Windows Vista. Es wurde aktive malware auf ihrem system gefunden

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.3 (03.23.2014:1)
OS: Windows (TM) Vista Home Premium x64
Ran by user on 30.03.2014 at 16:20:38,43
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2082138798-1092229590-1054643100-1000\Software\sweetim
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{54AC9912-37B2-4E55-8A42-20F61B600B16}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{D64F7827-825B-49C5-9E13-4D9D88DDB770}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{54AC9912-37B2-4E55-8A42-20F61B600B16}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{D64F7827-825B-49C5-9E13-4D9D88DDB770}



~~~ Files

Successfully deleted: [File] "C:\Users\user\appdata\local\ext_piccshare_uninst.exe"



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 30.03.2014 at 16:26:47,54
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 30.03.2014
Suchlauf-Zeit: 17:01:44
Logdatei: mbam.txt
Administrator: Ja

Version: 2.00.0.1000
Malware Datenbank: v2014.03.30.02
Rootkit Datenbank: v2014.03.27.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Chameleon: Deaktiviert

Betriebssystem: Windows Vista Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: user

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 278521
Verstrichene Zeit: 20 Min, 1 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Shuriken: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 0
(No malicious items detected)

Registrierungswerte: 0
(No malicious items detected)

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 0
(No malicious items detected)

Dateien: 29
PUP.Optional.SmartBar.A, C:\Users\user\AppData\Local\Temp\Installer.exe, In Quarantäne, [5da37a8634cca95748e5e03eee122fd1], 
PUP.Optional.FileScout.A, C:\Users\user\AppData\Local\Temp\setup_fsu_cid.exe, In Quarantäne, [ee1252ae53ad15eb9de512edd62a867a], 
PUP.Optional.Conduit.A, C:\Users\user\AppData\Local\Temp\F757.tmp, In Quarantäne, [5ba5f30da759f010306777a1ec150cf4], 
PUP.Optional.Babylon.A, C:\Users\user\AppData\Local\Temp\77D83E88-BAB0-7891-9284-962F9FB96892\Latest\BExternal.dll, In Quarantäne, [d7295aa68e726c94578858caa65a1ce4], 
PUP.Optional.BabSolution.A, C:\Users\user\AppData\Local\Temp\77D83E88-BAB0-7891-9284-962F9FB96892\Latest\BUSolution.dll, In Quarantäne, [d92734cc08f87090f614f80c43be1ae6], 
PUP.Optional.Babylon.A, C:\Users\user\AppData\Local\Temp\77D83E88-BAB0-7891-9284-962F9FB96892\Latest\CrxInstaller.dll, In Quarantäne, [d32dce323dc3cd33d1ee7d93f70aff01], 
PUP.Optional.Babylon.A, C:\Users\user\AppData\Local\Temp\77D83E88-BAB0-7891-9284-962F9FB96892\Latest\MntrDLLInstall.dll, In Quarantäne, [ee12e02034cc8080932dd43ce918fc04], 
PUP.Optional.Delta, C:\Users\user\AppData\Local\Temp\77D83E88-BAB0-7891-9284-962F9FB96892\Latest\MyDeltaTB.exe, In Quarantäne, [9e62a65ab54be51b4c60639d2cd55ea2], 
PUP.Optional.Babylon.A, C:\Users\user\AppData\Local\Temp\77D83E88-BAB0-7891-9284-962F9FB96892\Latest\Setup.exe, In Quarantäne, [5ca450b0e0201ee23fe264bade2212ee], 
PUP.Optional.Babylon.A, C:\Users\user\AppData\Local\Temp\EC195B2E-BAB0-7891-BB82-214077296C47\Latest\BExternal.dll, In Quarantäne, [51afa957ff01d82810cf4ad823dd748c], 
PUP.Optional.Conduit.A, C:\Users\user\AppData\Local\Temp\EC195B2E-BAB0-7891-BB82-214077296C47\Latest\ccp.exe, In Quarantäne, [7987dd2338c85ea2b1e6bf597988c040], 
PUP.Optional.Babylon.A, C:\Users\user\AppData\Local\Temp\EC195B2E-BAB0-7891-BB82-214077296C47\Latest\CrxInstaller.dll, In Quarantäne, [18e80cf4bb451fe1b10e020e4ab735cb], 
PUP.Optional.Babylon.A, C:\Users\user\AppData\Local\Temp\EC195B2E-BAB0-7891-BB82-214077296C47\Latest\MntrDLLInstall.dll, In Quarantäne, [956be818a45cca368f312ce4d0314eb2], 
PUP.Optional.OptiToolbar.A, C:\Users\user\AppData\Local\Temp\EC195B2E-BAB0-7891-BB82-214077296C47\Latest\MyOptiTB.exe, In Quarantäne, [31cf619f08f809f7f641d0891be6916f], 
PUP.Optional.Babylon.A, C:\Users\user\AppData\Local\Temp\EC195B2E-BAB0-7891-BB82-214077296C47\Latest\Setup.exe, In Quarantäne, [27d9ca3618e84eb29ce59e8340c0d22e], 
PUP.Optional.DomaIQ, C:\Users\user\AppData\Local\Temp\Java.exe\e59980c964a443f1b0795d63539154ba\Java.exe, In Quarantäne, [e41c4eb205fb3bc55314bb6208f98878], 
PUP.Optional.DomaIQ, C:\Users\user\AppData\Local\Temp\Java.exe\e59980c964a443f1b0795d63539154ba\parent.txt, In Quarantäne, [43bd26da3cc467991c4bb36a847d629e], 
PUP.Optional.Desk365.A, C:\Users\user\AppData\Local\Temp\Java.exe\e59980c964a443f1b0795d63539154ba\software\deskdl.exe, In Quarantäne, [4fb1dd23e917916fb7b4bd72f60ebf41], 
PUP.Optional.QuickShare.A, C:\Users\user\AppData\Local\Temp\Java.exe\e59980c964a443f1b0795d63539154ba\software\QuickShare1.exe, In Quarantäne, [f10f8c74fa062ad64d194cd4ec14be42], 
PUP.Optional.Bundler, C:\Users\user\AppData\Local\Temp\Java.exe\e59980c964a443f1b0795d63539154ba\software\Superlyrics.exe, In Quarantäne, [e41c6e92946c7c8478d342ec29d82dd3], 
PUP.Optional.Spigot.A, C:\Users\user\AppData\Local\Temp\nsk373E.tmp-2\APN_ATU3_.exe, In Quarantäne, [49b721dfd8287f816ef873a9d9282ad6], 
PUP.Optional.Spigot.A, C:\Users\user\AppData\Local\Temp\nsf4B0D.tmp-2\APN_ATU3_.exe, In Quarantäne, [5aa6768aab559c648ed8f329907132ce], 
PUP.Optional.DomaIQ, C:\Users\user\Downloads\Java.exe, In Quarantäne, [df214eb2837d5fa1df8848d5cb36629e], 
PUP.Optional.Softonic.A, C:\Users\user\Downloads\SoftonicDownloader_fuer_free-youtube-to-mp3-converter.exe, In Quarantäne, [55ab4db3f60aca36f8c3b95e50b16a96], 
PUP.Optional.Softonic.A, C:\Users\user\Downloads\SoftonicDownloader_fuer_free-youtube-to-mp3.exe, In Quarantäne, [90700af6c43cee12b2090c0b5ea3669a], 
PUP.Optional.Spigot.A, C:\Users\user\Downloads\aTubeCatcher (1).exe, In Quarantäne, [c23e8878ec14b848ed797ba16e93847c], 
PUP.Optional.Spigot.A, C:\Users\user\Downloads\aTubeCatcher.exe, In Quarantäne, [eb15ad5359a7ad53273fa07c9170748c], 
PUP.Optional.Spigot.A, C:\Users\user\Downloads\aTube_Catcher.exe, In Quarantäne, [56aa35cb1ce4fc04303636e64fb29a66], 
Rogue.Link, C:\Users\Public\Desktop\MP3 Downloader.lnk, In Quarantäne, [aa56b050fe02aa56fccdf0ab15ed0ef2], 

Physische Sektoren: 0
(No malicious items detected)


(end)
         

Zoek.exe v5.0.0.0 Updated 07-March-2014
Tool run by user on 30.03.2014 at 17:19:55,17.
Microsoft® Windows Vista™ Home Premium  6.0.6001 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\user\Downloads\zoek.exe [Scan all users] [Script inserted] 

==== System Restore Info ======================

30.03.2014 17:21:11 Zoek.exe System Restore Point Created Succesfully.

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-2082138798-1092229590-1054643100-1000\Software\Microsoft\Internet Explorer\SearchScopes\{45149B53-67AF-4BCA-871C-880E5484F7F1} deleted successfully
HKEY_USERS\S-1-5-21-2082138798-1092229590-1054643100-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7E853D72-626A-48EC-A868-BA8D5E23E045} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_LOCAL_MACHINE\software\Wow6432Node\mozilla\Firefox\extensions\{7BA52691-1876-45ce-9EE6-54BCB3B04BBC} deleted successfully

==== Deleting Services ======================


==== Deleting Files \ Folders ======================

C:\Users\user\AppData\Roaming\Common deleted
C:\Users\user\AppData\Local\avgchrome deleted
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\ext_offermosquito deleted
C:\Users\user\Downloads\FreeYouTubeToMP3Converter.exe deleted
C:\Users\user\Downloads\FreeYouTubeToMP3Converter3.12.0.128.exe deleted
C:\Users\user\Downloads\FreeYouTubeToMP3Converter37 (1).exe deleted
C:\Users\user\Downloads\FreeYouTubeToMP3Converter37.exe deleted
C:\Windows\SysWow64\searchplugins deleted
C:\Windows\SysWow64\Extensions deleted

==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
bpegkgagfojjbcpkihigfmkojdmmimdf - No path found[]
ehgldbbpchgpcfagfpfjgoomddhccfgh - No path found[]


==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="hxxp://www.google.com"
"Default_Page_URL"="hxxp://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="hxxp://www.google.com"
"Default_Page_URL"="hxxp://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Start Page"="hxxp://www.google.com"
"Default_Page_URL"="hxxp://www.google.com"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="hxxp://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="hxxp://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="hxxp://go.microsoft.com/fwlink/?LinkId=69157"
"Default_Page_URL"="hxxp://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Start Page"="hxxp://go.microsoft.com/fwlink/?LinkId=69157"
"Default_Page_URL"="hxxp://go.microsoft.com/fwlink/?LinkId=69157"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google  Url="hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"

==== Reset Google Chrome ======================

C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\preferences was reset successfully
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\bpegkgagfojjbcpkihigfmkojdmmimdf deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\ehgldbbpchgpcfagfpfjgoomddhccfgh deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\user\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=7 folders=5 103073260 bytes)

==== Empty Temp Folders ======================

C:\Users\Administrator\AppData\Local\Temp emptied successfully
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\user\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\user\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found

==== EOF on 30.03.2014 at 17:34:21,24 ======================