Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: Oxtender von Hosteurope auf Win7 Laptop nicht mehr vorhanden, Defender nicht startbar

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

 
Alt 08.01.2014, 15:26   #11
Tom21
 
Oxtender von Hosteurope auf Win7 Laptop nicht mehr vorhanden, Defender nicht startbar - Standard

Oxtender von Hosteurope auf Win7 Laptop nicht mehr vorhanden, Defender nicht startbar



Hallo schrauber,

anbei die Anhänge.

VG
Tom
FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-01-2014
Ran by TBLap (administrator) on TBLAP-PC on 08-01-2014 15:24:10
Running from C:\Users\TBLap\Downloads
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AuthenTec, Inc) C:\Program Files\AuthenTec TrueSuite\TrueSuiteService.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(Bdrive Inc.) C:\Program Files\NetDrive\ndsvc.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(Sierra Wireless, Inc.) C:\Program Files (x86)\Sierra Wireless Inc\Common\SwiCardDetect64.exe
(Sierra Wireless, Inc.) C:\Program Files (x86)\Sierra Wireless Inc\QMIPackage\Utils\SwiService.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgr.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
() C:\Program Files (x86)\OneClickInternet\WTGService.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Akamai Technologies, Inc.) C:\Users\TBLap\AppData\Local\Akamai\netsession_win.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Dropbox, Inc.) C:\Users\TBLap\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Akamai Technologies, Inc.) C:\Users\TBLap\AppData\Local\Akamai\netsession_win.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Sierra Wireless, Inc.) C:\Program Files (x86)\Sierra Wireless Inc\WebUpdater\TRUUpdater.exe
(Sierra Wireless Inc.) C:\Program Files (x86)\Sierra Wireless Inc\3G Watcher\WaHelper.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
(Bdrive Inc.) C:\Program Files\NetDrive\netdrive.exe
(CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
(CANON INC.) C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMService.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\Evernote.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteTray.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
() C:\Program Files (x86)\VLC Player GPU+\GPUMonitor.exe
(AuthenTec Inc.) C:\Program Files\AuthenTec TrueSuite\TouchControl.exe
(AuthenTec Inc.) C:\Program Files\AuthenTec TrueSuite\BioMonitor.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-05-01] (Intel Corporation)
HKLM-x32\...\Run: [TRUUpdater] - C:\Program Files (x86)\Sierra Wireless Inc\WebUpdater\TRUUpdater.exe [329072 2011-11-03] (Sierra Wireless, Inc.)
HKLM-x32\...\Run: [WatcherHelper] - C:\Program Files (x86)\Sierra Wireless Inc\3G Watcher\WaHelper.exe [140656 2011-08-04] (Sierra Wireless Inc.)
HKLM-x32\...\Run: [ISBMgr.exe] - C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [60552 2011-09-20] (Sony Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [NetDrive] - C:\Program Files\NetDrive\netdrive.exe [3587072 2013-03-16] (Bdrive Inc.)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] - C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [468112 2011-07-25] (CANON INC.)
HKLM-x32\...\Run: [CanonSolutionMenuEx] - C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1316248 2010-12-02] (CANON INC.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [GPULoader] - C:\Program Files (x86)\VLC Player GPU+\GPULog.exe [1328864 2013-12-27] ()
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [GoogleDriveSync] - C:\Program Files (x86)\Google\Drive\googledrivesync.exe [20203904 2013-12-06] (Google)
HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\TBLap\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
AppInit_DLLs: C:\Windows\System32\nvinitx.dll [247144 2012-10-08] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [202600 2012-10-08] (NVIDIA Corporation)
IFEO\taskmgr.exe: [Debugger] "C:\USERS\TBLAP\DOWNLOADS\PROCESSEXPLORER\PROCEXP.EXE"
Startup: C:\Users\TBLap\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\TBLap\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\TBLap\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\TBLap\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.amazon.de/gp/bit/amazonserp/ref=bit_bds-p18_serp_ie_de_display?ie=UTF8&tagbase=bds-p18&tbrId=v1_abb-channel-18_7c3e267f89814993a1d975c30ac0da75_18_38_20130131_DE_ie_sp_OC1
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x1C9D6F465DBCCD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: TrueSuite Website Log On - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\AuthenTec TrueSuite\IEBHO.dll (AuthenTec Inc.)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: TrueSuite Website Log On - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\AuthenTec TrueSuite\x86\IEBHO.dll (AuthenTec Inc.)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{A4AF28B0-FA45-43DD-A670-ED981819DF2A}: [NameServer]139.7.30.126 139.7.30.125

FireFox:
========
FF ProfilePath: C:\Users\TBLap\AppData\Roaming\Mozilla\Firefox\Profiles\1a6n4efa.default
FF SearchEngineOrder.1: Amazon
FF Homepage: hxxp://www.handelsblatt.com/
FF Keyword.URL: hxxp://www.amazon.de/gp/bit/amazonserp/ref=bit_bds-p18_serp_ff_de_display?ie=UTF8&tag=bds-p18-serp-de-ff-21&tagbase=bds-p18&tbrId=v1_abb-channel-18_7c3e267f89814993a1d975c30ac0da75_18_38_20130131_DE_ff_ab_OC1&query=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @autodesk.com/DWF - C:\Program Files (x86)\Autodesk\Autodesk Design Review Browser Add-on v1.2\npADRdwf.dll (Autodesk)
FF Plugin HKCU: @citrixonline.com/appdetectorplugin - C:\Users\TBLap\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)
FF SearchPlugin: C:\Users\TBLap\AppData\Roaming\Mozilla\Firefox\Profiles\1a6n4efa.default\searchplugins\amazon-distro.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Fingerfox (SE) - C:\Users\TBLap\AppData\Roaming\Mozilla\Firefox\Profiles\1a6n4efa.default\Extensions\{58c64034-c5f3-4179-85f5-81642f42b6d5}
FF Extension: Amazon Browser Apps - C:\Users\TBLap\AppData\Roaming\Mozilla\Firefox\Profiles\1a6n4efa.default\Extensions\abb@amazon.com.xpi
FF Extension: Youtube Downloader - Media Downloader - C:\Users\TBLap\AppData\Roaming\Mozilla\Firefox\Profiles\1a6n4efa.default\Extensions\paulsaintuzb@gmail.com.xpi
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}

==================== Services (Whitelisted) =================

R2 Akamai; c:\program files (x86)\common files\akamai/netsession_win_8fa3539.dll [4569856 2013-07-01] (Akamai Technologies, Inc.)
R2 FPLService; C:\Program Files\AuthenTec TrueSuite\TrueSuiteService.exe [300360 2012-02-20] (AuthenTec, Inc)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [137680 2010-07-27] ()
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273168 2011-12-08] ()
R2 ndsvc; C:\Program Files\NetDrive\ndsvc.exe [2789376 2013-03-16] (Bdrive Inc.)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)
R2 SwiCardDetectSvc; C:\Program Files (x86)\Sierra Wireless Inc\Common\SwiCardDetect64.exe [323952 2012-03-08] (Sierra Wireless, Inc.)
R2 SwiService; C:\Program Files (x86)\Sierra Wireless Inc\QMIPackage\Utils\SWIService.exe [152944 2012-01-13] (Sierra Wireless, Inc.)
R2 WTGService; C:\Program Files (x86)\OneClickInternet\WTGService.exe [342984 2011-03-09] ()
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [594704 2011-12-08] (Intel® Corporation)

==================== Drivers (Whitelisted) ====================

R3 gobi3kfilter; C:\Windows\System32\DRIVERS\gobi3kfilter.sys [34304 2010-12-13] (QUALCOMM Incorporated)
R3 gobi3kmbb; C:\Windows\System32\DRIVERS\gobi3kmbb.sys [399872 2011-04-21] (QUALCOMM Incorporated)
R3 gobi3kserial; C:\Windows\System32\DRIVERS\gobi3kserial.sys [233984 2010-12-13] (QUALCOMM Incorporated)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
S3 ndfs; C:\Program Files\NetDrive\ndfs.sys [63712 2013-02-01] (Bdrive Inc.)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
S3 PcaSp60; C:\Windows\SysWow64\DRIVERS\PcaSp60.sys [38912 2010-09-07] (Printing Communications Assoc., Inc. (PCAUSA))
S3 SWUMX20; No ImagePath
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 Ser2pl; system32\DRIVERS\ser2pl64.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-08 15:07 - 2014-01-08 15:07 - 00000000 ____D C:\Users\TBLap\Downloads\ProcessExplorer
2014-01-08 15:04 - 2014-01-08 15:04 - 01191834 _____ C:\Users\TBLap\Downloads\ProcessExplorer.zip
2014-01-07 22:04 - 2014-01-07 22:04 - 00007643 _____ C:\Users\TBLap\AppData\Local\Resmon.ResmonCfg
2014-01-07 21:22 - 2014-01-08 15:24 - 00000000 ____D C:\Users\TBLap\Downloads\FRST-OlderVersion
2014-01-07 21:13 - 2014-01-07 21:13 - 00000757 _____ C:\Users\TBLap\Desktop\JRT.txt
2014-01-07 21:07 - 2014-01-07 21:07 - 00000000 ____D C:\Windows\ERUNT
2014-01-07 21:02 - 2014-01-07 21:03 - 01036305 _____ (Thisisu) C:\Users\TBLap\Downloads\JRT.exe
2014-01-07 20:29 - 2014-01-07 20:29 - 01233962 _____ C:\Users\TBLap\Desktop\adwcleaner.exe
2014-01-07 20:28 - 2014-01-07 20:49 - 00000000 ____D C:\AdwCleaner
2014-01-07 20:28 - 2014-01-07 20:28 - 01233962 _____ C:\Users\TBLap\Downloads\adwcleaner.exe
2014-01-07 20:19 - 2014-01-07 20:19 - 00000000 ____D C:\Users\TBLap\AppData\Roaming\Malwarebytes
2014-01-07 20:19 - 2014-01-07 20:19 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-07 20:19 - 2014-01-07 20:19 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-07 20:19 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-07 20:16 - 2014-01-07 20:17 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\TBLap\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-06 20:06 - 2014-01-06 20:15 - 129598176 _____ C:\Users\TBLap\Downloads\avira_free_antivirus_de.exe
2014-01-06 12:25 - 2014-01-06 12:25 - 00039166 _____ C:\ComboFix.txt
2014-01-06 11:01 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2014-01-06 11:01 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2014-01-06 11:01 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-01-06 11:01 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-01-06 11:01 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-01-06 11:01 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2014-01-06 11:01 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2014-01-06 11:01 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2014-01-06 10:32 - 2014-01-06 12:25 - 00000000 ____D C:\Qoobox
2014-01-06 10:32 - 2014-01-06 11:10 - 00000000 ____D C:\Windows\erdnt
2014-01-06 10:28 - 2014-01-06 10:29 - 05160001 ____R (Swearware) C:\Users\TBLap\Downloads\ComboFix.exe
2014-01-03 16:14 - 2014-01-04 11:23 - 00000068 _____ C:\Users\TBLap\AppData\Roaming\WB.CFG
2014-01-03 15:22 - 2014-01-03 15:24 - 00038411 _____ C:\Users\TBLap\Downloads\Addition.txt
2014-01-03 15:21 - 2014-01-08 15:24 - 00017383 _____ C:\Users\TBLap\Downloads\FRST.txt
2014-01-03 15:21 - 2014-01-08 15:24 - 00000000 ____D C:\FRST
2014-01-03 15:21 - 2014-01-06 11:10 - 00000000 ____D C:\Program Files (x86)\VLC Player GPU+
2014-01-03 15:19 - 2014-01-08 15:24 - 01932624 _____ (Farbar) C:\Users\TBLap\Downloads\FRST64.exe
2014-01-03 15:17 - 2014-01-06 11:07 - 00000464 _____ C:\Users\TBLap\daemonprocess.txt
2014-01-03 15:17 - 2014-01-03 16:48 - 00000000 ____D C:\Users\TBLap\AppData\Local\genienext
2014-01-03 15:17 - 2014-01-03 16:48 - 00000000 ____D C:\Users\TBLap\AppData\Local\cache
2014-01-03 15:17 - 2014-01-03 15:17 - 00001107 _____ C:\Users\TBLap\Desktop\Continue AnyProtect Installation.lnk
2014-01-03 15:17 - 2014-01-03 15:17 - 00000000 ____D C:\Users\TBLap\.android
2014-01-03 10:47 - 2014-01-03 10:47 - 02209056 _____ C:\Users\TBLap\Downloads\avira-eu-cleaner_de.exe
2014-01-03 10:47 - 2014-01-03 10:47 - 00002025 _____ C:\Users\TBLap\Desktop\Entfernen des Avira EU-Cleaners.lnk
2014-01-03 10:47 - 2014-01-03 10:47 - 00001969 _____ C:\Users\TBLap\Desktop\Avira EU-Cleaner.lnk
2014-01-03 09:42 - 2014-01-03 09:45 - 25647320 _____ (Microsoft Corporation) C:\Users\TBLap\Downloads\Windows-KB890830-x64-V5.7.exe
2014-01-03 08:31 - 2014-01-03 08:31 - 00003130 _____ C:\Windows\System32\Tasks\{2A462003-E8A4-4748-84FD-6CF0C2309A6F}
2014-01-03 08:23 - 2014-01-03 08:23 - 01988724 _____ (Igor Pavlov) C:\Users\TBLap\Downloads\OXConnector.exe
2014-01-03 02:51 - 2014-01-03 02:51 - 01731712 _____ C:\Windows\Minidump\010314-14352-01.dmp
2014-01-02 15:57 - 2014-01-02 15:57 - 01783632 _____ C:\Windows\Minidump\010214-16333-01.dmp
2013-12-31 11:25 - 2013-12-31 11:47 - 00000000 ____D C:\Users\TBLap\.freemind
2013-12-31 11:24 - 2013-12-31 11:24 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-12-31 11:24 - 2013-12-31 11:24 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-12-31 11:24 - 2013-12-31 11:24 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-12-31 11:24 - 2013-12-31 11:24 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-12-31 11:24 - 2013-12-31 11:24 - 00000000 ____D C:\ProgramData\Sun
2013-12-31 11:24 - 2013-12-31 11:24 - 00000000 ____D C:\ProgramData\Oracle
2013-12-31 11:24 - 2013-12-31 11:24 - 00000000 ____D C:\Program Files (x86)\Java
2013-12-31 11:20 - 2013-12-31 11:20 - 00915368 _____ (Oracle Corporation) C:\Users\TBLap\Downloads\jxpiinstall.exe
2013-12-31 11:20 - 2013-12-31 11:20 - 00000000 ____D C:\Program Files (x86)\FreeMind
2013-12-31 11:12 - 2013-12-31 11:15 - 37618815 _____ (                                                            ) C:\Users\TBLap\Downloads\FreeMind-Windows-Installer-1.0.0-max.exe
2013-12-23 10:26 - 2013-12-23 10:26 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-14 14:28 - 2013-12-14 14:28 - 00000000 ____D C:\Program Files (x86)\Open-Xchange
2013-12-14 03:01 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-14 03:01 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-14 03:01 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-14 03:01 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-14 03:01 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-14 03:01 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-14 03:01 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-14 03:01 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-14 03:01 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-14 03:01 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-14 03:01 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-14 03:01 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-14 03:01 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-14 03:01 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-14 03:01 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-14 03:01 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-14 03:01 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-14 03:00 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-14 03:00 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-14 03:00 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-14 03:00 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-14 03:00 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-14 03:00 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-14 03:00 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-14 03:00 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-14 03:00 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-14 03:00 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-14 03:00 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-14 03:00 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-14 03:00 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-14 03:00 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-14 03:00 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-14 03:00 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-14 03:00 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-14 03:00 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-13 09:33 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-13 09:33 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-13 09:33 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-13 09:33 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-13 09:33 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-13 09:33 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-13 09:33 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-13 09:33 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-13 09:33 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-13 09:33 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-13 09:33 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-13 09:32 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-13 09:32 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-13 09:32 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-13 09:32 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-13 09:32 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-13 09:32 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-13 09:32 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-13 09:32 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe

==================== One Month Modified Files and Folders =======

2014-01-08 15:24 - 2014-01-07 21:22 - 00000000 ____D C:\Users\TBLap\Downloads\FRST-OlderVersion
2014-01-08 15:24 - 2014-01-03 15:21 - 00017383 _____ C:\Users\TBLap\Downloads\FRST.txt
2014-01-08 15:24 - 2014-01-03 15:21 - 00000000 ____D C:\FRST
2014-01-08 15:24 - 2014-01-03 15:19 - 01932624 _____ (Farbar) C:\Users\TBLap\Downloads\FRST64.exe
2014-01-08 15:24 - 2012-11-07 19:49 - 00000000 ____D C:\Users\TBLap\AppData\Roaming\Dropbox
2014-01-08 15:23 - 2012-11-22 14:09 - 00000000 ____D C:\Users\TBLap\AppData\Roaming\Skype
2014-01-08 15:07 - 2014-01-08 15:07 - 00000000 ____D C:\Users\TBLap\Downloads\ProcessExplorer
2014-01-08 15:07 - 2012-11-07 12:16 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-08 15:04 - 2014-01-08 15:04 - 01191834 _____ C:\Users\TBLap\Downloads\ProcessExplorer.zip
2014-01-08 15:04 - 2012-11-06 19:34 - 01483369 _____ C:\Windows\WindowsUpdate.log
2014-01-08 14:55 - 2013-12-05 00:34 - 00000000 ____D C:\Users\TBLap\AppData\Local\CrashDumps
2014-01-08 14:32 - 2012-12-12 15:49 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-08 13:08 - 2012-11-30 09:10 - 00000000 ____D C:\Program Files (x86)\LingoPad
2014-01-08 06:40 - 2012-11-07 00:16 - 00000000 ____D C:\Users\TBLap\AppData\Local\OXSTORE2
2014-01-08 06:08 - 2012-11-07 19:34 - 00000000 ___RD C:\Users\TBLap\Google Drive
2014-01-08 06:06 - 2012-11-07 12:16 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-07 22:32 - 2011-04-12 08:43 - 00700592 _____ C:\Windows\system32\perfh007.dat
2014-01-07 22:32 - 2011-04-12 08:43 - 00149356 _____ C:\Windows\system32\perfc007.dat
2014-01-07 22:32 - 2009-07-14 06:13 - 01622004 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-07 22:15 - 2009-07-14 05:45 - 00022352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-07 22:15 - 2009-07-14 05:45 - 00022352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-07 22:08 - 2012-11-15 10:04 - 00000000 ___RD C:\Users\TBLap\Dropbox
2014-01-07 22:08 - 2012-11-12 18:27 - 00216935 _____ C:\ndsvc.log
2014-01-07 22:07 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-07 22:07 - 2009-07-14 05:51 - 00054624 _____ C:\Windows\setupact.log
2014-01-07 22:04 - 2014-01-07 22:04 - 00007643 _____ C:\Users\TBLap\AppData\Local\Resmon.ResmonCfg
2014-01-07 21:13 - 2014-01-07 21:13 - 00000757 _____ C:\Users\TBLap\Desktop\JRT.txt
2014-01-07 21:07 - 2014-01-07 21:07 - 00000000 ____D C:\Windows\ERUNT
2014-01-07 21:03 - 2014-01-07 21:02 - 01036305 _____ (Thisisu) C:\Users\TBLap\Downloads\JRT.exe
2014-01-07 20:49 - 2014-01-07 20:28 - 00000000 ____D C:\AdwCleaner
2014-01-07 20:30 - 2010-11-21 04:47 - 00069666 _____ C:\Windows\PFRO.log
2014-01-07 20:29 - 2014-01-07 20:29 - 01233962 _____ C:\Users\TBLap\Desktop\adwcleaner.exe
2014-01-07 20:28 - 2014-01-07 20:28 - 01233962 _____ C:\Users\TBLap\Downloads\adwcleaner.exe
2014-01-07 20:19 - 2014-01-07 20:19 - 00000000 ____D C:\Users\TBLap\AppData\Roaming\Malwarebytes
2014-01-07 20:19 - 2014-01-07 20:19 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-07 20:19 - 2014-01-07 20:19 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-07 20:17 - 2014-01-07 20:16 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\TBLap\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-06 20:15 - 2014-01-06 20:06 - 129598176 _____ C:\Users\TBLap\Downloads\avira_free_antivirus_de.exe
2014-01-06 12:25 - 2014-01-06 12:25 - 00039166 _____ C:\ComboFix.txt
2014-01-06 12:25 - 2014-01-06 10:32 - 00000000 ____D C:\Qoobox
2014-01-06 12:21 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini
2014-01-06 11:28 - 2012-11-06 19:36 - 00000000 ___RD C:\Users\TBLap\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-06 11:13 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default
2014-01-06 11:10 - 2014-01-06 10:32 - 00000000 ____D C:\Windows\erdnt
2014-01-06 11:10 - 2014-01-03 15:21 - 00000000 ____D C:\Program Files (x86)\VLC Player GPU+
2014-01-06 11:07 - 2014-01-03 15:17 - 00000464 _____ C:\Users\TBLap\daemonprocess.txt
2014-01-06 10:29 - 2014-01-06 10:28 - 05160001 ____R (Swearware) C:\Users\TBLap\Downloads\ComboFix.exe
2014-01-04 11:23 - 2014-01-03 16:14 - 00000068 _____ C:\Users\TBLap\AppData\Roaming\WB.CFG
2014-01-03 16:48 - 2014-01-03 15:17 - 00000000 ____D C:\Users\TBLap\AppData\Local\genienext
2014-01-03 16:48 - 2014-01-03 15:17 - 00000000 ____D C:\Users\TBLap\AppData\Local\cache
2014-01-03 15:24 - 2014-01-03 15:22 - 00038411 _____ C:\Users\TBLap\Downloads\Addition.txt
2014-01-03 15:17 - 2014-01-03 15:17 - 00001107 _____ C:\Users\TBLap\Desktop\Continue AnyProtect Installation.lnk
2014-01-03 15:17 - 2014-01-03 15:17 - 00000000 ____D C:\Users\TBLap\.android
2014-01-03 15:17 - 2012-11-06 19:36 - 00000000 ____D C:\Users\TBLap
2014-01-03 14:58 - 2013-03-23 15:06 - 00000000 ____D C:\ProgramData\BMWiSoftware
2014-01-03 10:47 - 2014-01-03 10:47 - 02209056 _____ C:\Users\TBLap\Downloads\avira-eu-cleaner_de.exe
2014-01-03 10:47 - 2014-01-03 10:47 - 00002025 _____ C:\Users\TBLap\Desktop\Entfernen des Avira EU-Cleaners.lnk
2014-01-03 10:47 - 2014-01-03 10:47 - 00001969 _____ C:\Users\TBLap\Desktop\Avira EU-Cleaner.lnk
2014-01-03 09:45 - 2014-01-03 09:42 - 25647320 _____ (Microsoft Corporation) C:\Users\TBLap\Downloads\Windows-KB890830-x64-V5.7.exe
2014-01-03 08:31 - 2014-01-03 08:31 - 00003130 _____ C:\Windows\System32\Tasks\{2A462003-E8A4-4748-84FD-6CF0C2309A6F}
2014-01-03 08:23 - 2014-01-03 08:23 - 01988724 _____ (Igor Pavlov) C:\Users\TBLap\Downloads\OXConnector.exe
2014-01-03 08:15 - 2013-08-08 10:50 - 00000000 ____D C:\Users\TBLap\AppData\Roaming\vlc
2014-01-03 02:51 - 2014-01-03 02:51 - 01731712 _____ C:\Windows\Minidump\010314-14352-01.dmp
2014-01-03 02:51 - 2013-03-28 16:53 - 523513159 _____ C:\Windows\MEMORY.DMP
2014-01-03 02:51 - 2013-03-28 16:53 - 00000000 ____D C:\Windows\Minidump
2014-01-02 15:58 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2014-01-02 15:57 - 2014-01-02 15:57 - 01783632 _____ C:\Windows\Minidump\010214-16333-01.dmp
2014-01-02 15:57 - 2012-11-07 11:21 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-02 06:31 - 2013-02-14 12:20 - 00000000 ____D C:\ProgramData\CanonIJPLM
2013-12-31 11:47 - 2013-12-31 11:25 - 00000000 ____D C:\Users\TBLap\.freemind
2013-12-31 11:24 - 2013-12-31 11:24 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-12-31 11:24 - 2013-12-31 11:24 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-12-31 11:24 - 2013-12-31 11:24 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-12-31 11:24 - 2013-12-31 11:24 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-12-31 11:24 - 2013-12-31 11:24 - 00000000 ____D C:\ProgramData\Sun
2013-12-31 11:24 - 2013-12-31 11:24 - 00000000 ____D C:\ProgramData\Oracle
2013-12-31 11:24 - 2013-12-31 11:24 - 00000000 ____D C:\Program Files (x86)\Java
2013-12-31 11:20 - 2013-12-31 11:20 - 00915368 _____ (Oracle Corporation) C:\Users\TBLap\Downloads\jxpiinstall.exe
2013-12-31 11:20 - 2013-12-31 11:20 - 00000000 ____D C:\Program Files (x86)\FreeMind
2013-12-31 11:15 - 2013-12-31 11:12 - 37618815 _____ (                                                            ) C:\Users\TBLap\Downloads\FreeMind-Windows-Installer-1.0.0-max.exe
2013-12-23 10:26 - 2013-12-23 10:26 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-15 03:01 - 2013-08-02 10:23 - 00000000 ____D C:\Windows\system32\MRT
2013-12-14 14:28 - 2013-12-14 14:28 - 00000000 ____D C:\Program Files (x86)\Open-Xchange
2013-12-14 14:28 - 2012-11-07 00:15 - 00000020 _____ C:\Windows\oxstor32.ini
2013-12-14 14:18 - 2012-11-22 14:09 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-12-14 14:18 - 2012-11-22 14:08 - 00000000 ____D C:\ProgramData\Skype
2013-12-14 03:43 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-14 03:18 - 2009-07-14 05:45 - 00432480 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-14 03:01 - 2012-11-06 23:53 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-13 12:20 - 2013-08-27 14:52 - 00000000 ____D C:\Users\TBLap\AppData\Local\Windows Live
2013-12-13 10:33 - 2012-12-12 15:49 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-13 10:33 - 2012-11-13 15:28 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-13 10:33 - 2012-11-13 15:28 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

Some content of TEMP:
====================
C:\Users\TBLap\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-30 11:34

==================== End Of Log ============================
         
--- --- ---
Miniaturansicht angehängter Grafiken
Klicken Sie auf die Grafik für eine größere Ansicht

Name:	2014-01-08_Screenshot_Process Explorer.JPG
Hits:	333
Größe:	227,9 KB
ID:	63615   Klicken Sie auf die Grafik für eine größere Ansicht

Name:	2014-01-08_Screenshot_Process Explorer2.JPG
Hits:	371
Größe:	316,4 KB
ID:	63616  

 

Themen zu Oxtender von Hosteurope auf Win7 Laptop nicht mehr vorhanden, Defender nicht startbar
dateien, defender, gefunde, immernoch, meldungen, mobogenie, mobogenie entfernen, problems, pup.optional.alexatb.a, pup.optional.amazontb.a, pup.optional.crossrider.a, pup.optional.crossrider.m, pup.optional.installcore, pup.optional.installcore.a, pup.optional.nextlive.a, pup.optional.opencandy, pup.optional.searchprotect, versuch, versucht, vorhanden, win7, windows




Ähnliche Themen: Oxtender von Hosteurope auf Win7 Laptop nicht mehr vorhanden, Defender nicht startbar


  1. Win7 und Win8.1 sfc kann defekte Dateien nicht reparieren / Win8.1 abgesicherter Modus nicht startbar?
    Alles rund um Windows - 11.10.2015 (27)
  2. windowa 8.1: Programme nicht mehr startbar
    Log-Analyse und Auswertung - 11.11.2014 (5)
  3. Laptop WIN7: funktioniert kein WLAN mehr, Mozilla spinnt rum, Intel RST Service läuft nicht, Meldungen im Wartungscenter
    Plagegeister aller Art und deren Bekämpfung - 03.11.2014 (37)
  4. Laptop WIN7: funktioniert kein WLAN mehr, Mozilla spinnt rum, Intel RST Service läuft nicht, Meldungen im Wartungscenter
    Alles rund um Windows - 07.10.2014 (1)
  5. Win7: Einige wenige Programme funktionieren nicht mehr und Laptop wird langsam.
    Log-Analyse und Auswertung - 25.05.2014 (20)
  6. Nach Erkennung von Trojaner, Würmer und Virus ist Windows nicht mehr startbar
    Plagegeister aller Art und deren Bekämpfung - 16.03.2014 (13)
  7. Rechner lahmt + Win Defender nicht mehr aktivi
    Plagegeister aller Art und deren Bekämpfung - 23.10.2013 (16)
  8. Opera & Win7 Abstürze, Avira Echtzeitscanner & Browserschutz deaktiviert und nicht startbar
    Log-Analyse und Auswertung - 15.09.2013 (9)
  9. Win7: GVU Trojaner, Abgesicherter Modus sowie Booten von USB und CD nicht möglich, FRST Logfile vorhanden
    Log-Analyse und Auswertung - 29.08.2013 (21)
  10. Trojaner Sirefef.AG.9 u. Sirefef.AL.50 in C:\$Recycle.Bin\, Vista-Sicherheitscenter u. Firewall nach anschl. VistaUpdate nicht mehr startbar
    Plagegeister aller Art und deren Bekämpfung - 06.03.2013 (41)
  11. Win8 Firwall + Defender nicht mehr aktivierbar
    Log-Analyse und Auswertung - 26.01.2013 (19)
  12. Win7 herunterfahren Button reagiert nicht, strg+alt+entf geht nicht mehr & cmd.exe geht nicht auf
    Plagegeister aller Art und deren Bekämpfung - 15.12.2011 (25)
  13. Nach Virensuche Kaspersky nicht mehr startbar
    Plagegeister aller Art und deren Bekämpfung - 15.04.2011 (12)
  14. XP Defender Pro; Exe-Dateien gehen nicht mehr
    Plagegeister aller Art und deren Bekämpfung - 28.04.2010 (7)
  15. System Defender - Laptop fährt gar nicht mehr hoch
    Plagegeister aller Art und deren Bekämpfung - 10.12.2009 (0)
  16. T-online software nicht mehr startbar / Trojanerfund mit Antivir
    Log-Analyse und Auswertung - 13.01.2005 (5)
  17. Explorer.exe / Iexplorer Nach Virus Nicht Mehr Startbar !! Hilfe
    Log-Analyse und Auswertung - 10.11.2004 (3)

Zum Thema Oxtender von Hosteurope auf Win7 Laptop nicht mehr vorhanden, Defender nicht startbar - Hallo schrauber, anbei die Anhänge. VG Tom FRST Logfile: Code: Alles auswählen Aufklappen ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-01-2014 Ran by TBLap (administrator) on - Oxtender von Hosteurope auf Win7 Laptop nicht mehr vorhanden, Defender nicht startbar...
Archiv
Du betrachtest: Oxtender von Hosteurope auf Win7 Laptop nicht mehr vorhanden, Defender nicht startbar auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.