vista: internet extrem langsam und bricht so alle 20min ab

rafox
Gast

« am: 15.12.09, 00:09:10 »

hello, mein internet ist plötzlich ungemein langsam und die internetverbindung bricht so alle 20min.ab. Hin und wieder schaltet sich auch mein laptop beim hochfahren einfach plötzlich aus, wobei das allerdings schon länger ist und muss daher vllt nicht unbedingt mit dem i-net problem zusammenhängen.
jou, also verdacht auf schädlinge, habe daher wie hier in irgendeiner anleitung empfohlen, diverse scans durchgeführt. Wäre super wenn ich eine schnelle Antwort zu denen bekommen könnte. thx im voraus!

vista scan:

Die 30 neuesten Dateien im Ordner Windows:

***** ***** ***** ***** *****
***** Scanning C:\Windows *****
***** ***** ***** ***** *****

14.12.2009 WindowsUpdate.log 22 12:1.756.055
14.12.2009 bootstat.dat 22 08:67.584
19.11.2009 nfsc_patch.ini 21 03:47
06.05.2009 vtplus32.ini 20 20:399
06.05.2009 HCWPNP.INI 20 19:3.124
06.05.2009 Irremote.ini 20 19:32.295
06.05.2009 ODBC.INI 20 19:135
06.05.2009 ODBCINST.INI 20 19:209
06.05.2009 VPNInstall.MIF 13 28:1.594
06.05.2009 VPNUnInstall.MIF 13 24:1.594
10.04.2009 explorer.exe 22 27:2.926.592
06.02.2009 SPInstall.etl 16 48:131.072
03.02.2009 cdplayer.ini 20 32:261
17.01.2009 PDFCreator_Toolbar_Uninstaller_6890.exe 18 41:253.139
07.08.2008 ASScrPro.exe 04 20:33.136
07.08.2008 ASScrProlog.exe 04 20:37.232
Camera 07.08.2008 ASUS 04 20:4.814.371
Camera 07.08.2008 ASUS 04 20:274.800
07.08.2008 Asus_Camera_ScreenSaver.scr 04 20:503.808
07.08.2008 flashax.exe 04 20:606.848
07.08.2008 impborl.dll 04 20:12.288
07.08.2008 DIFxAPI.dll 03 55:319.456
07.08.2008 HideWin.exe 03 55:315.392
07.08.2008 win.ini 02 59:219
07.08.2008 ativpsrm.bin 02 51:0
14.07.2008 csup.txt 07 59:10
21.01.2008 WindowsShell.Manifest 03 43:749

Die 50 neuesten Dateien im Ordner Windows\system32:

***** ***** ***** ***** *****
***** Scanning C:\Windows\system32 *****
***** ***** ***** ***** *****

14.12.2009 perfh009.dat 22 14:587.178
14.12.2009 perfc009.dat 22 14:101.250
14.12.2009 perfh007.dat 22 14:618.442
14.12.2009 perfc007.dat 22 14:122.842
14.12.2009 PerfStringBackup.INI 22 14:1.418.806
14.12.2009 acovcnt.exe 22 10:45.056
14.12.2009 7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 22 08:4.784
14.12.2009 7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 22 08:4.784
01.12.2009 mrt.exe 21 06:25.966.024
21.11.2009 wininet.dll 07 40:916.480
21.11.2009 urlmon.dll 07 40:1.208.832
21.11.2009 occache.dll 07 38:206.848
21.11.2009 mshtml.dll 07 35:5.940.736
21.11.2009 msfeedsbs.dll 07 35:55.296
21.11.2009 msfeeds.dll 07 35:594.432
21.11.2009 jsproxy.dll 07 34:25.600
21.11.2009 inetcpl.cpl 07 34:1.469.440
21.11.2009 ieui.dll 07 34:164.352
21.11.2009 iesysprep.dll 07 34:109.056
21.11.2009 iesetup.dll 07 34:71.680
21.11.2009 iertutil.dll 07 34:1.985.536
21.11.2009 iernonce.dll 07 34:55.808
21.11.2009 iepeers.dll 07 34:184.320
21.11.2009 ieframe.dll 07 34:11.069.952
21.11.2009 iedkcs32.dll 07 34:387.584
21.11.2009 ieUnatt.exe 05 59:133.632
21.11.2009 ie4uinit.exe 05 59:173.056
21.11.2009 msfeedssync.exe 05 59:13.312
21.11.2009 mshtml.tlb 05 58:1.638.912
12.11.2009 FNTCACHE.DAT 12 08:388.480
09.11.2009 nshhttp.dll 13 31:24.064
09.11.2009 httpapi.dll 13 30:30.720
02.11.2009 MpSigStub.exe 20 42:195.456
29.10.2009 tzres.dll 10 17:2.048
23.10.2009 timedate.cpl 18 10:714.240
08.10.2009 UIAutomationCore.dll 22 08:555.520
08.10.2009 oleacc.dll 22 08:234.496
08.10.2009 oleaccrc.dll 22 07:4.096
07.10.2009 rastls.dll 12 36:243.712
01.10.2009 wpdshext.dll 02 02:2.537.472
01.10.2009 WPDShextAutoplay.exe 02 02:30.208
01.10.2009 PortableDeviceApi.dll 02 02:334.848
01.10.2009 WPDShServiceObj.dll 02 02:87.552
01.10.2009 BthMtpContextHandler.dll 02 02:31.232
01.10.2009 wpd_ci.dll 02 01:546.816
01.10.2009 PortableDeviceTypes.dll 02 01:160.256
01.10.2009 PortableDeviceConnectApi.dll 02 01:60.928

***** ***** ***** ***** *****
***** Scanning C:\Windows\system32\drivers\etc\hosts *****
***** ***** ***** ***** *****

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

::1 localhost

***** ***** ***** ***** *****
***** Scanning Processe *****
***** ***** ***** ***** *****

Abbildname PID Sitzungsname Sitz.-Nr. Speichernutzung
========================= ======== ================ =========== ===============
System Idle Process 0 Services 0 24 K
System 4 Services 0 2.732 K
smss.exe 420 Services 0 740 K
csrss.exe 492 Services 0 6.076 K
wininit.exe 556 Services 0 3.968 K
csrss.exe 568 Console 1 9.232 K
services.exe 600 Services 0 6.828 K
lsass.exe 616 Services 0 2.392 K
lsm.exe 624 Services 0 3.916 K
winlogon.exe 648 Console 1 5.772 K
svchost.exe 804 Services 0 6.412 K
svchost.exe 888 Services 0 6.124 K
svchost.exe 932 Services 0 38.388 K
Ati2evxx.exe 1044 Services 0 4.168 K
svchost.exe 1088 Services 0 11.900 K
svchost.exe 1144 Services 0 101.100 K
svchost.exe 1176 Services 0 40.300 K
audiodg.exe 1232 Services 0 17.792 K
svchost.exe 1256 Services 0 5.880 K
SLsvc.exe 1276 Services 0 11.664 K
svchost.exe 1368 Services 0 11.864 K
Ati2evxx.exe 1420 Console 1 6.400 K
svchost.exe 1524 Services 0 14.852 K
ADSMSrv.exe 1724 Services 0 2.252 K
ASLDRSrv.exe 1736 Services 0 3.264 K
GFNEXSrv.exe 1756 Services 0 2.300 K
spoolsv.exe 1848 Services 0 9.612 K
taskeng.exe 1856 Services 0 5.720 K
sched.exe 1880 Services 0 1.460 K
svchost.exe 1904 Services 0 18.960 K
avguard.exe 452 Services 0 11.344 K
AppleMobileDeviceService. 12 Services 0 3.560 K
mDNSResponder.exe 572 Services 0 4.528 K
cvpnd.exe 688 Services 0 6.984 K
LSSrvc.exe 1356 Services 0 3.708 K
svchost.exe 1704 Services 0 5.300 K
svchost.exe 2036 Services 0 6.792 K
svchost.exe 684 Services 0 2.180 K
SearchIndexer.exe 2052 Services 0 23.792 K
WUDFHost.exe 2288 Services 0 4.776 K
dwm.exe 2784 Console 1 60.992 K
taskeng.exe 2820 Console 1 11.552 K
explorer.exe 2860 Console 1 61.604 K
HControl.exe 3000 Console 1 7.568 K
ATKOSD2.exe 3080 Console 1 4.508 K
wcourier.exe 3088 Console 1 5.640 K
BatteryLife.exe 3104 Console 1 4.296 K
ACMON.exe 3132 Console 1 6.112 K
ACEngSvr.exe 3220 Console 1 11.056 K
ATKOSD.exe 3292 Console 1 4.844 K
KBFiltr.exe 3304 Console 1 3.172 K
MSASCui.exe 3380 Console 1 9.008 K
RtHDVCpl.exe 2972 Console 1 7.908 K
sm56hlpr.exe 3552 Console 1 4.972 K
MOM.exe 3236 Console 1 5.216 K
SynTPEnh.exe 3584 Console 1 8.608 K
DMedia.exe 3580 Console 1 3.640 K
ASUSTPE.exe 3680 Console 1 4.060 K
P4P.exe 3408 Console 1 25.128 K
ASScrPro.exe 3736 Console 1 4.244 K
avgnt.exe 3840 Console 1 2.252 K
sidebar.exe 3276 Console 1 41.032 K
LightScribeControlPanel.e 3844 Console 1 9.436 K
Ir.exe 3980 Console 1 5.708 K
CCC.exe 4040 Console 1 10.480 K
SynTPHelper.exe 992 Console 1 2.652 K
firefox.exe 2068 Console 1 94.640 K
svchost.exe 2520 Services 0 6.580 K
infium.exe 3044 Console 1 26.800 K
SearchProtocolHost.exe 480 Services 0 8.176 K
SearchFilterHost.exe 2672 Services 0 6.536 K
WinRAR.exe 3992 Console 1 14.456 K
cmd.exe 2720 Console 1 2.968 K
conime.exe 1264 Console 1 3.356 K
tasklist.exe 776 Console 1 4.672 K
WmiPrvSE.exe 456 Services 0 5.740 K

Microsoft Windows [Version 6.0.6002]

http://www.paules-pc-forum.de
***** Malware Team *****

***** Ende des Scans 14.12.2009 um 23:15:13,46 ***

« Letzte Änderung: 15.12.09, 00:13:11 von rafox »

Moderator informieren

rafox
Gast

Re: vista: internet extrem langsam und bricht so alle 20min ab

« Antwort #1 am: 15.12.09, 00:14:37 »

hijackthis:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:34:51, on 14.12.2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18865)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ASUS\ATK Media\DMedia.exe
C:\Windows\System32\ASUSTPE.exe
C:\Program Files\P4P\P4P.exe
C:\Windows\ASScrPro.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
D:\programs installed\WinTV\Ir.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\QIP Infium\infium.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\notepad.exe
D:\Programme installed\Malwarebytes' Anti-Malware\mbam.exe
D:\Programme installed\hijackthis\HijackThis.exe
C:\Windows\system32\SearchFilterHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.de/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.asus.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = Root: HKCU; Subkey: Software\Microsoft\Internet Explorer\SearchUrl; ValueType: string; ValueName: '; ValueData: '; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: QIPBHO Class - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Users\micha\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
R3 - URLSearchHook: QIPBHO Class - {95289393-33EA-4F8D-B952-483415B9C955} - C:\Users\micha\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
R3 - URLSearchHook: (no name) - - (no file)
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: QIPBHO - {95289393-33EA-4F8D-B952-483415B9C955} - C:\Users\micha\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
O2 - BHO: QIPBHO - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Users\micha\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMEDIA.EXE
O4 - HKLM\..\Run: [ASUSTPE] C:\Windows\system32\ASUSTPE.exe
O4 - HKLM\..\Run: [PowerForPhone] "C:\Program Files\P4P\P4P.exe"
O4 - HKLM\..\Run: [ASUS Camera ScreenSaver] C:\Windows\ASScrProlog.exe
O4 - HKLM\..\Run: [ASUS Screen Saver Protector] C:\Windows\ASScrPro.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] D:\Programme installed\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-21-2576772591-691370944-1416667899-1001\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (User 'save')
O4 - Global Startup: AutoStart IR.lnk = D:\programs installed\WinTV\Ir.exe
O4 - Global Startup: VPN Client.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Neue Programme\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Neue Programme\ICQ6.5\ICQ.exe
O13 - Gopher Prefix:
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: ADSM Service (ADSMService) - Unknown owner - C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
O23 - Service: Avira AntiVir Planer (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ATK Hotkey\ASLDRSrv.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: Bonjour-Dienst (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

--
End of file - 7867 bytes

Moderator informieren

HCK
Gast

Re: vista: internet extrem langsam und bricht so alle 20min ab

« Antwort #2 am: 15.12.09, 11:41:55 »

http://www.hijackthis.de/

Log da einkopieren & auswerten ... staunen & fixen usw

Malwarebytes Vollscan machen (nach update)

Moderator informieren

vista: internet extrem langsam und bricht so alle 20min ab

Antworten zu vista: internet extrem langsam und bricht so alle 20min ab:

Re: vista: internet extrem langsam und bricht so alle 20min ab

Mehr zu vista: internet extrem langsam und bricht so alle 20min ab

« Unbekannter Virus!!! Festplate als Ordner + 6 Verknüpfungen		Avira löscht die Vieren nicht?????????????????????????????? »