Ist loadtbs-2.1 ein Virus?

schrauber · 16.07.2013, 07:53

Wo? welcher Browser? Auf welcher Seite? Screenshot?

jesslette · 16.07.2013, 11:01

Moin,
ja das werde ich machen mit den Screenshots.
Außerdem poppen nun immer von Mozilla kleinere Fesnter auf uns will das ich was runterlade.
Im internet seheich überall hinweise das mein Computer infiziert sei und ich diese beheben sollte.
Ich mache uach hierscreenshots.

Schönen Tag aus St Pauli

WEnn ich rechte Maustaste klicke wird mir nicht einfügen angeboten. Wie füge ich den Screenshot hier ein?

schrauber · 16.07.2013, 11:09

Unten auf erweiter klicken, runter scrollen, Anhänge verwalten.

und ein frisches FRST log bitte.

jesslette · 16.07.2013, 11:41

vorallem das aufpoppen des mittelgroßen fensters ist auffällig.
naja und die ganze antispyware werbung überall plötzlich

2 screenshots habe ich erstmal gemacht
frst folgt.

jesslette · 16.07.2013, 11:45

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 16-07-2013 02
Ran by Jesslette (administrator) on 16-07-2013 12:44:06
Running from C:\Users\***\Downloads
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(ATI Technologies Inc.) C:\Windows\system32\Ati2evxx.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(ATI Technologies Inc.) C:\Windows\system32\Ati2evxx.exe
(ASUSTek Computer Inc.) C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
() C:\Program Files\ATK Hotkey\ASLDRSrv.exe
() C:\Program Files\ATKGFNEX\GFNEXSrv.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
() C:\ProgramData\BrowserDefender\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe
() C:\Program Files\CDBurnerXP\NMSAccessU.exe
(Microsoft Corporation) C:\Windows\system32\schtasks.exe
(WebCake LLC) C:\Program Files\WebCake\WebCakeDesktop.Updater.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
() C:\ProgramData\BrowserDefender\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe
(ASUS) C:\Program Files\ASUS\SmartLogon\sensorsrv.exe
() C:\Program Files\ASUS\ASUS Live Update\ALU.exe
(ATK0100) C:\Program Files\ATK Hotkey\Hcontrol.exe
() C:\Program Files\ATK Hotkey\MsgTranAgt.exe
() C:\Program Files\Wireless Console 2\wcourier.exe
(ASUS) C:\Program Files\ASUS\ASUS CopyProtect\aspg.exe
(ATK) C:\Program Files\P4G\BatteryLife.exe
(ATK) C:\Program Files\ASUS\Splendid\ACMON.exe
() C:\Program Files\ATK Hotkey\ATKOSD.exe
(ASUSTeK) C:\Windows\System32\ACEngSvr.exe
() C:\Program Files\ATK Hotkey\KBFiltr.exe
() C:\Program Files\ATK Hotkey\WDC.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
() C:\Program Files\ATK Hotkey\HControlUser.exe
(ASUS) C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe
(ASUS) C:\Windows\System32\ASUSTPE.exe
(ASUSTek Computer Inc.) C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(WebCake LLC) C:\Users\Jesslette\AppData\Roaming\WebCake\WebCakeDesktop.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
(Farbar) C:\Users\Jesslette\Downloads\FRST(3).exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1029416 2007-12-06] (Synaptics, Inc.)
HKLM\...\Run: [HControlUser] - "C:\Program Files\ATK Hotkey\HcontrolUser.exe" [98304 2008-01-12] ()
HKLM\...\Run: [ATKOSD2] - C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe [7651328 2008-07-15] (ASUS)
HKLM\...\Run: [ASUSTPE] - C:\Windows\system32\ASUSTPE.exe [106496 2007-10-12] (ASUS)
HKLM\...\Run: [ADSMTray] - C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe [266240 2008-04-01] (ASUSTek Computer Inc.)
HKLM\...\Run: [APSDaemon] - "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59280 2012-10-11] (Apple Inc.)
HKLM\...\Run: [QuickTime Task] - "C:\Program Files\QuickTime\QTTask.exe" -atboottime [421888 2012-10-25] (Apple Inc.)
HKLM\...\Run: [SunJavaUpdateSched] - "C:\Program Files\Common Files\Java\Java Update\jusched.exe" [253816 2013-03-12] (Oracle Corporation)
HKLM\...\Run: [avgnt] - "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min [345144 2013-06-20] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Adobe ARM] - "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-05-11] (Adobe Systems Incorporated)
HKLM\...\Runonce: [AvgUninstallURL] - cmd.exe /c start hxxp://www.avg.de/de.special-uninstallation-feedback-appf?lic=OQBBAFYARgBSAEUARQAtAFYAMwBaAEMAOQAtADYATgBBAFIAUwAtADYAUgBXAEcAQQAtAEEASwBEAFUANwAtAFYAWAAzADcATQA"&"inst=NwA3AC0ANwAxADAAMwA5ADMAOQA2ADAALQBGAEwAKwA5AC0AWABPADkAKwAxAC0AWABPADMANgArADEALQBEAEQAVAArADMAMAA0ADIAOQAtAFMAVAA5ADAARgBBAFAAUAArADEALQBEAEQAOQAwAEYAKwAxAC0AUwA5ADAARgBEAEQARgArADEALQBGADkAMABUAEIAKwAyAC0ARgA5ADAATQAxADIAUgArADEALQBWAEkAUAAxADIAKwAxAC0AVABMACsAMQA"&"prod=90"&"ver=9.0.894 [x]
HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [WebCake Desktop] - "C:\Users\Jesslette\AppData\Roaming\WebCake\WebCakeDesktop.exe" [47896 2013-06-21] (WebCake LLC)
HKU\Gast\...\Run: [LightScribe Control Panel] - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden [x]
Lsa: [Notification Packages] scecli C:\Program Files\ASUS\ASUS Data Security Manager\ASPWDFLT
Startup: C:\ProgramData\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe (McAfee, Inc.)
BootExecute: autocheck autochk * sdnclean.exe

==================== Internet (Whitelisted) ====================

ProxyServer: 192.168.100.1:800
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=485800224383ADAF&affID=119556&tt=110713_9126&tsp=4943
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
StartMenuInternet: IEXPLORE.EXE - "C:\Program Files\Internet Explorer\iexplore.exe"
HKCU SearchScopes: DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=485800224383ADAF&affID=119556&tt=110713_9126&tsp=4943
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=485800224383ADAF&affID=119556&tt=110713_9126&tsp=4943
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = 
BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO: LyricsContainer - {463B0ED4-8AFA-404B-90E7-4063A0708050} - C:\Program Files\LyricsContainer\122.dll (RYD Software)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: delta Helper Object - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files\Delta\delta\1.8.21.5\bh\delta.dll (Delta-search.com)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - No Name - {DFEFCDEE-CF1A-4FC8-88AD-48514E463B27} -  No File
Toolbar: HKLM - Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files\Delta\delta\1.8.21.5\deltaTlbr.dll (Delta-search.com)
Toolbar: HKCU -No Name - {DFEFCDEE-CF1A-4FC8-88AD-48514E463B27} -  No File
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default
FF user.js: detected! => C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\user.js
FF NewTab: hxxp://www1.delta-search.com/?babsrc=NT_ss&mntrId=485800224383ADAF&affID=119556&tt=110713_9126&tsp=4943
FF SelectedSearchEngine: Delta Search
FF Homepage: hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=485800224383ADAF&affID=119556&tt=110713_9126&tsp=4943
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.3 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=14.0.8051.1204 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\ask-search.xml
FF SearchPlugin: C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\BrowserDefender.xml
FF SearchPlugin: C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\delta.xml
FF SearchPlugin: C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\Firefox.xml
FF SearchPlugin: C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\inbox-suchen.xml
FF SearchPlugin: C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\visualbee-v1-customized-web-search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\googledesktop.xml
FF Extension: No Name - C:\Users\Jesslette\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
FF Extension: Delta Toolbar - C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\Extensions\ffxtlbr@delta.com
FF Extension: WebCake - C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\Extensions\plugin@getwebcake.com
FF Extension: Microsoft .NET Framework Assistant - C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF Extension: IE Tab - C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\Extensions\{77b819fa-95ad-4f2c-ac7c-486b356188a9}
FF Extension: youtubeunblocker - C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\Extensions\youtubeunblocker@unblocker.yt.xpi
FF Extension: No Name - C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\Extensions\{166745b8-8d4a-4c86-9120-696de51a77aa}.xpi
FF Extension: No Name - C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF Extension: Default - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKCU\...\Firefox\Extensions: [goobar@gootoolbar.com] C:\Users\Jesslette\AppData\Roaming\GooToolBar\GooToolBar Installer\1.0.0.0
FF Extension: goobar - C:\Users\Jesslette\AppData\Roaming\GooToolBar\GooToolBar Installer\1.0.0.0
FF HKCU\...\Firefox\Extensions: [Lyrics@LyricsContainer.co] C:\Program Files\LyricsContainer\122.xpi
FF Extension: No Name - C:\Program Files\LyricsContainer\122.xpi

Chrome: 
=======
CHR Extension: (LyricsContainer) - C:\Users\JESSLE~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\abfmigjiaapipflmopkaaooigcjjdojh\1.122
CHR Extension: () - C:\Users\JESSLE~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\mocblcnaofikinigmceddfghppkkjbog\1.0.0.3

========================== Services (Whitelisted) =================

R2 ADSMService; C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe [225280 2008-03-31] (ASUSTek Computer Inc.)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-06-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-06-20] (Avira Operations GmbH & Co. KG)
R2 ASLDRService; C:\Program Files\ATK Hotkey\ASLDRSrv.exe [94208 2007-10-03] ()
R2 ATKGFNEXSrv; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [94208 2007-08-08] ()
R2 BrowserDefendert; C:\ProgramData\BrowserDefender\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe [2827728 2013-05-23] ()
S3 GoogleDesktopManager-051210-111108; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [30192 2011-09-13] (Google)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)
R2 NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [71096 2009-09-06] ()
S3 Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [155320 2012-01-18] (Avanquest Software)
R2 WebCake Desktop Updater; C:\Users\Jesslette\AppData\Roaming\WebCake\WebCakeDesktop.exe [47896 2013-06-21] (WebCake LLC)

==================== Drivers (Whitelisted) ====================

R0 AsDsm; C:\Windows\System32\Drivers\AsDsm.sys [29752 2007-08-11] (Windows (R) Codename Longhorn DDK provider)
R2 ASMMAP; C:\Program Files\ATKGFNEX\ASMMAP.sys [13880 2007-07-24] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [84744 2013-06-20] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135136 2013-06-20] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-03-06] (Avira Operations GmbH & Co. KG)
S3 CRFILTER; C:\Windows\System32\DRIVERS\CRFILTER.sys [6656 2008-04-07] (Generic)
S3 CVirtA; C:\Windows\System32\DRIVERS\CVirtA.sys [5275 2007-01-18] (Cisco Systems, Inc.)
S4 DNE; C:\Windows\System32\DRIVERS\dne2000.sys [125328 2008-03-29] (Deterministic Networks, Inc.)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15928 2008-06-03] ( )
R0 lullaby; C:\Windows\System32\DRIVERS\lullaby.sys [15416 2008-05-29] (Windows (R) Codename Longhorn DDK provider)
R3 MTsensor; C:\Windows\System32\DRIVERS\ATKACPI.sys [7680 2006-12-14] (ATK0100)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1752704 2008-08-11] ()
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
S3 StarOpen; C:\Windows\System32\Drivers\StarOpen.sys [7168 2009-09-28] ()
S3 catchme; \??\C:\Users\JESSLE~1\AppData\Local\Temp\catchme.sys [x]
U2 ccEvtMgr; 
U2 ccSetMgr; 
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
U3 navapsvc; 
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]
U3 SAVRT; 
U1 SAVRTPEL; 
U3 TlntSvr; 
S3 vpnva; system32\DRIVERS\vpnva.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-16 12:43 - 2013-07-16 12:43 - 01218590 _____ (Farbar) C:\Users\Jesslette\Downloads\FRST(4).exe
2013-07-16 12:43 - 2013-07-16 12:43 - 00000979 _____ C:\Users\Jesslette\Desktop\Continue Zip Opener Installation.lnk
2013-07-16 12:42 - 2013-07-16 12:42 - 01218590 _____ (Farbar) C:\Users\Jesslette\Downloads\FRST(3).exe
2013-07-16 12:42 - 2013-07-16 12:42 - 00793536 _____ C:\Users\Jesslette\Downloads\ZipOpenerSetup.exe
2013-07-16 11:49 - 2013-07-16 11:49 - 00000000 ____D C:\ProgramData\䘀ơ䏀ơ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-07-16 01:00 - 2013-07-16 01:00 - 00000000 ____D C:\ProgramData\䘀A䏀A浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-07-16 01:00 - 2013-07-16 01:00 - 00000000 ____D C:\Program Files\LyricsContainer
2013-07-15 02:12 - 2013-07-15 02:12 - 00000000 ____D C:\ProgramData\䘀ǹ䏀ǹ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-07-14 14:50 - 2013-07-14 14:50 - 00000000 ____D C:\Program Files\Plus-HD-1.6
2013-07-14 14:49 - 2013-07-14 14:49 - 00283256 _____ C:\Users\Jesslette\Downloads\Setup(1).exe
2013-07-14 14:41 - 2013-07-14 14:41 - 00000000 ____D C:\ProgramData\䘀ǝ䏀ǝ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-07-14 14:06 - 2013-07-14 14:06 - 00448512 _____ (OldTimer Tools) C:\Users\Jesslette\Downloads\TFC.exe
2013-07-14 14:04 - 2013-07-14 14:04 - 00001899 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2013-07-14 14:03 - 2013-07-14 14:03 - 00000000 ____D C:\Program Files\Common Files\Adobe
2013-07-14 13:59 - 2013-07-14 13:59 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\WebCake
2013-07-14 13:59 - 2013-07-14 13:59 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserDefender
2013-07-14 13:59 - 2013-07-14 13:59 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\Delta
2013-07-14 13:59 - 2013-07-14 13:59 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\BabSolution
2013-07-14 13:59 - 2013-07-14 13:59 - 00000000 ____D C:\ProgramData\BrowserDefender
2013-07-14 13:59 - 2013-07-14 13:59 - 00000000 ____D C:\Program Files\WebCake
2013-07-14 13:59 - 2013-07-14 13:59 - 00000000 ____D C:\Program Files\Delta
2013-07-14 13:58 - 2013-07-16 11:49 - 00000392 _____ C:\Windows\Tasks\LyricsContainer Update.job
2013-07-14 13:58 - 2013-07-14 13:58 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\Babylon
2013-07-14 13:58 - 2013-07-14 13:58 - 00000000 ____D C:\ProgramData\Babylon
2013-07-14 13:57 - 2013-07-14 13:57 - 00283248 _____ C:\Users\Jesslette\Downloads\Adobe Reader.exe
2013-07-14 12:25 - 2013-07-14 12:25 - 00000000 ____D C:\Users\Jesslette\Desktop\ogsy aktuell
2013-07-14 12:25 - 2013-07-14 12:25 - 00000000 ____D C:\Users\Jesslette\Desktop\bewerbung
2013-07-14 12:24 - 2013-07-14 12:25 - 00000000 ____D C:\Users\Jesslette\Desktop\RE
2013-07-14 12:23 - 2013-07-14 12:23 - 00000104 _____ C:\Users\Jesslette\Desktop\Papierkorb - Verknüpfung.lnk
2013-07-14 10:37 - 2013-07-14 10:37 - 01218214 _____ (Farbar) C:\Users\Jesslette\Downloads\FRST(2).exe
2013-07-14 10:26 - 2013-07-14 10:26 - 00890988 _____ C:\Users\Jesslette\Downloads\SecurityCheck.exe
2013-07-13 10:37 - 2013-07-13 10:37 - 02347384 _____ (ESET) C:\Users\Jesslette\Downloads\esetsmartinstaller_enu.exe
2013-07-13 10:22 - 2013-07-16 11:37 - 00003962 _____ C:\Windows\PFRO.log
2013-07-11 10:56 - 2013-07-11 10:56 - 00018837 _____ C:\ComboFix.txt
2013-07-11 10:37 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-07-11 10:37 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-07-11 10:37 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-07-11 10:37 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-07-11 10:37 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-07-11 10:37 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-07-11 10:37 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-07-11 10:37 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-07-11 10:36 - 2013-07-11 10:56 - 00000000 ____D C:\ComboFix
2013-07-11 10:35 - 2013-07-11 10:35 - 05394432 _____ C:\Users\Gast\NTUSER~1.AVG
2013-07-11 10:31 - 2013-07-11 10:56 - 00000000 ____D C:\Qoobox
2013-07-11 10:31 - 2013-07-11 10:53 - 00000000 ____D C:\Windows\erdnt
2013-07-11 10:30 - 2013-07-11 10:30 - 05087643 ____R (Swearware) C:\Users\Jesslette\Downloads\ComboFix.exe
2013-07-11 10:19 - 2013-07-11 10:19 - 01217338 _____ (Farbar) C:\Users\Jesslette\Downloads\FRST(1).exe
2013-07-11 09:52 - 2013-07-11 09:52 - 00000000 ____D C:\Windows\ERUNT
2013-07-11 09:51 - 2013-07-11 09:52 - 00559306 _____ (Oleg N. Scherbakov) C:\Users\Jesslette\Downloads\JRT.exe
2013-07-11 09:41 - 2013-07-11 09:41 - 00000130 _____ C:\Windows\DeleteOnReboot.bat
2013-07-11 09:39 - 2013-07-11 09:41 - 00032365 _____ C:\AdwCleaner[S1].txt
2013-07-11 09:34 - 2013-06-04 03:50 - 02049024 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-07-11 09:33 - 2013-05-29 13:30 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-11 09:33 - 2013-05-29 13:30 - 00916480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-11 09:33 - 2013-05-29 13:30 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-07-11 09:33 - 2013-05-29 13:28 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-07-11 09:33 - 2013-05-29 13:26 - 06016000 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-11 09:33 - 2013-05-29 13:26 - 00611840 _____ (Microsoft Corporation) C:\Windows\system32\mstime.dll
2013-07-11 09:33 - 2013-05-29 13:26 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-07-11 09:33 - 2013-05-29 13:25 - 00630272 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-11 09:33 - 2013-05-29 13:25 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-07-11 09:33 - 2013-05-29 13:25 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-07-11 09:33 - 2013-05-29 13:25 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-11 09:33 - 2013-05-29 13:24 - 11111424 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-11 09:33 - 2013-05-29 13:24 - 02004992 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-11 09:33 - 2013-05-29 13:24 - 01469440 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-07-11 09:33 - 2013-05-29 13:24 - 00387584 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-07-11 09:33 - 2013-05-29 13:24 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-07-11 09:33 - 2013-05-29 13:24 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-11 09:33 - 2013-05-29 13:24 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-07-11 09:33 - 2013-05-29 13:24 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-07-11 09:33 - 2013-05-29 13:24 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-07-11 09:33 - 2013-05-29 11:47 - 00385024 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-07-11 09:33 - 2013-05-29 10:07 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-07-11 09:33 - 2013-05-29 10:06 - 00174080 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-07-11 09:33 - 2013-05-29 10:05 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-07-11 09:33 - 2013-05-29 10:04 - 01638912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-11 09:32 - 2013-06-01 06:06 - 00505344 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-07-11 09:32 - 2013-05-08 06:04 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-11 09:32 - 2013-04-17 13:28 - 01029120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2013-07-11 09:32 - 2013-04-17 13:28 - 00219648 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2013-07-11 09:32 - 2013-04-17 13:28 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2013-07-11 09:32 - 2013-04-17 13:28 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2013-07-11 09:32 - 2013-04-17 12:34 - 01172480 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2013-07-11 09:32 - 2013-04-17 12:33 - 00486400 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2013-07-11 09:32 - 2013-04-17 12:14 - 00683008 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2013-07-11 09:32 - 2013-04-17 12:10 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-07-11 09:32 - 2013-04-17 12:10 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2013-07-11 09:16 - 2013-07-11 09:16 - 00650027 _____ C:\Users\Jesslette\Downloads\adwcleaner.exe
2013-07-09 18:23 - 2013-07-09 18:24 - 00034791 _____ C:\Users\Jesslette\Downloads\Addition.txt
2013-07-09 18:21 - 2013-07-09 18:21 - 01216688 _____ (Farbar) C:\Users\Jesslette\Downloads\FRST.exe
2013-07-09 18:21 - 2013-07-09 18:21 - 00000000 ____D C:\FRST
2013-07-09 17:56 - 2013-07-09 17:56 - 00377856 _____ C:\Users\Jesslette\Downloads\gmer_2.1.19163.exe
2013-07-09 17:53 - 2013-07-09 17:53 - 00000480 _____ C:\Users\Jesslette\Downloads\defogger_disable.log
2013-07-09 17:53 - 2013-07-09 17:53 - 00000000 _____ C:\Users\Jesslette\defogger_reenable
2013-07-09 17:51 - 2013-07-09 17:51 - 00050477 _____ C:\Users\Jesslette\Downloads\Defogger.exe
2013-07-09 15:07 - 2013-07-09 15:07 - 00103238 _____ C:\Users\Jesslette\Downloads\Extras.Txt
2013-07-09 15:06 - 2013-07-09 15:06 - 00103890 _____ C:\Users\Jesslette\Downloads\OTL.Txt
2013-07-09 14:43 - 2013-07-09 14:43 - 00602112 _____ (OldTimer Tools) C:\Users\Jesslette\Downloads\OTL.exe
2013-07-09 00:42 - 2013-07-09 00:42 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\Malwarebytes
2013-07-09 00:41 - 2013-07-09 00:41 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-07-09 00:31 - 2013-07-09 00:32 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Jesslette\Downloads\mbam-setup-1.75.0.1300.exe
2013-07-07 23:27 - 2013-07-07 23:27 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\PlusWinks
2013-07-07 23:20 - 2013-07-07 23:20 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\SeeSimilar
2013-07-07 23:11 - 2013-07-07 23:11 - 00393064 _____ (Softonic                                        ) C:\Users\Jesslette\Downloads\SoftonicDownloader_fuer_computer-repair-free.exe
2013-07-07 23:03 - 2013-07-07 23:03 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\Avira
2013-07-07 23:01 - 2013-07-07 23:01 - 00000000 ____D C:\Program Files\Avira
2013-07-07 23:01 - 2013-06-20 14:48 - 00135136 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-07-07 23:01 - 2013-03-06 16:13 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-07-07 23:01 - 2012-08-27 15:50 - 00028520 _____ (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys
2013-07-07 22:59 - 2013-07-07 22:59 - 11177156 _____ C:\Users\Jesslette\Downloads\avira3737_free_antivirus_de(1).exe.part
2013-07-07 22:58 - 2013-07-07 23:00 - 104943936 _____ C:\Users\Jesslette\Downloads\avira3737_free_antivirus_de.exe
2013-07-06 01:16 - 2013-07-06 01:17 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-06-23 08:35 - 2013-06-23 08:35 - 00000000 ____D C:\ProgramData\䘈µ䏈µ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-23 02:17 - 2013-06-23 02:17 - 00000000 ____D C:\ProgramData\䘈Ä䏈Ä浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-22 15:40 - 2013-06-22 15:40 - 00000000 ____D C:\ProgramData\䘈ǐ䏈ǐ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-21 18:51 - 2013-06-21 18:51 - 00000000 ____D C:\ProgramData\䘈ǹ䏈ǹ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-21 12:50 - 2013-06-21 12:50 - 00000000 ____D C:\ProgramData\䘈Ʈ䏈Ʈ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-19 21:53 - 2013-06-19 21:53 - 00000000 ____D C:\ProgramData\䘈ǭ䏈ǭ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-16 18:23 - 2013-06-16 18:23 - 00000000 ____D C:\ProgramData\䘈0䏈0浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮

==================== One Month Modified Files and Folders =======

2013-07-16 12:43 - 2013-07-16 12:43 - 01218590 _____ (Farbar) C:\Users\Jesslette\Downloads\FRST(4).exe
2013-07-16 12:43 - 2013-07-16 12:43 - 00000979 _____ C:\Users\Jesslette\Desktop\Continue Zip Opener Installation.lnk
2013-07-16 12:43 - 2009-05-29 12:20 - 00000000 ___RD C:\Users\Jesslette\Desktop
2013-07-16 12:42 - 2013-07-16 12:42 - 01218590 _____ (Farbar) C:\Users\Jesslette\Downloads\FRST(3).exe
2013-07-16 12:42 - 2013-07-16 12:42 - 00793536 _____ C:\Users\Jesslette\Downloads\ZipOpenerSetup.exe
2013-07-16 12:38 - 2012-04-04 22:20 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-07-16 12:10 - 2012-04-14 11:40 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-16 11:49 - 2013-07-16 11:49 - 00000000 ____D C:\ProgramData\䘀ơ䏀ơ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-07-16 11:49 - 2013-07-14 13:58 - 00000392 _____ C:\Windows\Tasks\LyricsContainer Update.job
2013-07-16 11:49 - 2012-04-04 22:20 - 00001100 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-07-16 11:43 - 2010-02-14 22:44 - 01557269 _____ C:\Windows\WindowsUpdate.log
2013-07-16 11:37 - 2013-07-13 10:22 - 00003962 _____ C:\Windows\PFRO.log
2013-07-16 11:37 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-07-16 11:37 - 2006-11-02 14:47 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-16 11:37 - 2006-11-02 14:47 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-16 02:11 - 2006-11-02 15:01 - 00032584 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-07-16 01:00 - 2013-07-16 01:00 - 00000000 ____D C:\ProgramData\䘀A䏀A浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-07-16 01:00 - 2013-07-16 01:00 - 00000000 ____D C:\Program Files\LyricsContainer
2013-07-15 02:12 - 2013-07-15 02:12 - 00000000 ____D C:\ProgramData\䘀ǹ䏀ǹ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-07-15 02:11 - 2009-03-14 05:05 - 00045056 _____ C:\Windows\system32\acovcnt.exe
2013-07-14 14:50 - 2013-07-14 14:50 - 00000000 ____D C:\Program Files\Plus-HD-1.6
2013-07-14 14:49 - 2013-07-14 14:49 - 00283256 _____ C:\Users\Jesslette\Downloads\Setup(1).exe
2013-07-14 14:41 - 2013-07-14 14:41 - 00000000 ____D C:\ProgramData\䘀ǝ䏀ǝ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-07-14 14:06 - 2013-07-14 14:06 - 00448512 _____ (OldTimer Tools) C:\Users\Jesslette\Downloads\TFC.exe
2013-07-14 14:05 - 2009-05-29 12:22 - 00000000 ____D C:\Users\JESSLE~1\AppData\Local\Adobe
2013-07-14 14:04 - 2013-07-14 14:04 - 00001899 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2013-07-14 14:04 - 2006-11-02 13:18 - 00000000 __RHD C:\Users\Public\Desktop
2013-07-14 14:03 - 2013-07-14 14:03 - 00000000 ____D C:\Program Files\Common Files\Adobe
2013-07-14 14:03 - 2009-07-17 07:51 - 00000000 ____D C:\Program Files\Adobe
2013-07-14 14:03 - 2009-05-29 12:21 - 00000000 ____D C:\ProgramData\Adobe
2013-07-14 13:59 - 2013-07-14 13:59 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\WebCake
2013-07-14 13:59 - 2013-07-14 13:59 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserDefender
2013-07-14 13:59 - 2013-07-14 13:59 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\Delta
2013-07-14 13:59 - 2013-07-14 13:59 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\BabSolution
2013-07-14 13:59 - 2013-07-14 13:59 - 00000000 ____D C:\ProgramData\BrowserDefender
2013-07-14 13:59 - 2013-07-14 13:59 - 00000000 ____D C:\Program Files\WebCake
2013-07-14 13:59 - 2013-07-14 13:59 - 00000000 ____D C:\Program Files\Delta
2013-07-14 13:58 - 2013-07-14 13:58 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\Babylon
2013-07-14 13:58 - 2013-07-14 13:58 - 00000000 ____D C:\ProgramData\Babylon
2013-07-14 13:57 - 2013-07-14 13:57 - 00283248 _____ C:\Users\Jesslette\Downloads\Adobe Reader.exe
2013-07-14 12:25 - 2013-07-14 12:25 - 00000000 ____D C:\Users\Jesslette\Desktop\ogsy aktuell
2013-07-14 12:25 - 2013-07-14 12:25 - 00000000 ____D C:\Users\Jesslette\Desktop\bewerbung
2013-07-14 12:25 - 2013-07-14 12:24 - 00000000 ____D C:\Users\Jesslette\Desktop\RE
2013-07-14 12:23 - 2013-07-14 12:23 - 00000104 _____ C:\Users\Jesslette\Desktop\Papierkorb - Verknüpfung.lnk
2013-07-14 10:37 - 2013-07-14 10:37 - 01218214 _____ (Farbar) C:\Users\Jesslette\Downloads\FRST(2).exe
2013-07-14 10:26 - 2013-07-14 10:26 - 00890988 _____ C:\Users\Jesslette\Downloads\SecurityCheck.exe
2013-07-13 13:14 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\Microsoft.NET
2013-07-13 10:39 - 2006-11-02 12:33 - 01475254 _____ C:\Windows\system32\PerfStringBackup.INI
2013-07-13 10:37 - 2013-07-13 10:37 - 02347384 _____ (ESET) C:\Users\Jesslette\Downloads\esetsmartinstaller_enu.exe
2013-07-13 10:25 - 2006-11-02 14:47 - 00372120 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-13 10:22 - 2009-05-29 12:29 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-07-13 10:22 - 2006-11-02 14:37 - 00000000 ____D C:\Windows\system32\XPSViewer
2013-07-12 00:16 - 2009-03-14 02:16 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-07-12 00:11 - 2006-11-02 12:24 - 75699896 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2013-07-11 23:55 - 2006-11-02 14:37 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-11 10:56 - 2013-07-11 10:56 - 00018837 _____ C:\ComboFix.txt
2013-07-11 10:56 - 2013-07-11 10:36 - 00000000 ____D C:\ComboFix
2013-07-11 10:56 - 2013-07-11 10:31 - 00000000 ____D C:\Qoobox
2013-07-11 10:56 - 2006-11-02 13:18 - 00000000 __RHD C:\Users\Default
2013-07-11 10:56 - 2006-11-02 13:18 - 00000000 ___RD C:\Users\Public
2013-07-11 10:53 - 2013-07-11 10:31 - 00000000 ____D C:\Windows\erdnt
2013-07-11 10:52 - 2006-11-02 12:23 - 00000215 _____ C:\Windows\system.ini
2013-07-11 10:36 - 2009-10-23 12:30 - 00000000 ____D C:\ProgramData\avg9
2013-07-11 10:35 - 2013-07-11 10:35 - 05394432 _____ C:\Users\Gast\NTUSER~1.AVG
2013-07-11 10:35 - 2010-02-14 22:41 - 00000000 ____D C:\Users\Gast
2013-07-11 10:30 - 2013-07-11 10:30 - 05087643 ____R (Swearware) C:\Users\Jesslette\Downloads\ComboFix.exe
2013-07-11 10:19 - 2013-07-11 10:19 - 01217338 _____ (Farbar) C:\Users\Jesslette\Downloads\FRST(1).exe
2013-07-11 09:52 - 2013-07-11 09:52 - 00000000 ____D C:\Windows\ERUNT
2013-07-11 09:52 - 2013-07-11 09:51 - 00559306 _____ (Oleg N. Scherbakov) C:\Users\Jesslette\Downloads\JRT.exe
2013-07-11 09:41 - 2013-07-11 09:41 - 00000130 _____ C:\Windows\DeleteOnReboot.bat
2013-07-11 09:41 - 2013-07-11 09:39 - 00032365 _____ C:\AdwCleaner[S1].txt
2013-07-11 09:40 - 2009-06-19 17:16 - 00000000 ____D C:\ProgramData\ICQ
2013-07-11 09:16 - 2013-07-11 09:16 - 00650027 _____ C:\Users\Jesslette\Downloads\adwcleaner.exe
2013-07-09 18:24 - 2013-07-09 18:23 - 00034791 _____ C:\Users\Jesslette\Downloads\Addition.txt
2013-07-09 18:21 - 2013-07-09 18:21 - 01216688 _____ (Farbar) C:\Users\Jesslette\Downloads\FRST.exe
2013-07-09 18:21 - 2013-07-09 18:21 - 00000000 ____D C:\FRST
2013-07-09 17:56 - 2013-07-09 17:56 - 00377856 _____ C:\Users\Jesslette\Downloads\gmer_2.1.19163.exe
2013-07-09 17:53 - 2013-07-09 17:53 - 00000480 _____ C:\Users\Jesslette\Downloads\defogger_disable.log
2013-07-09 17:53 - 2013-07-09 17:53 - 00000000 _____ C:\Users\Jesslette\defogger_reenable
2013-07-09 17:53 - 2009-05-29 12:20 - 00000000 ____D C:\Users\Jesslette
2013-07-09 17:51 - 2013-07-09 17:51 - 00050477 _____ C:\Users\Jesslette\Downloads\Defogger.exe
2013-07-09 15:07 - 2013-07-09 15:07 - 00103238 _____ C:\Users\Jesslette\Downloads\Extras.Txt
2013-07-09 15:06 - 2013-07-09 15:06 - 00103890 _____ C:\Users\Jesslette\Downloads\OTL.Txt
2013-07-09 14:43 - 2013-07-09 14:43 - 00602112 _____ (OldTimer Tools) C:\Users\Jesslette\Downloads\OTL.exe
2013-07-09 14:10 - 2010-02-14 22:16 - 00000000 ____D C:\Windows\pss
2013-07-09 09:06 - 2012-06-06 12:18 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\Dropbox
2013-07-09 09:05 - 2013-04-22 23:33 - 00000000 ___RD C:\Users\Jesslette\Dropbox
2013-07-09 08:59 - 2012-12-18 23:20 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-07-09 00:42 - 2013-07-09 00:42 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\Malwarebytes
2013-07-09 00:41 - 2013-07-09 00:41 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-07-09 00:32 - 2013-07-09 00:31 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Jesslette\Downloads\mbam-setup-1.75.0.1300.exe
2013-07-07 23:27 - 2013-07-07 23:27 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\PlusWinks
2013-07-07 23:20 - 2013-07-07 23:20 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\SeeSimilar
2013-07-07 23:11 - 2013-07-07 23:11 - 00393064 _____ (Softonic                                        ) C:\Users\Jesslette\Downloads\SoftonicDownloader_fuer_computer-repair-free.exe
2013-07-07 23:03 - 2013-07-07 23:03 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\Avira
2013-07-07 23:01 - 2013-07-07 23:01 - 00000000 ____D C:\Program Files\Avira
2013-07-07 23:01 - 2009-09-02 21:38 - 00000000 ____D C:\ProgramData\Avira
2013-07-07 23:00 - 2013-07-07 22:58 - 104943936 _____ C:\Users\Jesslette\Downloads\avira3737_free_antivirus_de.exe
2013-07-07 22:59 - 2013-07-07 22:59 - 11177156 _____ C:\Users\Jesslette\Downloads\avira3737_free_antivirus_de(1).exe.part
2013-07-06 10:04 - 2009-11-10 00:04 - 00000000 _____ C:\Users\JESSLE~1\AppData\Local\prvlcl.dat
2013-07-06 01:17 - 2013-07-06 01:16 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-06-24 22:47 - 2009-08-15 20:39 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\vlc
2013-06-23 08:35 - 2013-06-23 08:35 - 00000000 ____D C:\ProgramData\䘈µ䏈µ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-23 02:17 - 2013-06-23 02:17 - 00000000 ____D C:\ProgramData\䘈Ä䏈Ä浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-22 15:40 - 2013-06-22 15:40 - 00000000 ____D C:\ProgramData\䘈ǐ䏈ǐ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-21 18:51 - 2013-06-21 18:51 - 00000000 ____D C:\ProgramData\䘈ǹ䏈ǹ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-21 12:50 - 2013-06-21 12:50 - 00000000 ____D C:\ProgramData\䘈Ʈ䏈Ʈ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-20 14:48 - 2013-07-07 23:01 - 00135136 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-06-20 14:48 - 2009-09-02 21:38 - 00084744 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-06-19 21:53 - 2013-06-19 21:53 - 00000000 ____D C:\ProgramData\䘈ǭ䏈ǭ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-16 18:23 - 2013-06-16 18:23 - 00000000 ____D C:\ProgramData\䘈0䏈0浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-16 11:52

==================== End Of Log ============================

--- --- ---

schrauber · 16.07.2013, 12:13

Firefox komplett deinstallieren, keine DAten behalten, neu installieren. Frisches FRST Log bitte. Noch Probleme?

jesslette · 16.07.2013, 12:38

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 16-07-2013 02
Ran by Jesslette (administrator) on 16-07-2013 13:36:44
Running from C:\Users\***\Downloads
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(ATI Technologies Inc.) C:\Windows\system32\Ati2evxx.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(ATI Technologies Inc.) C:\Windows\system32\Ati2evxx.exe
(ASUSTek Computer Inc.) C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
() C:\Program Files\ATK Hotkey\ASLDRSrv.exe
() C:\Program Files\ATKGFNEX\GFNEXSrv.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
() C:\ProgramData\BrowserDefender\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe
() C:\Program Files\CDBurnerXP\NMSAccessU.exe
(Microsoft Corporation) C:\Windows\system32\schtasks.exe
(WebCake LLC) C:\Program Files\WebCake\WebCakeDesktop.Updater.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
() C:\ProgramData\BrowserDefender\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe
(ASUS) C:\Program Files\ASUS\SmartLogon\sensorsrv.exe
() C:\Program Files\ASUS\ASUS Live Update\ALU.exe
(ATK0100) C:\Program Files\ATK Hotkey\Hcontrol.exe
() C:\Program Files\ATK Hotkey\MsgTranAgt.exe
() C:\Program Files\Wireless Console 2\wcourier.exe
(ASUS) C:\Program Files\ASUS\ASUS CopyProtect\aspg.exe
(ATK) C:\Program Files\P4G\BatteryLife.exe
(ATK) C:\Program Files\ASUS\Splendid\ACMON.exe
() C:\Program Files\ATK Hotkey\ATKOSD.exe
(ASUSTeK) C:\Windows\System32\ACEngSvr.exe
() C:\Program Files\ATK Hotkey\KBFiltr.exe
() C:\Program Files\ATK Hotkey\WDC.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
() C:\Program Files\ATK Hotkey\HControlUser.exe
(ASUS) C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe
(ASUS) C:\Windows\System32\ASUSTPE.exe
(ASUSTek Computer Inc.) C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(WebCake LLC) C:\Users\Jesslette\AppData\Roaming\WebCake\WebCakeDesktop.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Farbar) C:\Users\Jesslette\Downloads\FRST(3).exe
(Microsoft Corporation) C:\Windows\system32\conime.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Adobe Systems Incorporated) C:\Windows\system32\Macromed\Flash\FlashUtil32_11_7_700_224_ActiveX.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1029416 2007-12-06] (Synaptics, Inc.)
HKLM\...\Run: [HControlUser] - "C:\Program Files\ATK Hotkey\HcontrolUser.exe" [98304 2008-01-12] ()
HKLM\...\Run: [ATKOSD2] - C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe [7651328 2008-07-15] (ASUS)
HKLM\...\Run: [ASUSTPE] - C:\Windows\system32\ASUSTPE.exe [106496 2007-10-12] (ASUS)
HKLM\...\Run: [ADSMTray] - C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe [266240 2008-04-01] (ASUSTek Computer Inc.)
HKLM\...\Run: [APSDaemon] - "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59280 2012-10-11] (Apple Inc.)
HKLM\...\Run: [QuickTime Task] - "C:\Program Files\QuickTime\QTTask.exe" -atboottime [421888 2012-10-25] (Apple Inc.)
HKLM\...\Run: [SunJavaUpdateSched] - "C:\Program Files\Common Files\Java\Java Update\jusched.exe" [253816 2013-03-12] (Oracle Corporation)
HKLM\...\Run: [avgnt] - "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min [345144 2013-06-20] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Adobe ARM] - "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-05-11] (Adobe Systems Incorporated)
HKLM\...\Runonce: [AvgUninstallURL] - cmd.exe /c start hxxp://www.avg.de/de.special-uninstallation-feedback-appf?lic=OQBBAFYARgBSAEUARQAtAFYAMwBaAEMAOQAtADYATgBBAFIAUwAtADYAUgBXAEcAQQAtAEEASwBEAFUANwAtAFYAWAAzADcATQA"&"inst=NwA3AC0ANwAxADAAMwA5ADMAOQA2ADAALQBGAEwAKwA5AC0AWABPADkAKwAxAC0AWABPADMANgArADEALQBEAEQAVAArADMAMAA0ADIAOQAtAFMAVAA5ADAARgBBAFAAUAArADEALQBEAEQAOQAwAEYAKwAxAC0AUwA5ADAARgBEAEQARgArADEALQBGADkAMABUAEIAKwAyAC0ARgA5ADAATQAxADIAUgArADEALQBWAEkAUAAxADIAKwAxAC0AVABMACsAMQA"&"prod=90"&"ver=9.0.894 [x]
HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [WebCake Desktop] - "C:\Users\Jesslette\AppData\Roaming\WebCake\WebCakeDesktop.exe" [47896 2013-06-21] (WebCake LLC)
HKU\Gast\...\Run: [LightScribe Control Panel] - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden [x]
Lsa: [Notification Packages] scecli C:\Program Files\ASUS\ASUS Data Security Manager\ASPWDFLT
Startup: C:\ProgramData\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe (McAfee, Inc.)
BootExecute: autocheck autochk * sdnclean.exe

==================== Internet (Whitelisted) ====================

ProxyServer: 192.168.100.1:800
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=485800224383ADAF&affID=119556&tt=110713_9126&tsp=4943
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
StartMenuInternet: IEXPLORE.EXE - "C:\Program Files\Internet Explorer\iexplore.exe"
HKCU SearchScopes: DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=485800224383ADAF&affID=119556&tt=110713_9126&tsp=4943
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=485800224383ADAF&affID=119556&tt=110713_9126&tsp=4943
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = 
BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO: LyricsContainer - {463B0ED4-8AFA-404B-90E7-4063A0708050} - C:\Program Files\LyricsContainer\122.dll (RYD Software)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: delta Helper Object - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files\Delta\delta\1.8.21.5\bh\delta.dll (Delta-search.com)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - No Name - {DFEFCDEE-CF1A-4FC8-88AD-48514E463B27} -  No File
Toolbar: HKLM - Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files\Delta\delta\1.8.21.5\deltaTlbr.dll (Delta-search.com)
Toolbar: HKCU -No Name - {DFEFCDEE-CF1A-4FC8-88AD-48514E463B27} -  No File
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default
FF user.js: detected! => C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\user.js
FF NewTab: hxxp://www1.delta-search.com/?babsrc=NT_ss&mntrId=485800224383ADAF&affID=119556&tt=110713_9126&tsp=4943
FF SelectedSearchEngine: Delta Search
FF Homepage: hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=485800224383ADAF&affID=119556&tt=110713_9126&tsp=4943
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.3 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=14.0.8051.1204 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\ask-search.xml
FF SearchPlugin: C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\BrowserDefender.xml
FF SearchPlugin: C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\delta.xml
FF SearchPlugin: C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\Firefox.xml
FF SearchPlugin: C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\inbox-suchen.xml
FF SearchPlugin: C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\visualbee-v1-customized-web-search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\googledesktop.xml
FF Extension: No Name - C:\Users\Jesslette\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
FF Extension: Delta Toolbar - C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\Extensions\ffxtlbr@delta.com
FF Extension: WebCake - C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\Extensions\plugin@getwebcake.com
FF Extension: Microsoft .NET Framework Assistant - C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF Extension: IE Tab - C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\Extensions\{77b819fa-95ad-4f2c-ac7c-486b356188a9}
FF Extension: youtubeunblocker - C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\Extensions\youtubeunblocker@unblocker.yt.xpi
FF Extension: No Name - C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\Extensions\{166745b8-8d4a-4c86-9120-696de51a77aa}.xpi
FF Extension: No Name - C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF Extension: Default - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKCU\...\Firefox\Extensions: [goobar@gootoolbar.com] C:\Users\Jesslette\AppData\Roaming\GooToolBar\GooToolBar Installer\1.0.0.0
FF Extension: goobar - C:\Users\Jesslette\AppData\Roaming\GooToolBar\GooToolBar Installer\1.0.0.0
FF HKCU\...\Firefox\Extensions: [Lyrics@LyricsContainer.co] C:\Program Files\LyricsContainer\122.xpi
FF Extension: No Name - C:\Program Files\LyricsContainer\122.xpi

Chrome: 
=======
CHR Extension: (LyricsContainer) - C:\Users\JESSLE~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\abfmigjiaapipflmopkaaooigcjjdojh\1.122
CHR Extension: () - C:\Users\JESSLE~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\mocblcnaofikinigmceddfghppkkjbog\1.0.0.3

========================== Services (Whitelisted) =================

R2 ADSMService; C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe [225280 2008-03-31] (ASUSTek Computer Inc.)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-06-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-06-20] (Avira Operations GmbH & Co. KG)
R2 ASLDRService; C:\Program Files\ATK Hotkey\ASLDRSrv.exe [94208 2007-10-03] ()
R2 ATKGFNEXSrv; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [94208 2007-08-08] ()
R2 BrowserDefendert; C:\ProgramData\BrowserDefender\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe [2827728 2013-05-23] ()
S3 GoogleDesktopManager-051210-111108; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [30192 2011-09-13] (Google)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)
R2 NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [71096 2009-09-06] ()
S3 Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [155320 2012-01-18] (Avanquest Software)
R2 WebCake Desktop Updater; C:\Users\Jesslette\AppData\Roaming\WebCake\WebCakeDesktop.exe [47896 2013-06-21] (WebCake LLC)

==================== Drivers (Whitelisted) ====================

R0 AsDsm; C:\Windows\System32\Drivers\AsDsm.sys [29752 2007-08-11] (Windows (R) Codename Longhorn DDK provider)
R2 ASMMAP; C:\Program Files\ATKGFNEX\ASMMAP.sys [13880 2007-07-24] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [84744 2013-06-20] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135136 2013-06-20] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-03-06] (Avira Operations GmbH & Co. KG)
S3 CRFILTER; C:\Windows\System32\DRIVERS\CRFILTER.sys [6656 2008-04-07] (Generic)
S3 CVirtA; C:\Windows\System32\DRIVERS\CVirtA.sys [5275 2007-01-18] (Cisco Systems, Inc.)
S4 DNE; C:\Windows\System32\DRIVERS\dne2000.sys [125328 2008-03-29] (Deterministic Networks, Inc.)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15928 2008-06-03] ( )
R0 lullaby; C:\Windows\System32\DRIVERS\lullaby.sys [15416 2008-05-29] (Windows (R) Codename Longhorn DDK provider)
R3 MTsensor; C:\Windows\System32\DRIVERS\ATKACPI.sys [7680 2006-12-14] (ATK0100)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1752704 2008-08-11] ()
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
S3 StarOpen; C:\Windows\System32\Drivers\StarOpen.sys [7168 2009-09-28] ()
S3 catchme; \??\C:\Users\JESSLE~1\AppData\Local\Temp\catchme.sys [x]
U2 ccEvtMgr; 
U2 ccSetMgr; 
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
U3 navapsvc; 
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]
U3 SAVRT; 
U1 SAVRTPEL; 
U3 TlntSvr; 
S3 vpnva; system32\DRIVERS\vpnva.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-16 13:36 - 2013-07-16 13:36 - 00000853 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-07-16 13:36 - 2013-07-16 13:36 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-07-16 13:19 - 2013-07-16 13:19 - 00000000 ____D C:\Users\Jesslette\Downloads\__MACOSX
2013-07-16 13:18 - 2013-07-16 13:18 - 00000000 ____D C:\Users\Jesslette\Downloads\A Different Kind Of Buzz
2013-07-16 13:18 - 2013-04-26 15:44 - 00000000 ____D C:\Users\Jesslette\Downloads\Tina
2013-07-16 13:17 - 2013-07-16 13:17 - 114252960 _____ C:\Users\Jesslette\Downloads\A Different Kind Of Buzz.zip.zip
2013-07-16 13:15 - 2013-07-16 13:17 - 118632592 _____ C:\Users\Jesslette\Downloads\howtoholdontosomething.zip
2013-07-16 13:13 - 2013-07-16 13:34 - 01115407 _____ C:\Users\Jesslette\Downloads\A Different Kind Of Buzz.zip
2013-07-16 12:43 - 2013-07-16 12:43 - 01218590 _____ (Farbar) C:\Users\Jesslette\Downloads\FRST(4).exe
2013-07-16 12:43 - 2013-07-16 12:43 - 00000979 _____ C:\Users\Jesslette\Desktop\Continue Zip Opener Installation.lnk
2013-07-16 12:42 - 2013-07-16 12:42 - 01218590 _____ (Farbar) C:\Users\Jesslette\Downloads\FRST(3).exe
2013-07-16 12:42 - 2013-07-16 12:42 - 00793536 _____ C:\Users\Jesslette\Downloads\ZipOpenerSetup.exe
2013-07-16 11:49 - 2013-07-16 11:49 - 00000000 ____D C:\ProgramData\䘀ơ䏀ơ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-07-16 01:00 - 2013-07-16 01:00 - 00000000 ____D C:\ProgramData\䘀A䏀A浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-07-16 01:00 - 2013-07-16 01:00 - 00000000 ____D C:\Program Files\LyricsContainer
2013-07-15 02:12 - 2013-07-15 02:12 - 00000000 ____D C:\ProgramData\䘀ǹ䏀ǹ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-07-14 14:50 - 2013-07-14 14:50 - 00000000 ____D C:\Program Files\Plus-HD-1.6
2013-07-14 14:49 - 2013-07-14 14:49 - 00283256 _____ C:\Users\Jesslette\Downloads\Setup(1).exe
2013-07-14 14:41 - 2013-07-14 14:41 - 00000000 ____D C:\ProgramData\䘀ǝ䏀ǝ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-07-14 14:06 - 2013-07-14 14:06 - 00448512 _____ (OldTimer Tools) C:\Users\Jesslette\Downloads\TFC.exe
2013-07-14 14:04 - 2013-07-14 14:04 - 00001899 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2013-07-14 14:03 - 2013-07-14 14:03 - 00000000 ____D C:\Program Files\Common Files\Adobe
2013-07-14 13:59 - 2013-07-14 13:59 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\WebCake
2013-07-14 13:59 - 2013-07-14 13:59 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserDefender
2013-07-14 13:59 - 2013-07-14 13:59 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\Delta
2013-07-14 13:59 - 2013-07-14 13:59 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\BabSolution
2013-07-14 13:59 - 2013-07-14 13:59 - 00000000 ____D C:\ProgramData\BrowserDefender
2013-07-14 13:59 - 2013-07-14 13:59 - 00000000 ____D C:\Program Files\WebCake
2013-07-14 13:59 - 2013-07-14 13:59 - 00000000 ____D C:\Program Files\Delta
2013-07-14 13:58 - 2013-07-16 11:49 - 00000392 _____ C:\Windows\Tasks\LyricsContainer Update.job
2013-07-14 13:58 - 2013-07-14 13:58 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\Babylon
2013-07-14 13:58 - 2013-07-14 13:58 - 00000000 ____D C:\ProgramData\Babylon
2013-07-14 13:57 - 2013-07-14 13:57 - 00283248 _____ C:\Users\Jesslette\Downloads\Adobe Reader.exe
2013-07-14 12:25 - 2013-07-14 12:25 - 00000000 ____D C:\Users\Jesslette\Desktop\ogsy aktuell
2013-07-14 12:25 - 2013-07-14 12:25 - 00000000 ____D C:\Users\Jesslette\Desktop\bewerbung
2013-07-14 12:24 - 2013-07-14 12:25 - 00000000 ____D C:\Users\Jesslette\Desktop\RE
2013-07-14 12:23 - 2013-07-14 12:23 - 00000104 _____ C:\Users\Jesslette\Desktop\Papierkorb - Verknüpfung.lnk
2013-07-14 10:37 - 2013-07-14 10:37 - 01218214 _____ (Farbar) C:\Users\Jesslette\Downloads\FRST(2).exe
2013-07-14 10:26 - 2013-07-14 10:26 - 00890988 _____ C:\Users\Jesslette\Downloads\SecurityCheck.exe
2013-07-13 10:37 - 2013-07-13 10:37 - 02347384 _____ (ESET) C:\Users\Jesslette\Downloads\esetsmartinstaller_enu.exe
2013-07-13 10:22 - 2013-07-16 11:37 - 00003962 _____ C:\Windows\PFRO.log
2013-07-11 10:56 - 2013-07-11 10:56 - 00018837 _____ C:\ComboFix.txt
2013-07-11 10:37 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-07-11 10:37 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-07-11 10:37 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-07-11 10:37 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-07-11 10:37 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-07-11 10:37 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-07-11 10:37 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-07-11 10:37 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-07-11 10:36 - 2013-07-11 10:56 - 00000000 ____D C:\ComboFix
2013-07-11 10:35 - 2013-07-11 10:35 - 05394432 _____ C:\Users\Gast\NTUSER~1.AVG
2013-07-11 10:31 - 2013-07-11 10:56 - 00000000 ____D C:\Qoobox
2013-07-11 10:31 - 2013-07-11 10:53 - 00000000 ____D C:\Windows\erdnt
2013-07-11 10:30 - 2013-07-11 10:30 - 05087643 ____R (Swearware) C:\Users\Jesslette\Downloads\ComboFix.exe
2013-07-11 10:19 - 2013-07-11 10:19 - 01217338 _____ (Farbar) C:\Users\Jesslette\Downloads\FRST(1).exe
2013-07-11 09:52 - 2013-07-11 09:52 - 00000000 ____D C:\Windows\ERUNT
2013-07-11 09:51 - 2013-07-11 09:52 - 00559306 _____ (Oleg N. Scherbakov) C:\Users\Jesslette\Downloads\JRT.exe
2013-07-11 09:41 - 2013-07-11 09:41 - 00000130 _____ C:\Windows\DeleteOnReboot.bat
2013-07-11 09:39 - 2013-07-11 09:41 - 00032365 _____ C:\AdwCleaner[S1].txt
2013-07-11 09:34 - 2013-06-04 03:50 - 02049024 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-07-11 09:33 - 2013-05-29 13:30 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-11 09:33 - 2013-05-29 13:30 - 00916480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-11 09:33 - 2013-05-29 13:30 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-07-11 09:33 - 2013-05-29 13:28 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-07-11 09:33 - 2013-05-29 13:26 - 06016000 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-11 09:33 - 2013-05-29 13:26 - 00611840 _____ (Microsoft Corporation) C:\Windows\system32\mstime.dll
2013-07-11 09:33 - 2013-05-29 13:26 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-07-11 09:33 - 2013-05-29 13:25 - 00630272 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-11 09:33 - 2013-05-29 13:25 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-07-11 09:33 - 2013-05-29 13:25 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-07-11 09:33 - 2013-05-29 13:25 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-11 09:33 - 2013-05-29 13:24 - 11111424 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-11 09:33 - 2013-05-29 13:24 - 02004992 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-11 09:33 - 2013-05-29 13:24 - 01469440 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-07-11 09:33 - 2013-05-29 13:24 - 00387584 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-07-11 09:33 - 2013-05-29 13:24 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-07-11 09:33 - 2013-05-29 13:24 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-11 09:33 - 2013-05-29 13:24 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-07-11 09:33 - 2013-05-29 13:24 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-07-11 09:33 - 2013-05-29 13:24 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-07-11 09:33 - 2013-05-29 11:47 - 00385024 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-07-11 09:33 - 2013-05-29 10:07 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-07-11 09:33 - 2013-05-29 10:06 - 00174080 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-07-11 09:33 - 2013-05-29 10:05 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-07-11 09:33 - 2013-05-29 10:04 - 01638912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-11 09:32 - 2013-06-01 06:06 - 00505344 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-07-11 09:32 - 2013-05-08 06:04 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-11 09:32 - 2013-04-17 13:28 - 01029120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2013-07-11 09:32 - 2013-04-17 13:28 - 00219648 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2013-07-11 09:32 - 2013-04-17 13:28 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2013-07-11 09:32 - 2013-04-17 13:28 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2013-07-11 09:32 - 2013-04-17 12:34 - 01172480 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2013-07-11 09:32 - 2013-04-17 12:33 - 00486400 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2013-07-11 09:32 - 2013-04-17 12:14 - 00683008 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2013-07-11 09:32 - 2013-04-17 12:10 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-07-11 09:32 - 2013-04-17 12:10 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2013-07-11 09:16 - 2013-07-11 09:16 - 00650027 _____ C:\Users\Jesslette\Downloads\adwcleaner.exe
2013-07-09 18:23 - 2013-07-09 18:24 - 00034791 _____ C:\Users\Jesslette\Downloads\Addition.txt
2013-07-09 18:21 - 2013-07-09 18:21 - 01216688 _____ (Farbar) C:\Users\Jesslette\Downloads\FRST.exe
2013-07-09 18:21 - 2013-07-09 18:21 - 00000000 ____D C:\FRST
2013-07-09 17:56 - 2013-07-09 17:56 - 00377856 _____ C:\Users\Jesslette\Downloads\gmer_2.1.19163.exe
2013-07-09 17:53 - 2013-07-09 17:53 - 00000480 _____ C:\Users\Jesslette\Downloads\defogger_disable.log
2013-07-09 17:53 - 2013-07-09 17:53 - 00000000 _____ C:\Users\Jesslette\defogger_reenable
2013-07-09 17:51 - 2013-07-09 17:51 - 00050477 _____ C:\Users\Jesslette\Downloads\Defogger.exe
2013-07-09 15:07 - 2013-07-09 15:07 - 00103238 _____ C:\Users\Jesslette\Downloads\Extras.Txt
2013-07-09 15:06 - 2013-07-09 15:06 - 00103890 _____ C:\Users\Jesslette\Downloads\OTL.Txt
2013-07-09 14:43 - 2013-07-09 14:43 - 00602112 _____ (OldTimer Tools) C:\Users\Jesslette\Downloads\OTL.exe
2013-07-09 00:42 - 2013-07-09 00:42 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\Malwarebytes
2013-07-09 00:41 - 2013-07-09 00:41 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-07-09 00:31 - 2013-07-09 00:32 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Jesslette\Downloads\mbam-setup-1.75.0.1300.exe
2013-07-07 23:27 - 2013-07-07 23:27 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\PlusWinks
2013-07-07 23:20 - 2013-07-07 23:20 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\SeeSimilar
2013-07-07 23:11 - 2013-07-07 23:11 - 00393064 _____ (Softonic                                        ) C:\Users\Jesslette\Downloads\SoftonicDownloader_fuer_computer-repair-free.exe
2013-07-07 23:03 - 2013-07-07 23:03 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\Avira
2013-07-07 23:01 - 2013-07-07 23:01 - 00000000 ____D C:\Program Files\Avira
2013-07-07 23:01 - 2013-06-20 14:48 - 00135136 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-07-07 23:01 - 2013-03-06 16:13 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-07-07 23:01 - 2012-08-27 15:50 - 00028520 _____ (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys
2013-07-07 22:59 - 2013-07-07 22:59 - 11177156 _____ C:\Users\Jesslette\Downloads\avira3737_free_antivirus_de(1).exe.part
2013-07-07 22:58 - 2013-07-07 23:00 - 104943936 _____ C:\Users\Jesslette\Downloads\avira3737_free_antivirus_de.exe
2013-07-06 01:16 - 2013-07-16 13:36 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-06-23 08:35 - 2013-06-23 08:35 - 00000000 ____D C:\ProgramData\䘈µ䏈µ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-23 02:17 - 2013-06-23 02:17 - 00000000 ____D C:\ProgramData\䘈Ä䏈Ä浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-22 15:40 - 2013-06-22 15:40 - 00000000 ____D C:\ProgramData\䘈ǐ䏈ǐ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-21 18:51 - 2013-06-21 18:51 - 00000000 ____D C:\ProgramData\䘈ǹ䏈ǹ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-21 12:50 - 2013-06-21 12:50 - 00000000 ____D C:\ProgramData\䘈Ʈ䏈Ʈ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-19 21:53 - 2013-06-19 21:53 - 00000000 ____D C:\ProgramData\䘈ǭ䏈ǭ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-16 18:23 - 2013-06-16 18:23 - 00000000 ____D C:\ProgramData\䘈0䏈0浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮

==================== One Month Modified Files and Folders =======

2013-07-16 13:36 - 2013-07-16 13:36 - 00000853 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-07-16 13:36 - 2013-07-16 13:36 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-07-16 13:36 - 2013-07-06 01:16 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-07-16 13:36 - 2006-11-02 13:18 - 00000000 __RHD C:\Users\Public\Desktop
2013-07-16 13:34 - 2013-07-16 13:13 - 01115407 _____ C:\Users\Jesslette\Downloads\A Different Kind Of Buzz.zip
2013-07-16 13:19 - 2013-07-16 13:19 - 00000000 ____D C:\Users\Jesslette\Downloads\__MACOSX
2013-07-16 13:18 - 2013-07-16 13:18 - 00000000 ____D C:\Users\Jesslette\Downloads\A Different Kind Of Buzz
2013-07-16 13:17 - 2013-07-16 13:17 - 114252960 _____ C:\Users\Jesslette\Downloads\A Different Kind Of Buzz.zip.zip
2013-07-16 13:17 - 2013-07-16 13:15 - 118632592 _____ C:\Users\Jesslette\Downloads\howtoholdontosomething.zip
2013-07-16 13:10 - 2012-04-14 11:40 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-16 13:10 - 2010-02-14 22:44 - 01562120 _____ C:\Windows\WindowsUpdate.log
2013-07-16 12:43 - 2013-07-16 12:43 - 01218590 _____ (Farbar) C:\Users\Jesslette\Downloads\FRST(4).exe
2013-07-16 12:43 - 2013-07-16 12:43 - 00000979 _____ C:\Users\Jesslette\Desktop\Continue Zip Opener Installation.lnk
2013-07-16 12:43 - 2009-05-29 12:20 - 00000000 ___RD C:\Users\Jesslette\Desktop
2013-07-16 12:42 - 2013-07-16 12:42 - 01218590 _____ (Farbar) C:\Users\Jesslette\Downloads\FRST(3).exe
2013-07-16 12:42 - 2013-07-16 12:42 - 00793536 _____ C:\Users\Jesslette\Downloads\ZipOpenerSetup.exe
2013-07-16 12:38 - 2012-04-04 22:20 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-07-16 11:49 - 2013-07-16 11:49 - 00000000 ____D C:\ProgramData\䘀ơ䏀ơ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-07-16 11:49 - 2013-07-14 13:58 - 00000392 _____ C:\Windows\Tasks\LyricsContainer Update.job
2013-07-16 11:49 - 2012-04-04 22:20 - 00001100 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-07-16 11:37 - 2013-07-13 10:22 - 00003962 _____ C:\Windows\PFRO.log
2013-07-16 11:37 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-07-16 11:37 - 2006-11-02 14:47 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-16 11:37 - 2006-11-02 14:47 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-16 02:11 - 2006-11-02 15:01 - 00032584 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-07-16 01:00 - 2013-07-16 01:00 - 00000000 ____D C:\ProgramData\䘀A䏀A浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-07-16 01:00 - 2013-07-16 01:00 - 00000000 ____D C:\Program Files\LyricsContainer
2013-07-15 02:12 - 2013-07-15 02:12 - 00000000 ____D C:\ProgramData\䘀ǹ䏀ǹ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-07-15 02:11 - 2009-03-14 05:05 - 00045056 _____ C:\Windows\system32\acovcnt.exe
2013-07-14 14:50 - 2013-07-14 14:50 - 00000000 ____D C:\Program Files\Plus-HD-1.6
2013-07-14 14:49 - 2013-07-14 14:49 - 00283256 _____ C:\Users\Jesslette\Downloads\Setup(1).exe
2013-07-14 14:41 - 2013-07-14 14:41 - 00000000 ____D C:\ProgramData\䘀ǝ䏀ǝ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-07-14 14:06 - 2013-07-14 14:06 - 00448512 _____ (OldTimer Tools) C:\Users\Jesslette\Downloads\TFC.exe
2013-07-14 14:05 - 2009-05-29 12:22 - 00000000 ____D C:\Users\JESSLE~1\AppData\Local\Adobe
2013-07-14 14:04 - 2013-07-14 14:04 - 00001899 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2013-07-14 14:03 - 2013-07-14 14:03 - 00000000 ____D C:\Program Files\Common Files\Adobe
2013-07-14 14:03 - 2009-07-17 07:51 - 00000000 ____D C:\Program Files\Adobe
2013-07-14 14:03 - 2009-05-29 12:21 - 00000000 ____D C:\ProgramData\Adobe
2013-07-14 13:59 - 2013-07-14 13:59 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\WebCake
2013-07-14 13:59 - 2013-07-14 13:59 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserDefender
2013-07-14 13:59 - 2013-07-14 13:59 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\Delta
2013-07-14 13:59 - 2013-07-14 13:59 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\BabSolution
2013-07-14 13:59 - 2013-07-14 13:59 - 00000000 ____D C:\ProgramData\BrowserDefender
2013-07-14 13:59 - 2013-07-14 13:59 - 00000000 ____D C:\Program Files\WebCake
2013-07-14 13:59 - 2013-07-14 13:59 - 00000000 ____D C:\Program Files\Delta
2013-07-14 13:58 - 2013-07-14 13:58 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\Babylon
2013-07-14 13:58 - 2013-07-14 13:58 - 00000000 ____D C:\ProgramData\Babylon
2013-07-14 13:57 - 2013-07-14 13:57 - 00283248 _____ C:\Users\Jesslette\Downloads\Adobe Reader.exe
2013-07-14 12:25 - 2013-07-14 12:25 - 00000000 ____D C:\Users\Jesslette\Desktop\ogsy aktuell
2013-07-14 12:25 - 2013-07-14 12:25 - 00000000 ____D C:\Users\Jesslette\Desktop\bewerbung
2013-07-14 12:25 - 2013-07-14 12:24 - 00000000 ____D C:\Users\Jesslette\Desktop\RE
2013-07-14 12:23 - 2013-07-14 12:23 - 00000104 _____ C:\Users\Jesslette\Desktop\Papierkorb - Verknüpfung.lnk
2013-07-14 10:37 - 2013-07-14 10:37 - 01218214 _____ (Farbar) C:\Users\Jesslette\Downloads\FRST(2).exe
2013-07-14 10:26 - 2013-07-14 10:26 - 00890988 _____ C:\Users\Jesslette\Downloads\SecurityCheck.exe
2013-07-13 13:14 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\Microsoft.NET
2013-07-13 10:39 - 2006-11-02 12:33 - 01475254 _____ C:\Windows\system32\PerfStringBackup.INI
2013-07-13 10:37 - 2013-07-13 10:37 - 02347384 _____ (ESET) C:\Users\Jesslette\Downloads\esetsmartinstaller_enu.exe
2013-07-13 10:25 - 2006-11-02 14:47 - 00372120 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-13 10:22 - 2009-05-29 12:29 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-07-13 10:22 - 2006-11-02 14:37 - 00000000 ____D C:\Windows\system32\XPSViewer
2013-07-12 00:16 - 2009-03-14 02:16 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-07-12 00:11 - 2006-11-02 12:24 - 75699896 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2013-07-11 23:55 - 2006-11-02 14:37 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-11 10:56 - 2013-07-11 10:56 - 00018837 _____ C:\ComboFix.txt
2013-07-11 10:56 - 2013-07-11 10:36 - 00000000 ____D C:\ComboFix
2013-07-11 10:56 - 2013-07-11 10:31 - 00000000 ____D C:\Qoobox
2013-07-11 10:56 - 2006-11-02 13:18 - 00000000 __RHD C:\Users\Default
2013-07-11 10:56 - 2006-11-02 13:18 - 00000000 ___RD C:\Users\Public
2013-07-11 10:53 - 2013-07-11 10:31 - 00000000 ____D C:\Windows\erdnt
2013-07-11 10:52 - 2006-11-02 12:23 - 00000215 _____ C:\Windows\system.ini
2013-07-11 10:36 - 2009-10-23 12:30 - 00000000 ____D C:\ProgramData\avg9
2013-07-11 10:35 - 2013-07-11 10:35 - 05394432 _____ C:\Users\Gast\NTUSER~1.AVG
2013-07-11 10:35 - 2010-02-14 22:41 - 00000000 ____D C:\Users\Gast
2013-07-11 10:30 - 2013-07-11 10:30 - 05087643 ____R (Swearware) C:\Users\Jesslette\Downloads\ComboFix.exe
2013-07-11 10:19 - 2013-07-11 10:19 - 01217338 _____ (Farbar) C:\Users\Jesslette\Downloads\FRST(1).exe
2013-07-11 09:52 - 2013-07-11 09:52 - 00000000 ____D C:\Windows\ERUNT
2013-07-11 09:52 - 2013-07-11 09:51 - 00559306 _____ (Oleg N. Scherbakov) C:\Users\Jesslette\Downloads\JRT.exe
2013-07-11 09:41 - 2013-07-11 09:41 - 00000130 _____ C:\Windows\DeleteOnReboot.bat
2013-07-11 09:41 - 2013-07-11 09:39 - 00032365 _____ C:\AdwCleaner[S1].txt
2013-07-11 09:40 - 2009-06-19 17:16 - 00000000 ____D C:\ProgramData\ICQ
2013-07-11 09:16 - 2013-07-11 09:16 - 00650027 _____ C:\Users\Jesslette\Downloads\adwcleaner.exe
2013-07-09 18:24 - 2013-07-09 18:23 - 00034791 _____ C:\Users\Jesslette\Downloads\Addition.txt
2013-07-09 18:21 - 2013-07-09 18:21 - 01216688 _____ (Farbar) C:\Users\Jesslette\Downloads\FRST.exe
2013-07-09 18:21 - 2013-07-09 18:21 - 00000000 ____D C:\FRST
2013-07-09 17:56 - 2013-07-09 17:56 - 00377856 _____ C:\Users\Jesslette\Downloads\gmer_2.1.19163.exe
2013-07-09 17:53 - 2013-07-09 17:53 - 00000480 _____ C:\Users\Jesslette\Downloads\defogger_disable.log
2013-07-09 17:53 - 2013-07-09 17:53 - 00000000 _____ C:\Users\Jesslette\defogger_reenable
2013-07-09 17:53 - 2009-05-29 12:20 - 00000000 ____D C:\Users\Jesslette
2013-07-09 17:51 - 2013-07-09 17:51 - 00050477 _____ C:\Users\Jesslette\Downloads\Defogger.exe
2013-07-09 15:07 - 2013-07-09 15:07 - 00103238 _____ C:\Users\Jesslette\Downloads\Extras.Txt
2013-07-09 15:06 - 2013-07-09 15:06 - 00103890 _____ C:\Users\Jesslette\Downloads\OTL.Txt
2013-07-09 14:43 - 2013-07-09 14:43 - 00602112 _____ (OldTimer Tools) C:\Users\Jesslette\Downloads\OTL.exe
2013-07-09 14:10 - 2010-02-14 22:16 - 00000000 ____D C:\Windows\pss
2013-07-09 09:06 - 2012-06-06 12:18 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\Dropbox
2013-07-09 09:05 - 2013-04-22 23:33 - 00000000 ___RD C:\Users\Jesslette\Dropbox
2013-07-09 00:42 - 2013-07-09 00:42 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\Malwarebytes
2013-07-09 00:41 - 2013-07-09 00:41 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-07-09 00:32 - 2013-07-09 00:31 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Jesslette\Downloads\mbam-setup-1.75.0.1300.exe
2013-07-07 23:27 - 2013-07-07 23:27 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\PlusWinks
2013-07-07 23:20 - 2013-07-07 23:20 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\SeeSimilar
2013-07-07 23:11 - 2013-07-07 23:11 - 00393064 _____ (Softonic                                        ) C:\Users\Jesslette\Downloads\SoftonicDownloader_fuer_computer-repair-free.exe
2013-07-07 23:03 - 2013-07-07 23:03 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\Avira
2013-07-07 23:01 - 2013-07-07 23:01 - 00000000 ____D C:\Program Files\Avira
2013-07-07 23:01 - 2009-09-02 21:38 - 00000000 ____D C:\ProgramData\Avira
2013-07-07 23:00 - 2013-07-07 22:58 - 104943936 _____ C:\Users\Jesslette\Downloads\avira3737_free_antivirus_de.exe
2013-07-07 22:59 - 2013-07-07 22:59 - 11177156 _____ C:\Users\Jesslette\Downloads\avira3737_free_antivirus_de(1).exe.part
2013-07-06 10:04 - 2009-11-10 00:04 - 00000000 _____ C:\Users\JESSLE~1\AppData\Local\prvlcl.dat
2013-06-24 22:47 - 2009-08-15 20:39 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\vlc
2013-06-23 08:35 - 2013-06-23 08:35 - 00000000 ____D C:\ProgramData\䘈µ䏈µ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-23 02:17 - 2013-06-23 02:17 - 00000000 ____D C:\ProgramData\䘈Ä䏈Ä浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-22 15:40 - 2013-06-22 15:40 - 00000000 ____D C:\ProgramData\䘈ǐ䏈ǐ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-21 18:51 - 2013-06-21 18:51 - 00000000 ____D C:\ProgramData\䘈ǹ䏈ǹ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-21 12:50 - 2013-06-21 12:50 - 00000000 ____D C:\ProgramData\䘈Ʈ䏈Ʈ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-20 14:48 - 2013-07-07 23:01 - 00135136 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-06-20 14:48 - 2009-09-02 21:38 - 00084744 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-06-19 21:53 - 2013-06-19 21:53 - 00000000 ____D C:\ProgramData\䘈ǭ䏈ǭ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-16 18:23 - 2013-06-16 18:23 - 00000000 ____D C:\ProgramData\䘈0䏈0浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-16 11:52

==================== End Of Log ============================

--- --- ---

jesslette · 16.07.2013, 12:44

also irgendwie spinnt nun alles

schrauber · 16.07.2013, 13:34

Lösche mal AdwCleaner und JRT. Ist wieder alles voll mit Adware.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log.

jesslette · 16.07.2013, 14:04

Code:

ATTFilter

# AdwCleaner v2.305 - Datei am 16/07/2013 um 14:48:01 erstellt
# Aktualisiert am 11/07/2013 von Xplode
# Betriebssystem : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
# Benutzer : Jesslette - JESSLETTE-PC
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\***\Downloads\adwcleaner.exe
# Option [Löschen]


**** [Dienste] ****

Gestoppt & Gelöscht : BrowserDefendert
Gestoppt & Gelöscht : WebCake Desktop Updater

***** [Dateien / Ordner] *****

Datei Gelöscht : C:\Users\Jesslette\AppData\Local\Google\Chrome\User Data\Default\bProtector Web Data
Datei Gelöscht : C:\Users\Jesslette\AppData\Local\Google\Chrome\User Data\Default\bprotectorpreferences
Datei Gelöscht : C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\bprotector_extensions.sqlite
Datei Gelöscht : C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\bprotector_prefs.js
Datei Gelöscht : C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\ask-search.xml
Datei Gelöscht : C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\BrowserDefender.xml
Datei Gelöscht : C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\delta.xml
Datei Gelöscht : C:\Windows\system32\ImhxxpComm.dll
Datei Gelöscht : C:\Windows\Tasks\LyricsContainer Update.job
Gelöscht mit Neustart : C:\ProgramData\BrowserDefender
Ordner Gelöscht : C:\Program Files\delta
Ordner Gelöscht : C:\Program Files\LyricsContainer
Ordner Gelöscht : C:\Program Files\WebCake
Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\ProgramData\Tarma Installer
Ordner Gelöscht : C:\Users\Jesslette\AppData\Local\Google\Chrome\User Data\Default\Extensions\abfmigjiaapipflmopkaaooigcjjdojh
Ordner Gelöscht : C:\Users\Jesslette\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
Ordner Gelöscht : C:\Users\Jesslette\AppData\LocalLow\AVG Security Toolbar
Ordner Gelöscht : C:\Users\Jesslette\AppData\LocalLow\delta
Ordner Gelöscht : C:\Users\Jesslette\AppData\Roaming\BabSolution
Ordner Gelöscht : C:\Users\Jesslette\AppData\Roaming\Babylon
Ordner Gelöscht : C:\Users\Jesslette\AppData\Roaming\delta
Ordner Gelöscht : C:\Users\Jesslette\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserDefender
Ordner Gelöscht : C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\extensions\plugin@getwebcake.com
Ordner Gelöscht : C:\Users\Jesslette\AppData\Roaming\WebCake
Ordner Gelöscht : C:\Windows\system32\ARFC
Ordner Gelöscht : C:\Windows\system32\jmdp

***** [Registrierungsdatenbank] *****

Schlüssel Gelöscht : HKCU\Software\5fedbd1b46aba48
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\LyricsContainer
Schlüssel Gelöscht : HKCU\Software\BabSolution
Schlüssel Gelöscht : HKCU\Software\DataMngr
Schlüssel Gelöscht : HKCU\Software\DataMngr_Toolbar
Schlüssel Gelöscht : HKCU\Software\Delta
Schlüssel Gelöscht : HKCU\Software\delta LTD
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{C4ED781C-7394-4906-AAFF-D6AB64FF7C38}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Delta Chrome Toolbar
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Lyrics@LyricsContainer.co
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{463B0ED4-8AFA-404B-90E7-4063A0708050}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Schlüssel Gelöscht : HKLM\SOFTWARE\5fedbd1b46aba48
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{463B0ED4-8AFA-404B-90E7-4063A0708050}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\Software\DataMngr
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\abfmigjiaapipflmopkaaooigcjjdojh
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\eooncjejnppfjjklapaamhcdmjbilmde
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\fjoijdanhaiflhibkljeklcghcmmfffh
Schlüssel Gelöscht : HKLM\Software\ICQ\ICQToolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{463B0ED4-8AFA-404B-90E7-4063A0708050}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C4ED781C-7394-4906-AAFF-D6AB64FF7C38}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Delta Chrome Toolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Lyrics@LyricsContainer.co
Schlüssel Gelöscht : HKLM\Software\Tarma Installer
Schlüssel Gelöscht : HKU\S-1-5-21-3380237485-2450509698-2268171655-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [WebCake Desktop]

***** [Internet Browser] *****

-\\ Internet Explorer v8.0.6001.19443

Ersetzt : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=485800224383ADAF&affID=119556&tt=110713_9126&tsp=4943 --> hxxp://www.google.com
Ersetzt : [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - bProtectTabs] = hxxp://www1.delta-search.com/?babsrc=NT_ss&mntrId=485800224383ADAF&affID=119556&tt=110713_9126&tsp=4943 --> hxxp://www.google.com

-\\ Mozilla Firefox v22.0 (de)

Datei : C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\prefs.js

C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\user.js ... Gelöscht !

Gelöscht : user_pref("extensions.delta.admin", false);
Gelöscht : user_pref("extensions.delta.aflt", "babsst");
Gelöscht : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Gelöscht : user_pref("extensions.delta.autoRvrt", "false");
Gelöscht : user_pref("extensions.delta.bbDpng", "16");
Gelöscht : user_pref("extensions.delta.cntry", "DE");
Gelöscht : user_pref("extensions.delta.dfltLng", "de");
Gelöscht : user_pref("extensions.delta.excTlbr", false);
Gelöscht : user_pref("extensions.delta.ffxUnstlRst", true);
Gelöscht : user_pref("extensions.delta.hdrMd5", "B52AFB216695C7CF08E26903247C2130");
Gelöscht : user_pref("extensions.delta.id", "48580ff900000000000000224383adaf");
Gelöscht : user_pref("extensions.delta.instlDay", "15900");
Gelöscht : user_pref("extensions.delta.instlRef", "sst");
Gelöscht : user_pref("extensions.delta.lastVrsnTs", "1.8.21.513:59:35");
Gelöscht : user_pref("extensions.delta.newTab", false);
Gelöscht : user_pref("extensions.delta.prdct", "delta");
Gelöscht : user_pref("extensions.delta.prtnrId", "delta");
Gelöscht : user_pref("extensions.delta.rvrt", "false");
Gelöscht : user_pref("extensions.delta.sg", "tzb");
Gelöscht : user_pref("extensions.delta.smplGrp", "tzb");
Gelöscht : user_pref("extensions.delta.tlbrId", "base");
Gelöscht : user_pref("extensions.delta.tlbrSrchUrl", "");
Gelöscht : user_pref("extensions.delta.vrsn", "1.8.21.5");
Gelöscht : user_pref("extensions.delta.vrsni", "1.8.21.5");
Gelöscht : user_pref("extensions.delta.vrsnTs", "1.8.21.513:59:35");
Gelöscht : user_pref("extensions.delta_i.babExt", "");
Gelöscht : user_pref("extensions.delta_i.babTrack", "affID=119556&tt=110713_9126&tsp=4943");
Gelöscht : user_pref("extensions.delta_i.srcExt", "ss");
Gelöscht : user_pref("extensions.enabledAddons", "%7B166745b8-8d4a-4c86-9120-696de51a77aa%7D:1.0,youtubeunblock[...]

Datei : C:\Users\Gast\AppData\Roaming\Mozilla\Firefox\Profiles\rxcx2lz7.default\prefs.js

[OK] Die Datei ist sauber.

-\\ Google Chrome v [Version kann nicht ermittelt werden]

Datei : C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Die Datei ist sauber.

*************************

AdwCleaner[S1].txt - [32365 octets] - [11/07/2013 09:39:55]
AdwCleaner[S2].txt - [9797 octets] - [16/07/2013 14:48:01]

########## EOF - C:\AdwCleaner[S2].txt - [9857 octets] ##########

jesslette · 16.07.2013, 14:10

was soll ich machen J/N
siehe unten screenshot

jesslette · 17.07.2013, 00:27

schrauber ich muss erstmal los zur arbeit. später weiter in diesem computer chaos.
dir noch nen guten tag . danke

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.1.1 (07.15.2013:2)
OS: Windows Vista (TM) Home Premium x86
Ran by *** on 16.07.2013 at 15:05:30,22
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\clsid\{a0b10ebe-4e51-4cae-949b-e6b9e7d68cea}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\clsid\{fb684d26-01f4-4d9d-87cb-f486beba56dc}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\windows\currentversion\ext\bprotectsettings
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\browserdefender"



~~~ FireFox

Successfully deleted: [File] C:\Users\Jesslette\AppData\Roaming\mozilla\firefox\profiles\xnn4yddx.default\invalidprefs.js
Successfully deleted: [Registry Value] HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions\\lyrics@lyricscontainer.co
Emptied folder: C:\Users\Jesslette\AppData\Roaming\mozilla\firefox\profiles\xnn4yddx.default\minidumps [2 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 16.07.2013 at 15:27:10,69
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 17-07-2013
Ran by Jesslette (administrator) on 17-07-2013 01:25:22
Running from C:\Users\***\Downloads
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(ATI Technologies Inc.) C:\Windows\system32\Ati2evxx.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(ATI Technologies Inc.) C:\Windows\system32\Ati2evxx.exe
(ASUSTek Computer Inc.) C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
() C:\Program Files\ATK Hotkey\ASLDRSrv.exe
() C:\Program Files\ATKGFNEX\GFNEXSrv.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
() C:\Program Files\CDBurnerXP\NMSAccessU.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(ATK0100) C:\Program Files\ATK Hotkey\Hcontrol.exe
() C:\Program Files\ATK Hotkey\MsgTranAgt.exe
() C:\Program Files\Wireless Console 2\wcourier.exe
(ASUS) C:\Program Files\ASUS\ASUS CopyProtect\aspg.exe
(ATK) C:\Program Files\P4G\BatteryLife.exe
(ATK) C:\Program Files\ASUS\Splendid\ACMON.exe
(ASUS) C:\Program Files\ASUS\SmartLogon\sensorsrv.exe
() C:\Program Files\ASUS\ASUS Live Update\ALU.exe
(ASUSTeK) C:\Windows\System32\ACEngSvr.exe
() C:\Program Files\ATK Hotkey\ATKOSD.exe
() C:\Program Files\ATK Hotkey\KBFiltr.exe
() C:\Program Files\ATK Hotkey\WDC.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
() C:\Program Files\ATK Hotkey\HControlUser.exe
(ASUS) C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe
(ASUS) C:\Windows\System32\ASUSTPE.exe
(ASUSTek Computer Inc.) C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\system32\conime.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
(Farbar) C:\Users\Jesslette\Downloads\FRST(1).exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwsc.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1029416 2007-12-06] (Synaptics, Inc.)
HKLM\...\Run: [HControlUser] - C:\Program Files\ATK Hotkey\HcontrolUser.exe [98304 2008-01-12] ()
HKLM\...\Run: [ATKOSD2] - C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe [7651328 2008-07-15] (ASUS)
HKLM\...\Run: [ASUSTPE] - C:\Windows\system32\ASUSTPE.exe [106496 2007-10-12] (ASUS)
HKLM\...\Run: [ADSMTray] - C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe [266240 2008-04-01] (ASUSTek Computer Inc.)
HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-10-11] (Apple Inc.)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2012-10-25] (Apple Inc.)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [345144 2013-06-20] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-05-11] (Adobe Systems Incorporated)
HKLM\...\Runonce: [AvgUninstallURL] - cmd.exe /c start hxxp://www.avg.de/de.special-uninstallation-feedback-appf?lic=OQBBAFYARgBSAEUARQAtAFYAMwBaAEMAOQAtADYATgBBAFIAUwAtADYAUgBXAEcAQQAtAEEASwBEAFUANwAtAFYAWAAzADcATQA"&"inst=NwA3AC0ANwAxADAAMwA5ADMAOQA2ADAALQBGAEwAKwA5AC0AWABPADkAKwAxAC0AWABPADMANgArADEALQBEAEQAVAArADMAMAA0ADIAOQAtAFMAVAA5ADAARgBBAFAAUAArADEALQBEAEQAOQAwAEYAKwAxAC0AUwA5ADAARgBEAEQARgArADEALQBGADkAMABUAEIAKwAyAC0ARgA5ADAATQAxADIAUgArADEALQBWAEkAUAAxADIAKwAxAC0AVABMACsAMQA"&"prod=90"&"ver=9.0.894 [x]
HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)
HKU\Gast\...\Run: [LightScribe Control Panel] - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden [x]
Lsa: [Notification Packages] scecli C:\Program Files\ASUS\ASUS Data Security Manager\ASPWDFLT
Startup: C:\ProgramData\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe (McAfee, Inc.)
BootExecute: autocheck autochk * sdnclean.exe

==================== Internet (Whitelisted) ====================

ProxyServer: 192.168.100.1:800
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
StartMenuInternet: IEXPLORE.EXE - "C:\Program Files\Internet Explorer\iexplore.exe"
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = 
BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - No Name - {DFEFCDEE-CF1A-4FC8-88AD-48514E463B27} -  No File
Toolbar: HKCU -No Name - {DFEFCDEE-CF1A-4FC8-88AD-48514E463B27} -  No File
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.3 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=14.0.8051.1204 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\Firefox.xml
FF SearchPlugin: C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\inbox-suchen.xml
FF SearchPlugin: C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\visualbee-v1-customized-web-search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\googledesktop.xml
FF Extension: No Name - C:\Users\Jesslette\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
FF Extension: Microsoft .NET Framework Assistant - C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF Extension: IE Tab - C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\Extensions\{77b819fa-95ad-4f2c-ac7c-486b356188a9}
FF Extension: youtubeunblocker - C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\Extensions\youtubeunblocker@unblocker.yt.xpi
FF Extension: No Name - C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\Extensions\{166745b8-8d4a-4c86-9120-696de51a77aa}.xpi
FF Extension: No Name - C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF Extension: Default - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKCU\...\Firefox\Extensions: [goobar@gootoolbar.com] C:\Users\Jesslette\AppData\Roaming\GooToolBar\GooToolBar Installer\1.0.0.0
FF Extension: goobar - C:\Users\Jesslette\AppData\Roaming\GooToolBar\GooToolBar Installer\1.0.0.0

Chrome: 
=======
CHR Extension: () - C:\Users\JESSLE~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\mocblcnaofikinigmceddfghppkkjbog\1.0.0.3

========================== Services (Whitelisted) =================

R2 ADSMService; C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe [225280 2008-03-31] (ASUSTek Computer Inc.)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-06-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-06-20] (Avira Operations GmbH & Co. KG)
R2 ASLDRService; C:\Program Files\ATK Hotkey\ASLDRSrv.exe [94208 2007-10-03] ()
R2 ATKGFNEXSrv; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [94208 2007-08-08] ()
S3 GoogleDesktopManager-051210-111108; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [30192 2011-09-13] (Google)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)
R2 NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [71096 2009-09-06] ()
S3 Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [155320 2012-01-18] (Avanquest Software)

==================== Drivers (Whitelisted) ====================

R0 AsDsm; C:\Windows\System32\Drivers\AsDsm.sys [29752 2007-08-11] (Windows (R) Codename Longhorn DDK provider)
R2 ASMMAP; C:\Program Files\ATKGFNEX\ASMMAP.sys [13880 2007-07-24] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [84744 2013-06-20] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135136 2013-06-20] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-03-06] (Avira Operations GmbH & Co. KG)
S3 CRFILTER; C:\Windows\System32\DRIVERS\CRFILTER.sys [6656 2008-04-07] (Generic)
S3 CVirtA; C:\Windows\System32\DRIVERS\CVirtA.sys [5275 2007-01-18] (Cisco Systems, Inc.)
S4 DNE; C:\Windows\System32\DRIVERS\dne2000.sys [125328 2008-03-29] (Deterministic Networks, Inc.)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15928 2008-06-03] ( )
R0 lullaby; C:\Windows\System32\DRIVERS\lullaby.sys [15416 2008-05-29] (Windows (R) Codename Longhorn DDK provider)
R3 MTsensor; C:\Windows\System32\DRIVERS\ATKACPI.sys [7680 2006-12-14] (ATK0100)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1752704 2008-08-11] ()
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
S3 StarOpen; C:\Windows\System32\Drivers\StarOpen.sys [7168 2009-09-28] ()
S3 catchme; \??\C:\Users\JESSLE~1\AppData\Local\Temp\catchme.sys [x]
U2 ccEvtMgr; 
U2 ccSetMgr; 
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
U3 navapsvc; 
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]
U3 SAVRT; 
U1 SAVRTPEL; 
U3 TlntSvr; 
S3 vpnva; system32\DRIVERS\vpnva.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-17 01:24 - 2013-07-17 01:24 - 01218600 _____ (Farbar) C:\Users\Jesslette\Downloads\FRST(1).exe
2013-07-16 15:27 - 2013-07-16 15:27 - 00001681 _____ C:\Users\Jesslette\Desktop\JRT.txt
2013-07-16 15:04 - 2013-07-16 15:04 - 00559035 _____ (Oleg N. Scherbakov) C:\Users\Jesslette\Downloads\JRT.exe
2013-07-16 14:48 - 2013-07-16 14:48 - 00009926 _____ C:\AdwCleaner[S2].txt
2013-07-16 14:47 - 2013-07-16 14:47 - 00662345 _____ C:\Users\Jesslette\Downloads\adwcleaner.exe
2013-07-16 13:36 - 2013-07-16 13:36 - 00000853 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-07-16 13:36 - 2013-07-16 13:36 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-07-16 13:19 - 2013-07-16 13:19 - 00000000 ____D C:\Users\Jesslette\Downloads\__MACOSX
2013-07-16 13:18 - 2013-07-16 13:18 - 00000000 ____D C:\Users\Jesslette\Downloads\A Different Kind Of Buzz
2013-07-16 13:18 - 2013-04-26 15:44 - 00000000 ____D C:\Users\Jesslette\Downloads\Tina
2013-07-16 13:17 - 2013-07-16 13:17 - 114252960 _____ C:\Users\Jesslette\Downloads\A Different Kind Of Buzz.zip.zip
2013-07-16 13:15 - 2013-07-16 13:53 - 01336148 _____ C:\Users\Jesslette\Downloads\howtoholdontosomething.zip
2013-07-16 13:13 - 2013-07-16 13:34 - 01115407 _____ C:\Users\Jesslette\Downloads\A Different Kind Of Buzz.zip
2013-07-16 12:43 - 2013-07-16 12:43 - 00000979 _____ C:\Users\Jesslette\Desktop\Continue Zip Opener Installation.lnk
2013-07-16 12:42 - 2013-07-16 12:42 - 01218590 _____ (Farbar) C:\Users\Jesslette\Downloads\FRST(3).exe
2013-07-16 12:42 - 2013-07-16 12:42 - 00793536 _____ C:\Users\Jesslette\Downloads\ZipOpenerSetup.exe
2013-07-16 11:49 - 2013-07-16 11:49 - 00000000 ____D C:\ProgramData\䘀ơ䏀ơ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-07-16 01:00 - 2013-07-16 01:00 - 00000000 ____D C:\ProgramData\䘀A䏀A浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-07-15 02:12 - 2013-07-15 02:12 - 00000000 ____D C:\ProgramData\䘀ǹ䏀ǹ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-07-14 14:50 - 2013-07-14 14:50 - 00000000 ____D C:\Program Files\Plus-HD-1.6
2013-07-14 14:49 - 2013-07-14 14:49 - 00283256 _____ C:\Users\Jesslette\Downloads\Setup(1).exe
2013-07-14 14:41 - 2013-07-14 14:41 - 00000000 ____D C:\ProgramData\䘀ǝ䏀ǝ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-07-14 14:06 - 2013-07-14 14:06 - 00448512 _____ (OldTimer Tools) C:\Users\Jesslette\Downloads\TFC.exe
2013-07-14 14:04 - 2013-07-14 14:04 - 00001899 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2013-07-14 14:03 - 2013-07-14 14:03 - 00000000 ____D C:\Program Files\Common Files\Adobe
2013-07-14 13:57 - 2013-07-14 13:57 - 00283248 _____ C:\Users\Jesslette\Downloads\Adobe Reader.exe
2013-07-14 12:25 - 2013-07-14 12:25 - 00000000 ____D C:\Users\Jesslette\Desktop\ogsy aktuell
2013-07-14 12:25 - 2013-07-14 12:25 - 00000000 ____D C:\Users\Jesslette\Desktop\bewerbung
2013-07-14 12:24 - 2013-07-14 12:25 - 00000000 ____D C:\Users\Jesslette\Desktop\RE
2013-07-14 12:23 - 2013-07-14 12:23 - 00000104 _____ C:\Users\Jesslette\Desktop\Papierkorb - Verknüpfung.lnk
2013-07-14 10:26 - 2013-07-14 10:26 - 00890988 _____ C:\Users\Jesslette\Downloads\SecurityCheck.exe
2013-07-13 10:37 - 2013-07-13 10:37 - 02347384 _____ (ESET) C:\Users\Jesslette\Downloads\esetsmartinstaller_enu.exe
2013-07-13 10:22 - 2013-07-16 14:50 - 00005018 _____ C:\Windows\PFRO.log
2013-07-11 10:56 - 2013-07-11 10:56 - 00018837 _____ C:\ComboFix.txt
2013-07-11 10:37 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-07-11 10:37 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-07-11 10:37 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-07-11 10:37 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-07-11 10:37 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-07-11 10:37 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-07-11 10:37 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-07-11 10:37 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-07-11 10:36 - 2013-07-11 10:56 - 00000000 ____D C:\ComboFix
2013-07-11 10:35 - 2013-07-11 10:35 - 05394432 _____ C:\Users\Gast\NTUSER~1.AVG
2013-07-11 10:31 - 2013-07-11 10:56 - 00000000 ____D C:\Qoobox
2013-07-11 10:31 - 2013-07-11 10:53 - 00000000 ____D C:\Windows\erdnt
2013-07-11 10:30 - 2013-07-11 10:30 - 05087643 ____R (Swearware) C:\Users\Jesslette\Downloads\ComboFix.exe
2013-07-11 09:52 - 2013-07-11 09:52 - 00000000 ____D C:\Windows\ERUNT
2013-07-11 09:41 - 2013-07-16 14:48 - 00000228 _____ C:\Windows\DeleteOnReboot.bat
2013-07-11 09:39 - 2013-07-11 09:41 - 00032365 _____ C:\AdwCleaner[S1].txt
2013-07-11 09:34 - 2013-06-04 03:50 - 02049024 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-07-11 09:33 - 2013-05-29 13:30 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-11 09:33 - 2013-05-29 13:30 - 00916480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-11 09:33 - 2013-05-29 13:30 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-07-11 09:33 - 2013-05-29 13:28 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-07-11 09:33 - 2013-05-29 13:26 - 06016000 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-11 09:33 - 2013-05-29 13:26 - 00611840 _____ (Microsoft Corporation) C:\Windows\system32\mstime.dll
2013-07-11 09:33 - 2013-05-29 13:26 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-07-11 09:33 - 2013-05-29 13:25 - 00630272 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-11 09:33 - 2013-05-29 13:25 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-07-11 09:33 - 2013-05-29 13:25 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-07-11 09:33 - 2013-05-29 13:25 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-11 09:33 - 2013-05-29 13:24 - 11111424 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-11 09:33 - 2013-05-29 13:24 - 02004992 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-11 09:33 - 2013-05-29 13:24 - 01469440 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-07-11 09:33 - 2013-05-29 13:24 - 00387584 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-07-11 09:33 - 2013-05-29 13:24 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-07-11 09:33 - 2013-05-29 13:24 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-11 09:33 - 2013-05-29 13:24 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-07-11 09:33 - 2013-05-29 13:24 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-07-11 09:33 - 2013-05-29 13:24 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-07-11 09:33 - 2013-05-29 11:47 - 00385024 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-07-11 09:33 - 2013-05-29 10:07 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-07-11 09:33 - 2013-05-29 10:06 - 00174080 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-07-11 09:33 - 2013-05-29 10:05 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-07-11 09:33 - 2013-05-29 10:04 - 01638912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-11 09:32 - 2013-06-01 06:06 - 00505344 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-07-11 09:32 - 2013-05-08 06:04 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-11 09:32 - 2013-04-17 13:28 - 01029120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2013-07-11 09:32 - 2013-04-17 13:28 - 00219648 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2013-07-11 09:32 - 2013-04-17 13:28 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2013-07-11 09:32 - 2013-04-17 13:28 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2013-07-11 09:32 - 2013-04-17 12:34 - 01172480 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2013-07-11 09:32 - 2013-04-17 12:33 - 00486400 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2013-07-11 09:32 - 2013-04-17 12:14 - 00683008 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2013-07-11 09:32 - 2013-04-17 12:10 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-07-11 09:32 - 2013-04-17 12:10 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2013-07-09 18:23 - 2013-07-09 18:24 - 00034791 _____ C:\Users\Jesslette\Downloads\Addition.txt
2013-07-09 18:21 - 2013-07-09 18:21 - 01216688 _____ (Farbar) C:\Users\Jesslette\Downloads\FRST.exe
2013-07-09 18:21 - 2013-07-09 18:21 - 00000000 ____D C:\FRST
2013-07-09 17:56 - 2013-07-09 17:56 - 00377856 _____ C:\Users\Jesslette\Downloads\gmer_2.1.19163.exe
2013-07-09 17:53 - 2013-07-09 17:53 - 00000480 _____ C:\Users\Jesslette\Downloads\defogger_disable.log
2013-07-09 17:53 - 2013-07-09 17:53 - 00000000 _____ C:\Users\Jesslette\defogger_reenable
2013-07-09 17:53 - 2013-07-09 17:53 - 00000000 _____ C:\Users\Jesslette\defogger_reenable
2013-07-09 17:51 - 2013-07-09 17:51 - 00050477 _____ C:\Users\Jesslette\Downloads\Defogger.exe
2013-07-09 15:07 - 2013-07-09 15:07 - 00103238 _____ C:\Users\Jesslette\Downloads\Extras.Txt
2013-07-09 15:06 - 2013-07-09 15:06 - 00103890 _____ C:\Users\Jesslette\Downloads\OTL.Txt
2013-07-09 14:43 - 2013-07-09 14:43 - 00602112 _____ (OldTimer Tools) C:\Users\Jesslette\Downloads\OTL.exe
2013-07-09 00:42 - 2013-07-09 00:42 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\Malwarebytes
2013-07-09 00:41 - 2013-07-09 00:41 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-07-09 00:31 - 2013-07-09 00:32 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Jesslette\Downloads\mbam-setup-1.75.0.1300.exe
2013-07-07 23:27 - 2013-07-07 23:27 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\PlusWinks
2013-07-07 23:20 - 2013-07-07 23:20 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\SeeSimilar
2013-07-07 23:11 - 2013-07-07 23:11 - 00393064 _____ (Softonic                                        ) C:\Users\Jesslette\Downloads\SoftonicDownloader_fuer_computer-repair-free.exe
2013-07-07 23:03 - 2013-07-07 23:03 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\Avira
2013-07-07 23:01 - 2013-07-07 23:01 - 00000000 ____D C:\Program Files\Avira
2013-07-07 23:01 - 2013-06-20 14:48 - 00135136 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-07-07 23:01 - 2013-03-06 16:13 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-07-07 23:01 - 2012-08-27 15:50 - 00028520 _____ (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys
2013-07-07 22:59 - 2013-07-07 22:59 - 11177156 _____ C:\Users\Jesslette\Downloads\avira3737_free_antivirus_de(1).exe.part
2013-07-07 22:58 - 2013-07-07 23:00 - 104943936 _____ C:\Users\Jesslette\Downloads\avira3737_free_antivirus_de.exe
2013-07-06 01:16 - 2013-07-16 13:36 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-06-23 08:35 - 2013-06-23 08:35 - 00000000 ____D C:\ProgramData\䘈µ䏈µ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-23 02:17 - 2013-06-23 02:17 - 00000000 ____D C:\ProgramData\䘈Ä䏈Ä浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-22 15:40 - 2013-06-22 15:40 - 00000000 ____D C:\ProgramData\䘈ǐ䏈ǐ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-21 18:51 - 2013-06-21 18:51 - 00000000 ____D C:\ProgramData\䘈ǹ䏈ǹ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-21 12:50 - 2013-06-21 12:50 - 00000000 ____D C:\ProgramData\䘈Ʈ䏈Ʈ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-19 21:53 - 2013-06-19 21:53 - 00000000 ____D C:\ProgramData\䘈ǭ䏈ǭ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮

==================== One Month Modified Files and Folders =======

2013-07-17 01:24 - 2013-07-17 01:24 - 01218600 _____ (Farbar) C:\Users\Jesslette\Downloads\FRST(1).exe
2013-07-17 01:10 - 2012-04-14 11:40 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-17 00:50 - 2006-11-02 14:47 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-17 00:50 - 2006-11-02 14:47 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-17 00:38 - 2012-04-04 22:20 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-07-16 23:05 - 2010-02-14 22:44 - 01645430 _____ C:\Windows\WindowsUpdate.log
2013-07-16 15:27 - 2013-07-16 15:27 - 00001681 _____ C:\Users\Jesslette\Desktop\JRT.txt
2013-07-16 15:27 - 2009-05-29 12:20 - 00000000 ___RD C:\Users\Jesslette\Desktop
2013-07-16 15:27 - 2009-05-29 12:20 - 00000000 ___RD C:\Users\Jesslette\Desktop
2013-07-16 15:04 - 2013-07-16 15:04 - 00559035 _____ (Oleg N. Scherbakov) C:\Users\Jesslette\Downloads\JRT.exe
2013-07-16 14:56 - 2012-04-04 22:20 - 00001100 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-07-16 14:50 - 2013-07-13 10:22 - 00005018 _____ C:\Windows\PFRO.log
2013-07-16 14:50 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-07-16 14:49 - 2006-11-02 15:01 - 00032584 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-07-16 14:48 - 2013-07-16 14:48 - 00009926 _____ C:\AdwCleaner[S2].txt
2013-07-16 14:48 - 2013-07-11 09:41 - 00000228 _____ C:\Windows\DeleteOnReboot.bat
2013-07-16 14:47 - 2013-07-16 14:47 - 00662345 _____ C:\Users\Jesslette\Downloads\adwcleaner.exe
2013-07-16 13:53 - 2013-07-16 13:15 - 01336148 _____ C:\Users\Jesslette\Downloads\howtoholdontosomething.zip
2013-07-16 13:36 - 2013-07-16 13:36 - 00000853 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-07-16 13:36 - 2013-07-16 13:36 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-07-16 13:36 - 2013-07-06 01:16 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-07-16 13:36 - 2006-11-02 13:18 - 00000000 __RHD C:\Users\Public\Desktop
2013-07-16 13:34 - 2013-07-16 13:13 - 01115407 _____ C:\Users\Jesslette\Downloads\A Different Kind Of Buzz.zip
2013-07-16 13:19 - 2013-07-16 13:19 - 00000000 ____D C:\Users\Jesslette\Downloads\__MACOSX
2013-07-16 13:18 - 2013-07-16 13:18 - 00000000 ____D C:\Users\Jesslette\Downloads\A Different Kind Of Buzz
2013-07-16 13:17 - 2013-07-16 13:17 - 114252960 _____ C:\Users\Jesslette\Downloads\A Different Kind Of Buzz.zip.zip
2013-07-16 12:43 - 2013-07-16 12:43 - 00000979 _____ C:\Users\Jesslette\Desktop\Continue Zip Opener Installation.lnk
2013-07-16 12:42 - 2013-07-16 12:42 - 01218590 _____ (Farbar) C:\Users\Jesslette\Downloads\FRST(3).exe
2013-07-16 12:42 - 2013-07-16 12:42 - 00793536 _____ C:\Users\Jesslette\Downloads\ZipOpenerSetup.exe
2013-07-16 11:49 - 2013-07-16 11:49 - 00000000 ____D C:\ProgramData\䘀ơ䏀ơ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-07-16 01:00 - 2013-07-16 01:00 - 00000000 ____D C:\ProgramData\䘀A䏀A浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-07-15 02:12 - 2013-07-15 02:12 - 00000000 ____D C:\ProgramData\䘀ǹ䏀ǹ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-07-15 02:11 - 2009-03-14 05:05 - 00045056 _____ C:\Windows\system32\acovcnt.exe
2013-07-14 14:50 - 2013-07-14 14:50 - 00000000 ____D C:\Program Files\Plus-HD-1.6
2013-07-14 14:49 - 2013-07-14 14:49 - 00283256 _____ C:\Users\Jesslette\Downloads\Setup(1).exe
2013-07-14 14:41 - 2013-07-14 14:41 - 00000000 ____D C:\ProgramData\䘀ǝ䏀ǝ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-07-14 14:06 - 2013-07-14 14:06 - 00448512 _____ (OldTimer Tools) C:\Users\Jesslette\Downloads\TFC.exe
2013-07-14 14:05 - 2009-05-29 12:22 - 00000000 ____D C:\Users\JESSLE~1\AppData\Local\Adobe
2013-07-14 14:04 - 2013-07-14 14:04 - 00001899 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2013-07-14 14:03 - 2013-07-14 14:03 - 00000000 ____D C:\Program Files\Common Files\Adobe
2013-07-14 14:03 - 2009-07-17 07:51 - 00000000 ____D C:\Program Files\Adobe
2013-07-14 14:03 - 2009-05-29 12:21 - 00000000 ____D C:\ProgramData\Adobe
2013-07-14 13:57 - 2013-07-14 13:57 - 00283248 _____ C:\Users\Jesslette\Downloads\Adobe Reader.exe
2013-07-14 12:25 - 2013-07-14 12:25 - 00000000 ____D C:\Users\Jesslette\Desktop\ogsy aktuell
2013-07-14 12:25 - 2013-07-14 12:25 - 00000000 ____D C:\Users\Jesslette\Desktop\bewerbung
2013-07-14 12:25 - 2013-07-14 12:24 - 00000000 ____D C:\Users\Jesslette\Desktop\RE
2013-07-14 12:23 - 2013-07-14 12:23 - 00000104 _____ C:\Users\Jesslette\Desktop\Papierkorb - Verknüpfung.lnk
2013-07-14 10:26 - 2013-07-14 10:26 - 00890988 _____ C:\Users\Jesslette\Downloads\SecurityCheck.exe
2013-07-13 13:14 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\Microsoft.NET
2013-07-13 10:39 - 2006-11-02 12:33 - 01475254 _____ C:\Windows\system32\PerfStringBackup.INI
2013-07-13 10:37 - 2013-07-13 10:37 - 02347384 _____ (ESET) C:\Users\Jesslette\Downloads\esetsmartinstaller_enu.exe
2013-07-13 10:25 - 2006-11-02 14:47 - 00372120 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-13 10:22 - 2009-05-29 12:29 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-07-13 10:22 - 2006-11-02 14:37 - 00000000 ____D C:\Windows\system32\XPSViewer
2013-07-12 00:16 - 2009-03-14 02:16 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-07-12 00:11 - 2006-11-02 12:24 - 75699896 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2013-07-11 23:55 - 2006-11-02 14:37 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-11 10:56 - 2013-07-11 10:56 - 00018837 _____ C:\ComboFix.txt
2013-07-11 10:56 - 2013-07-11 10:36 - 00000000 ____D C:\ComboFix
2013-07-11 10:56 - 2013-07-11 10:31 - 00000000 ____D C:\Qoobox
2013-07-11 10:56 - 2006-11-02 13:18 - 00000000 __RHD C:\Users\Default
2013-07-11 10:56 - 2006-11-02 13:18 - 00000000 ___RD C:\Users\Public
2013-07-11 10:53 - 2013-07-11 10:31 - 00000000 ____D C:\Windows\erdnt
2013-07-11 10:52 - 2006-11-02 12:23 - 00000215 _____ C:\Windows\system.ini
2013-07-11 10:36 - 2009-10-23 12:30 - 00000000 ____D C:\ProgramData\avg9
2013-07-11 10:35 - 2013-07-11 10:35 - 05394432 _____ C:\Users\Gast\NTUSER~1.AVG
2013-07-11 10:35 - 2010-02-14 22:41 - 00000000 ____D C:\Users\Gast
2013-07-11 10:30 - 2013-07-11 10:30 - 05087643 ____R (Swearware) C:\Users\Jesslette\Downloads\ComboFix.exe
2013-07-11 09:52 - 2013-07-11 09:52 - 00000000 ____D C:\Windows\ERUNT
2013-07-11 09:41 - 2013-07-11 09:39 - 00032365 _____ C:\AdwCleaner[S1].txt
2013-07-11 09:40 - 2009-06-19 17:16 - 00000000 ____D C:\ProgramData\ICQ
2013-07-09 18:24 - 2013-07-09 18:23 - 00034791 _____ C:\Users\Jesslette\Downloads\Addition.txt
2013-07-09 18:21 - 2013-07-09 18:21 - 01216688 _____ (Farbar) C:\Users\Jesslette\Downloads\FRST.exe
2013-07-09 18:21 - 2013-07-09 18:21 - 00000000 ____D C:\FRST
2013-07-09 17:56 - 2013-07-09 17:56 - 00377856 _____ C:\Users\Jesslette\Downloads\gmer_2.1.19163.exe
2013-07-09 17:53 - 2013-07-09 17:53 - 00000480 _____ C:\Users\Jesslette\Downloads\defogger_disable.log
2013-07-09 17:53 - 2013-07-09 17:53 - 00000000 _____ C:\Users\Jesslette\defogger_reenable
2013-07-09 17:53 - 2013-07-09 17:53 - 00000000 _____ C:\Users\Jesslette\defogger_reenable
2013-07-09 17:53 - 2009-05-29 12:20 - 00000000 ____D C:\Users\Jesslette
2013-07-09 17:51 - 2013-07-09 17:51 - 00050477 _____ C:\Users\Jesslette\Downloads\Defogger.exe
2013-07-09 15:07 - 2013-07-09 15:07 - 00103238 _____ C:\Users\Jesslette\Downloads\Extras.Txt
2013-07-09 15:06 - 2013-07-09 15:06 - 00103890 _____ C:\Users\Jesslette\Downloads\OTL.Txt
2013-07-09 14:43 - 2013-07-09 14:43 - 00602112 _____ (OldTimer Tools) C:\Users\Jesslette\Downloads\OTL.exe
2013-07-09 14:10 - 2010-02-14 22:16 - 00000000 ____D C:\Windows\pss
2013-07-09 09:06 - 2012-06-06 12:18 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\Dropbox
2013-07-09 09:05 - 2013-04-22 23:33 - 00000000 ___RD C:\Users\Jesslette\Dropbox
2013-07-09 09:05 - 2013-04-22 23:33 - 00000000 ___RD C:\Users\Jesslette\Dropbox
2013-07-09 00:42 - 2013-07-09 00:42 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\Malwarebytes
2013-07-09 00:41 - 2013-07-09 00:41 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-07-09 00:32 - 2013-07-09 00:31 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Jesslette\Downloads\mbam-setup-1.75.0.1300.exe
2013-07-07 23:27 - 2013-07-07 23:27 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\PlusWinks
2013-07-07 23:20 - 2013-07-07 23:20 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\SeeSimilar
2013-07-07 23:11 - 2013-07-07 23:11 - 00393064 _____ (Softonic                                        ) C:\Users\Jesslette\Downloads\SoftonicDownloader_fuer_computer-repair-free.exe
2013-07-07 23:03 - 2013-07-07 23:03 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\Avira
2013-07-07 23:01 - 2013-07-07 23:01 - 00000000 ____D C:\Program Files\Avira
2013-07-07 23:01 - 2009-09-02 21:38 - 00000000 ____D C:\ProgramData\Avira
2013-07-07 23:00 - 2013-07-07 22:58 - 104943936 _____ C:\Users\Jesslette\Downloads\avira3737_free_antivirus_de.exe
2013-07-07 22:59 - 2013-07-07 22:59 - 11177156 _____ C:\Users\Jesslette\Downloads\avira3737_free_antivirus_de(1).exe.part
2013-07-06 10:04 - 2009-11-10 00:04 - 00000000 _____ C:\Users\JESSLE~1\AppData\Local\prvlcl.dat
2013-06-24 22:47 - 2009-08-15 20:39 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\vlc
2013-06-23 08:35 - 2013-06-23 08:35 - 00000000 ____D C:\ProgramData\䘈µ䏈µ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-23 02:17 - 2013-06-23 02:17 - 00000000 ____D C:\ProgramData\䘈Ä䏈Ä浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-22 15:40 - 2013-06-22 15:40 - 00000000 ____D C:\ProgramData\䘈ǐ䏈ǐ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-21 18:51 - 2013-06-21 18:51 - 00000000 ____D C:\ProgramData\䘈ǹ䏈ǹ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-21 12:50 - 2013-06-21 12:50 - 00000000 ____D C:\ProgramData\䘈Ʈ䏈Ʈ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-20 14:48 - 2013-07-07 23:01 - 00135136 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-06-20 14:48 - 2009-09-02 21:38 - 00084744 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-06-19 21:53 - 2013-06-19 21:53 - 00000000 ____D C:\ProgramData\䘈ǭ䏈ǭ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-16 15:01

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

gute nacht schrauber

schrauber · 17.07.2013, 08:18

Gib mir bitte mal nen Update über noch bestehende Probleme.

jesslette · 18.07.2013, 20:59

hallo schrauber.
also mein virus programm sagt mir da ist was nicht in Ordnung.
Außerdem habe ich grade das Problem, dass wenn ich oebn rechts in der suchleiste etwas eingebe, dass einfach das fenster von google sich öffnet ohne das mir ergenisse gezeogt werden. das problem hatte ich vorher nicht.
oh man.....
was mache ich denn nun bloß???
lg gruß und nen schönen abend

schrauber · 19.07.2013, 09:25

Was meckert das AV denn an? In welchem Browser besteht das Problem?

16.07.2013, 07:53	#16
schrauber /// the machine /// TB-Ausbilder	Ist loadtbs-2.1 ein Virus? Wo? welcher Browser? Auf welcher Seite? Screenshot? __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

16.07.2013, 11:09	#18
schrauber /// the machine /// TB-Ausbilder	Ist loadtbs-2.1 ein Virus? Unten auf erweiter klicken, runter scrollen, Anhänge verwalten. und ein frisches FRST log bitte. __________________ __________________

16.07.2013, 12:13	#21
schrauber /// the machine /// TB-Ausbilder	Ist loadtbs-2.1 ein Virus? Firefox komplett deinstallieren, keine DAten behalten, neu installieren. Frisches FRST Log bitte. Noch Probleme? __________________ --> Ist loadtbs-2.1 ein Virus?

17.07.2013, 08:18	#28
schrauber /// the machine /// TB-Ausbilder	Ist loadtbs-2.1 ein Virus? Gib mir bitte mal nen Update über noch bestehende Probleme. __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

19.07.2013, 09:25	#30
schrauber /// the machine /// TB-Ausbilder	Ist loadtbs-2.1 ein Virus? Was meckert das AV denn an? In welchem Browser besteht das Problem? __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

Ist loadtbs-2.1 ein Virus?

Plagegeister aller Art und deren Bekämpfung: Ist loadtbs-2.1 ein Virus?