Ist loadtbs-2.1 ein Virus?

jesslette · 09.07.2013, 17:11

Ich bin mir nicht sicher was dieses Loadtbs-2.1 auf meinem Laptop sein soll.

Ist es ein Virus oder ein wichtiges Programm?
ich kann die gewünschten dateien von otl und extras.txt nicht hochladen da diese wohl zu groß sind.

Ich freue mich über Eure Unterstützung.
LG

schrauber · 09.07.2013, 17:12

hi,

wo wird die gefunden?

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

jesslette · 09.07.2013, 17:26

Danke ich bin grade am scannen.

Wenn ich die Raute nutze kommt code code... wie gehe ich damit um?

schrauber · 09.07.2013, 17:33

zwischen die beiden Teile das Logfile kopieren

jesslette · 09.07.2013, 17:39

oh je : was ist das bloß?
du hast es mit einer blutigen anfängerin zu tun.
wie unangenehm

schrauber · 09.07.2013, 17:42

Kein Problem, ich bin soviel Spezialist dass ich uns beide da durch schiffe

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

jesslette · 09.07.2013, 17:46

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 09-07-2013 01
Ran by *** (administrator) on 09-07-2013 18:22:09
Running from C:\Users\***\Downloads
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(ATI Technologies Inc.) C:\Windows\system32\Ati2evxx.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(ATI Technologies Inc.) C:\Windows\system32\Ati2evxx.exe
(ASUSTek Computer Inc.) C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
() C:\Program Files\ATK Hotkey\ASLDRSrv.exe
() C:\Program Files\ATKGFNEX\GFNEXSrv.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG9\avgwdsvc.exe
() C:\Windows\system32\dmwu.exe
() C:\Program Files\CDBurnerXP\NMSAccessU.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG9\avgnsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG9\avgchsvx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG9\avgrsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG9\avgcsrvx.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(ATK0100) C:\Program Files\ATK Hotkey\Hcontrol.exe
() C:\Program Files\ATK Hotkey\MsgTranAgt.exe
() C:\Program Files\Wireless Console 2\wcourier.exe
(ASUS) C:\Program Files\ASUS\ASUS CopyProtect\aspg.exe
(ATK) C:\Program Files\P4G\BatteryLife.exe
(ATK) C:\Program Files\ASUS\Splendid\ACMON.exe
() C:\Windows\System32\jmdp\stij.exe
(ASUSTeK) C:\Windows\System32\ACEngSvr.exe
() C:\Program Files\ATK Hotkey\ATKOSD.exe
(ASUS) C:\Program Files\ASUS\SmartLogon\sensorsrv.exe
() C:\Program Files\ASUS\ASUS Live Update\ALU.exe
() C:\Program Files\ATK Hotkey\KBFiltr.exe
() C:\Program Files\ATK Hotkey\WDC.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
() C:\Program Files\ATK Hotkey\HControlUser.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG9\avgtray.exe
(ASUS) C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe
(ASUS) C:\Windows\System32\ASUSTPE.exe
(ASUSTek Computer Inc.) C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(APN) C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe
(Dropbox, Inc.) C:\Users\Jesslette\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\system32\sdclt.exe
(Microsoft Corporation) C:\Windows\system32\conime.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
() C:\Users\Jesslette\Downloads\gmer_2.1.19163.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Windows Defender] - %ProgramFiles%\Windows Defender\MSASCui.exe -hide [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1029416 2007-12-06] (Synaptics, Inc.)
HKLM\...\Run: [HControlUser] - "C:\Program Files\ATK Hotkey\HcontrolUser.exe" [98304 2008-01-12] ()
HKLM\...\Run: [AVG9_TRAY] - C:\PROGRA~1\AVG\AVG9\avgtray.exe [2077536 2012-03-01] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [ATKOSD2] - C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe [7651328 2008-07-15] (ASUS)
HKLM\...\Run: [ASUSTPE] - C:\Windows\system32\ASUSTPE.exe [106496 2007-10-12] (ASUS)
HKLM\...\Run: [ADSMTray] - C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe [266240 2008-04-01] (ASUSTek Computer Inc.)
HKLM\...\Run: [Adobe ARM] - "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [APSDaemon] - "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59280 2012-10-11] (Apple Inc.)
HKLM\...\Run: [QuickTime Task] - "C:\Program Files\QuickTime\QTTask.exe" -atboottime [421888 2012-10-25] (Apple Inc.)
HKLM\...\Run: [SunJavaUpdateSched] - "C:\Program Files\Common Files\Java\Java Update\jusched.exe" [253816 2013-03-12] (Oracle Corporation)
HKLM\...\Run: [avgnt] - "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min [345144 2013-06-20] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [ApnTBMon] - "C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe" [1558480 2013-07-03] (APN)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe, [x]
HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)
MountPoints2: {573e0664-7751-11de-be60-00248c644847} - G:\fooool.exe
MountPoints2: {a17d42b7-95e0-11e0-a514-00248c644847} - F:\AutoRun.exe
MountPoints2: {ac794ad3-660c-11de-9b42-00248c644847} - fooool.exe
HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter [ 2009-04-11] (Microsoft Corporation)
HKU\Gast\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter [ 2009-04-11] (Microsoft Corporation)
HKU\Gast\...\Run: [LightScribe Control Panel] - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden [x]
Lsa: [Notification Packages] scecli C:\Program Files\ASUS\ASUS Data Security Manager\ASPWDFLT
Startup: C:\ProgramData\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe (McAfee, Inc.)
BootExecute: autocheck autochk * sdnclean.exe

==================== Internet (Whitelisted) ====================

ProxyServer: 192.168.100.1:800
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.babylon.com/?affID=119816&babsrc=HP_ss_din2g&mntrId=485800224383ADAF
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=ASUS&bmod=ASUS
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://home.sweetim.com/?crg=3.1010006.10031&barid={B1E9168C-10BB-11E2-AED2-00248C644847}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=ASUS&bmod=ASUS
URLSearchHook: SearchHook Class - {D8278076-BC68-4484-9233-6E7F1628B56C} - "C:\Program Files\AskPartnerNetwork\Toolbar\searchhook.dll" No File
URLSearchHook: (No Name) - {A3BC75A2-1F87-4686-AA43-5347D756017C} -  No File
URLSearchHook: (No Name) - {c840e246-6b95-475e-9bd7-caa1c7eca9f2} -  No File
HKLM SearchScopes: DefaultScope {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3268494&CUI=UN32286939522179186
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=394&systemid=406&sr=0&q={searchTerms}
SearchScopes: HKLM - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3268494&CUI=UN32286939522179186
SearchScopes: HKLM - {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010006.10031&barid={B1E9168C-10BB-11E2-AED2-00248C644847}
HKCU SearchScopes: DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.holasearch.com/?q={searchTerms}&babsrc=SP_ss&mntrId=485800224383ADAF&affID=121963&tsp=4936
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = 
SearchScopes: HKCU - {94ACDB52-FA66-4C4D-9F0E-F2DB3B5EA2FD} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=crm&q={searchTerms}&locale=&apn_ptnrs=U3&apn_dtid=OSJ000YYDE&apn_uid=7ECE56D6-DFAF-4C87-86D7-FCFC0CEF9B5A&apn_sauid=D5FF14F5-CC32-4BE8-9F70-0EE8A3B7BF3D
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = 
SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3268494&CUI=UN32286939522179186
SearchScopes: HKCU - {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = hxxp://mystart.incredibar.com/mb128/?search={searchTerms}&loc=IB_DS&a=6OyWOHLr1K&i=26
SearchScopes: HKCU - {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010006.10031&barid={B1E9168C-10BB-11E2-AED2-00248C644847}
BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO: AVG Safe Search - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll (AVG Technologies CZ, s.r.o.)
BHO: Avira SearchFree Toolbar plus Web Protection - {41564952-412D-5637-00A7-7A786E7484D7} - "C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" No File
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - No Name - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} -  No File
Toolbar: HKLM - No Name - {DFEFCDEE-CF1A-4FC8-88AD-48514E463B27} -  No File
Toolbar: HKLM - No Name - {DFEFCDEE-CF1A-4FC8-88AD-129872198372} -  No File
Toolbar: HKLM - Avira SearchFree Toolbar plus Web Protection - {41564952-412D-5637-00A7-7A786E7484D7} - "C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" No File
Toolbar: HKCU -No Name - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} -  No File
Toolbar: HKCU -No Name - {DFEFCDEE-CF1A-4FC8-88AD-48514E463B27} -  No File
Toolbar: HKCU -No Name - {C840E246-6B95-475E-9BD7-CAA1C7ECA9F2} -  No File
Toolbar: HKCU -No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} -  No File
Toolbar: HKCU -No Name - {DFEFCDEE-CF1A-4FC8-88AD-129872198372} -  No File
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 03 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 04 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 05 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 06 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 07 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 08 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 33 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default
FF user.js: detected! => C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\user.js
FF SelectedSearchEngine: Ask Search
FF Homepage: hxxp://www.holasearch.com/?babsrc=HP_ss&mntrId=485800224383ADAF&affID=121963&tsp=4936
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.3 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=14.0.8051.1204 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.149\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.149\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\ask-search.xml
FF SearchPlugin: C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\askcom.xml
FF SearchPlugin: C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\babylon.xml
FF SearchPlugin: C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\bProtect.xml
FF SearchPlugin: C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\browsemngr.xml
FF SearchPlugin: C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\BrowserDefender.xml
FF SearchPlugin: C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\delta.xml
FF SearchPlugin: C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\holasearch.xml
FF SearchPlugin: C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\icqplugin.xml
FF SearchPlugin: C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\inbox-suchen.xml
FF SearchPlugin: C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\MyStart Search.xml
FF SearchPlugin: C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\SearchResults.xml
FF SearchPlugin: C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\SearchTheWeb.xml
FF SearchPlugin: C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\Search_Results.xml
FF SearchPlugin: C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\visualbee-v1-customized-web-search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\avg-secure-search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\babylon.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\googledesktop.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\SearchResults.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\Search_Results.xml
FF Extension: No Name - C:\Users\Jesslette\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
FF Extension: Cool Smiley Bar for Facebook - C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\Extensions\pluswinks@PlusWinks
FF Extension: Avira SearchFree Toolbar plus Web Protection - C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\Extensions\toolbar_AVIRA-V7@apn.ask.com
FF Extension: Microsoft .NET Framework Assistant - C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF Extension: IE Tab - C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\Extensions\{77b819fa-95ad-4f2c-ac7c-486b356188a9}
FF Extension: toolbar_AVIRA-V7 - C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\Extensions\toolbar_AVIRA-V7@apn.ask.com.xpi
FF Extension: youtubeunblocker - C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\Extensions\youtubeunblocker@unblocker.yt.xpi
FF Extension: No Name - C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\Extensions\{166745b8-8d4a-4c86-9120-696de51a77aa}.xpi
FF Extension: No Name - C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF Extension: Default - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM\...\Firefox\Extensions: [{3f963a5b-e555-4543-90e2-c3908898db71}] C:\Program Files\AVG\AVG9\Firefox
FF Extension: AVG Safe Search - C:\Program Files\AVG\AVG9\Firefox
FF HKLM\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] C:\Program Files\IB Updater\Firefox
FF HKCU\...\Firefox\Extensions: [goobar@gootoolbar.com] C:\Users\Jesslette\AppData\Roaming\GooToolBar\GooToolBar Installer\1.0.0.0
FF Extension: goobar - C:\Users\Jesslette\AppData\Roaming\GooToolBar\GooToolBar Installer\1.0.0.0
FF HKCU\...\Firefox\Extensions: [specialsavings@superfish.com] C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles/xnn4yddx.default\extensions\specialsavings@superfish.com

Chrome: 
=======
CHR RestoreOnStartup: "hxxp://home.sweetim.com/?crg=3.1010006.10031&barid={B1E9168C-10BB-11E2-AED2-00248C644847}","hxxp://search.babylon.com/?affID=114865&tt=3812_1&babsrc=HP_ss&mntrId=48580ff900000000000000224383adaf"
CHR Extension: () - C:\Users\JESSLE~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\mocblcnaofikinigmceddfghppkkjbog\1.0.0.3
CHR Extension: (AVG Secure Search) - C:\Users\JESSLE~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\12.2.5.32

========================== Services (Whitelisted) =================

R2 ADSMService; C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe [225280 2008-03-31] (ASUSTek Computer Inc.)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-06-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-06-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [589368 2013-06-20] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [168400 2013-07-03] (APN LLC.)
R2 ASLDRService; C:\Program Files\ATK Hotkey\ASLDRSrv.exe [94208 2007-10-03] ()
R2 ATKGFNEXSrv; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [94208 2007-08-08] ()
S3 AVG Security Toolbar Service; C:\Program Files\AVG\AVG9\Toolbar\ToolbarBroker.exe [167264 2011-11-10] ()
R2 avg9wd; C:\Program Files\AVG\AVG9\avgwdsvc.exe [308136 2010-07-15] (AVG Technologies CZ, s.r.o.)
S3 GoogleDesktopManager-051210-111108; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [30192 2011-09-13] (Google)
R2 IBUpdaterService; C:\Windows\system32\dmwu.exe [1156400 2013-04-07] ()
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)
R2 NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [71096 2009-09-06] ()
S3 Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [155320 2012-01-18] (Avanquest Software)

==================== Drivers (Whitelisted) ====================

R0 AsDsm; C:\Windows\System32\Drivers\AsDsm.sys [29752 2007-08-11] (Windows (R) Codename Longhorn DDK provider)
R2 ASMMAP; C:\Program Files\ATKGFNEX\ASMMAP.sys [13880 2007-07-24] ()
R1 AvgLdx86; C:\Windows\System32\Drivers\avgldx86.sys [226016 2013-01-15] (AVG Technologies CZ, s.r.o.)
R1 AvgMfx86; C:\Windows\System32\Drivers\avgmfx86.sys [29712 2011-09-12] (AVG Technologies CZ, s.r.o.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [84744 2013-06-20] (Avira Operations GmbH & Co. KG)
R1 AvgTdiX; C:\Windows\System32\Drivers\avgtdix.sys [243152 2011-05-09] (AVG Technologies CZ, s.r.o.)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135136 2013-06-20] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-03-06] (Avira Operations GmbH & Co. KG)
S3 CRFILTER; C:\Windows\System32\DRIVERS\CRFILTER.sys [6656 2008-04-07] (Generic)
S3 CVirtA; C:\Windows\System32\DRIVERS\CVirtA.sys [5275 2007-01-18] (Cisco Systems, Inc.)
S4 DNE; C:\Windows\System32\DRIVERS\dne2000.sys [125328 2008-03-29] (Deterministic Networks, Inc.)
R3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [13904 2011-05-06] ()
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15928 2008-06-03] ( )
R0 lullaby; C:\Windows\System32\DRIVERS\lullaby.sys [15416 2008-05-29] (Windows (R) Codename Longhorn DDK provider)
R3 MTsensor; C:\Windows\System32\DRIVERS\ATKACPI.sys [7680 2006-12-14] (ATK0100)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1752704 2008-08-11] ()
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
S3 StarOpen; C:\Windows\System32\Drivers\StarOpen.sys [7168 2009-09-28] ()
U2 ccEvtMgr; 
U2 ccSetMgr; 
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
U3 navapsvc; 
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]
U3 SAVRT; 
U1 SAVRTPEL; 
U3 TlntSvr; 
S3 vpnva; system32\DRIVERS\vpnva.sys [x]
U3 uxdoruow; \??\C:\Users\JESSLE~1\AppData\Local\Temp\uxdoruow.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-09 18:21 - 2013-07-09 18:21 - 01216688 ____A (Farbar) C:\Users\Jesslette\Downloads\FRST.exe
2013-07-09 18:21 - 2013-07-09 18:21 - 00000000 ____D C:\FRST
2013-07-09 17:56 - 2013-07-09 17:56 - 00377856 ____A C:\Users\Jesslette\Downloads\gmer_2.1.19163.exe
2013-07-09 17:55 - 2013-07-09 18:02 - 00103854 ____A C:\Users\Jesslette\Desktop\OTL.Txt
2013-07-09 17:55 - 2013-07-09 18:02 - 00103214 ____A C:\Users\Jesslette\Desktop\Extras.Txt
2013-07-09 17:53 - 2013-07-09 17:53 - 00000480 ____A C:\Users\Jesslette\Downloads\defogger_disable.log
2013-07-09 17:53 - 2013-07-09 17:53 - 00000000 ____A C:\Users\Jesslette\defogger_reenable
2013-07-09 17:51 - 2013-07-09 17:51 - 00050477 ____A C:\Users\Jesslette\Downloads\Defogger.exe
2013-07-09 15:07 - 2013-07-09 15:07 - 00103238 ____A C:\Users\Jesslette\Downloads\Extras.Txt
2013-07-09 15:06 - 2013-07-09 15:06 - 00103890 ____A C:\Users\Jesslette\Downloads\OTL.Txt
2013-07-09 15:03 - 2013-07-09 15:03 - 00000000 ____A C:\Windows\System32\FAPB7BF.tmp
2013-07-09 15:01 - 2013-07-09 15:01 - 00000000 ____A C:\Windows\System32\FAP6BF.tmp
2013-07-09 15:01 - 2013-07-09 15:01 - 00000000 ____A C:\Windows\System32\FAP600B.tmp
2013-07-09 15:01 - 2013-07-09 15:01 - 00000000 ____A C:\Windows\System32\FAP3F30.tmp
2013-07-09 15:00 - 2013-07-09 15:00 - 00000000 ____A C:\Windows\System32\FAPA700.tmp
2013-07-09 14:43 - 2013-07-09 14:43 - 00602112 ____A (OldTimer Tools) C:\Users\Jesslette\Downloads\OTL.exe
2013-07-09 00:42 - 2013-07-09 00:42 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\Malwarebytes
2013-07-09 00:41 - 2013-07-09 00:41 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-07-09 00:31 - 2013-07-09 00:32 - 10285040 ____A (Malwarebytes Corporation                                    ) C:\Users\Jesslette\Downloads\mbam-setup-1.75.0.1300.exe
2013-07-07 23:28 - 2013-07-07 23:28 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\SpeedAnalysis2
2013-07-07 23:27 - 2013-07-07 23:27 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\PlusWinks
2013-07-07 23:26 - 2013-07-07 23:27 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\File Scout
2013-07-07 23:25 - 2013-07-07 23:25 - 00657728 ____A () C:\Users\Jesslette\Downloads\PCPerformerSetup.exe
2013-07-07 23:20 - 2013-07-07 23:20 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\SeeSimilar
2013-07-07 23:11 - 2013-07-07 23:11 - 00393064 ____A (Softonic                                        ) C:\Users\Jesslette\Downloads\SoftonicDownloader_fuer_computer-repair-free.exe
2013-07-07 23:04 - 2013-07-07 23:04 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2013-07-07 23:04 - 2013-07-07 23:04 - 00000000 ____D C:\Program Files\AskPartnerNetwork
2013-07-07 23:03 - 2013-07-07 23:03 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\Avira
2013-07-07 23:03 - 2013-07-07 23:03 - 00000000 ____D C:\ProgramData\APN
2013-07-07 23:01 - 2013-07-07 23:01 - 00000000 ____D C:\Program Files\Avira
2013-07-07 23:01 - 2013-06-20 14:48 - 00135136 ____A (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avipbb.sys
2013-07-07 23:01 - 2013-03-06 16:13 - 00037352 ____A (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avkmgr.sys
2013-07-07 23:01 - 2012-08-27 15:50 - 00028520 ____A (Avira GmbH) C:\Windows\System32\Drivers\ssmdrv.sys
2013-07-07 22:59 - 2013-07-07 22:59 - 11177156 ____A C:\Users\Jesslette\Downloads\avira3737_free_antivirus_de(1).exe.part
2013-07-07 22:58 - 2013-07-07 23:00 - 104943936 ____A C:\Users\Jesslette\Downloads\avira3737_free_antivirus_de.exe
2013-07-06 01:16 - 2013-07-06 01:17 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-06-23 08:35 - 2013-06-23 08:35 - 00000000 ____D C:\ProgramData\䘈µ䏈µ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-23 02:17 - 2013-06-23 02:17 - 00000000 ____D C:\ProgramData\䘈Ä䏈Ä浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-22 15:40 - 2013-06-22 15:40 - 00000000 ____D C:\ProgramData\䘈ǐ䏈ǐ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-21 18:51 - 2013-06-21 18:51 - 00000000 ____D C:\ProgramData\䘈ǹ䏈ǹ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-21 12:50 - 2013-06-21 12:50 - 00000000 ____D C:\ProgramData\䘈Ʈ䏈Ʈ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-19 21:53 - 2013-06-19 21:53 - 00000000 ____D C:\ProgramData\䘈ǭ䏈ǭ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-16 18:23 - 2013-06-16 18:23 - 00000000 ____D C:\ProgramData\䘈0䏈0浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-15 13:23 - 2013-06-15 13:23 - 00000000 ____D C:\Windows\System32\searchplugins
2013-06-15 13:18 - 2013-06-15 13:18 - 00000000 ____D C:\ProgramData\䘈Ǣ䏈Ǣ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-13 19:36 - 2013-06-13 19:36 - 00167544 ____A () C:\Users\Jesslette\Downloads\VLCMediaPlayerSetup-87OPNp0.exe
2013-06-13 19:32 - 2013-06-13 19:33 - 00730944 ____A C:\Users\Jesslette\Downloads\Webplayer.exe
2013-06-12 01:27 - 2013-06-12 01:31 - 00000000 ____D C:\8d421f6d58c259db51c30e060ab0
2013-06-12 00:47 - 2013-05-17 05:50 - 01212928 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-12 00:47 - 2013-05-17 05:50 - 00916480 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-12 00:47 - 2013-05-17 05:50 - 00105984 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-06-12 00:47 - 2013-05-17 05:48 - 00206848 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-06-12 00:47 - 2013-05-17 05:46 - 06014464 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-12 00:47 - 2013-05-17 05:46 - 00611840 ____A (Microsoft Corporation) C:\Windows\System32\mstime.dll
2013-06-12 00:47 - 2013-05-17 05:46 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-06-12 00:47 - 2013-05-17 05:45 - 00630272 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-12 00:47 - 2013-05-17 05:45 - 00055296 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-06-12 00:47 - 2013-05-17 05:45 - 00043520 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-06-12 00:47 - 2013-05-17 05:45 - 00025600 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-12 00:47 - 2013-05-17 05:44 - 11111424 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-12 00:47 - 2013-05-17 05:44 - 02004992 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-12 00:47 - 2013-05-17 05:44 - 01469440 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-06-12 00:47 - 2013-05-17 05:44 - 00387584 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-06-12 00:47 - 2013-05-17 05:44 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-06-12 00:47 - 2013-05-17 05:44 - 00164352 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-12 00:47 - 2013-05-17 05:44 - 00109056 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-12 00:47 - 2013-05-17 05:44 - 00071680 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-12 00:47 - 2013-05-17 05:44 - 00055808 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-12 00:47 - 2013-05-17 04:06 - 00385024 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-06-12 00:47 - 2013-05-17 02:20 - 00133632 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-06-12 00:47 - 2013-05-17 02:19 - 00174080 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-12 00:47 - 2013-05-17 02:18 - 01638912 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-12 00:47 - 2013-05-17 02:18 - 00013312 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-06-12 00:47 - 2013-05-08 06:37 - 00905576 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-06-12 00:47 - 2013-05-03 00:03 - 03603832 ____A (Microsoft Corporation) C:\Windows\System32\ntkrnlpa.exe
2013-06-12 00:47 - 2013-05-03 00:03 - 03551096 ____A (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2013-06-12 00:47 - 2013-05-02 06:04 - 00443904 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-06-12 00:47 - 2013-05-02 06:03 - 00037376 ____A (Microsoft Corporation) C:\Windows\System32\printcom.dll
2013-06-12 00:47 - 2013-04-24 06:00 - 00985600 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-06-12 00:47 - 2013-04-24 06:00 - 00133120 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-06-12 00:47 - 2013-04-24 06:00 - 00098304 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-06-12 00:47 - 2013-04-24 06:00 - 00041984 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll
2013-06-12 00:47 - 2013-04-24 03:46 - 00812544 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-06-12 00:47 - 2013-04-17 14:30 - 00024576 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll

==================== One Month Modified Files and Folders =======

2013-07-09 18:21 - 2013-07-09 18:21 - 01216688 ____A (Farbar) C:\Users\Jesslette\Downloads\FRST.exe
2013-07-09 18:21 - 2013-07-09 18:21 - 00000000 ____D C:\FRST
2013-07-09 18:10 - 2012-04-14 11:40 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-09 18:02 - 2013-07-09 17:55 - 00103854 ____A C:\Users\Jesslette\Desktop\OTL.Txt
2013-07-09 18:02 - 2013-07-09 17:55 - 00103214 ____A C:\Users\Jesslette\Desktop\Extras.Txt
2013-07-09 17:56 - 2013-07-09 17:56 - 00377856 ____A C:\Users\Jesslette\Downloads\gmer_2.1.19163.exe
2013-07-09 17:53 - 2013-07-09 17:53 - 00000480 ____A C:\Users\Jesslette\Downloads\defogger_disable.log
2013-07-09 17:53 - 2013-07-09 17:53 - 00000000 ____A C:\Users\Jesslette\defogger_reenable
2013-07-09 17:53 - 2009-05-29 12:20 - 00000000 ____D C:\users\Jesslette
2013-07-09 17:51 - 2013-07-09 17:51 - 00050477 ____A C:\Users\Jesslette\Downloads\Defogger.exe
2013-07-09 17:35 - 2009-10-23 12:31 - 00000000 ____D C:\Windows\System32\Drivers\Avg
2013-07-09 17:33 - 2012-04-04 22:20 - 00001104 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-07-09 16:59 - 2006-11-02 14:47 - 00003616 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-09 16:59 - 2006-11-02 14:47 - 00003616 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-09 16:42 - 2010-02-14 22:44 - 01655646 ____A C:\Windows\WindowsUpdate.log
2013-07-09 15:07 - 2013-07-09 15:07 - 00103238 ____A C:\Users\Jesslette\Downloads\Extras.Txt
2013-07-09 15:06 - 2013-07-09 15:06 - 00103890 ____A C:\Users\Jesslette\Downloads\OTL.Txt
2013-07-09 15:03 - 2013-07-09 15:03 - 00000000 ____A C:\Windows\System32\FAPB7BF.tmp
2013-07-09 15:01 - 2013-07-09 15:01 - 00000000 ____A C:\Windows\System32\FAP6BF.tmp
2013-07-09 15:01 - 2013-07-09 15:01 - 00000000 ____A C:\Windows\System32\FAP600B.tmp
2013-07-09 15:01 - 2013-07-09 15:01 - 00000000 ____A C:\Windows\System32\FAP3F30.tmp
2013-07-09 15:00 - 2013-07-09 15:00 - 00000000 ____A C:\Windows\System32\FAPA700.tmp
2013-07-09 14:43 - 2013-07-09 14:43 - 00602112 ____A (OldTimer Tools) C:\Users\Jesslette\Downloads\OTL.exe
2013-07-09 14:10 - 2010-02-14 22:16 - 00000000 ____D C:\Windows\pss
2013-07-09 14:07 - 2012-12-11 03:23 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\PerformerSoft
2013-07-09 14:07 - 2012-04-04 22:19 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\loadtbs
2013-07-09 09:06 - 2012-06-06 12:18 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\Dropbox
2013-07-09 09:05 - 2013-04-22 23:33 - 00000000 ___RD C:\Users\Jesslette\Dropbox
2013-07-09 09:03 - 2013-06-08 11:31 - 00000350 ____A C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv.job
2013-07-09 09:03 - 2013-06-03 22:28 - 00000350 ____A C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
2013-07-09 09:03 - 2012-04-04 22:20 - 00001100 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-07-09 09:03 - 2009-03-14 05:05 - 00045056 ____A C:\Windows\System32\acovcnt.exe
2013-07-09 08:59 - 2012-12-18 23:20 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-07-09 08:59 - 2006-11-02 15:01 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-07-09 08:57 - 2006-11-02 15:01 - 00032584 ____A C:\Windows\Tasks\SCHEDLGU.TXT
2013-07-09 00:42 - 2013-07-09 00:42 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\Malwarebytes
2013-07-09 00:41 - 2013-07-09 00:41 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-07-09 00:32 - 2013-07-09 00:31 - 10285040 ____A (Malwarebytes Corporation                                    ) C:\Users\Jesslette\Downloads\mbam-setup-1.75.0.1300.exe
2013-07-07 23:28 - 2013-07-07 23:28 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\SpeedAnalysis2
2013-07-07 23:27 - 2013-07-07 23:27 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\PlusWinks
2013-07-07 23:27 - 2013-07-07 23:26 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\File Scout
2013-07-07 23:25 - 2013-07-07 23:25 - 00657728 ____A () C:\Users\Jesslette\Downloads\PCPerformerSetup.exe
2013-07-07 23:20 - 2013-07-07 23:20 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\SeeSimilar
2013-07-07 23:13 - 2006-11-02 13:18 - 00000000 ___RD C:\users\Public
2013-07-07 23:11 - 2013-07-07 23:11 - 00393064 ____A (Softonic                                        ) C:\Users\Jesslette\Downloads\SoftonicDownloader_fuer_computer-repair-free.exe
2013-07-07 23:04 - 2013-07-07 23:04 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2013-07-07 23:04 - 2013-07-07 23:04 - 00000000 ____D C:\Program Files\AskPartnerNetwork
2013-07-07 23:03 - 2013-07-07 23:03 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\Avira
2013-07-07 23:03 - 2013-07-07 23:03 - 00000000 ____D C:\ProgramData\APN
2013-07-07 23:01 - 2013-07-07 23:01 - 00000000 ____D C:\Program Files\Avira
2013-07-07 23:01 - 2009-09-02 21:38 - 00000000 ____D C:\ProgramData\Avira
2013-07-07 23:00 - 2013-07-07 22:58 - 104943936 ____A C:\Users\Jesslette\Downloads\avira3737_free_antivirus_de.exe
2013-07-07 22:59 - 2013-07-07 22:59 - 11177156 ____A C:\Users\Jesslette\Downloads\avira3737_free_antivirus_de(1).exe.part
2013-07-07 21:51 - 2006-11-02 12:33 - 01475254 ____A C:\Windows\System32\PerfStringBackup.INI
2013-07-06 10:04 - 2009-11-10 00:04 - 00000000 ____A C:\Users\Jesslette\AppData\Local\prvlcl.dat
2013-07-06 01:17 - 2013-07-06 01:16 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-06-24 22:47 - 2009-08-15 20:39 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\vlc
2013-06-23 08:35 - 2013-06-23 08:35 - 00000000 ____D C:\ProgramData\䘈µ䏈µ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-23 02:17 - 2013-06-23 02:17 - 00000000 ____D C:\ProgramData\䘈Ä䏈Ä浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-22 15:40 - 2013-06-22 15:40 - 00000000 ____D C:\ProgramData\䘈ǐ䏈ǐ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-21 18:51 - 2013-06-21 18:51 - 00000000 ____D C:\ProgramData\䘈ǹ䏈ǹ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-21 12:50 - 2013-06-21 12:50 - 00000000 ____D C:\ProgramData\䘈Ʈ䏈Ʈ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-20 14:48 - 2013-07-07 23:01 - 00135136 ____A (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avipbb.sys
2013-06-20 14:48 - 2009-09-02 21:38 - 00084744 ____A (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avgntflt.sys
2013-06-19 21:53 - 2013-06-19 21:53 - 00000000 ____D C:\ProgramData\䘈ǭ䏈ǭ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-16 18:23 - 2013-06-16 18:23 - 00000000 ____D C:\ProgramData\䘈0䏈0浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-15 13:23 - 2013-06-15 13:23 - 00000000 ____D C:\Windows\System32\searchplugins
2013-06-15 13:18 - 2013-06-15 13:18 - 00000000 ____D C:\ProgramData\䘈Ǣ䏈Ǣ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-13 19:36 - 2013-06-13 19:36 - 00167544 ____A () C:\Users\Jesslette\Downloads\VLCMediaPlayerSetup-87OPNp0.exe
2013-06-13 19:33 - 2013-06-13 19:32 - 00730944 ____A C:\Users\Jesslette\Downloads\Webplayer.exe
2013-06-13 18:10 - 2012-04-14 11:40 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerApp.exe
2013-06-13 18:10 - 2011-08-04 16:33 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerCPLApp.cpl
2013-06-13 16:35 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\rescache
2013-06-13 16:07 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\System32\de-DE
2013-06-12 01:34 - 2009-03-14 02:16 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-06-12 01:31 - 2013-06-12 01:27 - 00000000 ____D C:\8d421f6d58c259db51c30e060ab0
2013-06-12 01:27 - 2006-11-02 12:24 - 73381792 ____A (Microsoft Corporation) C:\Windows\System32\mrt.exe

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-09 09:09

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---
:-)
gut du Spezialist, dann schaue ich mal wie gut du mir das grade erklärt hast.

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 09-07-2013 01
Ran by Jesslette at 2013-07-09 18:23:41
Running from C:\Users\Jesslette\Downloads
Boot Mode: Normal
==========================================================

 Update for Microsoft Office 2007 (KB2508958)
2007 Microsoft Office system (Version: 12.0.6612.1000)
Activation Assistant for the 2007 Microsoft Office suites
Activation Assistant for the 2007 Microsoft Office suites (Version: 1.0)
Adobe Flash Player 11 ActiveX (Version: 11.7.700.224)
Adobe Flash Player 11 Plugin (Version: 11.7.700.224)
Adobe Reader X (10.1.7) - Deutsch (Version: 10.1.7)
AMR Converter Pro (Version: 4.0)
Apple Application Support (Version: 2.3)
Apple Software Update (Version: 2.1.3.127)
ASUS CopyProtect (Version: 1.0.0007)
ASUS Data Security Manager (Version: 1.00.0007)
ASUS FancyStart (Version: 1.0.1)
ASUS Live Update (Version: 2.5.6)
ASUS Power4Gear eXtreme (Version: 1.0.19)
ASUS SmartLogon (Version: 1.0.0006)
ASUS Splendid Video Enhancement Technology (Version: 1.02.0021)
ASUS Touch Pad Extra
ASUS Virtual Camera (Version: 1.0.11)
Asus_Camera_ScreenSaver (Version: 2.0.0008)
Atheros Client Installation Program (Version: 7.0)
ATI Catalyst Install Manager (Version: 3.0.699.0)
ATK Generic Function Service (Version: 1.00.0008)
ATK Hotkey (Version: 1.00.0034)
ATK Media (Version: 2.0.0000)
ATKOSD2 (Version: 7.0.0001)
AVG Free 9.0
Avira Free Antivirus (Version: 13.0.0.3737)
Avira SearchFree Toolbar plus Web Protection (Version: 12.2.1.477)
Brother MFL-Pro Suite DCP-145C (Version: 1.0.0.0)
Catalyst Control Center - Branding (Version: 1.00.0000)
Catalyst Control Center Core Implementation (Version: 2008.1024.2138.36937)
Catalyst Control Center Graphics Full Existing (Version: 2008.1024.2138.36937)
Catalyst Control Center Graphics Full New (Version: 2008.1024.2138.36937)
Catalyst Control Center Graphics Light (Version: 2008.1024.2138.36937)
Catalyst Control Center Graphics Previews Common (Version: 2008.1024.2138.36937)
Catalyst Control Center Graphics Previews Vista (Version: 2008.1024.2138.36937)
Catalyst Control Center InstallProxy (Version: 2008.1024.2138.36937)
Catalyst Control Center Localization Chinese Standard (Version: 2008.1024.2138.36937)
Catalyst Control Center Localization Chinese Traditional (Version: 2008.1024.2138.36937)
Catalyst Control Center Localization Czech (Version: 2008.1024.2138.36937)
Catalyst Control Center Localization Danish (Version: 2008.1024.2138.36937)
Catalyst Control Center Localization Dutch (Version: 2008.1024.2138.36937)
Catalyst Control Center Localization Finnish (Version: 2008.1024.2138.36937)
Catalyst Control Center Localization French (Version: 2008.1024.2138.36937)
Catalyst Control Center Localization German (Version: 2008.1024.2138.36937)
Catalyst Control Center Localization Greek (Version: 2008.1024.2138.36937)
Catalyst Control Center Localization Hungarian (Version: 2008.1024.2138.36937)
Catalyst Control Center Localization Italian (Version: 2008.1024.2138.36937)
Catalyst Control Center Localization Japanese (Version: 2008.1024.2138.36937)
Catalyst Control Center Localization Korean (Version: 2008.1024.2138.36937)
Catalyst Control Center Localization Norwegian (Version: 2008.1024.2138.36937)
Catalyst Control Center Localization Polish (Version: 2008.1024.2138.36937)
Catalyst Control Center Localization Portuguese (Version: 2008.1024.2138.36937)
Catalyst Control Center Localization Russian (Version: 2008.1024.2138.36937)
Catalyst Control Center Localization Spanish (Version: 2008.1024.2138.36937)
Catalyst Control Center Localization Swedish (Version: 2008.1024.2138.36937)
Catalyst Control Center Localization Thai (Version: 2008.1024.2138.36937)
Catalyst Control Center Localization Turkish (Version: 2008.1024.2138.36937)
CCC Help Chinese Standard (Version: 2008.1024.2137.36937)
CCC Help Chinese Traditional (Version: 2008.1024.2137.36937)
CCC Help Czech (Version: 2008.1024.2137.36937)
CCC Help Danish (Version: 2008.1024.2137.36937)
CCC Help Dutch (Version: 2008.1024.2137.36937)
CCC Help English (Version: 2008.1024.2137.36937)
CCC Help Finnish (Version: 2008.1024.2137.36937)
CCC Help French (Version: 2008.1024.2137.36937)
CCC Help German (Version: 2008.1024.2137.36937)
CCC Help Greek (Version: 2008.1024.2137.36937)
CCC Help Hungarian (Version: 2008.1024.2137.36937)
CCC Help Italian (Version: 2008.1024.2137.36937)
CCC Help Japanese (Version: 2008.1024.2137.36937)
CCC Help Korean (Version: 2008.1024.2137.36937)
CCC Help Norwegian (Version: 2008.1024.2137.36937)
CCC Help Polish (Version: 2008.1024.2137.36937)
CCC Help Portuguese (Version: 2008.1024.2137.36937)
CCC Help Russian (Version: 2008.1024.2137.36937)
CCC Help Spanish (Version: 2008.1024.2137.36937)
CCC Help Swedish (Version: 2008.1024.2137.36937)
CCC Help Thai (Version: 2008.1024.2137.36937)
CCC Help Turkish (Version: 2008.1024.2137.36937)
ccc-core-static (Version: 2008.1024.2138.36937)
ccc-utility (Version: 2008.1024.2138.36937)
CCleaner (Version: 3.12)
CDBurnerXP (Version: 4.2.7.1801)
Choice Guard (Version: 1.2.87.0)
Dolby Control Center (Version: 1.2.0704)
Dropbox (HKCU Version: 2.0.22)
Favorit
Google Desktop (Version: 5.8.0809.23506)
Google Update Helper (Version: 1.3.21.149)
IB Updater Service (Version: 3.0.4.6)
Java 7 Update 21 (Version: 7.0.210)
Java Auto Updater (Version: 2.1.9.5)
Java(TM) 6 Update 16 (Version: 6.0.160)
Junk Mail filter update (Version: 14.0.8050.1202)
loadtbs-2.1
McAfee Security Scan Plus (Version: 3.0.318.3)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Office 2003 Web Components (Version: 11.0.8003.0)
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Access MUI (Dutch) 2007 (Version: 12.0.6612.1000)
Microsoft Office Access MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Access MUI (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Access MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Access MUI (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office Access Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Enterprise 2007 (Version: 12.0.6612.1000)
Microsoft Office Excel 2007 Help - Aggiornamento (KB963678)
Microsoft Office Excel MUI (Dutch) 2007 (Version: 12.0.6612.1000)
Microsoft Office Excel MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Excel MUI (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Excel MUI (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Groove MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Groove Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office InfoPath MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1)
Microsoft Office OneNote MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Outlook 2007 Help - Aggiornamento (KB963677)
Microsoft Office Outlook Connector (Version: 12.0.6414.1000)
Microsoft Office Outlook MUI (Dutch) 2007 (Version: 12.0.6612.1000)
Microsoft Office Outlook MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Outlook MUI (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Outlook MUI (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office Powerpoint 2007 Help - Aggiornamento (KB963669)
Microsoft Office PowerPoint MUI (Dutch) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office Professional 2007 (Version: 12.0.6612.1000)
Microsoft Office Professional 2007-Testversion (Version: 12.0.6612.1000)
Microsoft Office Professional Hybrid 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Arabic) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Dutch) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Spanish) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proofing (Dutch) 2007 (Version: 12.0.4518.1017)
Microsoft Office Proofing (English) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing (French) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing (Italian) 2007 (Version: 12.0.4518.1018)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Publisher MUI (Dutch) 2007 (Version: 12.0.6612.1000)
Microsoft Office Publisher MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Publisher MUI (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Publisher MUI (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (Dutch) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Small Business Connectivity Components (Version: 2.0.7024.0)
Microsoft Office Word 2007 Help - Aggiornamento (KB963665)
Microsoft Office Word MUI (Dutch) 2007 (Version: 12.0.6612.1000)
Microsoft Office Word MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Word MUI (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Word MUI (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Silverlight (Version: 5.1.20125.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft SQL Server Native Client (Version: 9.00.5000.00)
Microsoft SQL Server VSS Writer (Version: 9.00.5000.00)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable - KB2467175 (Version: 8.0.51011)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (Version: 9.0.30729.5570)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (Version: 10.0.40303)
Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (Version: 10.0.40308)
Microsoft Visual Studio 2010 Tools for Office Runtime (x86) Language Pack - DEU (Version: 10.0.40303)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x86) Language Pack - DEU (Version: 10.0.40303)
Mise à jour Microsoft Office Excel 2007 Help  (KB963678)
Mise à jour Microsoft Office Outlook 2007 Help  (KB963677)
Mise à jour Microsoft Office Powerpoint 2007 Help  (KB963669)
Mise à jour Microsoft Office Word 2007 Help  (KB963665)
Mozilla Firefox 22.0 (x86 de) (Version: 22.0)
Mozilla Maintenance Service (Version: 22.0)
MSVCRT (Version: 14.0.1468.721)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
Multimedia Card Reader (Version: 1.01.0000.00)
MyPhoneExplorer (Version: 1.8.2)
Norton Internet Security (Version: 16.0.0.125)
PaperPort Image Printer (Version: 1.00.0000)
PC SpeedScan Pro (Version: 7.1.7)
PDFCreator (Version: 1.2.2)
pdfsam (HKCU Version: 2.2.1)
QuickTime (Version: 7.73.80.64)
Realtek High Definition Audio Driver (Version: 6.0.1.5667)
ScanSoft PaperPort 11 (Version: 11.1.0000)
Skins (Version: 2008.1024.2138.36937)
Skype Click to Call (Version: 5.6.8442)
Skype™ 5.10 (Version: 5.10.116)
Sony PC Companion 2.10.079 (Version: 2.10.079)
Spelling Dictionaries Support For Adobe Reader 9 (Version: 9.0.0)
SpyHunter (Version: 4.12.13.4202)
Synaptics Pointing Device Driver (Version: 10.1.8.0)
Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch) (Version: 9.00.5000.00)
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft Office 2007 Help for Common Features (KB963673)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596802) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition
Update for Microsoft Office Access 2007 Help (KB963663)
Update for Microsoft Office Excel 2007 Help (KB963678)
Update for Microsoft Office Infopath 2007 Help (KB963662)
Update for Microsoft Office OneNote 2007 Help (KB963670)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition
Update for Microsoft Office Outlook 2007 Help (KB963677)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2817327) 32-Bit Edition
Update for Microsoft Office Powerpoint 2007 Help (KB963669)
Update for Microsoft Office Publisher 2007 Help (KB963667)
Update for Microsoft Office Script Editor Help (KB963671)
Update for Microsoft Office Word 2007 Help (KB963665)
Update für Microsoft Office Excel 2007 Help (KB963678)
Update für Microsoft Office Outlook 2007 Help (KB963677)
Update für Microsoft Office Powerpoint 2007 Help (KB963669)
Update für Microsoft Office Word 2007 Help (KB963665)
Update voor Microsoft Office Excel 2007 Help (KB963678)
Update voor Microsoft Office Powerpoint 2007 Help (KB963669)
Update voor Microsoft Office Word 2007 Help (KB963665)
USB 2.0 1.3M UVC WebCam
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0)
VLC media player 2.0.2 (Version: 2.0.2)
Windows Live Call (Version: 14.0.8050.1202)
Windows Live Communications Platform (Version: 14.0.8050.1202)
Windows Live Essentials (Version: 14.0.8050.1202)
Windows Live Family Safety (Version: 14.0.8052.1208)
Windows Live Fotogalerie (Version: 14.0.8051.1204)
Windows Live ID-Anmelde-Assistent (Version: 6.500.3165.0)
Windows Live Mail (Version: 14.0.8050.1202)
Windows Live Movie Maker-Betaversion (Version: 14.0.8051.1204)
Windows Live Sync (Version: 14.0.8050.1202)
Windows Live Writer (Version: 14.0.8050.1202)
Windows Live-Uploadtool (Version: 14.0.8014.1029)
WinRAR
Wireless Console 2 (Version: 2.0.10)
 

==================== Restore Points  =========================

22-06-2013 14:47:05 Geplanter Prüfpunkt
23-06-2013 07:20:54 Removed Ask Toolbar.
23-06-2013 07:33:46 Removed SpyHunter
24-06-2013 19:00:48 Geplanter Prüfpunkt
26-06-2013 07:43:05 Avg Update
02-07-2013 09:52:11 Geplanter Prüfpunkt
05-07-2013 14:52:19 Windows-Sicherung
07-07-2013 19:26:05 Windows-Sicherung
07-07-2013 21:33:40 PC Performer So, Jul 07, 13  23:33
09-07-2013 07:15:03 Removed SpyHunter

==================== Hosts content: ==========================

2006-11-02 12:23 - 2012-10-08 16:08 - 00444147 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1	localhost
127.0.0.1	www.007guard.com
127.0.0.1	007guard.com
127.0.0.1	008i.com
127.0.0.1	www.008k.com
127.0.0.1	008k.com
127.0.0.1	www.00hq.com
127.0.0.1	00hq.com
127.0.0.1	010402.com
127.0.0.1	www.032439.com
127.0.0.1	032439.com
127.0.0.1	www.0scan.com
127.0.0.1	0scan.com
127.0.0.1	www.1000gratisproben.com
127.0.0.1	1000gratisproben.com
127.0.0.1	1001namen.com
127.0.0.1	www.1001namen.com
127.0.0.1	100888290cs.com
127.0.0.1	www.100888290cs.com
127.0.0.1	www.100sexlinks.com
127.0.0.1	100sexlinks.com
127.0.0.1	www.10sek.com
127.0.0.1	10sek.com
127.0.0.1	www.1-2005-search.com
127.0.0.1	1-2005-search.com
127.0.0.1	www.123fporn.info
127.0.0.1	123fporn.info
127.0.0.1	123haustiereundmehr.com
127.0.0.1	www.123haustiereundmehr.com

There are 1000 more lines.


==================== Scheduled Tasks (whitelisted) =============

Task: {08B20BDD-061D-4BCE-AD47-FE9A3DCDD22E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-13] (Adobe Systems Incorporated)
Task: {0F41C267-D297-4B34-AE00-C1A66C6E9819} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\system32\rundll32.exe [2006-11-02] (Microsoft Corporation)
Task: {17B5FF43-FB91-4A1F-A893-E00458E6A4A7} - System32\Tasks\Google Updater and Installer => C:\Users\Jesslette\AppData\Local\Google\Update\GoogleUpdate.exe No File
Task: {1C5AE93F-3F84-43FE-BBDB-85800377FC07} - System32\Tasks\{DC596F40-AA24-4589-AF05-9F72C2E3299C} => C:\Program Files\Skype\Phone\Skype.exe [2012-07-13] (Skype Technologies S.A.)
Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {26D232B7-357C-4A2F-9AFC-126711D6ECB6} - System32\Tasks\RunAsStdUser Task => C:\Program Files\ClickPotatoLite\bin\10.0.728.0\ClickPotatoLiteSA.exe No File
Task: {29C997F7-E922-44AB-9FD5-B094C0F60AE0} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-03-12] (Oracle Corporation)
Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {34D1649E-40F5-4FBC-B9A6-B50CAE84E2EC} - System32\Tasks\Microsoft\Windows\WindowsBackup\CheckFull => C:\Windows\System32\sdclt.exe [2010-12-14] (Microsoft Corporation)
Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-21] (Microsoft Corporation)
Task: {4932A837-70CE-4367-89AC-5C2E0E9B68A1} - System32\Tasks\VisualBeeRecovery => C:\Users\Jesslette\AppData\Local\VisualBeeExe\VisualBeeRecovery.exe No File
Task: {5CA1B85D-BDBC-4FE6-BB46-56228177598F} - System32\Tasks\Microsoft\Windows\RestartManager\{4078BA62-78C0-44eb-8893-EBC7D7457143} => C:\Windows\system32\rmclient.exe [2006-11-02] (Microsoft Corporation)
Task: {626CBFC3-9F2D-453E-A7B0-751D27446194} - System32\Tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv => C:\Windows\TEMP\{631351EA-6F40-4934-B9ED-F8AFF522B06C}.exe No File
Task: {67FA9FF4-56D3-404A-B5EA-350D54E6D9F2} - System32\Tasks\Microsoft\Windows\Defrag\ManualDefrag => C:\Windows\system32\defrag.exe [2008-01-21] (Microsoft Corp.)
Task: {690C1FEF-B9B1-405B-888A-3C065BC18752} - System32\Tasks\ScanSoft Background Update => C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [2006-10-25] (Nuance Communications, Inc.)
Task: {6E8DC18B-64D8-4C2B-88F9-F34F63873D7D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-04-04] (Google Inc.)
Task: {6F88AB29-E5FA-429D-AE30-E970E07A032F} - System32\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv => C:\Windows\TEMP\{3EB8DDA9-F09C-4B00-84E8-DB683C9FF942}.exe No File
Task: {764390DD-59E8-438E-B70E-B05343CDC40D} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\schtasks.exe [2008-01-21] (Microsoft Corporation)
Task: {8EC190D3-C967-4DF5-9436-896A2ABCB7C5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-04-04] (Google Inc.)
Task: {9849A5E8-7E6D-4734-AF1C-5643E7F7E766} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {9BD4E354-5F22-47E3-8563-6F830DE008D6} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2008-01-21] (Microsoft Corporation)
Task: {A1DA27A4-2176-4EC7-9BC5-3A9490A2F8AB} - System32\Tasks\ASUS SmartLogon Console Sensor => C:\Program Files\ASUS\SmartLogon\sensorsrv.exe [2008-12-10] (ASUS)
Task: {A61555D3-7840-45C1-A5A9-0D49851DE37A} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\OptinNotification => C:\Windows\System32\wsqmcons.exe [2008-01-21] (Microsoft Corporation)
Task: {BEAB4E09-2D3A-47D0-9B27-5F86D9F0DC3A} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\System32\sdclt.exe [2010-12-14] (Microsoft Corporation)
Task: {C4781E2F-29D0-49C3-BA4B-D3F5D8E15E2D} - System32\Tasks\User_Feed_Synchronization-{53DA8181-72ED-4301-AA37-A34525C5D301} => C:\Windows\system32\msfeedssync.exe [2013-05-17] (Microsoft Corporation)
Task: {CA4A6081-5180-400C-9BB4-2AC81CC5B201} - System32\Tasks\GoogleUpdateTaskMachine => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-04-04] (Google Inc.)
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-21] ()
Task: {E6B1FB24-0755-41C9-8C5E-B61867967EDC} - System32\Tasks\ASUS Live Update => C:\Program Files\ASUS\ASUS Live Update\ALU.exe [2007-11-30] ()
Task: {FC6B92E3-6C36-40FF-B313-44B677E702EF} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv.job => C:\Windows\TEMP\{631351EA-6F40-4934-B9ED-F8AFF522B06C}.exe
Task: C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job => C:\Windows\TEMP\{3EB8DDA9-F09C-4B00-84E8-DB683C9FF942}.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\User_Feed_Synchronization-{53DA8181-72ED-4301-AA37-A34525C5D301}.job => C:\Windows\system32\msfeedssync.exe

==================== Faulty Device Manager Devices =============

Name: PHONE CARD
Description: Vivaz U5        
Class Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a}
Manufacturer:         
Service: WUDFRd
Problem: : Windows has stopped this device because it has reported problems. (Code 43)
Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation. 


==================== Event log errors: =========================

Application errors:
==================
Error: (07/09/2013 06:14:37 PM) (Source: Perflib) (User: )
Description: EmdCacheC:\Windows\system32\emdmgmt.dll4

Error: (07/07/2013 11:33:38 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {cfd8682d-d7ce-4dff-b086-8fbd0200433f}

Error: (07/05/2013 05:46:27 PM) (Source: EventSystem) (User: )
Description: 80070005EventSystem.EventSubscription{CEB8B221-89C5-41A8-98CE-79B413BF150B}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}

Error: (06/27/2013 11:41:31 PM) (Source: EventSystem) (User: )
Description: 80070005EventSystem.EventSubscription{CEB8B221-89C5-41A8-98CE-79B413BF150B}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}

Error: (06/26/2013 09:42:50 AM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {f1fb886c-2ef9-4631-a948-5b616bb88410}

Error: (06/25/2013 00:08:03 AM) (Source: EventSystem) (User: )
Description: 80070005EventSystem.EventSubscription{CEB8B221-89C5-41A8-98CE-79B413BF150B}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}

Error: (06/24/2013 10:42:04 PM) (Source: LoadPerf) (User: )
Description: 1428616

Error: (06/24/2013 10:36:51 PM) (Source: LoadPerf) (User: )
Description: WmiApRplWmiApRpl8

Error: (06/24/2013 10:36:51 PM) (Source: LoadPerf) (User: )
Description: 0078

Error: (06/23/2013 10:00:35 AM) (Source: EventSystem) (User: )
Description: 80070005EventSystem.EventSubscription{CEB8B221-89C5-41A8-98CE-79B413BF150B}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}


System errors:
=============
Error: (07/09/2013 05:34:17 PM) (Source: Service Control Manager) (User: )
Description: Avira Browser-Schutz201Neustart des Diensts

Error: (07/09/2013 09:36:29 AM) (Source: Service Control Manager) (User: )
Description: Avira Browser-Schutz101Neustart des Diensts

Error: (07/09/2013 09:02:47 AM) (Source: Microsoft-Windows-LanguagePackSetup) (User: NT-AUTORITÄT)
Description: 0x80070032

Error: (07/09/2013 09:01:06 AM) (Source: Service Control Manager) (User: )
Description: SQL Server VSS Writer1

Error: (07/09/2013 08:57:15 AM) (Source: Service Control Manager) (User: )
Description: Google Update Service (gupdate)%%230

Error: (07/09/2013 08:57:15 AM) (Source: DCOM) (User: )
Description: 230gupdate/comsvc{4EB61BAC-A3B6-4760-9581-655041EF4D69}

Error: (07/09/2013 08:57:00 AM) (Source: Service Control Manager) (User: )
Description: 30000avg9wd

Error: (07/09/2013 01:31:32 AM) (Source: DCOM) (User: )
Description: {6295DF2D-35EE-11D1-8707-00C04FD93327}

Error: (07/08/2013 11:29:39 PM) (Source: Service Control Manager) (User: )
Description: Avira Browser-Schutz201Neustart des Diensts

Error: (07/08/2013 11:29:37 PM) (Source: Service Control Manager) (User: )
Description: Avira Browser-Schutz101Neustart des Diensts


Microsoft Office Sessions:
=========================
Error: (12/14/2011 03:17:41 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 4 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (10/22/2011 02:53:49 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 7959 seconds with 1020 seconds of active time.  This session ended with a crash.

Error: (09/01/2011 06:30:11 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 32817 seconds with 8580 seconds of active time.  This session ended with a crash.

Error: (06/12/2010 05:28:55 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6514.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 12 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (04/26/2010 02:47:56 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6514.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 9 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (03/23/2010 06:41:10 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6514.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 1 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (03/23/2010 06:33:26 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6514.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 2 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (03/02/2010 02:02:55 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6514.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 3 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (03/02/2010 01:53:21 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6514.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 3 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (03/02/2010 01:52:49 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6514.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 4 seconds with 0 seconds of active time.  This session ended with a crash.


CodeIntegrity Errors:
===================================
  Date: 2012-03-25 16:51:45.062
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\atiumdag.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-03-25 16:51:44.668
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\atiumdag.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-12-21 12:38:25.244
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\atiumdag.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-12-21 12:38:24.765
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\atiumdag.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-08-10 11:49:48.247
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\atiumdag.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-08-10 11:49:47.612
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\atiumdag.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-08-10 11:49:47.009
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\atiumdag.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-08-10 11:49:46.660
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\atiumdag.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-06-29 12:58:52.229
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\atiumdag.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2011-06-29 12:58:51.976
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\atiumdag.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 71%
Total physical RAM: 3070.33 MB
Available physical RAM: 885.29 MB
Total Pagefile: 6342.93 MB
Available Pagefile: 3917.07 MB
Total Virtual: 2047.88 MB
Available Virtual: 1901.19 MB

==================== Drives ================================

Drive c: (VistaOS) (Fixed) (Total:149.04 GB) (Free:56.84 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (DATA) (Fixed) (Total:137.33 GB) (Free:23.18 GB) NTFS
Drive f: (PHONE CARD) (Removable) (Total:7.38 GB) (Free:1.67 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 298 GB) (Disk ID: 97646C29)
Partition 1: (Not Active) - (Size=12 GB) - (Type=1C)
Partition 2: (Active) - (Size=149 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=137 GB) - (Type=OF Extended)

========================================================
Disk: 1 (Size: 7 GB) (Disk ID: 00000000)
Partition 1: (Not Active) - (Size=7 GB) - (Type=0B)

==================== End Of Log ============================

oh man das ist wirklich leichter für dich, ich bin beeindruckt. was soll man da wohl drin sehen. hut ab.

schrauber · 09.07.2013, 17:49

reicht doch wenn ich was sehe

Einfach blind folgen, vertrauen und das Dingen is im Nu am schnurren

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte

jesslette · 11.07.2013, 08:51

Hey Guten morgen,
weiter gehts mit der blutigen Anfängerin.

Code:

ATTFilter

# AdwCleaner v2.304 - Datei am 11/07/2013 um 09:39:55 erstellt
# Aktualisiert am 03/07/2013 von Xplode
# Betriebssystem : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
# Benutzer : Jesslette - JESSLETTE-PC
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\Jesslette\Downloads\adwcleaner.exe
# Option [Löschen]


**** [Dienste] ****

Gestoppt & Gelöscht : APNMCP
Gestoppt & Gelöscht : IBUpdaterService

***** [Dateien / Ordner] *****

Datei Gelöscht : C:\END
Datei Gelöscht : C:\Program Files\Mozilla Firefox\plugins\npmieze.dll
Datei Gelöscht : C:\Program Files\Mozilla Firefox\searchplugins\avg-secure-search.xml
Datei Gelöscht : C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml
Datei Gelöscht : C:\Program Files\Mozilla FireFox\searchplugins\Search_Results.xml
Datei Gelöscht : C:\Program Files\Mozilla Firefox\searchplugins\SearchResults.xml
Datei Gelöscht : C:\user.js
Datei Gelöscht : C:\Users\Gast\AppData\Roaming\Mozilla\Firefox\Profiles\rxcx2lz7.default\bprotector_extensions.sqlite
Datei Gelöscht : C:\Users\Gast\AppData\Roaming\Mozilla\Firefox\Profiles\rxcx2lz7.default\bprotector_prefs.js
Datei Gelöscht : C:\Users\JESSLE~1\AppData\Local\Temp\Uninstall.exe
Datei Gelöscht : C:\Users\Jesslette\AppData\Local\cogqaas.bat
Datei Gelöscht : C:\Users\Jesslette\AppData\Local\cogqaas_nav.dat
Datei Gelöscht : C:\Users\Jesslette\AppData\Local\cskao_nav.dat
Datei Gelöscht : C:\Users\Jesslette\AppData\Local\xhqbr.dat
Datei Gelöscht : C:\Users\Jesslette\AppData\Local\xhqbr_nav.dat
Datei Gelöscht : C:\Users\Jesslette\AppData\Local\xhqbr_navps.dat
Datei Gelöscht : C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\Askcom.xml
Datei Gelöscht : C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\Babylon.xml
Datei Gelöscht : C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\bProtect.xml
Datei Gelöscht : C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\browsemngr.xml
Datei Gelöscht : C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\delta.xml
Datei Gelöscht : C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\holasearch.xml
Datei Gelöscht : C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\icqplugin.xml
Datei Gelöscht : C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\MyStart Search.xml
Datei Gelöscht : C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\Search_Results.xml
Datei Gelöscht : C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\SearchResults.xml
Datei Gelöscht : C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\SearchTheWeb.xml
Datei Gelöscht : C:\Windows\system32\conduitEngine.tmp
Datei Gelöscht : C:\Windows\system32\roboot.exe
Gelöscht mit Neustart : C:\Windows\system32\Zynga
Gelöscht mit Neustart : C:\Windows\system32\Zynga
Ordner Gelöscht : C:\Program Files\AskPartnerNetwork
Ordner Gelöscht : C:\Program Files\Conduit
Ordner Gelöscht : C:\Program Files\file scout
Ordner Gelöscht : C:\Program Files\ICQ6Toolbar
Ordner Gelöscht : C:\Program Files\Windows iLivid Toolbar
Ordner Gelöscht : C:\ProgramData\APN
Ordner Gelöscht : C:\ProgramData\Ask
Ordner Gelöscht : C:\ProgramData\AskPartnerNetwork
Ordner Gelöscht : C:\ProgramData\AVG Security Toolbar
Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\ProgramData\boost_interprocess
Ordner Gelöscht : C:\ProgramData\IBUpdaterService
Ordner Gelöscht : C:\ProgramData\ICQ\ICQToolbar
Ordner Gelöscht : C:\ProgramData\Tarma Installer
Ordner Gelöscht : C:\ProgramData\visualbee
Ordner Gelöscht : C:\Users\Gast\AppData\LocalLow\AVG Secure Search
Ordner Gelöscht : C:\Users\Gast\AppData\LocalLow\AVG Security Toolbar
Ordner Gelöscht : C:\Users\Gast\AppData\LocalLow\BabylonToolbar
Ordner Gelöscht : C:\Users\Gast\AppData\LocalLow\Conduit
Ordner Gelöscht : C:\Users\Gast\AppData\LocalLow\ConduitEngine
Ordner Gelöscht : C:\Users\Gast\AppData\LocalLow\eType
Ordner Gelöscht : C:\Users\Gast\AppData\LocalLow\PriceGong
Ordner Gelöscht : C:\Users\Gast\AppData\LocalLow\searchquband
Ordner Gelöscht : C:\Users\Gast\AppData\LocalLow\Searchqutoolbar
Ordner Gelöscht : C:\Users\JESSLE~1\AppData\Local\Temp\APN
Ordner Gelöscht : C:\Users\Jesslette\AppData\Local\AVG Security Toolbar
Ordner Gelöscht : C:\Users\Jesslette\AppData\Local\Conduit
Ordner Gelöscht : C:\Users\Jesslette\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
Ordner Gelöscht : C:\Users\Jesslette\AppData\Local\Ilivid Player
Ordner Gelöscht : C:\Users\Jesslette\AppData\Local\PackageAware
Ordner Gelöscht : C:\Users\Jesslette\AppData\Local\PutLockerDownloader
Ordner Gelöscht : C:\Users\Jesslette\AppData\Local\visualbeeexe
Ordner Gelöscht : C:\Users\Jesslette\AppData\Local\Wajam
Ordner Gelöscht : C:\Users\Jesslette\AppData\LocalLow\AVG Security Toolbar
Ordner Gelöscht : C:\Users\Jesslette\AppData\LocalLow\BabylonToolbar
Ordner Gelöscht : C:\Users\Jesslette\AppData\LocalLow\Bandoo
Ordner Gelöscht : C:\Users\Jesslette\AppData\LocalLow\Conduit
Ordner Gelöscht : C:\Users\Jesslette\AppData\LocalLow\Delta
Ordner Gelöscht : C:\Users\Jesslette\AppData\LocalLow\incredibar.com
Ordner Gelöscht : C:\Users\Jesslette\AppData\LocalLow\PriceGong
Ordner Gelöscht : C:\Users\Jesslette\AppData\LocalLow\searchquband
Ordner Gelöscht : C:\Users\Jesslette\AppData\LocalLow\ShoppingReport
Ordner Gelöscht : C:\Users\Jesslette\AppData\Roaming\Babylon
Ordner Gelöscht : C:\Users\Jesslette\AppData\Roaming\eType
Ordner Gelöscht : C:\Users\Jesslette\AppData\Roaming\file scout
Ordner Gelöscht : C:\Users\Jesslette\AppData\Roaming\loadtbs
Ordner Gelöscht : C:\Users\Jesslette\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Movie2KDownloader.com
Ordner Gelöscht : C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\extensions\pluswinks@PlusWinks
Ordner Gelöscht : C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\jetpack
Ordner Gelöscht : C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\Smartbar
Ordner Gelöscht : C:\Users\Jesslette\AppData\Roaming\PerformerSoft
Ordner Gelöscht : C:\Users\Jesslette\AppData\Roaming\SpeedAnalysis2
Ordner Gelöscht : C:\Windows\system32\WNLT

***** [Registrierungsdatenbank] *****

Schlüssel Gelöscht : HKCU\Software\1ClickDownload
Schlüssel Gelöscht : HKCU\Software\5fedbd1b46aba48
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\AVG Security Toolbar
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Crossrider
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\PriceGong
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\searchqutoolbar
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\ShoppingReport
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\SmartBar
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\XingHaoLyrics
Schlüssel Gelöscht : HKCU\Software\AskPartnerNetwork
Schlüssel Gelöscht : HKCU\Software\BabSolution
Schlüssel Gelöscht : HKCU\Software\BI
Schlüssel Gelöscht : HKCU\Software\DataMngr
Schlüssel Gelöscht : HKCU\Software\delta LTD
Schlüssel Gelöscht : HKCU\Software\filescout
Schlüssel Gelöscht : HKCU\Software\IM
Schlüssel Gelöscht : HKCU\Software\ImInstaller
Schlüssel Gelöscht : HKCU\Software\InstallCore
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{638482BC-3092-42DC-AEA1-735264911A77}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\1ClickDownload
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\AVG Secure Search
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\BabylonToolbar
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\loadtbs-2.1
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\PC Performer_is1
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ShoppingReport
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Updater Service
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\WNLT
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{100EB1FD-D03E-47FD-81F3-EE91287F9465}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{30F9B915-B755-4826-820B-08FBA6BD249D}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{336D0C35-8A85-403A-B9D2-65C292C39087}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9D717F81-9148-4F12-8568-69135F087DB0}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{B922D405-6D13-4A2B-AE89-08A030DA4402}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DFEFCDEE-CF1A-4FC8-88AD-129872198372}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EB5CEE80-030A-4ED8-8E20-454E9C68380F}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F9639E4A-801B-4843-AEE3-03D9DA199E77}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{336D0C35-8A85-403A-B9D2-65C292C39087}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9D717F81-9148-4F12-8568-69135F087DB0}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A3DAEB01-4C15-4AC6-A689-6406FD954EE0}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B922D405-6D13-4A2B-AE89-08A030DA4402}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D0230100-3044-43B1-A44E-70DC12FD418C}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DFEFCDEE-CF1A-4FC8-88AD-129872198372}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9639E4A-801B-4843-AEE3-03D9DA199E77}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\grusskartencenter.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\grusskartencenter.com
Schlüssel Gelöscht : HKCU\Software\Official-eMule
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\WNLT
Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar
Schlüssel Gelöscht : HKLM\Software\AskPartnerNetwork
Schlüssel Gelöscht : HKLM\Software\Babylon
Schlüssel Gelöscht : HKLM\Software\BabylonToolbar
Schlüssel Gelöscht : HKLM\Software\Bandoo
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{1301A8A5-3DFB-4731-A162-B357D00C9644}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{18B9B16E-716F-43DF-A6AD-512C7D2EB983}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\BandooCore.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BandooCore.BandooCore
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BandooCore.BandooCore.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BandooCore.ResourcesMngr
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BandooCore.ResourcesMngr.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BandooCore.SettingsMngr
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BandooCore.SettingsMngr.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BandooCore.StatisticMngr
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BandooCore.StatisticMngr.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Conduit.Engine
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{06DE5702-44CF-4B79-B4EF-3DDF653358F5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{477F210A-2A86-4666-9C4B-1189634D2C84}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FF871E51-2655-4D06-AED5-745962A96B32}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Movie2KDownloader
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CT2851647
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CT3268494
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{13ABD093-D46F-40DF-A608-47E162EC799D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}
Schlüssel Gelöscht : HKLM\Software\Conduit
Schlüssel Gelöscht : HKLM\Software\DataMngr
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaojmikegpiepcfdkkjaplodkpfmlo
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\blaofbhgbmeikidhlkmjhbkbfohpgekf
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\leocdeigfnkaojcapikdjcdbedcjmffc
Schlüssel Gelöscht : HKLM\Software\IB Updater
Schlüssel Gelöscht : HKLM\Software\Iminent
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{424624F4-C5DD-4E1D-BDD0-1E9C9B7799CC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7F000001-DB8E-F89C-2FEC-49BF726F8C12}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9C8A3CA5-889E-4554-BEEC-EC0876E4E96A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEE6C367-6118-11DC-9C72-001320C79847}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F9189560-573A-4FDE-B055-AE7B0F4CF080}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SearchSettings
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{6087829B-114F-42A1-A72B-B4AEDCEA4E5B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\loadtbs-2.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WNLT
Schlüssel Gelöscht : HKLM\Software\Official-eMule
Schlüssel Gelöscht : HKLM\Software\Tarma Installer
Schlüssel Gelöscht : HKLM\Software\WNLT
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{DFEFCDEE-CF1A-4FC8-88AD-129872198372}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]
Wert Gelöscht : HKCU\Software\Mozilla\Firefox\Extensions [specialsavings@superfish.com]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{DFEFCDEE-CF1A-4FC8-88AD-129872198372}]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [10]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnTbMon]
Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\extensions [{336D0C35-8A85-403a-B9D2-65C292C39087}]
Wert Gelöscht : HKLM\SOFTWARE\Policies\Google\Chrome\ExtensionInstallForcelist [1]

***** [Internet Browser] *****

-\\ Internet Explorer v8.0.6001.19437

Ersetzt : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.babylon.com/?affID=119816&babsrc=HP_ss_din2g&mntrId=485800224383ADAF --> hxxp://www.google.com
Ersetzt : [HKCU\Software\Microsoft\Internet Explorer\Main - ICQ Search] = hxxp://www.icq.com/search/results.php?q={searchTerms}&ch_id=osd --> hxxp://www.google.com
Ersetzt : [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - bProtectTabs] = hxxp://search.babylon.com/?babsrc=NT_ss_wls&mntrId=485800224383ADAF&affID=121963&tsp=4936 --> hxxp://www.google.com
Ersetzt : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Start Page] = hxxp://home.sweetim.com/?crg=3.1010006.10031&barid={B1E9168C-10BB-11E2-AED2-00248C644847} --> hxxp://www.google.com

-\\ Mozilla Firefox v22.0 (de)

Datei : C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\prefs.js

C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\user.js ... Gelöscht !

Gelöscht : user_pref("CT3268494.1000082.isDisplayHidden", "true");
Gelöscht : user_pref("CT3268494.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description[...]
Gelöscht : user_pref("CT3268494.CBOpenMAMSettings.enc", "MA==");
Gelöscht : user_pref("CT3268494.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Gelöscht : user_pref("CT3268494.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]
Gelöscht : user_pref("CT3268494.FirstTime", "true");
Gelöscht : user_pref("CT3268494.FirstTimeFF3", "true");
Gelöscht : user_pref("CT3268494.LoginRevertSettingsEnabled", true);
Gelöscht : user_pref("CT3268494.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT326[...]
Gelöscht : user_pref("CT3268494.UserID", "UN26626827010371684");
Gelöscht : user_pref("CT3268494.UserId.enc", "MzIyZjI4MmQtMDBhZC0wNmYwLWUzMjYtNTA5ZTRiMDg3MGFj");
Gelöscht : user_pref("CT3268494.addressBarTakeOverEnabledInHidden", "true");
Gelöscht : user_pref("CT3268494.browser.search.defaultthis.engineName", true);
Gelöscht : user_pref("CT3268494.cb_experience_000.enc", "MQ==");
Gelöscht : user_pref("CT3268494.cb_user_id_000.enc", "Q0I1NjU1ODEyOTg3ODhfMTM1NjA0MjgyMTAzMl9GaXJlZm94");
Gelöscht : user_pref("CT3268494.cbcountry_001.enc", "REU=");
Gelöscht : user_pref("CT3268494.cbfirsttime.enc", "V2VkIERlYyAxOSAyMDEyIDExOjU0OjM5IEdNVCswMTAw");
Gelöscht : user_pref("CT3268494.defaultSearch", "true");
Gelöscht : user_pref("CT3268494.enableAlerts", "always");
Gelöscht : user_pref("CT3268494.enableFix404ByUser", "TRUE");
Gelöscht : user_pref("CT3268494.enableSearchFromAddressBar", "true");
Gelöscht : user_pref("CT3268494.firstTimeDialogOpened", "true");
Gelöscht : user_pref("CT3268494.fixPageNotFoundError", "true");
Gelöscht : user_pref("CT3268494.fixPageNotFoundErrorByUser", "true");
Gelöscht : user_pref("CT3268494.fixPageNotFoundErrorInHidden", "true");
Gelöscht : user_pref("CT3268494.fixUrls", true);
Gelöscht : user_pref("CT3268494.hxxp___toolbar_jollywallet_com_tlb_2.APP_WIN_FEATURES.enc", "cmVzaXphYmxlPXllcy[...]
Gelöscht : user_pref("CT3268494.hxxp___toolbar_jollywallet_com_tlb_2.Affiliate_cache.enc", "WyJjODIyYzFiNjM4NTN[...]
Gelöscht : user_pref("CT3268494.hxxp___toolbar_jollywallet_com_tlb_2.Affiliate_defaultGui.enc", "eyJndWkiOlt7In[...]
Gelöscht : user_pref("CT3268494.hxxp___toolbar_jollywallet_com_tlb_2.Affiliate_settings.enc", "eyJpbml0VXJsIjoi[...]
Gelöscht : user_pref("CT3268494.installId", "116301");
Gelöscht : user_pref("CT3268494.installType", "conduitnsisintegration");
Gelöscht : user_pref("CT3268494.isCheckedStartAsHidden", true);
Gelöscht : user_pref("CT3268494.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Gelöscht : user_pref("CT3268494.isFirstTimeToolbarLoading", "false");
Gelöscht : user_pref("CT3268494.isNewTabEnabled", true);
Gelöscht : user_pref("CT3268494.isPerformedSmartBarTransition", "true");
Gelöscht : user_pref("CT3268494.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Gelöscht : user_pref("CT3268494.keyword", true);
Gelöscht : user_pref("CT3268494.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit[...]
Gelöscht : user_pref("CT3268494.lastVersion", "10.14.65.43");
Gelöscht : user_pref("CT3268494.migrateAppsAndComponents", true);
Gelöscht : user_pref("CT3268494.navigationAliasesJson", "{\"EB_MAIN_FRAME_URL\":\"about%3Aaddons\",\"EB_MAIN_FR[...]
Gelöscht : user_pref("CT3268494.newSettings", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Gelöscht : user_pref("CT3268494.openThankYouPage", "false");
Gelöscht : user_pref("CT3268494.openUninstallPage", "true");
Gelöscht : user_pref("CT3268494.price-gong.bornDate", "{\"dataType\":\"string\",\"data\":\"{\\\"Response\\\":\\[...]
Gelöscht : user_pref("CT3268494.price-gong.isManagedApp", "true");
Gelöscht : user_pref("CT3268494.revertSettingsEnabled", "false");
Gelöscht : user_pref("CT3268494.search.searchAppId", "129989109966145536");
Gelöscht : user_pref("CT3268494.search.searchCount", "0");
Gelöscht : user_pref("CT3268494.searchInNewTabEnabledByUser", "true");
Gelöscht : user_pref("CT3268494.searchInNewTabEnabledInHidden", "true");
Gelöscht : user_pref("CT3268494.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Gelöscht : user_pref("CT3268494.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Gelöscht : user_pref("CT3268494.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...]
Gelöscht : user_pref("CT3268494.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Gelöscht : user_pref("CT3268494.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Gelöscht : user_pref("CT3268494.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Gelöscht : user_pref("CT3268494.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Gelöscht : user_pref("CT3268494.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1355914157950");
Gelöscht : user_pref("CT3268494.serviceLayer_services_appsMetadata_lastUpdate", "1356003396809");
Gelöscht : user_pref("CT3268494.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1355914161408");
Gelöscht : user_pref("CT3268494.serviceLayer_services_login_10.13.40.15_lastUpdate", "1358370196854");
Gelöscht : user_pref("CT3268494.serviceLayer_services_login_10.14.40.128_lastUpdate", "1359370944251");
Gelöscht : user_pref("CT3268494.serviceLayer_services_login_10.14.42.7_lastUpdate", "1360801596449");
Gelöscht : user_pref("CT3268494.serviceLayer_services_login_10.14.65.43_lastUpdate", "1363694466219");
Gelöscht : user_pref("CT3268494.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1355914163460");
Gelöscht : user_pref("CT3268494.serviceLayer_services_searchAPI_lastUpdate", "1356003397065");
Gelöscht : user_pref("CT3268494.serviceLayer_services_serviceMap_lastUpdate", "1363636642080");
Gelöscht : user_pref("CT3268494.serviceLayer_services_toolbarContextMenu_lastUpdate", "1355914161483");
Gelöscht : user_pref("CT3268494.serviceLayer_services_toolbarSettings_lastUpdate", "1363701666625");
Gelöscht : user_pref("CT3268494.serviceLayer_services_translation_lastUpdate", "1363636644081");
Gelöscht : user_pref("CT3268494.serviceLayer_services_userApps1ec55dac-8dca-406b-9697-5d68893c1c0c_lastUpdate",[...]
Gelöscht : user_pref("CT3268494.serviceLayer_services_userApps_lastUpdate", "1356013956837");
Gelöscht : user_pref("CT3268494.settingsINI", true);
Gelöscht : user_pref("CT3268494.shouldFirstTimeDialog", "false");
Gelöscht : user_pref("CT3268494.smartbar.CTID", "CT3268494");
Gelöscht : user_pref("CT3268494.smartbar.Uninstall", "1");
Gelöscht : user_pref("CT3268494.smartbar.homepage", true);
Gelöscht : user_pref("CT3268494.smartbar.isHidden", true);
Gelöscht : user_pref("CT3268494.smartbar.toolbarName", "VisualBee V.1 ");
Gelöscht : user_pref("CT3268494.startPage", "userChanged");
Gelöscht : user_pref("CT3268494.toolbarBornServerTime", "19-12-2012");
Gelöscht : user_pref("CT3268494.toolbarCurrentServerTime", "19-3-2013");
Gelöscht : user_pref("CT3268494.toolbarDisabled", "true");
Gelöscht : user_pref("CT3268494.twitter_v1.8.0_twitter_app_open_t_f.enc", "ZmFsc2U=");
Gelöscht : user_pref("CT3268494.url_history0001.enc", "aHR0cDovL2RlLW1nNDEubWFpbC55YWhvby5jb20vbmVvL2xhdW5jaCM6[...]
Gelöscht : user_pref("CT3268494_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\"[...]
Gelöscht : user_pref("browser.search.defaultthis.engineName", "uTorrentBar_DE Customized Web Search");
Gelöscht : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2851647&Sea[...]
Gelöscht : user_pref("browser.startup.homepage", "hxxp://www.holasearch.com/?babsrc=HP_ss&mntrId=485800224383AD[...]
Gelöscht : user_pref("extensions.AVIRA-V7.AUC_clientCache", "{\"AUC_CACHE\":{\"avira.com\":{\"c\":[1],\"ttl\":1[...]
Gelöscht : user_pref("extensions.AVIRA-V7.domain", "\"avira.search.ask.com\"");
Gelöscht : user_pref("extensions.AVIRA-V7.hpr_ff", "\"hxxp://avira.search.ask.com/?p2=%5EB0Q%5EYYYYYY%5EYY%5EDE[...]
Gelöscht : user_pref("extensions.enabledAddons", "%7B166745b8-8d4a-4c86-9120-696de51a77aa%7D:1.0,youtubeunblock[...]
Gelöscht : user_pref("extensions.holasearch.admin", false);
Gelöscht : user_pref("extensions.holasearch.aflt", "babsst");
Gelöscht : user_pref("extensions.holasearch.appId", "{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}");
Gelöscht : user_pref("extensions.holasearch.autoRvrt", "false");
Gelöscht : user_pref("extensions.holasearch.dfltLng", "de");
Gelöscht : user_pref("extensions.holasearch.excTlbr", false);
Gelöscht : user_pref("extensions.holasearch.ffxUnstlRst", false);
Gelöscht : user_pref("extensions.holasearch.id", "48580ff900000000000000224383adaf");
Gelöscht : user_pref("extensions.holasearch.instlDay", "15893");
Gelöscht : user_pref("extensions.holasearch.instlRef", "sst");
Gelöscht : user_pref("extensions.holasearch.newTab", false);
Gelöscht : user_pref("extensions.holasearch.prdct", "holasearch");
Gelöscht : user_pref("extensions.holasearch.prtnrId", "holasearch");
Gelöscht : user_pref("extensions.holasearch.rvrt", "false");
Gelöscht : user_pref("extensions.holasearch.smplGrp", "none");
Gelöscht : user_pref("extensions.holasearch.tlbrId", "base");
Gelöscht : user_pref("extensions.holasearch.tlbrSrchUrl", "");
Gelöscht : user_pref("extensions.holasearch.vrsn", "1.8.16.16");
Gelöscht : user_pref("extensions.holasearch.vrsnTs", "1.8.16.1623:22:03");
Gelöscht : user_pref("extensions.holasearch.vrsni", "1.8.16.16");

Datei : C:\Users\Gast\AppData\Roaming\Mozilla\Firefox\Profiles\rxcx2lz7.default\prefs.js

Gelöscht : user_pref("extensions.crossriderapp21808.adsOldValue", -1);

-\\ Google Chrome v [Version kann nicht ermittelt werden]

Datei : C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Preferences

Gelöscht [l.1] : urls_to_restore_on_startup ={"backup":{"_signature":"WGo36dP2Uirbpn/NEOx9anVSqYIW3FKwBMW5jMVAqA4=","_version":4,"extensions":{"i[...]

*************************

AdwCleaner[S1].txt - [32234 octets] - [11/07/2013 09:39:55]

########## EOF - C:\AdwCleaner[S1].txt - [32295 octets] ##########

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.0.7 (07.11.2013:1)
OS: Windows Vista (TM) Home Premium x86
Ran by Jesslette on 11.07.2013 at  9:52:49,73
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\DisplayName
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\URL



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\interface\{6f43fa77-c18f-4d0c-9c7e-958876fe2061}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\interface\{df948646-8bf4-450e-a059-cf8a4e0fe2be}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\interface\{e96b49b0-e11f-48fc-984a-eec29a4f57e1}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\performersoft llc
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\visualbee
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{94ACDB52-FA66-4C4D-9F0E-F2DB3B5EA2FD}



~~~ Files

Successfully deleted: [File] "C:\Windows\system32\dmwu.exe"



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\fighters"
Successfully deleted: [Folder] "C:\Users\***\AppData\Roaming\fighters"
Successfully deleted: [Folder] "C:\Users\***\appdata\locallow\datamngr"



~~~ FireFox

Successfully deleted: [File] C:\Users\***\AppData\Roaming\mozilla\firefox\profiles\xnn4yddx.default\invalidprefs.js
Successfully deleted the following from C:\Users\***\AppData\Roaming\mozilla\firefox\profiles\xnn4yddx.default\prefs.js

user_pref("extensions.AVIRA-V7.com.avira.dnt.rules", "\"{\\\"Version\\\":38,\\\"Companies\\\":[{\\\"company\\\":\\\"Google Inc\\\",\\\"rules\\\":[{\\\"name\\\":\\\"Google Anal
Emptied folder: C:\Users\***\AppData\Roaming\mozilla\firefox\profiles\xnn4yddx.default\minidumps [137 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 11.07.2013 at  9:57:42,74
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

und hier das frische FRST

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 10-07-2013 04
Ran by Jesslette (administrator) on 11-07-2013 10:19:54
Running from C:\Users\***\Downloads
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(ATI Technologies Inc.) C:\Windows\system32\Ati2evxx.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(ATI Technologies Inc.) C:\Windows\system32\Ati2evxx.exe
(ASUSTek Computer Inc.) C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
() C:\Program Files\ATK Hotkey\ASLDRSrv.exe
() C:\Program Files\ATKGFNEX\GFNEXSrv.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG9\avgwdsvc.exe
() C:\Program Files\CDBurnerXP\NMSAccessU.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG9\avgnsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG9\avgchsvx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG9\avgrsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG9\avgcsrvx.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(ATK0100) C:\Program Files\ATK Hotkey\Hcontrol.exe
() C:\Program Files\ATK Hotkey\MsgTranAgt.exe
(ASUS) C:\Program Files\ASUS\SmartLogon\sensorsrv.exe
() C:\Program Files\ASUS\ASUS Live Update\ALU.exe
() C:\Program Files\Wireless Console 2\wcourier.exe
(ASUS) C:\Program Files\ASUS\ASUS CopyProtect\aspg.exe
(ATK) C:\Program Files\P4G\BatteryLife.exe
(ATK) C:\Program Files\ASUS\Splendid\ACMON.exe
(ASUSTeK) C:\Windows\System32\ACEngSvr.exe
() C:\Program Files\ATK Hotkey\ATKOSD.exe
() C:\Program Files\ATK Hotkey\KBFiltr.exe
() C:\Program Files\ATK Hotkey\WDC.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
() C:\Program Files\ATK Hotkey\HControlUser.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG9\avgtray.exe
(ASUS) C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe
(ASUS) C:\Windows\System32\ASUSTPE.exe
(ASUSTek Computer Inc.) C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\system32\conime.exe
(Microsoft Corporation) C:\Windows\system32\cmd.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
(Farbar) C:\Users\Jesslette\Downloads\FRST(1).exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Windows Defender] - %ProgramFiles%\Windows Defender\MSASCui.exe -hide [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1029416 2007-12-06] (Synaptics, Inc.)
HKLM\...\Run: [HControlUser] - "C:\Program Files\ATK Hotkey\HcontrolUser.exe" [98304 2008-01-12] ()
HKLM\...\Run: [AVG9_TRAY] - C:\PROGRA~1\AVG\AVG9\avgtray.exe [2077536 2012-03-01] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [ATKOSD2] - C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe [7651328 2008-07-15] (ASUS)
HKLM\...\Run: [ASUSTPE] - C:\Windows\system32\ASUSTPE.exe [106496 2007-10-12] (ASUS)
HKLM\...\Run: [ADSMTray] - C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe [266240 2008-04-01] (ASUSTek Computer Inc.)
HKLM\...\Run: [Adobe ARM] - "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [APSDaemon] - "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59280 2012-10-11] (Apple Inc.)
HKLM\...\Run: [QuickTime Task] - "C:\Program Files\QuickTime\QTTask.exe" -atboottime [421888 2012-10-25] (Apple Inc.)
HKLM\...\Run: [SunJavaUpdateSched] - "C:\Program Files\Common Files\Java\Java Update\jusched.exe" [253816 2013-03-12] (Oracle Corporation)
HKLM\...\Run: [avgnt] - "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min [345144 2013-06-20] (Avira Operations GmbH & Co. KG)
HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)
HKCU\...\Policies\system: [DisableRegistryTools] 0
HKCU\...\Policies\system: [DisableTaskMgr] 0
MountPoints2: {573e0664-7751-11de-be60-00248c644847} - G:\fooool.exe
MountPoints2: {a17d42b7-95e0-11e0-a514-00248c644847} - F:\AutoRun.exe
MountPoints2: {ac794ad3-660c-11de-9b42-00248c644847} - fooool.exe
HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter [ 2009-04-11] (Microsoft Corporation)
HKU\Default User\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter [ 2009-04-11] (Microsoft Corporation)
HKU\Gast\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter [ 2009-04-11] (Microsoft Corporation)
HKU\Gast\...\Run: [LightScribe Control Panel] - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden [x]
Lsa: [Notification Packages] scecli C:\Program Files\ASUS\ASUS Data Security Manager\ASPWDFLT
Startup: C:\ProgramData\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe (McAfee, Inc.)
BootExecute: autocheck autochk * sdnclean.exe

==================== Internet (Whitelisted) ====================

ProxyServer: 192.168.100.1:800
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=ASUS&bmod=ASUS
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=ASUS&bmod=ASUS
URLSearchHook: SearchHook Class - {D8278076-BC68-4484-9233-6E7F1628B56C} - "C:\Program Files\AskPartnerNetwork\Toolbar\searchhook.dll" No File
URLSearchHook: (No Name) - {A3BC75A2-1F87-4686-AA43-5347D756017C} -  No File
URLSearchHook: (No Name) - {c840e246-6b95-475e-9bd7-caa1c7eca9f2} -  No File
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = 
BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO: Avira SearchFree Toolbar plus Web Protection - {41564952-412D-5637-00A7-7A786E7484D7} - "C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" No File
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - No Name - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} -  No File
Toolbar: HKLM - No Name - {DFEFCDEE-CF1A-4FC8-88AD-48514E463B27} -  No File
Toolbar: HKLM - Avira SearchFree Toolbar plus Web Protection - {41564952-412D-5637-00A7-7A786E7484D7} - "C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" No File
Toolbar: HKCU -No Name - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} -  No File
Toolbar: HKCU -No Name - {DFEFCDEE-CF1A-4FC8-88AD-48514E463B27} -  No File
Toolbar: HKCU -No Name - {C840E246-6B95-475E-9BD7-CAA1C7ECA9F2} -  No File
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 03 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 04 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 05 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 06 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 07 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 08 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 33 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default
FF SelectedSearchEngine: Ask Search
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.3 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=14.0.8051.1204 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.149\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.149\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\ask-search.xml
FF SearchPlugin: C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\BrowserDefender.xml
FF SearchPlugin: C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\inbox-suchen.xml
FF SearchPlugin: C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\visualbee-v1-customized-web-search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\googledesktop.xml
FF Extension: No Name - C:\Users\Jesslette\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
FF Extension: Avira SearchFree Toolbar plus Web Protection - C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\Extensions\toolbar_AVIRA-V7@apn.ask.com
FF Extension: Microsoft .NET Framework Assistant - C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF Extension: IE Tab - C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\Extensions\{77b819fa-95ad-4f2c-ac7c-486b356188a9}
FF Extension: toolbar_AVIRA-V7 - C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\Extensions\toolbar_AVIRA-V7@apn.ask.com.xpi
FF Extension: youtubeunblocker - C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\Extensions\youtubeunblocker@unblocker.yt.xpi
FF Extension: No Name - C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\Extensions\{166745b8-8d4a-4c86-9120-696de51a77aa}.xpi
FF Extension: No Name - C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF Extension: Default - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM\...\Firefox\Extensions: [{3f963a5b-e555-4543-90e2-c3908898db71}] C:\Program Files\AVG\AVG9\Firefox
FF Extension: AVG Safe Search - C:\Program Files\AVG\AVG9\Firefox
FF HKCU\...\Firefox\Extensions: [goobar@gootoolbar.com] C:\Users\Jesslette\AppData\Roaming\GooToolBar\GooToolBar Installer\1.0.0.0
FF Extension: goobar - C:\Users\Jesslette\AppData\Roaming\GooToolBar\GooToolBar Installer\1.0.0.0

Chrome: 
=======
CHR Extension: () - C:\Users\JESSLE~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\mocblcnaofikinigmceddfghppkkjbog\1.0.0.3

========================== Services (Whitelisted) =================

R2 ADSMService; C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe [225280 2008-03-31] (ASUSTek Computer Inc.)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-06-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-06-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [589368 2013-06-20] (Avira Operations GmbH & Co. KG)
R2 ASLDRService; C:\Program Files\ATK Hotkey\ASLDRSrv.exe [94208 2007-10-03] ()
R2 ATKGFNEXSrv; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [94208 2007-08-08] ()
S3 AVG Security Toolbar Service; C:\Program Files\AVG\AVG9\Toolbar\ToolbarBroker.exe [167264 2011-11-10] ()
R2 avg9wd; C:\Program Files\AVG\AVG9\avgwdsvc.exe [308136 2010-07-15] (AVG Technologies CZ, s.r.o.)
S3 GoogleDesktopManager-051210-111108; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [30192 2011-09-13] (Google)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)
R2 NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [71096 2009-09-06] ()
S3 Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [155320 2012-01-18] (Avanquest Software)

==================== Drivers (Whitelisted) ====================

R0 AsDsm; C:\Windows\System32\Drivers\AsDsm.sys [29752 2007-08-11] (Windows (R) Codename Longhorn DDK provider)
R2 ASMMAP; C:\Program Files\ATKGFNEX\ASMMAP.sys [13880 2007-07-24] ()
R1 AvgLdx86; C:\Windows\System32\Drivers\avgldx86.sys [226016 2013-01-15] (AVG Technologies CZ, s.r.o.)
R1 AvgMfx86; C:\Windows\System32\Drivers\avgmfx86.sys [29712 2011-09-12] (AVG Technologies CZ, s.r.o.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [84744 2013-06-20] (Avira Operations GmbH & Co. KG)
R1 AvgTdiX; C:\Windows\System32\Drivers\avgtdix.sys [243152 2011-05-09] (AVG Technologies CZ, s.r.o.)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135136 2013-06-20] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-03-06] (Avira Operations GmbH & Co. KG)
S3 CRFILTER; C:\Windows\System32\DRIVERS\CRFILTER.sys [6656 2008-04-07] (Generic)
S3 CVirtA; C:\Windows\System32\DRIVERS\CVirtA.sys [5275 2007-01-18] (Cisco Systems, Inc.)
S4 DNE; C:\Windows\System32\DRIVERS\dne2000.sys [125328 2008-03-29] (Deterministic Networks, Inc.)
S3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [13904 2011-05-06] ()
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15928 2008-06-03] ( )
R0 lullaby; C:\Windows\System32\DRIVERS\lullaby.sys [15416 2008-05-29] (Windows (R) Codename Longhorn DDK provider)
R3 MTsensor; C:\Windows\System32\DRIVERS\ATKACPI.sys [7680 2006-12-14] (ATK0100)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1752704 2008-08-11] ()
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
S3 StarOpen; C:\Windows\System32\Drivers\StarOpen.sys [7168 2009-09-28] ()
U2 ccEvtMgr; 
U2 ccSetMgr; 
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
U3 navapsvc; 
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]
U3 SAVRT; 
U1 SAVRTPEL; 
U3 TlntSvr; 
S3 vpnva; system32\DRIVERS\vpnva.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-11 10:19 - 2013-07-11 10:19 - 01217338 ____A (Farbar) C:\Users\Jesslette\Downloads\FRST(1).exe
2013-07-11 09:57 - 2013-07-11 10:20 - 00002540 ____A C:\Users\Jesslette\Desktop\JRT.txt
2013-07-11 09:52 - 2013-07-11 09:52 - 00000000 ____D C:\Windows\ERUNT
2013-07-11 09:51 - 2013-07-11 09:52 - 00559306 ____A (Oleg N. Scherbakov) C:\Users\Jesslette\Downloads\JRT.exe
2013-07-11 09:51 - 2013-07-11 09:51 - 00032359 ____A C:\Users\Jesslette\Desktop\AdwCleaner[S1].txt
2013-07-11 09:41 - 2013-07-11 09:41 - 00000130 ____A C:\Windows\DeleteOnReboot.bat
2013-07-11 09:39 - 2013-07-11 09:41 - 00032365 ____A C:\AdwCleaner[S1].txt
2013-07-11 09:16 - 2013-07-11 09:16 - 00650027 ____A C:\Users\Jesslette\Downloads\adwcleaner.exe
2013-07-09 18:26 - 2013-07-09 18:26 - 00042634 ____A C:\Users\Jesslette\Desktop\FRST.txt
2013-07-09 18:25 - 2013-07-09 18:25 - 00034791 ____A C:\Users\Jesslette\Desktop\Addition.txt
2013-07-09 18:23 - 2013-07-09 18:24 - 00034791 ____A C:\Users\Jesslette\Downloads\Addition.txt
2013-07-09 18:21 - 2013-07-09 18:21 - 01216688 ____A (Farbar) C:\Users\Jesslette\Downloads\FRST.exe
2013-07-09 18:21 - 2013-07-09 18:21 - 00000000 ____D C:\FRST
2013-07-09 17:56 - 2013-07-09 17:56 - 00377856 ____A C:\Users\Jesslette\Downloads\gmer_2.1.19163.exe
2013-07-09 17:55 - 2013-07-09 18:02 - 00103854 ____A C:\Users\Jesslette\Desktop\OTL.Txt
2013-07-09 17:55 - 2013-07-09 18:02 - 00103214 ____A C:\Users\Jesslette\Desktop\Extras.Txt
2013-07-09 17:53 - 2013-07-09 17:53 - 00000480 ____A C:\Users\Jesslette\Downloads\defogger_disable.log
2013-07-09 17:53 - 2013-07-09 17:53 - 00000000 ____A C:\Users\Jesslette\defogger_reenable
2013-07-09 17:51 - 2013-07-09 17:51 - 00050477 ____A C:\Users\Jesslette\Downloads\Defogger.exe
2013-07-09 15:07 - 2013-07-09 15:07 - 00103238 ____A C:\Users\Jesslette\Downloads\Extras.Txt
2013-07-09 15:06 - 2013-07-09 15:06 - 00103890 ____A C:\Users\Jesslette\Downloads\OTL.Txt
2013-07-09 15:03 - 2013-07-09 15:03 - 00000000 ____A C:\Windows\system32\FAPB7BF.tmp
2013-07-09 15:01 - 2013-07-09 15:01 - 00000000 ____A C:\Windows\system32\FAP6BF.tmp
2013-07-09 15:01 - 2013-07-09 15:01 - 00000000 ____A C:\Windows\system32\FAP600B.tmp
2013-07-09 15:01 - 2013-07-09 15:01 - 00000000 ____A C:\Windows\system32\FAP3F30.tmp
2013-07-09 15:00 - 2013-07-09 15:00 - 00000000 ____A C:\Windows\system32\FAPA700.tmp
2013-07-09 14:43 - 2013-07-09 14:43 - 00602112 ____A (OldTimer Tools) C:\Users\Jesslette\Downloads\OTL.exe
2013-07-09 00:42 - 2013-07-09 00:42 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\Malwarebytes
2013-07-09 00:41 - 2013-07-09 00:41 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-07-09 00:31 - 2013-07-09 00:32 - 10285040 ____A (Malwarebytes Corporation                                    ) C:\Users\Jesslette\Downloads\mbam-setup-1.75.0.1300.exe
2013-07-07 23:27 - 2013-07-07 23:27 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\PlusWinks
2013-07-07 23:25 - 2013-07-07 23:25 - 00657728 ____A () C:\Users\Jesslette\Downloads\PCPerformerSetup.exe
2013-07-07 23:20 - 2013-07-07 23:20 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\SeeSimilar
2013-07-07 23:11 - 2013-07-07 23:11 - 00393064 ____A (Softonic                                        ) C:\Users\Jesslette\Downloads\SoftonicDownloader_fuer_computer-repair-free.exe
2013-07-07 23:03 - 2013-07-07 23:03 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\Avira
2013-07-07 23:01 - 2013-07-07 23:01 - 00000000 ____D C:\Program Files\Avira
2013-07-07 23:01 - 2013-06-20 14:48 - 00135136 ____A (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-07-07 23:01 - 2013-03-06 16:13 - 00037352 ____A (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-07-07 23:01 - 2012-08-27 15:50 - 00028520 ____A (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys
2013-07-07 22:59 - 2013-07-07 22:59 - 11177156 ____A C:\Users\Jesslette\Downloads\avira3737_free_antivirus_de(1).exe.part
2013-07-07 22:58 - 2013-07-07 23:00 - 104943936 ____A C:\Users\Jesslette\Downloads\avira3737_free_antivirus_de.exe
2013-07-06 01:16 - 2013-07-06 01:17 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-06-23 08:35 - 2013-06-23 08:35 - 00000000 ____D C:\ProgramData\䘈µ䏈µ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-23 02:17 - 2013-06-23 02:17 - 00000000 ____D C:\ProgramData\䘈Ä䏈Ä浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-22 15:40 - 2013-06-22 15:40 - 00000000 ____D C:\ProgramData\䘈ǐ䏈ǐ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-21 18:51 - 2013-06-21 18:51 - 00000000 ____D C:\ProgramData\䘈ǹ䏈ǹ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-21 12:50 - 2013-06-21 12:50 - 00000000 ____D C:\ProgramData\䘈Ʈ䏈Ʈ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-19 21:53 - 2013-06-19 21:53 - 00000000 ____D C:\ProgramData\䘈ǭ䏈ǭ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-16 18:23 - 2013-06-16 18:23 - 00000000 ____D C:\ProgramData\䘈0䏈0浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-15 13:23 - 2013-06-15 13:23 - 00000000 ____D C:\Windows\system32\searchplugins
2013-06-15 13:18 - 2013-06-15 13:18 - 00000000 ____D C:\ProgramData\䘈Ǣ䏈Ǣ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-13 19:36 - 2013-06-13 19:36 - 00167544 ____A () C:\Users\Jesslette\Downloads\VLCMediaPlayerSetup-87OPNp0.exe
2013-06-13 19:32 - 2013-06-13 19:33 - 00730944 ____A C:\Users\Jesslette\Downloads\Webplayer.exe
2013-06-12 01:27 - 2013-06-12 01:31 - 00000000 ____D C:\8d421f6d58c259db51c30e060ab0
2013-06-12 00:47 - 2013-05-17 05:50 - 01212928 ____A (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-06-12 00:47 - 2013-05-17 05:50 - 00916480 ____A (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-06-12 00:47 - 2013-05-17 05:50 - 00105984 ____A (Microsoft Corporation) C:\Windows\system32\url.dll
2013-06-12 00:47 - 2013-05-17 05:48 - 00206848 ____A (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-06-12 00:47 - 2013-05-17 05:46 - 06014464 ____A (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-06-12 00:47 - 2013-05-17 05:46 - 00611840 ____A (Microsoft Corporation) C:\Windows\system32\mstime.dll
2013-06-12 00:47 - 2013-05-17 05:46 - 00067072 ____A (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-06-12 00:47 - 2013-05-17 05:45 - 00630272 ____A (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-06-12 00:47 - 2013-05-17 05:45 - 00055296 ____A (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-06-12 00:47 - 2013-05-17 05:45 - 00043520 ____A (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-06-12 00:47 - 2013-05-17 05:45 - 00025600 ____A (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-06-12 00:47 - 2013-05-17 05:44 - 11111424 ____A (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-06-12 00:47 - 2013-05-17 05:44 - 02004992 ____A (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-06-12 00:47 - 2013-05-17 05:44 - 01469440 ____A (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-06-12 00:47 - 2013-05-17 05:44 - 00387584 ____A (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-06-12 00:47 - 2013-05-17 05:44 - 00184320 ____A (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-06-12 00:47 - 2013-05-17 05:44 - 00164352 ____A (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-06-12 00:47 - 2013-05-17 05:44 - 00109056 ____A (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-06-12 00:47 - 2013-05-17 05:44 - 00071680 ____A (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-06-12 00:47 - 2013-05-17 05:44 - 00055808 ____A (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-06-12 00:47 - 2013-05-17 04:06 - 00385024 ____A (Microsoft Corporation) C:\Windows\system32\html.iec
2013-06-12 00:47 - 2013-05-17 02:20 - 00133632 ____A (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-06-12 00:47 - 2013-05-17 02:19 - 00174080 ____A (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-06-12 00:47 - 2013-05-17 02:18 - 01638912 ____A (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-06-12 00:47 - 2013-05-17 02:18 - 00013312 ____A (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-06-12 00:47 - 2013-05-08 06:37 - 00905576 ____A (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-06-12 00:47 - 2013-05-03 00:03 - 03603832 ____A (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2013-06-12 00:47 - 2013-05-03 00:03 - 03551096 ____A (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-06-12 00:47 - 2013-05-02 06:04 - 00443904 ____A (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2013-06-12 00:47 - 2013-05-02 06:03 - 00037376 ____A (Microsoft Corporation) C:\Windows\system32\printcom.dll
2013-06-12 00:47 - 2013-04-24 06:00 - 00985600 ____A (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-06-12 00:47 - 2013-04-24 06:00 - 00133120 ____A (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-06-12 00:47 - 2013-04-24 06:00 - 00098304 ____A (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-06-12 00:47 - 2013-04-24 06:00 - 00041984 ____A (Microsoft Corporation) C:\Windows\system32\certenc.dll
2013-06-12 00:47 - 2013-04-24 03:46 - 00812544 ____A (Microsoft Corporation) C:\Windows\system32\certutil.exe
2013-06-12 00:47 - 2013-04-17 14:30 - 00024576 ____A (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll

==================== One Month Modified Files and Folders =======

2013-07-11 10:20 - 2013-07-11 09:57 - 00002540 ____A C:\Users\Jesslette\Desktop\JRT.txt
2013-07-11 10:19 - 2013-07-11 10:19 - 01217338 ____A (Farbar) C:\Users\Jesslette\Downloads\FRST(1).exe
2013-07-11 10:10 - 2012-04-14 11:40 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-11 09:52 - 2013-07-11 09:52 - 00000000 ____D C:\Windows\ERUNT
2013-07-11 09:52 - 2013-07-11 09:51 - 00559306 ____A (Oleg N. Scherbakov) C:\Users\Jesslette\Downloads\JRT.exe
2013-07-11 09:51 - 2013-07-11 09:51 - 00032359 ____A C:\Users\Jesslette\Desktop\AdwCleaner[S1].txt
2013-07-11 09:46 - 2012-04-04 22:20 - 00001100 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-07-11 09:45 - 2013-06-08 11:31 - 00000350 ____A C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv.job
2013-07-11 09:45 - 2013-06-03 22:28 - 00000350 ____A C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
2013-07-11 09:45 - 2009-03-14 05:05 - 00045056 ____A C:\Windows\system32\acovcnt.exe
2013-07-11 09:45 - 2006-11-02 14:47 - 00003616 ___AH C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-11 09:45 - 2006-11-02 14:47 - 00003616 ___AH C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-11 09:44 - 2006-11-02 15:01 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-07-11 09:42 - 2010-02-14 22:44 - 02091074 ____A C:\Windows\WindowsUpdate.log
2013-07-11 09:42 - 2006-11-02 15:01 - 00032584 ____A C:\Windows\Tasks\SCHEDLGU.TXT
2013-07-11 09:41 - 2013-07-11 09:41 - 00000130 ____A C:\Windows\DeleteOnReboot.bat
2013-07-11 09:41 - 2013-07-11 09:39 - 00032365 ____A C:\AdwCleaner[S1].txt
2013-07-11 09:33 - 2012-04-04 22:20 - 00001104 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-07-11 09:16 - 2013-07-11 09:16 - 00650027 ____A C:\Users\Jesslette\Downloads\adwcleaner.exe
2013-07-11 09:09 - 2009-10-23 12:31 - 00000000 ____D C:\Windows\system32\Drivers\Avg
2013-07-09 18:26 - 2013-07-09 18:26 - 00042634 ____A C:\Users\Jesslette\Desktop\FRST.txt
2013-07-09 18:25 - 2013-07-09 18:25 - 00034791 ____A C:\Users\Jesslette\Desktop\Addition.txt
2013-07-09 18:24 - 2013-07-09 18:23 - 00034791 ____A C:\Users\Jesslette\Downloads\Addition.txt
2013-07-09 18:21 - 2013-07-09 18:21 - 01216688 ____A (Farbar) C:\Users\Jesslette\Downloads\FRST.exe
2013-07-09 18:21 - 2013-07-09 18:21 - 00000000 ____D C:\FRST
2013-07-09 18:02 - 2013-07-09 17:55 - 00103854 ____A C:\Users\Jesslette\Desktop\OTL.Txt
2013-07-09 18:02 - 2013-07-09 17:55 - 00103214 ____A C:\Users\Jesslette\Desktop\Extras.Txt
2013-07-09 17:56 - 2013-07-09 17:56 - 00377856 ____A C:\Users\Jesslette\Downloads\gmer_2.1.19163.exe
2013-07-09 17:53 - 2013-07-09 17:53 - 00000480 ____A C:\Users\Jesslette\Downloads\defogger_disable.log
2013-07-09 17:53 - 2013-07-09 17:53 - 00000000 ____A C:\Users\Jesslette\defogger_reenable
2013-07-09 17:53 - 2009-05-29 12:20 - 00000000 ____D C:\Users\Jesslette
2013-07-09 17:51 - 2013-07-09 17:51 - 00050477 ____A C:\Users\Jesslette\Downloads\Defogger.exe
2013-07-09 15:07 - 2013-07-09 15:07 - 00103238 ____A C:\Users\Jesslette\Downloads\Extras.Txt
2013-07-09 15:06 - 2013-07-09 15:06 - 00103890 ____A C:\Users\Jesslette\Downloads\OTL.Txt
2013-07-09 15:03 - 2013-07-09 15:03 - 00000000 ____A C:\Windows\system32\FAPB7BF.tmp
2013-07-09 15:01 - 2013-07-09 15:01 - 00000000 ____A C:\Windows\system32\FAP6BF.tmp
2013-07-09 15:01 - 2013-07-09 15:01 - 00000000 ____A C:\Windows\system32\FAP600B.tmp
2013-07-09 15:01 - 2013-07-09 15:01 - 00000000 ____A C:\Windows\system32\FAP3F30.tmp
2013-07-09 15:00 - 2013-07-09 15:00 - 00000000 ____A C:\Windows\system32\FAPA700.tmp
2013-07-09 14:43 - 2013-07-09 14:43 - 00602112 ____A (OldTimer Tools) C:\Users\Jesslette\Downloads\OTL.exe
2013-07-09 14:10 - 2012-06-02 14:04 - 00000000 ___RD C:\Users\Jesslette\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-07-09 14:10 - 2010-02-14 22:16 - 00000000 ____D C:\Windows\pss
2013-07-09 09:06 - 2012-06-06 12:18 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\Dropbox
2013-07-09 09:05 - 2013-04-22 23:33 - 00000000 ___RD C:\Users\Jesslette\Dropbox
2013-07-09 08:59 - 2012-12-18 23:20 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-07-09 00:42 - 2013-07-09 00:42 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\Malwarebytes
2013-07-09 00:41 - 2013-07-09 00:41 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-07-09 00:32 - 2013-07-09 00:31 - 10285040 ____A (Malwarebytes Corporation                                    ) C:\Users\Jesslette\Downloads\mbam-setup-1.75.0.1300.exe
2013-07-07 23:27 - 2013-07-07 23:27 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\PlusWinks
2013-07-07 23:25 - 2013-07-07 23:25 - 00657728 ____A () C:\Users\Jesslette\Downloads\PCPerformerSetup.exe
2013-07-07 23:20 - 2013-07-07 23:20 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\SeeSimilar
2013-07-07 23:13 - 2006-11-02 13:18 - 00000000 ___RD C:\Users\Public
2013-07-07 23:11 - 2013-07-07 23:11 - 00393064 ____A (Softonic                                        ) C:\Users\Jesslette\Downloads\SoftonicDownloader_fuer_computer-repair-free.exe
2013-07-07 23:03 - 2013-07-07 23:03 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\Avira
2013-07-07 23:01 - 2013-07-07 23:01 - 00000000 ____D C:\Program Files\Avira
2013-07-07 23:01 - 2009-09-02 21:38 - 00000000 ____D C:\ProgramData\Avira
2013-07-07 23:00 - 2013-07-07 22:58 - 104943936 ____A C:\Users\Jesslette\Downloads\avira3737_free_antivirus_de.exe
2013-07-07 22:59 - 2013-07-07 22:59 - 11177156 ____A C:\Users\Jesslette\Downloads\avira3737_free_antivirus_de(1).exe.part
2013-07-07 21:51 - 2006-11-02 12:33 - 01475254 ____A C:\Windows\system32\PerfStringBackup.INI
2013-07-06 10:04 - 2009-11-10 00:04 - 00000000 ____A C:\Users\Jesslette\AppData\Local\prvlcl.dat
2013-07-06 01:17 - 2013-07-06 01:16 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-06-24 22:47 - 2009-08-15 20:39 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\vlc
2013-06-23 08:35 - 2013-06-23 08:35 - 00000000 ____D C:\ProgramData\䘈µ䏈µ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-23 02:17 - 2013-06-23 02:17 - 00000000 ____D C:\ProgramData\䘈Ä䏈Ä浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-22 15:40 - 2013-06-22 15:40 - 00000000 ____D C:\ProgramData\䘈ǐ䏈ǐ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-21 18:51 - 2013-06-21 18:51 - 00000000 ____D C:\ProgramData\䘈ǹ䏈ǹ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-21 12:50 - 2013-06-21 12:50 - 00000000 ____D C:\ProgramData\䘈Ʈ䏈Ʈ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-20 14:48 - 2013-07-07 23:01 - 00135136 ____A (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-06-20 14:48 - 2009-09-02 21:38 - 00084744 ____A (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-06-19 21:53 - 2013-06-19 21:53 - 00000000 ____D C:\ProgramData\䘈ǭ䏈ǭ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-16 18:23 - 2013-06-16 18:23 - 00000000 ____D C:\ProgramData\䘈0䏈0浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-15 13:23 - 2013-06-15 13:23 - 00000000 ____D C:\Windows\system32\searchplugins
2013-06-15 13:18 - 2013-06-15 13:18 - 00000000 ____D C:\ProgramData\䘈Ǣ䏈Ǣ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-13 19:36 - 2013-06-13 19:36 - 00167544 ____A () C:\Users\Jesslette\Downloads\VLCMediaPlayerSetup-87OPNp0.exe
2013-06-13 19:33 - 2013-06-13 19:32 - 00730944 ____A C:\Users\Jesslette\Downloads\Webplayer.exe
2013-06-13 18:10 - 2012-04-14 11:40 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-06-13 18:10 - 2011-08-04 16:33 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-06-13 16:35 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\rescache
2013-06-13 16:07 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\de-DE
2013-06-12 01:34 - 2009-03-14 02:16 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-06-12 01:31 - 2013-06-12 01:27 - 00000000 ____D C:\8d421f6d58c259db51c30e060ab0
2013-06-12 01:27 - 2006-11-02 12:24 - 73381792 ____A (Microsoft Corporation) C:\Windows\system32\mrt.exe

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-11 09:51

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

Einen schönen Tag Dir .....
hoffe habe alles richtig umgesetzt:-)

Schonmal danke

schrauber · 11.07.2013, 09:28

Perfekt

Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel

Link 1

WICHTIG - Speichere Combofix auf deinem Desktop

Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Zitat:

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

jesslette · 11.07.2013, 22:17

Code:

ATTFilter

ComboFix 13-07-09.01 - Jesslette 11.07.2013  10:40:42.1.2 - x86
Microsoft® Windows Vista™ Home Premium   6.0.6002.2.1252.49.1031.18.3070.1636 [GMT 2:00]
ausgeführt von:: c:\users\Jesslette\Downloads\ComboFix.exe
AV: AVG Anti-Virus Free *Disabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: AVG Anti-Virus Free *Disabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Im Speicher befindliches AV aktiv.
.
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Common Files\ASPG_icon.ico
c:\program files\Common Files\Uninstall
c:\windows\unin0407.exe
D:\install.exe
.
.
(((((((((((((((((((((((   Dateien erstellt von 2013-06-11 bis 2013-07-11  ))))))))))))))))))))))))))))))
.
.
2013-07-11 07:52 . 2013-07-11 07:52	--------	d-----w-	c:\windows\ERUNT
2013-07-11 07:45 . 2013-07-11 07:45	63115	----a-w-	c:\programdata\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\USERTILE.JS
2013-07-11 07:45 . 2013-07-11 07:45	4599	----a-w-	c:\programdata\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\UIRESOURCE.JS
2013-07-11 07:45 . 2013-07-11 07:45	9310	----a-w-	c:\programdata\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\TEXTBOX.JS
2013-07-11 07:45 . 2013-07-11 07:45	8646	----a-w-	c:\programdata\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\TILEBOX.JS
2013-07-11 07:45 . 2013-07-11 07:45	8613	----a-w-	c:\programdata\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\SAVEDUSER.JS
2013-07-11 07:45 . 2013-07-11 07:45	6429	----a-w-	c:\programdata\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\UICORE.JS
2013-07-11 07:45 . 2013-07-11 07:45	5927	----a-w-	c:\programdata\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\TEXT.JS
2013-07-11 07:45 . 2013-07-11 07:45	1651	----a-w-	c:\programdata\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\QUERYSTRING.JS
2013-07-11 07:45 . 2013-07-11 07:45	6910	----a-w-	c:\programdata\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\NEWUSERCOMM.JS
2013-07-11 07:45 . 2013-07-11 07:45	6208	----a-w-	c:\programdata\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\LINK.JS
2013-07-11 07:45 . 2013-07-11 07:45	18541	----a-w-	c:\programdata\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\LOCALIZATION.JS
2013-07-11 07:44 . 2013-07-11 07:44	8288	----a-w-	c:\programdata\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\IMAGE.JS
2013-07-11 07:44 . 2013-07-11 07:44	51852	----a-w-	c:\programdata\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\EXTERNALWRAPPER.JS
2013-07-11 07:44 . 2013-07-11 07:44	20719	----a-w-	c:\programdata\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\DIVWRAPPER.JS
2013-07-11 07:44 . 2013-07-11 07:44	23327	----a-w-	c:\programdata\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\COMBOBOX.JS
2013-07-11 07:44 . 2013-07-11 07:44	8782	----a-w-	c:\programdata\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\BUTTON.JS
2013-07-11 07:44 . 2013-07-11 07:44	7271	----a-w-	c:\programdata\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\CHECKBOX.JS
2013-07-11 07:41 . 2013-07-11 07:41	130	----a-w-	c:\windows\DeleteOnReboot.bat
2013-07-09 16:21 . 2013-07-09 16:21	--------	d-----w-	C:\FRST
2013-07-09 13:03 . 2013-07-09 13:03	0	----a-w-	c:\windows\system32\FAPB7BF.tmp
2013-07-09 13:01 . 2013-07-09 13:01	0	----a-w-	c:\windows\system32\FAP600B.tmp
2013-07-09 13:01 . 2013-07-09 13:01	0	----a-w-	c:\windows\system32\FAP3F30.tmp
2013-07-09 13:01 . 2013-07-09 13:01	0	----a-w-	c:\windows\system32\FAP6BF.tmp
2013-07-09 13:00 . 2013-07-09 13:00	0	----a-w-	c:\windows\system32\FAPA700.tmp
2013-07-08 22:42 . 2013-07-08 22:42	--------	d-----w-	c:\users\***\AppData\Roaming\Malwarebytes
2013-07-08 22:41 . 2013-07-08 22:41	--------	d-----w-	c:\programdata\Malwarebytes
2013-07-07 21:27 . 2013-07-07 21:27	--------	d-----w-	c:\users\Jesslette\AppData\Roaming\PlusWinks
2013-07-07 21:20 . 2013-07-07 21:20	--------	d-----w-	c:\users\Jesslette\AppData\Roaming\SeeSimilar
2013-07-07 21:03 . 2013-07-07 21:03	--------	d-----w-	c:\users\Jesslette\AppData\Roaming\Avira
2013-07-07 21:01 . 2013-06-20 12:48	135136	----a-w-	c:\windows\system32\drivers\avipbb.sys
2013-07-07 21:01 . 2013-03-06 14:13	37352	----a-w-	c:\windows\system32\drivers\avkmgr.sys
2013-07-07 21:01 . 2013-07-07 21:01	--------	d-----w-	c:\program files\Avira
2013-06-23 06:35 . 2013-06-23 06:35	--------	d-----w-	c:\progra~2\3DC1~1
2013-06-23 00:17 . 2013-06-23 00:17	--------	d-----w-	c:\progra~2\F0A1~1
2013-06-22 13:40 . 2013-06-22 13:40	--------	d-----w-	c:\progra~2\F7E1~1
2013-06-21 16:51 . 2013-06-21 16:51	--------	d-----w-	c:\progra~2\38C2~1
2013-06-21 10:50 . 2013-06-21 10:50	--------	d-----w-	c:\progra~2\7015~1
2013-06-19 19:53 . 2013-06-19 19:53	--------	d-----w-	c:\progra~2\33F4~1
2013-06-16 16:23 . 2013-06-16 16:23	--------	d-----w-	c:\progra~2\00FF22~1
2013-06-15 11:23 . 2013-06-15 11:23	--------	d-----w-	c:\windows\system32\searchplugins
2013-06-15 11:18 . 2013-06-15 11:18	--------	d-----w-	c:\progra~2\7BF4~1
2013-06-11 23:27 . 2013-06-11 23:31	--------	d-----w-	C:\8d421f6d58c259db51c30e060ab0
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-07-11 07:45 . 2009-03-14 03:05	45056	----a-w-	c:\windows\system32\acovcnt.exe
2013-06-20 12:48 . 2009-09-02 19:38	84744	----a-w-	c:\windows\system32\drivers\avgntflt.sys
2013-06-13 16:10 . 2012-04-14 09:40	692104	----a-w-	c:\windows\system32\FlashPlayerApp.exe
2013-06-13 16:10 . 2011-08-04 14:33	71048	----a-w-	c:\windows\system32\FlashPlayerCPLApp.cpl
2013-04-15 14:20 . 2013-05-15 22:31	638328	----a-w-	c:\windows\system32\drivers\dxgkrnl.sys
2013-04-13 10:56 . 2013-05-15 22:31	37376	----a-w-	c:\windows\system32\cdd.dll
2008-07-02 02:28 . 2008-07-02 02:28	61440	----a-w-	c:\program files\Common Files\CPInstallAction.dll
2011-09-13 21:45 . 2013-07-05 23:16	119808	----a-w-	c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ADSMOverlayIcon1]
@="{A8D448F4-0431-45AC-9F5E-E1B434AB2249}"
[HKEY_CLASSES_ROOT\CLSID\{A8D448F4-0431-45AC-9F5E-E1B434AB2249}]
2007-06-02 00:08	143360	----a-w-	c:\program files\ASUS\ASUS Data Security Manager\OverlayIconShlExt1.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-05-25 00:36	130736	----a-w-	c:\users\Jesslette\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-05-25 00:36	130736	----a-w-	c:\users\Jesslette\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-05-25 00:36	130736	----a-w-	c:\users\Jesslette\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-12-06 1029416]
"HControlUser"="c:\program files\ATK Hotkey\HcontrolUser.exe" [2008-01-12 98304]
"ATKOSD2"="c:\program files\ASUS\ATKOSD2\ATKOSD2.exe" [2008-07-15 7651328]
"ASUSTPE"="c:\windows\system32\ASUSTPE.exe" [2007-10-12 106496]
"ADSMTray"="c:\program files\ASUS\ASUS Data Security Manager\ADSMTray.exe" [2008-04-01 266240]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-10-11 59280]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2012-10-25 421888]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2013-06-20 345144]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"AvgUninstallURL"="start hxxp://www.avg.de/de.special-uninstallation-feedback-appf?lic=OQBBAFYARgBSAEUARQAtAFYAMwBaAEMAOQAtADYATgBBAFIAUwAtADYAUgBXAEcAQQAtAEEASwBEAFUANwAtAFYAWAAzADcATQA&inst=NwA3AC0ANwAxADAAMwA5ADMAOQA2ADAALQBGAEwAKwA5AC0AWABPADkAKwAxAC0AWABPADMANgArADEALQBEAEQAVAArADMAMAA0ADIAOQAtAFMAVAA5ADAARgBBAFAAUAArADEALQBEAEQAOQAwAEYAKwAxAC0AUwA5ADAARgBEAEQARgArADEALQBGADkAMABUAEIAKwAyAC0ARgA5ADAATQAxADIAUgArADEALQBWAEkAUAAxADIAKwAxAC0AVABMACsAMQA&prod=90&ver=9.0.894" [?]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\3.0.318\SSScheduler.exe [2013-2-5 272248]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute	REG_MULTI_SZ   	autocheck autochk *\0\0sdnclean.exe
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages	REG_MULTI_SZ   	scecli c:\program files\ASUS\ASUS Data Security Manager\ASPWDFLT
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"
.
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^FancyStart daemon.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\FancyStart daemon.lnk
backup=c:\windows\pss\FancyStart daemon.lnk.CommonStartup
backupExtension=.CommonStartup
.
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^VPN Client.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\VPN Client.lnk
backup=c:\windows\pss\VPN Client.lnk.CommonStartup
backupExtension=.CommonStartup
.
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^WinZip Quick Pick.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\WinZip Quick Pick.lnk
backup=c:\windows\pss\WinZip Quick Pick.lnk.CommonStartup
backupExtension=.CommonStartup
.
[HKLM\~\startupfolder\C:^Users^Jesslette^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk]
path=c:\users\Jesslette\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
backup=c:\windows\pss\Dropbox.lnk.Startup
backupExtension=.Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2013-04-04 21:06	958576	----a-w-	c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Desktop Search]
2011-09-13 21:45	30192	----a-w-	c:\program files\Google\Google Desktop Search\GoogleDesktop.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
2009-02-26 16:36	30040	----a-w-	c:\program files\Microsoft Office\Office12\GrooveMonitor.exe
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"ehTray.exe"=c:\windows\ehome\ehTray.exe
"WMPNSCFG"=c:\program files\Windows Media Player\WMPNSCFG.exe
"Sidebar"=c:\program files\Windows Sidebar\sidebar.exe /autoRun
"Sony PC Companion"="c:\program files\Sony\Sony PC Companion\PCCompanion.exe" /Background
"Google Update"="c:\users\Jesslette\AppData\Local\Google\Update\GoogleUpdate.exe" /c
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"SSBkgdUpdate"="c:\program files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
"PPort11reminder"="c:\program files\ScanSoft\PaperPort\Ereg\Ereg.exe" -r "c:\programdata\ScanSoft\PaperPort\11\Config\Ereg\Ereg.ini"
"Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
"BrMfcWnd"=c:\program files\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN
"ControlCenter3"=c:\program files\Brother\ControlCenter3\brctrcen.exe /autorun
"ATKMEDIA"=c:\program files\ASUS\ATK Media\DMedia.exe
"PaperPort PTD"="c:\program files\ScanSoft\PaperPort\pptd40nt.exe"
"IndexSearch"="c:\program files\ScanSoft\PaperPort\IndexSearch.exe"
"ASUS Screen Saver Protector"=c:\windows\ASScrPro.exe
"ASUS Camera ScreenSaver"=c:\windows\AsScrProlog.exe
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe"
"Performance Center"=c:\program files\Ascentive\Performance Center\APCMain.exe -m
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe"
"PC SpeedScan Pro"=c:\program files\Ascentive\PC SpeedScan Pro\PCSpeedScan.exe -m
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" -atboottime
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe"
"ROC_roc_dec12"="c:\program files\AVG Secure Search\ROC_roc_dec12.exe" /PROMPT /CMPID=roc_dec12
"DATAMNGR"=c:\progra~1\SEARCH~1\Datamngr\DATAMN~1.EXE
"vProt"="c:\program files\AVG Secure Search\vprot.exe"
.
--- Andere Dienste/Treiber im Speicher ---
.
*Deregistered* - AvgLdx86
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation	REG_MULTI_SZ   	FontCache
.
Inhalt des "geplante Tasks" Ordners
.
2013-07-11 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-14 16:10]
.
2013-07-11 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-04-04 20:20]
.
2013-07-11 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-04-04 20:20]
.
2012-05-17 c:\windows\Tasks\User_Feed_Synchronization-{53DA8181-72ED-4301-AA37-A34525C5D301}.job
- c:\windows\system32\msfeedssync.exe [2013-06-11 00:18]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.google.com
mStart Page = hxxp://www.google.com
uInternet Settings,ProxyOverride = <local>
uInternet Settings,ProxyServer = 192.168.100.1:800
uSearchURL,(Default) = hxxp://www.google.com/search/?q=%s
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
LSP: c:\program files\Avira\AntiVir Desktop\avsda.dll
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\
FF - prefs.js: browser.search.selectedEngine - Ask Search
FF - ExtSQL: 2013-07-07 23:21; toolbar_AVIRA-V7@apn.ask.com; c:\users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\extensions\toolbar_AVIRA-V7@apn.ask.com.xpi
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
URLSearchHooks-{D8278076-BC68-4484-9233-6E7F1628B56C} - c:\program files\AskPartnerNetwork\Toolbar\searchhook.dll
URLSearchHooks-{c840e246-6b95-475e-9bd7-caa1c7eca9f2} - (no file)
BHO-{41564952-412D-5637-00A7-7A786E7484D7} - c:\program files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll
Toolbar-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
Toolbar-{41564952-412D-5637-00A7-7A786E7484D7} - c:\program files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll
WebBrowser-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
WebBrowser-{C840E246-6B95-475E-9BD7-CAA1C7ECA9F2} - (no file)
SafeBoot-WudfPf
SafeBoot-WudfRd
MSConfigStartUp-uTorrent - c:\program files\uTorrent\uTorrent.exe
MSConfigStartUp-Xvid - c:\program files\Xvid\CheckUpdate.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, hxxp://www.gmer.net
Rootkit scan 2013-07-11 10:52
Windows 6.0.6002 Service Pack 2 NTFS
.
Scanne versteckte Prozesse... 
.
Scanne versteckte Autostarteinträge... 
.
Scanne versteckte Dateien... 
.
.
C:\ADSM_PData_0150
.
Scan erfolgreich abgeschlossen
versteckte Dateien: 1
.
**************************************************************************
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
--------------------- Durch laufende Prozesse gestartete DLLs ---------------------
.
- - - - - - - > 'lsass.exe'(688)
c:\program files\ASUS\ASUS Data Security Manager\ASPWDFLT.dll
.
Zeit der Fertigstellung: 2013-07-11  10:56:36
ComboFix-quarantined-files.txt  2013-07-11 08:56
.
Vor Suchlauf: 29 Verzeichnis(se), 60.336.795.648 Bytes frei
Nach Suchlauf: 35 Verzeichnis(se), 59.151.388.672 Bytes frei
.
- - End Of File - - 63716B20643077CF70113470F55455A2
64B1E91C5C6C2157642651010728F90F

schrauber · 12.07.2013, 10:01

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

jesslette · 14.07.2013, 09:22

Guten morgen Schrauber.... das war ja mal ein langer Scan.
Hier das Resutat.

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=e7e2ada60d6e99499ba420b030aae767
# engine=14376
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-07-13 05:04:16
# local_time=2013-07-13 07:04:16 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.0.6002 NT Service Pack 2
# compatibility_mode=1799 16775165 100 95 381915 239158346 408949 0
# compatibility_mode=5892 16776574 100 100 18511487 211267784 0 0
# scanned=165875
# found=11
# cleaned=0
# scan_time=30279
sh=9EAFC123E98C47AEC3B7A0D8487D36F0DDA1AC25 ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="C:\Users\Jesslette\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\11\1a92368b-4b7895f7"
sh=87DC041F9E4A59274BABA948FAFACF3D52399EA5 ft=1 fh=7fafa025f09971ef vn="Win32/Adware.1ClickDownload.AM application" ac=I fn="C:\Users\Jesslette\Downloads\more_then_honey.exe"
sh=86D7E8C091C2D00F6182096CD98480B437D5101D ft=1 fh=c90db264aa73f38f vn="Win32/Adware.1ClickDownload.M application" ac=I fn="C:\Users\Jesslette\Downloads\nairobi_half_life.exe"
sh=C6BA73E5B49ABFD7AF4F02E5D1188EB5F52FC87F ft=1 fh=2310ea95cd5854cb vn="Win32/Adware.1ClickDownload.AM application" ac=I fn="C:\Users\Jesslette\Downloads\sweet_gift(1).exe"
sh=6FAFECDF8AAFE421D69CD58B4D3107803530146F ft=1 fh=bfab6ee6253ed3f5 vn="Win32/Adware.1ClickDownload.AM application" ac=I fn="C:\Users\Jesslette\Downloads\sweet_gift.exe"
sh=C9526242F73CD08438F73EEBEC95D55B6FFBA2CE ft=1 fh=3c4310ee2ab3750a vn="Win32/Adware.1ClickDownload.M application" ac=I fn="C:\Users\Jesslette\Downloads\süßes_gift.exe"
sh=AC3C3C2F139F0A9D1602BAF9C26B5246FAEC2666 ft=1 fh=a68ad77e55ab6b90 vn="Win32/StartPage.OIE trojan" ac=I fn="C:\Users\Jesslette\Downloads\vlc-1.1.9-win32(1).exe.part"
sh=EC57809FE868CF53BE65AAEDBCA68C905D401658 ft=1 fh=6a037b2ba73eeab5 vn="Win32/StartPage.OIE trojan" ac=I fn="C:\Users\Jesslette\Downloads\vlc-1.1.9-win32.exe"
sh=FBE912D5354903F1E1708B0FB3B88DD57A2B2073 ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="D:\JESSLETTE-PC\Backup Set 2009-07-17 111124\Backup Files 2010-02-01 230111\Backup files 1.zip"
sh=4A5AB78629F72582713FA15A267E37739663FB79 ft=0 fh=0000000000000000 vn="Win32/StartPage.OIE trojan" ac=I fn="D:\JESSLETTE-PC\Backup Set 2009-07-17 111124\Backup Files 2011-06-16 113805\Backup files 10.zip"
sh=70C6113BAE06C1E31591383A5B7B49DEC23B056E ft=0 fh=0000000000000000 vn="Win32/AutoRun.IRCBot.DZ worm" ac=I fn="G:\System Volume Information\_restore{58D151D6-FD55-43B7-B7AF-87009931C7C2}\RP139\A0107283.inf"

Code:

ATTFilter

 Results of screen317's Security Check version 0.99.68  
 Windows Vista Service Pack 2 x86 (UAC is enabled)  
 Internet Explorer 8 Out of date! 
``````````````Antivirus/Firewall Check:`````````````` 
Avira Desktop   
 Antivirus out of date! (On Access scanning disabled!) 
`````````Anti-malware/Other Utilities Check:````````` 
 SpyHunter     
 CCleaner     
 Java(TM) 6 Update 16  
 Java 7 Update 21  
 Java version out of Date! 
 Adobe Flash Player 	11.7.700.224  
 Adobe Reader 9 Adobe Reader out of Date! 
 Adobe Reader 10.1.7 Adobe Reader out of Date!  
 Mozilla Firefox (22.0) 
````````Process Check: objlist.exe by Laurent````````  
 Avira Antivir avgnt.exe 
 Avira Antivir avguard.exe 
 windows defender MpCmdRun.exe   
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  % 
````````````````````End of Log``````````````````````

Jetzt noch das frische FRST .......

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 14-07-2013
Ran by Jesslette (administrator) on 14-07-2013 10:37:38
Running from C:\Users\***\Downloads
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(ATI Technologies Inc.) C:\Windows\system32\Ati2evxx.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(ATI Technologies Inc.) C:\Windows\system32\Ati2evxx.exe
(ASUSTek Computer Inc.) C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
() C:\Program Files\ATK Hotkey\ASLDRSrv.exe
() C:\Program Files\ATKGFNEX\GFNEXSrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
() C:\Program Files\CDBurnerXP\NMSAccessU.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
(ATK0100) C:\Program Files\ATK Hotkey\Hcontrol.exe
() C:\Program Files\ATK Hotkey\MsgTranAgt.exe
() C:\Program Files\Wireless Console 2\wcourier.exe
(ASUS) C:\Program Files\ASUS\ASUS CopyProtect\aspg.exe
(ATK) C:\Program Files\P4G\BatteryLife.exe
(ATK) C:\Program Files\ASUS\Splendid\ACMON.exe
(ASUSTeK) C:\Windows\System32\ACEngSvr.exe
(ASUS) C:\Program Files\ASUS\SmartLogon\sensorsrv.exe
() C:\Program Files\ATK Hotkey\ATKOSD.exe
() C:\Program Files\ASUS\ASUS Live Update\ALU.exe
() C:\Program Files\ATK Hotkey\KBFiltr.exe
() C:\Program Files\ATK Hotkey\WDC.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
() C:\Program Files\ATK Hotkey\HControlUser.exe
(ASUS) C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe
(ASUS) C:\Windows\System32\ASUSTPE.exe
(ASUSTek Computer Inc.) C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\system32\conime.exe
(Microsoft Corporation) c:\program files\windows defender\MpCmdRun.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
(Farbar) C:\Users\Jesslette\Downloads\FRST(2).exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1029416 2007-12-06] (Synaptics, Inc.)
HKLM\...\Run: [HControlUser] - "C:\Program Files\ATK Hotkey\HcontrolUser.exe" [98304 2008-01-12] ()
HKLM\...\Run: [ATKOSD2] - C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe [7651328 2008-07-15] (ASUS)
HKLM\...\Run: [ASUSTPE] - C:\Windows\system32\ASUSTPE.exe [106496 2007-10-12] (ASUS)
HKLM\...\Run: [ADSMTray] - C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe [266240 2008-04-01] (ASUSTek Computer Inc.)
HKLM\...\Run: [Adobe ARM] - "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [APSDaemon] - "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59280 2012-10-11] (Apple Inc.)
HKLM\...\Run: [QuickTime Task] - "C:\Program Files\QuickTime\QTTask.exe" -atboottime [421888 2012-10-25] (Apple Inc.)
HKLM\...\Run: [SunJavaUpdateSched] - "C:\Program Files\Common Files\Java\Java Update\jusched.exe" [253816 2013-03-12] (Oracle Corporation)
HKLM\...\Run: [avgnt] - "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min [345144 2013-06-20] (Avira Operations GmbH & Co. KG)
HKLM\...\Runonce: [AvgUninstallURL] - cmd.exe /c start hxxp://www.avg.de/de.special-uninstallation-feedback-appf?lic=OQBBAFYARgBSAEUARQAtAFYAMwBaAEMAOQAtADYATgBBAFIAUwAtADYAUgBXAEcAQQAtAEEASwBEAFUANwAtAFYAWAAzADcATQA"&"inst=NwA3AC0ANwAxADAAMwA5ADMAOQA2ADAALQBGAEwAKwA5AC0AWABPADkAKwAxAC0AWABPADMANgArADEALQBEAEQAVAArADMAMAA0ADIAOQAtAFMAVAA5ADAARgBBAFAAUAArADEALQBEAEQAOQAwAEYAKwAxAC0AUwA5ADAARgBEAEQARgArADEALQBGADkAMABUAEIAKwAyAC0ARgA5ADAATQAxADIAUgArADEALQBWAEkAUAAxADIAKwAxAC0AVABMACsAMQA"&"prod=90"&"ver=9.0.894 [x]
HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKCU\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)
HKU\Gast\...\Run: [LightScribe Control Panel] - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden [x]
Lsa: [Notification Packages] scecli C:\Program Files\ASUS\ASUS Data Security Manager\ASPWDFLT
Startup: C:\ProgramData\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe (McAfee, Inc.)
BootExecute: autocheck autochk * sdnclean.exe

==================== Internet (Whitelisted) ====================

ProxyServer: 192.168.100.1:800
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
StartMenuInternet: IEXPLORE.EXE - "C:\Program Files\Internet Explorer\iexplore.exe"
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = 
BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - No Name - {DFEFCDEE-CF1A-4FC8-88AD-48514E463B27} -  No File
Toolbar: HKCU -No Name - {DFEFCDEE-CF1A-4FC8-88AD-48514E463B27} -  No File
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 03 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 04 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 05 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 06 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 07 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 08 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 33 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default
FF SelectedSearchEngine: Ask Search
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.3 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=14.0.8051.1204 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\ask-search.xml
FF SearchPlugin: C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\BrowserDefender.xml
FF SearchPlugin: C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\inbox-suchen.xml
FF SearchPlugin: C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\searchplugins\visualbee-v1-customized-web-search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\googledesktop.xml
FF Extension: No Name - C:\Users\Jesslette\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
FF Extension: Avira SearchFree Toolbar plus Web Protection - C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\Extensions\toolbar_AVIRA-V7@apn.ask.com
FF Extension: Microsoft .NET Framework Assistant - C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF Extension: IE Tab - C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\Extensions\{77b819fa-95ad-4f2c-ac7c-486b356188a9}
FF Extension: toolbar_AVIRA-V7 - C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\Extensions\toolbar_AVIRA-V7@apn.ask.com.xpi
FF Extension: youtubeunblocker - C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\Extensions\youtubeunblocker@unblocker.yt.xpi
FF Extension: No Name - C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\Extensions\{166745b8-8d4a-4c86-9120-696de51a77aa}.xpi
FF Extension: No Name - C:\Users\Jesslette\AppData\Roaming\Mozilla\Firefox\Profiles\xnn4yddx.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF Extension: Default - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKCU\...\Firefox\Extensions: [goobar@gootoolbar.com] C:\Users\Jesslette\AppData\Roaming\GooToolBar\GooToolBar Installer\1.0.0.0
FF Extension: goobar - C:\Users\Jesslette\AppData\Roaming\GooToolBar\GooToolBar Installer\1.0.0.0

Chrome: 
=======
CHR Extension: () - C:\Users\JESSLE~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\mocblcnaofikinigmceddfghppkkjbog\1.0.0.3

========================== Services (Whitelisted) =================

R2 ADSMService; C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe [225280 2008-03-31] (ASUSTek Computer Inc.)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-06-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-06-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [589368 2013-06-20] (Avira Operations GmbH & Co. KG)
R2 ASLDRService; C:\Program Files\ATK Hotkey\ASLDRSrv.exe [94208 2007-10-03] ()
R2 ATKGFNEXSrv; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [94208 2007-08-08] ()
S3 GoogleDesktopManager-051210-111108; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [30192 2011-09-13] (Google)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)
R2 NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [71096 2009-09-06] ()
S3 Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [155320 2012-01-18] (Avanquest Software)

==================== Drivers (Whitelisted) ====================

R0 AsDsm; C:\Windows\System32\Drivers\AsDsm.sys [29752 2007-08-11] (Windows (R) Codename Longhorn DDK provider)
R2 ASMMAP; C:\Program Files\ATKGFNEX\ASMMAP.sys [13880 2007-07-24] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [84744 2013-06-20] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135136 2013-06-20] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-03-06] (Avira Operations GmbH & Co. KG)
S3 CRFILTER; C:\Windows\System32\DRIVERS\CRFILTER.sys [6656 2008-04-07] (Generic)
S3 CVirtA; C:\Windows\System32\DRIVERS\CVirtA.sys [5275 2007-01-18] (Cisco Systems, Inc.)
S4 DNE; C:\Windows\System32\DRIVERS\dne2000.sys [125328 2008-03-29] (Deterministic Networks, Inc.)
S3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [13904 2011-05-06] ()
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15928 2008-06-03] ( )
R0 lullaby; C:\Windows\System32\DRIVERS\lullaby.sys [15416 2008-05-29] (Windows (R) Codename Longhorn DDK provider)
R3 MTsensor; C:\Windows\System32\DRIVERS\ATKACPI.sys [7680 2006-12-14] (ATK0100)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1752704 2008-08-11] ()
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
S3 StarOpen; C:\Windows\System32\Drivers\StarOpen.sys [7168 2009-09-28] ()
S3 catchme; \??\C:\Users\JESSLE~1\AppData\Local\Temp\catchme.sys [x]
U2 ccEvtMgr; 
U2 ccSetMgr; 
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
U3 navapsvc; 
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]
U3 SAVRT; 
U1 SAVRTPEL; 
U3 TlntSvr; 
S3 vpnva; system32\DRIVERS\vpnva.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-14 10:37 - 2013-07-14 10:37 - 01218214 _____ (Farbar) C:\Users\Jesslette\Downloads\FRST(2).exe
2013-07-14 10:26 - 2013-07-14 10:26 - 00890988 _____ C:\Users\Jesslette\Downloads\SecurityCheck.exe
2013-07-13 10:37 - 2013-07-13 10:37 - 02347384 _____ (ESET) C:\Users\Jesslette\Downloads\esetsmartinstaller_enu.exe
2013-07-13 10:22 - 2013-07-13 10:22 - 00001026 _____ C:\Windows\PFRO.log
2013-07-11 10:56 - 2013-07-11 10:56 - 00018837 _____ C:\ComboFix.txt
2013-07-11 10:37 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-07-11 10:37 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-07-11 10:37 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-07-11 10:37 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-07-11 10:37 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-07-11 10:37 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-07-11 10:37 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-07-11 10:37 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-07-11 10:36 - 2013-07-11 10:56 - 00000000 ____D C:\ComboFix
2013-07-11 10:35 - 2013-07-11 10:35 - 05394432 _____ C:\Users\Gast\NTUSER~1.AVG
2013-07-11 10:31 - 2013-07-11 10:56 - 00000000 ____D C:\Qoobox
2013-07-11 10:31 - 2013-07-11 10:53 - 00000000 ____D C:\Windows\erdnt
2013-07-11 10:30 - 2013-07-11 10:30 - 05087643 ____R (Swearware) C:\Users\Jesslette\Downloads\ComboFix.exe
2013-07-11 10:19 - 2013-07-11 10:19 - 01217338 _____ (Farbar) C:\Users\Jesslette\Downloads\FRST(1).exe
2013-07-11 09:57 - 2013-07-11 10:20 - 00002540 _____ C:\Users\Jesslette\Desktop\JRT.txt
2013-07-11 09:52 - 2013-07-11 09:52 - 00000000 ____D C:\Windows\ERUNT
2013-07-11 09:51 - 2013-07-11 09:52 - 00559306 _____ (Oleg N. Scherbakov) C:\Users\Jesslette\Downloads\JRT.exe
2013-07-11 09:51 - 2013-07-11 09:51 - 00032359 _____ C:\Users\Jesslette\Desktop\AdwCleaner[S1].txt
2013-07-11 09:41 - 2013-07-11 09:41 - 00000130 _____ C:\Windows\DeleteOnReboot.bat
2013-07-11 09:39 - 2013-07-11 09:41 - 00032365 _____ C:\AdwCleaner[S1].txt
2013-07-11 09:34 - 2013-06-04 03:50 - 02049024 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-07-11 09:33 - 2013-05-29 13:30 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-11 09:33 - 2013-05-29 13:30 - 00916480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-11 09:33 - 2013-05-29 13:30 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-07-11 09:33 - 2013-05-29 13:28 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-07-11 09:33 - 2013-05-29 13:26 - 06016000 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-11 09:33 - 2013-05-29 13:26 - 00611840 _____ (Microsoft Corporation) C:\Windows\system32\mstime.dll
2013-07-11 09:33 - 2013-05-29 13:26 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-07-11 09:33 - 2013-05-29 13:25 - 00630272 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-11 09:33 - 2013-05-29 13:25 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-07-11 09:33 - 2013-05-29 13:25 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-07-11 09:33 - 2013-05-29 13:25 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-11 09:33 - 2013-05-29 13:24 - 11111424 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-11 09:33 - 2013-05-29 13:24 - 02004992 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-11 09:33 - 2013-05-29 13:24 - 01469440 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-07-11 09:33 - 2013-05-29 13:24 - 00387584 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-07-11 09:33 - 2013-05-29 13:24 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-07-11 09:33 - 2013-05-29 13:24 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-11 09:33 - 2013-05-29 13:24 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-07-11 09:33 - 2013-05-29 13:24 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-07-11 09:33 - 2013-05-29 13:24 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-07-11 09:33 - 2013-05-29 11:47 - 00385024 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-07-11 09:33 - 2013-05-29 10:07 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-07-11 09:33 - 2013-05-29 10:06 - 00174080 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-07-11 09:33 - 2013-05-29 10:05 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-07-11 09:33 - 2013-05-29 10:04 - 01638912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-11 09:32 - 2013-06-01 06:06 - 00505344 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-07-11 09:32 - 2013-05-08 06:04 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-11 09:32 - 2013-04-17 13:28 - 01029120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2013-07-11 09:32 - 2013-04-17 13:28 - 00219648 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2013-07-11 09:32 - 2013-04-17 13:28 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2013-07-11 09:32 - 2013-04-17 13:28 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2013-07-11 09:32 - 2013-04-17 12:34 - 01172480 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2013-07-11 09:32 - 2013-04-17 12:33 - 00486400 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2013-07-11 09:32 - 2013-04-17 12:14 - 00683008 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2013-07-11 09:32 - 2013-04-17 12:10 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-07-11 09:32 - 2013-04-17 12:10 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2013-07-11 09:16 - 2013-07-11 09:16 - 00650027 _____ C:\Users\Jesslette\Downloads\adwcleaner.exe
2013-07-09 18:26 - 2013-07-09 18:26 - 00042634 _____ C:\Users\Jesslette\Desktop\FRST.txt
2013-07-09 18:25 - 2013-07-09 18:25 - 00034791 _____ C:\Users\Jesslette\Desktop\Addition.txt
2013-07-09 18:23 - 2013-07-09 18:24 - 00034791 _____ C:\Users\Jesslette\Downloads\Addition.txt
2013-07-09 18:21 - 2013-07-09 18:21 - 01216688 _____ (Farbar) C:\Users\Jesslette\Downloads\FRST.exe
2013-07-09 18:21 - 2013-07-09 18:21 - 00000000 ____D C:\FRST
2013-07-09 17:56 - 2013-07-09 17:56 - 00377856 _____ C:\Users\Jesslette\Downloads\gmer_2.1.19163.exe
2013-07-09 17:55 - 2013-07-09 18:02 - 00103854 _____ C:\Users\Jesslette\Desktop\OTL.Txt
2013-07-09 17:55 - 2013-07-09 18:02 - 00103214 _____ C:\Users\Jesslette\Desktop\Extras.Txt
2013-07-09 17:53 - 2013-07-09 17:53 - 00000480 _____ C:\Users\Jesslette\Downloads\defogger_disable.log
2013-07-09 17:53 - 2013-07-09 17:53 - 00000000 _____ C:\Users\Jesslette\defogger_reenable
2013-07-09 17:51 - 2013-07-09 17:51 - 00050477 _____ C:\Users\Jesslette\Downloads\Defogger.exe
2013-07-09 15:07 - 2013-07-09 15:07 - 00103238 _____ C:\Users\Jesslette\Downloads\Extras.Txt
2013-07-09 15:06 - 2013-07-09 15:06 - 00103890 _____ C:\Users\Jesslette\Downloads\OTL.Txt
2013-07-09 15:03 - 2013-07-09 15:03 - 00000000 _____ C:\Windows\system32\FAPB7BF.tmp
2013-07-09 15:01 - 2013-07-09 15:01 - 00000000 _____ C:\Windows\system32\FAP6BF.tmp
2013-07-09 15:01 - 2013-07-09 15:01 - 00000000 _____ C:\Windows\system32\FAP600B.tmp
2013-07-09 15:01 - 2013-07-09 15:01 - 00000000 _____ C:\Windows\system32\FAP3F30.tmp
2013-07-09 15:00 - 2013-07-09 15:00 - 00000000 _____ C:\Windows\system32\FAPA700.tmp
2013-07-09 14:43 - 2013-07-09 14:43 - 00602112 _____ (OldTimer Tools) C:\Users\Jesslette\Downloads\OTL.exe
2013-07-09 00:42 - 2013-07-09 00:42 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\Malwarebytes
2013-07-09 00:41 - 2013-07-09 00:41 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-07-09 00:31 - 2013-07-09 00:32 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Jesslette\Downloads\mbam-setup-1.75.0.1300.exe
2013-07-07 23:27 - 2013-07-07 23:27 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\PlusWinks
2013-07-07 23:25 - 2013-07-07 23:25 - 00657728 _____ () C:\Users\Jesslette\Downloads\PCPerformerSetup.exe
2013-07-07 23:20 - 2013-07-07 23:20 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\SeeSimilar
2013-07-07 23:11 - 2013-07-07 23:11 - 00393064 _____ (Softonic                                        ) C:\Users\Jesslette\Downloads\SoftonicDownloader_fuer_computer-repair-free.exe
2013-07-07 23:03 - 2013-07-07 23:03 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\Avira
2013-07-07 23:01 - 2013-07-07 23:01 - 00000000 ____D C:\Program Files\Avira
2013-07-07 23:01 - 2013-06-20 14:48 - 00135136 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-07-07 23:01 - 2013-03-06 16:13 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-07-07 23:01 - 2012-08-27 15:50 - 00028520 _____ (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys
2013-07-07 22:59 - 2013-07-07 22:59 - 11177156 _____ C:\Users\Jesslette\Downloads\avira3737_free_antivirus_de(1).exe.part
2013-07-07 22:58 - 2013-07-07 23:00 - 104943936 _____ C:\Users\Jesslette\Downloads\avira3737_free_antivirus_de.exe
2013-07-06 01:16 - 2013-07-06 01:17 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-06-23 08:35 - 2013-06-23 08:35 - 00000000 ____D C:\ProgramData\䘈µ䏈µ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-23 02:17 - 2013-06-23 02:17 - 00000000 ____D C:\ProgramData\䘈Ä䏈Ä浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-22 15:40 - 2013-06-22 15:40 - 00000000 ____D C:\ProgramData\䘈ǐ䏈ǐ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-21 18:51 - 2013-06-21 18:51 - 00000000 ____D C:\ProgramData\䘈ǹ䏈ǹ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-21 12:50 - 2013-06-21 12:50 - 00000000 ____D C:\ProgramData\䘈Ʈ䏈Ʈ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-19 21:53 - 2013-06-19 21:53 - 00000000 ____D C:\ProgramData\䘈ǭ䏈ǭ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-16 18:23 - 2013-06-16 18:23 - 00000000 ____D C:\ProgramData\䘈0䏈0浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-15 13:23 - 2013-06-15 13:23 - 00000000 ____D C:\Windows\system32\searchplugins
2013-06-15 13:18 - 2013-06-15 13:18 - 00000000 ____D C:\ProgramData\䘈Ǣ䏈Ǣ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮

==================== One Month Modified Files and Folders =======

2013-07-14 10:38 - 2012-04-04 22:20 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-07-14 10:38 - 2012-04-04 22:20 - 00001100 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-07-14 10:37 - 2013-07-14 10:37 - 01218214 _____ (Farbar) C:\Users\Jesslette\Downloads\FRST(2).exe
2013-07-14 10:30 - 2010-02-14 22:44 - 01472666 _____ C:\Windows\WindowsUpdate.log
2013-07-14 10:26 - 2013-07-14 10:26 - 00890988 _____ C:\Users\Jesslette\Downloads\SecurityCheck.exe
2013-07-14 10:25 - 2006-11-02 14:47 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-14 10:25 - 2006-11-02 14:47 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-14 10:10 - 2012-04-14 11:40 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-13 13:14 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\Microsoft.NET
2013-07-13 10:39 - 2006-11-02 12:33 - 01475254 _____ C:\Windows\system32\PerfStringBackup.INI
2013-07-13 10:37 - 2013-07-13 10:37 - 02347384 _____ (ESET) C:\Users\Jesslette\Downloads\esetsmartinstaller_enu.exe
2013-07-13 10:27 - 2009-03-14 05:05 - 00045056 _____ C:\Windows\system32\acovcnt.exe
2013-07-13 10:25 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-07-13 10:25 - 2006-11-02 14:47 - 00372120 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-13 10:22 - 2013-07-13 10:22 - 00001026 _____ C:\Windows\PFRO.log
2013-07-13 10:22 - 2009-05-29 12:29 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-07-13 10:22 - 2006-11-02 14:37 - 00000000 ____D C:\Windows\system32\XPSViewer
2013-07-12 00:24 - 2006-11-02 15:01 - 00032584 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-07-12 00:16 - 2009-03-14 02:16 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-07-12 00:11 - 2006-11-02 12:24 - 75699896 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2013-07-11 23:55 - 2006-11-02 14:37 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-11 23:54 - 2009-05-29 12:20 - 00000000 ___RD C:\Users\Jesslette\Desktop
2013-07-11 10:56 - 2013-07-11 10:56 - 00018837 _____ C:\ComboFix.txt
2013-07-11 10:56 - 2013-07-11 10:36 - 00000000 ____D C:\ComboFix
2013-07-11 10:56 - 2013-07-11 10:31 - 00000000 ____D C:\Qoobox
2013-07-11 10:56 - 2006-11-02 13:18 - 00000000 __RHD C:\Users\Default
2013-07-11 10:56 - 2006-11-02 13:18 - 00000000 ___RD C:\Users\Public
2013-07-11 10:53 - 2013-07-11 10:31 - 00000000 ____D C:\Windows\erdnt
2013-07-11 10:52 - 2006-11-02 12:23 - 00000215 _____ C:\Windows\system.ini
2013-07-11 10:36 - 2009-10-23 12:30 - 00000000 ____D C:\ProgramData\avg9
2013-07-11 10:36 - 2006-11-02 13:18 - 00000000 __RHD C:\Users\Public\Desktop
2013-07-11 10:35 - 2013-07-11 10:35 - 05394432 _____ C:\Users\Gast\NTUSER~1.AVG
2013-07-11 10:35 - 2010-02-14 22:41 - 00000000 ____D C:\Users\Gast
2013-07-11 10:30 - 2013-07-11 10:30 - 05087643 ____R (Swearware) C:\Users\Jesslette\Downloads\ComboFix.exe
2013-07-11 10:20 - 2013-07-11 09:57 - 00002540 _____ C:\Users\Jesslette\Desktop\JRT.txt
2013-07-11 10:19 - 2013-07-11 10:19 - 01217338 _____ (Farbar) C:\Users\Jesslette\Downloads\FRST(1).exe
2013-07-11 09:52 - 2013-07-11 09:52 - 00000000 ____D C:\Windows\ERUNT
2013-07-11 09:52 - 2013-07-11 09:51 - 00559306 _____ (Oleg N. Scherbakov) C:\Users\Jesslette\Downloads\JRT.exe
2013-07-11 09:51 - 2013-07-11 09:51 - 00032359 _____ C:\Users\Jesslette\Desktop\AdwCleaner[S1].txt
2013-07-11 09:41 - 2013-07-11 09:41 - 00000130 _____ C:\Windows\DeleteOnReboot.bat
2013-07-11 09:41 - 2013-07-11 09:39 - 00032365 _____ C:\AdwCleaner[S1].txt
2013-07-11 09:40 - 2009-06-19 17:16 - 00000000 ____D C:\ProgramData\ICQ
2013-07-11 09:16 - 2013-07-11 09:16 - 00650027 _____ C:\Users\Jesslette\Downloads\adwcleaner.exe
2013-07-09 18:26 - 2013-07-09 18:26 - 00042634 _____ C:\Users\Jesslette\Desktop\FRST.txt
2013-07-09 18:25 - 2013-07-09 18:25 - 00034791 _____ C:\Users\Jesslette\Desktop\Addition.txt
2013-07-09 18:24 - 2013-07-09 18:23 - 00034791 _____ C:\Users\Jesslette\Downloads\Addition.txt
2013-07-09 18:21 - 2013-07-09 18:21 - 01216688 _____ (Farbar) C:\Users\Jesslette\Downloads\FRST.exe
2013-07-09 18:21 - 2013-07-09 18:21 - 00000000 ____D C:\FRST
2013-07-09 18:02 - 2013-07-09 17:55 - 00103854 _____ C:\Users\Jesslette\Desktop\OTL.Txt
2013-07-09 18:02 - 2013-07-09 17:55 - 00103214 _____ C:\Users\Jesslette\Desktop\Extras.Txt
2013-07-09 17:56 - 2013-07-09 17:56 - 00377856 _____ C:\Users\Jesslette\Downloads\gmer_2.1.19163.exe
2013-07-09 17:53 - 2013-07-09 17:53 - 00000480 _____ C:\Users\Jesslette\Downloads\defogger_disable.log
2013-07-09 17:53 - 2013-07-09 17:53 - 00000000 _____ C:\Users\Jesslette\defogger_reenable
2013-07-09 17:53 - 2009-05-29 12:20 - 00000000 ____D C:\Users\Jesslette
2013-07-09 17:51 - 2013-07-09 17:51 - 00050477 _____ C:\Users\Jesslette\Downloads\Defogger.exe
2013-07-09 15:07 - 2013-07-09 15:07 - 00103238 _____ C:\Users\Jesslette\Downloads\Extras.Txt
2013-07-09 15:06 - 2013-07-09 15:06 - 00103890 _____ C:\Users\Jesslette\Downloads\OTL.Txt
2013-07-09 15:03 - 2013-07-09 15:03 - 00000000 _____ C:\Windows\system32\FAPB7BF.tmp
2013-07-09 15:01 - 2013-07-09 15:01 - 00000000 _____ C:\Windows\system32\FAP6BF.tmp
2013-07-09 15:01 - 2013-07-09 15:01 - 00000000 _____ C:\Windows\system32\FAP600B.tmp
2013-07-09 15:01 - 2013-07-09 15:01 - 00000000 _____ C:\Windows\system32\FAP3F30.tmp
2013-07-09 15:00 - 2013-07-09 15:00 - 00000000 _____ C:\Windows\system32\FAPA700.tmp
2013-07-09 14:43 - 2013-07-09 14:43 - 00602112 _____ (OldTimer Tools) C:\Users\Jesslette\Downloads\OTL.exe
2013-07-09 14:10 - 2010-02-14 22:16 - 00000000 ____D C:\Windows\pss
2013-07-09 09:06 - 2012-06-06 12:18 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\Dropbox
2013-07-09 09:05 - 2013-04-22 23:33 - 00000000 ___RD C:\Users\Jesslette\Dropbox
2013-07-09 08:59 - 2012-12-18 23:20 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-07-09 00:42 - 2013-07-09 00:42 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\Malwarebytes
2013-07-09 00:41 - 2013-07-09 00:41 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-07-09 00:32 - 2013-07-09 00:31 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Jesslette\Downloads\mbam-setup-1.75.0.1300.exe
2013-07-07 23:27 - 2013-07-07 23:27 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\PlusWinks
2013-07-07 23:25 - 2013-07-07 23:25 - 00657728 _____ () C:\Users\Jesslette\Downloads\PCPerformerSetup.exe
2013-07-07 23:20 - 2013-07-07 23:20 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\SeeSimilar
2013-07-07 23:11 - 2013-07-07 23:11 - 00393064 _____ (Softonic                                        ) C:\Users\Jesslette\Downloads\SoftonicDownloader_fuer_computer-repair-free.exe
2013-07-07 23:03 - 2013-07-07 23:03 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\Avira
2013-07-07 23:01 - 2013-07-07 23:01 - 00000000 ____D C:\Program Files\Avira
2013-07-07 23:01 - 2009-09-02 21:38 - 00000000 ____D C:\ProgramData\Avira
2013-07-07 23:00 - 2013-07-07 22:58 - 104943936 _____ C:\Users\Jesslette\Downloads\avira3737_free_antivirus_de.exe
2013-07-07 22:59 - 2013-07-07 22:59 - 11177156 _____ C:\Users\Jesslette\Downloads\avira3737_free_antivirus_de(1).exe.part
2013-07-06 10:04 - 2009-11-10 00:04 - 00000000 _____ C:\Users\JESSLE~1\AppData\Local\prvlcl.dat
2013-07-06 01:17 - 2013-07-06 01:16 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-06-24 22:47 - 2009-08-15 20:39 - 00000000 ____D C:\Users\Jesslette\AppData\Roaming\vlc
2013-06-23 08:35 - 2013-06-23 08:35 - 00000000 ____D C:\ProgramData\䘈µ䏈µ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-23 02:17 - 2013-06-23 02:17 - 00000000 ____D C:\ProgramData\䘈Ä䏈Ä浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-22 15:40 - 2013-06-22 15:40 - 00000000 ____D C:\ProgramData\䘈ǐ䏈ǐ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-21 18:51 - 2013-06-21 18:51 - 00000000 ____D C:\ProgramData\䘈ǹ䏈ǹ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-21 12:50 - 2013-06-21 12:50 - 00000000 ____D C:\ProgramData\䘈Ʈ䏈Ʈ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-20 14:48 - 2013-07-07 23:01 - 00135136 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-06-20 14:48 - 2009-09-02 21:38 - 00084744 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-06-19 21:53 - 2013-06-19 21:53 - 00000000 ____D C:\ProgramData\䘈ǭ䏈ǭ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-16 18:23 - 2013-06-16 18:23 - 00000000 ____D C:\ProgramData\䘈0䏈0浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮
2013-06-15 13:23 - 2013-06-15 13:23 - 00000000 ____D C:\Windows\system32\searchplugins
2013-06-15 13:18 - 2013-06-15 13:18 - 00000000 ____D C:\ProgramData\䘈Ǣ䏈Ǣ浡䘠汩獥䵜䅣敦⁥敓畣楲祴匠慣屮⸳⸰ㄳ尸瑦潣普杩椮楮

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-14 10:37

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

Wow ich bin gespannt was Du sagst..
Und eigentlich bin ich auch ein wenig neugierig was du da gemacht hast..
oder sehen konntest.
Ersteinmal einen schönen Tag Dir.

schrauber · 14.07.2013, 12:42

Noch Probleme mit dem Rechner?

Bitte deinen Downloads Ordner leeren und den Inhalt löschen.
Adobe Reader updaten

Downloade Dir bitte TFC ( von Oldtimer ) und speichere die Datei auf dem Desktop.
Schließe nun alle offenen Programme und trenne Dich von dem Internet.
Doppelklick auf die TFC.exe und drücke auf Start.
Sollte TFC nicht alle Dateien löschen können wird es einen Neustart verlangen. Dies bitte zulassen.

jesslette · 16.07.2013, 00:14

hallo schrauber,
habe nun alles brav gemacht aber mein internet hängt trotzdem ab ud an und sagt irgendwas mit nem falschen skkipt oder skript stoppen...

gute nacht und großen dank schonmal..

09.07.2013, 17:33	#4
schrauber /// the machine /// TB-Ausbilder	Ist loadtbs-2.1 ein Virus? zwischen die beiden Teile das Logfile kopieren __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

Ist loadtbs-2.1 ein Virus?

Plagegeister aller Art und deren Bekämpfung: Ist loadtbs-2.1 ein Virus?