUI (German) 2010
Microsoft Reader
Microsoft Reader Text-to-Speech deutsch
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Visio 2010 Service Pack 1 (SP1)
Microsoft Visio Professional 2010
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
Microsoft_VC80_ATL_x86
Microsoft_VC80_CRT_x86
Microsoft_VC80_MFC_x86
Microsoft_VC80_MFCLOC_x86
Microsoft_VC90_ATL_x86
Microsoft_VC90_CRT_x86
Microsoft_VC90_MFC_x86
Mozilla Firefox 11.0 (x86 de)
MSVCRT
MSVCRT_amd64
MSXML 4.0 SP2 (KB973688)
NVIDIA PhysX
NVIDIA Stereoscopic 3D Driver
NVIDIA Updatus
PDF Settings CS5
PlagiarismFinder 2.0
Poczta uslugi Windows Live
Podstawowe programy Windows Live
Pošta Windows Live
PxMergeModule
Raccolta foto di Windows Live
Realtek High Definition Audio Driver
Realtek USB 2.0 Card Reader
REALTEK Wireless LAN Driver
Renesas Electronics USB 3.0 Host Controller Driver
RocketDock 1.3.5
S?????? f?t???af??? t?? Windows Live
Secure Download Manager
Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Microsoft Office 2010 (KB2553091)
Security Update for Microsoft Office 2010 (KB2553096)
Security Update for Microsoft Office 2010 (KB2589320) 32-Bit Edition
Security Update for Microsoft PowerPoint 2010 (KB2553185) 32-Bit Edition
Security Update for Microsoft SharePoint Workspace 2010 (KB2566445)
Security Update for Microsoft Visio 2010 (KB2553374) 32-Bit Edition
Security Update for Microsoft Visio Viewer 2010 (KB2597170) 32-Bit Edition
Skype™ 5.8
St???e?? e?????? ActiveX t?? Windows Live Mesh ??a ap?µa???sµ??e? s??d?se??
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217)
Update for Microsoft Excel 2010 (KB2553439) 32-Bit Edition
Update for Microsoft Office 2010 (KB2494150)
Update for Microsoft Office 2010 (KB2553065)
Update for Microsoft Office 2010 (KB2553092)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553385) 32-Bit Edition
Update for Microsoft Office 2010 (KB2566458)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition
Update for Microsoft Office 2010 (KB2597091) 32-Bit Edition
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition
Update for Microsoft Outlook 2010 (KB2553323) 32-Bit Edition
Update for Microsoft Outlook Social Connector (KB2583935)
Uzak Baglantilar Için Windows Live Mesh ActiveX Denetimi
Winamp
Winamp Erkennungs-Plug-in
Windows Live
Windows Live Communications Platform
Windows Live Essentials
Windows Live Fotótár
Windows Live Fotogalerie
Windows Live Fotogalleri
Windows Live Fotograf Galerisi
Windows Live Installer
Windows Live Mail
Windows Live Mesh
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen
Windows Live Mesh ActiveX-kontroll for eksterne tilkoblinger
Windows Live Mesh ActiveX-objekt til fjernforbindelser
Windows Live Mesh ActiveX-vezérlo távoli kapcsolatokhoz
Windows Live Mesh ActiveX Control for Remote Connections
Windows Live Meshin etäyhteyksien ActiveX-komponentti
Windows Live Messenger
Windows Live Movie Maker
Windows Live Photo Common
Windows Live Photo Gallery
Windows Live PIMT Platform
Windows Live SOXE
Windows Live SOXE Definitions
Windows Live Temel Parçalar
Windows Live UX Platform
Windows Live UX Platform Language Pack
Windows Live Writer
Windows Live Writer Resources
Windows Liven asennustyökalu
Windows Liven sähköposti
Windows Liven valokuvavalikoima
Windows Media Encoder 9 Series
Xilisoft Video Converter Ultimate 6
XMind
.
==== End Of File ===========================
|
Vielen Dank schonmal für eure Hilfe! Solltet ihr weitere logs (habe Malwarebyte und Antivir drüberlaufen lassen) oder sonstige Infos brauchen sagt bitte bescheid!
Grüße
Adiwankenobi
31.03.2012, 16:47
Baum-Darstellung