Hallo,
erstmal ein Kompliment für euere Seite.

Ich habe seit 2 Tagen Claro in meinem Firefox und ich bekomme ihn nicht weg!
Ich habe schon einiges - mit meinen beschränkten Fähigkeiten - ausprobiert aber es hat alles nichts genutzt.

Ich habe Vista auf meinem Rechner mit Windows Service Pack 2.

Ich habe zuerst Firefox deinstalliert und anschließend mir die neuste Version aus dem Netz gezogen.
Neustart gemacht.
Dann habe ich Spybot laufen lassen, das Programm findet Claro - habe dann "Probleme beheben" gedrückt. Alles gut soweit.
Neustart gemacht.
Claro noch immer da.
Habe dann den CCleaner laufen lassen. Nichts!
Neustart gemacht - nichts!
Habe dann bei euch von TuneUpUtilities gelesen - gemacht....
Neustart - Claro ist noch immer da!
Jetzt bin ich am Ende!
Ich bin auch nur ein normaler Anwender und kenne mich nicht gut aus.

Ich habe bei euch gelesen das ein anderer das gleiche Problem hatte (28.10 Kinski) und war schon versucht einfach das gleiche zu machen.
Ich habe dann zum Glück bei euch gelesen, das alles individuell zu betrachten ist und somit warte ich jetzt das mir jemand hilft.

Traue mich nicht mehr ins Internet mit meinem Rechner und nutzte, für mit euch zu kommunizieren, den Rechner von meinem Freund.

Es wäre total nett wenn mir jemand weiterhelfen könnte.

Liebe Grüße
Hondalady

Hallo,

hier noch die benötigten Infos für euch:
Ich habe mich genau an euren Leitfaden gehalten und habe alles der Reihe nach gemacht.

Ich hatte alle Programme geschlossen.
Wollte GMER Scan durchführen hat aber leider nicht geklappt.
Nach dem ich Scan gedrückt hatte, öffnet sich ein Fenster:

vzrv1klu.exe funktioniert nicht mehr
Das Programm wird aufgrund eines Problems geschlossen und Sie werden benachrichtigt wenn eine Lösung verfügbar ist.

Die Extras und defogger versuche ich in den Anhang zu packen mit dem Zip bin ich nicht zurecht gekommen

Hier die OTL:OTL Logfile:

OTL logfile created on: 03.11.2012 10:08:25 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Manuela67\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.19328)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
2,75 Gb Total Physical Memory | 1,55 Gb Available Physical Memory | 56,47% Memory free
5,72 Gb Paging File | 4,51 Gb Available in Paging File | 78,72% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 144,04 Gb Total Space | 45,68 Gb Free Space | 31,71% Space Free | Partition Type: NTFS
Drive D: | 144,04 Gb Total Space | 126,18 Gb Free Space | 87,60% Space Free | Partition Type: NTFS
 
Computer Name: MANUELA67-PC | User Name: Manuela67 | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2012.11.03 10:05:46 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Manuela67\Desktop\OTL.exe
PRC - [2012.10.16 08:48:00 | 002,360,864 | ---- | M] () -- C:\ProgramData\Browser Manager\2.3.811.154\{61d8b74e-8d89-46ff-afa6-33382c54ac73}\browsermngr.exe
PRC - [2012.09.19 11:29:44 | 001,869,152 | ---- | M] (TuneUp Software) -- C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesApp32.exe
PRC - [2012.09.19 11:29:42 | 001,699,168 | ---- | M] (TuneUp Software) -- C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe
PRC - [2012.09.13 08:09:25 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\sched.exe
PRC - [2012.09.13 08:08:42 | 000,080,336 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avshadow.exe
PRC - [2012.09.13 08:08:34 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe
PRC - [2012.09.13 08:08:33 | 000,348,664 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avgnt.exe
PRC - [2012.07.27 21:51:26 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2011.06.17 18:33:04 | 000,272,528 | ---- | M] (McAfee, Inc.) -- C:\Programme\McAfee Security Scan\3.0.207\SSScheduler.exe
PRC - [2009.06.06 13:24:00 | 000,769,024 | ---- | M] (Dominik Reichl) -- D:\Programme\PasswortG\KeePass Password Safe\KeePass.exe
PRC - [2009.04.11 07:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009.04.11 07:27:28 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conime.exe
PRC - [2009.04.02 18:05:22 | 000,102,400 | ---- | M] (Samsung Electronics Co., Ltd.) -- D:\Programme\NPSAgent.exe
PRC - [2009.03.31 09:39:36 | 000,233,472 | ---- | M] (Teruten) -- C:\Windows\System32\FsUsbExService.Exe
PRC - [2009.01.26 15:31:16 | 002,144,088 | RHS- | M] (Safer Networking Limited) -- D:\Programme\Spybot - Search & Destroy\TeaTimer.exe
PRC - [2009.01.26 15:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) -- D:\Programme\Spybot - Search & Destroy\SDWinSec.exe
PRC - [2008.10.24 16:35:44 | 000,128,296 | ---- | M] () -- C:\Programme\AAVUpdateManager\aavus.exe
PRC - [2008.08.06 10:18:52 | 006,265,376 | ---- | M] (Realtek Semiconductor) -- C:\Windows\RtHDVCpl.exe
PRC - [2008.06.24 09:33:44 | 000,817,672 | ---- | M] (Dritek System Inc.) -- C:\Programme\Launch Manager\QtZyEmachine.EXE
PRC - [2008.06.11 10:18:30 | 000,024,576 | ---- | M] () -- C:\Programme\EMACHINES\eMachines Recovery Management\Service\ETService.exe
PRC - [2008.01.21 03:25:33 | 000,896,512 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Media Player\wmpnetwk.exe
PRC - [2008.01.21 03:25:33 | 000,202,240 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Media Player\wmpnscfg.exe
PRC - [2008.01.21 03:23:32 | 001,008,184 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Defender\MSASCui.exe
PRC - [2007.01.04 18:48:50 | 000,112,152 | ---- | M] (InterVideo) -- C:\Programme\Common Files\InterVideo\RegMgr\iviRegMgr.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2012.10.16 08:48:00 | 002,360,864 | ---- | M] () -- C:\ProgramData\Browser Manager\2.3.811.154\{61d8b74e-8d89-46ff-afa6-33382c54ac73}\browsermngr.exe
MOD - [2012.10.16 08:47:12 | 002,075,680 | ---- | M] () -- C:\ProgramData\Browser Manager\2.3.811.154\{61d8b74e-8d89-46ff-afa6-33382c54ac73}\browsermngr.dll
MOD - [2008.09.16 20:18:06 | 000,132,608 | ---- | M] () -- C:\Programme\WinRAR\RarExt.dll
MOD - [2008.04.04 02:00:58 | 000,003,072 | ---- | M] () -- C:\Programme\NewTech Infosystems\NTI Backup Now 5\BkupTrayLOC.dll
 
 
========== Services (SafeList) ==========
 
SRV - File not found [Auto | Running] -- D:\Programme\Spybot -- (SBSDWSCService)
SRV - [2012.10.24 18:49:17 | 000,115,168 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012.10.16 08:48:00 | 002,360,864 | ---- | M] () [Auto | Running] -- C:\ProgramData\Browser Manager\2.3.811.154\{61d8b74e-8d89-46ff-afa6-33382c54ac73}\browsermngr.exe -- (Browser Manager)
SRV - [2012.09.19 11:29:42 | 001,699,168 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe -- (TuneUp.UtilitiesSvc)
SRV - [2012.09.13 08:09:25 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2012.09.13 08:08:34 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2012.07.27 21:51:26 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2011.06.17 18:33:04 | 000,237,008 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Programme\McAfee Security Scan\3.0.207\McCHSvc.exe -- (McComponentHostService)
SRV - [2009.03.31 09:39:36 | 000,233,472 | ---- | M] (Teruten) [Auto | Running] -- C:\Windows\System32\FsUsbExService.Exe -- (FsUsbExService)
SRV - [2008.10.24 16:35:44 | 000,128,296 | ---- | M] () [Auto | Running] -- C:\Programme\AAVUpdateManager\aavus.exe -- (AAV UpdateService)
SRV - [2008.06.11 10:18:30 | 000,024,576 | ---- | M] () [Auto | Running] -- C:\Programme\EMACHINES\eMachines Recovery Management\Service\ETService.exe -- (ETService)
SRV - [2008.04.07 09:17:30 | 000,430,592 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Programme\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2008.01.21 03:25:33 | 000,896,512 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Programme\Windows Media Player\wmpnetwk.exe -- (WMPNetworkSvc)
SRV - [2008.01.21 03:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007.01.04 18:48:50 | 000,112,152 | ---- | M] (InterVideo) [Auto | Running] -- C:\Programme\Common Files\InterVideo\RegMgr\iviRegMgr.exe -- (IviRegMgr)
SRV - [2003.07.28 11:28:22 | 000,089,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\microsoft shared\Source Engine\OSE.EXE -- (ose)
 
 
========== Driver Services (SafeList) ==========
 
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - [2012.09.19 10:50:50 | 000,010,088 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Running] -- C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys -- (TuneUpUtilitiesDrv)
DRV - [2012.09.13 08:09:51 | 000,036,000 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avkmgr.sys -- (avkmgr)
DRV - [2012.09.13 08:09:51 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2012.09.13 08:09:50 | 000,137,928 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb)
DRV - [2012.09.13 08:09:49 | 000,083,392 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2009.04.16 16:36:56 | 000,005,632 | ---- | M] () [File_System | System | Running] -- C:\Windows\System32\drivers\StarOpen.sys -- (StarOpen)
DRV - [2009.03.31 09:39:36 | 000,036,608 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\FsUsbExDisk.Sys -- (FsUsbExDisk)
DRV - [2009.03.20 10:01:26 | 000,121,856 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ss_bmdm.sys -- (ss_bmdm)
DRV - [2009.03.20 10:01:26 | 000,090,112 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ss_bbus.sys -- (ss_bbus)
DRV - [2009.03.20 10:01:26 | 000,014,976 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ss_bmdfl.sys -- (ss_bmdfl)
DRV - [2008.08.20 03:12:00 | 007,546,080 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2008.07.22 03:21:08 | 000,015,872 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvsmu.sys -- (nvsmu)
DRV - [2008.07.21 09:12:22 | 000,145,952 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\nvstor32.sys -- (nvstor32)
DRV - [2008.06.11 10:13:24 | 000,015,392 | ---- | M] (Acer, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\int15.sys -- (int15)
DRV - [2007.09.17 15:53:26 | 000,021,632 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2007.04.17 19:09:28 | 000,011,032 | ---- | M] (InterVideo) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\regi.sys -- (regi)
DRV - [2004.11.22 15:58:31 | 000,014,342 | ---- | M] (Intellon Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbethmp.sys -- (A_USBETHMP)
DRV - [2004.05.17 11:21:54 | 000,017,280 | ---- | M] (Intellon, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\plcndis5.sys -- (PLCNDIS5)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,First Home Page = about:blank
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = about:blank
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKLM\..\SearchScopes,DefaultScope = {67A2568C-7A0A-4EED-AECC-B5405DE63B64}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACEW
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://www.claro-search.com/?affID=114508&tt=4412_5&babsrc=HP_clro&mntrId=02eaee52000000000000001e68f91107
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.emachines.com/rdr.aspx?b=ACEW&l=0407&s=2&o=vp32&d=1008&m=emg620
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = about:blank
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\SearchScopes,bProtectorDefaultScope = {0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
IE - HKCU\..\SearchScopes,DefaultScope = {0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC
IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = hxxp://www.claro-search.com/?q={searchTerms}&affID=114508&tt=4412_5&babsrc=SP_clro&mntrId=02eaee52000000000000001e68f91107
IE - HKCU\..\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}: "URL" = hxxp://websearch.ask.com/redirect?client=ie&tb=CCS&o=15773&src=crm&q={searchTerms}&locale=de_DE&apn_ptnrs=HN&apn_dtid=YYYYYYYYDE&apn_uid=F525F03A-1F3A-4D47-829D-09909D4E1596&apn_sauid=5FB5771E-1438-4F9C-AEC9-B5775A026A61
IE - HKCU\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACEW
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Claro Search"
FF - prefs.js..browser.search.order.1: "Claro Search"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.update: false
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "hxxp://www.claro-search.com/?affID=114508&tt=4412_5&babsrc=HP_clro&mntrId=02eaee52000000000000001e68f91107"
FF - prefs.js..extensions.enabledAddons: {03B08592-E5B4-45ff-A0BE-C1D975458688}:1.0
FF - prefs.js..extensions.enabledAddons: {dc572301-7619-498c-a57d-39143191b318}:0.4.0.3
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {9669CC8F-B388-42FE-86F4-CB5E7F5A8BDC}:6.0.4
FF - prefs.js..extensions.enabledItems: {73a6fe31-595d-460b-a920-fcc0f8843232}:2.0.9.8
FF - prefs.js..extensions.enabledItems: {64161300-e22b-11db-8314-0800200c9a66}:0.9.5.8
FF - prefs.js..extensions.enabledItems: {dc572301-7619-498c-a57d-39143191b318}:0.3.8.4
FF - prefs.js..extensions.enabledItems: {03B08592-E5B4-45ff-A0BE-C1D975458688}:0.6.0.8
FF - prefs.js..keyword.URL: "hxxp://www.claro-search.com/?affID=114508&tt=4412_5&babsrc=KW_clro&mntrId=02eaee52000000000000001e68f91107&q="
 
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_4_402_287.dll ()
FF - HKLM\Software\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products Ltd.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.7.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.7.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products Ltd.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: D:\Programme\PDF-XChange Shell Extentions\PDF-XChange Viewer\pdf-viewer\npPDFXCviewNPPlugin.dll File not found
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.11.01 18:57:47 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012.10.12 11:48:06 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.11\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2012.10.12 11:32:54 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.11\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins [2012.10.12 11:48:06 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{b64982b1-d112-42b5-b1e4-d3867c4533f8}: C:\ProgramData\Browser Manager\2.3.811.154\{61d8b74e-8d89-46ff-afa6-33382c54ac73}\FirefoxExtension [2012.11.01 16:06:45 | 000,000,000 | ---D | M]
 
[2010.09.02 19:54:58 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Manuela67\AppData\Roaming\mozilla\Extensions
[2010.09.02 19:54:58 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Manuela67\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2012.11.01 19:06:23 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Manuela67\AppData\Roaming\mozilla\Firefox\Profiles\7h2n2ydr.default\extensions
[2011.05.13 07:18:18 | 000,000,000 | ---D | M] (Toolbar Buttons) -- C:\Users\Manuela67\AppData\Roaming\mozilla\Firefox\Profiles\7h2n2ydr.default\extensions\{03B08592-E5B4-45ff-A0BE-C1D975458688}
[2012.11.01 16:09:17 | 000,000,000 | ---D | M] (PriceGong) -- C:\Users\Manuela67\AppData\Roaming\mozilla\Firefox\Profiles\7h2n2ydr.default\extensions\{8A9386B4-E958-4c4c-ADF4-8F26DB3E4829}
[2010.01.29 09:38:22 | 000,000,000 | ---D | M] (MR Tech Toolkit) -- C:\Users\Manuela67\AppData\Roaming\mozilla\Firefox\Profiles\7h2n2ydr.default\extensions\{9669CC8F-B388-42FE-86F4-CB5E7F5A8BDC}
[2012.11.01 19:03:10 | 000,000,000 | ---D | M] (WOT) -- C:\Users\Manuela67\AppData\Roaming\mozilla\Firefox\Profiles\7h2n2ydr.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
[2011.07.04 15:54:25 | 000,000,000 | ---D | M] (IMinent Toolbar) -- C:\Users\Manuela67\AppData\Roaming\mozilla\Firefox\Profiles\7h2n2ydr.default\extensions\{C9B68337-E93A-44EA-94DC-CB300EC06444}
[2012.11.01 18:59:26 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Manuela67\AppData\Roaming\mozilla\Firefox\Profiles\7h2n2ydr.default\extensions\{dc572301-7619-498c-a57d-39143191b318}
[2012.11.01 16:07:05 | 000,000,000 | ---D | M] ("Savings Sidekick") -- C:\Users\Manuela67\AppData\Roaming\mozilla\Firefox\Profiles\7h2n2ydr.default\extensions\crossriderapp5060@crossrider.com
[2012.11.01 19:06:25 | 000,000,000 | ---D | M] (InstantFox) -- C:\Users\Manuela67\AppData\Roaming\mozilla\Firefox\Profiles\7h2n2ydr.default\extensions\searchy@searchy
[2012.11.01 18:59:22 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Manuela67\AppData\Roaming\mozilla\Firefox\Profiles\7h2n2ydr.default\extensions\{dc572301-7619-498c-a57d-39143191b318}\chrome\content\extensions
[2012.11.01 18:59:26 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Manuela67\AppData\Roaming\mozilla\Firefox\Profiles\7h2n2ydr.default\extensions\{dc572301-7619-498c-a57d-39143191b318}\modules\extensions
[2012.11.01 16:07:04 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Manuela67\AppData\Roaming\mozilla\Firefox\Profiles\7h2n2ydr.default\extensions\crossriderapp5060@crossrider.com\chrome\content\extensionCode
[2012.11.01 19:06:23 | 000,119,708 | ---- | M] () (No name found) -- C:\Users\Manuela67\AppData\Roaming\mozilla\firefox\profiles\7h2n2ydr.default\extensions\searchy@searchy.xpi
[2011.12.26 10:00:49 | 000,275,540 | ---- | M] () (No name found) -- C:\Users\Manuela67\AppData\Roaming\mozilla\firefox\profiles\7h2n2ydr.default\extensions\{64161300-e22b-11db-8314-0800200c9a66}.xpi
[2011.12.26 10:00:49 | 000,519,546 | ---- | M] () (No name found) -- C:\Users\Manuela67\AppData\Roaming\mozilla\firefox\profiles\7h2n2ydr.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
[2012.11.01 18:59:22 | 000,702,524 | ---- | M] () (No name found) -- C:\Users\Manuela67\AppData\Roaming\mozilla\firefox\profiles\7h2n2ydr.default\extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi
[2011.12.27 17:49:23 | 000,002,395 | ---- | M] () -- C:\Users\Manuela67\AppData\Roaming\mozilla\firefox\profiles\7h2n2ydr.default\searchplugins\askcom.xml
[2012.11.01 18:57:46 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2012.10.24 18:50:04 | 000,261,600 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011.07.08 20:08:24 | 000,167,704 | ---- | M] (Tracker Software Products Ltd.) -- C:\Program Files\mozilla firefox\plugins\npPDFXCviewNPPlugin.dll
[2012.10.24 23:03:12 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012.11.01 16:07:07 | 000,006,522 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml
[2012.10.24 23:03:11 | 000,002,465 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2012.10.24 23:03:12 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
[2012.10.24 23:03:12 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
[2012.10.24 23:03:12 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml
[2012.10.24 23:03:11 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2006.09.18 22:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1             localhost
O2 - BHO: (Savings Sidekick) - {11111111-1111-1111-1111-110011501160} - C:\Programme\Savings Sidekick\Savings Sidekick.dll (215 Apps)
O2 - BHO: (Shopping Assistant Plugin) - {1631550F-191D-4826-B069-D9439253D926} - C:\Programme\PriceGong\2.6.8\PriceGongIE.dll (PriceGong)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - D:\Programme\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (no name) - {D0F4A166-B8D4-48b8-9D63-80849FE137CB} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {977AE9CC-AF83-45E8-9E03-E2798216E2D5} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [LManager] C:\Programme\Launch Manager\QtZyEmachine.EXE (Dritek System Inc.)
O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\Windows\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [WarReg_PopUp] C:\Programme\EMACHINES\WR_PopUp\WarReg_PopUp.exe (eMachines)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKCU..\Run: [AutoStartNPSAgent] D:\Programme\NPSAgent.exe (Samsung Electronics Co., Ltd.)
O4 - HKCU..\Run: [KeePass Password Safe] D:\Programme\PasswortG\KeePass Password Safe\KeePass.exe (Dominik Reichl)
O4 - HKCU..\Run: [SpybotSD TeaTimer] D:\Programme\Spybot - Search & Destroy\TeaTimer.exe (Safer Networking Limited)
O4 - HKCU..\Run: [WMPNSCFG] C:\Programme\Windows Media Player\wmpnscfg.exe (Microsoft Corporation)
O4 - Startup: C:\Users\Manuela67\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Avira AntiVir Control Center.lnk = C:\Programme\Avira\AntiVir Desktop\avcenter.exe (Avira Operations GmbH & Co. KG)
O4 - Startup: C:\Users\Manuela67\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Mozilla Firefox (2).lnk = C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
O4 - Startup: C:\Users\Manuela67\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Mozilla Thunderbird (2).lnk = C:\Programme\Mozilla Thunderbird\thunderbird.exe (Mozilla Messaging)
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - D:\Programme\Office\OFFICE11\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 File not found
O9 - Extra Button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\Programme\Office\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\Programme\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Reg Error: Value error.)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 10.7.2)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{062006B6-FE55-4B1A-8219-3A74C1BEEA78}: DhcpNameServer = 192.168.178.1
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Programme\Common Files\microsoft shared\Information Retrieval\msitss.dll (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Programme\Common Files\microsoft shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Programme\Common Files\microsoft shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)
O20 - AppInit_DLLs: (c:\progra~2\browse~1\23811~1.154\{61d8b~1\browse~1.dll) - c:\ProgramData\Browser Manager\2.3.811.154\{61d8b74e-8d89-46ff-afa6-33382c54ac73}\browsermngr.dll ()
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img2.jpg
O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img2.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006.09.18 22:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.11.03 10:06:38 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Manuela67\Desktop\OTL.exe
[2012.11.03 09:48:41 | 000,031,584 | ---- | C] (TuneUp Software) -- C:\Windows\System32\TURegOpt.exe
[2012.11.03 09:48:39 | 000,021,344 | ---- | C] (TuneUp Software) -- C:\Windows\System32\authuitu.dll
[2012.11.03 09:48:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2013
[2012.11.03 09:48:11 | 000,000,000 | ---D | C] -- C:\Program Files\TuneUp Utilities 2013
[2012.11.02 16:59:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy
[2012.11.02 16:30:10 | 000,000,000 | ---D | C] -- C:\Users\Manuela67\AppData\Roaming\TuneUp Software
[2012.11.02 16:29:22 | 000,000,000 | ---D | C] -- C:\ProgramData\TuneUp Software
[2012.11.02 16:28:13 | 000,000,000 | -HSD | C] -- C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
[2012.11.02 16:18:52 | 000,401,720 | ---- | C] (Trend Micro Inc.) -- C:\Users\Manuela67\Desktop\HiJackThis_2.0.4_universal.exe
[2012.11.01 18:57:48 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Maintenance Service
[2012.11.01 18:57:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Mozilla
[2012.11.01 18:47:41 | 000,000,000 | ---D | C] -- C:\Users\Manuela67\AppData\Local\Deployment
[2012.11.01 18:47:41 | 000,000,000 | ---D | C] -- C:\Users\Manuela67\AppData\Local\Apps
[2012.11.01 16:09:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PriceGong
[2012.11.01 16:09:17 | 000,000,000 | ---D | C] -- C:\Program Files\PriceGong
[2012.11.01 16:07:05 | 000,000,000 | ---D | C] -- C:\Users\Manuela67\AppData\Local\Savings Sidekick
[2012.11.01 16:07:01 | 000,000,000 | ---D | C] -- C:\Program Files\Savings Sidekick
[2012.11.01 16:06:47 | 000,000,000 | ---D | C] -- C:\ProgramData\IBUpdaterService
[2012.11.01 16:06:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Browser Manager
[2012.11.01 16:06:34 | 000,000,000 | ---D | C] -- C:\Users\Manuela67\AppData\Roaming\4Free
[2012.10.12 12:30:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
[2012.10.12 11:55:28 | 000,000,000 | ---D | C] -- C:\Users\Manuela67\Documents\Any Video Converter
[2012.10.12 11:55:22 | 000,000,000 | ---D | C] -- C:\Users\Manuela67\AppData\Roaming\AnvSoft
[2012.10.12 11:51:50 | 000,000,000 | -H-D | C] -- C:\ProgramData\Common Files
[2012.10.12 11:51:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AnvSoft
[2012.10.12 11:39:29 | 000,000,000 | ---D | C] -- C:\ProgramData\McAfee Security Scan
[2012.10.12 11:39:26 | 000,000,000 | ---D | C] -- C:\ProgramData\McAfee
[2012.10.12 11:39:25 | 000,000,000 | ---D | C] -- C:\Program Files\McAfee Security Scan
[2012.10.04 16:22:09 | 000,000,000 | ---D | C] -- C:\Users\Manuela67\AppData\Local\Macromedia
[2008.06.02 13:04:08 | 001,413,008 | ---- | C] (Protection Technology (StarForce)) -- C:\Users\Manuela67\sfdrvup.exe
 
========== Files - Modified Within 30 Days ==========
 
[2012.11.03 10:05:46 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Manuela67\Desktop\OTL.exe
[2012.11.03 10:02:54 | 000,000,000 | ---- | M] () -- C:\Users\Manuela67\defogger_reenable
[2012.11.03 10:01:01 | 000,050,477 | ---- | M] () -- C:\Users\Manuela67\Desktop\Defogger.exe
[2012.11.03 09:48:36 | 000,001,871 | ---- | M] () -- C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk
[2012.11.03 09:48:36 | 000,001,867 | ---- | M] () -- C:\Users\Public\Desktop\TuneUp Utilities 2013.lnk
[2012.11.03 09:38:42 | 000,632,492 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2012.11.03 09:38:42 | 000,599,150 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012.11.03 09:38:42 | 000,127,722 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2012.11.03 09:38:42 | 000,105,164 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012.11.03 09:32:16 | 000,028,219 | ---- | M] () -- C:\ProgramData\nvModes.001
[2012.11.03 09:31:44 | 000,003,216 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012.11.03 09:31:44 | 000,000,000 | ---- | M] () -- C:\Windows\System32\LogConfigTemp.xml
[2012.11.03 09:31:43 | 000,003,216 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012.11.03 09:31:36 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.11.03 09:31:30 | 2951,081,984 | -HS- | M] () -- C:\hiberfil.sys
[2012.11.02 16:59:00 | 000,000,831 | ---- | M] () -- C:\Users\Manuela67\Desktop\Spybot - Search & Destroy.lnk
[2012.11.02 16:12:05 | 000,401,720 | ---- | M] (Trend Micro Inc.) -- C:\Users\Manuela67\Desktop\HiJackThis_2.0.4_universal.exe
[2012.11.02 16:03:14 | 000,000,426 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{B466C935-D9DA-483F-BF64-943C715819A9}.job
[2012.11.01 18:57:49 | 000,000,848 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2012.11.01 17:13:54 | 000,000,069 | ---- | M] () -- C:\Windows\NeroDigital.ini
[2012.11.01 17:13:47 | 000,225,280 | ---- | M] () -- C:\Users\Manuela67\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012.11.01 16:59:50 | 000,001,024 | RH-- | M] () -- C:\Users\Public\Documents\NTIMP3.dll
[2012.10.12 12:30:42 | 000,001,949 | ---- | M] () -- C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
[2012.10.12 12:30:42 | 000,001,949 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
[2012.10.12 11:51:46 | 000,000,687 | ---- | M] () -- C:\Users\Manuela67\Desktop\Any Video Converter.lnk
[2012.10.12 11:48:06 | 000,001,894 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk
 
========== Files Created - No Company Name ==========
 
[2012.11.03 10:02:54 | 000,000,000 | ---- | C] () -- C:\Users\Manuela67\defogger_reenable
[2012.11.03 10:01:52 | 000,050,477 | ---- | C] () -- C:\Users\Manuela67\Desktop\Defogger.exe
[2012.11.03 09:48:36 | 000,001,871 | ---- | C] () -- C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk
[2012.11.03 09:48:36 | 000,001,867 | ---- | C] () -- C:\Users\Public\Desktop\TuneUp Utilities 2013.lnk
[2012.11.03 09:48:35 | 000,001,879 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2013.lnk
[2012.11.02 16:59:00 | 000,000,831 | ---- | C] () -- C:\Users\Manuela67\Desktop\Spybot - Search & Destroy.lnk
[2012.11.01 18:57:49 | 000,000,860 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2012.11.01 18:57:49 | 000,000,848 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2012.10.21 09:52:20 | 000,731,008 | ---- | C] () -- C:\Users\Manuela67\Desktop\Entwicklungsprognose bei Frühchen.pdf
[2012.10.12 11:51:46 | 000,000,687 | ---- | C] () -- C:\Users\Manuela67\Desktop\Any Video Converter.lnk
[2012.10.12 11:48:06 | 000,001,894 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk
[2012.10.12 11:48:06 | 000,001,804 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
[2012.10.12 11:39:25 | 000,001,949 | ---- | C] () -- C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
[2012.10.12 11:39:25 | 000,001,949 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
[2011.07.11 12:46:01 | 000,002,593 | ---- | C] () -- C:\Windows\CDPLAYER.INI
[2009.04.16 16:45:23 | 000,000,000 | ---- | C] () -- C:\ProgramData\LauncherAccess.dt
[2009.03.22 11:41:15 | 000,003,561 | ---- | C] () -- C:\Users\Manuela67\AppData\Roaming\mdbu.bin
[2009.03.04 17:44:09 | 000,008,268 | ---- | C] () -- C:\Users\Manuela67\AppData\Local\d3d9caps.dat
[2009.02.02 09:02:59 | 000,000,306 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2009.01.29 08:03:02 | 000,000,022 | ---- | C] () -- C:\Users\Manuela67\AppData\Local\cmdial32.ini
[2009.01.17 13:01:10 | 000,028,219 | ---- | C] () -- C:\ProgramData\nvModes.001
[2009.01.17 13:01:08 | 000,028,219 | ---- | C] () -- C:\ProgramData\nvModes.dat
[2009.01.17 12:59:26 | 000,225,280 | ---- | C] () -- C:\Users\Manuela67\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
 
========== ZeroAccess Check ==========
 
[2006.11.02 13:54:22 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.06.08 18:47:00 | 011,586,048 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009.04.11 07:28:19 | 000,614,912 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009.04.11 07:28:25 | 000,347,648 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
========== LOP Check ==========
 
[2012.11.01 16:06:34 | 000,000,000 | ---D | M] -- C:\Users\Manuela67\AppData\Roaming\4Free
[2012.10.12 11:55:22 | 000,000,000 | ---D | M] -- C:\Users\Manuela67\AppData\Roaming\AnvSoft
[2011.12.26 15:15:47 | 000,000,000 | ---D | M] -- C:\Users\Manuela67\AppData\Roaming\Cocoon Software
[2009.04.07 09:13:54 | 000,000,000 | ---D | M] -- C:\Users\Manuela67\AppData\Roaming\ExtraFilm
[2011.04.04 14:27:12 | 000,000,000 | ---D | M] -- C:\Users\Manuela67\AppData\Roaming\InfraRecorder
[2009.03.22 20:01:37 | 000,000,000 | ---D | M] -- C:\Users\Manuela67\AppData\Roaming\InterVideo
[2009.08.31 08:55:13 | 000,000,000 | ---D | M] -- C:\Users\Manuela67\AppData\Roaming\KeePass
[2010.03.06 10:17:53 | 000,000,000 | ---D | M] -- C:\Users\Manuela67\AppData\Roaming\PC Suite
[2010.03.06 10:05:13 | 000,000,000 | ---D | M] -- C:\Users\Manuela67\AppData\Roaming\Samsung
[2009.01.19 22:27:45 | 000,000,000 | ---D | M] -- C:\Users\Manuela67\AppData\Roaming\Simple Star
[2010.09.02 19:54:57 | 000,000,000 | ---D | M] -- C:\Users\Manuela67\AppData\Roaming\Thunderbird
[2012.11.02 16:30:10 | 000,000,000 | ---D | M] -- C:\Users\Manuela67\AppData\Roaming\TuneUp Software
 
========== Purity Check ==========
 
 
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 125 bytes -> C:\ProgramData\TEMP:9F683177
@Alternate Data Stream - 118 bytes -> C:\ProgramData\TEMP:4F636E25
@Alternate Data Stream - 116 bytes -> C:\ProgramData\TEMP:8AB6C1D7
@Alternate Data Stream - 101 bytes -> C:\ProgramData\TEMP:9E22BBE8

< End of report >
         

--- --- ---

Dein Thema ist leider untergegangen, bitte in Zukunft nicht selbst antworten.

Benoetigst du noch Hilfe?

Fehlende Rückmeldung

Gibt es Probleme beim Abarbeiten obiger Anleitung?

Um Kapazitäten für andere Hilfesuchende freizumachen, lösche ich dieses Thema aus meinen Benachrichtigungen.

Solltest Du weitermachen wollen, schreibe mir eine PN oder eröffne ein neues Thema.
http://www.trojaner-board.de/69886-a...-beachten.html


Hinweis: Das Verschwinden der Symptome bedeutet nicht, dass Dein Rechner sauber ist.