Trojaner-Board - Win 7 langsam & hängt sich auf

Das werde ich gleich erledigen und danach hier einfügen.

Edit: Hier die Logs:

FRST
FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 15-02-2015

Ran by qqqq (administrator) on ICEEYE-PC on 18-02-2015 05:31:47

Running from C:\Users\qqqq\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MP5G34UW

Loaded Profiles: qqqq (Available profiles: qqqq)

Platform: Microsoft Windows 7 Ultimate  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11 (Default browser not detected!)

Boot Mode: Safe Mode (with Networking)

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe

(Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [126712 2015-01-19] (Avira Operations GmbH & Co. KG)

HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [702768 2014-11-24] (Avira Operations GmbH & Co. KG)

HKLM\...\RunOnce: [Malwarebytes Anti-Malware (cleanup)] => C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\mbamdor.exe [54072 2014-11-21] (Malwarebytes Corporation)

HKU\S-1-5-21-1454181572-1456083582-2743382946-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\ccleaner.exe [5496600 2015-01-20] (Piriform Ltd)
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.asus.com

HKU\S-1-5-21-1454181572-1456083582-2743382946-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.asus.com

HKU\S-1-5-21-1454181572-1456083582-2743382946-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.asus.com

SearchScopes: HKU\S-1-5-21-1454181572-1456083582-2743382946-1000 -> {87683D6B-AC0B-4811-AF04-2973C801A2F0} URL = https://www.google.com/search?q={searchTerms}

DPF: {74DBCB52-F298-4110-951D-AD2FF67BC8AB} hxxp://www.nvidia.com/content/DriverDownload/nforce/NvidiaSmartScan.cab

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

FireFox:

========

FF ProfilePath: C:\Users\qqqq\AppData\Roaming\Mozilla\Firefox\Profiles\dEiysw5i.default

FF Extension: Avira Browser Safety - C:\Users\qqqq\AppData\Roaming\Mozilla\Firefox\Profiles\dEiysw5i.default\Extensions\abs@avira.com [2015-02-18]
 

Chrome: 

=======

CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
 

========================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

S2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [431920 2014-11-24] (Avira Operations GmbH & Co. KG)

S2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [431920 2014-11-24] (Avira Operations GmbH & Co. KG)

S2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [182520 2015-01-19] (Avira Operations GmbH & Co. KG)

S2 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)

S2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)

R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

S2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [98160 2014-11-24] (Avira Operations GmbH & Co. KG)

S1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-11-24] (Avira Operations GmbH & Co. KG)

S1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2014-11-24] (Avira Operations GmbH & Co. KG)

S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-11-21] (Malwarebytes Corporation)

S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2014-11-21] (Malwarebytes Corporation)

R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [6504 2009-05-13] ()

S3 PNPMEM; C:\Windows\System32\DRIVERS\pnpmem.sys [13312 2009-07-14] (Microsoft Corporation)

R3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [801896 2012-10-25] (Realtek Semiconductor Corporation                           )

S1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2014-11-24] (Avira GmbH)

S3 VGPU; System32\drivers\rdvgkmd.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-02-18 05:31 - 2015-02-18 05:31 - 00000000 ____D () C:\FRST

2015-02-18 04:22 - 2015-02-18 04:22 - 00002821 _____ () C:\Users\qqqq\Desktop\Text.txt

2015-02-18 03:45 - 2015-02-18 04:21 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)

2015-02-18 03:18 - 2015-02-18 03:18 - 00015201 _____ () C:\Users\qqqq\Downloads\MemTest.zip

2015-02-18 03:18 - 2014-07-24 21:01 - 00028672 _____ () C:\Users\qqqq\Downloads\memtest.exe

2015-02-18 03:18 - 2014-06-22 17:41 - 00012924 _____ () C:\Users\qqqq\Downloads\manual.html

2015-02-18 03:04 - 2015-02-18 03:45 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2015-02-18 03:03 - 2015-02-18 03:45 - 00082648 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2015-02-18 03:03 - 2015-02-18 03:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2015-02-18 03:03 - 2015-02-18 03:03 - 00000000 ____D () C:\ProgramData\Malwarebytes

2015-02-18 03:03 - 2015-02-18 03:03 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware

2015-02-18 03:03 - 2014-11-21 06:14 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2015-02-18 03:03 - 2014-11-21 06:14 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2015-02-18 02:56 - 2015-02-18 02:56 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe

2015-02-18 02:56 - 2015-02-18 02:56 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

2015-02-18 02:56 - 2015-02-18 02:56 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-02-18 02:56 - 2015-02-18 02:56 - 00000000 ____D () C:\Windows\system32\Macromed

2015-02-18 02:56 - 2015-02-18 02:56 - 00000000 ____D () C:\Users\qqqq\AppData\Roaming\Macromedia

2015-02-18 02:55 - 2015-02-18 02:56 - 00000000 ____D () C:\Users\qqqq\AppData\Local\Adobe

2015-02-18 01:25 - 2015-02-18 01:23 - 00037384 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2015-02-18 01:23 - 2015-02-18 01:23 - 00000000 ____D () C:\Users\qqqq\AppData\Roaming\Mozilla

2015-02-18 01:23 - 2015-02-18 01:23 - 00000000 ____D () C:\Users\qqqq\AppData\Roaming\Avira

2015-02-18 01:20 - 2014-11-24 10:23 - 00136216 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2015-02-18 01:20 - 2014-11-24 10:23 - 00098160 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2015-02-18 01:20 - 2014-11-24 10:23 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2015-02-18 01:20 - 2014-11-24 10:23 - 00028520 _____ (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys

2015-02-18 01:18 - 2015-02-18 01:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2015-02-18 01:18 - 2015-02-18 01:20 - 00000000 ____D () C:\ProgramData\Avira

2015-02-18 01:18 - 2015-02-18 01:20 - 00000000 ____D () C:\Program Files\Avira

2015-02-18 01:18 - 2015-02-18 01:18 - 00000000 ____D () C:\ProgramData\Package Cache

2015-02-18 01:17 - 2015-02-18 01:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner

2015-02-18 01:17 - 2015-02-18 01:17 - 00000000 ____D () C:\Program Files\CCleaner

2015-02-18 01:16 - 2015-02-18 02:08 - 00000000 ____D () C:\Program Files\Google

2015-02-18 01:16 - 2015-02-18 02:07 - 00000000 ____D () C:\Users\qqqq\AppData\Local\Google

2015-02-18 00:51 - 2015-02-18 00:53 - 00000000 ____D () C:\Program Files\NVIDIA Corporation

2015-02-18 00:51 - 2015-02-18 00:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation

2015-02-18 00:49 - 2010-03-24 03:31 - 00600680 _____ (NVIDIA Corporation) C:\Windows\system32\NVUNINST.EXE

2015-02-18 00:49 - 2009-11-11 15:16 - 00729600 _____ (NVIDIA Corporation) C:\Windows\system32\cohelper.dll

2015-02-18 00:49 - 2009-11-11 09:22 - 00009548 _____ () C:\Windows\system32\Drivers\nvphy.bin

2015-02-18 00:34 - 2015-02-18 01:54 - 00000000 ____D () C:\ProgramData\{cd7653ea-93fd-9793-cd76-653ea93f4faa}

2015-02-18 00:30 - 2015-02-18 00:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip

2015-02-18 00:30 - 2015-02-18 00:30 - 00000000 ____D () C:\Program Files\7-Zip

2015-02-18 00:30 - 2009-05-13 19:11 - 00006504 _____ () C:\Windows\system32\Drivers\ASACPI.sys

2015-02-18 00:18 - 2015-02-18 00:18 - 00000000 ____D () C:\Users\qqqq\AppData\Roaming\Easeware

2015-02-18 00:17 - 2015-02-18 02:08 - 00000000 ____D () C:\Program Files\Easeware

2015-02-18 00:17 - 2015-02-18 01:50 - 00000404 _____ () C:\Windows\Tasks\DriverEasy Scheduled Scan.job

2015-02-18 00:17 - 2015-02-18 00:17 - 00058016 _____ () C:\Users\qqqq\AppData\Local\GDIPFONTCACHEV1.DAT

2015-02-17 22:12 - 2015-02-17 22:15 - 00000000 __RHD () C:\ESD

2015-02-17 22:06 - 2015-02-17 22:06 - 00000000 __SHD () C:\Users\qqqq\AppData\Local\EmieUserList

2015-02-17 22:06 - 2015-02-17 22:06 - 00000000 __SHD () C:\Users\qqqq\AppData\Local\EmieSiteList

2015-02-17 22:06 - 2015-02-17 22:06 - 00000000 __SHD () C:\Users\qqqq\AppData\Local\EmieBrowserModeList

2015-02-17 22:03 - 2015-02-17 22:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TP-LINK

2015-02-17 22:01 - 2015-02-18 00:51 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information

2015-02-17 22:01 - 2012-10-25 16:20 - 00801896 _____ (Realtek Semiconductor Corporation ) C:\Windows\system32\rtl8192cu.sys

2015-02-17 22:01 - 2012-10-25 16:20 - 00801896 _____ (Realtek Semiconductor Corporation ) C:\Windows\system32\Drivers\RTL8192cu.sys

2015-02-17 22:01 - 2012-10-25 16:20 - 00007502 _____ () C:\Windows\system32\net8192cu.cat

2015-02-17 22:00 - 2015-02-17 22:00 - 00000000 ____D () C:\ProgramData\TP-LINK

2015-02-17 21:55 - 2015-02-17 21:56 - 00000000 ____D () C:\Users\qqqq

2015-02-17 21:55 - 2015-02-17 21:55 - 00001425 _____ () C:\Users\qqqq\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2015-02-17 21:55 - 2015-02-17 21:55 - 00000020 ___SH () C:\Users\qqqq\ntuser.ini

2015-02-17 21:55 - 2015-02-17 21:55 - 00000000 _SHDL () C:\Users\qqqq\Startmenü

2015-02-17 21:55 - 2015-02-17 21:55 - 00000000 _SHDL () C:\Users\qqqq\Netzwerkumgebung

2015-02-17 21:55 - 2015-02-17 21:55 - 00000000 _SHDL () C:\Users\qqqq\Druckumgebung

2015-02-17 21:55 - 2015-02-17 21:55 - 00000000 _SHDL () C:\Users\qqqq\Documents\Eigene Musik

2015-02-17 21:55 - 2015-02-17 21:55 - 00000000 _SHDL () C:\Users\qqqq\Documents\Eigene Bilder

2015-02-17 21:55 - 2015-02-17 21:55 - 00000000 _SHDL () C:\Users\qqqq\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2015-02-17 21:55 - 2015-02-17 21:55 - 00000000 _SHDL () C:\Users\qqqq\AppData\Local\Verlauf

2015-02-17 21:55 - 2015-02-17 21:55 - 00000000 ____D () C:\Users\qqqq\AppData\Roaming\Adobe

2015-02-17 21:55 - 2015-02-17 21:55 - 00000000 ____D () C:\Users\qqqq\AppData\Local\VirtualStore

2015-02-17 21:55 - 2009-07-14 05:42 - 00000000 ___RD () C:\Users\qqqq\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2015-02-17 21:55 - 2009-07-14 05:37 - 00000000 ___RD () C:\Users\qqqq\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

2015-02-17 21:53 - 2015-02-17 21:53 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik

2015-02-17 21:53 - 2015-02-17 21:53 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder

2015-02-17 21:53 - 2015-02-17 21:53 - 00000000 _SHDL () C:\Users\Default\Startmenü

2015-02-17 21:53 - 2015-02-17 21:53 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung

2015-02-17 21:53 - 2015-02-17 21:53 - 00000000 _SHDL () C:\Users\Default\Druckumgebung

2015-02-17 21:53 - 2015-02-17 21:53 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik

2015-02-17 21:53 - 2015-02-17 21:53 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder

2015-02-17 21:53 - 2015-02-17 21:53 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2015-02-17 21:53 - 2015-02-17 21:53 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf

2015-02-17 21:53 - 2015-02-17 21:53 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik

2015-02-17 21:53 - 2015-02-17 21:53 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder

2015-02-17 21:53 - 2015-02-17 21:53 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2015-02-17 21:53 - 2015-02-17 21:53 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf

2015-02-17 21:53 - 2015-02-17 21:53 - 00000000 _SHDL () C:\Programme

2015-02-17 21:53 - 2015-02-17 21:53 - 00000000 _SHDL () C:\ProgramData\Startmenü

2015-02-17 21:53 - 2015-02-17 21:53 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme

2015-02-17 21:53 - 2015-02-17 21:53 - 00000000 _SHDL () C:\ProgramData\Dokumente

2015-02-17 21:53 - 2015-02-17 21:53 - 00000000 __SHD () C:\Recovery

2015-02-17 21:44 - 2015-02-17 21:44 - 00000000 ____D () C:\Windows\CSC
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-02-18 04:49 - 2010-11-20 22:01 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI

2015-02-18 03:41 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\tracing

2015-02-18 02:10 - 2013-12-13 23:18 - 00000000 ____D () C:\Windows\Panther

2015-02-18 02:08 - 2009-07-14 05:34 - 00028704 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-02-18 02:08 - 2009-07-14 05:34 - 00028704 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-02-18 01:50 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-02-18 00:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Help

2015-02-18 00:17 - 2009-07-14 03:37 - 00000000 ___RD () C:\Users\Public

2015-02-17 22:05 - 2009-07-14 03:37 - 00000000 __RHD () C:\Users\Public\Libraries

2015-02-17 22:00 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\system32\restore

2015-02-17 21:54 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\rescache

2015-02-17 21:53 - 2009-07-14 03:37 - 00000000 __RHD () C:\Users\Default

2015-02-17 21:53 - 2009-07-14 03:37 - 00000000 ____D () C:\Program Files\Windows NT

2015-02-17 21:41 - 2009-07-14 05:57 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG

2015-02-17 21:41 - 2009-07-14 05:52 - 00028672 _____ () C:\Windows\system32\config\BCD-Template
 

Some content of TEMP:

====================

C:\Users\qqqq\AppData\Local\Temp\5a3A696.exe

C:\Users\qqqq\AppData\Local\Temp\avgnt.exe

C:\Users\qqqq\AppData\Local\Temp\ICReinstall_Ccleaner_Setup.exe
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\system32\winlogon.exe => File is digitally signed

C:\Windows\system32\wininit.exe => File is digitally signed

C:\Windows\system32\svchost.exe => File is digitally signed

C:\Windows\system32\services.exe => File is digitally signed

C:\Windows\system32\User32.dll => File is digitally signed

C:\Windows\system32\userinit.exe => File is digitally signed

C:\Windows\system32\rpcss.dll => File is digitally signed

C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2013-12-13 23:19
 

==================== End Of Log ============================

--- --- ---

--- --- ---

Log 2:FRST Additions Logfile:

Code:

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 15-02-2015

Ran by qqqq at 2015-02-18 05:32:58

Running from C:\Users\qqqq\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MP5G34UW

Boot Mode: Safe Mode (with Networking)

==========================================================
 
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}

AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

7-Zip 9.20 (HKLM\...\7-Zip) (Version:  - )

Adobe Flash Player 16 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 16.0.0.305 - Adobe Systems Incorporated)

Avira (HKLM\...\{bd538030-07d4-4999-a525-7fafa2483f56}) (Version: 1.1.30.21727 - Avira Operations & Co. KG)

Avira (Version: 1.1.30.21727 - Avira Operations & Co. KG) Hidden

Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.7.468 - Avira)

CCleaner (HKLM\...\CCleaner) (Version: 5.02 - Piriform)

Google Toolbar for Internet Explorer (Version: 1.0.0 - Google Inc.) Hidden

Google Update Helper (Version: 1.3.21.169 - Google Inc.) Hidden

Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)

Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.7 - NVIDIA Corporation)

NVIDIA MediaShield (HKLM\...\{CC452A50-5C87-4A1F-B295-445C3C69BF7D}) (Version: 11.1.0.43 - NVIDIA Corporation)

TP-LINK 300Mbps Wireless USB Adapter Treiber (HKLM\...\{852E893E-E4FD-45BB-8B17-72ADDF686974}) (Version: 1.3.1 - TP-LINK)
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 

CustomCLSID: HKU\S-1-5-21-1454181572-1456083582-2743382946-1000_Classes\CLSID\{F28C2F70-47DE-4EA5-8F6D-7D1476CD1EF5}\localserver32 -> C:\Users\qqqq\AppData\Local\Temp\5a3A696.exe ()
 

==================== Restore Points  =========================
 
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {695FBB7D-F77B-44A0-8CA0-4D5881D3C3BE} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-01-20] (Piriform Ltd)

Task: {F72D5C24-226B-4F44-ABDC-CA2EBDCA3D90} - System32\Tasks\DriverEasy Scheduled Scan => C:\Program Files\Easeware\DriverEasy\DriverEasy.exe
 

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\DriverEasy Scheduled Scan.job => C:\Program Files\Easeware\DriverEasy\DriverEasy.exe
 

==================== Loaded Modules (whitelisted) ==============
 

2015-01-21 03:06 - 2015-01-21 03:06 - 00057344 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="2"
 

==================== EXE Association (whitelisted) ===============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 

==================== Other Areas ============================
 

(Currently there is no automatic fix for this section.)
 

HKU\S-1-5-21-1454181572-1456083582-2743382946-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\qqqq\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: 192.168.178.1
 

==================== MSCONFIG/TASK MANAGER disabled items ==
 

(Currently there is no automatic fix for this section.)
 

MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\ccleaner.exe" /MONITOR

MSCONFIG\startupreg: NVRaidService => C:\Program Files\NVIDIA Corporation\Raid\nvraidservice.exe
 

==================== Accounts: =============================
 

Administrator (S-1-5-21-1454181572-1456083582-2743382946-500 - Administrator - Disabled)

Gast (S-1-5-21-1454181572-1456083582-2743382946-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-1454181572-1456083582-2743382946-1002 - Limited - Enabled)

qqqq (S-1-5-21-1454181572-1456083582-2743382946-1000 - Administrator - Enabled) => C:\Users\qqqq
 

==================== Faulty Device Manager Devices =============
 

Name: Security Processor Loader Driver

Description: Security Processor Loader Driver

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer: 

Service: spldr

Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.

Devices stay in this state if they have been prepared for removal.

After you remove the device, this error disappears.Remove the device, and this error should be resolved.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (02/18/2015 04:45:40 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/18/2015 03:43:07 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/18/2015 02:58:57 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.17496, Zeitstempel: 0x546fddcc

Name des fehlerhaften Moduls: Flash32_16_0_0_305.ocx, Version: 16.0.0.305, Zeitstempel: 0x54cff11b

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0005f8f4

ID des fehlerhaften Prozesses: 0x378

Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0

Pfad der fehlerhaften Anwendung: iexplore.exe1

Pfad des fehlerhaften Moduls: iexplore.exe2

Berichtskennung: iexplore.exe3
 

Error: (02/18/2015 02:26:55 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/18/2015 02:26:48 AM) (Source: ESENT) (EventID: 455) (User: )

Description: DllHost (1732) WebCacheLocal: Fehler -1811 beim Öffnen von Protokolldatei C:\Users\qqqq\AppData\Local\Microsoft\Windows\WebCache\V0100049.log.
 

Error: (02/18/2015 02:05:23 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/18/2015 02:04:38 AM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm iexplore.exe, Version 11.0.9600.17496 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 288
 

Startzeit: 01d04b16a10cb280
 

Endzeit: 16
 

Anwendungspfad: C:\Program Files\Internet Explorer\iexplore.exe
 

Berichts-ID: 09ef4061-b70a-11e4-9bb7-95548c016b82
 

Error: (02/18/2015 01:36:08 AM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm Explorer.EXE, Version 6.1.7601.17567 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 504
 

Startzeit: 01d04b0721b848a0
 

Endzeit: 532
 

Anwendungspfad: C:\Windows\Explorer.EXE
 

Berichts-ID: 1ca16319-b706-11e4-9166-0018f3d39050
 

Error: (02/18/2015 01:28:46 AM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm iexplore.exe, Version 11.0.9600.17496 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 1368
 

Startzeit: 01d04b10dbf46bc8
 

Endzeit: 0
 

Anwendungspfad: C:\Program Files\Internet Explorer\iexplore.exe
 

Berichts-ID:
 

Error: (02/18/2015 01:27:51 AM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm Avira.OE.Systray.exe, Version 1.1.30.21735 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 8f8
 

Startzeit: 01d04b107eb167e0
 

Endzeit: 20
 

Anwendungspfad: C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
 

Berichts-ID: ee79bba9-b704-11e4-9166-0018f3d39050
 
 

System errors:

=============

Error: (02/18/2015 05:31:35 AM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1068
 

Error: (02/18/2015 05:31:35 AM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1068
 

Error: (02/18/2015 05:31:35 AM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1068
 

Error: (02/18/2015 05:31:35 AM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1068
 

Error: (02/18/2015 05:31:35 AM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1068
 

Error: (02/18/2015 05:31:35 AM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1068
 

Error: (02/18/2015 05:30:31 AM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1068
 

Error: (02/18/2015 05:30:31 AM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1068
 

Error: (02/18/2015 05:30:31 AM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1068
 

Error: (02/18/2015 05:28:23 AM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1068
 
 

Microsoft Office Sessions:

=========================

Error: (02/18/2015 04:45:40 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/18/2015 03:43:07 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/18/2015 02:58:57 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: iexplore.exe11.0.9600.17496546fddccFlash32_16_0_0_305.ocx16.0.0.30554cff11bc00000050005f8f437801d04b1c161d2668C:\Program Files\Internet Explorer\iexplore.exeC:\Windows\system32\Macromed\Flash\Flash32_16_0_0_305.ocxb25bf700-b711-11e4-a502-c96a58b7dcb1
 

Error: (02/18/2015 02:26:55 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/18/2015 02:26:48 AM) (Source: ESENT) (EventID: 455) (User: )

Description: DllHost1732WebCacheLocal: C:\Users\qqqq\AppData\Local\Microsoft\Windows\WebCache\V0100049.log-1811
 

Error: (02/18/2015 02:05:23 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/18/2015 02:04:38 AM) (Source: Application Hang) (EventID: 1002) (User: )

Description: iexplore.exe11.0.9600.1749628801d04b16a10cb28016C:\Program Files\Internet Explorer\iexplore.exe09ef4061-b70a-11e4-9bb7-95548c016b82
 

Error: (02/18/2015 01:36:08 AM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Explorer.EXE6.1.7601.1756750401d04b0721b848a0532C:\Windows\Explorer.EXE1ca16319-b706-11e4-9166-0018f3d39050
 

Error: (02/18/2015 01:28:46 AM) (Source: Application Hang) (EventID: 1002) (User: )

Description: iexplore.exe11.0.9600.17496136801d04b10dbf46bc80C:\Program Files\Internet Explorer\iexplore.exe
 

Error: (02/18/2015 01:27:51 AM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Avira.OE.Systray.exe1.1.30.217358f801d04b107eb167e020C:\Program Files\Avira\My Avira\Avira.OE.Systray.exeee79bba9-b704-11e4-9166-0018f3d39050
 
 

==================== Memory info =========================== 
 

Processor: AMD Athlon(tm) 64 X2 Dual Core Processor 3800+

Percentage of memory in use: 17%

Total physical RAM: 3454.49 MB

Available physical RAM: 2849.5 MB

Total Pagefile: 6907.27 MB

Available Pagefile: 6363.88 MB

Total Virtual: 2047.88 MB

Available Virtual: 1901.81 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:232.79 GB) (Free:218.02 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 2F02E57F)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=232.8 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

--- --- ---

Nach dem Frühdienst melde ich mich dann wieder zurück. ;)