Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Windows 7 wird nach längerer Laufzeit extrem langsam beim Öffnen von Websites

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.

Antwort
Alt 06.02.2014, 22:45   #1
uyab
 
Windows 7 wird nach längerer Laufzeit extrem langsam beim Öffnen von Websites - Standard

Windows 7 wird nach längerer Laufzeit extrem langsam beim Öffnen von Websites



Hallo liebes Trojaner-Board,

mein Rechner wird mit zunehmender Laufzeit extrem langsam und blockiert dann auch manchmal komplett. Anfangs nach dem einschalten geht es noch, wird dann mit der Zeit immer langsamer. Dies merke ich vor allem beim öffnen von Webseiten aber auch beim öfnen von normalen Fenstern (z.b. explorer) in Windows. Ich scanne regelmäßig mit Malwarebytes and Avast - kann jedoch im Moment keine Fehler finden.

Bin über jegliche Hilfe und Anmerkungen Dankbar!

Chris

Code:
ATTFilter
defogger_disable by jpshortstuff (23.02.10.1)
Log created at 20:37 on 06/02/2014 (chris)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 06-02-2014
Ran by chris (administrator) on BLACK-BOX on 06-02-2014 20:44:18
Running from C:\Users\chris\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe
(SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE
(SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
(AlcorMicro Co., Ltd.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
(Acer Incorporated) C:\Program Files\Acer\Optical Drive Power Management\ODDPWR.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe
(Acer Incorporated) C:\Program Files\Acer\Optical Drive Power Management\ODDPWRSvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
() C:\Windows\PLFSetI.exe
(Acer Group) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe
(Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\ePowerEvent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Acer Incoporated) C:\Program Files (x86)\Acer\Acer VCM\VC.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\Magnify.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [320000 2009-04-09] (AlcorMicro Co., Ltd.)
HKLM\...\Run: [ODDPwr] - C:\Program Files\Acer\Optical Drive Power Management\ODDPwr.exe [222240 2010-02-05] (Acer Incorporated)
HKLM\...\Run: [mwlDaemon] - C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe [349552 2010-02-01] (Egis Technology Inc.)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10081312 2010-02-22] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [877600 2010-02-22] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1842472 2009-09-17] (Synaptics Incorporated)
HKLM\...\Run: [PLFSetI] - C:\Windows\PLFSetI.exe [206208 2010-01-13] ()
HKLM\...\Run: [Acer ePower Management] - C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe [496160 2010-03-17] (Acer Incorporated)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2009-12-24] (Intel Corporation)
HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1300560 2010-03-03] (Dritek System Inc.)
HKLM-x32\...\Run: [SuiteTray] - C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [337264 2010-02-01] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisUpdate] - C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [201512 2009-12-25] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisTecPMMUpdate] - C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [401192 2009-12-25] (Egis Technology Inc.)
HKLM-x32\...\Run: [BackupManagerTray] - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [260608 2010-03-09] (NewTech Infosystems, Inc.)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-03-03] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [MDS_Menu] - C:\Program Files (x86)\Acer Arcade Deluxe\MediaShow Espresso\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [ArcadeMovieService] - C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe [124136 2010-03-17] (CyberLink Corp.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] - C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [685048 2012-08-03] (Cisco Systems, Inc.)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3764024 2014-01-07] (AVAST Software)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [301568 2013-05-13] (Microsoft Corporation)
HKU\S-1-5-21-3309182887-1688452900-3303579845-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_4820tg&r=27360513k306l0453z135t55n1j111
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_4820tg&r=27360513k306l0453z135t55n1j111
SearchScopes: HKLM-x32 - DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKCU - DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
DPF: HKLM-x32 {C345E174-3E87-4F41-A01C-B066A90A49B4} hxxp://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework//microsoft/wrc32.ocx
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\c8bjml6p.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\chris\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: WOT - C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\c8bjml6p.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2013-11-27]
FF Extension: NoScript - C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\c8bjml6p.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2013-05-12]
FF Extension: Adblock Plus - C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\c8bjml6p.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-05-12]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-05-12]

Chrome: 
=======
CHR HomePage: hxxp://www.google.com
CHR RestoreOnStartup: "hxxp://www.google.com"
CHR Extension: (Docs) - C:\Users\chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-05-12]
CHR Extension: (Google Drive) - C:\Users\chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-05-12]
CHR Extension: (YouTube) - C:\Users\chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-05-12]
CHR Extension: (Google-Suche) - C:\Users\chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-05-12]
CHR Extension: (Google Mail) - C:\Users\chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-05-12]

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-01-07] (AVAST Software)
R2 ePowerSvc; C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe [820768 2010-03-17] (Acer Incorporated)
S3 MWLService; C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [305520 2010-02-01] (Egis Technology Inc.)
R2 ODDPwrSvc; C:\Program Files\Acer\Optical Drive Power Management\ODDPWRSvc.exe [171040 2010-02-05] (Acer Incorporated)
R2 RichVideo; C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe [244904 2010-02-03] ()
R2 RS_Service; C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe [260640 2010-01-30] (Acer Incorporated)

==================== Drivers (Whitelisted) ====================

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2014-01-07] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-12-03] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-12-03] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1034464 2014-01-07] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [422216 2014-01-07] (AVAST Software)
R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [79672 2014-01-07] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2014-01-07] ()
S3 NvnUsbAudio; C:\Windows\System32\DRIVERS\nvnusbaudio.sys [50232 2011-02-16] (Novation DMS Ltd.)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-06 20:44 - 2014-02-06 20:44 - 00016926 _____ () C:\Users\chris\Downloads\FRST.txt
2014-02-06 20:44 - 2014-02-06 20:44 - 00000000 ____D () C:\FRST
2014-02-06 20:43 - 2014-02-06 20:43 - 02079744 _____ (Farbar) C:\Users\chris\Downloads\FRST64.exe
2014-02-06 20:38 - 2014-02-06 20:38 - 00000472 _____ () C:\Users\chris\Desktop\defogger_disable.log
2014-02-06 20:37 - 2014-02-06 20:37 - 00000472 _____ () C:\Users\chris\Downloads\defogger_disable.log
2014-02-06 20:37 - 2014-02-06 20:37 - 00000000 _____ () C:\Users\chris\defogger_reenable
2014-02-06 20:33 - 2014-02-06 20:33 - 00050477 _____ () C:\Users\chris\Desktop\Defogger.exe
2014-02-03 11:21 - 2014-02-03 11:21 - 00204496 _____ (Malwarebytes) C:\Users\chris\Downloads\startuplite-setup-1.07.exe
2014-02-03 11:21 - 2014-02-03 11:21 - 00003150 _____ () C:\Windows\System32\Tasks\{8920A2C2-5AFC-4690-9AF2-EF6BFDCE8C9C}
2014-01-26 20:11 - 2014-01-26 20:11 - 00000000 ____D () C:\Users\chris\Documents\Togeo_Studios-Simple_Synths
2014-01-26 20:08 - 2014-01-26 20:11 - 98454416 _____ () C:\Users\chris\Downloads\Togeo_Studios-Simple_Synths.zip
2014-01-26 19:40 - 2014-01-26 19:40 - 00000000 ____D () C:\Users\chris\Documents\Tom Cosm - Swagger - Ableton Pack
2014-01-17 21:17 - 2014-01-17 21:28 - 79069909 _____ () C:\Users\chris\Downloads\Tom Cosm - Swagger - Ableton Pack.zip
2014-01-16 15:04 - 2014-01-16 15:04 - 18126032 _____ (Adobe Systems Inc.) C:\Users\chris\Downloads\AdobeAIRInstaller.exe
2014-01-16 08:12 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-16 08:12 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-16 08:12 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-16 08:12 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-16 08:12 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-16 08:12 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-16 08:12 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-16 08:12 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-16 08:12 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-15 20:34 - 2014-01-19 12:33 - 00008284 _____ () C:\Users\chris\ESt2013_******.elfo
2014-01-15 20:34 - 2014-01-19 12:32 - 00000000 ____D () C:\Users\chris\AppData\Local\.elfohilfe
2014-01-15 18:38 - 2014-01-15 18:38 - 00000000 ____D () C:\Program Files\Common Files\Propellerhead Software
2014-01-15 18:36 - 2014-01-15 18:36 - 00000915 _____ () C:\Users\chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ableton Live 9 Standard.lnk
2014-01-15 18:26 - 2014-01-15 18:32 - 722616436 _____ () C:\Users\chris\Downloads\ableton_live_standard_9.1_64.zip
2014-01-12 19:32 - 2014-01-18 00:36 - 00000000 ___RD () C:\Users\chris\Desktop\CHRIS Project
2014-01-12 13:32 - 2014-01-15 19:56 - 00000000 ____D () C:\Program Files (x86)\ElsterFormular
2014-01-12 13:32 - 2014-01-12 13:32 - 00001237 _____ () C:\Users\Public\Desktop\ElsterFormular.lnk
2014-01-12 13:32 - 2014-01-12 13:32 - 00000000 ____D () C:\Users\chris\AppData\Roaming\elsterformular
2014-01-12 13:32 - 2014-01-12 13:32 - 00000000 ____D () C:\ProgramData\elsterformular
2014-01-12 13:30 - 2014-01-12 13:31 - 69755760 _____ (Landesfinanzdirektion Thüringen) C:\Users\chris\Downloads\ElsterFormular-14.4.20130909p.exe
2014-01-07 19:07 - 2014-01-07 19:15 - 960843776 _____ () C:\Users\chris\Downloads\tails-i386-0.22.iso
2014-01-07 19:02 - 2014-01-07 19:02 - 01094939 _____ (pendrivelinux.com) C:\Users\chris\Downloads\Universal-USB-Installer-1.9.5.1.exe
2014-01-07 19:00 - 2014-01-07 19:00 - 00079672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys

==================== One Month Modified Files and Folders =======

2014-02-06 20:44 - 2014-02-06 20:44 - 00016926 _____ () C:\Users\chris\Downloads\FRST.txt
2014-02-06 20:44 - 2014-02-06 20:44 - 00000000 ____D () C:\FRST
2014-02-06 20:43 - 2014-02-06 20:43 - 02079744 _____ (Farbar) C:\Users\chris\Downloads\FRST64.exe
2014-02-06 20:38 - 2014-02-06 20:38 - 00000472 _____ () C:\Users\chris\Desktop\defogger_disable.log
2014-02-06 20:37 - 2014-02-06 20:37 - 00000472 _____ () C:\Users\chris\Downloads\defogger_disable.log
2014-02-06 20:37 - 2014-02-06 20:37 - 00000000 _____ () C:\Users\chris\defogger_reenable
2014-02-06 20:37 - 2013-05-12 13:00 - 00000000 ____D () C:\Users\chris
2014-02-06 20:33 - 2014-02-06 20:33 - 00050477 _____ () C:\Users\chris\Desktop\Defogger.exe
2014-02-06 20:32 - 2013-05-14 07:52 - 00000000 ____D () C:\Users\chris\AppData\Roaming\Skype
2014-02-06 20:06 - 2013-05-12 15:42 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-06 19:47 - 2013-05-12 13:00 - 01790202 _____ () C:\Windows\WindowsUpdate.log
2014-02-06 09:26 - 2009-07-14 05:45 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-06 09:26 - 2009-07-14 05:45 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-06 09:23 - 2013-05-12 22:48 - 00654400 _____ () C:\Windows\system32\perfh007.dat
2014-02-06 09:23 - 2013-05-12 22:48 - 00130240 _____ () C:\Windows\system32\perfc007.dat
2014-02-06 09:23 - 2009-07-14 06:13 - 01498742 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-06 09:19 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-06 09:19 - 2009-07-14 05:51 - 00088793 _____ () C:\Windows\setupact.log
2014-02-05 23:01 - 2013-05-12 15:09 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-02-05 09:06 - 2013-05-12 15:42 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-05 09:06 - 2013-05-12 15:42 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-05 09:06 - 2013-05-12 15:42 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-04 09:28 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-02-03 11:53 - 2013-05-29 11:54 - 00000000 ___RD () C:\Users\chris\Dropbox
2014-02-03 11:53 - 2013-05-29 11:52 - 00000000 ____D () C:\Users\chris\AppData\Roaming\Dropbox
2014-02-03 11:21 - 2014-02-03 11:21 - 00204496 _____ (Malwarebytes) C:\Users\chris\Downloads\startuplite-setup-1.07.exe
2014-02-03 11:21 - 2014-02-03 11:21 - 00003150 _____ () C:\Windows\System32\Tasks\{8920A2C2-5AFC-4690-9AF2-EF6BFDCE8C9C}
2014-02-03 11:17 - 2013-05-14 09:13 - 00000000 ____D () C:\Users\chris\Desktop\applications
2014-01-26 20:58 - 2014-01-05 14:11 - 00000000 ____D () C:\ProgramData\Ableton
2014-01-26 20:11 - 2014-01-26 20:11 - 00000000 ____D () C:\Users\chris\Documents\Togeo_Studios-Simple_Synths
2014-01-26 20:11 - 2014-01-26 20:08 - 98454416 _____ () C:\Users\chris\Downloads\Togeo_Studios-Simple_Synths.zip
2014-01-26 19:40 - 2014-01-26 19:40 - 00000000 ____D () C:\Users\chris\Documents\Tom Cosm - Swagger - Ableton Pack
2014-01-26 19:40 - 2014-01-05 14:09 - 00000000 ____D () C:\Users\chris\AppData\Local\WinZip
2014-01-26 16:59 - 2013-05-12 15:54 - 00000000 ____D () C:\Users\chris\AppData\Local\Adobe
2014-01-19 12:33 - 2014-01-15 20:34 - 00008284 _____ () C:\Users\chris\ESt2013_******.elfo
2014-01-19 12:32 - 2014-01-15 20:34 - 00000000 ____D () C:\Users\chris\AppData\Local\.elfohilfe
2014-01-18 00:36 - 2014-01-12 19:32 - 00000000 ___RD () C:\Users\chris\Desktop\CHRIS Project
2014-01-17 21:28 - 2014-01-17 21:17 - 79069909 _____ () C:\Users\chris\Downloads\Tom Cosm - Swagger - Ableton Pack.zip
2014-01-17 11:20 - 2013-05-29 11:53 - 00000482 _____ () C:\Windows\wininit.ini
2014-01-17 11:19 - 2013-05-29 11:54 - 00001022 _____ () C:\Users\chris\Desktop\Dropbox.lnk
2014-01-17 11:19 - 2013-05-29 11:53 - 00000000 ____D () C:\Users\chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-01-16 15:04 - 2014-01-16 15:04 - 18126032 _____ (Adobe Systems Inc.) C:\Users\chris\Downloads\AdobeAIRInstaller.exe
2014-01-16 10:21 - 2009-07-14 05:45 - 00426520 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-16 08:20 - 2013-07-15 22:17 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-16 08:19 - 2013-05-12 16:26 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-15 19:58 - 2013-05-12 12:51 - 00155112 _____ () C:\Windows\PFRO.log
2014-01-15 19:56 - 2014-01-12 13:32 - 00000000 ____D () C:\Program Files (x86)\ElsterFormular
2014-01-15 18:38 - 2014-01-15 18:38 - 00000000 ____D () C:\Program Files\Common Files\Propellerhead Software
2014-01-15 18:36 - 2014-01-15 18:36 - 00000915 _____ () C:\Users\chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ableton Live 9 Standard.lnk
2014-01-15 18:32 - 2014-01-15 18:26 - 722616436 _____ () C:\Users\chris\Downloads\ableton_live_standard_9.1_64.zip
2014-01-13 15:03 - 2014-01-05 14:13 - 00000000 ____D () C:\Users\chris\Documents\Ableton
2014-01-12 13:32 - 2014-01-12 13:32 - 00001237 _____ () C:\Users\Public\Desktop\ElsterFormular.lnk
2014-01-12 13:32 - 2014-01-12 13:32 - 00000000 ____D () C:\Users\chris\AppData\Roaming\elsterformular
2014-01-12 13:32 - 2014-01-12 13:32 - 00000000 ____D () C:\ProgramData\elsterformular
2014-01-12 13:31 - 2014-01-12 13:30 - 69755760 _____ (Landesfinanzdirektion Thüringen) C:\Users\chris\Downloads\ElsterFormular-14.4.20130909p.exe
2014-01-07 19:15 - 2014-01-07 19:07 - 960843776 _____ () C:\Users\chris\Downloads\tails-i386-0.22.iso
2014-01-07 19:02 - 2014-01-07 19:02 - 01094939 _____ (pendrivelinux.com) C:\Users\chris\Downloads\Universal-USB-Installer-1.9.5.1.exe
2014-01-07 19:00 - 2014-01-07 19:00 - 00079672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2014-01-07 19:00 - 2013-05-12 15:09 - 01034464 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-01-07 19:00 - 2013-05-12 15:09 - 00422216 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-01-07 19:00 - 2013-05-12 15:09 - 00334136 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-01-07 19:00 - 2013-05-12 15:09 - 00207904 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-01-07 19:00 - 2013-05-12 15:09 - 00078648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-01-07 19:00 - 2013-05-12 15:09 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-01-07 19:00 - 2013-05-12 15:09 - 00001970 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk

Some content of TEMP:
====================
C:\Users\chris\AppData\Local\Temp\Ableton Swapper.exe
C:\Users\chris\AppData\Local\Temp\COMAP.EXE
C:\Users\chris\AppData\Local\Temp\GoogleUpdateSetup_1.3.21.169.exe
C:\Users\chris\AppData\Local\Temp\SkypeSetup.exe
C:\Users\chris\AppData\Local\Temp\_is7BA1.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-30 14:03

==================== End Of Log ============================
         
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 06-02-2014
Ran by chris at 2014-02-06 20:44:44
Running from C:\Users\chris\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

Ableton Live 9 Standard (Version: 9.0.0.0 - Ableton)
Acer Arcade Deluxe (x32 Version: 4.0.7511 - CyberLink Corp.)
Acer Arcade Deluxe (x32 Version: 4.0.7511 - CyberLink Corp.) Hidden
Acer Arcade Movie (x32 Version: 9.0.6317 - CyberLink Corp.) Hidden
Acer Backup Manager (x32 Version: 2.0.0.60 - NewTech Infosystems)
Acer Crystal Eye Webcam (x32 Version: 5.2.11.2 - Suyin Optronics Corp)
Acer eRecovery Management (x32 Version: 4.05.3011 - Acer Incorporated)
Acer PowerSmart Manager (x32 Version: 5.02.3002 - Acer Incorporated)
Acer Registration (x32 Version: 1.03.3002 - Acer Incorporated)
Acer ScreenSaver (x32 Version: 1.1.0222.2010 - Acer Incorporated)
Acer Updater (x32 Version: 1.02.3001 - Acer Incorporated)
Acer VCM (x32 Version: 4.05.3002 - Acer Incorporated)
Acrobat.com (x32 Version: 1.6.65 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 4.0.0.1390 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 4.0.0.1390 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 12 ActiveX (x32 Version: 12.0.0.44 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.44 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (x32 Version: 11.0.06 - Adobe Systems Incorporated)
Alcor Micro USB Card Reader (x32 Version: 1.2.17.05001 - Alcor Micro Corp.)
Alcor Micro USB Card Reader (x32 Version: 1.2.17.05001 - Alcor Micro Corp.) Hidden
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (x32 Version: 1.0.0.23 - Atheros Communications Inc.)
ATI Catalyst Install Manager (Version: 3.0.765.0 - ATI Technologies, Inc.)
avast! Free Antivirus (x32 Version: 9.0.2011 - Avast Software)
Backup Manager Basic (x32 Version: 2.0.0.60 - NewTech Infosystems) Hidden
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center Core Implementation (x32 Version: 2010.0303.420.7651 - ATI) Hidden
Catalyst Control Center Graphics Full Existing (x32 Version: 2010.0303.420.7651 - ATI) Hidden
Catalyst Control Center Graphics Full New (x32 Version: 2010.0303.420.7651 - ATI) Hidden
Catalyst Control Center Graphics Light (x32 Version: 2010.0303.420.7651 - ATI) Hidden
Catalyst Control Center Graphics Previews Vista (x32 Version: 2010.0303.420.7651 - ATI) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2010.0303.420.7651 - ATI Technologies, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2010.0303.420.7651 - ATI) Hidden
CCC Help Chinese Standard (x32 Version: 2010.0303.0419.7651 - ATI) Hidden
CCC Help Chinese Traditional (x32 Version: 2010.0303.0419.7651 - ATI) Hidden
CCC Help Czech (x32 Version: 2010.0303.0419.7651 - ATI) Hidden
CCC Help Danish (x32 Version: 2010.0303.0419.7651 - ATI) Hidden
CCC Help Dutch (x32 Version: 2010.0303.0419.7651 - ATI) Hidden
CCC Help English (x32 Version: 2010.0303.0419.7651 - ATI) Hidden
CCC Help Finnish (x32 Version: 2010.0303.0419.7651 - ATI) Hidden
CCC Help French (x32 Version: 2010.0303.0419.7651 - ATI) Hidden
CCC Help German (x32 Version: 2010.0303.0419.7651 - ATI) Hidden
CCC Help Greek (x32 Version: 2010.0303.0419.7651 - ATI) Hidden
CCC Help Hungarian (x32 Version: 2010.0303.0419.7651 - ATI) Hidden
CCC Help Italian (x32 Version: 2010.0303.0419.7651 - ATI) Hidden
CCC Help Japanese (x32 Version: 2010.0303.0419.7651 - ATI) Hidden
CCC Help Korean (x32 Version: 2010.0303.0419.7651 - ATI) Hidden
CCC Help Norwegian (x32 Version: 2010.0303.0419.7651 - ATI) Hidden
CCC Help Polish (x32 Version: 2010.0303.0419.7651 - ATI) Hidden
CCC Help Portuguese (x32 Version: 2010.0303.0419.7651 - ATI) Hidden
CCC Help Russian (x32 Version: 2010.0303.0419.7651 - ATI) Hidden
CCC Help Spanish (x32 Version: 2010.0303.0419.7651 - ATI) Hidden
CCC Help Swedish (x32 Version: 2010.0303.0419.7651 - ATI) Hidden
CCC Help Thai (x32 Version: 2010.0303.0419.7651 - ATI) Hidden
CCC Help Turkish (x32 Version: 2010.0303.0419.7651 - ATI) Hidden
ccc-core-static (x32 Version: 2010.0303.420.7651 - Ihr Firmenname) Hidden
ccc-utility64 (Version: 2010.0303.420.7651 - ATI) Hidden
Cisco AnyConnect Secure Mobility Client  (x32 Version: 3.1.00495 - Cisco Systems, Inc.)
Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.00495 - Cisco Systems, Inc.) Hidden
dBpoweramp Music Converter (x32 Version: Release 14.4 - Illustrate)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32 Version:  - Microsoft)
Dropbox (HKCU Version: 2.4.11 - Dropbox, Inc.)
Druckerdeinstallation für EPSON Stylus S20 Series (Version:  - SEIKO EPSON Corporation)
ElsterFormular (x32 Version: 15.0.13315 - Landesfinanzdirektion Thüringen)
Haali Media Splitter (x32 Version:  - )
Identity Card (x32 Version: 1.00.3003 - Acer Incorporated)
Intel(R) Control Center (x32 Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (x32 Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Rapid Storage Technology (x32 Version: 9.5.6.1001 - Intel Corporation)
Intel(R) Turbo Boost Technology Driver (x32 Version: 01.00.01.1002 - Intel Corporation)
ITCH for Novation TWITCH (x32 Version: 1.8.2 - Serato Audio Research)
Junk Mail filter update (x32 Version: 14.0.8089.726 - Microsoft Corporation) Hidden
Launch Manager (x32 Version: 4.0.7 - Acer Inc.)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
MediaShow Espresso (x32 Version: 5.5.1403_23691 - CyberLink Corp.) Hidden
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Choice Guard (x32 Version: 2.0.48.0 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Suite Activation Assistant (x32 Version: 2.9 - Microsoft Corporation)
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
MixMeister BPM Analyzer 1.0 (x32 Version:  - MixMeister Technology LLC)
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla)
MSVCRT (x32 Version: 14.0.1468.721 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation)
MyWinLocker (x32 Version: 3.1.206.0 - Egis Technology Inc.) Hidden
MyWinLocker Suite (x32 Version: 3.1.206.0 - Egis Technology Inc.)
MyWinLocker Suite (x32 Version: 3.1.206.0 - Egis Technology Inc.) Hidden
Novation USB Audio Driver 2.1 (Version: 2.1 - Novation DMS Ltd.)
NTI Backup Now 5 (x32 Version: 5.1.2.628 - NewTech Infosystems)
NTI Backup Now Standard (x32 Version: 5.1.2.628 - NewTech Infosystems) Hidden
NTI Media Maker 8 (x32 Version: 8.0.12.6630 - NewTech Infosystems)
NTI Media Maker 8 (x32 Version: 8.0.12.6630 - NewTech Infosystems) Hidden
Optical Drive Power Management (x32 Version: 1.01.3006 - Acer Incorporated)
PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6050 - Realtek Semiconductor Corp.)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version:  - Microsoft) Hidden
Shredder (Version: 2.0.5.0 - Egis Technology Inc.) Hidden
Shredder (x32 Version: 2.0.5.0 - Egis Technology Inc.) Hidden
Skype™ 6.11 (x32 Version: 6.11.102 - Skype Technologies S.A.)
Synaptics Pointing Device Driver (Version: 14.0.6.0 - Synaptics Incorporated)
Unity Web Player (HKCU Version:  - Unity Technologies ApS)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (x32 Version:  - Microsoft)
Welcome Center (x32 Version: 1.01.3002 - Acer Incorporated)
WIDCOMM Bluetooth Software (Version: 6.3.0.4300 - Broadcom Corporation)
Windows Live Anmelde-Assistent (x32 Version: 5.000.818.5 - Microsoft Corporation)
Windows Live Call (x32 Version: 14.0.8064.0206 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 14.0.8064.206 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 14.0.8089.0726 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 14.0.8089.726 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 14.0.8081.709 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 14.0.8089.0726 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 14.0.8089.0726 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 14.0.8091.0730 - Microsoft Corporation) Hidden
Windows Live Sync (x32 Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live Writer (x32 Version: 14.0.8089.0726 - Microsoft Corporation) Hidden
Windows Live-Uploadtool (x32 Version: 14.0.8014.1029 - Microsoft Corporation)
WinZip 18.0 (Version: 18.0.10661 - WinZip Computing, S.L. )

==================== Restore Points  =========================

21-01-2014 09:03:48 Windows Update
24-01-2014 16:46:07 Windows Update
28-01-2014 08:08:35 Windows Update
31-01-2014 09:37:37 Windows Update
04-02-2014 08:32:39 Windows Update

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {379F0879-5EAC-43AF-A108-E01E42F31E86} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-01-07] (AVAST Software)
Task: {5418912F-BA7F-401D-9F90-42E484195A17} - System32\Tasks\{AF6C7C59-F000-4DA8-9370-341F9B0FB380} => Firefox.exe hxxp://ui.skype.com/ui/0/6.3.0.107/de/go/help.faq.installer?source=lightinstaller&LastError=1618
Task: {6E7F5A3B-48F3-4BF8-9636-8C59D004389D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-05] (Adobe Systems Incorporated)
Task: {8BC0E775-D157-4556-954A-ACF2DA4CEA19} - System32\Tasks\{9DBA2934-98EE-4162-85D5-16ECED83BE1A} => Firefox.exe hxxp://ui.skype.com/ui/0/6.3.0.107/de/go/help.faq.installer?source=lightinstaller&LastError=1618
Task: {B347F6C3-D00B-4347-A948-B0FCEE8BE4B6} - System32\Tasks\{4AC7A996-9031-4F31-BE4C-4A37655BA2FF} => Firefox.exe hxxp://ui.skype.com/ui/0/6.3.0.107/de/go/help.faq.installer?source=lightinstaller&LastError=1618
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2010-03-26 10:46 - 2010-03-26 10:46 - 00173856 _____ () C:\Program Files\WIDCOMM\Bluetooth Software\btkeyind.dll
2010-01-07 13:42 - 2010-01-07 13:42 - 00016384 ____R () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2013-05-12 12:53 - 2013-05-12 12:53 - 00270336 _____ () C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2012-08-03 20:53 - 2012-08-03 20:53 - 00062968 _____ () C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\zlib1.dll
2014-02-05 23:01 - 2014-02-05 10:22 - 02168320 _____ () C:\Program Files\AVAST Software\Avast\defs\14020500\algo.dll
2014-02-06 19:45 - 2014-02-06 13:08 - 02168320 _____ () C:\Program Files\AVAST Software\Avast\defs\14020600\algo.dll
2010-03-09 01:18 - 2010-03-09 01:18 - 00465576 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\sqlite3.dll
2010-03-09 01:13 - 2010-03-09 01:13 - 01081600 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\ACE.dll
2010-04-15 12:03 - 2009-12-24 01:32 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2010-04-15 12:47 - 2009-05-20 07:02 - 00072200 _____ () C:\Program Files (x86)\Launch Manager\CdDirIo.dll
2013-12-03 19:12 - 2013-12-03 19:12 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-01-03 19:07 - 2014-01-03 19:07 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============

Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: vpnva
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: High Definition Audio-Controller
Description: High Definition Audio-Controller
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: HDAudBus
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (01/31/2014 00:01:53 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Skype.exe, Version: 6.11.0.102, Zeitstempel: 0x5284fb74
Name des fehlerhaften Moduls: Skype.exe, Version: 6.11.0.102, Zeitstempel: 0x5284fb74
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00212421
ID des fehlerhaften Prozesses: 0x448
Startzeit der fehlerhaften Anwendung: 0xSkype.exe0
Pfad der fehlerhaften Anwendung: Skype.exe1
Pfad des fehlerhaften Moduls: Skype.exe2
Berichtskennung: Skype.exe3

Error: (01/30/2014 02:04:38 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1". Fehler in Manifest- oder Richtliniendatei "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" in Zeile  WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition: WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (01/27/2014 06:57:07 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1". Fehler in Manifest- oder Richtliniendatei "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" in Zeile  WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition: WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (01/26/2014 09:43:57 PM) (Source: Application Hang) (User: )
Description: Programm firefox.exe, Version 26.0.0.5087 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1754

Startzeit: 01cf1ac693bd44e8

Endzeit: 51

Anwendungspfad: C:\Program Files (x86)\Mozilla Firefox\firefox.exe

Berichts-ID: 90d85404-86ca-11e3-894b-c80aa974bc5d

Error: (01/18/2014 10:56:17 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1". Fehler in Manifest- oder Richtliniendatei "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" in Zeile  WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition: WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (01/15/2014 04:53:12 PM) (Source: Application Hang) (User: )
Description: Programm mbam.exe, Version 1.75.0.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1aa8

Startzeit: 01cf12091d417985

Endzeit: 60000

Anwendungspfad: C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe

Berichts-ID: edf6c716-7dfc-11e3-9294-c80aa974bc5d

Error: (01/15/2014 11:37:55 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1". Fehler in Manifest- oder Richtliniendatei "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" in Zeile  WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition: WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (01/13/2014 06:15:51 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00038e19
ID des fehlerhaften Prozesses: 0x1be8
Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0
Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1
Pfad des fehlerhaften Moduls: IEXPLORE.EXE2
Berichtskennung: IEXPLORE.EXE3

Error: (01/13/2014 01:10:28 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1". Fehler in Manifest- oder Richtliniendatei "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" in Zeile  WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition: WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (01/11/2014 11:58:10 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: FlashPlayerPlugin_11_9_900_170.exe, Version: 11.9.900.170, Zeitstempel: 0x529b79bf
Name des fehlerhaften Moduls: FlashPlayerPlugin_11_9_900_170.exe, Version: 11.9.900.170, Zeitstempel: 0x529b79bf
Ausnahmecode: 0x40000015
Fehleroffset: 0x00017b60
ID des fehlerhaften Prozesses: 0x11e0
Startzeit der fehlerhaften Anwendung: 0xFlashPlayerPlugin_11_9_900_170.exe0
Pfad der fehlerhaften Anwendung: FlashPlayerPlugin_11_9_900_170.exe1
Pfad des fehlerhaften Moduls: FlashPlayerPlugin_11_9_900_170.exe2
Berichtskennung: FlashPlayerPlugin_11_9_900_170.exe3


System errors:
=============
Error: (01/31/2014 00:34:09 AM) (Source: DCOM) (User: )
Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}

Error: (01/30/2014 11:07:22 PM) (Source: bowser) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "UYAB",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{7E686523-FD6D-44F8-B738-040B9E9BDF09}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (01/30/2014 10:43:21 PM) (Source: bowser) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "UYAB",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{7E686523-FD6D-44F8-B738-040B9E9BDF09}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (01/30/2014 10:31:22 PM) (Source: bowser) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "UYAB",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{7E686523-FD6D-44F8-B738-040B9E9BDF09}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (01/24/2014 03:51:11 PM) (Source: DCOM) (User: )
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

Error: (01/16/2014 01:21:30 PM) (Source: NetBT) (User: )
Description: Der Name "WORKGROUP      :1d" konnte nicht auf der Schnittstelle mit IP-Adresse 192.168.0.10
registriert werden. Der Computer mit IP-Adresse 192.168.0.11 hat nicht
zugelassen, dass dieser Computer diesen Namen verwendet.

Error: (01/16/2014 10:20:40 AM) (Source: Microsoft-Windows-Directory-Services-SAM) (User: NT-AUTORITÄT)
Description: Das SAM-Modul konnte den TCP/IP- bzw. SPX/IPX-Listening-Thread nicht starten.

Error: (01/15/2014 05:19:57 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎15.‎01.‎2014 um 17:16:52 unerwartet heruntergefahren.

Error: (01/07/2014 08:18:27 PM) (Source: DCOM) (User: )
Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}

Error: (01/04/2014 09:11:14 PM) (Source: Microsoft-Windows-Kernel-General) (User: NT-AUTORITÄT)
Description: 0x8000002a63\??\C:\Users\chris\AppData\Local\Microsoft\Windows\UsrClass.dat


Microsoft Office Sessions:
=========================
Error: (01/31/2014 00:01:53 AM) (Source: Application Error)(User: )
Description: Skype.exe6.11.0.1025284fb74Skype.exe6.11.0.1025284fb74c00000050021242144801cf1debc7766189C:\Program Files (x86)\Skype\Phone\Skype.exeC:\Program Files (x86)\Skype\Phone\Skype.exe819e6340-8a02-11e3-ba08-c80aa974bc5d

Error: (01/30/2014 02:04:38 PM) (Source: SideBySide)(User: )
Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"c:\program files (x86)\windows live\photo gallery\MovieMaker.Exec:\program files (x86)\windows live\photo gallery\WLMFDS.DLL8

Error: (01/27/2014 06:57:07 PM) (Source: SideBySide)(User: )
Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"c:\program files (x86)\windows live\photo gallery\MovieMaker.Exec:\program files (x86)\windows live\photo gallery\WLMFDS.DLL8

Error: (01/26/2014 09:43:57 PM) (Source: Application Hang)(User: )
Description: firefox.exe26.0.0.5087175401cf1ac693bd44e851C:\Program Files (x86)\Mozilla Firefox\firefox.exe90d85404-86ca-11e3-894b-c80aa974bc5d

Error: (01/18/2014 10:56:17 AM) (Source: SideBySide)(User: )
Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"c:\program files (x86)\windows live\photo gallery\MovieMaker.Exec:\program files (x86)\windows live\photo gallery\WLMFDS.DLL8

Error: (01/15/2014 04:53:12 PM) (Source: Application Hang)(User: )
Description: mbam.exe1.75.0.11aa801cf12091d41798560000C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exeedf6c716-7dfc-11e3-9294-c80aa974bc5d

Error: (01/15/2014 11:37:55 AM) (Source: SideBySide)(User: )
Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"c:\program files (x86)\windows live\photo gallery\MovieMaker.Exec:\program files (x86)\windows live\photo gallery\WLMFDS.DLL8

Error: (01/13/2014 06:15:51 PM) (Source: Application Error)(User: )
Description: IEXPLORE.EXE11.0.9600.16428525b664cntdll.dll6.1.7601.18247521ea8e7c000000500038e191be801cf1082879ad825C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\SysWOW64\ntdll.dll59de4679-7c76-11e3-ae3c-c80aa974bc5d

Error: (01/13/2014 01:10:28 PM) (Source: SideBySide)(User: )
Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"c:\program files (x86)\windows live\photo gallery\MovieMaker.Exec:\program files (x86)\windows live\photo gallery\WLMFDS.DLL8

Error: (01/11/2014 11:58:10 PM) (Source: Application Error)(User: )
Description: FlashPlayerPlugin_11_9_900_170.exe11.9.900.170529b79bfFlashPlayerPlugin_11_9_900_170.exe11.9.900.170529b79bf4000001500017b6011e001cf0f12307423a4C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exeC:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exed74c3c34-7b13-11e3-8904-c80aa974bc5d


CodeIntegrity Errors:
===================================
  Date: 2014-02-06 11:26:07.602
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-02-05 08:57:51.083
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-02-01 14:32:02.844
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-30 21:25:13.966
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-30 15:27:44.313
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-29 20:35:27.861
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-29 20:26:25.446
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-29 20:25:26.158
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-26 19:37:41.993
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-26 18:25:35.368
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 50%
Total physical RAM: 3766.68 MB
Available physical RAM: 1880.52 MB
Total Pagefile: 7531.55 MB
Available Pagefile: 5393.61 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:135.95 GB) (Free:50.82 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 149 GB) (Disk ID: 851CF10E)
Partition 1: (Not Active) - (Size=13 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=136 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         
Code:
ATTFilter
GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-02-06 21:24:44
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 INTEL_SS rev.2CV1 149,05GB
Running: Gmer-19357.exe; Driver: C:\Users\chris\AppData\Local\Temp\pwtdrpog.sys


---- Kernel code sections - GMER 2.1 ----

INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 532                                                                                   fffff80002fb0004 5 bytes JMP fffff80002fe0e10
INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 675                                                                                   fffff80002fb0093 36 bytes [8B, 7C, 24, 43, 48, D3, CF, ...]

---- User code sections - GMER 2.1 ----

.text     C:\Windows\system32\wininit.exe[608] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                           0000000076d0eecd 1 byte [62]
.text     C:\Windows\system32\winlogon.exe[680] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                          0000000076d0eecd 1 byte [62]
.text     C:\Windows\system32\services.exe[708] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                          0000000076d0eecd 1 byte [62]
.text     C:\Windows\system32\svchost.exe[840] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                           0000000076d0eecd 1 byte [62]
.text     C:\Windows\system32\svchost.exe[932] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                           0000000076d0eecd 1 byte [62]
.text     C:\Windows\system32\atiesrxx.exe[996] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                          0000000076d0eecd 1 byte [62]
.text     C:\Windows\System32\svchost.exe[312] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                           0000000076d0eecd 1 byte [62]
.text     C:\Windows\System32\svchost.exe[404] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                           0000000076d0eecd 1 byte [62]
.text     C:\Windows\system32\svchost.exe[552] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                           0000000076d0eecd 1 byte [62]
.text     C:\Windows\system32\svchost.exe[616] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                           0000000076d0eecd 1 byte [62]
.text     C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe[1124] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112        00000000761aa2ba 1 byte [62]
.text     C:\Windows\system32\atieclxx.exe[1160] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                         0000000076d0eecd 1 byte [62]
.text     C:\Windows\system32\svchost.exe[1196] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                          0000000076d0eecd 1 byte [62]
.text     C:\Windows\system32\WLANExt.exe[1352] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                          0000000076d0eecd 1 byte [62]
.text     C:\Windows\system32\Dwm.exe[1640] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                              0000000076d0eecd 1 byte [62]
.text     C:\Windows\Explorer.EXE[1684] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                                  0000000076d0eecd 1 byte [62]
.text     C:\Windows\System32\spoolsv.exe[1780] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                          0000000076d0eecd 1 byte [62]
.text     C:\Windows\system32\taskhost.exe[1792] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                         0000000076d0eecd 1 byte [62]
.text     C:\Windows\system32\svchost.exe[1860] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                          0000000076d0eecd 1 byte [62]
.text     C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe[2000] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                             00000000761aa2ba 1 byte [62]
.text     C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe[2024] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                  0000000076d0eecd 1 byte [62]
.text     C:\Program Files (x86)\Launch Manager\dsiwmis.exe[1076] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                        00000000761aa2ba 1 byte [62]
.text     C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe[652] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                               0000000076d0eecd 1 byte [62]
.text     C:\Windows\system32\svchost.exe[2056] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                          0000000076d0eecd 1 byte [62]
.text     C:\Program Files (x86)\Acer\Registration\GREGsvc.exe[2088] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                     00000000761aa2ba 1 byte [62]
.text     C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe[2116] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112           00000000761aa2ba 1 byte [62]
.text     C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe[2184] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112          00000000761aa2ba 1 byte [62]
.text     C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe[2184] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69        0000000076a01465 2 bytes [A0, 76]
.text     C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe[2184] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155       0000000076a014bb 2 bytes [A0, 76]
.text     ...                                                                                                                                                  * 2
.text     C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe[2200] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                   0000000076d0eecd 1 byte [62]
.text     C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe[2232] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112             00000000761aa2ba 1 byte [62]
.text     C:\Program Files\Acer\Optical Drive Power Management\ODDPWR.exe[2244] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                          0000000076d0eecd 1 byte [62]
.text     C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe[2280] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                             00000000761aa2ba 1 byte [62]
.text     C:\Program Files\Acer\Optical Drive Power Management\ODDPWRSvc.exe[2332] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                       0000000076d0eecd 1 byte [62]
.text     C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe[2356] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                          0000000076d0eecd 1 byte [62]
.text     C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe[2396] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                              00000000761aa2ba 1 byte [62]
.text     C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe[2448] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                           0000000076d0eecd 1 byte [62]
.text     C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe[2464] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                      00000000761aa2ba 1 byte [62]
.text     C:\Windows\system32\igfxsrvc.exe[2588] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                         0000000076d0eecd 1 byte [62]
.text     C:\Windows\System32\igfxpers.exe[2604] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                         0000000076d0eecd 1 byte [62]
.text     C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[2664] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                            0000000076d0eecd 1 byte [62]
.text     C:\Windows\system32\svchost.exe[2680] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                          0000000076d0eecd 1 byte [62]
.text     C:\Windows\PLFSetI.exe[2760] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                                                   00000000761aa2ba 1 byte [62]
.text     C:\Windows\PLFSetI.exe[2760] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                 0000000076a01465 2 bytes [A0, 76]
.text     C:\Windows\PLFSetI.exe[2760] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                0000000076a014bb 2 bytes [A0, 76]
.text     ...                                                                                                                                                  * 2
.text     C:\Windows\PLFSetI.exe[2760] C:\Windows\SysWOW64\ksuser.dll!KsCreatePin + 35                                                                         00000000738011a8 2 bytes [80, 73]
.text     C:\Windows\PLFSetI.exe[2760] C:\Windows\SysWOW64\ksuser.dll!KsCreateAllocator + 21                                                                   00000000738013a8 2 bytes [80, 73]
.text     C:\Windows\PLFSetI.exe[2760] C:\Windows\SysWOW64\ksuser.dll!KsCreateClock + 21                                                                       0000000073801422 2 bytes [80, 73]
.text     C:\Windows\PLFSetI.exe[2760] C:\Windows\SysWOW64\ksuser.dll!KsCreateTopologyNode + 19                                                                0000000073801498 2 bytes [80, 73]
.text     C:\Windows\PLFSetI.exe[2760] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdWaitForVerticalBlank + 195                                                     0000000074301b41 2 bytes [30, 74]
.text     C:\Windows\PLFSetI.exe[2760] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdWaitForVerticalBlank + 362                                                     0000000074301be8 2 bytes [30, 74]
.text     C:\Windows\PLFSetI.exe[2760] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdWaitForVerticalBlank + 418                                                     0000000074301c20 2 bytes [30, 74]
.text     C:\Windows\PLFSetI.exe[2760] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdWaitForVerticalBlank + 596                                                     0000000074301cd2 2 bytes [30, 74]
.text     C:\Windows\PLFSetI.exe[2760] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdWaitForVerticalBlank + 628                                                     0000000074301cf2 2 bytes [30, 74]
.text     C:\Program Files\Acer\Acer Updater\UpdaterService.exe[2792] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                    00000000761aa2ba 1 byte [62]
.text     C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe[2888] C:\Windows\syswow64\KERNEL32.dll!GetBinaryTypeW + 112      00000000761aa2ba 1 byte [62]
.text     C:\Program Files (x86)\Skype\Phone\Skype.exe[2968] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                             00000000761aa2ba 1 byte [62]
.text     C:\Program Files (x86)\Skype\Phone\Skype.exe[2968] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                           0000000076a01465 2 bytes [A0, 76]
.text     C:\Program Files (x86)\Skype\Phone\Skype.exe[2968] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                          0000000076a014bb 2 bytes [A0, 76]
.text     ...                                                                                                                                                  * 2
.text     C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe[2932] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                         00000000761aa2ba 1 byte [62]
.text     C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe[2932] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                       0000000076a01465 2 bytes [A0, 76]
.text     C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe[2932] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                      0000000076a014bb 2 bytes [A0, 76]
.text     ...                                                                                                                                                  * 2
.text     C:\Windows\system32\wbem\unsecapp.exe[3112] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                    0000000076d0eecd 1 byte [62]
.text     C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[3304] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                   0000000076d0eecd 1 byte [62]
.text     C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe[3656] C:\Windows\syswow64\KERNEL32.dll!GetBinaryTypeW + 112            00000000761aa2ba 1 byte [62]
.text     C:\Program Files (x86)\Launch Manager\LManager.exe[3744] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                       00000000761aa2ba 1 byte [62]
.text     C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe[3880] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                       0000000076d0eecd 1 byte [62]
.text     C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe[3896] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                         00000000761aa2ba 1 byte [62]
.text     C:\Windows\SysWOW64\RunDll32.exe[3912] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                                         00000000761aa2ba 1 byte [62]
.text     C:\Windows\SysWOW64\RunDll32.exe[3912] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                       0000000076a01465 2 bytes [A0, 76]
.text     C:\Windows\SysWOW64\RunDll32.exe[3912] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                      0000000076a014bb 2 bytes [A0, 76]
.text     ...                                                                                                                                                  * 2
.text     C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe[3920] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112     00000000761aa2ba 1 byte [62]
.text     C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe[3920] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69   0000000076a01465 2 bytes [A0, 76]
.text     C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe[3920] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155  0000000076a014bb 2 bytes [A0, 76]
.text     ...                                                                                                                                                  * 2
.text     C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe[3180] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112            00000000761aa2ba 1 byte [62]
.text     C:\Windows\system32\SearchIndexer.exe[1140] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                    0000000076d0eecd 1 byte [62]
.text     C:\Program Files (x86)\Launch Manager\LMworker.exe[3836] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                       00000000761aa2ba 1 byte [62]
.text     C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe[4148] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112           00000000761aa2ba 1 byte [62]
.text     C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe[4148] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69         0000000076a01465 2 bytes [A0, 76]
.text     C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe[4148] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155        0000000076a014bb 2 bytes [A0, 76]
.text     ...                                                                                                                                                  * 2
.text     C:\Program Files\AVAST Software\Avast\AvastUI.exe[4212] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                        00000000761aa2ba 1 byte [62]
.text     C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[4356] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                         0000000076d0eecd 1 byte [62]
.text     C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe[4964] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                        00000000761aa2ba 1 byte [62]
.text     C:\Program Files\Windows Media Player\wmpnetwk.exe[2104] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                       0000000076d0eecd 1 byte [62]
.text     C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe[5552] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                             0000000076d0eecd 1 byte [62]
.text     C:\Program Files\Acer\Acer PowerSmart Manager\ePowerEvent.exe[5592] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                            0000000076d0eecd 1 byte [62]
.text     C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe[184] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112            00000000761aa2ba 1 byte [62]
.text     C:\Program Files (x86)\Acer\Acer VCM\Vc.exe[6392] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                              00000000761aa2ba 1 byte [62]
.text     C:\Program Files (x86)\Acer\Acer VCM\Vc.exe[6392] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                            0000000076a01465 2 bytes [A0, 76]
.text     C:\Program Files (x86)\Acer\Acer VCM\Vc.exe[6392] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                           0000000076a014bb 2 bytes [A0, 76]
.text     ...                                                                                                                                                  * 2
.text     C:\Program Files (x86)\Acer\Acer VCM\Vc.exe[3128] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                              0000000076d0eecd 1 byte [62]
.text     C:\Windows\system32\notepad.exe[6176] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                          0000000076d0eecd 1 byte [62]
.text     C:\Windows\system32\notepad.exe[7920] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                          0000000076d0eecd 1 byte [62]
.text     C:\Windows\system32\AUDIODG.EXE[1044] C:\Windows\System32\kernel32.dll!GetBinaryTypeW + 189                                                          0000000076d0eecd 1 byte [62]
.text     C:\Users\chris\Downloads\Gmer-19357.exe[6216] C:\Windows\syswow64\kernel32.dll!GetBinaryTypeW + 112                                                  00000000761aa2ba 1 byte [62]
.text     C:\Windows\System32\Magnify.exe[6760] C:\Windows\system32\kernel32.dll!GetBinaryTypeW + 189                                                          0000000076d0eecd 1 byte [62]

---- Threads - GMER 2.1 ----

Thread    C:\Program Files\Windows Media Player\wmpnetwk.exe [2104:3944]                                                                                       000007fefaed2a7c
---- Processes - GMER 2.1 ----

Library   C:\Users\chris\Downloads\FRST64.exe (*** suspicious ***) @ C:\Users\chris\Downloads\FRST64.exe [3128]                                                000000013f340000

---- Registry - GMER 2.1 ----

Reg       HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\f07bcbaeb6ff                                                                          
Reg       HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\f07bcbaeb6ff (not active ControlSet)                                                      

---- EOF - GMER 2.1 ----
         
Code:
ATTFilter
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.02.02.05

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
chris :: BLACK-BOX [Administrator]

06.02.2014 21:57:50
mbam-log-2014-02-06 (21-57-50).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|E:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 353667
Laufzeit: 35 Minute(n), 25 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)
         
log file von AVast finde ich nicht...

Danke!

Alt 07.02.2014, 06:08   #2
schrauber
/// the machine
/// TB-Ausbilder
 

Windows 7 wird nach längerer Laufzeit extrem langsam beim Öffnen von Websites - Standard

Windows 7 wird nach längerer Laufzeit extrem langsam beim Öffnen von Websites



hi,

Downloade dir bitte TDSSKiller TDSSKiller.exe und speichere diese Datei auf dem Desktop
  • Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
  • Drücke Start Scan
  • Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
    TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
    Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt
Poste den Inhalt bitte in jedem Fall hier in deinen Thread.
__________________

__________________

Alt 07.02.2014, 17:10   #3
uyab
 
Windows 7 wird nach längerer Laufzeit extrem langsam beim Öffnen von Websites - Standard

Windows 7 wird nach längerer Laufzeit extrem langsam beim Öffnen von Websites



Hallo,

hier die logfile :

Code:
ATTFilter
18:09:16.0695 5264  TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
18:09:21.0672 5264  ============================================================
18:09:21.0672 5264  Current date / time: 2014/02/07 18:09:21.0672
18:09:21.0672 5264  SystemInfo:
18:09:21.0672 5264  
18:09:21.0672 5264  OS Version: 6.1.7601 ServicePack: 1.0
18:09:21.0672 5264  Product type: Workstation
18:09:21.0672 5264  ComputerName: BLACK-BOX
18:09:21.0672 5264  UserName: chris
18:09:21.0672 5264  Windows directory: C:\Windows
18:09:21.0672 5264  System windows directory: C:\Windows
18:09:21.0672 5264  Running under WOW64
18:09:21.0673 5264  Processor architecture: Intel x64
18:09:21.0673 5264  Number of processors: 4
18:09:21.0673 5264  Page size: 0x1000
18:09:21.0673 5264  Boot type: Normal boot
18:09:21.0673 5264  ============================================================
18:09:22.0107 5264  Drive \Device\Harddisk0\DR0 - Size: 0x25433D6000 (149.05 Gb), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
18:09:22.0117 5264  ============================================================
18:09:22.0117 5264  \Device\Harddisk0\DR0:
18:09:22.0118 5264  MBR partitions:
18:09:22.0118 5264  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1A00800, BlocksNum 0x32000
18:09:22.0118 5264  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1A32800, BlocksNum 0x10FE6800
18:09:22.0118 5264  ============================================================
18:09:22.0120 5264  C: <-> \Device\Harddisk0\DR0\Partition2
18:09:22.0120 5264  ============================================================
18:09:22.0120 5264  Initialize success
18:09:22.0120 5264  ============================================================
18:09:23.0670 2632  ============================================================
18:09:23.0671 2632  Scan started
18:09:23.0671 2632  Mode: Manual; 
18:09:23.0671 2632  ============================================================
18:09:23.0831 2632  ================ Scan system memory ========================
18:09:23.0831 2632  System memory - ok
18:09:23.0832 2632  ================ Scan services =============================
18:09:23.0905 2632  [ A87D604AEA360176311474C87A63BB88 ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys
18:09:23.0908 2632  1394ohci - ok
18:09:23.0919 2632  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI            C:\Windows\system32\drivers\ACPI.sys
18:09:23.0923 2632  ACPI - ok
18:09:23.0929 2632  [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys
18:09:23.0930 2632  AcpiPmi - ok
18:09:23.0938 2632  [ E5568164C070A4988BD79C896920B3C6 ] acsock          C:\Windows\system32\DRIVERS\acsock64.sys
18:09:23.0940 2632  acsock - ok
18:09:23.0949 2632  [ B362181ED3771DC03B4141927C80F801 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
18:09:23.0950 2632  AdobeARMservice - ok
18:09:24.0000 2632  [ C8C6C0D659734FDBF63F6F421A5416BC ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
18:09:24.0003 2632  AdobeFlashPlayerUpdateSvc - ok
18:09:24.0017 2632  [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx         C:\Windows\system32\DRIVERS\adp94xx.sys
18:09:24.0021 2632  adp94xx - ok
18:09:24.0034 2632  [ 597F78224EE9224EA1A13D6350CED962 ] adpahci         C:\Windows\system32\DRIVERS\adpahci.sys
18:09:24.0037 2632  adpahci - ok
18:09:24.0046 2632  [ E109549C90F62FB570B9540C4B148E54 ] adpu320         C:\Windows\system32\DRIVERS\adpu320.sys
18:09:24.0048 2632  adpu320 - ok
18:09:24.0058 2632  [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll
18:09:24.0060 2632  AeLookupSvc - ok
18:09:24.0073 2632  [ 79059559E89D06E8B80CE2944BE20228 ] AFD             C:\Windows\system32\drivers\afd.sys
18:09:24.0078 2632  AFD - ok
18:09:24.0085 2632  [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440          C:\Windows\system32\drivers\agp440.sys
18:09:24.0087 2632  agp440 - ok
18:09:24.0094 2632  [ 3290D6946B5E30E70414990574883DDB ] ALG             C:\Windows\System32\alg.exe
18:09:24.0095 2632  ALG - ok
18:09:24.0101 2632  [ 5812713A477A3AD7363C7438CA2EE038 ] aliide          C:\Windows\system32\drivers\aliide.sys
18:09:24.0102 2632  aliide - ok
18:09:24.0111 2632  [ 72F1579514A09BB8CB210087CB161048 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
18:09:24.0114 2632  AMD External Events Utility - ok
18:09:24.0119 2632  [ 1FF8B4431C353CE385C875F194924C0C ] amdide          C:\Windows\system32\drivers\amdide.sys
18:09:24.0120 2632  amdide - ok
18:09:24.0127 2632  [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8           C:\Windows\system32\DRIVERS\amdk8.sys
18:09:24.0129 2632  AmdK8 - ok
18:09:24.0220 2632  [ 9986E240D1512D8561777326882B80DC ] amdkmdag        C:\Windows\system32\DRIVERS\atipmdag.sys
18:09:24.0275 2632  amdkmdag - ok
18:09:24.0287 2632  [ 959FA98168C8AC90D8F8D47A543118CA ] amdkmdap        C:\Windows\system32\DRIVERS\atikmpag.sys
18:09:24.0289 2632  amdkmdap - ok
18:09:24.0295 2632  [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM          C:\Windows\system32\DRIVERS\amdppm.sys
18:09:24.0297 2632  AmdPPM - ok
18:09:24.0303 2632  [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata         C:\Windows\system32\drivers\amdsata.sys
18:09:24.0304 2632  amdsata - ok
18:09:24.0313 2632  [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs          C:\Windows\system32\DRIVERS\amdsbs.sys
18:09:24.0315 2632  amdsbs - ok
18:09:24.0321 2632  [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata         C:\Windows\system32\drivers\amdxata.sys
18:09:24.0322 2632  amdxata - ok
18:09:24.0328 2632  [ 391887990CDAA83DE5C56C3FDE966DA1 ] AmUStor         C:\Windows\system32\drivers\AmUStor.SYS
18:09:24.0329 2632  AmUStor - ok
18:09:24.0336 2632  [ 89A69C3F2F319B43379399547526D952 ] AppID           C:\Windows\system32\drivers\appid.sys
18:09:24.0337 2632  AppID - ok
18:09:24.0343 2632  [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc        C:\Windows\System32\appidsvc.dll
18:09:24.0344 2632  AppIDSvc - ok
18:09:24.0350 2632  [ 9D2A2369AB4B08A4905FE72DB104498F ] Appinfo         C:\Windows\System32\appinfo.dll
18:09:24.0352 2632  Appinfo - ok
18:09:24.0358 2632  [ C484F8CEB1717C540242531DB7845C4E ] arc             C:\Windows\system32\DRIVERS\arc.sys
18:09:24.0359 2632  arc - ok
18:09:24.0366 2632  [ 019AF6924AEFE7839F61C830227FE79C ] arcsas          C:\Windows\system32\DRIVERS\arcsas.sys
18:09:24.0367 2632  arcsas - ok
18:09:24.0375 2632  [ 9C2BEA3957EFFD45F352F0938DFB3721 ] aswMonFlt       C:\Windows\system32\drivers\aswMonFlt.sys
18:09:24.0377 2632  aswMonFlt - ok
18:09:24.0384 2632  [ 679712B7A353EE665B9301592164A172 ] aswRdr          C:\Windows\system32\drivers\aswRdr2.sys
18:09:24.0385 2632  aswRdr - ok
18:09:24.0392 2632  [ C04F7B373881009D7994D9BF55D24AB4 ] aswRvrt         C:\Windows\system32\drivers\aswRvrt.sys
18:09:24.0393 2632  aswRvrt - ok
18:09:24.0414 2632  [ 52B5F8FAF7E78C02D26B0B6E3A05F596 ] aswSnx          C:\Windows\system32\drivers\aswSnx.sys
18:09:24.0423 2632  aswSnx - ok
18:09:24.0435 2632  [ 251360C2FCA22BAFE0583314B3262F98 ] aswSP           C:\Windows\system32\drivers\aswSP.sys
18:09:24.0439 2632  aswSP - ok
18:09:24.0446 2632  [ AAB5F5336EDBB5D99CC7E1A9F4D8F63F ] aswStm          C:\Windows\system32\drivers\aswStm.sys
18:09:24.0448 2632  aswStm - ok
18:09:24.0456 2632  [ 90399625F341AB76BA4B85A5E860EB1F ] aswVmm          C:\Windows\system32\drivers\aswVmm.sys
18:09:24.0458 2632  aswVmm - ok
18:09:24.0464 2632  [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
18:09:24.0465 2632  AsyncMac - ok
18:09:24.0471 2632  [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi           C:\Windows\system32\drivers\atapi.sys
18:09:24.0471 2632  atapi - ok
18:09:24.0482 2632  [ 77C149E6D702737B2E372DEE166FAEF8 ] AtiHdmiService  C:\Windows\system32\drivers\AtiHdmi.sys
18:09:24.0484 2632  AtiHdmiService - ok
18:09:24.0500 2632  [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
18:09:24.0506 2632  AudioEndpointBuilder - ok
18:09:24.0521 2632  [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv        C:\Windows\System32\Audiosrv.dll
18:09:24.0528 2632  AudioSrv - ok
18:09:24.0539 2632  [ D74884939D53612FD84AC82C59CCFE27 ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe
18:09:24.0540 2632  avast! Antivirus - ok
18:09:24.0549 2632  [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV        C:\Windows\System32\AxInstSV.dll
18:09:24.0550 2632  AxInstSV - ok
18:09:24.0563 2632  [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv         C:\Windows\system32\DRIVERS\bxvbda.sys
18:09:24.0567 2632  b06bdrv - ok
18:09:24.0578 2632  [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys
18:09:24.0581 2632  b57nd60a - ok
18:09:24.0633 2632  [ FDE8C8DC07E75347E4C6B455A0964217 ] BCM43XX         C:\Windows\system32\DRIVERS\bcmwl664.sys
18:09:24.0659 2632  BCM43XX - ok
18:09:24.0667 2632  [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC          C:\Windows\System32\bdesvc.dll
18:09:24.0668 2632  BDESVC - ok
18:09:24.0675 2632  [ 16A47CE2DECC9B099349A5F840654746 ] Beep            C:\Windows\system32\drivers\Beep.sys
18:09:24.0675 2632  Beep - ok
18:09:24.0691 2632  [ 82974D6A2FD19445CC5171FC378668A4 ] BFE             C:\Windows\System32\bfe.dll
18:09:24.0698 2632  BFE - ok
18:09:24.0716 2632  [ 1EA7969E3271CBC59E1730697DC74682 ] BITS            C:\Windows\System32\qmgr.dll
18:09:24.0728 2632  BITS - ok
18:09:24.0734 2632  [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
18:09:24.0735 2632  blbdrive - ok
18:09:24.0742 2632  [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
18:09:24.0743 2632  bowser - ok
18:09:24.0748 2632  [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo        C:\Windows\system32\DRIVERS\BrFiltLo.sys
18:09:24.0749 2632  BrFiltLo - ok
18:09:24.0755 2632  [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp        C:\Windows\system32\DRIVERS\BrFiltUp.sys
18:09:24.0756 2632  BrFiltUp - ok
18:09:24.0763 2632  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser         C:\Windows\System32\browser.dll
18:09:24.0765 2632  Browser - ok
18:09:24.0775 2632  [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid         C:\Windows\System32\Drivers\Brserid.sys
18:09:24.0778 2632  Brserid - ok
18:09:24.0783 2632  [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
18:09:24.0784 2632  BrSerWdm - ok
18:09:24.0789 2632  [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
18:09:24.0790 2632  BrUsbMdm - ok
18:09:24.0795 2632  [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
18:09:24.0796 2632  BrUsbSer - ok
18:09:24.0801 2632  [ CF98190A94F62E405C8CB255018B2315 ] BthEnum         C:\Windows\system32\drivers\BthEnum.sys
18:09:24.0802 2632  BthEnum - ok
18:09:24.0807 2632  [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM        C:\Windows\system32\DRIVERS\bthmodem.sys
18:09:24.0809 2632  BTHMODEM - ok
18:09:24.0815 2632  [ 02DD601B708DD0667E1331FA8518E9FF ] BthPan          C:\Windows\system32\DRIVERS\bthpan.sys
18:09:24.0816 2632  BthPan - ok
18:09:24.0828 2632  [ 738D0E9272F59EB7A1449C3EC118E6C4 ] BTHPORT         C:\Windows\System32\Drivers\BTHport.sys
18:09:24.0833 2632  BTHPORT - ok
18:09:24.0839 2632  [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv         C:\Windows\system32\bthserv.dll
18:09:24.0841 2632  bthserv - ok
18:09:24.0846 2632  [ F188B7394D81010767B6DF3178519A37 ] BTHUSB          C:\Windows\System32\Drivers\BTHUSB.sys
18:09:24.0847 2632  BTHUSB - ok
18:09:24.0858 2632  [ 380B798D30C56EDE4AF58619D0E86CCB ] btwampfl        C:\Windows\system32\drivers\btwampfl.sys
18:09:24.0861 2632  btwampfl - ok
18:09:24.0867 2632  [ BA5622F5544C6C445DFF1A05ACC8B19D ] btwaudio        C:\Windows\system32\drivers\btwaudio.sys
18:09:24.0869 2632  btwaudio - ok
18:09:24.0875 2632  [ A11905D0F4BD34771F195217B6AA5AE0 ] btwavdt         C:\Windows\system32\drivers\btwavdt.sys
18:09:24.0877 2632  btwavdt - ok
18:09:24.0897 2632  [ 3930E53EE0BED9DFF9AFA09F505D0CAE ] btwdins         C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
18:09:24.0905 2632  btwdins - ok
18:09:24.0911 2632  [ 07096D2BC22CCB6CEA5A532DF0BE8A75 ] btwl2cap        C:\Windows\system32\DRIVERS\btwl2cap.sys
18:09:24.0912 2632  btwl2cap - ok
18:09:24.0917 2632  [ BD776F32D64EC615BE4563DC2747224E ] btwrchid        C:\Windows\system32\DRIVERS\btwrchid.sys
18:09:24.0918 2632  btwrchid - ok
18:09:24.0924 2632  [ B8BD2BB284668C84865658C77574381A ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
18:09:24.0926 2632  cdfs - ok
18:09:24.0933 2632  [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom           C:\Windows\system32\drivers\cdrom.sys
18:09:24.0934 2632  cdrom - ok
18:09:24.0941 2632  [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc     C:\Windows\System32\certprop.dll
18:09:24.0943 2632  CertPropSvc - ok
18:09:24.0948 2632  [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass        C:\Windows\system32\DRIVERS\circlass.sys
18:09:24.0949 2632  circlass - ok
18:09:24.0959 2632  [ FE1EC06F2253F691FE36217C592A0206 ] CLFS            C:\Windows\system32\CLFS.sys
18:09:24.0963 2632  CLFS - ok
18:09:24.0974 2632  [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
18:09:24.0975 2632  clr_optimization_v2.0.50727_32 - ok
18:09:24.0984 2632  [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
18:09:24.0986 2632  clr_optimization_v2.0.50727_64 - ok
18:09:24.0997 2632  [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
18:09:24.0999 2632  clr_optimization_v4.0.30319_32 - ok
18:09:25.0010 2632  [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
18:09:25.0012 2632  clr_optimization_v4.0.30319_64 - ok
18:09:25.0018 2632  [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys
18:09:25.0018 2632  CmBatt - ok
18:09:25.0023 2632  [ E19D3F095812725D88F9001985B94EDD ] cmdide          C:\Windows\system32\drivers\cmdide.sys
18:09:25.0024 2632  cmdide - ok
18:09:25.0036 2632  [ EBF28856F69CF094A902F884CF989706 ] CNG             C:\Windows\system32\Drivers\cng.sys
18:09:25.0040 2632  CNG - ok
18:09:25.0046 2632  [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys
18:09:25.0047 2632  Compbatt - ok
18:09:25.0052 2632  [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus    C:\Windows\system32\drivers\CompositeBus.sys
18:09:25.0053 2632  CompositeBus - ok
18:09:25.0058 2632  COMSysApp - ok
18:09:25.0066 2632  [ 1C827878A998C18847245FE1F34EE597 ] crcdisk         C:\Windows\system32\DRIVERS\crcdisk.sys
18:09:25.0067 2632  crcdisk - ok
18:09:25.0076 2632  [ 6B400F211BEE880A37A1ED0368776BF4 ] CryptSvc        C:\Windows\system32\cryptsvc.dll
18:09:25.0078 2632  CryptSvc - ok
18:09:25.0092 2632  [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch      C:\Windows\system32\rpcss.dll
18:09:25.0101 2632  DcomLaunch - ok
18:09:25.0110 2632  [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc       C:\Windows\System32\defragsvc.dll
18:09:25.0113 2632  defragsvc - ok
18:09:25.0119 2632  [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
18:09:25.0121 2632  DfsC - ok
18:09:25.0130 2632  [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp            C:\Windows\system32\dhcpcore.dll
18:09:25.0134 2632  Dhcp - ok
18:09:25.0139 2632  [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache        C:\Windows\system32\drivers\discache.sys
18:09:25.0140 2632  discache - ok
18:09:25.0147 2632  [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk            C:\Windows\system32\DRIVERS\disk.sys
18:09:25.0148 2632  Disk - ok
18:09:25.0155 2632  [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
18:09:25.0158 2632  Dnscache - ok
18:09:25.0166 2632  [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc         C:\Windows\System32\dot3svc.dll
18:09:25.0170 2632  dot3svc - ok
18:09:25.0177 2632  [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS             C:\Windows\system32\dps.dll
18:09:25.0180 2632  DPS - ok
18:09:25.0185 2632  [ 9B19F34400D24DF84C858A421C205754 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys
18:09:25.0186 2632  drmkaud - ok
18:09:25.0196 2632  [ 61E894FE1E9CC720C909E6E343351794 ] DsiWMIService   C:\Program Files (x86)\Launch Manager\dsiwmis.exe
18:09:25.0199 2632  DsiWMIService - ok
18:09:25.0218 2632  [ 88612F1CE3BF42256913BF6E61C70D52 ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys
18:09:25.0226 2632  DXGKrnl - ok
18:09:25.0233 2632  [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost         C:\Windows\System32\eapsvc.dll
18:09:25.0235 2632  EapHost - ok
18:09:25.0284 2632  [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv           C:\Windows\system32\DRIVERS\evbda.sys
18:09:25.0312 2632  ebdrv - ok
18:09:25.0319 2632  [ 4D71227301DD8D09097B9E4CC6527E5A ] EFS             C:\Windows\System32\lsass.exe
18:09:25.0322 2632  EFS - ok
18:09:25.0337 2632  [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr         C:\Windows\ehome\ehRecvr.exe
18:09:25.0343 2632  ehRecvr - ok
18:09:25.0350 2632  [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched         C:\Windows\ehome\ehsched.exe
18:09:25.0351 2632  ehSched - ok
18:09:25.0363 2632  [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor         C:\Windows\system32\DRIVERS\elxstor.sys
18:09:25.0368 2632  elxstor - ok
18:09:25.0384 2632  [ A04DF13F40022550381A48E4E4587A67 ] ePowerSvc       C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe
18:09:25.0392 2632  ePowerSvc - ok
18:09:25.0401 2632  [ B5581646636759D0DAFA8B008881C079 ] EPSON_EB_RPCV4_01 C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE
18:09:25.0402 2632  EPSON_EB_RPCV4_01 - ok
18:09:25.0408 2632  [ 1E345F2A2D95DA3190596E691CDE9342 ] EPSON_PM_RPCV4_01 C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE
18:09:25.0409 2632  EPSON_PM_RPCV4_01 - ok
18:09:25.0414 2632  [ 34A3C54752046E79A126E15C51DB409B ] ErrDev          C:\Windows\system32\drivers\errdev.sys
18:09:25.0415 2632  ErrDev - ok
18:09:25.0431 2632  [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem     C:\Windows\system32\es.dll
18:09:25.0436 2632  EventSystem - ok
18:09:25.0445 2632  [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat           C:\Windows\system32\drivers\exfat.sys
18:09:25.0447 2632  exfat - ok
18:09:25.0454 2632  [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat         C:\Windows\system32\drivers\fastfat.sys
18:09:25.0456 2632  fastfat - ok
18:09:25.0471 2632  [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax             C:\Windows\system32\fxssvc.exe
18:09:25.0479 2632  Fax - ok
18:09:25.0484 2632  [ D765D19CD8EF61F650C384F62FAC00AB ] fdc             C:\Windows\system32\DRIVERS\fdc.sys
18:09:25.0485 2632  fdc - ok
18:09:25.0490 2632  [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost         C:\Windows\system32\fdPHost.dll
18:09:25.0492 2632  fdPHost - ok
18:09:25.0497 2632  [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub        C:\Windows\system32\fdrespub.dll
18:09:25.0499 2632  FDResPub - ok
18:09:25.0505 2632  [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
18:09:25.0506 2632  FileInfo - ok
18:09:25.0512 2632  [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys
18:09:25.0513 2632  Filetrace - ok
18:09:25.0517 2632  [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys
18:09:25.0518 2632  flpydisk - ok
18:09:25.0527 2632  [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
18:09:25.0530 2632  FltMgr - ok
18:09:25.0551 2632  [ C4C183E6551084039EC862DA1C945E3D ] FontCache       C:\Windows\system32\FntCache.dll
18:09:25.0562 2632  FontCache - ok
18:09:25.0568 2632  [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
18:09:25.0569 2632  FontCache3.0.0.0 - ok
18:09:25.0575 2632  [ D43703496149971890703B4B1B723EAC ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys
18:09:25.0576 2632  FsDepends - ok
18:09:25.0586 2632  [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
18:09:25.0587 2632  Fs_Rec - ok
18:09:25.0595 2632  [ 8F6322049018354F45F05A2FD2D4E5E0 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
18:09:25.0597 2632  fvevol - ok
18:09:25.0603 2632  [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx        C:\Windows\system32\DRIVERS\gagp30kx.sys
18:09:25.0604 2632  gagp30kx - ok
18:09:25.0620 2632  [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc           C:\Windows\System32\gpsvc.dll
18:09:25.0628 2632  gpsvc - ok
18:09:25.0634 2632  [ 0191DEE9B9EB7902AF2CF4F67301095D ] GREGService     C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
18:09:25.0634 2632  GREGService - ok
18:09:25.0640 2632  [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
18:09:25.0641 2632  hcw85cir - ok
18:09:25.0651 2632  [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
18:09:25.0654 2632  HdAudAddService - ok
18:09:25.0661 2632  [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys
18:09:25.0662 2632  HDAudBus - ok
18:09:25.0668 2632  [ B6AC71AAA2B10848F57FC49D55A651AF ] HECIx64         C:\Windows\system32\DRIVERS\HECIx64.sys
18:09:25.0669 2632  HECIx64 - ok
18:09:25.0675 2632  [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt         C:\Windows\system32\DRIVERS\HidBatt.sys
18:09:25.0676 2632  HidBatt - ok
18:09:25.0682 2632  [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth          C:\Windows\system32\DRIVERS\hidbth.sys
18:09:25.0683 2632  HidBth - ok
18:09:25.0689 2632  [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr           C:\Windows\system32\DRIVERS\hidir.sys
18:09:25.0690 2632  HidIr - ok
18:09:25.0696 2632  [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv         C:\Windows\system32\hidserv.dll
18:09:25.0698 2632  hidserv - ok
18:09:25.0704 2632  [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys
18:09:25.0705 2632  HidUsb - ok
18:09:25.0711 2632  [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc          C:\Windows\system32\kmsvc.dll
18:09:25.0714 2632  hkmsvc - ok
18:09:25.0722 2632  [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
18:09:25.0727 2632  HomeGroupListener - ok
18:09:25.0735 2632  [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
18:09:25.0740 2632  HomeGroupProvider - ok
18:09:25.0746 2632  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
18:09:25.0747 2632  HpSAMD - ok
18:09:25.0761 2632  [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
18:09:25.0768 2632  HTTP - ok
18:09:25.0773 2632  [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
18:09:25.0774 2632  hwpolicy - ok
18:09:25.0781 2632  [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt        C:\Windows\system32\drivers\i8042prt.sys
18:09:25.0782 2632  i8042prt - ok
18:09:25.0794 2632  [ 42E00996DFC13C46366689C0EA8ABC5E ] iaStor          C:\Windows\system32\DRIVERS\iaStor.sys
18:09:25.0798 2632  iaStor - ok
18:09:25.0805 2632  [ 48362E5DB5CB2C000C514EE1F3890ACD ] IAStorDataMgrSvc C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
18:09:25.0805 2632  IAStorDataMgrSvc - ok
18:09:25.0817 2632  [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys
18:09:25.0821 2632  iaStorV - ok
18:09:25.0828 2632  [ 6F95324909B502E2651442C1548AB12F ] IDriverT        C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
18:09:25.0829 2632  IDriverT - ok
18:09:25.0846 2632  [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc           C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
18:09:25.0852 2632  idsvc - ok
18:09:25.0858 2632  IEEtwCollectorService - ok
18:09:25.0864 2632  [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp           C:\Windows\system32\DRIVERS\iirsp.sys
18:09:25.0865 2632  iirsp - ok
18:09:25.0882 2632  [ 344789398EC3EE5A4E00C52B31847946 ] IKEEXT          C:\Windows\System32\ikeext.dll
18:09:25.0891 2632  IKEEXT - ok
18:09:25.0898 2632  [ 36FDF367A1DABFF903E2214023D71368 ] Impcd           C:\Windows\system32\DRIVERS\Impcd.sys
18:09:25.0900 2632  Impcd - ok
18:09:25.0938 2632  [ A0EAB13A78CC5FB960EC76E3D6408DA3 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
18:09:25.0958 2632  IntcAzAudAddService - ok
18:09:25.0965 2632  [ F00F20E70C6EC3AA366910083A0518AA ] intelide        C:\Windows\system32\drivers\intelide.sys
18:09:25.0966 2632  intelide - ok
18:09:26.0080 2632  [ 8E509DE232CFA4F8A5B34F01802F500E ] intelkmd        C:\Windows\system32\DRIVERS\igdpmd64.sys
18:09:26.0148 2632  intelkmd - ok
18:09:26.0158 2632  [ ADA036632C664CAA754079041CF1F8C1 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
18:09:26.0159 2632  intelppm - ok
18:09:26.0165 2632  [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum       C:\Windows\system32\ipbusenum.dll
18:09:26.0168 2632  IPBusEnum - ok
18:09:26.0175 2632  [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
18:09:26.0176 2632  IpFilterDriver - ok
18:09:26.0188 2632  [ 08C2957BB30058E663720C5606885653 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
18:09:26.0195 2632  iphlpsvc - ok
18:09:26.0202 2632  [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys
18:09:26.0203 2632  IPMIDRV - ok
18:09:26.0209 2632  [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT           C:\Windows\system32\drivers\ipnat.sys
18:09:26.0211 2632  IPNAT - ok
18:09:26.0216 2632  [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM          C:\Windows\system32\drivers\irenum.sys
18:09:26.0217 2632  IRENUM - ok
18:09:26.0222 2632  [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp          C:\Windows\system32\drivers\isapnp.sys
18:09:26.0223 2632  isapnp - ok
18:09:26.0232 2632  [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
18:09:26.0235 2632  iScsiPrt - ok
18:09:26.0240 2632  [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys
18:09:26.0241 2632  kbdclass - ok
18:09:26.0247 2632  [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys
18:09:26.0248 2632  kbdhid - ok
18:09:26.0252 2632  [ 4D71227301DD8D09097B9E4CC6527E5A ] KeyIso          C:\Windows\system32\lsass.exe
18:09:26.0255 2632  KeyIso - ok
18:09:26.0262 2632  [ 8F489706472F7E9A06BAAA198703FA64 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
18:09:26.0263 2632  KSecDD - ok
18:09:26.0270 2632  [ 868A2CAAB12EFC7A021682BCA0EEC54C ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys
18:09:26.0272 2632  KSecPkg - ok
18:09:26.0278 2632  [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys
18:09:26.0279 2632  ksthunk - ok
18:09:26.0289 2632  [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm           C:\Windows\system32\msdtckrm.dll
18:09:26.0295 2632  KtmRm - ok
18:09:26.0301 2632  [ 39918DB0EFCF045A1CE6FABBF339F975 ] L1C             C:\Windows\system32\DRIVERS\L1C62x64.sys
18:09:26.0302 2632  L1C - ok
18:09:26.0310 2632  [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer    C:\Windows\system32\srvsvc.dll
18:09:26.0317 2632  LanmanServer - ok
18:09:26.0323 2632  [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
18:09:26.0329 2632  LanmanWorkstation - ok
18:09:26.0337 2632  [ 1538831CF8AD2979A04C423779465827 ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
18:09:26.0338 2632  lltdio - ok
18:09:26.0347 2632  [ C1185803384AB3FEED115F79F109427F ] lltdsvc         C:\Windows\System32\lltdsvc.dll
18:09:26.0352 2632  lltdsvc - ok
18:09:26.0358 2632  [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts         C:\Windows\System32\lmhsvc.dll
18:09:26.0361 2632  lmhosts - ok
18:09:26.0368 2632  [ A1C148801B4AF64847AEB9F3AD9594EF ] LMS             C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
18:09:26.0371 2632  LMS - ok
18:09:26.0380 2632  [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC          C:\Windows\system32\DRIVERS\lsi_fc.sys
18:09:26.0382 2632  LSI_FC - ok
18:09:26.0388 2632  [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS         C:\Windows\system32\DRIVERS\lsi_sas.sys
18:09:26.0389 2632  LSI_SAS - ok
18:09:26.0396 2632  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2        C:\Windows\system32\DRIVERS\lsi_sas2.sys
18:09:26.0397 2632  LSI_SAS2 - ok
18:09:26.0403 2632  [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI        C:\Windows\system32\DRIVERS\lsi_scsi.sys
18:09:26.0405 2632  LSI_SCSI - ok
18:09:26.0412 2632  [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv           C:\Windows\system32\drivers\luafv.sys
18:09:26.0413 2632  luafv - ok
18:09:26.0419 2632  [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll
18:09:26.0423 2632  Mcx2Svc - ok
18:09:26.0428 2632  [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas         C:\Windows\system32\DRIVERS\megasas.sys
18:09:26.0429 2632  megasas - ok
18:09:26.0437 2632  [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR          C:\Windows\system32\DRIVERS\MegaSR.sys
18:09:26.0440 2632  MegaSR - ok
18:09:26.0452 2632  Microsoft SharePoint Workspace Audit Service - ok
18:09:26.0458 2632  [ E40E80D0304A73E8D269F7141D77250B ] MMCSS           C:\Windows\system32\mmcss.dll
18:09:26.0462 2632  MMCSS - ok
18:09:26.0467 2632  [ 800BA92F7010378B09F9ED9270F07137 ] Modem           C:\Windows\system32\drivers\modem.sys
18:09:26.0468 2632  Modem - ok
18:09:26.0473 2632  [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor         C:\Windows\system32\DRIVERS\monitor.sys
18:09:26.0475 2632  monitor - ok
18:09:26.0480 2632  [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys
18:09:26.0481 2632  mouclass - ok
18:09:26.0486 2632  [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
18:09:26.0487 2632  mouhid - ok
18:09:26.0494 2632  [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
18:09:26.0495 2632  mountmgr - ok
18:09:26.0501 2632  [ 3B9398E0146855B1DC0E3D9769C80F01 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
18:09:26.0502 2632  MozillaMaintenance - ok
18:09:26.0510 2632  [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio            C:\Windows\system32\drivers\mpio.sys
18:09:26.0512 2632  mpio - ok
18:09:26.0517 2632  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
18:09:26.0519 2632  mpsdrv - ok
18:09:26.0535 2632  [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc          C:\Windows\system32\mpssvc.dll
18:09:26.0545 2632  MpsSvc - ok
18:09:26.0552 2632  [ 1A4F75E63C9FB84B85DFFC6B63FD5404 ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
18:09:26.0554 2632  MRxDAV - ok
18:09:26.0561 2632  [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
18:09:26.0563 2632  mrxsmb - ok
18:09:26.0573 2632  [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
18:09:26.0576 2632  mrxsmb10 - ok
18:09:26.0583 2632  [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
18:09:26.0585 2632  mrxsmb20 - ok
18:09:26.0591 2632  [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci          C:\Windows\system32\drivers\msahci.sys
18:09:26.0592 2632  msahci - ok
18:09:26.0599 2632  [ DB801A638D011B9633829EB6F663C900 ] msdsm           C:\Windows\system32\drivers\msdsm.sys
18:09:26.0600 2632  msdsm - ok
18:09:26.0608 2632  [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC           C:\Windows\System32\msdtc.exe
18:09:26.0613 2632  MSDTC - ok
18:09:26.0622 2632  [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs            C:\Windows\system32\drivers\Msfs.sys
18:09:26.0624 2632  Msfs - ok
18:09:26.0629 2632  [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys
18:09:26.0631 2632  mshidkmdf - ok
18:09:26.0636 2632  [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
18:09:26.0637 2632  msisadrv - ok
18:09:26.0644 2632  [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll
18:09:26.0647 2632  MSiSCSI - ok
18:09:26.0655 2632  msiserver - ok
18:09:26.0662 2632  [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys
18:09:26.0663 2632  MSKSSRV - ok
18:09:26.0669 2632  [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
18:09:26.0670 2632  MSPCLOCK - ok
18:09:26.0675 2632  [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys
18:09:26.0676 2632  MSPQM - ok
18:09:26.0686 2632  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys
18:09:26.0690 2632  MsRPC - ok
18:09:26.0698 2632  [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios        C:\Windows\system32\drivers\mssmbios.sys
18:09:26.0699 2632  mssmbios - ok
18:09:26.0704 2632  [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys
18:09:26.0705 2632  MSTEE - ok
18:09:26.0710 2632  [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig        C:\Windows\system32\DRIVERS\MTConfig.sys
18:09:26.0711 2632  MTConfig - ok
18:09:26.0717 2632  [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup             C:\Windows\system32\Drivers\mup.sys
18:09:26.0718 2632  Mup - ok
18:09:26.0724 2632  [ 6FFECC25B39DC7652A0CEC0ADA9DB589 ] mwlPSDFilter    C:\Windows\system32\DRIVERS\mwlPSDFilter.sys
18:09:26.0725 2632  mwlPSDFilter - ok
18:09:26.0730 2632  [ 0BEFE32CA56D6EE89D58175725596A85 ] mwlPSDNServ     C:\Windows\system32\DRIVERS\mwlPSDNServ.sys
18:09:26.0732 2632  mwlPSDNServ - ok
18:09:26.0737 2632  [ D43BC633B8660463E446E28E14A51262 ] mwlPSDVDisk     C:\Windows\system32\DRIVERS\mwlPSDVDisk.sys
18:09:26.0739 2632  mwlPSDVDisk - ok
18:09:26.0749 2632  [ 22A4905C958BEB68D78385B633C1351B ] MWLService      C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe
18:09:26.0752 2632  MWLService - ok
18:09:26.0764 2632  [ 582AC6D9873E31DFA28A4547270862DD ] napagent        C:\Windows\system32\qagentRT.dll
18:09:26.0771 2632  napagent - ok
18:09:26.0780 2632  [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys
18:09:26.0783 2632  NativeWifiP - ok
18:09:26.0801 2632  [ 760E38053BF56E501D562B70AD796B88 ] NDIS            C:\Windows\system32\drivers\ndis.sys
18:09:26.0809 2632  NDIS - ok
18:09:26.0815 2632  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys
18:09:26.0816 2632  NdisCap - ok
18:09:26.0821 2632  [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
18:09:26.0823 2632  NdisTapi - ok
18:09:26.0829 2632  [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys
18:09:26.0831 2632  Ndisuio - ok
18:09:26.0839 2632  [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys
18:09:26.0841 2632  NdisWan - ok
18:09:26.0847 2632  [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys
18:09:26.0848 2632  NDProxy - ok
18:09:26.0854 2632  [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys
18:09:26.0855 2632  NetBIOS - ok
18:09:26.0863 2632  [ 09594D1089C523423B32A4229263F068 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys
18:09:26.0866 2632  NetBT - ok
18:09:26.0871 2632  [ 4D71227301DD8D09097B9E4CC6527E5A ] Netlogon        C:\Windows\system32\lsass.exe
18:09:26.0874 2632  Netlogon - ok
18:09:26.0884 2632  [ 847D3AE376C0817161A14A82C8922A9E ] Netman          C:\Windows\System32\netman.dll
18:09:26.0890 2632  Netman - ok
18:09:26.0902 2632  [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm        C:\Windows\System32\netprofm.dll
18:09:26.0909 2632  netprofm - ok
18:09:26.0915 2632  [ 3E5A36127E201DDF663176B66828FAFE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
18:09:26.0916 2632  NetTcpPortSharing - ok
18:09:27.0021 2632  [ 24F64343F14A119308456E1CA7507B26 ] NETw5s64        C:\Windows\system32\DRIVERS\NETw5s64.sys
18:09:27.0083 2632  NETw5s64 - ok
18:09:27.0092 2632  [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960         C:\Windows\system32\DRIVERS\nfrd960.sys
18:09:27.0094 2632  nfrd960 - ok
18:09:27.0102 2632  [ 8AD77806D336673F270DB31645267293 ] NlaSvc          C:\Windows\System32\nlasvc.dll
18:09:27.0108 2632  NlaSvc - ok
18:09:27.0114 2632  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs            C:\Windows\system32\drivers\Npfs.sys
18:09:27.0115 2632  Npfs - ok
18:09:27.0120 2632  [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi             C:\Windows\system32\nsisvc.dll
18:09:27.0124 2632  nsi - ok
18:09:27.0129 2632  [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
18:09:27.0130 2632  nsiproxy - ok
18:09:27.0159 2632  [ B98F8C6E31CD07B2E6F71F7F648E38C0 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
18:09:27.0174 2632  Ntfs - ok
18:09:27.0184 2632  [ 5B3CE960C62DBE864BE9A0BD043A3E30 ] NTI IScheduleSvc C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
18:09:27.0186 2632  NTI IScheduleSvc - ok
18:09:27.0200 2632  [ 15221DD637D9D0FFC60848EBBF1DF538 ] NTIBackupSvc    C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
18:09:27.0201 2632  NTIBackupSvc - ok
18:09:27.0206 2632  [ 64DDD0DEE976302F4BD93E5EFCC2F013 ] NTIDrvr         C:\Windows\system32\drivers\NTIDrvr.sys
18:09:27.0207 2632  NTIDrvr - ok
18:09:27.0214 2632  [ B5071E15D4C3F5EF5018AFF7E85A85E5 ] NTISchedulerSvc C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
18:09:27.0216 2632  NTISchedulerSvc - ok
18:09:27.0221 2632  [ 9899284589F75FA8724FF3D16AED75C1 ] Null            C:\Windows\system32\drivers\Null.sys
18:09:27.0222 2632  Null - ok
18:09:27.0228 2632  [ 4CB891301E4339F8652A0ED6B1B50EF7 ] NvnUsbAudio     C:\Windows\system32\DRIVERS\nvnusbaudio.sys
18:09:27.0230 2632  NvnUsbAudio - ok
18:09:27.0237 2632  [ 0A92CB65770442ED0DC44834632F66AD ] nvraid          C:\Windows\system32\drivers\nvraid.sys
18:09:27.0239 2632  nvraid - ok
18:09:27.0247 2632  [ DAB0E87525C10052BF65F06152F37E4A ] nvstor          C:\Windows\system32\drivers\nvstor.sys
18:09:27.0249 2632  nvstor - ok
18:09:27.0255 2632  [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
18:09:27.0257 2632  nv_agp - ok
18:09:27.0265 2632  [ 98E93E60A195C6621EDAB4A96C224A0F ] ODDPwrSvc       C:\Program Files\Acer\Optical Drive Power Management\ODDPWRSvc.exe
18:09:27.0266 2632  ODDPwrSvc - ok
18:09:27.0272 2632  [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
18:09:27.0274 2632  ohci1394 - ok
18:09:27.0281 2632  [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose             C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
18:09:27.0282 2632  ose - ok
18:09:27.0352 2632  [ 61BFFB5F57AD12F83AB64B7181829B34 ] osppsvc         C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
18:09:27.0393 2632  osppsvc - ok
18:09:27.0410 2632  [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
18:09:27.0416 2632  p2pimsvc - ok
18:09:27.0427 2632  [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc          C:\Windows\system32\p2psvc.dll
18:09:27.0434 2632  p2psvc - ok
18:09:27.0440 2632  [ 0086431C29C35BE1DBC43F52CC273887 ] Parport         C:\Windows\system32\DRIVERS\parport.sys
18:09:27.0442 2632  Parport - ok
18:09:27.0450 2632  [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr         C:\Windows\system32\drivers\partmgr.sys
18:09:27.0451 2632  partmgr - ok
18:09:27.0459 2632  [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc          C:\Windows\System32\pcasvc.dll
18:09:27.0464 2632  PcaSvc - ok
18:09:27.0471 2632  [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci             C:\Windows\system32\drivers\pci.sys
18:09:27.0474 2632  pci - ok
18:09:27.0480 2632  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide          C:\Windows\system32\drivers\pciide.sys
18:09:27.0481 2632  pciide - ok
18:09:27.0488 2632  [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia          C:\Windows\system32\DRIVERS\pcmcia.sys
18:09:27.0491 2632  pcmcia - ok
18:09:27.0496 2632  [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw             C:\Windows\system32\drivers\pcw.sys
18:09:27.0497 2632  pcw - ok
18:09:27.0511 2632  [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
18:09:27.0516 2632  PEAUTH - ok
18:09:27.0564 2632  [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost        C:\Windows\SysWow64\perfhost.exe
18:09:27.0567 2632  PerfHost - ok
18:09:27.0601 2632  [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla             C:\Windows\system32\pla.dll
18:09:27.0616 2632  pla - ok
18:09:27.0629 2632  [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
18:09:27.0637 2632  PlugPlay - ok
18:09:27.0643 2632  [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll
18:09:27.0647 2632  PNRPAutoReg - ok
18:09:27.0656 2632  [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll
18:09:27.0663 2632  PNRPsvc - ok
18:09:27.0677 2632  [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll
18:09:27.0683 2632  PolicyAgent - ok
18:09:27.0692 2632  [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power           C:\Windows\system32\umpo.dll
18:09:27.0698 2632  Power - ok
18:09:27.0704 2632  [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
18:09:27.0706 2632  PptpMiniport - ok
18:09:27.0712 2632  [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor       C:\Windows\system32\DRIVERS\processr.sys
18:09:27.0714 2632  Processor - ok
18:09:27.0721 2632  [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc         C:\Windows\system32\profsvc.dll
18:09:27.0727 2632  ProfSvc - ok
18:09:27.0732 2632  [ 4D71227301DD8D09097B9E4CC6527E5A ] ProtectedStorage C:\Windows\system32\lsass.exe
18:09:27.0735 2632  ProtectedStorage - ok
18:09:27.0742 2632  [ 0557CF5A2556BD58E26384169D72438D ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
18:09:27.0744 2632  Psched - ok
18:09:27.0769 2632  [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300          C:\Windows\system32\DRIVERS\ql2300.sys
18:09:27.0781 2632  ql2300 - ok
18:09:27.0789 2632  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx          C:\Windows\system32\DRIVERS\ql40xx.sys
18:09:27.0791 2632  ql40xx - ok
18:09:27.0799 2632  [ 906191634E99AEA92C4816150BDA3732 ] QWAVE           C:\Windows\system32\qwave.dll
18:09:27.0804 2632  QWAVE - ok
18:09:27.0810 2632  [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
18:09:27.0811 2632  QWAVEdrv - ok
18:09:27.0816 2632  [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
18:09:27.0817 2632  RasAcd - ok
18:09:27.0823 2632  [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys
18:09:27.0825 2632  RasAgileVpn - ok
18:09:27.0831 2632  [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto         C:\Windows\System32\rasauto.dll
18:09:27.0836 2632  RasAuto - ok
18:09:27.0843 2632  [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys
18:09:27.0845 2632  Rasl2tp - ok
18:09:27.0854 2632  [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan          C:\Windows\System32\rasmans.dll
18:09:27.0861 2632  RasMan - ok
18:09:27.0867 2632  [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
18:09:27.0869 2632  RasPppoe - ok
18:09:27.0875 2632  [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys
18:09:27.0877 2632  RasSstp - ok
18:09:27.0886 2632  [ 77F665941019A1594D887A74F301FA2F ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys
18:09:27.0889 2632  rdbss - ok
18:09:27.0894 2632  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys
18:09:27.0895 2632  rdpbus - ok
18:09:27.0900 2632  [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
18:09:27.0901 2632  RDPCDD - ok
18:09:27.0909 2632  [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
18:09:27.0910 2632  RDPENCDD - ok
18:09:27.0917 2632  [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
18:09:27.0918 2632  RDPREFMP - ok
18:09:27.0928 2632  [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys
18:09:27.0930 2632  RDPWD - ok
18:09:27.0938 2632  [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
18:09:27.0941 2632  rdyboost - ok
18:09:27.0947 2632  [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess    C:\Windows\System32\mprdim.dll
18:09:27.0951 2632  RemoteAccess - ok
18:09:27.0958 2632  [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
18:09:27.0963 2632  RemoteRegistry - ok
18:09:27.0969 2632  [ 3DD798846E2C28102B922C56E71B7932 ] RFCOMM          C:\Windows\system32\DRIVERS\rfcomm.sys
18:09:27.0971 2632  RFCOMM - ok
18:09:27.0980 2632  [ F12A68ED55053940CADD59CA5E3468DD ] RichVideo       C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe
18:09:27.0982 2632  RichVideo - ok
18:09:27.0988 2632  [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
18:09:27.0993 2632  RpcEptMapper - ok
18:09:27.0998 2632  [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator      C:\Windows\system32\locator.exe
18:09:28.0001 2632  RpcLocator - ok
18:09:28.0012 2632  [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs           C:\Windows\system32\rpcss.dll
18:09:28.0020 2632  RpcSs - ok
18:09:28.0027 2632  [ DDC86E4F8E7456261E637E3552E804FF ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
18:09:28.0028 2632  rspndr - ok
18:09:28.0036 2632  [ 7CB9F0FDD730F4A4ECF6CDE15EA12E8A ] RS_Service      C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe
18:09:28.0039 2632  RS_Service - ok
18:09:28.0046 2632  [ 4D71227301DD8D09097B9E4CC6527E5A ] SamSs           C:\Windows\system32\lsass.exe
18:09:28.0049 2632  SamSs - ok
18:09:28.0055 2632  [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
18:09:28.0056 2632  sbp2port - ok
18:09:28.0064 2632  [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr        C:\Windows\System32\SCardSvr.dll
18:09:28.0070 2632  SCardSvr - ok
18:09:28.0076 2632  [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
18:09:28.0077 2632  scfilter - ok
18:09:28.0096 2632  [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule        C:\Windows\system32\schedsvc.dll
18:09:28.0110 2632  Schedule - ok
18:09:28.0116 2632  [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc     C:\Windows\System32\certprop.dll
18:09:28.0118 2632  SCPolicySvc - ok
18:09:28.0126 2632  [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
18:09:28.0131 2632  SDRSVC - ok
18:09:28.0137 2632  [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv          C:\Windows\system32\drivers\secdrv.sys
18:09:28.0138 2632  secdrv - ok
18:09:28.0143 2632  [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon        C:\Windows\system32\seclogon.dll
18:09:28.0147 2632  seclogon - ok
18:09:28.0153 2632  [ C32AB8FA018EF34C0F113BD501436D21 ] SENS            C:\Windows\System32\sens.dll
18:09:28.0157 2632  SENS - ok
18:09:28.0163 2632  [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc        C:\Windows\system32\sensrsvc.dll
18:09:28.0167 2632  SensrSvc - ok
18:09:28.0172 2632  [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum         C:\Windows\system32\DRIVERS\serenum.sys
18:09:28.0173 2632  Serenum - ok
18:09:28.0179 2632  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial          C:\Windows\system32\DRIVERS\serial.sys
18:09:28.0181 2632  Serial - ok
18:09:28.0186 2632  [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse        C:\Windows\system32\DRIVERS\sermouse.sys
18:09:28.0187 2632  sermouse - ok
18:09:28.0201 2632  [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv      C:\Windows\system32\sessenv.dll
18:09:28.0206 2632  SessionEnv - ok
18:09:28.0211 2632  [ A554811BCD09279536440C964AE35BBF ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys
18:09:28.0212 2632  sffdisk - ok
18:09:28.0217 2632  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
18:09:28.0218 2632  sffp_mmc - ok
18:09:28.0223 2632  [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys
18:09:28.0224 2632  sffp_sd - ok
18:09:28.0229 2632  [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy         C:\Windows\system32\DRIVERS\sfloppy.sys
18:09:28.0231 2632  sfloppy - ok
18:09:28.0240 2632  [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess    C:\Windows\System32\ipnathlp.dll
18:09:28.0245 2632  SharedAccess - ok
18:09:28.0255 2632  [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
18:09:28.0263 2632  ShellHWDetection - ok
18:09:28.0268 2632  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2        C:\Windows\system32\DRIVERS\SiSRaid2.sys
18:09:28.0270 2632  SiSRaid2 - ok
18:09:28.0276 2632  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4        C:\Windows\system32\DRIVERS\sisraid4.sys
18:09:28.0278 2632  SiSRaid4 - ok
18:09:28.0285 2632  [ F5BBEDF602C310B00036EB2DBF4348A5 ] SkypeUpdate     C:\Program Files (x86)\Skype\Updater\Updater.exe
18:09:28.0287 2632  SkypeUpdate - ok
18:09:28.0294 2632  [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb             C:\Windows\system32\DRIVERS\smb.sys
18:09:28.0295 2632  Smb - ok
18:09:28.0309 2632  [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
18:09:28.0314 2632  SNMPTRAP - ok
18:09:28.0319 2632  [ B9E31E5CACDFE584F34F730A677803F9 ] spldr           C:\Windows\system32\drivers\spldr.sys
18:09:28.0320 2632  spldr - ok
18:09:28.0333 2632  [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler         C:\Windows\System32\spoolsv.exe
18:09:28.0342 2632  Spooler - ok
18:09:28.0394 2632  [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc          C:\Windows\system32\sppsvc.exe
18:09:28.0426 2632  sppsvc - ok
18:09:28.0434 2632  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify     C:\Windows\system32\sppuinotify.dll
18:09:28.0439 2632  sppuinotify - ok
18:09:28.0451 2632  [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv             C:\Windows\system32\DRIVERS\srv.sys
18:09:28.0455 2632  srv - ok
18:09:28.0467 2632  [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
18:09:28.0471 2632  srv2 - ok
18:09:28.0478 2632  [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
18:09:28.0481 2632  srvnet - ok
18:09:28.0488 2632  [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll
18:09:28.0495 2632  SSDPSRV - ok
18:09:28.0500 2632  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc         C:\Windows\system32\sstpsvc.dll
18:09:28.0505 2632  SstpSvc - ok
18:09:28.0511 2632  [ F3817967ED533D08327DC73BC4D5542A ] stexstor        C:\Windows\system32\DRIVERS\stexstor.sys
18:09:28.0512 2632  stexstor - ok
18:09:28.0525 2632  [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc          C:\Windows\System32\wiaservc.dll
18:09:28.0534 2632  stisvc - ok
18:09:28.0539 2632  [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum          C:\Windows\system32\drivers\swenum.sys
18:09:28.0541 2632  swenum - ok
18:09:28.0553 2632  [ E08E46FDD841B7184194011CA1955A0B ] swprv           C:\Windows\System32\swprv.dll
18:09:28.0562 2632  swprv - ok
18:09:28.0572 2632  [ ED6D1424E5B0C21A57B28DD8508D6843 ] SynTP           C:\Windows\system32\DRIVERS\SynTP.sys
18:09:28.0575 2632  SynTP - ok
18:09:28.0604 2632  [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain         C:\Windows\system32\sysmain.dll
18:09:28.0621 2632  SysMain - ok
18:09:28.0629 2632  [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
18:09:28.0634 2632  TabletInputService - ok
18:09:28.0643 2632  [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv         C:\Windows\System32\tapisrv.dll
18:09:28.0650 2632  TapiSrv - ok
18:09:28.0658 2632  [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS             C:\Windows\System32\tbssvc.dll
18:09:28.0663 2632  TBS - ok
18:09:28.0693 2632  [ 40AF23633D197905F03AB5628C558C51 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys
18:09:28.0709 2632  Tcpip - ok
18:09:28.0741 2632  [ 40AF23633D197905F03AB5628C558C51 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
18:09:28.0756 2632  TCPIP6 - ok
18:09:28.0765 2632  [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
18:09:28.0767 2632  tcpipreg - ok
18:09:28.0775 2632  [ 3371D21011695B16333A3934340C4E7C ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
18:09:28.0776 2632  TDPIPE - ok
18:09:28.0781 2632  [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys
18:09:28.0782 2632  TDTCP - ok
18:09:28.0789 2632  [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys
18:09:28.0791 2632  tdx - ok
18:09:28.0796 2632  [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD          C:\Windows\system32\drivers\termdd.sys
18:09:28.0798 2632  TermDD - ok
18:09:28.0811 2632  [ 2E648163254233755035B46DD7B89123 ] TermService     C:\Windows\System32\termsrv.dll
18:09:28.0821 2632  TermService - ok
18:09:28.0829 2632  [ F0344071948D1A1FA732231785A0664C ] Themes          C:\Windows\system32\themeservice.dll
18:09:28.0834 2632  Themes - ok
18:09:28.0840 2632  [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER     C:\Windows\system32\mmcss.dll
18:09:28.0844 2632  THREADORDER - ok
18:09:28.0850 2632  [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks          C:\Windows\System32\trkwks.dll
18:09:28.0856 2632  TrkWks - ok
18:09:28.0864 2632  [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
18:09:28.0866 2632  TrustedInstaller - ok
18:09:28.0874 2632  [ 4CE278FC9671BA81A138D70823FCAA09 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
18:09:28.0875 2632  tssecsrv - ok
18:09:28.0881 2632  [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
18:09:28.0882 2632  TsUsbFlt - ok
18:09:28.0888 2632  [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
18:09:28.0890 2632  tunnel - ok
18:09:28.0896 2632  [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35          C:\Windows\system32\DRIVERS\uagp35.sys
18:09:28.0898 2632  uagp35 - ok
18:09:28.0902 2632  [ 2E22C1FD397A5A9FFEF55E9D1FC96C00 ] UBHelper        C:\Windows\system32\drivers\UBHelper.sys
18:09:28.0903 2632  UBHelper - ok
18:09:28.0913 2632  [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
18:09:28.0916 2632  udfs - ok
18:09:28.0926 2632  [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect       C:\Windows\system32\UI0Detect.exe
18:09:28.0932 2632  UI0Detect - ok
18:09:28.0937 2632  [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
18:09:28.0938 2632  uliagpkx - ok
18:09:28.0944 2632  [ DC54A574663A895C8763AF0FA1FF7561 ] umbus           C:\Windows\system32\drivers\umbus.sys
18:09:28.0945 2632  umbus - ok
18:09:28.0950 2632  [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass          C:\Windows\system32\DRIVERS\umpass.sys
18:09:28.0951 2632  UmPass - ok
18:09:28.0988 2632  [ 41118D920B2B268C0ADC36421248CDCF ] UNS             C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
18:09:29.0006 2632  UNS - ok
18:09:29.0016 2632  [ F9EC9ACD504D823D9B9CA98A4F8D3CA2 ] Updater Service C:\Program Files\Acer\Acer Updater\UpdaterService.exe
18:09:29.0018 2632  Updater Service - ok
18:09:29.0028 2632  [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost        C:\Windows\System32\upnphost.dll
18:09:29.0035 2632  upnphost - ok
18:09:29.0043 2632  [ DCA68B0943D6FA415F0C56C92158A83A ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys
18:09:29.0045 2632  usbccgp - ok
18:09:29.0051 2632  [ 80B0F7D5CCF86CEB5D402EAAF61FEC31 ] usbcir          C:\Windows\system32\drivers\usbcir.sys
18:09:29.0052 2632  usbcir - ok
18:09:29.0058 2632  [ 18A85013A3E0F7E1755365D287443965 ] usbehci         C:\Windows\system32\drivers\usbehci.sys
18:09:29.0059 2632  usbehci - ok
18:09:29.0069 2632  [ 8D1196CFBB223621F2C67D45710F25BA ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys
18:09:29.0073 2632  usbhub - ok
18:09:29.0079 2632  [ 765A92D428A8DB88B960DA5A8D6089DC ] usbohci         C:\Windows\system32\drivers\usbohci.sys
18:09:29.0080 2632  usbohci - ok
18:09:29.0086 2632  [ 73188F58FB384E75C4063D29413CEE3D ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys
18:09:29.0087 2632  usbprint - ok
18:09:29.0093 2632  [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS
18:09:29.0095 2632  USBSTOR - ok
18:09:29.0100 2632  [ DD253AFC3BC6CBA412342DE60C3647F3 ] usbuhci         C:\Windows\system32\drivers\usbuhci.sys
18:09:29.0102 2632  usbuhci - ok
18:09:29.0109 2632  [ 1F775DA4CF1A3A1834207E975A72E9D7 ] usbvideo        C:\Windows\System32\Drivers\usbvideo.sys
18:09:29.0112 2632  usbvideo - ok
18:09:29.0117 2632  [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms           C:\Windows\System32\uxsms.dll
18:09:29.0122 2632  UxSms - ok
18:09:29.0128 2632  [ 4D71227301DD8D09097B9E4CC6527E5A ] VaultSvc        C:\Windows\system32\lsass.exe
18:09:29.0131 2632  VaultSvc - ok
18:09:29.0136 2632  [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
18:09:29.0137 2632  vdrvroot - ok
18:09:29.0149 2632  [ 8D6B481601D01A456E75C3210F1830BE ] vds             C:\Windows\System32\vds.exe
18:09:29.0159 2632  vds - ok
18:09:29.0164 2632  [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys
18:09:29.0165 2632  vga - ok
18:09:29.0170 2632  [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave         C:\Windows\System32\drivers\vga.sys
18:09:29.0172 2632  VgaSave - ok
18:09:29.0180 2632  [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys
18:09:29.0182 2632  vhdmp - ok
18:09:29.0187 2632  [ E5689D93FFE4E5D66C0178761240DD54 ] viaide          C:\Windows\system32\drivers\viaide.sys
18:09:29.0189 2632  viaide - ok
18:09:29.0195 2632  [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
18:09:29.0196 2632  volmgr - ok
18:09:29.0206 2632  [ A255814907C89BE58B79EF2F189B843B ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys
18:09:29.0210 2632  volmgrx - ok
18:09:29.0219 2632  [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap         C:\Windows\system32\drivers\volsnap.sys
18:09:29.0223 2632  volsnap - ok
18:09:29.0236 2632  [ 80E63B86C40C5E067475DC98F845A6DD ] vpnagent        C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
18:09:29.0241 2632  vpnagent - ok
18:09:29.0247 2632  [ A8D4FED106B4BD337DF3DA20BA44E18E ] vpnva           C:\Windows\system32\DRIVERS\vpnva64.sys
18:09:29.0248 2632  vpnva - ok
18:09:29.0255 2632  [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid         C:\Windows\system32\DRIVERS\vsmraid.sys
18:09:29.0257 2632  vsmraid - ok
18:09:29.0283 2632  [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS             C:\Windows\system32\vssvc.exe
18:09:29.0300 2632  VSS - ok
18:09:29.0306 2632  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys
18:09:29.0308 2632  vwifibus - ok
18:09:29.0313 2632  [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys
18:09:29.0315 2632  vwififlt - ok
18:09:29.0321 2632  [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] vwifimp         C:\Windows\system32\DRIVERS\vwifimp.sys
18:09:29.0322 2632  vwifimp - ok
18:09:29.0333 2632  [ 1C9D80CC3849B3788048078C26486E1A ] W32Time         C:\Windows\system32\w32time.dll
18:09:29.0341 2632  W32Time - ok
18:09:29.0348 2632  [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen        C:\Windows\system32\DRIVERS\wacompen.sys
18:09:29.0350 2632  WacomPen - ok
18:09:29.0356 2632  [ 356AFD78A6ED4457169241AC3965230C ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
18:09:29.0358 2632  WANARP - ok
18:09:29.0363 2632  [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
18:09:29.0364 2632  Wanarpv6 - ok
18:09:29.0388 2632  [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine        C:\Windows\system32\wbengine.exe
18:09:29.0405 2632  wbengine - ok
18:09:29.0414 2632  [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
18:09:29.0420 2632  WbioSrvc - ok
18:09:29.0430 2632  [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc         C:\Windows\System32\wcncsvc.dll
18:09:29.0438 2632  wcncsvc - ok
18:09:29.0444 2632  [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
18:09:29.0449 2632  WcsPlugInService - ok
18:09:29.0454 2632  [ 72889E16FF12BA0F235467D6091B17DC ] Wd              C:\Windows\system32\DRIVERS\wd.sys
18:09:29.0456 2632  Wd - ok
18:09:29.0471 2632  [ E2C933EDBC389386EBE6D2BA953F43D8 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
18:09:29.0479 2632  Wdf01000 - ok
18:09:29.0485 2632  [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost  C:\Windows\system32\wdi.dll
18:09:29.0490 2632  WdiServiceHost - ok
18:09:29.0495 2632  [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost   C:\Windows\system32\wdi.dll
18:09:29.0501 2632  WdiSystemHost - ok
18:09:29.0509 2632  [ 0EB0E5D22B1760F2DBCE632F2DD7A54D ] WebClient       C:\Windows\System32\webclnt.dll
18:09:29.0516 2632  WebClient - ok
18:09:29.0524 2632  [ C749025A679C5103E575E3B48E092C43 ] Wecsvc          C:\Windows\system32\wecsvc.dll
18:09:29.0531 2632  Wecsvc - ok
18:09:29.0536 2632  [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport   C:\Windows\System32\wercplsupport.dll
18:09:29.0542 2632  wercplsupport - ok
18:09:29.0548 2632  [ 6D137963730144698CBD10F202E9F251 ] WerSvc          C:\Windows\System32\WerSvc.dll
18:09:29.0554 2632  WerSvc - ok
18:09:29.0559 2632  [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
18:09:29.0561 2632  WfpLwf - ok
18:09:29.0565 2632  [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
18:09:29.0567 2632  WIMMount - ok
18:09:29.0571 2632  WinDefend - ok
18:09:29.0579 2632  WinHttpAutoProxySvc - ok
18:09:29.0599 2632  [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll
18:09:29.0602 2632  Winmgmt - ok
18:09:29.0634 2632  [ BCB1310604AA415C4508708975B3931E ] WinRM           C:\Windows\system32\WsmSvc.dll
18:09:29.0654 2632  WinRM - ok
18:09:29.0677 2632  [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc         C:\Windows\System32\wlansvc.dll
18:09:29.0689 2632  Wlansvc - ok
18:09:29.0695 2632  [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys
18:09:29.0697 2632  WmiAcpi - ok
18:09:29.0707 2632  [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
18:09:29.0710 2632  wmiApSrv - ok
18:09:29.0715 2632  WMPNetworkSvc - ok
18:09:29.0722 2632  [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc          C:\Windows\System32\wpcsvc.dll
18:09:29.0728 2632  WPCSvc - ok
18:09:29.0734 2632  [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
18:09:29.0740 2632  WPDBusEnum - ok
18:09:29.0745 2632  [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys
18:09:29.0747 2632  ws2ifsl - ok
18:09:29.0753 2632  [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc          C:\Windows\System32\wscsvc.dll
18:09:29.0759 2632  wscsvc - ok
18:09:29.0763 2632  WSearch - ok
18:09:29.0804 2632  [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv        C:\Windows\system32\wuaueng.dll
18:09:29.0829 2632  wuauserv - ok
18:09:29.0837 2632  [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
18:09:29.0839 2632  WudfPf - ok
18:09:29.0847 2632  [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
18:09:29.0850 2632  WUDFRd - ok
18:09:29.0856 2632  [ B20F051B03A966392364C83F009F7D17 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll
18:09:29.0862 2632  wudfsvc - ok
18:09:29.0869 2632  [ FE90B750AB808FB9DD8FBB428B5FF83B ] WwanSvc         C:\Windows\System32\wwansvc.dll
18:09:29.0877 2632  WwanSvc - ok
18:09:29.0893 2632  ================ Scan global ===============================
18:09:29.0897 2632  [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
18:09:29.0904 2632  [ 88EDD0B34EED542745931E581AD21A32 ] C:\Windows\system32\winsrv.dll
18:09:29.0917 2632  [ 88EDD0B34EED542745931E581AD21A32 ] C:\Windows\system32\winsrv.dll
18:09:29.0927 2632  [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
18:09:29.0940 2632  [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
18:09:29.0947 2632  [Global] - ok
18:09:29.0947 2632  ================ Scan MBR ==================================
18:09:29.0951 2632  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
18:09:30.0094 2632  \Device\Harddisk0\DR0 - ok
18:09:30.0096 2632  ================ Scan VBR ==================================
18:09:30.0098 2632  [ 41C6E48B8B9DBB37F611F410F644A0DD ] \Device\Harddisk0\DR0\Partition1
18:09:30.0101 2632  \Device\Harddisk0\DR0\Partition1 - ok
18:09:30.0105 2632  [ 740C788B8B5705030DA5FD81DFD2D0FF ] \Device\Harddisk0\DR0\Partition2
18:09:30.0106 2632  \Device\Harddisk0\DR0\Partition2 - ok
18:09:30.0107 2632  ============================================================
18:09:30.0107 2632  Scan finished
18:09:30.0107 2632  ============================================================
18:09:30.0117 0396  Detected object count: 0
18:09:30.0118 0396  Actual detected object count: 0
18:09:33.0083 5568  Deinitialize success
         
Danke!
__________________

Alt 08.02.2014, 12:22   #4
schrauber
/// the machine
/// TB-Ausbilder
 

Windows 7 wird nach längerer Laufzeit extrem langsam beim Öffnen von Websites - Standard

Windows 7 wird nach längerer Laufzeit extrem langsam beim Öffnen von Websites



Hi,

Scan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop.
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es ein Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 08.02.2014, 14:35   #5
uyab
 
Windows 7 wird nach längerer Laufzeit extrem langsam beim Öffnen von Websites - Standard

Windows 7 wird nach längerer Laufzeit extrem langsam beim Öffnen von Websites



Hi,

hier die logflie:

Code:
ATTFilter
ComboFix 14-02-05.02 - chris 08.02.2014  14:46:08.1.4 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.3767.1933 [GMT 1:00]
ausgeführt von:: c:\users\chris\Downloads\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\chris\AppData\Local\assembly\tmp
c:\users\chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\{04E41A04-985E-4319-8FB8-0D582D8A7B1D}.xps
c:\users\chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\{084D0D3A-D537-4305-9F01-6E5F6364F399}.xps
c:\users\chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\{33AC18EA-D0EE-4A66-902F-BFD2F8649DD4}.xps
c:\users\chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\{5459B33E-A5EE-4B74-AB45-3E08814CD0ED}.xps
c:\users\chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\{55B56076-4402-442E-B7DF-7FBD746459A3}.xps
.
.
(((((((((((((((((((((((((((((((((((((((   Treiber/Dienste   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_vpnagent
.
.
(((((((((((((((((((((((   Dateien erstellt von 2014-01-08 bis 2014-02-08  ))))))))))))))))))))))))))))))
.
.
2014-02-08 14:29 . 2014-02-08 14:29	--------	d-----w-	c:\users\Default\AppData\Local\temp
2014-02-07 16:59 . 2014-02-07 16:59	--------	d-----w-	c:\users\chris\AppData\Local\WinZip
2014-02-07 16:59 . 2014-02-07 16:59	--------	d-----w-	c:\programdata\WinZip
2014-02-07 16:59 . 2014-02-07 16:59	--------	d-----w-	c:\program files\WinZip
2014-02-07 16:52 . 2013-12-04 03:28	10315576	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{32C78CF4-7AF1-4089-A7F6-91CBCA89E473}\mpengine.dll
2014-02-06 19:44 . 2014-02-06 19:48	--------	d-----w-	C:\FRST
2014-01-16 07:12 . 2013-11-27 01:41	343040	----a-w-	c:\windows\system32\drivers\usbhub.sys
2014-01-16 07:12 . 2013-11-27 01:41	99840	----a-w-	c:\windows\system32\drivers\usbccgp.sys
2014-01-16 07:12 . 2013-11-27 01:41	53248	----a-w-	c:\windows\system32\drivers\usbehci.sys
2014-01-16 07:12 . 2013-11-27 01:41	325120	----a-w-	c:\windows\system32\drivers\usbport.sys
2014-01-16 07:12 . 2013-11-27 01:41	25600	----a-w-	c:\windows\system32\drivers\usbohci.sys
2014-01-16 07:12 . 2013-11-27 01:41	30720	----a-w-	c:\windows\system32\drivers\usbuhci.sys
2014-01-16 07:12 . 2013-11-27 01:41	7808	----a-w-	c:\windows\system32\drivers\usbd.sys
2014-01-16 07:12 . 2013-11-26 10:32	3156480	----a-w-	c:\windows\system32\win32k.sys
2014-01-16 07:12 . 2013-11-26 11:40	376768	----a-w-	c:\windows\system32\drivers\netio.sys
2014-01-15 19:34 . 2014-01-19 11:32	--------	d-----w-	c:\users\chris\AppData\Local\.elfohilfe
2014-01-15 17:38 . 2014-01-15 17:38	--------	d-----w-	c:\program files\Common Files\Propellerhead Software
2014-01-12 12:32 . 2014-01-12 12:32	--------	d-----w-	c:\users\chris\AppData\Roaming\elsterformular
2014-01-12 12:32 . 2014-01-12 12:32	--------	d-----w-	c:\programdata\elsterformular
2014-01-12 12:32 . 2014-01-15 18:56	--------	d-----w-	c:\program files (x86)\ElsterFormular
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-02-05 08:06 . 2013-05-12 14:42	71048	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-02-05 08:06 . 2013-05-12 14:42	692616	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2014-01-16 07:19 . 2013-05-12 15:26	86054176	----a-w-	c:\windows\system32\MRT.exe
2014-01-07 18:00 . 2014-01-07 18:00	79672	----a-w-	c:\windows\system32\drivers\aswstm.sys
2014-01-07 18:00 . 2013-05-12 14:09	422216	----a-w-	c:\windows\system32\drivers\aswSP.sys
2014-01-07 18:00 . 2013-05-12 14:09	78648	----a-w-	c:\windows\system32\drivers\aswMonFlt.sys
2014-01-07 18:00 . 2013-05-12 14:09	334136	----a-w-	c:\windows\system32\aswBoot.exe
2014-01-07 18:00 . 2013-05-12 14:09	207904	----a-w-	c:\windows\system32\drivers\aswVmm.sys
2014-01-07 18:00 . 2013-05-12 14:09	1034464	----a-w-	c:\windows\system32\drivers\aswSnx.sys
2014-01-07 18:00 . 2013-05-12 14:09	43152	----a-w-	c:\windows\avastSS.scr
2013-12-18 05:13 . 2013-05-12 13:18	270496	------w-	c:\windows\system32\MpSigStub.exe
2013-12-15 09:42 . 2013-12-15 09:42	940032	----a-w-	c:\windows\system32\MsSpellCheckingFacility.exe
2013-12-15 09:42 . 2013-12-15 09:42	194048	----a-w-	c:\windows\SysWow64\elshyph.dll
2013-12-15 09:42 . 2013-12-15 09:42	942592	----a-w-	c:\windows\system32\jsIntl.dll
2013-12-15 09:42 . 2013-12-15 09:42	90112	----a-w-	c:\windows\system32\SetIEInstalledDate.exe
2013-12-15 09:42 . 2013-12-15 09:42	86016	----a-w-	c:\windows\SysWow64\iesysprep.dll
2013-12-15 09:42 . 2013-12-15 09:42	86016	----a-w-	c:\windows\system32\RegisterIEPKEYs.exe
2013-12-15 09:42 . 2013-12-15 09:42	84992	----a-w-	c:\windows\system32\mshtmled.dll
2013-12-15 09:42 . 2013-12-15 09:42	83968	----a-w-	c:\windows\system32\MshtmlDac.dll
2013-12-15 09:42 . 2013-12-15 09:42	81408	----a-w-	c:\windows\system32\icardie.dll
2013-12-15 09:42 . 2013-12-15 09:42	774144	----a-w-	c:\windows\system32\jscript.dll
2013-12-15 09:42 . 2013-12-15 09:42	77312	----a-w-	c:\windows\system32\tdc.ocx
2013-12-15 09:42 . 2013-12-15 09:42	74240	----a-w-	c:\windows\SysWow64\SetIEInstalledDate.exe
2013-12-15 09:42 . 2013-12-15 09:42	71680	----a-w-	c:\windows\SysWow64\RegisterIEPKEYs.exe
2013-12-15 09:42 . 2013-12-15 09:42	645120	----a-w-	c:\windows\SysWow64\jsIntl.dll
2013-12-15 09:42 . 2013-12-15 09:42	626176	----a-w-	c:\windows\system32\msfeeds.dll
2013-12-15 09:42 . 2013-12-15 09:42	62464	----a-w-	c:\windows\SysWow64\tdc.ocx
2013-12-15 09:42 . 2013-12-15 09:42	62464	----a-w-	c:\windows\system32\pngfilt.dll
2013-12-15 09:42 . 2013-12-15 09:42	61952	----a-w-	c:\windows\SysWow64\MshtmlDac.dll
2013-12-15 09:42 . 2013-12-15 09:42	61952	----a-w-	c:\windows\SysWow64\iesetup.dll
2013-12-15 09:42 . 2013-12-15 09:42	616104	----a-w-	c:\windows\system32\ieapfltr.dat
2013-12-15 09:42 . 2013-12-15 09:42	548352	----a-w-	c:\windows\system32\vbscript.dll
2013-12-15 09:42 . 2013-12-15 09:42	52224	----a-w-	c:\windows\system32\msfeedsbs.dll
2013-12-15 09:42 . 2013-12-15 09:42	51200	----a-w-	c:\windows\SysWow64\ieetwproxystub.dll
2013-12-15 09:42 . 2013-12-15 09:42	48640	----a-w-	c:\windows\SysWow64\mshtmler.dll
2013-12-15 09:42 . 2013-12-15 09:42	48640	----a-w-	c:\windows\system32\mshtmler.dll
2013-12-15 09:42 . 2013-12-15 09:42	48128	----a-w-	c:\windows\system32\imgutil.dll
2013-12-15 09:42 . 2013-12-15 09:42	454656	----a-w-	c:\windows\SysWow64\vbscript.dll
2013-12-15 09:42 . 2013-12-15 09:42	453120	----a-w-	c:\windows\system32\dxtmsft.dll
2013-12-15 09:42 . 2013-12-15 09:42	413696	----a-w-	c:\windows\system32\html.iec
2013-12-15 09:42 . 2013-12-15 09:42	40448	----a-w-	c:\windows\system32\JavaScriptCollectionAgent.dll
2013-12-15 09:42 . 2013-12-15 09:42	36352	----a-w-	c:\windows\SysWow64\imgutil.dll
2013-12-15 09:42 . 2013-12-15 09:42	34816	----a-w-	c:\windows\SysWow64\JavaScriptCollectionAgent.dll
2013-12-15 09:42 . 2013-12-15 09:42	337408	----a-w-	c:\windows\SysWow64\html.iec
2013-12-15 09:42 . 2013-12-15 09:42	30208	----a-w-	c:\windows\system32\licmgr10.dll
2013-12-15 09:42 . 2013-12-15 09:42	296960	----a-w-	c:\windows\system32\dxtrans.dll
2013-12-15 09:42 . 2013-12-15 09:42	263376	----a-w-	c:\windows\system32\iedkcs32.dll
2013-12-15 09:42 . 2013-12-15 09:42	247808	----a-w-	c:\windows\system32\msls31.dll
2013-12-15 09:42 . 2013-12-15 09:42	24576	----a-w-	c:\windows\SysWow64\licmgr10.dll
2013-12-15 09:42 . 2013-12-15 09:42	243200	----a-w-	c:\windows\system32\webcheck.dll
2013-12-15 09:42 . 2013-12-15 09:42	235520	----a-w-	c:\windows\system32\url.dll
2013-12-15 09:42 . 2013-12-15 09:42	235008	----a-w-	c:\windows\system32\elshyph.dll
2013-12-15 09:42 . 2013-12-15 09:42	195584	----a-w-	c:\windows\system32\msrating.dll
2013-12-15 09:42 . 2013-12-15 09:42	182272	----a-w-	c:\windows\SysWow64\msls31.dll
2013-12-15 09:42 . 2013-12-15 09:42	167424	----a-w-	c:\windows\system32\iexpress.exe
2013-12-15 09:42 . 2013-12-15 09:42	151552	----a-w-	c:\windows\SysWow64\iexpress.exe
2013-12-15 09:42 . 2013-12-15 09:42	147968	----a-w-	c:\windows\system32\occache.dll
2013-12-15 09:42 . 2013-12-15 09:42	143872	----a-w-	c:\windows\system32\wextract.exe
2013-12-15 09:42 . 2013-12-15 09:42	139264	----a-w-	c:\windows\SysWow64\wextract.exe
2013-12-15 09:42 . 2013-12-15 09:42	13824	----a-w-	c:\windows\system32\mshta.exe
2013-12-15 09:42 . 2013-12-15 09:42	135680	----a-w-	c:\windows\system32\iepeers.dll
2013-12-15 09:42 . 2013-12-15 09:42	13312	----a-w-	c:\windows\SysWow64\mshta.exe
2013-12-15 09:42 . 2013-12-15 09:42	13312	----a-w-	c:\windows\system32\msfeedssync.exe
2013-12-15 09:42 . 2013-12-15 09:42	131072	----a-w-	c:\windows\system32\IEAdvpack.dll
2013-12-15 09:42 . 2013-12-15 09:42	1228800	----a-w-	c:\windows\system32\mshtmlmedia.dll
2013-12-15 09:42 . 2013-12-15 09:42	112128	----a-w-	c:\windows\SysWow64\ieUnatt.exe
2013-12-15 09:42 . 2013-12-15 09:42	111616	----a-w-	c:\windows\SysWow64\IEAdvpack.dll
2013-12-15 09:42 . 2013-12-15 09:42	105984	----a-w-	c:\windows\system32\iesysprep.dll
2013-12-15 09:42 . 2013-12-15 09:42	1051136	----a-w-	c:\windows\SysWow64\mshtmlmedia.dll
2013-12-15 09:42 . 2013-12-15 09:42	101376	----a-w-	c:\windows\system32\inseng.dll
2013-12-03 18:12 . 2013-05-12 14:09	65776	----a-w-	c:\windows\system32\drivers\aswRvrt.sys
2013-12-03 18:12 . 2013-05-12 14:09	92544	----a-w-	c:\windows\system32\drivers\aswRdr2.sys
2013-11-26 11:54 . 2013-12-15 22:04	23183360	----a-w-	c:\windows\system32\mshtml.dll
2013-11-26 10:19 . 2013-12-15 22:04	2724864	----a-w-	c:\windows\system32\mshtml.tlb
2013-11-26 10:18 . 2013-12-15 22:04	4096	----a-w-	c:\windows\system32\ieetwcollectorres.dll
2013-11-26 09:48 . 2013-12-15 22:04	66048	----a-w-	c:\windows\system32\iesetup.dll
2013-11-26 09:46 . 2013-12-15 22:04	48640	----a-w-	c:\windows\system32\ieetwproxystub.dll
2013-11-26 09:41 . 2013-12-15 22:04	2764288	----a-w-	c:\windows\system32\iertutil.dll
2013-11-26 09:29 . 2013-12-15 22:04	53760	----a-w-	c:\windows\system32\jsproxy.dll
2013-11-26 09:27 . 2013-12-15 22:04	33792	----a-w-	c:\windows\system32\iernonce.dll
2013-11-26 09:23 . 2013-12-15 22:04	2724864	----a-w-	c:\windows\SysWow64\mshtml.tlb
2013-11-26 09:21 . 2013-12-15 22:04	574976	----a-w-	c:\windows\system32\ieui.dll
2013-11-26 09:18 . 2013-12-15 22:04	139264	----a-w-	c:\windows\system32\ieUnatt.exe
2013-11-26 09:18 . 2013-12-15 22:04	111616	----a-w-	c:\windows\system32\ieetwcollector.exe
2013-11-26 09:16 . 2013-12-15 22:04	708608	----a-w-	c:\windows\system32\jscript9diag.dll
2013-11-26 08:57 . 2013-12-15 22:04	218624	----a-w-	c:\windows\system32\ie4uinit.exe
2013-11-26 08:35 . 2013-12-15 22:03	5769216	----a-w-	c:\windows\system32\jscript9.dll
2013-11-26 08:28 . 2013-12-15 22:04	553472	----a-w-	c:\windows\SysWow64\jscript9diag.dll
2013-11-26 08:16 . 2013-12-15 22:03	4243968	----a-w-	c:\windows\SysWow64\jscript9.dll
2013-11-26 08:02 . 2013-12-15 22:04	1995264	----a-w-	c:\windows\system32\inetcpl.cpl
2013-11-26 07:48 . 2013-12-15 22:04	12996608	----a-w-	c:\windows\system32\ieframe.dll
2013-11-26 07:32 . 2013-12-15 22:04	1928192	----a-w-	c:\windows\SysWow64\inetcpl.cpl
2013-11-26 07:07 . 2013-12-15 22:04	2334208	----a-w-	c:\windows\system32\wininet.dll
2013-11-26 06:40 . 2013-12-15 22:04	1395200	----a-w-	c:\windows\system32\urlmon.dll
2013-11-26 06:34 . 2013-12-15 22:04	817664	----a-w-	c:\windows\system32\ieapfltr.dll
2013-11-26 06:33 . 2013-12-15 22:04	1820160	----a-w-	c:\windows\SysWow64\wininet.dll
2013-11-23 18:26 . 2013-12-11 18:08	417792	----a-w-	c:\windows\SysWow64\WMPhoto.dll
2013-11-23 17:47 . 2013-12-11 18:08	465920	----a-w-	c:\windows\system32\WMPhoto.dll
2013-11-12 02:23 . 2013-12-11 18:08	2048	----a-w-	c:\windows\system32\tzres.dll
2013-11-12 02:07 . 2013-12-11 18:08	2048	----a-w-	c:\windows\SysWow64\tzres.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54	131248	----a-w-	c:\users\chris\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54	131248	----a-w-	c:\users\chris\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54	131248	----a-w-	c:\users\chris\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2010-02-01 18:03	120176	----a-w-	c:\program files (x86)\EgisTec MyWinLocker\x86\PSDProtect.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2013-11-14 20584608]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2009-12-24 284696]
"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2010-03-03 1300560]
"SuiteTray"="c:\program files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe" [2010-02-01 337264]
"EgisUpdate"="c:\program files (x86)\EgisTec IPS\EgisUpdate.exe" [2009-12-25 201512]
"EgisTecPMMUpdate"="c:\program files (x86)\EgisTec IPS\PmmUpdate.exe" [2009-12-25 401192]
"BackupManagerTray"="c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" [2010-03-08 260608]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-03-03 98304]
"MDS_Menu"="c:\program files (x86)\Acer Arcade Deluxe\MediaShow Espresso\MUITransfer\MUIStartMenu.exe" [2009-05-19 222504]
"ArcadeMovieService"="c:\program files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe" [2010-03-17 124136]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]
"BCSSync"="c:\program files (x86)\Microsoft Office\Office14\BCSSync.exe" [2012-11-05 89184]
"Cisco AnyConnect Secure Mobility Agent for Windows"="c:\program files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe" [2012-08-03 685048]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2014-01-07 3764024]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Acer VCM.lnk - c:\program files (x86)\Acer\Acer VCM\AcerVCM.exe [2010-4-15 704032]
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-3-26 1125152]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
R3 acsock;acsock;c:\windows\system32\DRIVERS\acsock64.sys;c:\windows\SYSNATIVE\DRIVERS\acsock64.sys [x]
R3 AmUStor;AM USB Stroage Driver;c:\windows\system32\drivers\AmUStor.SYS;c:\windows\SYSNATIVE\drivers\AmUStor.SYS [x]
R3 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x]
R3 btwampfl;Bluetooth AMP USB Filter;c:\windows\system32\drivers\btwampfl.sys;c:\windows\SYSNATIVE\drivers\btwampfl.sys [x]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 MWLService;MyWinLocker Service;c:\program files (x86)\EgisTec MyWinLocker\x86\MWLService.exe;c:\program files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [x]
R3 NETw5s64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit;c:\windows\system32\DRIVERS\NETw5s64.sys;c:\windows\SYSNATIVE\DRIVERS\NETw5s64.sys [x]
R3 NTIBackupSvc;NTI Backup Now 5 Backup Service;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [x]
R3 NvnUsbAudio;Novation USB Audio Driver;c:\windows\system32\DRIVERS\nvnusbaudio.sys;c:\windows\SYSNATIVE\DRIVERS\nvnusbaudio.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x]
S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDFilter.sys [x]
S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDNServ.sys [x]
S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDVDisk.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe;c:\program files (x86)\Launch Manager\dsiwmis.exe [x]
S2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer PowerSmart Manager\ePowerSvc.exe;c:\program files\Acer\Acer PowerSmart Manager\ePowerSvc.exe [x]
S2 GREGService;GREGService;c:\program files (x86)\Acer\Registration\GREGsvc.exe;c:\program files (x86)\Acer\Registration\GREGsvc.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [x]
S2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [x]
S2 ODDPwrSvc;Acer ODD Power Service;c:\program files\Acer\Optical Drive Power Management\ODDPWRSvc.exe;c:\program files\Acer\Optical Drive Power Management\ODDPWRSvc.exe [x]
S2 RS_Service;Raw Socket Service;c:\program files (x86)\Acer\Acer VCM\RS_Service.exe;c:\program files (x86)\Acer\Acer VCM\RS_Service.exe [x]
S2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
S2 Updater Service;Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe;c:\program files\Acer\Acer Updater\UpdaterService.exe [x]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys;c:\windows\SYSNATIVE\DRIVERS\HECIx64.sys [x]
S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys;c:\windows\SYSNATIVE\DRIVERS\Impcd.sys [x]
S3 intelkmd;intelkmd;c:\windows\system32\DRIVERS\igdpmd64.sys;c:\windows\SYSNATIVE\DRIVERS\igdpmd64.sys [x]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
Inhalt des "geplante Tasks" Ordners
.
2014-02-08 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-05-12 08:06]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2014-01-07 18:00	287280	----a-w-	c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54	164016	----a-w-	c:\users\chris\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54	164016	----a-w-	c:\users\chris\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54	164016	----a-w-	c:\users\chris\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54	164016	----a-w-	c:\users\chris\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2010-02-01 18:06	137584	----a-w-	c:\program files (x86)\EgisTec MyWinLocker\x64\PSDProtect.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AmIcoSinglun64"="c:\program files (x86)\AmIcoSingLun\AmIcoSinglun64.exe" [2009-04-09 320000]
"ODDPwr"="c:\program files\Acer\Optical Drive Power Management\ODDPwr.exe" [2010-02-05 222240]
"mwlDaemon"="c:\program files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe" [2010-02-01 349552]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-02-22 10081312]
"RtHDVBg"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2010-02-22 877600]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-03-02 166424]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-03-02 390680]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-03-02 410136]
"PLFSetI"="c:\windows\PLFSetI.exe" [2010-01-13 206208]
"Acer ePower Management"="c:\program files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe" [2010-03-17 496160]
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_4820tg&r=27360513k306l0453z135t55n1j111
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: An OneNote s&enden - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
IE: Bild an &Bluetooth-Gerät senden... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
IE: Seite an &Bluetooth-Gerät senden... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
TCP: DhcpNameServer = 192.168.0.1
FF - ProfilePath - c:\users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\c8bjml6p.default\
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
Wow6432Node-HKU-Default-RunOnce-SPReview - c:\windows\System32\SPReview\SPReview.exe
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
Toolbar-Locked - (no file)
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
AddRemove-dBpoweramp Music Converter - c:\windows\system32\SpoonUninstall.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_44_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_44_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_44_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_44_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
   00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Nico Mak Computing\WinZip]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
   00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
c:\program files (x86)\Cyberlink\Shared files\RichVideo.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2014-02-08  15:32:13 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2014-02-08 14:32
.
Vor Suchlauf: 9 Verzeichnis(se), 53.864.136.704 Bytes frei
Nach Suchlauf: 16 Verzeichnis(se), 54.458.572.800 Bytes frei
.
- - End Of File - - C4FFBAE18AD136A27D9E2903DC1D2589
         


Alt 09.02.2014, 08:21   #6
schrauber
/// the machine
/// TB-Ausbilder
 

Windows 7 wird nach längerer Laufzeit extrem langsam beim Öffnen von Websites - Standard

Windows 7 wird nach längerer Laufzeit extrem langsam beim Öffnen von Websites



Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.
__________________
--> Windows 7 wird nach längerer Laufzeit extrem langsam beim Öffnen von Websites

Alt 09.02.2014, 10:31   #7
uyab
 
Windows 7 wird nach längerer Laufzeit extrem langsam beim Öffnen von Websites - Standard

Windows 7 wird nach längerer Laufzeit extrem langsam beim Öffnen von Websites



Hallo,

Danke nochmal für deine beständige Hilfe!

Code:
ATTFilter
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.02.09.02

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
chris :: BLACK-BOX [Administrator]

09.02.2014 10:06:15
mbam-log-2014-02-09 (10-06-15).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|E:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 360267
Laufzeit: 33 Minute(n), 1 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)
         
Code:
ATTFilter
# AdwCleaner v3.018 - Bericht erstellt am 09/02/2014 um 10:45:50
# Updated 28/01/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : chris - BLACK-BOX
# Gestartet von : C:\Users\chris\Desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\boost_interprocess
Ordner Gelöscht : C:\ProgramData\Partner

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16428


-\\ Mozilla Firefox v26.0 (de)

[ Datei : C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\c8bjml6p.default\prefs.js ]

Zeile gelöscht : user_pref("browser.newtabpage.pinned", "[{\"url\":\"hxxps://www.facebook.com/\",\"title\":\"Facebook\"},null,null,{\"url\":\"hxxps://mail.google.com/mail/?shva=1#inbox\",\"title\":\"Posteingang (2.067[...]

-\\ Google Chrome v

[ Datei : C:\Users\chris\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [1322 octets] - [09/02/2014 10:44:28]
AdwCleaner[S0].txt - [1247 octets] - [09/02/2014 10:45:50]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1307 octets] ##########
         
Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.1 (02.04.2014:1)
OS: Windows 7 Home Premium x64
Ran by chris on 09.02.2014 at 10:53:25,56
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ FireFox

Emptied folder: C:\Users\chris\AppData\Roaming\mozilla\firefox\profiles\c8bjml6p.default\minidumps [56 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 09.02.2014 at 11:03:11,70
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 06-02-2014
Ran by chris (administrator) on BLACK-BOX on 09-02-2014 11:11:59
Running from C:\Users\chris\Desktop\board
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe
(SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE
(SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
(Acer Incorporated) C:\Program Files\Acer\Optical Drive Power Management\ODDPWRSvc.exe
() C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe
(AlcorMicro Co., Ltd.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Acer Incorporated) C:\Program Files\Acer\Optical Drive Power Management\ODDPWR.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
() C:\Windows\PLFSetI.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe
(Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\ePowerEvent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [320000 2009-04-09] (AlcorMicro Co., Ltd.)
HKLM\...\Run: [ODDPwr] - C:\Program Files\Acer\Optical Drive Power Management\ODDPwr.exe [222240 2010-02-05] (Acer Incorporated)
HKLM\...\Run: [mwlDaemon] - C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe [349552 2010-02-01] (Egis Technology Inc.)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10081312 2010-02-22] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [877600 2010-02-22] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1842472 2009-09-17] (Synaptics Incorporated)
HKLM\...\Run: [PLFSetI] - C:\Windows\PLFSetI.exe [206208 2010-01-13] ()
HKLM\...\Run: [Acer ePower Management] - C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe [496160 2010-03-17] (Acer Incorporated)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2009-12-24] (Intel Corporation)
HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1300560 2010-03-03] (Dritek System Inc.)
HKLM-x32\...\Run: [SuiteTray] - C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [337264 2010-02-01] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisUpdate] - C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [201512 2009-12-25] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisTecPMMUpdate] - C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [401192 2009-12-25] (Egis Technology Inc.)
HKLM-x32\...\Run: [BackupManagerTray] - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [260608 2010-03-09] (NewTech Infosystems, Inc.)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-03-03] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [MDS_Menu] - C:\Program Files (x86)\Acer Arcade Deluxe\MediaShow Espresso\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [ArcadeMovieService] - C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe [124136 2010-03-17] (CyberLink Corp.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] - C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [685048 2012-08-03] (Cisco Systems, Inc.)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3764024 2014-01-07] (AVAST Software)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-3309182887-1688452900-3303579845-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_4820tg&r=27360513k306l0453z135t55n1j111
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
DPF: HKLM-x32 {C345E174-3E87-4F41-A01C-B066A90A49B4} hxxp://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework//microsoft/wrc32.ocx
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\c8bjml6p.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\chris\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: WOT - C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\c8bjml6p.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2013-11-27]
FF Extension: NoScript - C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\c8bjml6p.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2013-05-12]
FF Extension: Adblock Plus - C:\Users\chris\AppData\Roaming\Mozilla\Firefox\Profiles\c8bjml6p.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-05-12]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-05-12]

Chrome: 
=======
CHR HomePage: hxxp://www.google.com
CHR RestoreOnStartup: "hxxp://www.google.com"
CHR Extension: (Docs) - C:\Users\chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-05-12]
CHR Extension: (Google Drive) - C:\Users\chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-05-12]
CHR Extension: (YouTube) - C:\Users\chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-05-12]
CHR Extension: (Google-Suche) - C:\Users\chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-05-12]
CHR Extension: (Google Mail) - C:\Users\chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-05-12]

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-01-07] (AVAST Software)
R2 ePowerSvc; C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe [820768 2010-03-17] (Acer Incorporated)
S3 MWLService; C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [305520 2010-02-01] (Egis Technology Inc.)
R2 ODDPwrSvc; C:\Program Files\Acer\Optical Drive Power Management\ODDPWRSvc.exe [171040 2010-02-05] (Acer Incorporated)
R2 RichVideo; C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe [244904 2010-02-03] ()
R2 RS_Service; C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe [260640 2010-01-30] (Acer Incorporated)

==================== Drivers (Whitelisted) ====================

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2014-01-07] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-12-03] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-12-03] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1034464 2014-01-07] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [422216 2014-01-07] (AVAST Software)
R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [79672 2014-01-07] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2014-01-07] ()
S3 NvnUsbAudio; C:\Windows\System32\DRIVERS\nvnusbaudio.sys [50232 2011-02-16] (Novation DMS Ltd.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-09 10:53 - 2014-02-09 10:53 - 00000000 ____D () C:\Windows\ERUNT
2014-02-09 10:44 - 2014-02-09 10:45 - 00000000 ____D () C:\AdwCleaner
2014-02-08 15:32 - 2014-02-08 15:32 - 00031678 _____ () C:\ComboFix.txt
2014-02-08 14:44 - 2014-02-08 15:32 - 00000000 ____D () C:\Qoobox
2014-02-08 14:44 - 2014-02-08 15:31 - 00000000 ____D () C:\Windows\erdnt
2014-02-08 14:44 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-02-08 14:44 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-02-08 14:44 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-02-08 14:44 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-02-08 14:44 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-02-08 14:44 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe
2014-02-08 14:44 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe
2014-02-08 14:44 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe
2014-02-07 17:59 - 2014-02-07 17:59 - 00002193 _____ () C:\Users\Public\Desktop\WinZip.lnk
2014-02-07 17:59 - 2014-02-07 17:59 - 00000000 ____D () C:\Users\chris\AppData\Local\WinZip
2014-02-07 17:59 - 2014-02-07 17:59 - 00000000 ____D () C:\ProgramData\WinZip
2014-02-07 17:59 - 2014-02-07 17:59 - 00000000 ____D () C:\Program Files\WinZip
2014-02-07 17:57 - 2014-02-07 17:58 - 46956032 _____ () C:\Users\chris\Downloads\wz180gev-64(2).msi
2014-02-07 17:55 - 2014-02-07 17:56 - 46956032 _____ () C:\Users\chris\Downloads\wz180gev-64(1).msi
2014-02-06 21:53 - 2014-02-06 21:53 - 566486608 _____ () C:\Windows\MEMORY.DMP
2014-02-06 21:53 - 2014-02-06 21:53 - 00278400 _____ () C:\Windows\Minidump\020614-8845-01.dmp
2014-02-06 21:53 - 2014-02-06 21:53 - 00000000 ____D () C:\Windows\Minidump
2014-02-06 21:09 - 2014-02-09 11:11 - 00000000 ____D () C:\Users\chris\Desktop\board
2014-02-06 20:44 - 2014-02-09 11:11 - 00000000 ____D () C:\FRST
2014-02-06 20:38 - 2014-02-06 20:38 - 00000472 _____ () C:\Users\chris\Desktop\defogger_disable.log
2014-02-06 20:37 - 2014-02-06 20:37 - 00000000 _____ () C:\Users\chris\defogger_reenable
2014-02-03 16:48 - 2014-02-03 16:48 - 04122976 _____ (Kaspersky Lab ZAO) C:\Users\chris\Documents\TDSSKiller.exe
2014-02-03 11:21 - 2014-02-03 11:21 - 00204496 _____ (Malwarebytes) C:\Users\chris\Downloads\startuplite-setup-1.07.exe
2014-02-03 11:21 - 2014-02-03 11:21 - 00003150 _____ () C:\Windows\System32\Tasks\{8920A2C2-5AFC-4690-9AF2-EF6BFDCE8C9C}
2014-01-26 20:11 - 2014-01-26 20:11 - 00000000 ____D () C:\Users\chris\Documents\Togeo_Studios-Simple_Synths
2014-01-26 20:08 - 2014-01-26 20:11 - 98454416 _____ () C:\Users\chris\Downloads\Togeo_Studios-Simple_Synths.zip
2014-01-26 19:40 - 2014-01-26 19:40 - 00000000 ____D () C:\Users\chris\Documents\Tom Cosm - Swagger - Ableton Pack
2014-01-17 21:17 - 2014-01-17 21:28 - 79069909 _____ () C:\Users\chris\Downloads\Tom Cosm - Swagger - Ableton Pack.zip
2014-01-16 15:04 - 2014-01-16 15:04 - 18126032 _____ (Adobe Systems Inc.) C:\Users\chris\Downloads\AdobeAIRInstaller.exe
2014-01-16 08:12 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-16 08:12 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-16 08:12 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-16 08:12 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-16 08:12 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-16 08:12 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-16 08:12 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-16 08:12 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-16 08:12 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-15 20:34 - 2014-01-19 12:33 - 00008284 _____ () C:\Users\chris\ESt2013_Biller_Christopher.elfo
2014-01-15 20:34 - 2014-01-19 12:32 - 00000000 ____D () C:\Users\chris\AppData\Local\.elfohilfe
2014-01-15 18:38 - 2014-01-15 18:38 - 00000000 ____D () C:\Program Files\Common Files\Propellerhead Software
2014-01-15 18:36 - 2014-01-15 18:36 - 00000915 _____ () C:\Users\chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ableton Live 9 Standard.lnk
2014-01-15 18:26 - 2014-01-15 18:32 - 722616436 _____ () C:\Users\chris\Downloads\ableton_live_standard_9.1_64.zip
2014-01-12 19:32 - 2014-01-18 00:36 - 00000000 ___RD () C:\Users\chris\Desktop\CHRIS Project
2014-01-12 13:32 - 2014-01-15 19:56 - 00000000 ____D () C:\Program Files (x86)\ElsterFormular
2014-01-12 13:32 - 2014-01-12 13:32 - 00001237 _____ () C:\Users\Public\Desktop\ElsterFormular.lnk
2014-01-12 13:32 - 2014-01-12 13:32 - 00000000 ____D () C:\Users\chris\AppData\Roaming\elsterformular
2014-01-12 13:32 - 2014-01-12 13:32 - 00000000 ____D () C:\ProgramData\elsterformular
2014-01-12 13:30 - 2014-01-12 13:31 - 69755760 _____ (Landesfinanzdirektion Thüringen) C:\Users\chris\Downloads\ElsterFormular-14.4.20130909p.exe

==================== One Month Modified Files and Folders =======

2014-02-09 11:11 - 2014-02-06 21:09 - 00000000 ____D () C:\Users\chris\Desktop\board
2014-02-09 11:11 - 2014-02-06 20:44 - 00000000 ____D () C:\FRST
2014-02-09 11:06 - 2013-05-12 15:42 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-09 10:53 - 2014-02-09 10:53 - 00000000 ____D () C:\Windows\ERUNT
2014-02-09 10:53 - 2009-07-14 05:45 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-09 10:53 - 2009-07-14 05:45 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-09 10:50 - 2013-05-12 22:48 - 00654400 _____ () C:\Windows\system32\perfh007.dat
2014-02-09 10:50 - 2013-05-12 22:48 - 00130240 _____ () C:\Windows\system32\perfc007.dat
2014-02-09 10:50 - 2009-07-14 06:13 - 01498742 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-09 10:49 - 2013-05-12 13:00 - 01914693 _____ () C:\Windows\WindowsUpdate.log
2014-02-09 10:46 - 2013-05-12 15:09 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-02-09 10:46 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-09 10:46 - 2009-07-14 05:51 - 00089409 _____ () C:\Windows\setupact.log
2014-02-09 10:45 - 2014-02-09 10:44 - 00000000 ____D () C:\AdwCleaner
2014-02-09 01:13 - 2013-05-14 07:52 - 00000000 ____D () C:\Users\chris\AppData\Roaming\Skype
2014-02-08 15:32 - 2014-02-08 15:32 - 00031678 _____ () C:\ComboFix.txt
2014-02-08 15:32 - 2014-02-08 14:44 - 00000000 ____D () C:\Qoobox
2014-02-08 15:31 - 2014-02-08 14:44 - 00000000 ____D () C:\Windows\erdnt
2014-02-08 15:30 - 2013-05-12 12:51 - 00155658 _____ () C:\Windows\PFRO.log
2014-02-08 15:30 - 2009-07-14 03:34 - 79691776 _____ () C:\Windows\system32\config\SOFTWARE.bak
2014-02-08 15:30 - 2009-07-14 03:34 - 44302336 _____ () C:\Windows\system32\config\COMPONENTS.bak
2014-02-08 15:30 - 2009-07-14 03:34 - 17039360 _____ () C:\Windows\system32\config\SYSTEM.bak
2014-02-08 15:30 - 2009-07-14 03:34 - 00524288 _____ () C:\Windows\system32\config\DEFAULT.bak
2014-02-08 15:30 - 2009-07-14 03:34 - 00262144 _____ () C:\Windows\system32\config\SECURITY.bak
2014-02-08 15:30 - 2009-07-14 03:34 - 00262144 _____ () C:\Windows\system32\config\SAM.bak
2014-02-08 15:30 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini
2014-02-07 17:59 - 2014-02-07 17:59 - 00002193 _____ () C:\Users\Public\Desktop\WinZip.lnk
2014-02-07 17:59 - 2014-02-07 17:59 - 00000000 ____D () C:\Users\chris\AppData\Local\WinZip
2014-02-07 17:59 - 2014-02-07 17:59 - 00000000 ____D () C:\ProgramData\WinZip
2014-02-07 17:59 - 2014-02-07 17:59 - 00000000 ____D () C:\Program Files\WinZip
2014-02-07 17:58 - 2014-02-07 17:57 - 46956032 _____ () C:\Users\chris\Downloads\wz180gev-64(2).msi
2014-02-07 17:56 - 2014-02-07 17:55 - 46956032 _____ () C:\Users\chris\Downloads\wz180gev-64(1).msi
2014-02-06 21:53 - 2014-02-06 21:53 - 566486608 _____ () C:\Windows\MEMORY.DMP
2014-02-06 21:53 - 2014-02-06 21:53 - 00278400 _____ () C:\Windows\Minidump\020614-8845-01.dmp
2014-02-06 21:53 - 2014-02-06 21:53 - 00000000 ____D () C:\Windows\Minidump
2014-02-06 20:38 - 2014-02-06 20:38 - 00000472 _____ () C:\Users\chris\Desktop\defogger_disable.log
2014-02-06 20:37 - 2014-02-06 20:37 - 00000000 _____ () C:\Users\chris\defogger_reenable
2014-02-06 20:37 - 2013-05-12 13:00 - 00000000 ____D () C:\Users\chris
2014-02-05 09:06 - 2013-05-12 15:42 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-05 09:06 - 2013-05-12 15:42 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-05 09:06 - 2013-05-12 15:42 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-04 09:28 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-02-03 16:48 - 2014-02-03 16:48 - 04122976 _____ (Kaspersky Lab ZAO) C:\Users\chris\Documents\TDSSKiller.exe
2014-02-03 11:53 - 2013-05-29 11:54 - 00000000 ___RD () C:\Users\chris\Dropbox
2014-02-03 11:53 - 2013-05-29 11:52 - 00000000 ____D () C:\Users\chris\AppData\Roaming\Dropbox
2014-02-03 11:21 - 2014-02-03 11:21 - 00204496 _____ (Malwarebytes) C:\Users\chris\Downloads\startuplite-setup-1.07.exe
2014-02-03 11:21 - 2014-02-03 11:21 - 00003150 _____ () C:\Windows\System32\Tasks\{8920A2C2-5AFC-4690-9AF2-EF6BFDCE8C9C}
2014-02-03 11:17 - 2013-05-14 09:13 - 00000000 ____D () C:\Users\chris\Desktop\applications
2014-01-26 20:58 - 2014-01-05 14:11 - 00000000 ____D () C:\ProgramData\Ableton
2014-01-26 20:11 - 2014-01-26 20:11 - 00000000 ____D () C:\Users\chris\Documents\Togeo_Studios-Simple_Synths
2014-01-26 20:11 - 2014-01-26 20:08 - 98454416 _____ () C:\Users\chris\Downloads\Togeo_Studios-Simple_Synths.zip
2014-01-26 19:40 - 2014-01-26 19:40 - 00000000 ____D () C:\Users\chris\Documents\Tom Cosm - Swagger - Ableton Pack
2014-01-26 16:59 - 2013-05-12 15:54 - 00000000 ____D () C:\Users\chris\AppData\Local\Adobe
2014-01-19 12:33 - 2014-01-15 20:34 - 00008284 _____ () C:\Users\chris\ESt2013_Biller_Christopher.elfo
2014-01-19 12:32 - 2014-01-15 20:34 - 00000000 ____D () C:\Users\chris\AppData\Local\.elfohilfe
2014-01-18 00:36 - 2014-01-12 19:32 - 00000000 ___RD () C:\Users\chris\Desktop\CHRIS Project
2014-01-17 21:28 - 2014-01-17 21:17 - 79069909 _____ () C:\Users\chris\Downloads\Tom Cosm - Swagger - Ableton Pack.zip
2014-01-17 11:20 - 2013-05-29 11:53 - 00000482 _____ () C:\Windows\wininit.ini
2014-01-17 11:19 - 2013-05-29 11:54 - 00001022 _____ () C:\Users\chris\Desktop\Dropbox.lnk
2014-01-17 11:19 - 2013-05-29 11:53 - 00000000 ____D () C:\Users\chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-01-16 15:04 - 2014-01-16 15:04 - 18126032 _____ (Adobe Systems Inc.) C:\Users\chris\Downloads\AdobeAIRInstaller.exe
2014-01-16 10:21 - 2009-07-14 05:45 - 00426520 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-16 08:20 - 2013-07-15 22:17 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-16 08:19 - 2013-05-12 16:26 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-15 19:56 - 2014-01-12 13:32 - 00000000 ____D () C:\Program Files (x86)\ElsterFormular
2014-01-15 18:38 - 2014-01-15 18:38 - 00000000 ____D () C:\Program Files\Common Files\Propellerhead Software
2014-01-15 18:36 - 2014-01-15 18:36 - 00000915 _____ () C:\Users\chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ableton Live 9 Standard.lnk
2014-01-15 18:32 - 2014-01-15 18:26 - 722616436 _____ () C:\Users\chris\Downloads\ableton_live_standard_9.1_64.zip
2014-01-13 15:03 - 2014-01-05 14:13 - 00000000 ____D () C:\Users\chris\Documents\Ableton
2014-01-12 13:32 - 2014-01-12 13:32 - 00001237 _____ () C:\Users\Public\Desktop\ElsterFormular.lnk
2014-01-12 13:32 - 2014-01-12 13:32 - 00000000 ____D () C:\Users\chris\AppData\Roaming\elsterformular
2014-01-12 13:32 - 2014-01-12 13:32 - 00000000 ____D () C:\ProgramData\elsterformular
2014-01-12 13:31 - 2014-01-12 13:30 - 69755760 _____ (Landesfinanzdirektion Thüringen) C:\Users\chris\Downloads\ElsterFormular-14.4.20130909p.exe

Some content of TEMP:
====================
C:\Users\chris\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-08 22:01

==================== End Of Log ============================
         
--- --- ---

--- --- ---


Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 06-02-2014
Ran by chris at 2014-02-09 11:12:33
Running from C:\Users\chris\Desktop\board
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

Ableton Live 9 Standard (Version: 9.0.0.0 - Ableton)
Acer Arcade Deluxe (x32 Version: 4.0.7511 - CyberLink Corp.)
Acer Arcade Deluxe (x32 Version: 4.0.7511 - CyberLink Corp.) Hidden
Acer Arcade Movie (x32 Version: 9.0.6317 - CyberLink Corp.) Hidden
Acer Backup Manager (x32 Version: 2.0.0.60 - NewTech Infosystems)
Acer Crystal Eye Webcam (x32 Version: 5.2.11.2 - Suyin Optronics Corp)
Acer eRecovery Management (x32 Version: 4.05.3011 - Acer Incorporated)
Acer PowerSmart Manager (x32 Version: 5.02.3002 - Acer Incorporated)
Acer Registration (x32 Version: 1.03.3002 - Acer Incorporated)
Acer ScreenSaver (x32 Version: 1.1.0222.2010 - Acer Incorporated)
Acer Updater (x32 Version: 1.02.3001 - Acer Incorporated)
Acer VCM (x32 Version: 4.05.3002 - Acer Incorporated)
Acrobat.com (x32 Version: 1.6.65 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 4.0.0.1390 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 4.0.0.1390 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 12 ActiveX (x32 Version: 12.0.0.44 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.44 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (x32 Version: 11.0.06 - Adobe Systems Incorporated)
Alcor Micro USB Card Reader (x32 Version: 1.2.17.05001 - Alcor Micro Corp.)
Alcor Micro USB Card Reader (x32 Version: 1.2.17.05001 - Alcor Micro Corp.) Hidden
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (x32 Version: 1.0.0.23 - Atheros Communications Inc.)
ATI Catalyst Install Manager (Version: 3.0.765.0 - ATI Technologies, Inc.)
avast! Free Antivirus (x32 Version: 9.0.2011 - Avast Software)
Backup Manager Basic (x32 Version: 2.0.0.60 - NewTech Infosystems) Hidden
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center Core Implementation (x32 Version: 2010.0303.420.7651 - ATI) Hidden
Catalyst Control Center Graphics Full Existing (x32 Version: 2010.0303.420.7651 - ATI) Hidden
Catalyst Control Center Graphics Full New (x32 Version: 2010.0303.420.7651 - ATI) Hidden
Catalyst Control Center Graphics Light (x32 Version: 2010.0303.420.7651 - ATI) Hidden
Catalyst Control Center Graphics Previews Vista (x32 Version: 2010.0303.420.7651 - ATI) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2010.0303.420.7651 - ATI Technologies, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2010.0303.420.7651 - ATI) Hidden
CCC Help Chinese Standard (x32 Version: 2010.0303.0419.7651 - ATI) Hidden
CCC Help Chinese Traditional (x32 Version: 2010.0303.0419.7651 - ATI) Hidden
CCC Help Czech (x32 Version: 2010.0303.0419.7651 - ATI) Hidden
CCC Help Danish (x32 Version: 2010.0303.0419.7651 - ATI) Hidden
CCC Help Dutch (x32 Version: 2010.0303.0419.7651 - ATI) Hidden
CCC Help English (x32 Version: 2010.0303.0419.7651 - ATI) Hidden
CCC Help Finnish (x32 Version: 2010.0303.0419.7651 - ATI) Hidden
CCC Help French (x32 Version: 2010.0303.0419.7651 - ATI) Hidden
CCC Help German (x32 Version: 2010.0303.0419.7651 - ATI) Hidden
CCC Help Greek (x32 Version: 2010.0303.0419.7651 - ATI) Hidden
CCC Help Hungarian (x32 Version: 2010.0303.0419.7651 - ATI) Hidden
CCC Help Italian (x32 Version: 2010.0303.0419.7651 - ATI) Hidden
CCC Help Japanese (x32 Version: 2010.0303.0419.7651 - ATI) Hidden
CCC Help Korean (x32 Version: 2010.0303.0419.7651 - ATI) Hidden
CCC Help Norwegian (x32 Version: 2010.0303.0419.7651 - ATI) Hidden
CCC Help Polish (x32 Version: 2010.0303.0419.7651 - ATI) Hidden
CCC Help Portuguese (x32 Version: 2010.0303.0419.7651 - ATI) Hidden
CCC Help Russian (x32 Version: 2010.0303.0419.7651 - ATI) Hidden
CCC Help Spanish (x32 Version: 2010.0303.0419.7651 - ATI) Hidden
CCC Help Swedish (x32 Version: 2010.0303.0419.7651 - ATI) Hidden
CCC Help Thai (x32 Version: 2010.0303.0419.7651 - ATI) Hidden
CCC Help Turkish (x32 Version: 2010.0303.0419.7651 - ATI) Hidden
ccc-core-static (x32 Version: 2010.0303.420.7651 - Ihr Firmenname) Hidden
ccc-utility64 (Version: 2010.0303.420.7651 - ATI) Hidden
Cisco AnyConnect Secure Mobility Client  (x32 Version: 3.1.00495 - Cisco Systems, Inc.)
Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.00495 - Cisco Systems, Inc.) Hidden
dBpoweramp Music Converter (x32 Version: Release 14.4 - Illustrate)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32 Version:  - Microsoft)
Dropbox (HKCU Version: 2.4.11 - Dropbox, Inc.)
Druckerdeinstallation für EPSON Stylus S20 Series (Version:  - SEIKO EPSON Corporation)
ElsterFormular (x32 Version: 15.0.13315 - Landesfinanzdirektion Thüringen)
Haali Media Splitter (x32 Version:  - )
Identity Card (x32 Version: 1.00.3003 - Acer Incorporated)
Intel(R) Control Center (x32 Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (x32 Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Rapid Storage Technology (x32 Version: 9.5.6.1001 - Intel Corporation)
Intel(R) Turbo Boost Technology Driver (x32 Version: 01.00.01.1002 - Intel Corporation)
ITCH for Novation TWITCH (x32 Version: 1.8.2 - Serato Audio Research)
Junk Mail filter update (x32 Version: 14.0.8089.726 - Microsoft Corporation) Hidden
Launch Manager (x32 Version: 4.0.7 - Acer Inc.)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
MediaShow Espresso (x32 Version: 5.5.1403_23691 - CyberLink Corp.) Hidden
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Choice Guard (x32 Version: 2.0.48.0 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Suite Activation Assistant (x32 Version: 2.9 - Microsoft Corporation)
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
MixMeister BPM Analyzer 1.0 (x32 Version:  - MixMeister Technology LLC)
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla)
MSVCRT (x32 Version: 14.0.1468.721 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation)
MyWinLocker (x32 Version: 3.1.206.0 - Egis Technology Inc.) Hidden
MyWinLocker Suite (x32 Version: 3.1.206.0 - Egis Technology Inc.)
MyWinLocker Suite (x32 Version: 3.1.206.0 - Egis Technology Inc.) Hidden
Novation USB Audio Driver 2.1 (Version: 2.1 - Novation DMS Ltd.)
NTI Backup Now 5 (x32 Version: 5.1.2.628 - NewTech Infosystems)
NTI Backup Now Standard (x32 Version: 5.1.2.628 - NewTech Infosystems) Hidden
NTI Media Maker 8 (x32 Version: 8.0.12.6630 - NewTech Infosystems)
NTI Media Maker 8 (x32 Version: 8.0.12.6630 - NewTech Infosystems) Hidden
Optical Drive Power Management (x32 Version: 1.01.3006 - Acer Incorporated)
PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6050 - Realtek Semiconductor Corp.)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version:  - Microsoft) Hidden
Shredder (Version: 2.0.5.0 - Egis Technology Inc.) Hidden
Shredder (x32 Version: 2.0.5.0 - Egis Technology Inc.) Hidden
Skype™ 6.11 (x32 Version: 6.11.102 - Skype Technologies S.A.)
Synaptics Pointing Device Driver (Version: 14.0.6.0 - Synaptics Incorporated)
Unity Web Player (HKCU Version:  - Unity Technologies ApS)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (x32 Version:  - Microsoft)
Welcome Center (x32 Version: 1.01.3002 - Acer Incorporated)
WIDCOMM Bluetooth Software (Version: 6.3.0.4300 - Broadcom Corporation)
Windows Live Anmelde-Assistent (x32 Version: 5.000.818.5 - Microsoft Corporation)
Windows Live Call (x32 Version: 14.0.8064.0206 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 14.0.8064.206 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 14.0.8089.0726 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 14.0.8089.726 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 14.0.8081.709 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 14.0.8089.0726 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 14.0.8089.0726 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 14.0.8091.0730 - Microsoft Corporation) Hidden
Windows Live Sync (x32 Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live Writer (x32 Version: 14.0.8089.0726 - Microsoft Corporation) Hidden
Windows Live-Uploadtool (x32 Version: 14.0.8014.1029 - Microsoft Corporation)
WinZip 18.0 (Version: 18.0.10661 - WinZip Computing, S.L. )

==================== Restore Points  =========================

24-01-2014 16:46:07 Windows Update
28-01-2014 08:08:35 Windows Update
31-01-2014 09:37:37 Windows Update
04-02-2014 08:32:39 Windows Update
07-02-2014 16:52:33 Windows Update
07-02-2014 16:58:50 WinZip 18.0 wird installiert

==================== Hosts content: ==========================

2009-07-14 03:34 - 2014-02-08 15:30 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {379F0879-5EAC-43AF-A108-E01E42F31E86} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-01-07] (AVAST Software)
Task: {5418912F-BA7F-401D-9F90-42E484195A17} - System32\Tasks\{AF6C7C59-F000-4DA8-9370-341F9B0FB380} => Firefox.exe hxxp://ui.skype.com/ui/0/6.3.0.107/de/go/help.faq.installer?source=lightinstaller&amp;LastError=1618
Task: {6E7F5A3B-48F3-4BF8-9636-8C59D004389D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-05] (Adobe Systems Incorporated)
Task: {8BC0E775-D157-4556-954A-ACF2DA4CEA19} - System32\Tasks\{9DBA2934-98EE-4162-85D5-16ECED83BE1A} => Firefox.exe hxxp://ui.skype.com/ui/0/6.3.0.107/de/go/help.faq.installer?source=lightinstaller&amp;LastError=1618
Task: {B347F6C3-D00B-4347-A948-B0FCEE8BE4B6} - System32\Tasks\{4AC7A996-9031-4F31-BE4C-4A37655BA2FF} => Firefox.exe hxxp://ui.skype.com/ui/0/6.3.0.107/de/go/help.faq.installer?source=lightinstaller&amp;LastError=1618
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2010-03-26 10:46 - 2010-03-26 10:46 - 00173856 _____ () C:\Program Files\WIDCOMM\Bluetooth Software\btkeyind.dll
2010-01-07 13:42 - 2010-01-07 13:42 - 00016384 ____R () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2013-05-12 12:53 - 2013-05-12 12:53 - 00270336 _____ () C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2014-02-08 15:15 - 2014-02-08 10:41 - 02171904 _____ () C:\Program Files\AVAST Software\Avast\defs\14020800\algo.dll
2010-03-09 01:18 - 2010-03-09 01:18 - 00465576 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\sqlite3.dll
2010-03-09 01:13 - 2010-03-09 01:13 - 01081600 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\ACE.dll
2010-04-15 12:03 - 2009-12-24 01:32 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2010-04-15 12:47 - 2009-05-20 07:02 - 00072200 _____ () C:\Program Files (x86)\Launch Manager\CdDirIo.dll
2013-12-03 19:12 - 2013-12-03 19:12 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-01-03 19:07 - 2014-01-03 19:07 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-02-05 09:06 - 2014-02-05 09:06 - 16287624 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============

Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: vpnva
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: High Definition Audio-Controller
Description: High Definition Audio-Controller
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: HDAudBus
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============

Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
  Date: 2014-02-08 18:59:18.722
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-02-08 15:29:16.721
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-08 15:29:16.472
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-02-06 11:26:07.602
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-02-05 08:57:51.083
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-02-01 14:32:02.844
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-30 21:25:13.966
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-30 15:27:44.313
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-29 20:35:27.861
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-29 20:26:25.446
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 44%
Total physical RAM: 3766.68 MB
Available physical RAM: 2099.48 MB
Total Pagefile: 7531.55 MB
Available Pagefile: 5659.17 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:135.95 GB) (Free:50.91 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 149 GB) (Disk ID: 851CF10E)
Partition 1: (Not Active) - (Size=13 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=136 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         
Gruß,

Chris

Alt 10.02.2014, 08:05   #8
schrauber
/// the machine
/// TB-Ausbilder
 

Windows 7 wird nach längerer Laufzeit extrem langsam beim Öffnen von Websites - Standard

Windows 7 wird nach längerer Laufzeit extrem langsam beim Öffnen von Websites




ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 10.02.2014, 20:09   #9
uyab
 
Windows 7 wird nach längerer Laufzeit extrem langsam beim Öffnen von Websites - Standard

Windows 7 wird nach längerer Laufzeit extrem langsam beim Öffnen von Websites



hallo,

Code:
ATTFilter
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=7d96c74e517b554c84554e84f210c368
# engine=17015
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-02-10 07:59:57
# local_time=2014-02-10 08:59:57 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=774 16777213 85 74 2943835 2948384 0 0
# compatibility_mode=5893 16776573 100 94 82069 143692247 0 0
# scanned=160775
# found=0
# cleaned=0
# scan_time=4208
         
hallo nochmal,

hier noch der scan von security check:

Code:
ATTFilter
 Results of screen317's Security Check version 0.99.79  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
avast! Antivirus   
 Antivirus up to date!  (On Access scanning disabled!) 
`````````Anti-malware/Other Utilities Check:````````` 
 Malwarebytes Anti-Malware Version 1.75.0.1300  
  Adobe Flash Player 12.0.0.43 Flash Player out of Date!  
 Adobe Reader XI  
 Mozilla Firefox (26.0) 
````````Process Check: objlist.exe by Laurent````````  
 AVAST Software Avast AvastSvc.exe  
 AVAST Software Avast AvastUI.exe  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
         
Scheint schon viel besser zu laufen und auch keine der alten Probleme treten auf. Vielen Dank!

Alt 11.02.2014, 16:49   #10
schrauber
/// the machine
/// TB-Ausbilder
 

Windows 7 wird nach längerer Laufzeit extrem langsam beim Öffnen von Websites - Standard

Windows 7 wird nach längerer Laufzeit extrem langsam beim Öffnen von Websites



Fertig

Die Reihenfolge ist hier entscheidend.
  1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
  2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
    • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
    • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
    • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
  3. Downloade Dir bitte auf jeden Fall DelFix Download DelFix auf deinen Desktop:
    • Schließe alle offenen Programme.
    • Starte die delfix.exe mit einem Doppelklick.
    • Setze vor jede Funktion ein Häkchen.
    • Klicke auf Start.
    • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
    • Starte deinen Rechner abschließend neu.
  4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.



Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun

Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
  • Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
  • Windows Updates
    • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
    • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
  • Gehe sicher das die automatischen Updates aktiviert sind.
  • Software Updates
    Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
    Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.


Anti- Viren Software
  • Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.


Zusätzlicher Schutz
  • MalwareBytes Anti Malware
    Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
    Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
    Ein Tutorial zur Verwendung findest Du hier.
  • WinPatrol
    Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.


Sicheres Browsen
  • SpywareBlaster
    Eine kurze Einführung findest du Hier
  • MVPs hosts file
    Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
  • WOT (Web of trust)
    Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.


Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
  • Opera
  • Mozilla Firefox.
    • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
    • NoScript
      Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    • AdblockPlus
      Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
      Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts
  • Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
  • verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
  • Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
  • Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe
Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 13.02.2014, 21:45   #11
uyab
 
Windows 7 wird nach längerer Laufzeit extrem langsam beim Öffnen von Websites - Standard

Windows 7 wird nach längerer Laufzeit extrem langsam beim Öffnen von Websites



Hallo Schrauber,

Vielen Dank für deine Hilfe, es läuft alles wieder einwandfrei!

Schönen Gruß,

Chris

Alt 14.02.2014, 16:25   #12
schrauber
/// the machine
/// TB-Ausbilder
 

Windows 7 wird nach längerer Laufzeit extrem langsam beim Öffnen von Websites - Standard

Windows 7 wird nach längerer Laufzeit extrem langsam beim Öffnen von Websites



Gern Geschehen
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort

Themen zu Windows 7 wird nach längerer Laufzeit extrem langsam beim Öffnen von Websites
4d36e972-e325-11ce-bfc1-08002be10318, antivirus, blockiert, branding, browser, converter, desktop, device driver, error, excel, fehler, firefox, flash player, home, iexplore.exe, langsam, launch, mozilla, ntdll.dll, realtek, registry, rundll, scan, security, services.exe, software, svchost.exe, system, taskhost.exe, vista, windows, windows 7



Ähnliche Themen: Windows 7 wird nach längerer Laufzeit extrem langsam beim Öffnen von Websites


  1. Windows XP: Rechner extrem langsam nach Virenscan
    Log-Analyse und Auswertung - 17.07.2015 (15)
  2. Windows 8: automatische Updatefunktion in den Diensten fehlt, Rechner friert gelegentlich ein/wird extrem langsam
    Log-Analyse und Auswertung - 07.07.2015 (1)
  3. Windows 7: Computer extrem langsam nach Neustart
    Plagegeister aller Art und deren Bekämpfung - 17.03.2015 (22)
  4. PC ist auch nach Recovery beim Start extrem langsam und verhält sich merkwürdig
    Plagegeister aller Art und deren Bekämpfung - 30.01.2015 (39)
  5. Windows 7 reagiert extrem langsam nach Grafikkartenfehler
    Log-Analyse und Auswertung - 26.09.2014 (31)
  6. Win7 PC beim Surfen sehr langsam (Aufbau von Websites)
    Plagegeister aller Art und deren Bekämpfung - 05.08.2014 (28)
  7. Rechner extrem langsam nach versehentlichem Öffnen eines Anhangs einer Mail
    Log-Analyse und Auswertung - 04.07.2014 (20)
  8. Windows 7 nach Zurücksetzen auf Werkseinstellungen extrem langsam, Windows Explorer stürzt dauernd ab
    Log-Analyse und Auswertung - 22.06.2014 (13)
  9. Computer wird beim Start von Google Chrome extrem langsam
    Plagegeister aller Art und deren Bekämpfung - 13.06.2014 (11)
  10. Windows 7 - Beim Öffnen von Websites öffnen sich Popups und Tabs mit Werbung
    Log-Analyse und Auswertung - 27.01.2014 (3)
  11. Windows 7: PC zeitweise extrem langsam nach Schädlingsbefall
    Plagegeister aller Art und deren Bekämpfung - 24.09.2013 (9)
  12. Pc/Internet wird nach einiger Zeit extrem langsam
    Plagegeister aller Art und deren Bekämpfung - 26.08.2012 (1)
  13. Windows nach Start extrem langsam
    Plagegeister aller Art und deren Bekämpfung - 10.07.2012 (1)
  14. Laptop extrem langsam beim surfen; wird heiß und stürzt oft ab!
    Netzwerk und Hardware - 06.04.2010 (1)
  15. inter net wird nach längerer nutzung immer langsamer
    Antiviren-, Firewall- und andere Schutzprogramme - 21.09.2009 (2)

Zum Thema Windows 7 wird nach längerer Laufzeit extrem langsam beim Öffnen von Websites - Hallo liebes Trojaner-Board, mein Rechner wird mit zunehmender Laufzeit extrem langsam und blockiert dann auch manchmal komplett. Anfangs nach dem einschalten geht es noch, wird dann mit der Zeit immer - Windows 7 wird nach längerer Laufzeit extrem langsam beim Öffnen von Websites...
Archiv
Du betrachtest: Windows 7 wird nach längerer Laufzeit extrem langsam beim Öffnen von Websites auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.