Trojaner-Board - TR/Crypt.ZPACK.Gen8 windows vista

Code:
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 02-03-2014 02

Ran by Admin at 2014-03-02 22:14:57 Run:1

Running from C:\Users\Admin\Desktop

Boot Mode: Normal
 

==============================================
 

Content of fixlist:

*****************

URLSearchHook: ATTENTION ==> Default URLSearchHook is missing.

SearchScopes: HKLM - DefaultScope value is missing.

FF SearchEngineOrder.1: Ask.com

FF SearchPlugin: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bcrvcnq9.default\searchplugins\ashampoo-de-customized-web-search.xml

CHR DefaultSearchKeyword: mysearchdial.com

CHR DefaultSearchProvider: Mysearchdial

CHR DefaultSearchURL: hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dsites0301&cd=2XzuyEtN2Y1L1QzutDtDtByCyD0EyB0AtA0Bzz0DyEzzyByCtN0D0Tzu0CyBzytCtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=471290989&ir=

CHR DefaultNewTabURL:

Task: {6A4AA521-FB56-49A6-8E3D-F8E4E9231D5F} - System32\Tasks\Digital Sites => C:\Users\Admin\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE 

Task: C:\Windows\Tasks\Digital Sites.job => C:\Users\Admin\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE 

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bcrvcnq9.default\searchplugins\ashampoo-de-customized-web-search.xml

C:\Users\Admin\AppData\Roaming\DIGITA~1 

C:\Users\Admin\AppData\Local\Temp\*.exe

C:\Users\Admin\AppData\Local\Temp\*.dll

*****************
 

Default URLSearchHook was restored successfully .

HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.

Firefox SearchEngineOrder.1 deleted successfully.

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bcrvcnq9.default\searchplugins\ashampoo-de-customized-web-search.xml => Moved successfully.

CHR DefaultSearchKeyword: mysearchdial.com ==> The Chrome "Settings" can be used to fix the entry.

CHR DefaultSearchProvider: Mysearchdial ==> The Chrome "Settings" can be used to fix the entry.

CHR DefaultSearchURL: hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dsites0301&cd=2XzuyEtN2Y1L1QzutDtDtByCyD0EyB0AtA0Bzz0DyEzzyByCtN0D0Tzu0CyBzytCtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=471290989&ir= ==> The Chrome "Settings" can be used to fix the entry.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6A4AA521-FB56-49A6-8E3D-F8E4E9231D5F} => Key deleted successfully.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6A4AA521-FB56-49A6-8E3D-F8E4E9231D5F} => Key deleted successfully.

C:\Windows\System32\Tasks\Digital Sites => Moved successfully.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Digital Sites => Key deleted successfully.

C:\Windows\Tasks\Digital Sites.job => Moved successfully.

"C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bcrvcnq9.default\searchplugins\ashampoo-de-customized-web-search.xml" => File/Directory not found.

"C:\Users\Admin\AppData\Roaming\DIGITA~1" => File/Directory not found.

C:\Users\Admin\AppData\Local\Temp\*.exe => Moved successfully.

C:\Users\Admin\AppData\Local\Temp\*.dll => Moved successfully.
 

==== End of Fixlog ====
bei der aktivierung muss ich es wohl mit dem automatischen telefonsystem versuchen
das muss ich dann morgen versuchen
kann dir gar nicht genug für deine hilfe danken
gute nacht
lg claudia