Windows XP, Morzilla Browser, ihavenet-virus !

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 27-09-2013 (ATTENTION: ====> FRST version is 21 days old and could be outdated)
Ran by lsy (administrator) on 40K1OFMHHXM8M4D on 18-10-2013 20:55:35
Running from C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Desktop
Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\sched.exe
(Intel Corporation) C:\Programme\Intel\Intel Matrix Storage Manager\iaanotif.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE
(Realtek Semiconductor Corp.) C:\WINDOWS\SOUNDMAN.EXE
(Synaptics, Inc.) C:\Programme\Synaptics\SynTP\SynTPEnh.exe
(FUJITSU LIMITED) C:\Addon\Fujitsu\PSUtility\TrayManager.exe
(FUJITSU LIMITED) C:\Programme\Fujitsu\FUJ02E3\FUJ02E3.exe
(FUJITSU LIMITED) C:\Programme\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe
(FUJITSU LIMITED) C:\AddOn\Fujitsu\Application Panel\QuickTouch.exe
(FUJITSU LIMITED) C:\Programme\Fujitsu\BtnHnd\BtnHnd.exe
(PixArt Imaging Incorporation) C:\WINDOWS\PixArt\PAC7302\Monitor.exe
(Intel Corporation) C:\WINDOWS\system32\igfxtray.exe
(Intel Corporation) C:\WINDOWS\system32\hkcmd.exe
(Intel Corporation) C:\WINDOWS\system32\igfxpers.exe
(Oracle Corporation) C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe
(Apple Inc.) C:\Programme\iTunes\iTunesHelper.exe
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avgnt.exe
(Hewlett-Packard Co.) C:\Programme\HP\HP Photosmart 5510 series\Bin\ScanToPCActivationApp.exe
(Hewlett-Packard Co.) C:\Programme\HP\HP Officejet 6700\Bin\ScanToPCActivationApp.exe
(Dropbox, Inc.) C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Anwendungsdaten\Dropbox\bin\Dropbox.exe
(Agere Systems) C:\WINDOWS\system32\agrsmsvc.exe
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Programme\Bonjour\mDNSResponder.exe
(Cisco Systems, Inc.) C:\Programme\Cisco Systems\VPN Client\cvpnd.exe
(Intel Corporation) C:\Programme\Intel\Intel Matrix Storage Manager\IAANTMon.exe
(Oracle Corporation) C:\Programme\Java\jre7\bin\jqs.exe
(O2Micro International) C:\WINDOWS\system32\o2flash.exe
(SafeNet, Inc.) C:\Programme\Gemeinsame Dateien\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
(SafeNet, Inc) C:\Programme\Gemeinsame Dateien\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
() C:\Program Files\Fujitsu\WirelessSelector\WSUService.exe
() C:\Programme\Verbindungsassistent\wtgservice.exe
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avshadow.exe
(Apple Inc.) C:\Programme\iPod\bin\iPodService.exe
(Microsoft Corporation.) C:\Programme\Microsoft\BingBar\7.2.241.0\SeaPort.exe
(Mozilla Corporation) C:\Programme\Mozilla Firefox\firefox.exe
(Hewlett-Packard Co.) C:\Programme\HP\HP Photosmart 5510 series\Bin\HPNetworkCommunicator.exe
(Hewlett-Packard Co.) C:\Programme\HP\HP Officejet 6700\Bin\HPNetworkCommunicator.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [IAAnotif] - C:\Programme\Intel\Intel Matrix Storage Manager\iaanotif.exe [178712 2008-05-07] (Intel Corporation)
HKLM\...\Run: [RTHDCPL] - C:\Windows\RTHDCPL.EXE [16861184 2008-04-10] (Realtek Semiconductor Corp.)
HKLM\...\Run: [SoundMan] - C:\Windows\SOUNDMAN.EXE [86016 2006-07-21] (Realtek Semiconductor Corp.)
HKLM\...\Run: [AlcWzrd] - C:\Windows\ALCWZRD.EXE [2808832 2006-05-04] (RealTek Semicoductor Corp.)
HKLM\...\Run: [SynTPEnh] - C:\Programme\Synaptics\SynTP\SynTPEnh.exe [1040384 2008-04-10] (Synaptics, Inc.)
HKLM\...\Run: [PSUtility] - C:\Addon\Fujitsu\PSUtility\TrayManager.exe [118784 2008-04-17] (FUJITSU LIMITED)
HKLM\...\Run: [TvOutSwitch] - C:\Addon\Fujitsu\DispSwitch\DispSwitchLauncher.exe [102400 2008-04-02] (FUJITSU LIMITED)
HKLM\...\Run: [LoadFUJ02E3] - C:\Programme\Fujitsu\FUJ02E3\FUJ02E3.exe [88616 2008-01-31] (FUJITSU LIMITED)
HKLM\...\Run: [IndicatorUtility] - C:\Programme\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe [90112 2006-04-20] (FUJITSU LIMITED)
HKLM\...\Run: [LoadFujitsuQuickTouch] - C:\AddOn\Fujitsu\Application Panel\QuickTouch.exe [353792 2005-07-21] (FUJITSU LIMITED)
HKLM\...\Run: [LoadBtnHnd] - C:\Programme\Fujitsu\BtnHnd\BtnHnd.exe [61440 2005-07-21] (FUJITSU LIMITED)
HKLM\...\Run: [APSDaemon] - C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM\...\Run: [PAC7302_Monitor] - C:\WINDOWS\PixArt\PAC7302\Monitor.exe [319488 2006-11-03] (PixArt Imaging Incorporation)
HKLM\...\Run: [AppleSyncNotifier] - C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2012-02-23] (Apple Inc.)
HKLM\...\Run: [HotKeysCmds] - C:\WINDOWS\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [Adobe ARM] - C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM\...\Run: [QuickTime Task] - C:\Programme\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM\...\Run: [iTunesHelper] - C:\Programme\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)
HKLM\...\Run: [avgnt] - C:\Programme\Avira\AntiVir Desktop\avgnt.exe [681032 2013-10-07] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\PSUTY: C:\Windows\system32\PSUWNP.dll (FUJITSU LIMITED)
HKCU\...\Run: [HP Photosmart 5510 series (NET)] - C:\Programme\HP\HP Photosmart 5510 series\Bin\ScanToPCActivationApp.exe [1801064 2011-05-25] (Hewlett-Packard Co.)
HKCU\...\Run: [HP Officejet 6700 (NET)] - C:\Programme\HP\HP Officejet 6700\Bin\ScanToPCActivationApp.exe [1804648 2011-09-09] (Hewlett-Packard Co.)
Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\VPN Client.lnk
ShortcutTarget: VPN Client.lnk -> C:\WINDOWS\Installer\{B0BF7057-6869-4E4B-920C-EA2A58DA07F0}\Icon3E5562ED7.ico ()
Startup: C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Startmenü\Programme\Autostart\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Anwendungsdaten\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Programme\Ask.com\GenericAskToolbar.dll No File
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {10F80C91-D3A3-410D-B731-9D5BE5718819} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=crm&q={searchTerms}&locale=de_DE&apn_ptnrs=^U3&apn_dtid=^OSJ000^YY^DE&apn_uid=CC93A1F5-B653-43E4-9B15-9DEB1FC381DE&apn_sauid=1629AC23-AFBC-4761-8139-766F7F340CE9
BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Programme\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Programme\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO: Bing Bar Helper - {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} - C:\Programme\Microsoft\BingBar\7.2.241.0\BingExt.dll (Microsoft Corporation.)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Programme\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Programme\Microsoft\BingBar\7.2.241.0\BingExt.dll (Microsoft Corporation.)
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1248270700551
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1248337956218
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_34-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0034-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_34-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_34-windows-i586.cab
Handler: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\SYSTEM\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation)
Handler: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\SYSTEM\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation)
Handler: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\SYSTEM\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation)
Handler: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\SYSTEM\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation)
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\SYSTEM\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation)
Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
Handler: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\SYSTEM\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation)
Handler: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\SYSTEM\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Winsock: Catalog5 04 C:\Programme\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Winsock: Catalog9 01 C:\Programme\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 C:\Programme\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 30 C:\Programme\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Tcpip\Parameters: [DhcpNameServer] 195.175.39.39 195.175.39.40

FireFox:
========
FF ProfilePath: C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Anwendungsdaten\Mozilla\Firefox\Profiles\6e0djjpc.default
FF SearchEngineOrder.1: Ask.com Search
FF SelectedSearchEngine: Google
FF Homepage: google.de
FF Keyword.URL: user_pref("keyword.URL", "");
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\WINDOWS\system32\Adobe\Director\np32dsw_1167637.dll (Adobe Systems, Inc.)
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Programme\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @mcafee.com/McAfeeMssPlugin - C:\Programme\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Programme\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Programme\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.6 - C:\Programme\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Programme\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Microsoft .NET Framework Assistant - C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Anwendungsdaten\Mozilla\Firefox\Profiles\6e0djjpc.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF Extension: Java Console - C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBA}
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Programme\HP\Digital Imaging\Smart Web Printing\MozillaAddOn2
FF Extension: HP Smart Web Printing - C:\Programme\HP\Digital Imaging\Smart Web Printing\MozillaAddOn2
FF HKLM\...\Firefox\Extensions: [fe_5.0@nokia.com] - C:\Programme\Nokia\Nokia Suite\Connectors\Bookmarks Connector\FirefoxExtension_5.0
FF Extension: Firefox Synchronisation Extension - C:\Programme\Nokia\Nokia Suite\Connectors\Bookmarks Connector\FirefoxExtension_5.0
FF HKLM\...\Thunderbird\Extensions: [te_3.1@nokia.com] - C:\Programme\Nokia\Nokia Suite\Connectors\Thunderbird Connector\ThunderbirdExtension_3.1
FF Extension: Thunderbird Address Book Synchronisation Extension - C:\Programme\Nokia\Nokia Suite\Connectors\Thunderbird Connector\ThunderbirdExtension_3.1
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Programme\HP\Digital Imaging\Smart Web Printing\MozillaAddOn2
FF Extension: HP Smart Web Printing - C:\Programme\HP\Digital Imaging\Smart Web Printing\MozillaAddOn2

========================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Programme\Avira\AntiVir Desktop\sched.exe [440392 2013-10-07] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Programme\Avira\AntiVir Desktop\avguard.exe [440392 2013-10-07] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Programme\Avira\AntiVir Desktop\AVWEBGRD.EXE [1164360 2013-10-07] (Avira Operations GmbH & Co. KG)
R2 Apple Mobile Device; C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe [57008 2012-12-21] (Apple Inc.)
S2 BBSvc; C:\Programme\Microsoft\BingBar\7.2.241.0\BBSvc.exe [193696 2013-07-23] (Microsoft Corporation.)
R3 BBUpdate; C:\Programme\Microsoft\BingBar\7.2.241.0\SeaPort.exe [240288 2013-07-23] (Microsoft Corporation.)
R2 Bonjour Service; C:\Programme\Bonjour\mDNSResponder.exe [390504 2011-08-30] (Apple Inc.)
R2 CVPND; C:\Programme\Cisco Systems\VPN Client\cvpnd.exe [1528616 2010-03-23] (Cisco Systems, Inc.)
R2 IAANTMON; C:\Programme\Intel\Intel Matrix Storage Manager\IAANTMon.exe [354840 2008-05-07] (Intel Corporation)
R3 iPod Service; C:\Programme\iPod\bin\iPodService.exe [553288 2013-05-31] (Apple Inc.)
S3 McComponentHostService; C:\Programme\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)
S3 MozillaMaintenance; C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe [118680 2013-10-04] (Mozilla Foundation)
S3 odserv; C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE [440696 2011-07-20] (Microsoft Corporation)
S3 ose; C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE [145184 2006-10-26] (Microsoft Corporation)
R2 SentinelKeysServer; C:\Programme\Gemeinsame Dateien\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe [316992 2007-04-27] (SafeNet, Inc.)
R2 SentinelProtectionServer; C:\Programme\Gemeinsame Dateien\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe [206400 2007-04-27] (SafeNet, Inc)
S3 ServiceLayer; C:\Programme\PC Connectivity Solution\ServiceLayer.exe [718888 2012-01-04] (Nokia)
S2 SkypeUpdate; C:\Programme\Skype\Updater\Updater.exe [161536 2013-01-08] (Skype Technologies)
R2 WirelessSelectorService; C:\Program Files\Fujitsu\WirelessSelector\WSUService.exe [62760 2008-10-08] ()
S3 WMPNetworkSvc; C:\Programme\Windows Media Player\WMPNetwk.exe [920576 2006-11-03] (Microsoft Corporation)
R2 WTGService; C:\Programme\Verbindungsassistent\wtgservice.exe [330696 2011-02-04] ()
R2 JavaQuickStarterService; "C:\Programme\Java\jre7\bin\jqs.exe" -service -config "C:\Programme\Java\jre7\lib\deploy\jqs\jqs.conf"

==================== Drivers (Whitelisted) ====================

R3 actser; C:\Windows\System32\drivers\actser.sys [29440 2004-12-16] (Siemens AG)
R1 AFS2K; C:\Windows\System32\Drivers\AFS2K.sys [82380 2012-08-20] (Oak Technology Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [89376 2013-10-07] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [137208 2013-10-07] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-10-07] (Avira Operations GmbH & Co. KG)
R2 BtnHnd; C:\Programme\Fujitsu\BtnHnd\BtnHnd.sys [21120 2005-07-21] (FUJITSU LIMITED)
S3 CVirtA; C:\Windows\System32\DRIVERS\CVirtA.sys [5275 2007-01-18] (Cisco Systems, Inc.)
R2 CVPNDRVA; C:\WINDOWS\system32\Drivers\CVPNDRVA.sys [308859 2010-03-23] (Cisco Systems, Inc.)
R3 DNE; C:\Windows\System32\DRIVERS\dne2000.sys [131984 2008-11-16] (Deterministic Networks, Inc.)
S3 FETNDIS; C:\Windows\System32\DRIVERS\fetnd5.sys [27165 2001-08-17] (VIA Technologies, Inc.              )
R3 FUJ02B1; C:\Windows\System32\DRIVERS\FUJ02B1.sys [5248 2001-08-01] (FUJITSU LIMITED)
S3 HPZid412; C:\Windows\System32\DRIVERS\HPZid412.sys [49920 2008-04-16] (HP)
S3 HPZipr12; C:\Windows\System32\DRIVERS\HPZipr12.sys [16496 2008-04-16] (HP)
S3 HPZius12; C:\Windows\System32\DRIVERS\HPZius12.sys [21568 2008-04-16] (HP)
S3 NdisIP; C:\Windows\System32\DRIVERS\NdisIP.sys [10880 2008-04-14] (Microsoft Corporation)
R3 NETw5x32; C:\Windows\System32\DRIVERS\NETw5x32.sys [3636864 2008-11-16] (Intel Corporation)
S3 PAC7302; C:\Windows\System32\DRIVERS\PAC7302.SYS [458752 2007-11-08] (PixArt Imaging Inc.)
S3 S3SavageNB; C:\Windows\System32\DRIVERS\s3gnbm.sys [166912 2008-04-13] (S3 Graphics, Inc.)
S3 SNTNLUSB; C:\Windows\System32\DRIVERS\SNTNLUSB.SYS [35328 2007-04-27] (SafeNet, Inc.)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-10-04] (Avira GmbH)
S3 vsbus; C:\Windows\System32\DRIVERS\vsb.sys [15264 2005-07-18] ()
S3 vsdatant; C:\WINDOWS\system32\vsdatant.sys [394952 2007-11-14] (Zone Labs, LLC)
S3 vserial; C:\Windows\System32\DRIVERS\vserial.sys [47744 2005-07-18] ()
R3 yukonwxp; C:\Windows\System32\DRIVERS\yk51x86.sys [285952 2008-04-14] (Marvell)
S3 catchme; \??\C:\DOKUME~1\LSY~1.40K\LOKALE~1\Temp\catchme.sys [x]
S3 siusbmod; system32\DRIVERS\siusbmod.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-10 21:22 - 2013-10-10 21:22 - 00126686 _____ C:\WINDOWS\KB2862335.log
2013-10-10 21:22 - 2013-10-10 21:22 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862335$
2013-10-10 21:22 - 2013-10-10 21:22 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2847311$
2013-10-10 21:14 - 2013-10-10 21:14 - 00013621 _____ C:\WINDOWS\KB2868038.log
2013-10-10 21:14 - 2013-10-10 21:14 - 00011351 _____ C:\WINDOWS\KB2884256.log
2013-10-10 21:14 - 2013-10-10 21:14 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2884256$
2013-10-10 21:14 - 2013-10-10 21:14 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2868038$
2013-10-10 21:13 - 2013-10-10 21:13 - 00013510 _____ C:\WINDOWS\KB2879017-IE8.log
2013-10-10 21:13 - 2013-10-10 21:13 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2883150$
2013-10-10 21:13 - 2013-10-10 21:13 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862330$
2013-10-09 19:25 - 2013-07-03 02:12 - 00025088 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hidparse.sys
2013-10-09 19:24 - 2013-10-10 21:22 - 00132830 _____ C:\WINDOWS\KB2847311.log
2013-10-09 19:24 - 2013-08-09 00:55 - 00144128 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbport.sys
2013-10-09 19:24 - 2013-08-09 00:55 - 00005376 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbd.sys
2013-10-09 19:24 - 2013-07-17 00:58 - 00123008 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbvideo.sys
2013-10-09 19:24 - 2013-07-17 00:58 - 00046848 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\irbus.sys
2013-10-09 19:24 - 2009-03-18 11:02 - 00030336 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbehci.sys
2013-10-08 21:15 - 2013-10-08 21:15 - 00000000 ____D C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Anwendungsdaten\World-LooM
2013-10-08 21:10 - 2013-10-08 21:10 - 00001554 _____ C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Game Manager.lnk
2013-10-08 21:10 - 2013-10-08 21:10 - 00001548 _____ C:\Dokumente und Einstellungen\All Users\Desktop\Game Manager.lnk
2013-10-08 21:10 - 2013-10-08 21:10 - 00000000 ____D C:\Programme\bfgclient
2013-10-04 18:20 - 2013-10-04 18:20 - 00000000 ____D C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Anwendungsdaten\Avira
2013-10-04 18:14 - 2013-10-07 15:55 - 00137208 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys
2013-10-04 18:14 - 2013-10-07 15:55 - 00089376 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys
2013-10-04 18:14 - 2013-10-07 15:55 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avkmgr.sys
2013-10-04 18:14 - 2013-10-04 18:14 - 00001677 _____ C:\Dokumente und Einstellungen\All Users\Desktop\Avira Control Center.lnk
2013-10-04 18:14 - 2013-10-04 18:14 - 00000000 ____D C:\Programme\Avira
2013-10-04 18:14 - 2013-10-04 18:14 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Avira
2013-10-04 18:14 - 2013-10-04 18:14 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira
2013-10-04 18:14 - 2013-10-04 18:13 - 00028520 _____ (Avira GmbH) C:\WINDOWS\system32\Drivers\ssmdrv.sys
2013-10-04 16:31 - 2013-10-04 16:31 - 00000000 ____D C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Anwendungsdaten\Malwarebytes
2013-10-04 16:31 - 2013-10-04 16:31 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes
2013-10-04 16:26 - 2013-10-04 16:43 - 00000000 ____D C:\Programme\Mozilla Firefox
2013-10-03 00:23 - 2013-10-03 00:23 - 00000000 ____D C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Lokale Einstellungen\Anwendungsdaten\Downloaded Installations
2013-10-01 16:34 - 2013-10-01 16:36 - 00000000 ____D C:\AdwCleaner
2013-10-01 16:32 - 2013-10-01 16:32 - 01045226 _____ C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Desktop\adwcleaner.exe
2013-09-30 18:31 - 2013-09-30 18:31 - 00019050 _____ C:\ComboFix.txt
2013-09-30 18:26 - 2013-09-30 18:26 - 00000000 _RSHD C:\cmdcons
2013-09-30 18:26 - 2013-03-17 21:50 - 00000211 _____ C:\Boot.bak
2013-09-30 18:26 - 2004-08-03 23:00 - 00262448 __RSH C:\cmldr
2013-09-30 18:25 - 2011-06-26 06:45 - 00256000 _____ C:\WINDOWS\PEV.exe
2013-09-30 18:25 - 2010-11-07 17:20 - 00208896 _____ C:\WINDOWS\MBR.exe
2013-09-30 18:25 - 2009-04-20 04:56 - 00060416 _____ (NirSoft) C:\WINDOWS\NIRCMD.exe
2013-09-30 18:25 - 2000-08-31 00:00 - 00518144 _____ (SteelWerX) C:\WINDOWS\SWREG.exe
2013-09-30 18:25 - 2000-08-31 00:00 - 00406528 _____ (SteelWerX) C:\WINDOWS\SWSC.exe
2013-09-30 18:25 - 2000-08-31 00:00 - 00212480 _____ (SteelWerX) C:\WINDOWS\SWXCACLS.exe
2013-09-30 18:25 - 2000-08-31 00:00 - 00098816 _____ C:\WINDOWS\sed.exe
2013-09-30 18:25 - 2000-08-31 00:00 - 00080412 _____ C:\WINDOWS\grep.exe
2013-09-30 18:25 - 2000-08-31 00:00 - 00068096 _____ C:\WINDOWS\zip.exe
2013-09-30 18:21 - 2013-09-30 18:31 - 00000000 ____D C:\Qoobox
2013-09-30 18:21 - 2013-09-30 18:30 - 00000000 ____D C:\WINDOWS\erdnt
2013-09-30 18:21 - 2013-09-30 18:21 - 00000000 ___RD C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Startmenü\Programme\Verwaltung
2013-09-30 18:19 - 2013-09-30 18:20 - 05131234 ____R (Swearware) C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Desktop\ComboFix.exe
2013-09-30 13:04 - 2013-09-30 13:04 - 02237968 _____ (Kaspersky Lab ZAO) C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Desktop\tdsskiller.exe
2013-09-30 13:02 - 2013-09-30 13:02 - 00000484 _____ C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Desktop\EMSI.zip
2013-09-30 13:00 - 2013-09-30 13:00 - 00000583 _____ C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Desktop\MBRMastr_2013.09.30_13.00.34.txt
2013-09-30 13:00 - 2013-09-30 13:00 - 00000512 _____ C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Desktop\EMSI.mbr
2013-09-30 12:58 - 2013-09-30 12:58 - 00788728 _____ (Emsisoft GmbH) C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Desktop\mbrmastr.exe
2013-09-29 17:19 - 2013-09-29 17:19 - 00090112 _____ C:\WINDOWS\Minidump\Mini092913-01.dmp
2013-09-27 17:47 - 2013-09-27 17:47 - 00008408 _____ C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Desktop\gmer.txt.log
2013-09-27 17:29 - 2013-09-27 17:29 - 00036927 _____ C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Desktop\Addition.txt
2013-09-27 17:28 - 2013-10-01 16:42 - 00000000 ____D C:\FRST
2013-09-27 17:27 - 2013-09-27 17:27 - 01086861 _____ (Farbar) C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Desktop\FRST.exe
2013-09-27 17:21 - 2013-09-27 17:21 - 00000468 _____ C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Desktop\defogger_disable.log
2013-09-27 17:21 - 2013-09-27 17:21 - 00000000 _____ C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\defogger_reenable
2013-09-26 21:36 - 2013-09-26 21:36 - 98009570 _____ C:\WINDOWS\system32\姐ᎅ囜6
2013-09-26 19:31 - 2013-09-30 12:46 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Anvisoft
2013-09-26 18:56 - 2013-09-30 12:46 - 00000000 ____D C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Anwendungsdaten\Anvisoft
2013-09-26 18:56 - 2013-09-26 19:31 - 00000000 ____D C:\Programme\Anvisoft
2013-09-26 18:56 - 2013-09-26 18:56 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Anvisoft
2013-09-26 18:54 - 2013-09-26 18:54 - 00000000 ____D C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Lokale Einstellungen\Anwendungsdaten\Google
2013-09-26 18:52 - 2013-09-26 18:52 - 00000000 ____D C:\WINDOWS\CSC
2013-09-23 20:38 - 2013-09-23 20:38 - 98685961 _____ C:\WINDOWS\system32\讉뉲囜6
2013-09-20 17:16 - 2013-09-20 17:16 - 98481651 _____ C:\WINDOWS\system32\挔囜6

==================== One Month Modified Files and Folders =======

2013-10-18 20:40 - 2012-08-20 19:43 - 00000440 _____ C:\WINDOWS\Tasks\At2.job
2013-10-18 20:40 - 2012-04-17 05:19 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2013-10-18 20:07 - 2012-11-23 15:35 - 00000000 ____D C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Anwendungsdaten\Dropbox
2013-10-18 19:43 - 2012-08-20 19:43 - 00000440 _____ C:\WINDOWS\Tasks\At3.job
2013-10-18 10:50 - 2009-05-20 04:43 - 01841002 _____ C:\WINDOWS\WindowsUpdate.log
2013-10-16 14:00 - 2012-08-20 19:43 - 00000440 _____ C:\WINDOWS\Tasks\At4.job
2013-10-15 18:31 - 2011-03-01 17:22 - 00000000 ____D C:\WINDOWS\system32\NtmsData
2013-10-15 18:04 - 2009-05-20 15:32 - 00000000 ____D C:\WINDOWS\Registration
2013-10-15 17:26 - 2009-10-07 15:38 - 00000000 ____D C:\Programme\Mozilla Thunderbird
2013-10-14 20:22 - 2009-05-20 15:32 - 00000000 ____D C:\WINDOWS\Microsoft.NET
2013-10-13 20:55 - 2012-11-23 15:37 - 00000000 ___RD C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Eigene Dateien\Dropbox
2013-10-13 20:55 - 2009-05-20 04:27 - 00001158 _____ C:\WINDOWS\system32\wpa.dbl
2013-10-13 20:53 - 2009-05-20 05:38 - 00000159 _____ C:\WINDOWS\wiadebug.log
2013-10-13 20:53 - 2009-05-20 05:38 - 00000050 _____ C:\WINDOWS\wiaservc.log
2013-10-13 20:52 - 2009-05-20 04:50 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-10-13 18:29 - 2011-04-15 12:22 - 00923384 _____ C:\WINDOWS\setupapi.log
2013-10-13 18:29 - 2009-10-06 20:04 - 00000190 ___SH C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\ntuser.ini
2013-10-13 18:29 - 2009-10-06 20:04 - 00000000 ____D C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D
2013-10-13 18:29 - 2009-05-20 04:50 - 00032634 _____ C:\WINDOWS\SchedLgU.Txt
2013-10-13 17:06 - 2012-07-13 19:52 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Games
2013-10-13 17:06 - 2009-05-20 15:22 - 00000000 ___RD C:\Programme
2013-10-13 17:06 - 2009-05-20 15:21 - 00000000 ___RD C:\Dokumente und Einstellungen\All Users\Startmenü\Programme
2013-10-12 21:41 - 2012-04-17 05:19 - 00692616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2013-10-12 21:41 - 2011-05-30 16:19 - 00071048 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2013-10-11 22:11 - 2012-01-20 22:02 - 00000664 _____ C:\WINDOWS\system32\d3d9caps.dat
2013-10-11 18:48 - 2009-05-20 05:34 - 00268600 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-10-11 18:47 - 2009-07-23 09:08 - 00000000 ____D C:\Programme\Microsoft Silverlight
2013-10-10 21:24 - 2009-05-20 15:21 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft Help
2013-10-10 21:24 - 2009-05-20 05:35 - 01140078 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-10-10 21:22 - 2013-10-10 21:22 - 00126686 _____ C:\WINDOWS\KB2862335.log
2013-10-10 21:22 - 2013-10-10 21:22 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862335$
2013-10-10 21:22 - 2013-10-10 21:22 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2847311$
2013-10-10 21:22 - 2013-10-09 19:24 - 00132830 _____ C:\WINDOWS\KB2847311.log
2013-10-10 21:22 - 2009-07-22 14:12 - 00143626 _____ C:\WINDOWS\updspapi.log
2013-10-10 21:22 - 2009-05-20 05:35 - 01903585 _____ C:\WINDOWS\FaxSetup.log
2013-10-10 21:22 - 2009-05-20 05:35 - 00919308 _____ C:\WINDOWS\ocgen.log
2013-10-10 21:22 - 2009-05-20 05:35 - 00885549 _____ C:\WINDOWS\tsoc.log
2013-10-10 21:22 - 2009-05-20 05:35 - 00645880 _____ C:\WINDOWS\comsetup.log
2013-10-10 21:22 - 2009-05-20 05:35 - 00590920 _____ C:\WINDOWS\msmqinst.log
2013-10-10 21:22 - 2009-05-20 05:35 - 00389021 _____ C:\WINDOWS\ntdtcsetup.log
2013-10-10 21:22 - 2009-05-20 05:35 - 00334188 _____ C:\WINDOWS\netfxocm.log
2013-10-10 21:22 - 2009-05-20 05:35 - 00131548 _____ C:\WINDOWS\MedCtrOC.log
2013-10-10 21:22 - 2009-05-20 05:35 - 00105537 _____ C:\WINDOWS\ocmsn.log
2013-10-10 21:22 - 2009-05-20 05:35 - 00101077 _____ C:\WINDOWS\iis6.log
2013-10-10 21:22 - 2009-05-20 05:35 - 00096460 _____ C:\WINDOWS\tabletoc.log
2013-10-10 21:22 - 2009-05-20 05:35 - 00095425 _____ C:\WINDOWS\msgsocm.log
2013-10-10 21:22 - 2009-05-20 05:35 - 00001393 _____ C:\WINDOWS\imsins.log
2013-10-10 21:22 - 2009-05-20 05:35 - 00001393 _____ C:\WINDOWS\imsins.BAK
2013-10-10 21:21 - 2013-07-12 13:37 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-10-10 21:15 - 2010-06-04 15:47 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Microsoft Silverlight
2013-10-10 21:15 - 2009-07-22 14:16 - 78106760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-10-10 21:14 - 2013-10-10 21:14 - 00013621 _____ C:\WINDOWS\KB2868038.log
2013-10-10 21:14 - 2013-10-10 21:14 - 00011351 _____ C:\WINDOWS\KB2884256.log
2013-10-10 21:14 - 2013-10-10 21:14 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2884256$
2013-10-10 21:14 - 2013-10-10 21:14 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2868038$
2013-10-10 21:13 - 2013-10-10 21:13 - 00013510 _____ C:\WINDOWS\KB2879017-IE8.log
2013-10-10 21:13 - 2013-10-10 21:13 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2883150$
2013-10-10 21:13 - 2013-10-10 21:13 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862330$
2013-10-10 21:13 - 2009-07-22 14:16 - 00000000 ____D C:\WINDOWS\ie8updates
2013-10-08 21:15 - 2013-10-08 21:15 - 00000000 ____D C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Anwendungsdaten\World-LooM
2013-10-08 21:15 - 2012-07-13 19:51 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\BigFishGamesCache
2013-10-08 21:10 - 2013-10-08 21:10 - 00001554 _____ C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Game Manager.lnk
2013-10-08 21:10 - 2013-10-08 21:10 - 00001548 _____ C:\Dokumente und Einstellungen\All Users\Desktop\Game Manager.lnk
2013-10-08 21:10 - 2013-10-08 21:10 - 00000000 ____D C:\Programme\bfgclient
2013-10-08 19:48 - 2013-01-15 19:23 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Purplehills
2013-10-08 19:48 - 2013-01-15 19:22 - 00000000 ____D C:\Programme\Purplehills
2013-10-07 15:55 - 2013-10-04 18:14 - 00137208 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys
2013-10-07 15:55 - 2013-10-04 18:14 - 00089376 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys
2013-10-07 15:55 - 2013-10-04 18:14 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avkmgr.sys
2013-10-04 18:20 - 2013-10-04 18:20 - 00000000 ____D C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Anwendungsdaten\Avira
2013-10-04 18:14 - 2013-10-04 18:14 - 00001677 _____ C:\Dokumente und Einstellungen\All Users\Desktop\Avira Control Center.lnk
2013-10-04 18:14 - 2013-10-04 18:14 - 00000000 ____D C:\Programme\Avira
2013-10-04 18:14 - 2013-10-04 18:14 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Avira
2013-10-04 18:14 - 2013-10-04 18:14 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira
2013-10-04 18:13 - 2013-10-04 18:14 - 00028520 _____ (Avira GmbH) C:\WINDOWS\system32\Drivers\ssmdrv.sys
2013-10-04 17:04 - 2012-05-05 00:54 - 00000000 ____D C:\Programme\Mozilla Maintenance Service
2013-10-04 16:43 - 2013-10-04 16:26 - 00000000 ____D C:\Programme\Mozilla Firefox
2013-10-04 16:40 - 2012-08-20 22:20 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2723135$
2013-10-04 16:31 - 2013-10-04 16:31 - 00000000 ____D C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Anwendungsdaten\Malwarebytes
2013-10-04 16:31 - 2013-10-04 16:31 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes
2013-10-03 00:24 - 2013-01-24 21:20 - 00000000 ____D C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Anwendungsdaten\HdO Adventure
2013-10-03 00:23 - 2013-10-03 00:23 - 00000000 ____D C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Lokale Einstellungen\Anwendungsdaten\Downloaded Installations
2013-10-01 16:45 - 2009-05-20 15:21 - 00000000 __SHD C:\Dokumente und Einstellungen\LocalService
2013-10-01 16:42 - 2013-09-27 17:28 - 00000000 ____D C:\FRST
2013-10-01 16:36 - 2013-10-01 16:34 - 00000000 ____D C:\AdwCleaner
2013-10-01 16:35 - 2009-10-06 20:04 - 00000000 ___RD C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Startmenü\Programme
2013-10-01 16:32 - 2013-10-01 16:32 - 01045226 _____ C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Desktop\adwcleaner.exe
2013-09-30 18:31 - 2013-09-30 18:31 - 00019050 _____ C:\ComboFix.txt
2013-09-30 18:31 - 2013-09-30 18:21 - 00000000 ____D C:\Qoobox
2013-09-30 18:30 - 2013-09-30 18:21 - 00000000 ____D C:\WINDOWS\erdnt
2013-09-30 18:30 - 2009-05-20 04:27 - 00000227 _____ C:\WINDOWS\system.ini
2013-09-30 18:26 - 2013-09-30 18:26 - 00000000 _RSHD C:\cmdcons
2013-09-30 18:26 - 2009-05-20 04:27 - 00000327 __RSH C:\boot.ini
2013-09-30 18:21 - 2013-09-30 18:21 - 00000000 ___RD C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Startmenü\Programme\Verwaltung
2013-09-30 18:20 - 2013-09-30 18:19 - 05131234 ____R (Swearware) C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Desktop\ComboFix.exe
2013-09-30 13:28 - 2009-10-06 20:04 - 00000152 _____ C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
2013-09-30 13:28 - 2009-10-06 20:04 - 00000000 ___RD C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Startmenü\Programme\Autostart
2013-09-30 13:04 - 2013-09-30 13:04 - 02237968 _____ (Kaspersky Lab ZAO) C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Desktop\tdsskiller.exe
2013-09-30 13:02 - 2013-09-30 13:02 - 00000484 _____ C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Desktop\EMSI.zip
2013-09-30 13:00 - 2013-09-30 13:00 - 00000583 _____ C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Desktop\MBRMastr_2013.09.30_13.00.34.txt
2013-09-30 13:00 - 2013-09-30 13:00 - 00000512 _____ C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Desktop\EMSI.mbr
2013-09-30 12:58 - 2013-09-30 12:58 - 00788728 _____ (Emsisoft GmbH) C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Desktop\mbrmastr.exe
2013-09-30 12:46 - 2013-09-26 19:31 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Anvisoft
2013-09-30 12:46 - 2013-09-26 18:56 - 00000000 ____D C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Anwendungsdaten\Anvisoft
2013-09-29 17:36 - 2013-01-30 18:04 - 00000000 ____D C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Desktop\Pläne2013
2013-09-29 17:19 - 2013-09-29 17:19 - 00090112 _____ C:\WINDOWS\Minidump\Mini092913-01.dmp
2013-09-29 17:19 - 2010-11-26 16:54 - 00000000 ____D C:\WINDOWS\Minidump
2013-09-27 17:47 - 2013-09-27 17:47 - 00008408 _____ C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Desktop\gmer.txt.log
2013-09-27 17:29 - 2013-09-27 17:29 - 00036927 _____ C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Desktop\Addition.txt
2013-09-27 17:27 - 2013-09-27 17:27 - 01086861 _____ (Farbar) C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Desktop\FRST.exe
2013-09-27 17:21 - 2013-09-27 17:21 - 00000468 _____ C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Desktop\defogger_disable.log
2013-09-27 17:21 - 2013-09-27 17:21 - 00000000 _____ C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\defogger_reenable
2013-09-26 21:37 - 2009-05-20 15:35 - 00000000 ____D C:\WINDOWS\system32\Restore
2013-09-26 21:36 - 2013-09-26 21:36 - 98009570 _____ C:\WINDOWS\system32\姐ᎅ囜6
2013-09-26 19:31 - 2013-09-26 18:56 - 00000000 ____D C:\Programme\Anvisoft
2013-09-26 18:56 - 2013-09-26 18:56 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Anvisoft
2013-09-26 18:54 - 2013-09-26 18:54 - 00000000 ____D C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Lokale Einstellungen\Anwendungsdaten\Google
2013-09-26 18:52 - 2013-09-26 18:52 - 00000000 ____D C:\WINDOWS\CSC
2013-09-23 23:36 - 2009-05-20 04:26 - 00174592 ____N (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2013-09-23 23:36 - 2009-05-20 04:26 - 00174592 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ie4uinit.exe
2013-09-23 20:38 - 2013-09-23 20:38 - 98685961 _____ C:\WINDOWS\system32\讉뉲囜6
2013-09-23 18:23 - 2012-06-14 20:27 - 00522240 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\jsdbgui.dll
2013-09-23 18:23 - 2010-06-11 17:23 - 00743424 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iedvtool.dll
2013-09-23 18:23 - 2009-07-30 11:43 - 00630272 _____ (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msfeeds.dll
2013-09-23 18:23 - 2009-07-30 11:43 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msfeedsbs.dll
2013-09-23 18:23 - 2009-07-22 14:16 - 11113472 _____ (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ieframe.dll
2013-09-23 18:23 - 2009-07-22 14:16 - 02006016 _____ (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iertutil.dll
2013-09-23 18:23 - 2009-07-22 14:16 - 00247808 _____ (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ieproxy.dll
2013-09-23 18:23 - 2009-07-22 14:16 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\dllcache\xpshims.dll
2013-09-23 18:23 - 2009-05-20 04:42 - 00759296 _____ (Microsoft Corporation) C:\WINDOWS\system32\dllcache\vgx.dll
2013-09-23 18:23 - 2009-05-20 04:27 - 01215488 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\urlmon.dll
2013-09-23 18:23 - 2009-05-20 04:27 - 01215488 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2013-09-23 18:23 - 2009-05-20 04:27 - 00920064 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wininet.dll
2013-09-23 18:23 - 2009-05-20 04:27 - 00920064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2013-09-23 18:23 - 2009-05-20 04:27 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\url.dll
2013-09-23 18:23 - 2009-05-20 04:27 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\dllcache\url.dll
2013-09-23 18:23 - 2009-05-20 04:26 - 06017536 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mshtml.dll
2013-09-23 18:23 - 2009-05-20 04:26 - 06017536 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-09-23 18:23 - 2009-05-20 04:26 - 01469440 ____N (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2013-09-23 18:23 - 2009-05-20 04:26 - 01469440 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\inetcpl.cpl
2013-09-23 18:23 - 2009-05-20 04:26 - 00611840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstime.dll
2013-09-23 18:23 - 2009-05-20 04:26 - 00611840 _____ (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mstime.dll
2013-09-23 18:23 - 2009-05-20 04:26 - 00387584 ____N (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2013-09-23 18:23 - 2009-05-20 04:26 - 00387584 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iedkcs32.dll
2013-09-23 18:23 - 2009-05-20 04:26 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\occache.dll
2013-09-23 18:23 - 2009-05-20 04:26 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dllcache\occache.dll
2013-09-23 18:23 - 2009-05-20 04:26 - 00184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2013-09-23 18:23 - 2009-05-20 04:26 - 00184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iepeers.dll
2013-09-23 18:23 - 2009-05-20 04:26 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2013-09-23 18:23 - 2009-05-20 04:26 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mshtmled.dll
2013-09-23 18:23 - 2009-05-20 04:26 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\licmgr10.dll
2013-09-23 18:23 - 2009-05-20 04:26 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\dllcache\licmgr10.dll
2013-09-23 18:23 - 2009-05-20 04:26 - 00025600 ____N (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2013-09-23 18:23 - 2009-05-20 04:26 - 00025600 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\jsproxy.dll
2013-09-23 18:23 - 2009-05-20 04:26 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\dllcache\corpol.dll
2013-09-23 18:23 - 2009-05-20 04:26 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\corpol.dll
2013-09-23 18:23 - 2009-03-08 02:39 - 11113472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-09-23 18:23 - 2009-03-08 02:32 - 02006016 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-09-23 18:23 - 2009-03-08 02:32 - 00630272 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2013-09-23 18:23 - 2009-03-08 02:31 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedsbs.dll
2013-09-23 18:06 - 2009-05-20 04:26 - 00385024 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec
2013-09-20 17:16 - 2013-09-20 17:16 - 98481651 _____ C:\WINDOWS\system32\挔囜6

Files to move or delete:
====================
C:\Windows\Tasks\At1.job
C:\Windows\Tasks\At2.job
C:\Windows\Tasks\At3.job
C:\Windows\Tasks\At4.job


Some content of TEMP:
====================
C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Lokale Einstellungen\temp\avgnt.exe
C:\Dokumente und Einstellungen\lsy.40K1OFMHHXM8M4D\Lokale Einstellungen\temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe
[2009-05-20 04:26] - [2008-04-14 12:00] - 1036800 ____A (Microsoft Corporation) 418045a93cd87a352098ab7dabe1b53e 

C:\Windows\System32\winlogon.exe
[2009-05-20 04:27] - [2008-04-14 12:00] - 0513024 ____A (Microsoft Corporation) f09a527b422e25c478e38caa0e44417a 

C:\Windows\System32\svchost.exe
[2009-05-20 04:27] - [2008-04-14 12:00] - 0014336 ____A (Microsoft Corporation) 4fbc75b74479c7a6f829e0ca19df3366 

C:\Windows\System32\services.exe
[2009-05-20 04:27] - [2009-02-09 11:21] - 0111104 ____A (Microsoft Corporation) a3edbe9053889fb24ab22492472b39dc 

C:\Windows\System32\User32.dll
[2009-05-20 04:27] - [2008-04-14 12:00] - 0580096 ____A (Microsoft Corporation) b0050cc5340e3a0760dd8b417ff7aebd 

C:\Windows\System32\userinit.exe
[2009-05-20 04:27] - [2008-04-14 12:00] - 0026624 ____A (Microsoft Corporation) 788f95312e26389d596c0fa55834e106 

C:\Windows\System32\Drivers\volsnap.sys
[2009-05-20 04:27] - [2008-04-14 12:00] - 0053760 ____A (Microsoft Corporation) a5a712f4e880874a477af790b5186e1d 


==================== End Of Log ============================