| |
| |||||||
Log-Analyse und Auswertung: Laptop langsam und stockt ...Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
 |
17.01.2011, 19:41
| #16 | |
| /// Winkelfunktion /// TB-Süch-Tiger™   |  Laptop langsam und stockt ...Zitat:
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
17.01.2011, 19:47
| #17 |
 | Laptop langsam und stockt ... Ich konnte beim runterladen nichts angeben. Hab ichs halt runter geladen und dann auf den Desktop gezogen.
__________________War das jetzt falsch??? was muss ich jetzt machen?? Nochmal von vorne?? |
|
17.01.2011, 20:00
| #18 | |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Laptop langsam und stockt ... Deswegen gibt es den Rechtsklick => Ziel speichern unter, aber nun gut
__________________ Zitat:
Wenn die Datei schon ausgewertet sein sollte, bitte eine weitere Auswertung starten.
__________________ |
|
17.01.2011, 20:19
| #19 |
| | Laptop langsam und stockt ... Was soll ich jetzt Posten? Einfach die Adresszeile? hxxp://www.virustotal.com/file-scan/report.html?id=788b438c823baca7f90e1851406c98cc548016653c835420e2bc48ac064d0f7d-1295291471# |
|
17.01.2011, 20:51
| #20 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Laptop langsam und stockt ... Ok. Bitte nun Logs mit GMER und OSAM erstellen und posten. GMER stürzt häufiger ab, wenn das Tool auch beim 2. Mal nicht will, lass es einfach weg und führ nur OSAM aus - die Online-Abfrage durch OSAM bitte überspringen. Bei OSAM bitte darauf auch achten, dass Du das Log auch als *.log und nicht *.html oder so abspeicherst. Downloade Dir danach bitte MBRCheck (by a_d_13) und speichere die Datei auf dem Desktop.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
17.01.2011, 21:29
| #21 |
| | Laptop langsam und stockt ... GMER: Code:
ATTFilter GMER 1.0.15.15530 - hxxp://www.gmer.net
Rootkit scan 2011-01-17 21:24:52
Windows 6.1.7600 Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 WDC_WD50 rev.01.0
Running: r2v93gqt.exe; Driver: C:\Users\Nina\AppData\Local\Temp\pwldqpow.sys
---- Kernel code sections - GMER 1.0.15 ----
.text ntkrnlpa.exe!ZwSaveKeyEx + 13AD 82E82599 1 Byte [06]
.text ntkrnlpa.exe!KiDispatchInterrupt + 5A2 82EA6F52 19 Bytes [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}
PAGE peauth.sys B5C31B9B 72 Bytes JMP 58B47621
? C:\Users\Nina\AppData\Local\Temp\catchme.sys Das System kann die angegebene Datei nicht finden. !
? C:\Windows\system32\Drivers\PROCEXP113.SYS Das System kann die angegebene Datei nicht finden. !
---- Devices - GMER 1.0.15 ----
AttachedDevice \Driver\kbdclass \Device\KeyboardClass0 Wdf01000.sys (Kernelmodustreiber-Frameworklaufzeit/Microsoft Corporation)
AttachedDevice \Driver\kbdclass \Device\KeyboardClass1 Wdf01000.sys (Kernelmodustreiber-Frameworklaufzeit/Microsoft Corporation)
Device \Driver\ACPI_HAL \Device\00000046 halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume1 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume1 rdyboost.sys (ReadyBoost Driver/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume2 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume2 rdyboost.sys (ReadyBoost Driver/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume3 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume3 rdyboost.sys (ReadyBoost Driver/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume4 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume4 rdyboost.sys (ReadyBoost Driver/Microsoft Corporation)
AttachedDevice \FileSystem\fastfat \Fat fltmgr.sys (Microsoft Dateisystem-Filter-Manager/Microsoft Corporation)
---- Disk sectors - GMER 1.0.15 ----
Disk \Device\Harddisk0\DR0 sector 01: copy of MBR
Disk \Device\Harddisk0\DR0 sector 02: copy of MBR
Disk \Device\Harddisk0\DR0 sector 03: copy of MBR
Disk \Device\Harddisk0\DR0 sector 04: copy of MBR
Disk \Device\Harddisk0\DR0 sector 05: copy of MBR
Disk \Device\Harddisk0\DR0 sector 06: copy of MBR
Disk \Device\Harddisk0\DR0 sector 07: copy of MBR
Disk \Device\Harddisk0\DR0 sector 08: copy of MBR
Disk \Device\Harddisk0\DR0 sector 09: copy of MBR
Disk \Device\Harddisk0\DR0 sector 10: copy of MBR
Disk \Device\Harddisk0\DR0 sector 11: copy of MBR
Disk \Device\Harddisk0\DR0 sector 12: copy of MBR
Disk \Device\Harddisk0\DR0 sector 13: copy of MBR
Disk \Device\Harddisk0\DR0 sector 14: copy of MBR
Disk \Device\Harddisk0\DR0 sector 15: copy of MBR
Disk \Device\Harddisk0\DR0 sector 16: copy of MBR
Disk \Device\Harddisk0\DR0 sector 17: copy of MBR
Disk \Device\Harddisk0\DR0 sector 18: copy of MBR
Disk \Device\Harddisk0\DR0 sector 19: copy of MBR
Disk \Device\Harddisk0\DR0 sector 20: copy of MBR
Disk \Device\Harddisk0\DR0 sector 21: copy of MBR
Disk \Device\Harddisk0\DR0 sector 22: copy of MBR
Disk \Device\Harddisk0\DR0 sector 23: copy of MBR
Disk \Device\Harddisk0\DR0 sector 24: copy of MBR
Disk \Device\Harddisk0\DR0 sector 25: copy of MBR
Disk \Device\Harddisk0\DR0 sector 26: copy of MBR
Disk \Device\Harddisk0\DR0 sector 27: copy of MBR
Disk \Device\Harddisk0\DR0 sector 28: copy of MBR
Disk \Device\Harddisk0\DR0 sector 29: copy of MBR
Disk \Device\Harddisk0\DR0 sector 30: copy of MBR
Disk \Device\Harddisk0\DR0 sector 31: copy of MBR
Disk \Device\Harddisk0\DR0 sector 32: copy of MBR
Disk \Device\Harddisk0\DR0 sector 33: copy of MBR
Disk \Device\Harddisk0\DR0 sector 34: copy of MBR
Disk \Device\Harddisk0\DR0 sector 35: copy of MBR
Disk \Device\Harddisk0\DR0 sector 36: copy of MBR
Disk \Device\Harddisk0\DR0 sector 37: copy of MBR
Disk \Device\Harddisk0\DR0 sector 38: copy of MBR
Disk \Device\Harddisk0\DR0 sector 39: copy of MBR
Disk \Device\Harddisk0\DR0 sector 40: copy of MBR
Disk \Device\Harddisk0\DR0 sector 41: copy of MBR
Disk \Device\Harddisk0\DR0 sector 42: copy of MBR
Disk \Device\Harddisk0\DR0 sector 43: copy of MBR
Disk \Device\Harddisk0\DR0 sector 44: copy of MBR
Disk \Device\Harddisk0\DR0 sector 45: copy of MBR
Disk \Device\Harddisk0\DR0 sector 46: copy of MBR
Disk \Device\Harddisk0\DR0 sector 47: copy of MBR
Disk \Device\Harddisk0\DR0 sector 48: copy of MBR
Disk \Device\Harddisk0\DR0 sector 49: copy of MBR
Disk \Device\Harddisk0\DR0 sector 50: copy of MBR
Disk \Device\Harddisk0\DR0 sector 51: copy of MBR
Disk \Device\Harddisk0\DR0 sector 52: copy of MBR
Disk \Device\Harddisk0\DR0 sector 53: copy of MBR
Disk \Device\Harddisk0\DR0 sector 54: copy of MBR
Disk \Device\Harddisk0\DR0 sector 55: copy of MBR
Disk \Device\Harddisk0\DR0 sector 56: copy of MBR
Disk \Device\Harddisk0\DR0 sector 57: copy of MBR
Disk \Device\Harddisk0\DR0 sector 58: copy of MBR
Disk \Device\Harddisk0\DR0 sector 59: copy of MBR
Disk \Device\Harddisk0\DR0 sector 60: copy of MBR
Disk \Device\Harddisk0\DR0 sector 61: copy of MBR
Disk \Device\Harddisk0\DR0 sector 62: rootkit-like behavior; copy of MBR
Disk \Device\Harddisk0\DR0 sector 63: copy of MBR
---- EOF - GMER 1.0.15 ----
|
|
17.01.2011, 21:48
| #23 |
| | Laptop langsam und stockt ... Habs doch hin bekommen Osam Code:
ATTFilter Report of OSAM: Autorun Manager v5.0.11926.0 hxxp://www.online-solutions.ru/en/ Saved at 21:47:00 on 17.01.2011 OS: Windows 7 Home Premium Edition (Build 7600), 32-bit Default Browser: Mozilla Corporation Firefox 4.0b9 Scanner Settings [x] Rootkits detection (hidden registry) [x] Rootkits detection (hidden files) [x] Retrieve files information [x] Check Microsoft signatures Filters [ ] Trusted entries [ ] Empty entries [x] Hidden registry entries (rootkit activity) [x] Exclusively opened files [x] Not found files [x] Files without detailed information [x] Existing files [ ] Non-startable services [ ] Non-startable drivers [x] Active entries [x] Disabled entries [Common] -----( %SystemRoot%\Tasks )----- "GoogleUpdateTaskMachineCore.job" - "Google Inc." - C:\Program Files\Google\Update\GoogleUpdate.exe "GoogleUpdateTaskMachineUA.job" - "Google Inc." - C:\Program Files\Google\Update\GoogleUpdate.exe [Control Panel Objects] -----( %SystemRoot%\system32 )----- "DivXControlPanelApplet.cpl" - "DivX, Inc." - C:\Windows\system32\DivXControlPanelApplet.cpl "ISUSPM.cpl" - "Macrovision Corporation" - C:\Windows\system32\ISUSPM.cpl "nvcpl.cpl" - "NVIDIA Corporation" - C:\Windows\system32\nvcpl.cpl -----( HKLM\Software\Microsoft\Windows\CurrentVersion\Control Panel\Cpls )----- "mlcfg32.cpl" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\MLCFG32.CPL [Drivers] -----( HKLM\SYSTEM\CurrentControlSet\Services )----- "avgio" (avgio) - "Avira GmbH" - C:\Program Files\Avira\AntiVir Desktop\avgio.sys "avgntflt" (avgntflt) - "Avira GmbH" - C:\Windows\System32\DRIVERS\avgntflt.sys "avipbb" (avipbb) - "Avira GmbH" - C:\Windows\System32\DRIVERS\avipbb.sys "catchme" (catchme) - ? - C:\Users\Nina\AppData\Local\Temp\catchme.sys (File not found) "mbr" (mbr) - ? - C:\ComboFix\mbr.sys (Hidden registry entry, rootkit activity | File not found) "pwldqpow" (pwldqpow) - ? - C:\Users\Nina\AppData\Local\Temp\pwldqpow.sys (Hidden registry entry, rootkit activity | File not found) "Realtek IR Driver" (RtsUIR) - ? - C:\Windows\System32\DRIVERS\Rts516xIR.sys (File not found) "Realtek Smartcard Reader Driver" (USBCCID) - ? - C:\Windows\System32\DRIVERS\RtsUCcid.sys (File not found) "ssmdrv" (ssmdrv) - "Avira GmbH" - C:\Windows\System32\DRIVERS\ssmdrv.sys "Synaptics TouchPad Driver" (SynTP) - "Synaptics Incorporated" - C:\Windows\System32\DRIVERS\SynTP.sys [Explorer] -----( HKLM\Software\Classes\Folder\shellex\ColumnHandlers )----- {F9DB5320-233E-11D1-9F84-707F02C10627} "PDF Shell Extension" - "Adobe Systems, Inc." - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll {C52AF81D-F7A0-4AAB-8E87-F80A60CCD396} "{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}" - ? - C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll -----( HKLM\Software\Classes\Protocols\Filter )----- {807563E5-5146-11D5-A672-00B0D022E945} "Microsoft Office InfoPath XML Mime Filter" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL -----( HKLM\Software\Classes\Protocols\Handler )----- {314111c7-a502-11d2-bbca-00c04f8ec294} "HxProtocol Class" - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} "IEProtocolHandler Class" - "Skype Technologies" - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL {88FED34C-F0CA-4636-A375-3CB6248B04CD} "Local Groove Web Services Protocol" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\GRA32A~1.DLL {0A9007C0-4076-11D3-8789-0000F8105754} "Microsoft Infotech Storage Protocol for IE 4.0" - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll {03C514A3-1EFB-4856-9F99-10D7BE1653C0} "Windows Live Mail HTML Asynchronous Pluggable Protocol Handler" - "Microsoft Corporation" - C:\Program Files\Windows Live\Mail\mailcomm.dll -----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks )----- {B5A7F190-DDA6-4420-B3BA-52453494E6CD} "Groove GFS Stub Execution Hook" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\GR469A~1.DLL {AEB6717E-7E19-11d0-97EE-00C04FD91972} "{AEB6717E-7E19-11d0-97EE-00C04FD91972}" - ? - (File not found | COM-object registry key not found) -----( HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved )----- {0563DB41-F538-4B37-A92D-4659049B7766} "CLSID_WLMCMimeFilter" - "Microsoft Corporation" - C:\Program Files\Windows Live\Mail\mailcomm.dll "CorelDRAW Shell Extension Component" - ? - (File not found | COM-object registry key not found) {A70C977A-BF00-412C-90B7-034C51DA2439} "DesktopContext Class" - "NVIDIA Corporation" - C:\Windows\system32\nvcpl.dll {D8D1CE8C-B1EB-4E95-B63B-1531BA60E992} "DivX Property Handler" - "DivX, Inc." - C:\Program Files\DivX\DivX Plus Media Foundation Components\DivXPropertyHandler.dll {83238FAE-D346-4E12-8734-D42F7554B3E6} "DivX Thumbnail Provider" - "DivX, Inc." - C:\Program Files\DivX\DivX Plus Media Foundation Components\DivXThumbnailProvider.dll {99FD978C-D287-4F50-827F-B2C658EDA8E7} "Groove Explorer Icon Overlay 1 (GFS Unread Stub)" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\GR469A~1.DLL {AB5C5600-7E6E-4B06-9197-9ECEF74D31CC} "Groove Explorer Icon Overlay 2 (GFS Stub)" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\GR469A~1.DLL {920E6DB1-9907-4370-B3A0-BAFC03D81399} "Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\GR469A~1.DLL {16F3DD56-1AF5-4347-846D-7C10C4192619} "Groove Explorer Icon Overlay 3 (GFS Folder)" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\GR469A~1.DLL {2916C86E-86A6-43FE-8112-43ABE6BF8DCC} "Groove Explorer Icon Overlay 4 (GFS Unread Mark)" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\GR469A~1.DLL {2A541AE1-5BF6-4665-A8A3-CFA9672E4291} "Groove Folder Synchronization" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\GR469A~1.DLL {72853161-30C5-4D22-B7F9-0BBC1D38A37E} "Groove GFS Browser Helper" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\GR469A~1.DLL {6C467336-8281-4E60-8204-430CED96822D} "Groove GFS Context Menu Handler" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\GR469A~1.DLL {B5A7F190-DDA6-4420-B3BA-52453494E6CD} "Groove GFS Stub Execution Hook" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\GR469A~1.DLL {A449600E-1DC6-4232-B948-9BD794D62056} "Groove GFS Stub Icon Handler" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\GR469A~1.DLL {387E725D-DC16-4D76-B310-2C93ED4752A0} "Groove XML Icon Handler" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\GR469A~1.DLL {42042206-2D85-11D3-8CFF-005004838597} "Microsoft Office HTML Icon Handler" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\msohevi.dll {993BE281-6695-4BA5-8A2A-7AACBFAAB69E} "Microsoft Office Metadata Handler" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\msoshext.dll {5858A72C-C2B4-4dd7-B2BF-B76DB1BD9F6C} "Microsoft Office OneNote Namespace Extension for Windows Desktop Search" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\ONFILTER.DLL {00020D75-0000-0000-C000-000000000046} "Microsoft Office Outlook" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\MLSHEXT.DLL {C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97} "Microsoft Office Thumbnail Handler" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\msoshext.dll {A929C4CE-FD36-4270-B4F5-34ECAC5BD63C} "NvAppShExt Class" - "NVIDIA Corporation" - C:\Windows\system32\Nv3DAppShExt.dll {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} "NVIDIA CPL Context Menu Extension" - "NVIDIA Corporation" - C:\Windows\system32\nvshext.dll {FFB699E0-306A-11d3-8BD1-00104B6F7516} "NVIDIA CPL Extension" - "NVIDIA Corporation" - C:\Windows\system32\nvcpl.dll {C52AF81D-F7A0-4AAB-8E87-F80A60CCD396} "OpenOffice.org Column Handler" - ? - C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll {087B3AE3-E237-4467-B8DB-5A38AB959AC9} "OpenOffice.org Infotip Handler" - ? - C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll {63542C48-9552-494A-84F7-73AA6A7C99C1} "OpenOffice.org Property Sheet Handler" - ? - C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll {3B092F0C-7696-40E3-A80F-68D74DA84210} "OpenOffice.org Thumbnail Viewer" - ? - C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll {0006F045-0000-0000-C000-000000000046} "Outlook File Icon Extension" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\OLKFSTUB.DLL {45AC2688-0253-4ED8-97DE-B5370FA7D48A} "Shell Extension for Malware scanning" - "Avira GmbH" - C:\Program Files\Avira\AntiVir Desktop\shlext.dll {2F603045-309F-11CF-9774-0020AFD0CFF6} "Synaptics Control Panel" - "Synaptics Incorporated" - C:\Program Files\Synaptics\SynTP\SynTPCpl.dll {2BE99FD4-A181-4996-BFA9-58C5FFD11F6C} "Windows Live Photo Gallery Autoplay Drop Target" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\WLXPhotoGallery.exe {00F30F64-AC33-42F5-8FD1-5DC2D3FDE06C} "Windows Live Photo Gallery Editor Drop Target" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\WLXPhotoGallery.exe {00F3712A-CA79-45B4-9E4D-D7891E7F8B9D} "Windows Live Photo Gallery Editor Shim" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll {00F30F90-3E96-453B-AFCD-D71989ECC2C7} "Windows Live Photo Gallery Viewer Autoplay Shim" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll {00F33137-EE26-412F-8D71-F84E4C2C6625} "Windows Live Photo Gallery Viewer Autoplay Shim" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll {00F374B7-B390-4884-B372-2FC349F2172B} "Windows Live Photo Gallery Viewer Drop Target" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\WLXPhotoGallery.exe {00F346CB-35A4-465B-8B8F-65A29DBAB1F6} "Windows Live Photo Gallery Viewer Shim" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA} "WinRAR" - "Alexander Roshal" - C:\Program Files\WinRAR\rarext.dll {06A2568A-CED6-4187-BB20-400B8C02BE5A} "{06A2568A-CED6-4187-BB20-400B8C02BE5A}" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\WLXPhotoAcquireWizard.exe [Internet Explorer] -----( HKCU\SOFTWARE\Microsoft\Internet Explorer\Extensions )----- "eBay - Der weltweite Online-Marktplatz" - ? - hxxp://rover.ebay.com/rover/1/707-37276-17534-31/4 (HTTP value) -----( HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser )----- <binary data> "&Windows Live Toolbar" - "Microsoft Corporation" - C:\Program Files\Windows Live\Toolbar\wltcore.dll ITBar7Height "ITBar7Height" - ? - (File not found | COM-object registry key not found) <binary data> "ITBar7Layout" - ? - (File not found | COM-object registry key not found) -----( HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units )----- 55963676-2F5E-4BAF-AC28-CF26AA587566 "55963676-2F5E-4BAF-AC28-CF26AA587566" - ? - (File not found | COM-object registry key not found) / vpnweb.cab {8AD9C840-044E-11D1-B3E9-00805F499D93} "Java Plug-in 1.6.0_23" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} "Java Plug-in 1.6.0_23" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} "Java Plug-in 1.6.0_23" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\npjpi160_23.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab -----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions )----- {48E73304-E1D6-4330-914C-F5F514E3486C} "An OneNote senden" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll "eBay - Der weltweite Online-Marktplatz" - ? - hxxp://rover.ebay.com/rover/1/707-37276-17534-31/4 (HTTP value) {5F7B1267-94A9-47F5-98DB-E99415F33AEC} "In Blog veröffentlichen" - "Microsoft Corporation" - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll {FF059E31-CC5A-4E2E-BF3B-96E929D65503} "Research" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL -----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar )----- <binary data> "&Windows Live Toolbar" - "Microsoft Corporation" - C:\Program Files\Windows Live\Toolbar\wltcore.dll <binary data> "Trillian Toolbar" - "Ask" - C:\Program Files\Ask.com\GenericAskToolbar.dll -----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects )----- {18DF081C-E8AD-4283-A596-FA578C2EBDC3} "Adobe PDF Link Helper" - "Adobe Systems Incorporated" - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll {72853161-30C5-4D22-B7F9-0BBC1D38A37E} "Groove GFS Browser Helper" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\GR469A~1.DLL {DBC80044-A445-435b-BC74-9C25C1C588A9} "Java(tm) Plug-In 2 SSV Helper" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\jp2ssv.dll {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} "Search Helper" - "Microsoft Corporation" - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll {D4027C7F-154A-4066-A1AD-4243D8127440} "Trillian Toolbar" - "Ask" - C:\Program Files\Ask.com\GenericAskToolbar.dll {9030D464-4C02-4ABF-8ECC-5164760863C6} "Windows Live Anmelde-Hilfsprogramm" - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} "Windows Live Toolbar Helper" - "Microsoft Corporation" - C:\Program Files\Windows Live\Toolbar\wltcore.dll [Logon] -----( %APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup )----- "OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Shortcut exists | File exists) "desktop.ini" - ? - C:\Users\Nina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini -----( %AllUsersProfile%\Microsoft\Windows\Start Menu\Programs\Startup )----- "desktop.ini" - ? - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini -----( HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds\rdpwd )----- "StartupPrograms" - ? - rdpclip (File not found) [Print Monitors] -----( HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors )----- "Send To Microsoft OneNote Monitor" - "Microsoft Corporation" - C:\Windows\system32\msonpmon.dll [Services] -----( HKLM\SYSTEM\CurrentControlSet\Services )----- "Avira AntiVir Guard" (AntiVirService) - "Avira GmbH" - C:\Program Files\Avira\AntiVir Desktop\avguard.exe "Avira AntiVir Planer" (AntiVirSchedulerService) - "Avira GmbH" - C:\Program Files\Avira\AntiVir Desktop\sched.exe "Cisco AnyConnect VPN Agent" (vpnagent) - "Cisco Systems, Inc." - C:\Program Files\Cisco\Cisco AnyConnect VPN Client\vpnagent.exe "Cyberlink RichVideo Service(CRVS)" (RichVideo) - ? - C:\Program Files\CyberLink\Shared Files\RichVideo.exe "FABS - Helping agent for MAGIX media database" (Fabs) - "MAGIX AG" - C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe "Firebird Server - MAGIX Instance" (FirebirdServerMAGIXInstance) - "MAGIX®" - C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe "Google Update Service (gupdate)" (gupdate) - "Google Inc." - C:\Program Files\Google\Update\GoogleUpdate.exe "Google Updater Service" (gusvc) - "Google" - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe "Intel(R) Management & Security Application User Notification Service" (UNS) - "Intel Corporation" - C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe "Intel(R) Management and Security Application Local Management Service" (LMS) - "Intel Corporation" - C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe "Intel(R) Rapid Storage Technology" (IAStorDataMgrSvc) - "Intel Corporation" - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe "Ixia Endpoint" (IxiaEndpoint) - "Ixia" - C:\PROGRA~1\Ixia\Endpoint\endpoint.exe "Microsoft .NET Framework NGEN v4.0.30319_X86" (clr_optimization_v4.0.30319_32) - "Microsoft Corporation" - C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe "Microsoft Office Diagnostics Service" (odserv) - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE "Microsoft Office Groove Audit Service" (Microsoft Office Groove Audit Service) - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe "NVIDIA Display Driver Service" (nvsvc) - "NVIDIA Corporation" - C:\Windows\system32\nvvsvc.exe "Office Source Engine" (ose) - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE "ProtexisLicensing" (ProtexisLicensing) - ? - C:\Windows\system32\PSIService.exe "SeaPort" (SeaPort) - "Microsoft Corporation" - C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe "WisLMSvc" (WisLMSvc) - "Wistron Corp." - C:\Program Files\Launch Manager\WisLMSvc.exe ===[ Logfile end ]=========================================[ Logfile end ]=== If You have questions or want to get some help, You can visit hxxp://forum.online-solutions.ru |
|
17.01.2011, 21:52
| #24 |
| | Laptop langsam und stockt ... MBRCheck Code:
ATTFilter MBRCheck, version 1.2.3
(c) 2010, AD
Command-line:
Windows Version: Windows 7 Home Premium Edition
Windows Information: (build 7600), 32-bit
Base Board Manufacturer: MEDION
BIOS Manufacturer: American Megatrends Inc.
System Manufacturer: MEDION
System Product Name: P6622
Logical Drives Mask: 0x0000001c
Kernel Drivers (total 184):
0x82E3F000 \SystemRoot\system32\ntkrnlpa.exe
0x82E08000 \SystemRoot\system32\halmacpi.dll
0x80BA4000 \SystemRoot\system32\kdcom.dll
0x8B806000 \SystemRoot\system32\mcupdate_GenuineIntel.dll
0x8B87E000 \SystemRoot\system32\PSHED.dll
0x8B88F000 \SystemRoot\system32\BOOTVID.dll
0x8B897000 \SystemRoot\system32\CLFS.SYS
0x8B8D9000 \SystemRoot\system32\CI.dll
0x8B984000 \SystemRoot\system32\drivers\Wdf01000.sys
0x8BA2A000 \SystemRoot\system32\drivers\WDFLDR.SYS
0x8BA38000 \SystemRoot\system32\DRIVERS\ACPI.sys
0x8BA80000 \SystemRoot\system32\DRIVERS\WMILIB.SYS
0x8BA89000 \SystemRoot\system32\DRIVERS\msisadrv.sys
0x8BA91000 \SystemRoot\system32\DRIVERS\pci.sys
0x8BABB000 \SystemRoot\system32\DRIVERS\vdrvroot.sys
0x8BAC6000 \SystemRoot\System32\drivers\partmgr.sys
0x8BAD7000 \SystemRoot\system32\DRIVERS\compbatt.sys
0x8BADF000 \SystemRoot\system32\DRIVERS\BATTC.SYS
0x8BAEA000 \SystemRoot\system32\DRIVERS\volmgr.sys
0x8BAFA000 \SystemRoot\System32\drivers\volmgrx.sys
0x8BB45000 \SystemRoot\System32\drivers\mountmgr.sys
0x8BC30000 \SystemRoot\system32\DRIVERS\iaStor.sys
0x8BDE3000 \SystemRoot\system32\DRIVERS\amdxata.sys
0x8BB5B000 \SystemRoot\system32\drivers\fltmgr.sys
0x8BDEC000 \SystemRoot\system32\drivers\fileinfo.sys
0x8BE0A000 \SystemRoot\System32\Drivers\Ntfs.sys
0x8BF39000 \SystemRoot\System32\Drivers\msrpc.sys
0x8BF64000 \SystemRoot\System32\Drivers\ksecdd.sys
0x8BF77000 \SystemRoot\System32\Drivers\cng.sys
0x8BFD4000 \SystemRoot\System32\drivers\pcw.sys
0x8BFE2000 \SystemRoot\System32\Drivers\Fs_Rec.sys
0x8C00E000 \SystemRoot\system32\drivers\ndis.sys
0x8C0C5000 \SystemRoot\system32\drivers\NETIO.SYS
0x8C103000 \SystemRoot\System32\Drivers\ksecpkg.sys
0x8C208000 \SystemRoot\System32\drivers\tcpip.sys
0x8C351000 \SystemRoot\System32\drivers\fwpkclnt.sys
0x8C382000 \SystemRoot\system32\DRIVERS\volsnap.sys
0x8C3C1000 \SystemRoot\System32\Drivers\spldr.sys
0x8C3C9000 \SystemRoot\System32\drivers\rdyboost.sys
0x8C128000 \SystemRoot\System32\Drivers\mup.sys
0x8C3F6000 \SystemRoot\System32\drivers\hwpolicy.sys
0x8C138000 \SystemRoot\System32\DRIVERS\fvevol.sys
0x8C16A000 \SystemRoot\system32\DRIVERS\disk.sys
0x8C17B000 \SystemRoot\system32\DRIVERS\CLASSPNP.SYS
0x90FD8000 \SystemRoot\system32\DRIVERS\cdrom.sys
0x90FF7000 \SystemRoot\System32\Drivers\Null.SYS
0x90E00000 \SystemRoot\System32\Drivers\Beep.SYS
0x90E07000 \SystemRoot\System32\drivers\vga.sys
0x8C1AD000 \SystemRoot\System32\drivers\VIDEOPRT.SYS
0x8C1CE000 \SystemRoot\System32\drivers\watchdog.sys
0x8C200000 \SystemRoot\System32\DRIVERS\RDPCDD.sys
0x8C1DB000 \SystemRoot\system32\drivers\rdpencdd.sys
0x8C1E3000 \SystemRoot\system32\drivers\rdprefmp.sys
0x8C1EB000 \SystemRoot\System32\Drivers\Msfs.SYS
0x8C000000 \SystemRoot\System32\Drivers\Npfs.SYS
0x8BC00000 \SystemRoot\system32\DRIVERS\tdx.sys
0x8BFEB000 \SystemRoot\system32\DRIVERS\TDI.SYS
0x8BB8F000 \SystemRoot\system32\drivers\afd.sys
0x91402000 \SystemRoot\System32\DRIVERS\netbt.sys
0x91434000 \SystemRoot\system32\DRIVERS\wfplwf.sys
0x9143B000 \SystemRoot\system32\DRIVERS\pacer.sys
0x9145A000 \SystemRoot\system32\DRIVERS\vwififlt.sys
0x9146B000 \SystemRoot\system32\DRIVERS\netbios.sys
0x91479000 \SystemRoot\system32\DRIVERS\wanarp.sys
0x9148C000 \SystemRoot\system32\DRIVERS\termdd.sys
0x9149C000 \SystemRoot\system32\DRIVERS\ssmdrv.sys
0x914A2000 \SystemRoot\system32\DRIVERS\rdbss.sys
0x914E3000 \SystemRoot\system32\drivers\nsiproxy.sys
0x914ED000 \SystemRoot\system32\DRIVERS\mssmbios.sys
0x914F7000 \SystemRoot\System32\drivers\discache.sys
0x91503000 \SystemRoot\System32\Drivers\dfsc.sys
0x9151B000 \SystemRoot\system32\DRIVERS\blbdrive.sys
0x91529000 \SystemRoot\system32\DRIVERS\avipbb.sys
0x9154F000 \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys
0x91551000 \SystemRoot\system32\DRIVERS\tunnel.sys
0x92205000 \SystemRoot\system32\DRIVERS\nvlddmkm.sys
0x92B83000 \SystemRoot\system32\DRIVERS\nvBridge.kmd
0x97825000 \SystemRoot\System32\drivers\dxgkrnl.sys
0x978DC000 \SystemRoot\System32\drivers\dxgmms1.sys
0x95A1E000 \SystemRoot\system32\DRIVERS\igdkmd32.sys
0x9633B000 \SystemRoot\system32\DRIVERS\HECI.sys
0x96346000 \SystemRoot\system32\DRIVERS\usbehci.sys
0x96355000 \SystemRoot\system32\DRIVERS\USBPORT.SYS
0x963A0000 \SystemRoot\system32\DRIVERS\HDAudBus.sys
0x963BF000 \SystemRoot\system32\DRIVERS\L1C62x86.sys
0x9683F000 \SystemRoot\system32\DRIVERS\rtl8192se.sys
0x96952000 \SystemRoot\system32\DRIVERS\vwifibus.sys
0x9695C000 \SystemRoot\system32\DRIVERS\CmBatt.sys
0x96960000 \SystemRoot\system32\DRIVERS\i8042prt.sys
0x96978000 \SystemRoot\system32\DRIVERS\kbdclass.sys
0x98415000 \SystemRoot\system32\DRIVERS\SynTP.sys
0x98556000 \SystemRoot\system32\DRIVERS\USBD.SYS
0x98558000 \SystemRoot\system32\DRIVERS\mouclass.sys
0x98565000 \SystemRoot\system32\DRIVERS\Impcd.sys
0x98584000 \SystemRoot\system32\DRIVERS\wmiacpi.sys
0x9858D000 \SystemRoot\system32\DRIVERS\intelppm.sys
0x9859F000 \SystemRoot\system32\DRIVERS\CompositeBus.sys
0x985AC000 \SystemRoot\system32\DRIVERS\AgileVpn.sys
0x985BE000 \SystemRoot\system32\DRIVERS\rasl2tp.sys
0x985D6000 \SystemRoot\system32\DRIVERS\ndistapi.sys
0x96985000 \SystemRoot\system32\DRIVERS\ndiswan.sys
0x985E1000 \SystemRoot\system32\DRIVERS\raspppoe.sys
0x969A7000 \SystemRoot\system32\DRIVERS\raspptp.sys
0x969BE000 \SystemRoot\system32\DRIVERS\rassstp.sys
0x985F9000 \SystemRoot\system32\DRIVERS\swenum.sys
0x96800000 \SystemRoot\system32\DRIVERS\ks.sys
0x98400000 \SystemRoot\system32\DRIVERS\umbus.sys
0x97915000 \SystemRoot\system32\DRIVERS\usbhub.sys
0x969D5000 \SystemRoot\System32\Drivers\NDProxy.SYS
0x98A35000 \SystemRoot\system32\drivers\RTKVHDA.sys
0x98D0E000 \SystemRoot\system32\drivers\portcls.sys
0x98D3D000 \SystemRoot\system32\drivers\drmk.sys
0x98D56000 \SystemRoot\system32\DRIVERS\IntcDAud.sys
0x9A270000 \SystemRoot\System32\win32k.sys
0x98D90000 \SystemRoot\System32\drivers\Dxapi.sys
0x98D9A000 \SystemRoot\System32\Drivers\crashdmp.sys
0x90E13000 \SystemRoot\System32\Drivers\dump_iaStor.sys
0x98DA7000 \SystemRoot\System32\Drivers\dump_dumpfve.sys
0x98DB8000 \SystemRoot\system32\DRIVERS\monitor.sys
0x9A4D0000 \SystemRoot\System32\TSDDD.dll
0x9A500000 \SystemRoot\System32\cdd.dll
0x98DC3000 \SystemRoot\system32\drivers\luafv.sys
0x98DDE000 \SystemRoot\system32\DRIVERS\avgntflt.sys
0x98A00000 \SystemRoot\system32\drivers\WudfPf.sys
0x98A1A000 \SystemRoot\system32\DRIVERS\lltdio.sys
0x97959000 \SystemRoot\system32\DRIVERS\nwifi.sys
0x969E6000 \SystemRoot\system32\DRIVERS\ndisuio.sys
0x963D1000 \SystemRoot\system32\DRIVERS\rspndr.sys
0x91572000 \SystemRoot\system32\drivers\HTTP.sys
0x963E4000 \SystemRoot\system32\DRIVERS\bowser.sys
0x95A00000 \SystemRoot\System32\drivers\mpsdrv.sys
0x9799F000 \SystemRoot\system32\DRIVERS\mrxsmb.sys
0x979C2000 \SystemRoot\system32\DRIVERS\mrxsmb10.sys
0x97800000 \SystemRoot\system32\DRIVERS\mrxsmb20.sys
0xB5C26000 \SystemRoot\system32\drivers\peauth.sys
0xB5CBD000 \SystemRoot\System32\Drivers\secdrv.SYS
0xB5CC7000 \SystemRoot\System32\DRIVERS\srvnet.sys
0xB5CE8000 \SystemRoot\System32\drivers\tcpipreg.sys
0xB5CF5000 \SystemRoot\System32\DRIVERS\srv2.sys
0xB5D44000 \SystemRoot\System32\DRIVERS\srv.sys
0xB5DC2000 \SystemRoot\system32\DRIVERS\asyncmac.sys
0xB5DCB000 \??\C:\Users\Nina\AppData\Local\Temp\catchme.sys
0xB5DD3000 \??\C:\Windows\system32\Drivers\PROCEXP113.SYS
0xB5D95000 \SystemRoot\System32\Drivers\fastfat.SYS
0xB5C00000 \??\C:\Users\Nina\AppData\Local\Temp\pwldqpow.sys
0x772D0000 \Windows\System32\ntdll.dll
0x47E00000 \Windows\System32\smss.exe
0x77510000 \Windows\System32\apisetschema.dll
0x007A0000 \Windows\System32\autochk.exe
0x774E0000 \Windows\System32\imm32.dll
0x76680000 \Windows\System32\shell32.dll
0x77460000 \Windows\System32\comdlg32.dll
0x77410000 \Windows\System32\Wldap32.dll
0x76670000 \Windows\System32\nsi.dll
0x765D0000 \Windows\System32\usp10.dll
0x76570000 \Windows\System32\shlwapi.dll
0x76470000 \Windows\System32\wininet.dll
0x76450000 \Windows\System32\sechost.dll
0x763C0000 \Windows\System32\clbcatq.dll
0x76390000 \Windows\System32\imagehlp.dll
0x761F0000 \Windows\System32\setupapi.dll
0x76090000 \Windows\System32\ole32.dll
0x76050000 \Windows\System32\ws2_32.dll
0x76040000 \Windows\System32\psapi.dll
0x76030000 \Windows\System32\normaliz.dll
0x75E30000 \Windows\System32\iertutil.dll
0x75D90000 \Windows\System32\advapi32.dll
0x75D30000 \Windows\System32\difxapi.dll
0x75CA0000 \Windows\System32\oleaut32.dll
0x75BC0000 \Windows\System32\kernel32.dll
0x75B70000 \Windows\System32\gdi32.dll
0x75A30000 \Windows\System32\urlmon.dll
0x75980000 \Windows\System32\msvcrt.dll
0x75970000 \Windows\System32\lpk.dll
0x758C0000 \Windows\System32\rpcrt4.dll
0x757F0000 \Windows\System32\msctf.dll
0x75720000 \Windows\System32\user32.dll
0x75690000 \Windows\System32\comctl32.dll
0x75570000 \Windows\System32\crypt32.dll
0x75540000 \Windows\System32\wintrust.dll
0x754F0000 \Windows\System32\KernelBase.dll
0x754D0000 \Windows\System32\devobj.dll
0x754A0000 \Windows\System32\cfgmgr32.dll
0x75490000 \Windows\System32\msasn1.dll
Processes (total 52):
0 System Idle Process
4 System
324 C:\Windows\System32\smss.exe
456 csrss.exe
528 C:\Windows\System32\wininit.exe
536 csrss.exe
584 C:\Windows\System32\services.exe
600 C:\Windows\System32\lsass.exe
608 C:\Windows\System32\lsm.exe
704 C:\Windows\System32\winlogon.exe
768 C:\Windows\System32\svchost.exe
884 C:\Windows\System32\svchost.exe
968 C:\Windows\System32\svchost.exe
1008 C:\Windows\System32\svchost.exe
1048 C:\Windows\System32\svchost.exe
1176 C:\Windows\System32\svchost.exe
1276 C:\Program Files\Cisco\Cisco AnyConnect VPN Client\vpnagent.exe
1304 C:\Windows\System32\svchost.exe
1540 C:\Windows\System32\dwm.exe
1612 C:\Windows\System32\spoolsv.exe
1640 C:\Program Files\Avira\AntiVir Desktop\sched.exe
1664 C:\Windows\System32\svchost.exe
1800 C:\Windows\System32\taskhost.exe
1996 C:\Program Files\Avira\AntiVir Desktop\avguard.exe
2040 C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe
416 C:\PROGRA~1\Ixia\Endpoint\endpoint.exe
452 C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
900 C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
1520 C:\Windows\System32\PSIService.exe
1748 C:\Program Files\CyberLink\Shared Files\RichVideo.exe
1944 C:\Windows\System32\svchost.exe
1968 C:\Program Files\Windows Sidebar\sidebar.exe
1976 C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
376 C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
1372 C:\Windows\System32\conhost.exe
2776 C:\Windows\System32\svchost.exe
2944 C:\Windows\System32\svchost.exe
3084 C:\Windows\System32\SearchIndexer.exe
3304 C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
1492 C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
2736 C:\Windows\System32\svchost.exe
2564 C:\Program Files\Windows Media Player\wmpnetwk.exe
1504 C:\Windows\System32\svchost.exe
3492 C:\Windows\explorer.exe
3820 C:\Program Files\Hewlett-Packard\PrnStatusMX\PrnStatusMX.exe
1860 C:\Program Files\Mozilla Firefox 4.0 Beta 9\firefox.exe
3628 C:\Program Files\Mozilla Firefox 4.0 Beta 9\plugin-container.exe
3056 C:\Users\Nina\AppData\Local\temp\Rar$EX00.799\osam.exe
4012 C:\Windows\System32\SearchProtocolHost.exe
3224 C:\Windows\System32\SearchFilterHost.exe
3264 C:\Users\Nina\Downloads\MBRCheck.exe
3664 C:\Windows\System32\conhost.exe
\\.\C: --> \\.\PhysicalDrive0 at offset 0x00000000`06500000 (NTFS)
\\.\D: --> \\.\PhysicalDrive0 at offset 0x0000006a`30900000 (NTFS)
PhysicalDrive0 Model Number: WDCWD5000BEVT-22A0RT0, Rev: 01.01A01
Size Device Name MBR Status
--------------------------------------------
465 GB \\.\PhysicalDrive0 Unknown MBR code
SHA1: F61074C24A6DA26C38919A0032AE32ED64E1F93E
Found non-standard or infected MBR.
Enter 'Y' and hit ENTER for more options, or 'N' to exit:
|
|
17.01.2011, 22:23
| #25 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Laptop langsam und stockt ... Wir müssen den MBR reparieren. Hast du eine Win7-DVD zur Hand?
__________________ Logfiles bitte immer in CODE-Tags posten |
|
18.01.2011, 14:50
| #26 |
| | Laptop langsam und stockt ... Ohje das hört sich nicht gut an. Ich weis garnicht ob die CD bei meinem Laptop dabei war. Was mach ich wenn ich keine hab? Ist das dringend? Bzw. was genau ist da kaputt? Die Sachen von meinem Laptop liegen da wo ich erst wieder im Februar bin (Zweitwohnsitz). Ansonsten muss ich die Sachen holen fahren. Gibt es auch eine Möglichkeit ohne CD? |
|
18.01.2011, 14:56
| #27 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Laptop langsam und stockt ... Geht auch mit einer Vista-Rescue-Disc: Schau mal hier => Vista Notfall/Recovery-CD 32-Bit - Dr. Windows Lad das iso runter, brenn es zB mit ImgBurn per Imagebrennfunktion auf eine CD und starte damit den Rechner (von dieser CD booten). Falls Du eine normale Vista-Installations-DVD hast, brauchst Du das o.g. Image nicht sondern kannst einfach von der Vista-DVD booten. Klick auf Computerreparaturoptionen, weiter, Eingabeaufforderung - die Konsole öffnet sich. Da bitte bootrec.exe /fixboot eintippen (mit enter bestätigen), dann bootrec.exe /fixmbr eintippen (mit enter bestätigen) - Rechner neustarten, CD vorher rausnehmen. Danach bitte nochmal GMER und MBRCheck ausführen.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
18.01.2011, 15:00
| #28 |
| | Laptop langsam und stockt ... und das für Vista passt auch für Windows 7? |
|
18.01.2011, 15:17
| #29 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Laptop langsam und stockt ... Ja sollte gehen, wurde ein paarmal schon erfolgreich gemacht
__________________ Logfiles bitte immer in CODE-Tags posten |
|
18.01.2011, 20:36
| #30 |
| | Laptop langsam und stockt ... Ich habe jetzt folgendes Problem: Ich habe diese Datei runter geladen, auf DVD gebrannt von davon gebootet. Jetzt will es aber mein Produkt Key ... wenn ich diesen eingebe wird er nicht anerkannt. Da steht jetzt, dass die Daten weg sein können wenn ich abbreche. Was soll ich jetzt tun???? |
|
| Themen zu Laptop langsam und stockt ... |
| antivir, antivir guard, avira, bho, browser, desktop, ebay, firefox, google, google chrome, google earth, hijack, hijackthis, home premium, install.exe, internet, internet explorer, langsam, launch, location, microsoft office word, mozilla, msiinstaller, notification, ntdll.dll, office 2007, oldtimer, picasa, plug-in, problem, programm, realtek, rundll, saver, security, sehr langsam, senden, server, shell32.dll, software, super, system, usb 2.0, windows |
Linear-Darstellung
