Vista 64bit immer langsamer

cologne72 · 28.02.2009, 17:11

Hi my Vista 64bit System wird nach einigerzeit immer sehr langsam.
Hochlauf, Progamme und Firefox brauchen ewig bis sie gestarten werden
Poste mal HyJackThis logfile.
Kann da bitte mal jemand drüberschauen.
Gruß Cologne72

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:09:45, on 09.01.2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
C:\hp\support\hpsysdrv.exe
C:\Program Files (x86)\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files (x86)\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe
C:\Program Files\Logitech\GamePanel Software\Applets\LCDMedia.exe
C:\hp\kbd\kbd.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_de&c=83&bd=Pavilion&pf=cndt
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_de&c=83&bd=Pavilion&pf=cndt
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_de&c=83&bd=Pavilion&pf=cndt
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_de&c=83&bd=Pavilion&pf=cndt
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: AOL Toolbar BHO - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files (x86)\AOL\AOL Toolbar 5.0\aoltb.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files (x86)\AOL\AOL Toolbar 5.0\aoltb.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KbdStub.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe"
O4 - HKLM\..\Run: [HP Software Update] c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files (x86)\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETZWERKDIENST')
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: &AOL Toolbar-Suche - C:\ProgramData\AOL\ieToolbar\resources\de-DE\local\search.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files (x86)\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files (x86)\Java\jre1.6.0_01\bin\ssv.dll
O13 - Gopher Prefix:
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files (x86)\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avira AntiVir Personal - Free Antivirus Planer (AntiVirScheduler) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati External Event Utility - Unknown owner - C:\Windows\system32\Ati2evxx.exe (file missing)
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files (x86)\HP Games\My HP Game Console\GameConsoleService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (X86)\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NMIndexingService - Nero AG - C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8341 bytes

Jig Saw · 28.02.2009, 17:18

findest du dein Thread nicht mehr?
http://www.trojaner-board.de/70064-t...messenger.html

cologne72 · 28.02.2009, 18:24

vorher hat es sich um den rechner meiner tochter gehandelt, jetzt geht es um meinen rechner und für VISTA 64bit gibt es nicht soviel hilfe wie für XP.
aber sehr aufmecksam

habe das gefühl das es vom explorer kommt, obwohl ich den nicht nutze.

Jig Saw · 28.02.2009, 18:26

achso ok
aber arbeite mal das ab, dann wird sich jemand anderes danach um dich kümmern

http://www.trojaner-board.de/69886-a...-beachten.html

cologne72 · 28.02.2009, 18:33

das ist der ADAWARE scan der hat da ein paar cockies gefunden???

Ad-Aware Build
Log File Created on: 2009-02-28 16:53:52
Using Definitions File: C:\ProgramData\Lavasoft\Ad-Aware\core.aawdef

OS: Microsoft Windows Vista Service Pack 1 (Build 6001)

Ad-Aware Settings
===========================
Skipping files larger than 1048576 kB
Ignoring infections with lower TAI than: 3

Infections Detected: 1
Infections Ignored: 0

End of Scan Section
===========================

Cleaned Infections
===========================
MRU Path: C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Recent Count: 7, Belonging to MRU Object

End of Cleaned Infection

cologne72 · 28.02.2009, 18:41

ccleaner konnte insta. werden und konnte auch damit arbeiten.
malware byts konnte ich instal. abeer funktioniert nicht.

Jig Saw · 28.02.2009, 19:18

oh man Vista 64 bit

cologne72 · 28.02.2009, 19:22

jep am liebsten würd ich downgraden

aber dann nützt mir der arbeitzspeicher auch nichts.
sch... Vista 64bit

cologne72 · 01.03.2009, 11:34

hier noch die liste instalierter software

7-Zip 4.57
Ad-Aware
Adobe Flash Player 10 Plugin
Adobe Flash Player ActiveX
Adobe Reader 8.1.3 - Deutsch
AnyDVD
AOL Toolbar 5.0
Avira AntiVir Personal - Free Antivirus
Call of Duty(R) - World at War(TM)
Call of Duty(R) - World at War(TM) 1.1 Patch
Call of Duty(R) - World at War(TM) 1.2 Patch
Call of Duty(R) 4 - Modern Warfare(TM)
Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch
Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch
Catalyst Control Center - Branding
CCleaner (remove only)
Compatibility Pack für 2007 Office System
CrissCross 8.40
CyberLink DVD Suite Deluxe
CyberLink PowerDirector
DVD Shrink 3.2 deutsch
EVEREST Ultimate Edition v4.60
Fallout 3
Far Cry 2
FIFA 09
GSC 2.00
Half-Life 2: Deathmatch
Half-Life(R) 2
Hardware Diagnose Tools
Haufe iDesk-Browser
Haufe iDesk-Service
Hewlett-Packard Active Check for Health Check
Hewlett-Packard Asset Agent for Health Check
HijackThis 2.0.2
HP Active Support Library
HP Customer Experience Enhancements
HP Customer Feedback
HP Easy Setup - Frontend
HP Picasso Media Center Add-In
hp print screen utility
HP Total Care Advisor
HP Update
Java(TM) SE Runtime Environment 6 Update 1
LabelPrint
Lexware Info Service
LightScribe System Software 1.12.37.1
Logitech SetPoint
Microsoft Games for Windows - LIVE Redistributable
Microsoft Office PowerPoint Viewer 2007 (German)
Microsoft Visual C++ 2005 Redistributable
Microsoft Works
Mozilla Firefox (3.0.6)
MSXML 4.0 SP2 (KB954430)
muvee autoProducer 6.1
My HP Games
Need for Speed™ Undercover
Nero 7 Ultra Edition
neroxml
NetCologne Service-Zugang deinstallieren
OpenOffice.org 3.0
Optimierte Multimedia-Tastatur-Lösung
Power2Go
PunkBuster Services
Python 2.5
Realtek High Definition Audio Driver
Steam(TM)
Steuer 2008
Steuer Hilfesammlung
Streamripper (Remove only)
TeamSpeak 2 RC2
Winamp
Windows Live Anmelde-Assistent
Windows Live installer
Windows Live Messenger
Windows Media Player Firefox Plugin
World of Warcraft FREE Trial
XviD MPEG-4 Codec

myrtille · 01.03.2009, 11:37

Welche Fehlermeldung kommt bei Malwarebytes? Die kostenlose Version sollte eigentlich unter Vista64 laufen.

lg myrtille

cologne72 · 02.03.2009, 21:03

es kommt keine Fehlermeldung.
Programm installiert sich aber lässt sich nicht öffnen.
es erscheint auch kein Desktop Zeichen.
der instalationsordner ist leer
Gruß cologne72

myrtille · 02.03.2009, 23:50

Hi,

hast du versucht es per Rechtsklick und dannn per "als administrator ausführen" zu starten?

Das Programm ist eigentlich in der freien Version Vista64 kompatibel. Wäre auch das erste mal, dass ich erlebe, dass man es nicht installieren kann.

Auf den ersten Blick sieht man nichts, was auf Malware hinweist. Allerdings sind die meisten Programme noch nicht auf 64bit abgestimmt.

DrWeb ist eines der Programme, die 64bit kompatibel wären:
Cureit Dr.Web

Downloade Dr.Web CureIt!
Speichere es auf deinem Desktop.
Entpacke es in einen eigenen Ordner.
Lies nun zuerst die deutsche Anleitung und drucke sie dir aus.

Lass alle Malware in den Quarantaene Ordner verschieben.
Ignoriere eventuelle Warnungen seitens deines AV Programms, du kannst auch offline gehen und -> dann dein AV Programm während des Scannens mit Dr. Web CureIt! abstellen.
Vergiss bitte nicht, dein AV Programm nach dem Scan wieder anzustellen.

Speichere das Logfile - siehe Anleitung - und poste es.

Allerdings würde ich die Ursache eher woanders vermuten.

lg myrtille

cologne72 · 11.03.2009, 19:45

Code:

ATTFilter

ich weiß langsam nicht mehr weiter, system ist wieder total langsam,
bisher hab ich es halbwegs mit AdAware hinbekommen aber der funktioniert nicht mehr da kommt nur diese fehlermeldung:

System error: 1814 has occurred. description: could not login to service.
are you running this application as another user?
application terminates.

hjt ging noch CCleaner funktioniert auch nicht mehr!:(:(:(
danke für eure bisherige hilfe


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:09:45, on 09.01.2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
C:\hp\support\hpsysdrv.exe
C:\Program Files (x86)\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files (x86)\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe
C:\Program Files\Logitech\GamePanel Software\Applets\LCDMedia.exe
C:\hp\kbd\kbd.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_de&c=83&bd=Pavilion&pf=cndt
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_de&c=83&bd=Pavilion&pf=cndt
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_de&c=83&bd=Pavilion&pf=cndt
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_de&c=83&bd=Pavilion&pf=cndt
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: AOL Toolbar BHO - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files (x86)\AOL\AOL Toolbar 5.0\aoltb.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files (x86)\AOL\AOL Toolbar 5.0\aoltb.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KbdStub.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe"
O4 - HKLM\..\Run: [HP Software Update] c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files (x86)\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETZWERKDIENST')
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: &AOL Toolbar-Suche - C:\ProgramData\AOL\ieToolbar\resources\de-DE\local\search.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files (x86)\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files (x86)\Java\jre1.6.0_01\bin\ssv.dll
O13 - Gopher Prefix: 
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files (x86)\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avira AntiVir Personal - Free Antivirus Planer (AntiVirScheduler) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati External Event Utility - Unknown owner - C:\Windows\system32\Ati2evxx.exe (file missing)
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files (x86)\HP Games\My HP Game Console\GameConsoleService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (X86)\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NMIndexingService - Nero AG - C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8341 bytes

cologne72 · 21.03.2009, 17:33

Code:

ATTFilter

CClaener-21-03-09 
REINIGUNG komplett - (4.619 Sek)
------------------------------------------------------------------------------------------
67,2MB entfernt.
------------------------------------------------------------------------------------------

Details der gelöschten Dateien
------------------------------------------------------------------------------------------
C:\Users\Frank\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1024.db 24 Byte
C:\Users\Frank\AppData\Local\Microsoft\Windows\Explorer\thumbcache_256.db 1,00MB
C:\Users\Frank\AppData\Local\Microsoft\Windows\Explorer\thumbcache_32.db 24 Byte
C:\Users\Frank\AppData\Local\Microsoft\Windows\Explorer\thumbcache_96.db 1,00MB
C:\Users\Frank\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db 3,97KB
C:\Users\Frank\AppData\Local\Microsoft\Windows\Explorer\thumbcache_sr.db 24 Byte
C:\Users\Frank\AppData\Local\Temp\RarSFX1\16cea61b 75,00KB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\207ceb58 0,36MB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\25267f4e 46,50KB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\259ba30a 0,10MB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\31528b1f 0,12MB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\44ed12b4 25,55KB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\4a576ebd 15,39KB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\60c03ec1 0,11MB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\6c101c33 0,13MB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\6c142de8 94,94KB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\6e0baa70 68,50KB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\852dd620 75,67KB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\8ec1d985 85,99KB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\9828817d 60,69KB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\982b8cf8 15,21KB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\9dfdefd0 7,34MB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\b09d9935 0,11MB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\b795626e 14,67KB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\be-cureit.dwl 11,18KB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\bg-cureit.dwl 11,50KB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\c4d58923 90,29KB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\c7623b10 49,02KB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\cn-cureit.dwl 8,60KB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\cs-cureit.dwl 10,63KB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\d29f7f12 41,40KB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\dcc393da 71,74KB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\de-cureit.dwl 11,22KB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\dwebio16.dll 25,06KB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\dwebio32.dll 24,00KB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\el-cureit.dwl 13,64KB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\en-drwebgui.chm 0,13MB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\eo-cureit.dwl 10,81KB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\es-cureit.dwl 10,68KB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\et-cureit.dwl 10,25KB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\f4088e5a 78,06KB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\fr-cureit.dwl 11,61KB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\hu-cureit.dwl 11,17KB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\it-cureit.dwl 10,43KB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\ja-cureit.dwl 11,42KB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\ko-cureit.dwl 10,54KB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\lt-cureit.dwl 10,57KB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\lv-cureit.dwl 10,92KB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\nl-cureit.dwl 10,41KB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\no-cureit.dwl 9,37KB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\pl-cureit.dwl 11,42KB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\pt-cureit.dwl 10,92KB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\ru-cureit.dwl 11,38KB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\ru-drwebgui.chm 0,15MB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\setup.dll 3,52MB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\setup.key 1,22KB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\setup_me.ini 1,15KB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\setup_xp.ini 1,18KB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\sk-cureit.dwl 10,88KB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\tr-cureit.dwl 10,28KB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\uk-cureit.dwl 11,29KB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\uz-cureit.dwl 11,59KB
C:\Users\Frank\AppData\Local\Temp\RarSFX1\zh-cureit.dwl 9,22KB
Entfernte Cookies: trojaner-board.de
Entfernte Cookies: google.de
C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\fba3ob16.default\downloads.sqlite 2,00KB
Firefox/Mozilla Temporärer Internet Cache (432 Dateien) 51,9MB
------------------------------------------------------------------------------------------

Code:

ATTFilter

Logfile created: 21.03.2009 12:30:2
Lavasoft Ad-Aware version: 8.0.3
Extended engine version: 8.1
User performing scan: Frank

*********************** Definitions database information ***********************
Lavasoft definition file: 144.0
Extended engine definition file: 8.1

******************************** Scan results: *********************************
Scan profile name: Vollständiger Scan  (ID: full)
Objects scanned: 230916
Objects detected: 8


Type              Detected
==========================
Processes.......:        0
Registry entries:        0
Hostfile entries:        0
Files...........:        0
Folders.........:        0
LSPs............:        0
Cookies.........:        8
Browser hijacks.:        0
MRU objects.....:        0



Removed items:
Description: *atdmt* Family Name: Cookies Clean status: Success Item ID: 408910 Family ID: 0
Description: *bs.serving-sys* Family Name: Cookies Clean status: Success Item ID: 408902 Family ID: 0
Description: *serving-sys* Family Name: Cookies Clean status: Success Item ID: 409130 Family ID: 0
Description: *doubleclick* Family Name: Cookies Clean status: Success Item ID: 408875 Family ID: 0
Description: *ivwbox* Family Name: Cookies Clean status: Success Item ID: 409247 Family ID: 0
Description: *weborama* Family Name: Cookies Clean status: Success Item ID: 408955 Family ID: 0
Description: *.webmasterplan* Family Name: Cookies Clean status: Success Item ID: 409180 Family ID: 0
Description: *etracker* Family Name: Cookies Clean status: Success Item ID: 409002 Family ID: 0

Scan and cleaning complete: Finished correctly after 12732 seconds

*********************************** Settings ***********************************

Scan profile:
ID: full, enabled:1, value: Vollständiger Scan
  ID: scancriticalareas, enabled:1, value: true
  ID: scanrunningapps, enabled:1, value: true
  ID: scanregistry, enabled:1, value: true
  ID: scanlsp, enabled:1, value: true
  ID: scanads, enabled:1, value: true
  ID: scanhostsfile, enabled:1, value: true
  ID: scanmru, enabled:1, value: true
  ID: scanbrowserhijacks, enabled:1, value: true
  ID: scantrackingcookies, enabled:1, value: true
    ID: closebrowsers, enabled:1, value: false
  ID: folderstoscan, enabled:1, value: C:\,D:\
  ID: scanrootkits, enabled:1, value: true
  ID: usespywareheuristics, enabled:1, value: true
  ID: extendedengine, enabled:0, value: true
    ID: useheuristics, enabled:0, value: true
      ID: heuristicslevel, enabled:0, value: mild, domain: medium,mild,strict
  ID: filescanningoptions, enabled:1
    ID: archives, enabled:1, value: true
    ID: onlyexecutables, enabled:1, value: false
    ID: skiplargerthan, enabled:1, value: 20480

Scan global:
ID: global, enabled:1
  ID: addtocontextmenu, enabled:1, value: true
  ID: playsoundoninfection, enabled:1, value: false
    ID: soundfile, enabled:0, value: *to be filled in automatically*\alert.wav

Scheduled scan settings:
<Empty>

Update settings:
ID: updates, enabled:1
  ID: launchthreatworksafterscan, enabled:1, value: normal, domain: normal,off,silently
  ID: displaystatus, enabled:1, value: false
  ID: deffiles, enabled:1, value: downloadandinstall, domain: dontcheck,downloadandinstall
  ID: autodetectproxy, enabled:1, value: false
  ID: useautoconfigscript, enabled:1, value: false
    ID: autoconfigurl, enabled:0, value: 
  ID: useproxy, enabled:1, value: false
    ID: proxyserver, enabled:0, value: 
  ID: softwareupdates, enabled:1, value: downloadandinstall, domain: dontcheck,downloadandinstall
  ID: licenseandinfo, enabled:1, value: downloadandinstall, domain: dontcheck,downloadandinstall
  ID: schedules, enabled:1, value: true
    ID: updatedaily, enabled:1, value: Daily
      ID: time, enabled:1, value: Sat Mar 21 12:09:00 2009
      ID: frequency, enabled:1, value: daily, domain: daily,monthly,once,systemstart,weekly
      ID: weekdays, enabled:1
        ID: monday, enabled:1, value: false
        ID: tuesday, enabled:1, value: false
        ID: wednesday, enabled:1, value: false
        ID: thursday, enabled:1, value: false
        ID: friday, enabled:1, value: false
        ID: saturday, enabled:1, value: false
        ID: sunday, enabled:1, value: false
      ID: monthly, enabled:1, value: 1, minvalue: 1, maxvalue: 31
      ID: scanprofile, enabled:1, value: 
      ID: auto_deal_with_infections, enabled:1, value: false
    ID: updateweekly, enabled:1, value: Weekly
      ID: time, enabled:1, value: Sat Mar 21 12:09:00 2009
      ID: frequency, enabled:1, value: weekly, domain: daily,monthly,once,systemstart,weekly
      ID: weekdays, enabled:1
        ID: monday, enabled:1, value: true
        ID: tuesday, enabled:1, value: false
        ID: wednesday, enabled:1, value: false
        ID: thursday, enabled:1, value: false
        ID: friday, enabled:1, value: false
        ID: saturday, enabled:1, value: true
        ID: sunday, enabled:1, value: false
      ID: monthly, enabled:1, value: 1, minvalue: 1, maxvalue: 31
      ID: scanprofile, enabled:1, value: 
      ID: auto_deal_with_infections, enabled:1, value: false

Appearance settings:
ID: appearance, enabled:1
  ID: skin, enabled:1, value: default.egl, reglocation: HKEY_LOCAL_MACHINE\SOFTWARE\Lavasoft\Ad-Aware\Resource
  ID: showtrayicon, enabled:1, value: true
  ID: language, enabled:1, value: de, reglocation: HKEY_LOCAL_MACHINE\SOFTWARE\Lavasoft\Ad-Aware\Language

Realtime protection settings:
ID: realtime, enabled:1
  ID: processprotection, enabled:1, value: true
  ID: registryprotection, enabled:0, value: true
  ID: networkprotection, enabled:0, value: true
  ID: loadatstartup, enabled:1, value: true
  ID: usespywareheuristics, enabled:0, value: true
  ID: extendedengine, enabled:0, value: true
    ID: useheuristics, enabled:0, value: true
      ID: heuristicslevel, enabled:0, value: strict, domain: medium,mild,strict
  ID: infomessages, enabled:1, value: onlyimportant, domain: display,dontnotify,onlyimportant


****************************** System information ******************************
Computer name: FRANK-PC
Processor name: Intel(R) Core(TM)2 Quad CPU    Q6600  @ 2.40GHz
Processor identifier: Intel64 Family 6 Model 15 Stepping 11
Raw info: processorarchitecture 0, processortype 586, processorlevel 6, processor revision 3851, number of processors 4
Physical memory available: 7029567488 bytes
Physical memory total: 8588247040 bytes
Virtual memory available: 2009571328 bytes
Virtual memory total: 2147352576 bytes
Memory load: 18%
Microsoft Windows Vista Home Premium Edition, 64-bit Service Pack 1 (build 6001)
Windows startup mode:

Running processes:
PID: 480 name: C:\WINDOWS\System32\smss.exe owner: SYSTEM domain: NT-AUTORITÄT
PID: 548 name: C:\WINDOWS\System32\csrss.exe owner: SYSTEM domain: NT-AUTORITÄT
PID: 604 name: C:\WINDOWS\System32\wininit.exe owner: SYSTEM domain: NT-AUTORITÄT
PID: 624 name: C:\WINDOWS\System32\csrss.exe owner: SYSTEM domain: NT-AUTORITÄT
PID: 652 name: C:\WINDOWS\System32\winlogon.exe owner: SYSTEM domain: NT-AUTORITÄT
PID: 704 name: C:\WINDOWS\System32\services.exe owner: SYSTEM domain: NT-AUTORITÄT
PID: 716 name: C:\WINDOWS\System32\lsass.exe owner: SYSTEM domain: NT-AUTORITÄT
PID: 724 name: C:\WINDOWS\System32\lsm.exe owner: SYSTEM domain: NT-AUTORITÄT
PID: 876 name: C:\WINDOWS\System32\svchost.exe owner: SYSTEM domain: NT-AUTORITÄT
PID: 980 name: C:\WINDOWS\System32\svchost.exe owner: NETZWERKDIENST domain: NT-AUTORITÄT
PID: 1016 name: C:\WINDOWS\System32\svchost.exe owner: SYSTEM domain: NT-AUTORITÄT
PID: 508 name: C:\WINDOWS\System32\Ati2evxx.exe owner: SYSTEM domain: NT-AUTORITÄT
PID: 552 name: C:\WINDOWS\System32\svchost.exe owner: LOKALER DIENST domain: NT-AUTORITÄT
PID: 696 name: C:\WINDOWS\System32\svchost.exe owner: SYSTEM domain: NT-AUTORITÄT
PID: 720 name: C:\WINDOWS\System32\svchost.exe owner: SYSTEM domain: NT-AUTORITÄT
PID: 1060 name: C:\WINDOWS\System32\svchost.exe owner: SYSTEM domain: NT-AUTORITÄT
PID: 1076 name: C:\WINDOWS\System32\SLsvc.exe owner: NETZWERKDIENST domain: NT-AUTORITÄT
PID: 1132 name: C:\WINDOWS\System32\svchost.exe owner: LOKALER DIENST domain: NT-AUTORITÄT
PID: 1192 name: C:\WINDOWS\System32\Ati2evxx.exe owner: SYSTEM domain: NT-AUTORITÄT
PID: 1328 name: C:\WINDOWS\System32\svchost.exe owner: NETZWERKDIENST domain: NT-AUTORITÄT
PID: 1464 name: C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe owner: SYSTEM domain: NT-AUTORITÄT
PID: 1696 name: C:\WINDOWS\System32\spoolsv.exe owner: SYSTEM domain: NT-AUTORITÄT
PID: 1744 name: C:\WINDOWS\System32\taskeng.exe owner: Frank domain: Frank-PC
PID: 1796 name: C:\WINDOWS\System32\taskeng.exe owner: SYSTEM domain: NT-AUTORITÄT
PID: 1856 name: C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe owner: SYSTEM domain: NT-AUTORITÄT
PID: 1884 name: C:\WINDOWS\System32\dwm.exe owner: Frank domain: Frank-PC
PID: 1896 name: C:\WINDOWS\System32\svchost.exe owner: LOKALER DIENST domain: NT-AUTORITÄT
PID: 1908 name: C:\WINDOWS\explorer.exe owner: Frank domain: Frank-PC
PID: 1612 name: C:\Program Files\Windows Defender\MSASCui.exe owner: Frank domain: Frank-PC
PID: 2032 name: C:\WINDOWS\RAVCpl64.exe owner: Frank domain: Frank-PC
PID: 1492 name: C:\Program Files\Windows Sidebar\sidebar.exe owner: Frank domain: Frank-PC
PID: 328 name: C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe owner: Frank domain: Frank-PC
PID: 1312 name: C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe owner: SYSTEM domain: NT-AUTORITÄT
PID: 1436 name: C:\WINDOWS\SysWOW64\svchost.exe owner: SYSTEM domain: NT-AUTORITÄT
PID: 2068 name: C:\hp\support\hpsysdrv.exe owner: Frank domain: Frank-PC
PID: 2088 name: C:\Program Files (x86)\Java\jre1.6.0_01\bin\jusched.exe owner: Frank domain: Frank-PC
PID: 2268 name: C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe owner: Frank domain: Frank-PC
PID: 2288 name: C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe owner: Frank domain: Frank-PC
PID: 2328 name: C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exe owner: Frank domain: Frank-PC
PID: 2444 name: C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe owner: SYSTEM domain: NT-AUTORITÄT
PID: 2504 name: C:\WINDOWS\SysWOW64\PnkBstrA.exe owner: SYSTEM domain: NT-AUTORITÄT
PID: 2524 name: C:\WINDOWS\System32\svchost.exe owner: NETZWERKDIENST domain: NT-AUTORITÄT
PID: 2628 name: C:\WINDOWS\System32\svchost.exe owner: LOKALER DIENST domain: NT-AUTORITÄT
PID: 2876 name: C:\WINDOWS\System32\WUDFHost.exe owner: LOKALER DIENST domain: NT-AUTORITÄT
PID: 2244 name: C:\hp\KBD\kbd.exe owner: Frank domain: Frank-PC
PID: 3408 name: C:\WINDOWS\System32\wbem\unsecapp.exe owner: SYSTEM domain: NT-AUTORITÄT
PID: 3676 name: C:\Program Files\Windows Media Player\wmpnscfg.exe owner: Frank domain: Frank-PC
PID: 3684 name: C:\WINDOWS\System32\wbem\WmiPrvSE.exe owner: SYSTEM domain: NT-AUTORITÄT
PID: 3784 name: C:\WINDOWS\System32\SearchIndexer.exe owner: SYSTEM domain: NT-AUTORITÄT
PID: 3440 name: C:\Program Files (x86)\Mozilla Firefox\firefox.exe owner: Frank domain: Frank-PC
PID: 2648 name: C:\Program Files (x86)\Hewlett-Packard\HP Health Check\HPHC_Service.exe owner: SYSTEM domain: NT-AUTORITÄT
PID: 3704 name: C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe owner: Frank domain: Frank-PC
PID: 2776 name: C:\Program Files (x86)\Lavasoft\Ad-Aware\Ad-Aware.exe owner: Frank domain: Frank-PC
PID: 4012 name: C:\WINDOWS\System32\wbem\WmiPrvSE.exe owner: NETZWERKDIENST domain: NT-AUTORITÄT

Startup items:
Name: {8C7461EF-2B13-11d2-BE35-3078302C2030}
          imagepath: Component Categories cache daemon
Name: WebCheck
          imagepath: {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
Name: hpsysdrv
          imagepath: c:\hp\support\hpsysdrv.exe
Name: KBD
          imagepath: C:\HP\KBD\KbdStub.EXE
Name: SunJavaUpdateSched
          imagepath: "C:\Program Files (x86)\Java\jre1.6.0_01\bin\jusched.exe"
Name: StartCCC
          imagepath: "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
Name: Adobe Reader Speed Launcher
          imagepath: "C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe"
Name: HP Software Update
          imagepath: c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
Name: avgnt
          imagepath: "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
Name: Ad-Watch
          imagepath: "C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exe"
Name: 
          imagepath: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
Name: 
          imagepath: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini

Bootexecute items:
Name: 
          imagepath: autocheck autochk *

Running services:
Name: AeLookupSvc
          displayname: Anwendungserfahrung
Name: AntiVirSchedulerService
          displayname: Avira AntiVir Planer
Name: AntiVirService
          displayname: Avira AntiVir Guard
Name: Ati External Event Utility
          displayname: Ati External Event Utility
Name: AudioEndpointBuilder
          displayname: Windows-Audio-Endpunkterstellung
Name: AudioSrv
          displayname: Windows-Audio
Name: BFE
          displayname: Basisfiltermodul
Name: BITS
          displayname: Intelligenter Hintergrundübertragungsdienst
Name: CryptSvc
          displayname: Kryptografiedienste
Name: DcomLaunch
          displayname: DCOM-Server-Prozessstart
Name: Dhcp
          displayname: DHCP-Client
Name: Dnscache
          displayname: DNS-Client
Name: DPS
          displayname: Diagnoserichtliniendienst
Name: EMDMgmt
          displayname: ReadyBoost
Name: Eventlog
          displayname: Windows-Ereignisprotokoll
Name: EventSystem
          displayname: COM+-Ereignissystem
Name: ezSharedSvc
          displayname: Easybits Shared Services for Windows
Name: fdPHost
          displayname: Funktionssuchanbieter-Host
Name: FDResPub
          displayname: Funktionssuche-Ressourcenveröffentlichung
Name: gpsvc
          displayname: Gruppenrichtlinienclient
Name: hidserv
          displayname: Zugriff auf Eingabegeräte
Name: HP Health Check Service
          displayname: HP Health Check Service
Name: IKEEXT
          displayname: IKE- und AuthIP IPsec-Schlüsselerstellungsmodule
Name: iphlpsvc
          displayname: IP-Hilfsdienst
Name: KtmRm
          displayname: KtmRm für Distributed Transaction Coordinator
Name: LanmanServer
          displayname: Server
Name: LanmanWorkstation
          displayname: Arbeitsstationsdienst
Name: Lavasoft Ad-Aware Service
          displayname: Lavasoft Ad-Aware Service
Name: LightScribeService
          displayname: LightScribeService Direct Disc Labeling Service
Name: lmhosts
          displayname: TCP/IP-NetBIOS-Hilfsdienst
Name: MMCSS
          displayname: Multimediaklassenplaner
Name: MpsSvc
          displayname: Windows-Firewall
Name: Netman
          displayname: Netzwerkverbindungen
Name: netprofm
          displayname: Netzwerklistendienst
Name: NlaSvc
          displayname: NLA (Network Location Awareness)
Name: nsi
          displayname: Netzwerkspeicher-Schnittstellendienst
Name: PcaSvc
          displayname: Programmkompatibilitäts-Assistent-Dienst
Name: PlugPlay
          displayname: Plug & Play
Name: PnkBstrA
          displayname: PnkBstrA
Name: PolicyAgent
          displayname: IPsec-Richtlinien-Agent
Name: ProfSvc
          displayname: Benutzerprofildienst
Name: RasMan
          displayname: RAS-Verbindungsverwaltung
Name: RpcSs
          displayname: Remoteprozeduraufruf (RPC)
Name: SamSs
          displayname: Sicherheitskonto-Manager
Name: Schedule
          displayname: Aufgabenplanung
Name: seclogon
          displayname: Sekundäre Anmeldung
Name: SENS
          displayname: Benachrichtigungsdienst für Systemereignisse
Name: ShellHWDetection
          displayname: Shellhardwareerkennung
Name: slsvc
          displayname: Softwarelizenzierung
Name: Spooler
          displayname: Druckwarteschlange
Name: SSDPSRV
          displayname: SSDP-Suche
Name: SstpSvc
          displayname: SSTP-Dienst
Name: stisvc
          displayname: Windows-Bilderfassung
Name: SysMain
          displayname: Superfetch
Name: TabletInputService
          displayname: Tablet PC-Eingabedienst
Name: TapiSrv
          displayname: Telefonie
Name: TermService
          displayname: Terminaldienste
Name: Themes
          displayname: Designs
Name: TrkWks
          displayname: Überwachung verteilter Verknüpfungen (Client)
Name: upnphost
          displayname: UPnP-Gerätehost
Name: UxSms
          displayname: Sitzungs-Manager für Desktopfenster-Manager
Name: W32Time
          displayname: Windows-Zeitgeber
Name: WdiSystemHost
          displayname: Diagnosesystemhost
Name: WebClient
          displayname: WebClient
Name: WinDefend
          displayname: Windows-Defender
Name: WinHttpAutoProxySvc
          displayname: WinHTTP-Web Proxy Auto-Discovery-Dienst
Name: Winmgmt
          displayname: Windows-Verwaltungsinstrumentation
Name: WPDBusEnum
          displayname: Enumeratordienst für tragbare Geräte
Name: wscsvc
          displayname: Sicherheitscenter
Name: WSearch
          displayname: Windows Search
Name: wuauserv
          displayname: Windows Update
Name: wudfsvc
          displayname: Windows Driver Foundation - Benutzermodus-Treiberframework

myrtille · 22.03.2009, 22:03

Hi,

was ist mit DrWeb geht das auch nicht?

lg myrtille

28.02.2009, 17:18	#2
Jig Saw /// Helfer-Team	Vista 64bit immer langsamer findest du dein Thread nicht mehr? http://www.trojaner-board.de/70064-t...messenger.html __________________ __________________

28.02.2009, 18:26	#4
Jig Saw /// Helfer-Team	Vista 64bit immer langsamer achso ok aber arbeite mal das ab, dann wird sich jemand anderes danach um dich kümmern http://www.trojaner-board.de/69886-a...-beachten.html __________________ A fool with a tool is still a fool

28.02.2009, 19:18	#7
Jig Saw /// Helfer-Team	Vista 64bit immer langsamer oh man Vista 64 bit __________________ A fool with a tool is still a fool

22.03.2009, 22:03	#15
myrtille /// TB-Ausbilder	Vista 64bit immer langsamer Hi, was ist mit DrWeb geht das auch nicht? lg myrtille __________________ Anfragen per Email, Profil- oder privater Nachricht werden ignoriert! Hilfe gibts NUR im Forum! Wer nach 24 Stunden keine weitere Antwort von mir bekommen hat, schickt bitte eine PM Spelling mistakes? Never, but keybaord malfunctions constantly!

Vista 64bit immer langsamer

Log-Analyse und Auswertung: Vista 64bit immer langsamer