![]() |
|
Plagegeister aller Art und deren Bekämpfung: Oxtender von Hosteurope auf Win7 Laptop nicht mehr vorhanden, Defender nicht startbarWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() | #11 |
![]() | ![]() Oxtender von Hosteurope auf Win7 Laptop nicht mehr vorhanden, Defender nicht startbar Hallo schrauber, anbei die Anhänge. VG Tom FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-01-2014 Ran by TBLap (administrator) on TBLAP-PC on 08-01-2014 15:24:10 Running from C:\Users\TBLap\Downloads Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AuthenTec, Inc) C:\Program Files\AuthenTec TrueSuite\TrueSuiteService.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe () C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe (Bdrive Inc.) C:\Program Files\NetDrive\ndsvc.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Sierra Wireless, Inc.) C:\Program Files (x86)\Sierra Wireless Inc\Common\SwiCardDetect64.exe (Sierra Wireless, Inc.) C:\Program Files (x86)\Sierra Wireless Inc\QMIPackage\Utils\SwiService.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgr.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe () C:\Program Files (x86)\OneClickInternet\WTGService.exe (Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe (Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler64.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Akamai Technologies, Inc.) C:\Users\TBLap\AppData\Local\Akamai\netsession_win.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (Dropbox, Inc.) C:\Users\TBLap\AppData\Roaming\Dropbox\bin\Dropbox.exe (Akamai Technologies, Inc.) C:\Users\TBLap\AppData\Local\Akamai\netsession_win.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Sierra Wireless, Inc.) C:\Program Files (x86)\Sierra Wireless Inc\WebUpdater\TRUUpdater.exe (Sierra Wireless Inc.) C:\Program Files (x86)\Sierra Wireless Inc\3G Watcher\WaHelper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Bdrive Inc.) C:\Program Files\NetDrive\netdrive.exe (CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe (CANON INC.) C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Microsoft Corporation) C:\Windows\splwow64.exe (Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe (Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe (Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMgr.exe (Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe (Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe (Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe (Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMService.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\Evernote.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteTray.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE () C:\Program Files (x86)\VLC Player GPU+\GPUMonitor.exe (AuthenTec Inc.) C:\Program Files\AuthenTec TrueSuite\TouchControl.exe (AuthenTec Inc.) C:\Program Files\AuthenTec TrueSuite\BioMonitor.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation) HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-05-01] (Intel Corporation) HKLM-x32\...\Run: [TRUUpdater] - C:\Program Files (x86)\Sierra Wireless Inc\WebUpdater\TRUUpdater.exe [329072 2011-11-03] (Sierra Wireless, Inc.) HKLM-x32\...\Run: [WatcherHelper] - C:\Program Files (x86)\Sierra Wireless Inc\3G Watcher\WaHelper.exe [140656 2011-08-04] (Sierra Wireless Inc.) HKLM-x32\...\Run: [ISBMgr.exe] - C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [60552 2011-09-20] (Sony Corporation) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM-x32\...\Run: [NetDrive] - C:\Program Files\NetDrive\netdrive.exe [3587072 2013-03-16] (Bdrive Inc.) HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] - C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [468112 2011-07-25] (CANON INC.) HKLM-x32\...\Run: [CanonSolutionMenuEx] - C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1316248 2010-12-02] (CANON INC.) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM-x32\...\Run: [GPULoader] - C:\Program Files (x86)\VLC Player GPU+\GPULog.exe [1328864 2013-12-27] () Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKCU\...\Run: [GoogleDriveSync] - C:\Program Files (x86)\Google\Drive\googledrivesync.exe [20203904 2013-12-06] (Google) HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\TBLap\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.) HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.) AppInit_DLLs: C:\Windows\System32\nvinitx.dll [247144 2012-10-08] (NVIDIA Corporation) AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [202600 2012-10-08] (NVIDIA Corporation) IFEO\taskmgr.exe: [Debugger] "C:\USERS\TBLAP\DOWNLOADS\PROCESSEXPLORER\PROCEXP.EXE" Startup: C:\Users\TBLap\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\TBLap\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\TBLap\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) Startup: C:\Users\TBLap\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.amazon.de/gp/bit/amazonserp/ref=bit_bds-p18_serp_ie_de_display?ie=UTF8&tagbase=bds-p18&tbrId=v1_abb-channel-18_7c3e267f89814993a1d975c30ac0da75_18_38_20130131_DE_ie_sp_OC1 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x1C9D6F465DBCCD01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe BHO: TrueSuite Website Log On - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\AuthenTec TrueSuite\IEBHO.dll (AuthenTec Inc.) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: TrueSuite Website Log On - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\AuthenTec TrueSuite\x86\IEBHO.dll (AuthenTec Inc.) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 Tcpip\..\Interfaces\{A4AF28B0-FA45-43DD-A670-ED981819DF2A}: [NameServer]139.7.30.126 139.7.30.125 FireFox: ======== FF ProfilePath: C:\Users\TBLap\AppData\Roaming\Mozilla\Firefox\Profiles\1a6n4efa.default FF SearchEngineOrder.1: Amazon FF Homepage: hxxp://www.handelsblatt.com/ FF Keyword.URL: hxxp://www.amazon.de/gp/bit/amazonserp/ref=bit_bds-p18_serp_ff_de_display?ie=UTF8&tag=bds-p18-serp-de-ff-21&tagbase=bds-p18&tbrId=v1_abb-channel-18_7c3e267f89814993a1d975c30ac0da75_18_38_20130131_DE_ff_ab_OC1&query= FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.) FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @autodesk.com/DWF - C:\Program Files (x86)\Autodesk\Autodesk Design Review Browser Add-on v1.2\npADRdwf.dll (Autodesk) FF Plugin HKCU: @citrixonline.com/appdetectorplugin - C:\Users\TBLap\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online) FF SearchPlugin: C:\Users\TBLap\AppData\Roaming\Mozilla\Firefox\Profiles\1a6n4efa.default\searchplugins\amazon-distro.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Fingerfox (SE) - C:\Users\TBLap\AppData\Roaming\Mozilla\Firefox\Profiles\1a6n4efa.default\Extensions\{58c64034-c5f3-4179-85f5-81642f42b6d5} FF Extension: Amazon Browser Apps - C:\Users\TBLap\AppData\Roaming\Mozilla\Firefox\Profiles\1a6n4efa.default\Extensions\abb@amazon.com.xpi FF Extension: Youtube Downloader - Media Downloader - C:\Users\TBLap\AppData\Roaming\Mozilla\Firefox\Profiles\1a6n4efa.default\Extensions\paulsaintuzb@gmail.com.xpi FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} ==================== Services (Whitelisted) ================= R2 Akamai; c:\program files (x86)\common files\akamai/netsession_win_8fa3539.dll [4569856 2013-07-01] (Akamai Technologies, Inc.) R2 FPLService; C:\Program Files\AuthenTec TrueSuite\TrueSuiteService.exe [300360 2012-02-20] (AuthenTec, Inc) R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [137680 2010-07-27] () R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273168 2011-12-08] () R2 ndsvc; C:\Program Files\NetDrive\ndsvc.exe [2789376 2013-03-16] (Bdrive Inc.) R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation) R2 SwiCardDetectSvc; C:\Program Files (x86)\Sierra Wireless Inc\Common\SwiCardDetect64.exe [323952 2012-03-08] (Sierra Wireless, Inc.) R2 SwiService; C:\Program Files (x86)\Sierra Wireless Inc\QMIPackage\Utils\SWIService.exe [152944 2012-01-13] (Sierra Wireless, Inc.) R2 WTGService; C:\Program Files (x86)\OneClickInternet\WTGService.exe [342984 2011-03-09] () R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [594704 2011-12-08] (Intel® Corporation) ==================== Drivers (Whitelisted) ==================== R3 gobi3kfilter; C:\Windows\System32\DRIVERS\gobi3kfilter.sys [34304 2010-12-13] (QUALCOMM Incorporated) R3 gobi3kmbb; C:\Windows\System32\DRIVERS\gobi3kmbb.sys [399872 2011-04-21] (QUALCOMM Incorporated) R3 gobi3kserial; C:\Windows\System32\DRIVERS\gobi3kserial.sys [233984 2010-12-13] (QUALCOMM Incorporated) R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation) S3 ndfs; C:\Program Files\NetDrive\ndfs.sys [63712 2013-02-01] (Bdrive Inc.) R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation) S3 PcaSp60; C:\Windows\SysWow64\DRIVERS\PcaSp60.sys [38912 2010-09-07] (Printing Communications Assoc., Inc. (PCAUSA)) S3 SWUMX20; No ImagePath S3 catchme; \??\C:\ComboFix\catchme.sys [x] S3 Ser2pl; system32\DRIVERS\ser2pl64.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-08 15:07 - 2014-01-08 15:07 - 00000000 ____D C:\Users\TBLap\Downloads\ProcessExplorer 2014-01-08 15:04 - 2014-01-08 15:04 - 01191834 _____ C:\Users\TBLap\Downloads\ProcessExplorer.zip 2014-01-07 22:04 - 2014-01-07 22:04 - 00007643 _____ C:\Users\TBLap\AppData\Local\Resmon.ResmonCfg 2014-01-07 21:22 - 2014-01-08 15:24 - 00000000 ____D C:\Users\TBLap\Downloads\FRST-OlderVersion 2014-01-07 21:13 - 2014-01-07 21:13 - 00000757 _____ C:\Users\TBLap\Desktop\JRT.txt 2014-01-07 21:07 - 2014-01-07 21:07 - 00000000 ____D C:\Windows\ERUNT 2014-01-07 21:02 - 2014-01-07 21:03 - 01036305 _____ (Thisisu) C:\Users\TBLap\Downloads\JRT.exe 2014-01-07 20:29 - 2014-01-07 20:29 - 01233962 _____ C:\Users\TBLap\Desktop\adwcleaner.exe 2014-01-07 20:28 - 2014-01-07 20:49 - 00000000 ____D C:\AdwCleaner 2014-01-07 20:28 - 2014-01-07 20:28 - 01233962 _____ C:\Users\TBLap\Downloads\adwcleaner.exe 2014-01-07 20:19 - 2014-01-07 20:19 - 00000000 ____D C:\Users\TBLap\AppData\Roaming\Malwarebytes 2014-01-07 20:19 - 2014-01-07 20:19 - 00000000 ____D C:\ProgramData\Malwarebytes 2014-01-07 20:19 - 2014-01-07 20:19 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-01-07 20:19 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-01-07 20:16 - 2014-01-07 20:17 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\TBLap\Downloads\mbam-setup-1.75.0.1300.exe 2014-01-06 20:06 - 2014-01-06 20:15 - 129598176 _____ C:\Users\TBLap\Downloads\avira_free_antivirus_de.exe 2014-01-06 12:25 - 2014-01-06 12:25 - 00039166 _____ C:\ComboFix.txt 2014-01-06 11:01 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe 2014-01-06 11:01 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe 2014-01-06 11:01 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-01-06 11:01 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-01-06 11:01 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-01-06 11:01 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe 2014-01-06 11:01 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe 2014-01-06 11:01 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe 2014-01-06 10:32 - 2014-01-06 12:25 - 00000000 ____D C:\Qoobox 2014-01-06 10:32 - 2014-01-06 11:10 - 00000000 ____D C:\Windows\erdnt 2014-01-06 10:28 - 2014-01-06 10:29 - 05160001 ____R (Swearware) C:\Users\TBLap\Downloads\ComboFix.exe 2014-01-03 16:14 - 2014-01-04 11:23 - 00000068 _____ C:\Users\TBLap\AppData\Roaming\WB.CFG 2014-01-03 15:22 - 2014-01-03 15:24 - 00038411 _____ C:\Users\TBLap\Downloads\Addition.txt 2014-01-03 15:21 - 2014-01-08 15:24 - 00017383 _____ C:\Users\TBLap\Downloads\FRST.txt 2014-01-03 15:21 - 2014-01-08 15:24 - 00000000 ____D C:\FRST 2014-01-03 15:21 - 2014-01-06 11:10 - 00000000 ____D C:\Program Files (x86)\VLC Player GPU+ 2014-01-03 15:19 - 2014-01-08 15:24 - 01932624 _____ (Farbar) C:\Users\TBLap\Downloads\FRST64.exe 2014-01-03 15:17 - 2014-01-06 11:07 - 00000464 _____ C:\Users\TBLap\daemonprocess.txt 2014-01-03 15:17 - 2014-01-03 16:48 - 00000000 ____D C:\Users\TBLap\AppData\Local\genienext 2014-01-03 15:17 - 2014-01-03 16:48 - 00000000 ____D C:\Users\TBLap\AppData\Local\cache 2014-01-03 15:17 - 2014-01-03 15:17 - 00001107 _____ C:\Users\TBLap\Desktop\Continue AnyProtect Installation.lnk 2014-01-03 15:17 - 2014-01-03 15:17 - 00000000 ____D C:\Users\TBLap\.android 2014-01-03 10:47 - 2014-01-03 10:47 - 02209056 _____ C:\Users\TBLap\Downloads\avira-eu-cleaner_de.exe 2014-01-03 10:47 - 2014-01-03 10:47 - 00002025 _____ C:\Users\TBLap\Desktop\Entfernen des Avira EU-Cleaners.lnk 2014-01-03 10:47 - 2014-01-03 10:47 - 00001969 _____ C:\Users\TBLap\Desktop\Avira EU-Cleaner.lnk 2014-01-03 09:42 - 2014-01-03 09:45 - 25647320 _____ (Microsoft Corporation) C:\Users\TBLap\Downloads\Windows-KB890830-x64-V5.7.exe 2014-01-03 08:31 - 2014-01-03 08:31 - 00003130 _____ C:\Windows\System32\Tasks\{2A462003-E8A4-4748-84FD-6CF0C2309A6F} 2014-01-03 08:23 - 2014-01-03 08:23 - 01988724 _____ (Igor Pavlov) C:\Users\TBLap\Downloads\OXConnector.exe 2014-01-03 02:51 - 2014-01-03 02:51 - 01731712 _____ C:\Windows\Minidump\010314-14352-01.dmp 2014-01-02 15:57 - 2014-01-02 15:57 - 01783632 _____ C:\Windows\Minidump\010214-16333-01.dmp 2013-12-31 11:25 - 2013-12-31 11:47 - 00000000 ____D C:\Users\TBLap\.freemind 2013-12-31 11:24 - 2013-12-31 11:24 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2013-12-31 11:24 - 2013-12-31 11:24 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2013-12-31 11:24 - 2013-12-31 11:24 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2013-12-31 11:24 - 2013-12-31 11:24 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2013-12-31 11:24 - 2013-12-31 11:24 - 00000000 ____D C:\ProgramData\Sun 2013-12-31 11:24 - 2013-12-31 11:24 - 00000000 ____D C:\ProgramData\Oracle 2013-12-31 11:24 - 2013-12-31 11:24 - 00000000 ____D C:\Program Files (x86)\Java 2013-12-31 11:20 - 2013-12-31 11:20 - 00915368 _____ (Oracle Corporation) C:\Users\TBLap\Downloads\jxpiinstall.exe 2013-12-31 11:20 - 2013-12-31 11:20 - 00000000 ____D C:\Program Files (x86)\FreeMind 2013-12-31 11:12 - 2013-12-31 11:15 - 37618815 _____ ( ) C:\Users\TBLap\Downloads\FreeMind-Windows-Installer-1.0.0-max.exe 2013-12-23 10:26 - 2013-12-23 10:26 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-12-14 14:28 - 2013-12-14 14:28 - 00000000 ____D C:\Program Files (x86)\Open-Xchange 2013-12-14 03:01 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-12-14 03:01 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-12-14 03:01 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-12-14 03:01 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-12-14 03:01 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-12-14 03:01 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-12-14 03:01 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-12-14 03:01 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-12-14 03:01 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-12-14 03:01 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-12-14 03:01 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-12-14 03:01 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-12-14 03:01 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-12-14 03:01 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2013-12-14 03:01 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2013-12-14 03:01 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL 2013-12-14 03:01 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2013-12-14 03:00 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-12-14 03:00 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-12-14 03:00 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-12-14 03:00 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-12-14 03:00 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-12-14 03:00 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-12-14 03:00 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-12-14 03:00 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-12-14 03:00 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-12-14 03:00 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-12-14 03:00 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-12-14 03:00 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-12-14 03:00 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-12-14 03:00 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-12-14 03:00 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-12-14 03:00 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-12-14 03:00 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-12-14 03:00 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-12-13 09:33 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2013-12-13 09:33 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2013-12-13 09:33 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-12-13 09:33 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2013-12-13 09:33 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll 2013-12-13 09:33 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll 2013-12-13 09:33 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-12-13 09:33 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2013-12-13 09:33 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll 2013-12-13 09:33 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2013-12-13 09:33 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2013-12-13 09:32 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2013-12-13 09:32 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2013-12-13 09:32 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx 2013-12-13 09:32 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll 2013-12-13 09:32 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2013-12-13 09:32 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2013-12-13 09:32 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe 2013-12-13 09:32 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe ==================== One Month Modified Files and Folders ======= 2014-01-08 15:24 - 2014-01-07 21:22 - 00000000 ____D C:\Users\TBLap\Downloads\FRST-OlderVersion 2014-01-08 15:24 - 2014-01-03 15:21 - 00017383 _____ C:\Users\TBLap\Downloads\FRST.txt 2014-01-08 15:24 - 2014-01-03 15:21 - 00000000 ____D C:\FRST 2014-01-08 15:24 - 2014-01-03 15:19 - 01932624 _____ (Farbar) C:\Users\TBLap\Downloads\FRST64.exe 2014-01-08 15:24 - 2012-11-07 19:49 - 00000000 ____D C:\Users\TBLap\AppData\Roaming\Dropbox 2014-01-08 15:23 - 2012-11-22 14:09 - 00000000 ____D C:\Users\TBLap\AppData\Roaming\Skype 2014-01-08 15:07 - 2014-01-08 15:07 - 00000000 ____D C:\Users\TBLap\Downloads\ProcessExplorer 2014-01-08 15:07 - 2012-11-07 12:16 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-01-08 15:04 - 2014-01-08 15:04 - 01191834 _____ C:\Users\TBLap\Downloads\ProcessExplorer.zip 2014-01-08 15:04 - 2012-11-06 19:34 - 01483369 _____ C:\Windows\WindowsUpdate.log 2014-01-08 14:55 - 2013-12-05 00:34 - 00000000 ____D C:\Users\TBLap\AppData\Local\CrashDumps 2014-01-08 14:32 - 2012-12-12 15:49 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-01-08 13:08 - 2012-11-30 09:10 - 00000000 ____D C:\Program Files (x86)\LingoPad 2014-01-08 06:40 - 2012-11-07 00:16 - 00000000 ____D C:\Users\TBLap\AppData\Local\OXSTORE2 2014-01-08 06:08 - 2012-11-07 19:34 - 00000000 ___RD C:\Users\TBLap\Google Drive 2014-01-08 06:06 - 2012-11-07 12:16 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-01-07 22:32 - 2011-04-12 08:43 - 00700592 _____ C:\Windows\system32\perfh007.dat 2014-01-07 22:32 - 2011-04-12 08:43 - 00149356 _____ C:\Windows\system32\perfc007.dat 2014-01-07 22:32 - 2009-07-14 06:13 - 01622004 _____ C:\Windows\system32\PerfStringBackup.INI 2014-01-07 22:15 - 2009-07-14 05:45 - 00022352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-07 22:15 - 2009-07-14 05:45 - 00022352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-07 22:08 - 2012-11-15 10:04 - 00000000 ___RD C:\Users\TBLap\Dropbox 2014-01-07 22:08 - 2012-11-12 18:27 - 00216935 _____ C:\ndsvc.log 2014-01-07 22:07 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2014-01-07 22:07 - 2009-07-14 05:51 - 00054624 _____ C:\Windows\setupact.log 2014-01-07 22:04 - 2014-01-07 22:04 - 00007643 _____ C:\Users\TBLap\AppData\Local\Resmon.ResmonCfg 2014-01-07 21:13 - 2014-01-07 21:13 - 00000757 _____ C:\Users\TBLap\Desktop\JRT.txt 2014-01-07 21:07 - 2014-01-07 21:07 - 00000000 ____D C:\Windows\ERUNT 2014-01-07 21:03 - 2014-01-07 21:02 - 01036305 _____ (Thisisu) C:\Users\TBLap\Downloads\JRT.exe 2014-01-07 20:49 - 2014-01-07 20:28 - 00000000 ____D C:\AdwCleaner 2014-01-07 20:30 - 2010-11-21 04:47 - 00069666 _____ C:\Windows\PFRO.log 2014-01-07 20:29 - 2014-01-07 20:29 - 01233962 _____ C:\Users\TBLap\Desktop\adwcleaner.exe 2014-01-07 20:28 - 2014-01-07 20:28 - 01233962 _____ C:\Users\TBLap\Downloads\adwcleaner.exe 2014-01-07 20:19 - 2014-01-07 20:19 - 00000000 ____D C:\Users\TBLap\AppData\Roaming\Malwarebytes 2014-01-07 20:19 - 2014-01-07 20:19 - 00000000 ____D C:\ProgramData\Malwarebytes 2014-01-07 20:19 - 2014-01-07 20:19 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-01-07 20:17 - 2014-01-07 20:16 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\TBLap\Downloads\mbam-setup-1.75.0.1300.exe 2014-01-06 20:15 - 2014-01-06 20:06 - 129598176 _____ C:\Users\TBLap\Downloads\avira_free_antivirus_de.exe 2014-01-06 12:25 - 2014-01-06 12:25 - 00039166 _____ C:\ComboFix.txt 2014-01-06 12:25 - 2014-01-06 10:32 - 00000000 ____D C:\Qoobox 2014-01-06 12:21 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini 2014-01-06 11:28 - 2012-11-06 19:36 - 00000000 ___RD C:\Users\TBLap\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-01-06 11:13 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default 2014-01-06 11:10 - 2014-01-06 10:32 - 00000000 ____D C:\Windows\erdnt 2014-01-06 11:10 - 2014-01-03 15:21 - 00000000 ____D C:\Program Files (x86)\VLC Player GPU+ 2014-01-06 11:07 - 2014-01-03 15:17 - 00000464 _____ C:\Users\TBLap\daemonprocess.txt 2014-01-06 10:29 - 2014-01-06 10:28 - 05160001 ____R (Swearware) C:\Users\TBLap\Downloads\ComboFix.exe 2014-01-04 11:23 - 2014-01-03 16:14 - 00000068 _____ C:\Users\TBLap\AppData\Roaming\WB.CFG 2014-01-03 16:48 - 2014-01-03 15:17 - 00000000 ____D C:\Users\TBLap\AppData\Local\genienext 2014-01-03 16:48 - 2014-01-03 15:17 - 00000000 ____D C:\Users\TBLap\AppData\Local\cache 2014-01-03 15:24 - 2014-01-03 15:22 - 00038411 _____ C:\Users\TBLap\Downloads\Addition.txt 2014-01-03 15:17 - 2014-01-03 15:17 - 00001107 _____ C:\Users\TBLap\Desktop\Continue AnyProtect Installation.lnk 2014-01-03 15:17 - 2014-01-03 15:17 - 00000000 ____D C:\Users\TBLap\.android 2014-01-03 15:17 - 2012-11-06 19:36 - 00000000 ____D C:\Users\TBLap 2014-01-03 14:58 - 2013-03-23 15:06 - 00000000 ____D C:\ProgramData\BMWiSoftware 2014-01-03 10:47 - 2014-01-03 10:47 - 02209056 _____ C:\Users\TBLap\Downloads\avira-eu-cleaner_de.exe 2014-01-03 10:47 - 2014-01-03 10:47 - 00002025 _____ C:\Users\TBLap\Desktop\Entfernen des Avira EU-Cleaners.lnk 2014-01-03 10:47 - 2014-01-03 10:47 - 00001969 _____ C:\Users\TBLap\Desktop\Avira EU-Cleaner.lnk 2014-01-03 09:45 - 2014-01-03 09:42 - 25647320 _____ (Microsoft Corporation) C:\Users\TBLap\Downloads\Windows-KB890830-x64-V5.7.exe 2014-01-03 08:31 - 2014-01-03 08:31 - 00003130 _____ C:\Windows\System32\Tasks\{2A462003-E8A4-4748-84FD-6CF0C2309A6F} 2014-01-03 08:23 - 2014-01-03 08:23 - 01988724 _____ (Igor Pavlov) C:\Users\TBLap\Downloads\OXConnector.exe 2014-01-03 08:15 - 2013-08-08 10:50 - 00000000 ____D C:\Users\TBLap\AppData\Roaming\vlc 2014-01-03 02:51 - 2014-01-03 02:51 - 01731712 _____ C:\Windows\Minidump\010314-14352-01.dmp 2014-01-03 02:51 - 2013-03-28 16:53 - 523513159 _____ C:\Windows\MEMORY.DMP 2014-01-03 02:51 - 2013-03-28 16:53 - 00000000 ____D C:\Windows\Minidump 2014-01-02 15:58 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD 2014-01-02 15:57 - 2014-01-02 15:57 - 01783632 _____ C:\Windows\Minidump\010214-16333-01.dmp 2014-01-02 15:57 - 2012-11-07 11:21 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2014-01-02 06:31 - 2013-02-14 12:20 - 00000000 ____D C:\ProgramData\CanonIJPLM 2013-12-31 11:47 - 2013-12-31 11:25 - 00000000 ____D C:\Users\TBLap\.freemind 2013-12-31 11:24 - 2013-12-31 11:24 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2013-12-31 11:24 - 2013-12-31 11:24 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2013-12-31 11:24 - 2013-12-31 11:24 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2013-12-31 11:24 - 2013-12-31 11:24 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2013-12-31 11:24 - 2013-12-31 11:24 - 00000000 ____D C:\ProgramData\Sun 2013-12-31 11:24 - 2013-12-31 11:24 - 00000000 ____D C:\ProgramData\Oracle 2013-12-31 11:24 - 2013-12-31 11:24 - 00000000 ____D C:\Program Files (x86)\Java 2013-12-31 11:20 - 2013-12-31 11:20 - 00915368 _____ (Oracle Corporation) C:\Users\TBLap\Downloads\jxpiinstall.exe 2013-12-31 11:20 - 2013-12-31 11:20 - 00000000 ____D C:\Program Files (x86)\FreeMind 2013-12-31 11:15 - 2013-12-31 11:12 - 37618815 _____ ( ) C:\Users\TBLap\Downloads\FreeMind-Windows-Installer-1.0.0-max.exe 2013-12-23 10:26 - 2013-12-23 10:26 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-12-15 03:01 - 2013-08-02 10:23 - 00000000 ____D C:\Windows\system32\MRT 2013-12-14 14:28 - 2013-12-14 14:28 - 00000000 ____D C:\Program Files (x86)\Open-Xchange 2013-12-14 14:28 - 2012-11-07 00:15 - 00000020 _____ C:\Windows\oxstor32.ini 2013-12-14 14:18 - 2012-11-22 14:09 - 00000000 ___RD C:\Program Files (x86)\Skype 2013-12-14 14:18 - 2012-11-22 14:08 - 00000000 ____D C:\ProgramData\Skype 2013-12-14 03:43 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2013-12-14 03:18 - 2009-07-14 05:45 - 00432480 _____ C:\Windows\system32\FNTCACHE.DAT 2013-12-14 03:01 - 2012-11-06 23:53 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-12-13 12:20 - 2013-08-27 14:52 - 00000000 ____D C:\Users\TBLap\AppData\Local\Windows Live 2013-12-13 10:33 - 2012-12-12 15:49 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-12-13 10:33 - 2012-11-13 15:28 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-12-13 10:33 - 2012-11-13 15:28 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl Some content of TEMP: ==================== C:\Users\TBLap\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-12-30 11:34 ==================== End Of Log ============================ |
Themen zu Oxtender von Hosteurope auf Win7 Laptop nicht mehr vorhanden, Defender nicht startbar |
dateien, defender, gefunde, immernoch, meldungen, mobogenie, mobogenie entfernen, problems, pup.optional.alexatb.a, pup.optional.amazontb.a, pup.optional.crossrider.a, pup.optional.crossrider.m, pup.optional.installcore, pup.optional.installcore.a, pup.optional.nextlive.a, pup.optional.opencandy, pup.optional.searchprotect, versuch, versucht, vorhanden, win7, windows |