Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: wie werde ich gvutrojaner endgültig los

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.

Antwort
Alt 24.07.2012, 14:36   #1
marlenmausi
 
wie werde ich gvutrojaner endgültig los - Standard

wie werde ich gvutrojaner endgültig los



hallo, ich habe den gvu-trojaner auf meinem pc, habe ihn jetzt 2mal wegbekommen (so das der pc wieder zu nutzen war) jedoch nicht endgültig, habe desshalb Malwarebytes Anti-Malware runtergeladen und den vollständigen suchlauf gestartet( so wie es auf euer seite bei trojanern empfohlen wird). ich bekomme die funde jedoch nicht in quarantäne und löschen soll man die anscheind nicht und so weiß ich jetzt nicht weiter.
die anweisungen aus dem netz so unterschiedlich und wiedersprüchlich das ich mich an euch wende
was kann ich tun um die funde endgültig loszuwerden ?
hier die funde:
3 mal trojan.agent.sz
1 mal trojan. ransom.gen

Malwarebytes Anti-Malware (Test) 1.62.0.1300
Malwarebytes : Free Anti-Malware download

Datenbank Version: v2012.07.24.04

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 9.0.8112.16421
Toshiba :: TOSHIBA-PC [Administrator]

Schutz: Aktiviert

24.07.2012 00:35:24
mbam-log-2012-07-24 (02-57-21).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 285747
Laufzeit: 1 Stunde(n), 10 Minute(n), 27 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 5
C:\Users\Toshiba\AppData\Local\Temp\fest0r_ot.exe (Spyware.Zbot.DG) -> Keine Aktion durchgeführt.
C:\Users\Toshiba\AppData\Roaming\YBIcZ.exe (Trojan.Agent.SZ) -> Keine Aktion durchgeführt.
C:\Users\Toshiba\AppData\Roaming\Owze\elne.exe (Trojan.Agent.SZ) -> Keine Aktion durchgeführt.
C:\Users\Toshiba\AppData\Roaming\Umdau\koikb.exe (Trojan.Agent.SZ) -> Keine Aktion durchgeführt.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk (Trojan.Ransom.Gen) -> Keine Aktion durchgeführt.

(Ende)

OTL Funddatei:OTL Logfile:
Code:
ATTFilter
OTL logfile created on: 24.07.2012 05:20:48 - Run 1
OTL by OldTimer - Version 3.2.54.1     Folder = C:\Users\Toshiba\Downloads
 Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Alemanha | Language: DEU | Date Format: dd.MM.yyyy
 
1,99 Gb Total Physical Memory | 0,63 Gb Available Physical Memory | 31,51% Memory free
3,98 Gb Paging File | 2,17 Gb Available in Paging File | 54,49% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 297,99 Gb Total Space | 171,29 Gb Free Space | 57,48% Space Free | Partition Type: NTFS
 
Computer Name: TOSHIBA-PC | User Name: Toshiba | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\Toshiba\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
PRC - C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
PRC - C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
PRC - C:\Program Files\12Voip.com\12Voip\12voip.exe (12Voip)
PRC - C:\Program Files\VoipCheapCom.com\VoipCheapCom\voipcheapcom.exe (VoipCheapCom)
PRC - C:\ProgramData\Mobile Partner\OnlineUpdate\ouc.exe ()
PRC - C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
PRC - c:\program files\avira\antivir desktop\avscan.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Windows\System32\conhost.exe (Microsoft Corporation)
PRC - C:\ProgramData\DatacardService\HWDeviceService.exe ()
PRC - C:\ProgramData\DatacardService\DCSHelper.exe (Huawei Technologies Co., Ltd.)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Toshiba TEMPRO\TemproTray.exe (Toshiba Europe GmbH)
PRC - C:\Program Files\Toshiba TEMPRO\TemproSvc.exe (Toshiba Europe GmbH)
PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation)
PRC - C:\Program Files\My Connection\BackgroundService\ModemListener.exe ()
PRC - C:\Program Files\My Connection\BackgroundService\ServiceManager.exe ()
PRC - C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe (TOSHIBA Corporation)
PRC - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe (TOSHIBA Corporation)
PRC - C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe (TOSHIBA CORPORATION)
PRC - C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe (TOSHIBA Corporation)
PRC - C:\Program Files\TOSHIBA\ConfigFree\CFIWmxSvcs.exe (TOSHIBA CORPORATION)
PRC - C:\Program Files\TOSHIBA\ConfigFree\CFSwMgr.exe (TOSHIBA CORPORATION)
PRC - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe (TOSHIBA CORPORATION)
PRC - C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
PRC - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)
PRC - C:\Windows\ATK0100\HControl.exe ()
PRC - C:\Windows\ATK0100\ATKOSD.exe ()
 
 
========== Modules (No Company Name) ==========
 
MOD - C:\Program Files\Mozilla Firefox\mozjs.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\6c59a14a23f734093e80d6093e25302a\Microsoft.VisualBasic.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\69ca4a43ba14b66689715ad62aed70e6\System.ServiceProcess.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\7b7fbe651c6e72f12099a298654c9594\System.Windows.Forms.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6bb439b3f87736d3248ae27d43e2c0d6\System.Drawing.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\14a87218ea49639f38097e278b98a3da\PresentationCore.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\03dee80574f4ec770b6f77ca030ded6c\System.Runtime.Remoting.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\46fce56db7685a586d3eeb7c373e3c1c\WindowsBase.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ba3d70b651454c7d49b407b93663bfed\System.Xml.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\cfa9c506bfb9254c89dace7b83bc9f9d\System.Configuration.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System\ce9ff6baf9053ed2ed673d948179195c\System.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\acfc1391e45fedd2a359778ea57d914c\mscorlib.ni.dll ()
MOD - C:\Program Files\WinRAR\rarext.dll ()
MOD - C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll ()
MOD - C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll ()
MOD - C:\Program Files\My Connection\BackgroundService\ModemListener.exe ()
MOD - C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll ()
MOD - C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnZ.dll ()
MOD - C:\Program Files\TOSHIBA\FlashCards\BlackPng.dll ()
MOD - C:\Windows\assembly\GAC_MSIL\System.Runtime.Remoting.resources\2.0.0.0_de_b77a5c561934e089\System.Runtime.Remoting.resources.dll ()
MOD - C:\Program Files\Toshiba\PCDiag\NotifyPCD.dll ()
MOD - C:\Windows\ATK0100\HControl.exe ()
MOD - C:\Windows\ATK0100\ATKOSD.exe ()
MOD - C:\Windows\ATK0100\CMSSC.dll ()
 
 
========== Win32 Services (SafeList) ==========
 
SRV - (SBSDWSCService) -- C:\Program Files\Spybot File not found
SRV - (MozillaMaintenance) -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (MBAMService) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (SkypeUpdate) -- C:\Program Files\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (Mobile Partner. RunOuc) -- C:\Program Files\Mobile Partner\UpdateDog\ouc.exe ()
SRV - (AntiVirSchedulerService) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
SRV - (AntiVirService) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
SRV - (WatAdminSvc) -- C:\Windows\System32\Wat\WatAdminSvc.exe (Microsoft Corporation)
SRV - (AdobeARMservice) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (HWDeviceService.exe) -- C:\ProgramData\DatacardService\HWDeviceService.exe ()
SRV - (TemproMonitoringService) -- C:\Program Files\Toshiba TEMPRO\TemproSvc.exe (Toshiba Europe GmbH)
SRV - (Alcatel Wave Modem Device Helper) -- C:\Program Files\My Connection\BackgroundService\ServiceManager.exe ()
SRV - (TosCoSrv) -- C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe (TOSHIBA Corporation)
SRV - (cfWiMAXService) -- C:\Program Files\TOSHIBA\ConfigFree\CFIWmxSvcs.exe (TOSHIBA CORPORATION)
SRV - (SensrSvc) -- C:\Windows\System32\sensrsvc.dll (Microsoft Corporation)
SRV - (PeerDistSvc) -- C:\Windows\System32\PeerDistSvc.dll (Microsoft Corporation)
SRV - (WinDefend) -- C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SRV - (ConfigFree Service) -- C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe (TOSHIBA CORPORATION)
 
 
========== Driver Services (SafeList) ==========
 
DRV - (VGPU) -- System32\drivers\rdvgkmd.sys File not found
DRV - (hdbtqmlh) -- C:\Windows\system32\drivers\hdbtqmlh.sys File not found
DRV - (hcgrnfgs) -- C:\Windows\system32\drivers\hcgrnfgs.sys File not found
DRV - (gvcjpwat) -- C:\Windows\system32\drivers\gvcjpwat.sys File not found
DRV - (ewusbnet) -- system32\DRIVERS\ewusbnet.sys File not found
DRV - (ehydgusw) -- C:\Windows\system32\drivers\ehydgusw.sys File not found
DRV - (byxtwcco) -- C:\Windows\system32\drivers\byxtwcco.sys File not found
DRV - (afrxbtno) -- C:\Windows\system32\drivers\afrxbtno.sys File not found
DRV - (MBAMSwissArmy) -- C:\Windows\System32\drivers\mbamswissarmy.sys (Malwarebytes Corporation)
DRV - (MBAMProtector) -- C:\Windows\System32\drivers\mbam.sys (Malwarebytes Corporation)
DRV - (ewusbmbb) -- C:\Windows\System32\drivers\ewusbwwan.sys (Huawei Technologies Co., Ltd.)
DRV - (ew_hwusbdev) -- C:\Windows\System32\drivers\ew_hwusbdev.sys (Huawei Technologies Co., Ltd.)
DRV - (huawei_cdcacm) -- C:\Windows\System32\drivers\ew_jucdcacm.sys (Huawei Technologies Co., Ltd.)
DRV - (huawei_enumerator) -- C:\Windows\System32\drivers\ew_jubusenum.sys (Huawei Technologies Co., Ltd.)
DRV - (hwdatacard) -- C:\Windows\System32\drivers\ewusbmdm.sys (Huawei Technologies Co., Ltd.)
DRV - (avipbb) -- C:\Windows\System32\drivers\avipbb.sys (Avira GmbH)
DRV - (avgntflt) -- C:\Windows\System32\drivers\avgntflt.sys (Avira GmbH)
DRV - (avkmgr) -- C:\Windows\System32\drivers\avkmgr.sys (Avira GmbH)
DRV - (RdpVideoMiniport) -- C:\Windows\System32\drivers\rdpvideominiport.sys (Microsoft Corporation)
DRV - (TsUsbFlt) -- C:\Windows\System32\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV - (vmbus) -- C:\Windows\System32\drivers\vmbus.sys (Microsoft Corporation)
DRV - (tsusbhub) -- C:\Windows\System32\drivers\tsusbhub.sys (Microsoft Corporation)
DRV - (Synth3dVsc) -- C:\Windows\System32\drivers\Synth3dVsc.sys (Microsoft Corporation)
DRV - (dmvsc) -- C:\Windows\System32\drivers\dmvsc.sys (Microsoft Corporation)
DRV - (storflt) -- C:\Windows\System32\drivers\vmstorfl.sys (Microsoft Corporation)
DRV - (storvsc) -- C:\Windows\System32\drivers\storvsc.sys (Microsoft Corporation)
DRV - (terminpt) -- C:\Windows\System32\drivers\terminpt.sys (Microsoft Corporation)
DRV - (VMBusHID) -- C:\Windows\System32\drivers\VMBusHID.sys (Microsoft Corporation)
DRV - (s3cap) -- C:\Windows\System32\drivers\vms3cap.sys (Microsoft Corporation)
DRV - (WinUsb) -- C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation)
DRV - (TsUsbGD) -- C:\Windows\System32\drivers\TsUsbGD.sys (Microsoft Corporation)
DRV - (qcusbser) -- C:\Windows\System32\drivers\qcusbser.sys (TCT International Mobile Ltd)
DRV - (ssmdrv) -- C:\Windows\System32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (AgereSoftModem) -- C:\Windows\System32\drivers\AGRSM.sys (LSI Corp)
DRV - (RTL8187B) -- C:\Windows\System32\drivers\RTL8187B.sys (Realtek Semiconductor Corporation                           )
DRV - (RTL8023xp) -- C:\Windows\System32\drivers\Rtnicxp.sys (Realtek Semiconductor Corporation                           )
DRV - (MTsensor) -- C:\Windows\System32\drivers\ATKACPI.sys ()
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{758B870D-DF78-4A6A-9955-DEDDCACF94DC}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Google
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
IE - HKCU\..\SearchScopes\{758B870D-DF78-4A6A-9955-DEDDCACF94DC}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
========== FireFox ==========
 
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_265.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.07.23 07:22:30 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
 
[2012.07.23 07:23:04 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Toshiba\AppData\Roaming\mozilla\Extensions
[2012.07.23 07:41:38 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Toshiba\AppData\Roaming\mozilla\Firefox\Profiles\f84j3o2o.default\extensions
[2012.07.23 07:22:30 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\mozilla firefox\extensions
[2012.07.14 13:15:45 | 000,136,672 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012.07.14 13:45:08 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012.07.14 13:45:08 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2012.07.14 13:45:08 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
[2012.07.14 13:45:08 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
[2012.07.14 13:45:08 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml
[2012.07.14 13:45:07 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
 
========== Chrome  ==========
 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - homepage: Google
CHR - plugin: Shockwave Flash (Disabled) = C:\Users\Toshiba\AppData\Local\Google\Chrome\User Data\PepperFlash\11.1.31.203\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Toshiba\AppData\Local\Google\Chrome\Application\17.0.963.12\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32_11_2_202_160.dll
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Toshiba\AppData\Local\Google\Chrome\Application\17.0.963.12\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Toshiba\AppData\Local\Google\Chrome\Application\17.0.963.12\pdf.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: Java(TM) Platform SE 7 U2 (Enabled) = C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: Picasa (Enabled) = C:\Program Files\Google\Picasa3\npPicasa3.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: YouTube = C:\Users\Toshiba\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.3_0\
CHR - Extension: Google-Suche = C:\Users\Toshiba\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.16_0\
CHR - Extension: Google Mail = C:\Users\Toshiba\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
 
O1 HOSTS File: ([2009.06.11 10:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4 - HKLM..\Run: [00TCrdMain] C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [Alcatel Wave ModemListener] C:\Program Files\My Connection\BackgroundService\ModemListener.exe ()
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [HControl] C:\Windows\ATK0100\HControl.exe ()
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [SmoothView] C:\Program Files\Toshiba\SmoothView\SmoothView.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [Toshiba TEMPRO] C:\Program Files\Toshiba TEMPRO\TemproTray.exe (Toshiba Europe GmbH)
O4 - HKLM..\Run: [TPwrMain] C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE (TOSHIBA Corporation)
O4 - HKCU..\Run: [12Voip] C:\Program Files\12Voip.com\12Voip\12voip.exe (12Voip)
O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O4 - HKCU..\Run: [VoipCheapCom] C:\Program Files\VoipCheapCom.com\VoipCheapCom\voipcheapcom.exe (VoipCheapCom)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll (Safer Networking Limited)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_02-windows-i586.cab (Java Plug-in 10.2.0)
O16 - DPF: {CAFEEFAC-0017-0000-0002-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_02-windows-i586.cab (Java Plug-in 1.7.0_02)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_02-windows-i586.cab (Java Plug-in 1.7.0_02)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3A586A4E-99EE-4D5F-83B2-69A26B7185BB}: DhcpNameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{7D14B121-EC73-4963-BFE3-A37D4EB6B5C5}: NameServer = 193.189.244.225 193.189.244.206
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{83099098-A9CB-40BB-8BAE-72CA576737C9}: NameServer = 193.189.244.225 193.189.244.206
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9E374959-AEBC-494C-BDC4-809687D7B5AA}: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O22 - SharedTaskScheduler: {E31004D1-A431-41B8-826F-E902F9D95C81} - Windows DreamScene - C:\Windows\System32\DreamScene.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.11 10:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{26ecfcaa-a674-11e1-b547-001e8cfe129e}\Shell - "" = AutoRun
O33 - MountPoints2\{26ecfcaa-a674-11e1-b547-001e8cfe129e}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{26ecfcde-a674-11e1-b547-001e8cfe129e}\Shell - "" = AutoRun
O33 - MountPoints2\{26ecfcde-a674-11e1-b547-001e8cfe129e}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{ee762ba8-a7f7-11e1-b90f-001e8cfe129e}\Shell - "" = AutoRun
O33 - MountPoints2\{ee762ba8-a7f7-11e1-b90f-001e8cfe129e}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{f8971507-3877-11e1-bc1a-00164499a2d0}\Shell - "" = AutoRun
O33 - MountPoints2\{f8971507-3877-11e1-bc1a-00164499a2d0}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{f8971524-3877-11e1-bc1a-00164499a2d0}\Shell - "" = AutoRun
O33 - MountPoints2\{f8971524-3877-11e1-bc1a-00164499a2d0}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\E\Shell - "" = AutoRun
O33 - MountPoints2\E\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\AutoRun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.07.24 00:32:58 | 000,040,776 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2012.07.23 07:45:59 | 000,000,000 | ---D | C] -- C:\papas kram
[2012.07.23 07:24:50 | 000,000,000 | ---D | C] -- C:\Users\Toshiba\AppData\Local\Macromedia
[2012.07.23 07:22:45 | 000,000,000 | ---D | C] -- C:\Users\Toshiba\AppData\Roaming\Mozilla
[2012.07.23 07:22:45 | 000,000,000 | ---D | C] -- C:\Users\Toshiba\AppData\Local\Mozilla
[2012.07.23 07:22:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Mozilla
[2012.07.23 07:22:32 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Maintenance Service
[2012.07.23 07:22:29 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2012.07.23 05:43:12 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2012.07.23 05:43:06 | 000,000,000 | ---D | C] -- C:\Windows\System32\appmgmt
[2012.07.22 12:15:21 | 000,000,000 | ---D | C] -- C:\Users\Toshiba\Desktop\Terry_Pratchett__Der_fuenfte_Elefant
[2012.07.22 12:15:06 | 000,000,000 | ---D | C] -- C:\Users\Toshiba\Desktop\Terry_Pratchett__Die_volle_Wahrheit
[2012.07.22 09:11:53 | 000,000,000 | ---D | C] -- C:\Users\Toshiba\AppData\Roaming\Malwarebytes
[2012.07.22 09:11:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012.07.22 09:11:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2012.07.22 09:11:39 | 000,022,344 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2012.07.22 09:11:39 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2012.07.22 03:18:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy
[2012.07.22 03:18:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy
[2012.07.22 03:18:03 | 000,000,000 | ---D | C] -- C:\Program Files\Spybot - Search & Destroy
[2012.07.22 03:15:24 | 000,000,000 | ---D | C] -- C:\Users\Toshiba\AppData\Roaming\Avira
[2012.07.22 03:12:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
[2012.07.22 03:12:42 | 000,028,520 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\ssmdrv.sys
[2012.07.22 03:12:39 | 000,137,928 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\avipbb.sys
[2012.07.22 03:12:39 | 000,083,392 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\avgntflt.sys
[2012.07.22 03:12:39 | 000,036,000 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\avkmgr.sys
[2012.07.22 03:12:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira
[2012.07.22 03:12:37 | 000,000,000 | ---D | C] -- C:\Program Files\Avira
[2012.07.11 19:24:33 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2012.07.11 19:24:31 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2012.07.11 19:24:30 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2012.07.11 19:24:30 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2012.07.11 19:24:28 | 001,800,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2012.07.11 19:24:27 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2012.07.11 19:24:26 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2012.07.11 19:21:55 | 002,345,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2012.07.11 19:00:07 | 000,219,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ncrypt.dll
[2012.07.11 19:00:03 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msxml3r.dll
[2012.07.11 19:00:01 | 000,805,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cdosys.dll
[2012.07.04 03:53:28 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\browserchoice.exe
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2012.07.24 05:15:36 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012.07.24 05:15:33 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.07.24 03:04:28 | 000,679,342 | ---- | M] () -- C:\Windows\System32\prfh0816.dat
[2012.07.24 03:04:28 | 000,654,166 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2012.07.24 03:04:28 | 000,616,008 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012.07.24 03:04:28 | 000,133,752 | ---- | M] () -- C:\Windows\System32\prfc0816.dat
[2012.07.24 03:04:28 | 000,130,006 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2012.07.24 03:04:28 | 000,106,388 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012.07.24 00:38:30 | 000,017,472 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.07.24 00:38:30 | 000,017,472 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.07.24 00:35:04 | 000,040,776 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2012.07.24 00:30:29 | 1603,723,264 | -HS- | M] () -- C:\hiberfil.sys
[2012.07.23 07:22:36 | 000,001,092 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2012.07.23 06:04:06 | 000,001,912 | ---- | M] () -- C:\Windows\epplauncher.mif
[2012.07.23 05:01:40 | 000,308,224 | ---- | M] (Dacey Emyle Corkstown) -- C:\Users\Toshiba\AppData\Roaming\YBIcZ.exe
[2012.07.23 05:01:39 | 000,300,032 | ---- | M] (Giustina Douglass Coletta) -- C:\Users\Toshiba\AppData\Roaming\zSOJS.exe
[2012.07.23 05:01:38 | 000,001,891 | ---- | M] () -- C:\Users\Toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk
[2012.07.22 09:11:41 | 000,001,071 | ---- | M] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
[2012.07.22 03:18:37 | 000,001,220 | ---- | M] () -- C:\Users\Toshiba\Desktop\Spybot - Search & Destroy.lnk
[2012.07.22 03:12:57 | 000,002,016 | ---- | M] () -- C:\Users\Public\Desktop\Avira Control Center.lnk
[2012.07.22 02:29:21 | 004,503,728 | ---- | M] () -- C:\ProgramData\to_r0tsef.pad
[2012.07.12 21:07:14 | 000,426,184 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2012.07.12 21:07:14 | 000,070,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2012.07.11 23:47:34 | 000,265,640 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2012.07.11 18:53:03 | 199,041,106 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2012.07.08 20:06:21 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2012.07.03 13:46:44 | 000,022,344 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2012.06.28 02:47:07 | 004,503,728 | ---- | M] () -- C:\ProgramData\l_0_00_re.pad
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2012.07.23 07:22:36 | 000,001,104 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2012.07.23 07:22:36 | 000,001,092 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2012.07.23 05:01:40 | 000,308,224 | ---- | C] () -- C:\Users\Toshiba\AppData\Roaming\YBIcZ.exe
[2012.07.23 05:01:39 | 000,300,032 | ---- | C] () -- C:\Users\Toshiba\AppData\Roaming\zSOJS.exe
[2012.07.23 05:01:38 | 000,001,891 | ---- | C] () -- C:\Users\Toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk
[2012.07.22 09:11:41 | 000,001,071 | ---- | C] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
[2012.07.22 03:18:37 | 000,001,220 | ---- | C] () -- C:\Users\Toshiba\Desktop\Spybot - Search & Destroy.lnk
[2012.07.22 03:12:57 | 000,002,016 | ---- | C] () -- C:\Users\Public\Desktop\Avira Control Center.lnk
[2012.07.16 08:39:44 | 004,503,728 | ---- | C] () -- C:\ProgramData\to_r0tsef.pad
[2012.07.08 20:06:21 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2012.06.28 02:27:11 | 004,503,728 | ---- | C] () -- C:\ProgramData\l_0_00_re.pad
[2012.02.11 01:45:00 | 000,000,193 | ---- | C] () -- C:\Windows\WORDPAD.INI
[2012.01.05 23:37:42 | 000,175,616 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2012.01.05 23:37:35 | 004,078,592 | ---- | C] () -- C:\Windows\System32\x264vfw.dll
[2012.01.05 23:37:35 | 000,216,064 | ---- | C] ( ) -- C:\Windows\System32\lagarith.dll
[2012.01.05 23:37:34 | 000,650,752 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2012.01.05 23:37:34 | 000,243,200 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2012.01.05 23:37:33 | 000,079,360 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2012.01.05 08:12:58 | 000,000,000 | ---- | C] () -- C:\Windows\NDSTray.INI
[2012.01.05 03:59:46 | 000,654,166 | ---- | C] () -- C:\Windows\System32\perfh007.dat
[2012.01.05 03:59:46 | 000,295,922 | ---- | C] () -- C:\Windows\System32\perfi007.dat
[2012.01.05 03:59:46 | 000,130,006 | ---- | C] () -- C:\Windows\System32\perfc007.dat
[2012.01.05 03:59:46 | 000,038,104 | ---- | C] () -- C:\Windows\System32\perfd007.dat
[2011.03.14 16:04:42 | 000,001,491 | ---- | C] () -- C:\Windows\System32\RTSLCS.dll
[2011.01.17 20:20:41 | 000,080,896 | ---- | C] () -- C:\Windows\System32\RDVGHelper.exe
[2011.01.17 20:20:39 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe

< End of report >
         
--- --- ---

Alt 25.07.2012, 02:02   #2
t'john
/// Helfer-Team
 
wie werde ich gvutrojaner endgültig los - Standard

wie werde ich gvutrojaner endgültig los





Fixen mit OTL

Lade (falls noch nicht vorhanden) OTL von Oldtimer herunter und speichere es auf Deinem Desktop (nicht woanders hin).

  • Deaktiviere etwaige Virenscanner wie Avira, Kaspersky etc.
  • Starte die OTL.exe.
    Vista- und Windows 7-User starten mit Rechtsklick auf das Programm-Icon und wählen "Als Administrator ausführen".
  • Kopiere folgendes Skript in das Textfeld unterhalb von Benuterdefinierte Scans/Fixes:


Code:
ATTFilter
:OTL

PRC - C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.) 
PRC - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.) 

SRV - (SBSDWSCService) -- C:\Program Files\Spybot File not found 
SRV - (Mobile Partner. RunOuc) -- C:\Program Files\Mobile Partner\UpdateDog\ouc.exe () 

DRV - (VGPU) -- System32\drivers\rdvgkmd.sys File not found 
DRV - (hdbtqmlh) -- C:\Windows\system32\drivers\hdbtqmlh.sys File not found 
DRV - (hcgrnfgs) -- C:\Windows\system32\drivers\hcgrnfgs.sys File not found 
DRV - (gvcjpwat) -- C:\Windows\system32\drivers\gvcjpwat.sys File not found 
DRV - (ewusbnet) -- system32\DRIVERS\ewusbnet.sys File not found 
DRV - (ehydgusw) -- C:\Windows\system32\drivers\ehydgusw.sys File not found 
DRV - (byxtwcco) -- C:\Windows\system32\drivers\byxtwcco.sys File not found 
DRV - (afrxbtno) -- C:\Windows\system32\drivers\afrxbtno.sys File not found 
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} 
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC 
IE - HKLM\..\SearchScopes\{758B870D-DF78-4A6A-9955-DEDDCACF94DC}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage} 
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} 
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage} 
IE - HKCU\..\SearchScopes\{758B870D-DF78-4A6A-9955-DEDDCACF94DC}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage} 
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local 
FF - user.js - File not found 
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found 
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found 
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found. 
O4 - HKLM..\Run: [Toshiba TEMPRO] C:\Program Files\Toshiba TEMPRO\TemproTray.exe (Toshiba Europe GmbH) 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 0 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found 
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. 
O32 - HKLM CDRom: AutoRun - 1 
O33 - MountPoints2\{26ecfcaa-a674-11e1-b547-001e8cfe129e}\Shell - "" = AutoRun 
O33 - MountPoints2\{26ecfcaa-a674-11e1-b547-001e8cfe129e}\Shell\AutoRun\command - "" = E:\AutoRun.exe 
O33 - MountPoints2\{26ecfcde-a674-11e1-b547-001e8cfe129e}\Shell - "" = AutoRun 
O33 - MountPoints2\{26ecfcde-a674-11e1-b547-001e8cfe129e}\Shell\AutoRun\command - "" = E:\AutoRun.exe 
O33 - MountPoints2\{ee762ba8-a7f7-11e1-b90f-001e8cfe129e}\Shell - "" = AutoRun 
O33 - MountPoints2\{ee762ba8-a7f7-11e1-b90f-001e8cfe129e}\Shell\AutoRun\command - "" = E:\AutoRun.exe 
O33 - MountPoints2\{f8971507-3877-11e1-bc1a-00164499a2d0}\Shell - "" = AutoRun 
O33 - MountPoints2\{f8971507-3877-11e1-bc1a-00164499a2d0}\Shell\AutoRun\command - "" = E:\AutoRun.exe 
O33 - MountPoints2\{f8971524-3877-11e1-bc1a-00164499a2d0}\Shell - "" = AutoRun 
O33 - MountPoints2\{f8971524-3877-11e1-bc1a-00164499a2d0}\Shell\AutoRun\command - "" = F:\AutoRun.exe 
O33 - MountPoints2\E\Shell - "" = AutoRun 
O33 - MountPoints2\E\Shell\AutoRun\command - "" = E:\AutoRun.exe 
O33 - MountPoints2\F\Shell - "" = AutoRun 
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\AutoRun.exe 

[2012.07.23 05:01:40 | 000,308,224 | ---- | M] (Dacey Emyle Corkstown) -- C:\Users\Toshiba\AppData\Roaming\YBIcZ.exe 
[2012.07.23 05:01:39 | 000,300,032 | ---- | M] (Giustina Douglass Coletta) -- C:\Users\Toshiba\AppData\Roaming\zSOJS.exe 
[2012.07.22 02:29:21 | 004,503,728 | ---- | M] () -- C:\ProgramData\to_r0tsef.pad 
[2012.07.23 05:01:40 | 000,308,224 | ---- | C] () -- C:\Users\Toshiba\AppData\Roaming\YBIcZ.exe 
[2012.07.23 05:01:39 | 000,300,032 | ---- | C] () -- C:\Users\Toshiba\AppData\Roaming\zSOJS.exe 
[2012.07.16 08:39:44 | 004,503,728 | ---- | C] () -- C:\ProgramData\to_r0tsef.pad 



[2012.07.22 03:12:57 | 000,002,016 | ---- | M] () -- C:\Users\Public\Desktop\Avira Control Center.lnk 
[2012.07.22 03:12:57 | 000,002,016 | ---- | C] () -- C:\Users\Public\Desktop\Avira Control Center.lnk 
[2012.07.24 05:15:36 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job 

[2012.07.23 05:01:40 | 000,308,224 | ---- | M] (Dacey Emyle Corkstown) -- C:\Users\Toshiba\AppData\Roaming\YBIcZ.exe 
[2012.07.23 05:01:39 | 000,300,032 | ---- | M] (Giustina Douglass Coletta) -- C:\Users\Toshiba\AppData\Roaming\zSOJS.exe 
[2012.07.23 05:01:38 | 000,001,891 | ---- | M] () -- C:\Users\Toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk 
[2012.07.23 05:01:40 | 000,308,224 | ---- | C] () -- C:\Users\Toshiba\AppData\Roaming\YBIcZ.exe 
[2012.07.23 05:01:39 | 000,300,032 | ---- | C] () -- C:\Users\Toshiba\AppData\Roaming\zSOJS.exe 
[2012.07.23 05:01:38 | 000,001,891 | ---- | C] () -- C:\Users\Toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk 
[2012.07.22 02:29:21 | 004,503,728 | ---- | M] () -- C:\ProgramData\to_r0tsef.pad 
[2012.06.28 02:47:07 | 004,503,728 | ---- | M] () -- C:\ProgramData\l_0_00_re.pad 
[2012.07.16 08:39:44 | 004,503,728 | ---- | C] () -- C:\ProgramData\to_r0tsef.pad 
[2012.06.28 02:27:11 | 004,503,728 | ---- | C] () -- C:\ProgramData\l_0_00_re.pad 
:Files
C:\Users\Toshiba\AppData\Local\Temp\fest0r_ot.exe
C:\Users\Toshiba\AppData\Roaming
C:\Users\Toshiba\AppData\Roaming\Owze
C:\Users\Toshiba\AppData\Roaming\Umdau
ipconfig /flushdns /c
:Commands
[purity]
[emptytemp]
[emptyflash]
         
  • Schließe alle Programme.
  • Klicke auf den Fix Button.
  • Wenn OTL einen Neustart verlangt, bitte zulassen.
  • Kopiere den Inhalt des Logfiles hier in Code-Tags in Deinen Thread.
    Nachträglich kannst Du das Logfile hier einsehen => C:\_OTL\MovedFiles\

Hinweis für Mitleser: Obiges OTL-Script ist ausschließlich für diesen User in dieser Situtation erstellt worden.
Auf keinen Fall auf anderen Rechnern anwenden, das kann andere Systeme nachhaltig schädigen!
__________________

__________________

Alt 27.07.2012, 12:00   #3
marlenmausi
 
wie werde ich gvutrojaner endgültig los - Standard

wie werde ich gvutrojaner endgültig los



hallo,
vielen dank für die hilfe/anweisung

habe es genausomgemacht, somit folgen nun die code-tags


All processes killed
========== OTL ==========
No active process named TeaTimer.exe was found!
Process SDWinSec.exe killed successfully!
Service SBSDWSCService stopped successfully!
Service SBSDWSCService deleted successfully!
File C:\Program Files\Spybot File not found not found.
Service Mobile Partner. RunOuc stopped successfully!
Service Mobile Partner. RunOuc deleted successfully!
C:\Program Files\Mobile Partner\UpdateDog\ouc.exe moved successfully.
Service VGPU stopped successfully!
Service VGPU deleted successfully!
File System32\drivers\rdvgkmd.sys File not found not found.
Service hdbtqmlh stopped successfully!
Service hdbtqmlh deleted successfully!
File C:\Windows\system32\drivers\hdbtqmlh.sys File not found not found.
Service hcgrnfgs stopped successfully!
Service hcgrnfgs deleted successfully!
File C:\Windows\system32\drivers\hcgrnfgs.sys File not found not found.
Service gvcjpwat stopped successfully!
Service gvcjpwat deleted successfully!
File C:\Windows\system32\drivers\gvcjpwat.sys File not found not found.
Service ewusbnet stopped successfully!
Service ewusbnet deleted successfully!
File system32\DRIVERS\ewusbnet.sys File not found not found.
Service ehydgusw stopped successfully!
Service ehydgusw deleted successfully!
File C:\Windows\system32\drivers\ehydgusw.sys File not found not found.
Service byxtwcco stopped successfully!
Service byxtwcco deleted successfully!
File C:\Windows\system32\drivers\byxtwcco.sys File not found not found.
Service afrxbtno stopped successfully!
Service afrxbtno deleted successfully!
File C:\Windows\system32\drivers\afrxbtno.sys File not found not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{758B870D-DF78-4A6A-9955-DEDDCACF94DC}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{758B870D-DF78-4A6A-9955-DEDDCACF94DC}\ not found.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{758B870D-DF78-4A6A-9955-DEDDCACF94DC}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{758B870D-DF78-4A6A-9955-DEDDCACF94DC}\ not found.
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyOverride| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@Apple.com/iTunes,version=\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@microsoft.com/GENUINE\ deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Toshiba TEMPRO deleted successfully.
C:\Program Files\Toshiba TEMPRO\TemproTray.exe moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\ConsentPromptBehaviorAdmin deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\ConsentPromptBehaviorUser deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\EnableLUA deleted successfully.
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\VMApplet:/pagefile deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\AutoRun|DWORD:1 /E : value set successfully!
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{26ecfcaa-a674-11e1-b547-001e8cfe129e}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{26ecfcaa-a674-11e1-b547-001e8cfe129e}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{26ecfcaa-a674-11e1-b547-001e8cfe129e}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{26ecfcaa-a674-11e1-b547-001e8cfe129e}\ not found.
File E:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{26ecfcde-a674-11e1-b547-001e8cfe129e}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{26ecfcde-a674-11e1-b547-001e8cfe129e}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{26ecfcde-a674-11e1-b547-001e8cfe129e}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{26ecfcde-a674-11e1-b547-001e8cfe129e}\ not found.
File E:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ee762ba8-a7f7-11e1-b90f-001e8cfe129e}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ee762ba8-a7f7-11e1-b90f-001e8cfe129e}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ee762ba8-a7f7-11e1-b90f-001e8cfe129e}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ee762ba8-a7f7-11e1-b90f-001e8cfe129e}\ not found.
File E:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{f8971507-3877-11e1-bc1a-00164499a2d0}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f8971507-3877-11e1-bc1a-00164499a2d0}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{f8971507-3877-11e1-bc1a-00164499a2d0}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f8971507-3877-11e1-bc1a-00164499a2d0}\ not found.
File E:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{f8971524-3877-11e1-bc1a-00164499a2d0}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f8971524-3877-11e1-bc1a-00164499a2d0}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{f8971524-3877-11e1-bc1a-00164499a2d0}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f8971524-3877-11e1-bc1a-00164499a2d0}\ not found.
File F:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\E\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\E\ not found.
File E:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\F\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\F\ not found.
File F:\AutoRun.exe not found.
C:\Users\Toshiba\AppData\Roaming\YBIcZ.exe moved successfully.
C:\Users\Toshiba\AppData\Roaming\zSOJS.exe moved successfully.
C:\ProgramData\to_r0tsef.pad moved successfully.
File C:\Users\Toshiba\AppData\Roaming\YBIcZ.exe not found.
File C:\Users\Toshiba\AppData\Roaming\zSOJS.exe not found.
File C:\ProgramData\to_r0tsef.pad not found.
C:\Users\Public\Desktop\Avira Control Center.lnk moved successfully.
File C:\Users\Public\Desktop\Avira Control Center.lnk not found.
C:\Windows\Tasks\Adobe Flash Player Updater.job moved successfully.
File C:\Users\Toshiba\AppData\Roaming\YBIcZ.exe not found.
File C:\Users\Toshiba\AppData\Roaming\zSOJS.exe not found.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk moved successfully.
File C:\Users\Toshiba\AppData\Roaming\YBIcZ.exe not found.
File C:\Users\Toshiba\AppData\Roaming\zSOJS.exe not found.
File C:\Users\Toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk not found.
File C:\ProgramData\to_r0tsef.pad not found.
C:\ProgramData\l_0_00_re.pad moved successfully.
File C:\ProgramData\to_r0tsef.pad not found.
File C:\ProgramData\l_0_00_re.pad not found.
========== FILES ==========
C:\Users\Toshiba\AppData\Local\Temp\fest0r_ot.exe moved successfully.
C:\Users\Toshiba\AppData\Roaming\Yzup folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\WinRAR folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Windows Live Writer folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\WinBatch\Settings folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\WinBatch folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\VoipCheapCom\berndzink\My Display Pictures folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\VoipCheapCom\berndzink folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\VoipCheapCom folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Umdau folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\toshiba\pcdiag\v3.0\Logs folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\toshiba\pcdiag\v3.0 folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\toshiba\pcdiag folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\toshiba folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Skype\shared_httpfe folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Skype\shared_dynco folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Skype\Pictures folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Skype\My Skype Received Files folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Skype\DbTemp folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Skype\bernd.willi2\voicemail folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Skype\bernd.willi2\httpfe folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Skype\bernd.willi2\chatsync\f2 folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Skype\bernd.willi2\chatsync\f0 folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Skype\bernd.willi2\chatsync\ec folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Skype\bernd.willi2\chatsync\e5 folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Skype\bernd.willi2\chatsync\da folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Skype\bernd.willi2\chatsync\cf folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Skype\bernd.willi2\chatsync\ce folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Skype\bernd.willi2\chatsync\cb folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Skype\bernd.willi2\chatsync\be folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Skype\bernd.willi2\chatsync\bd folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Skype\bernd.willi2\chatsync\bb folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Skype\bernd.willi2\chatsync\b3 folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Skype\bernd.willi2\chatsync\ad folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Skype\bernd.willi2\chatsync\aa folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Skype\bernd.willi2\chatsync\a1 folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Skype\bernd.willi2\chatsync\97 folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Skype\bernd.willi2\chatsync\93 folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Skype\bernd.willi2\chatsync\8e folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Skype\bernd.willi2\chatsync\88 folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Skype\bernd.willi2\chatsync\6d folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Skype\bernd.willi2\chatsync\68 folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Skype\bernd.willi2\chatsync\62 folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Skype\bernd.willi2\chatsync\5f folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Skype\bernd.willi2\chatsync\5c folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Skype\bernd.willi2\chatsync\28 folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Skype\bernd.willi2\chatsync\1f folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Skype\bernd.willi2\chatsync\17 folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Skype\bernd.willi2\chatsync\11 folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Skype\bernd.willi2\chatsync\09 folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Skype\bernd.willi2\chatsync\07 folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Skype\bernd.willi2\chatsync\01 folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Skype\bernd.willi2\chatsync\00 folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Skype\bernd.willi2\chatsync folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Skype\bernd.willi2 folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Skype folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Owze folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Mozilla\Firefox\Profiles\f84j3o2o.default\webapps folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Mozilla\Firefox\Profiles\f84j3o2o.default\minidumps folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Mozilla\Firefox\Profiles\f84j3o2o.default\extensions folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Mozilla\Firefox\Profiles\f84j3o2o.default\bookmarkbackups folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Mozilla\Firefox\Profiles\f84j3o2o.default\adblockplus folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Mozilla\Firefox\Profiles\f84j3o2o.default folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Mozilla\Firefox\Profiles folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Mozilla\Firefox\Crash Reports folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Mozilla\Firefox folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Mozilla\Extensions folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Mozilla folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Windows\Themes folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Windows\Templates folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TOSHIBA\Utilitys folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TOSHIBA folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programas folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Windows\Start Menu folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Windows\SendTo folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Windows\Recent folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Windows\PrivacIE\Low folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Windows\PrivacIE folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Windows\Printer Shortcuts folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Windows\Network Shortcuts folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Windows\Libraries folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Windows\IETldCache\Low folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Windows\IETldCache folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Windows\IEDownloadHistory folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Windows\IECompatCache\Low folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Windows\IECompatCache folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Windows\Cookies\Low folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Windows\Cookies folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Windows folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\SystemCertificates\My\CTLs folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\SystemCertificates\My\CRLs folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\SystemCertificates\My\Certificates folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\SystemCertificates\My folder moved successfully.
Folder move failed. C:\Users\Toshiba\AppData\Roaming\Microsoft\SystemCertificates scheduled to be moved on reboot.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Sticky Notes folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Speech folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Protect\S-1-5-21-1216840043-4005665246-2819730637-1000 folder moved successfully.
Folder move failed. C:\Users\Toshiba\AppData\Roaming\Microsoft\Protect scheduled to be moved on reboot.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Network\Connections\Pbk folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Network\Connections folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Network folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\MSN Messenger folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\MMC folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Internet Explorer\UserData\V31Y4DEA folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Internet Explorer\UserData\N52LAJD1 folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Internet Explorer\UserData\Low folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Internet Explorer\UserData\BBO07I7V folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Internet Explorer\UserData\7F4FH82S folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Internet Explorer\UserData folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Internet Explorer folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\IMJP9_0 folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\IMJP8_1 folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\IMJP12 folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\IME12 folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\IdentityCRL\temp folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\IdentityCRL folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\eHome\mcl_images folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\eHome folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-1216840043-4005665246-2819730637-1000 folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Crypto\RSA folder moved successfully.
Folder move failed. C:\Users\Toshiba\AppData\Roaming\Microsoft\Crypto scheduled to be moved on reboot.
Folder move failed. C:\Users\Toshiba\AppData\Roaming\Microsoft\Credentials scheduled to be moved on reboot.
C:\Users\Toshiba\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312 folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\CLR Security Config folder moved successfully.
Folder move failed. C:\Users\Toshiba\AppData\Roaming\Microsoft scheduled to be moved on reboot.
C:\Users\Toshiba\AppData\Roaming\Media Player Classic folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Media Center Programs folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Logs folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Malwarebytes folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\Adobe folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#Intermedia.NET - Welcome to your new virtual server! folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#ZDF.de - Startseite - ZDF.de folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#Hotelbewertungen von Hotels, Urlaub, Reisen, Pensionen, Pauschalreisen und Sehenswürdigkeiten - TripAdvisor folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#Tickets Konzertkarten Eintrittskarten folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#Radio NORA | Startseite folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#HKL BAUMASCHINEN - Mieten - Kaufen - Service - Deutschlands führender Baumaschinen-Mietpark - umfassendes Angebot an gebrauchten Baumaschinen folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#videos.t-online.de folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#v.movad.de folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#streamcloud.eu folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#static.sockshare.com folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#static.putlocker.com folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#stat.ed.cupidplc.com folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#skype.com folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#serving-sys.com folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#secureinclude.ebaystatic.com folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#secure-a.vimeocdn.com folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#s.ytimg.com folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#s.uicdn.com folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#ph-static.phncdn.com folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#p1.soundcloud.com folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#p.iivt.com folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#members.bet365.com folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#img.widgets.video.s-msn.com folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#img-pool.ui-portal.de folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#imagesrv.adition.com folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#heias.com folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#files.youporn.com folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#filenuke.com folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#delivery.ibanner.de folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#de.juggergame.com folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#de-freshmilk.cdn.videoplaza.tv folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cdn.flashtalking.com folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#admin.brightcove.com folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#a.affil.io folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\macromedia.com folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\www.ziulscores.com\aspafrica\jbay12\AkamaiFlashPlayer.swf folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\www.ziulscores.com\aspafrica\jbay12 folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\www.ziulscores.com\aspafrica folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\Intermedia.NET - Welcome to your new virtual server! folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\www.zdf.de\ZDFmediathek\flash\Main.swf\#ZDFmediathek folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\www.zdf.de\ZDFmediathek\flash\Main.swf folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\www.zdf.de\ZDFmediathek\flash folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\www.zdf.de\ZDFmediathek folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\ZDF.de - Startseite - ZDF.de folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\Hotelbewertungen von Hotels, Urlaub, Reisen, Pensionen, Pauschalreisen und Sehenswürdigkeiten - TripAdvisor folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\Tickets Konzertkarten Eintrittskarten folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\Radio NORA | Startseite folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\www.hkl-baumaschinen.de\media\cache\hkl_baumaschinen\header\header_standard_jub.swf folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\www.hkl-baumaschinen.de\media\cache\hkl_baumaschinen\header\header_mieten_04_08.swf folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\www.hkl-baumaschinen.de\media\cache\hkl_baumaschinen\header folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\www.hkl-baumaschinen.de\media\cache\hkl_baumaschinen folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\www.hkl-baumaschinen.de\media\cache folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\www.hkl-baumaschinen.de\media folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\HKL BAUMASCHINEN - Mieten - Kaufen - Service - Deutschlands führender Baumaschinen-Mietpark - umfassendes Angebot an gebrauchten Baumaschinen folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\videos.t-online.de\b\56\41\25\86\id_56412586\tid_fl\index.swf folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\videos.t-online.de\b\56\41\25\86\id_56412586\tid_fl folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\videos.t-online.de\b\56\41\25\86\id_56412586 folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\videos.t-online.de\b\56\41\25\86 folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\videos.t-online.de\b\56\41\25 folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\videos.t-online.de\b\56\41 folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\videos.t-online.de\b\56 folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\videos.t-online.de\b folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\videos.t-online.de folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\v.movad.de folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\streamcloud.eu folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\static.sockshare.com\video_player.swf folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\static.sockshare.com folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\static.putlocker.com\video_player.swf folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\static.putlocker.com folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\stat.ed.cupidplc.com\images\ed2.swf folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\stat.ed.cupidplc.com\images folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\stat.ed.cupidplc.com folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\skype.com\#user folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\skype.com\#ui folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\skype.com folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\serving-sys.com folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\secureinclude.ebaystatic.com folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\secure-a.vimeocdn.com folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\s.ytimg.com folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\s.uicdn.com\gmx\mag\static\2.12\swf\metaplayer047.swf folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\s.uicdn.com\gmx\mag\static\2.12\swf folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\s.uicdn.com\gmx\mag\static\2.12 folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\s.uicdn.com\gmx\mag\static folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\s.uicdn.com\gmx\mag folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\s.uicdn.com\gmx folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\s.uicdn.com folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\ph-static.phncdn.com\flash\pornhubSkin.swf folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\ph-static.phncdn.com\flash folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\ph-static.phncdn.com folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\p1.soundcloud.com\player.swf folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\p1.soundcloud.com folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\p.iivt.com\iivt.swf folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\p.iivt.com folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\members.bet365.com folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\img.widgets.video.s-msn.com folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\img-pool.ui-portal.de\static\2.9\swf\metaplayer047.swf folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\img-pool.ui-portal.de\static\2.9\swf folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\img-pool.ui-portal.de\static\2.9 folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\img-pool.ui-portal.de\static\2.8\swf\metaplayer047.swf folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\img-pool.ui-portal.de\static\2.8\swf folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\img-pool.ui-portal.de\static\2.8 folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\img-pool.ui-portal.de\static folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\img-pool.ui-portal.de folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\imagesrv.adition.com\banners\268\00\11\32\a2\flash.swf folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\imagesrv.adition.com\banners\268\00\11\32\a2 folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\imagesrv.adition.com\banners\268\00\11\32 folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\imagesrv.adition.com\banners\268\00\11 folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\imagesrv.adition.com\banners\268\00 folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\imagesrv.adition.com\banners\268 folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\imagesrv.adition.com\banners folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\imagesrv.adition.com folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\heias.com\x\heias_sc.swf folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\heias.com\x folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\heias.com folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\files.youporn.com\r\7\cbplayer\youpornSkin.swf folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\files.youporn.com\r\7\cbplayer\player_10_2.swf folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\files.youporn.com\r\7\cbplayer folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\files.youporn.com\r\7 folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\files.youporn.com\r folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\files.youporn.com folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\filenuke.com folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\delivery.ibanner.de\ibanner\snacktv\STVPlayer.swf folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\delivery.ibanner.de\ibanner\snacktv folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\delivery.ibanner.de\ibanner folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\delivery.ibanner.de folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\de.juggergame.com\images\player\WohPlayer.swf folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\de.juggergame.com\images\player folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\de.juggergame.com\images folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\de.juggergame.com folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\de-freshmilk.cdn.videoplaza.tv folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\cdn.flashtalking.com folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\admin.brightcove.com\[[IMPORT]]\79423.analytics.edgekey.net\csma\plugin\csma.swf folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\admin.brightcove.com\[[IMPORT]]\79423.analytics.edgekey.net\csma\plugin folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\admin.brightcove.com\[[IMPORT]]\79423.analytics.edgekey.net\csma folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\admin.brightcove.com\[[IMPORT]]\79423.analytics.edgekey.net folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\admin.brightcove.com\[[IMPORT]] folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\admin.brightcove.com folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\a.affil.io\s\af.swf folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\a.affil.io\s folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P\a.affil.io folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VQS48Q4P folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#SharedObjects folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#Security\FlashPlayerTrust folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player\#Security folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia\Flash Player folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Macromedia folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Identities\{A5BC1FA5-470A-4F3C-8AEE-A9373781C86D} folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Identities folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Fayz folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Exus folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Ceupu folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Avira\AntiVir Desktop\JOBS folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Avira\AntiVir Desktop folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Avira folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Apple Computer\Safari\PubSub\Feeds folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Apple Computer\Safari\PubSub\Database folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Apple Computer\Safari\PubSub folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Apple Computer\Safari folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Apple Computer\Preferences folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Apple Computer\Logs folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Apple Computer\iTunes folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Apple Computer folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Adobe\LogTransport2 folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Adobe\Linguistics\Dictionaries folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Adobe\Linguistics folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Adobe\Headlights folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Adobe\Flash Player\NativeCache folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Adobe\Flash Player\Icon Cache folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Adobe\Flash Player\AssetCache\KGC2E7PB folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Adobe\Flash Player\AssetCache folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Adobe\Flash Player\APSPrivateData2 folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Adobe\Flash Player\AFCache folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Adobe\Flash Player folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Adobe\AIR\Updater\Background folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Adobe\AIR\Updater folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Adobe\AIR folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Adobe\Acrobat\10.0\Stamps folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Adobe\Acrobat\10.0\Security\CRLCache folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Adobe\Acrobat\10.0\Security folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Adobe\Acrobat\10.0\JSCache folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Adobe\Acrobat\10.0\Forms folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Adobe\Acrobat\10.0\Collab folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Adobe\Acrobat\10.0 folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Adobe\Acrobat folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Adobe folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\12Voip\berndzink58\My Display Pictures folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\12Voip\berndzink58 folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\12Voip folder moved successfully.
Folder move failed. C:\Users\Toshiba\AppData\Roaming scheduled to be moved on reboot.
File\Folder C:\Users\Toshiba\AppData\Roaming\Owze not found.
File\Folder C:\Users\Toshiba\AppData\Roaming\Umdau not found.
< ipconfig /flushdns /c >
Windows-IP-Konfiguration
Der DNS-Aufl”sungscache wurde geleert.
C:\Users\Toshiba\Desktop\cmd.bat deleted successfully.
C:\Users\Toshiba\Desktop\cmd.txt deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Public

User: Toshiba
->Temp folder emptied: 1573071 bytes
->Temporary Internet Files folder emptied: 600651232 bytes
->Java cache emptied: 259195 bytes
->FireFox cache emptied: 58757695 bytes
->Google Chrome cache emptied: 6628182 bytes
->Apple Safari cache emptied: 16384 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 484984 bytes
RecycleBin emptied: 1486249256 bytes

Total Files Cleaned = 2.055,00 mb


[EMPTYFLASH]

User: All Users

User: Default

User: Default User

User: Public

User: Toshiba

Total Flash Files Cleaned = 0,00 mb


OTL by OldTimer - Version 3.2.55.0 log created on 07272012_004248

Files\Folders moved on Reboot...
C:\Users\Toshiba\AppData\Roaming\Microsoft\SystemCertificates\My\CTLs folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\SystemCertificates\My\CRLs folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\SystemCertificates\My\Certificates folder moved successfully.
C:\Users\Toshiba\AppData\Roaming\Microsoft\SystemCertificates\My folder moved successfully.
Folder move failed. C:\Users\Toshiba\AppData\Roaming\Microsoft\SystemCertificates scheduled to be moved on reboot.
C:\Users\Toshiba\AppData\Roaming\Microsoft\Protect\S-1-5-21-1216840043-4005665246-2819730637-1000 folder moved successfully.
Folder move failed. C:\Users\Toshiba\AppData\Roaming\Microsoft\Protect scheduled to be moved on reboot.
Folder move failed. C:\Users\Toshiba\AppData\Roaming\Microsoft\Crypto scheduled to be moved on reboot.
Folder move failed. C:\Users\Toshiba\AppData\Roaming\Microsoft\Credentials scheduled to be moved on reboot.
Folder move failed. C:\Users\Toshiba\AppData\Roaming\Microsoft\SystemCertificates\My scheduled to be moved on reboot.
Folder move failed. C:\Users\Toshiba\AppData\Roaming\Microsoft\SystemCertificates scheduled to be moved on reboot.
Folder move failed. C:\Users\Toshiba\AppData\Roaming\Microsoft\Protect scheduled to be moved on reboot.
Folder move failed. C:\Users\Toshiba\AppData\Roaming\Microsoft\Crypto scheduled to be moved on reboot.
Folder move failed. C:\Users\Toshiba\AppData\Roaming\Microsoft\Credentials scheduled to be moved on reboot.
Folder move failed. C:\Users\Toshiba\AppData\Roaming\Microsoft scheduled to be moved on reboot.
Folder move failed. C:\Users\Toshiba\AppData\Roaming\Microsoft\SystemCertificates\My scheduled to be moved on reboot.
Folder move failed. C:\Users\Toshiba\AppData\Roaming\Microsoft\SystemCertificates scheduled to be moved on reboot.
Folder move failed. C:\Users\Toshiba\AppData\Roaming\Microsoft\Protect scheduled to be moved on reboot.
Folder move failed. C:\Users\Toshiba\AppData\Roaming\Microsoft\Crypto scheduled to be moved on reboot.
Folder move failed. C:\Users\Toshiba\AppData\Roaming\Microsoft\Credentials scheduled to be moved on reboot.
Folder move failed. C:\Users\Toshiba\AppData\Roaming\Microsoft scheduled to be moved on reboot.
Folder move failed. C:\Users\Toshiba\AppData\Roaming scheduled to be moved on reboot.

PendingFileRenameOperations files...
File C:\Users\Toshiba\AppData\Roaming\Microsoft\SystemCertificates not found!
File C:\Users\Toshiba\AppData\Roaming\Microsoft\Protect not found!
File C:\Users\Toshiba\AppData\Roaming\Microsoft\Crypto not found!
File C:\Users\Toshiba\AppData\Roaming\Microsoft\Credentials not found!
File C:\Users\Toshiba\AppData\Roaming\Microsoft not found!
File C:\Users\Toshiba\AppData\Roaming not found!

Registry entries deleted on Reboot...

sind die trojaner nun endültig weg ?

liebe grüße
marlen
__________________

Alt 27.07.2012, 12:33   #4
t'john
/// Helfer-Team
 
wie werde ich gvutrojaner endgültig los - Standard

wie werde ich gvutrojaner endgültig los



Sehr gut!

Wie laeuft der Rechner?

1. Schritt
Bitte einen Vollscan mit Malwarebytes Anti-Malware machen und Log posten.
Denk daran, dass Malwarebytes vor jedem Scan manuell aktualisiert werden muss!

Malwarebytes Anti-Malware
- Anwendbar auf Windows 2000, XP, Vista und 7.
- Installiere das Programm in den vorgegebenen Pfad.
- Aktiviere "Komplett Scan durchführen" => Scan.
- Wähle alle verfügbaren Laufwerke (ausser CD/DVD) aus und starte den Scan.
- Funde bitte löschen lassen oder in Quarantäne.
- Wenn der Scan beendet ist, klicke auf "Zeige Resultate".
danach:

2. Schritt

Downloade Dir bitte AdwCleaner auf deinen Desktop.

  • Starte die adwcleaner.exe mit einem Doppelklick.
  • Klicke auf Search.
  • Nach Ende des Suchlaufs öffnet sich eine Textdatei.
  • Poste mir den Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner[R1].txt.
__________________
Mfg, t'john
Das TB unterstützen

Alt 28.07.2012, 12:06   #5
marlenmausi
 
wie werde ich gvutrojaner endgültig los - Standard

wie werde ich gvutrojaner endgültig los



hi t´john,

der pc läuft ohne jegliche einschränkung, schon seit dem das gvusperrbild weg ist.

habe jetzt nochmal den vollscan von malwarebytes Anti-Malware durchlaufen lassen, sieht so aus als wenns die selben funde wie vor der anwendund von otl sind,
hier die logs:

Malwarebytes Anti-Malware (Test) 1.62.0.1300
Malwarebytes : Free Anti-Malware download

Datenbank Version: v2012.07.28.03

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 9.0.8112.16421
Toshiba :: TOSHIBA-PC [Administrator]

Schutz: Aktiviert

27.07.2012 23:47:25
mbam-log-2012-07-27 (23-47-25).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 270298
Laufzeit: 57 Minute(n), 51 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 5
C:\_OTL\MovedFiles\07272012_004248\C_Users\Toshiba\AppData\Local\Temp\fest0r_ot.exe (Spyware.Zbot.DG) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\_OTL\MovedFiles\07272012_004248\C_Users\Toshiba\AppData\Roaming\YBIcZ.exe (Trojan.Agent.SZ) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\_OTL\MovedFiles\07272012_004248\C_Users\Toshiba\AppData\Roaming\Owze\elne.exe (Trojan.Agent.SZ) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\_OTL\MovedFiles\07272012_004248\C_Users\Toshiba\AppData\Roaming\Umdau\koikb.exe (Trojan.Agent.SZ) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\_OTL\MovedFiles\07272012_004248\C_Users\Toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk (Trojan.Ransom.Gen) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)


liebe grüße
marlen


Alt 28.07.2012, 12:11   #6
t'john
/// Helfer-Team
 
wie werde ich gvutrojaner endgültig los - Standard

wie werde ich gvutrojaner endgültig los



Log vom AdwCleaner bitte.
__________________
--> wie werde ich gvutrojaner endgültig los

Alt 28.07.2012, 12:18   #7
marlenmausi
 
wie werde ich gvutrojaner endgültig los - Standard

wie werde ich gvutrojaner endgültig los



so un nun das ergebnis vom adwcleaner-search :

# AdwCleaner v1.703 - Logfile created 07/28/2012 at 01:15:36
# Updated 20/07/2012 by Xplode
# Operating system : Windows 7 Ultimate Service Pack 1 (32 bits)
# User : Toshiba - TOSHIBA-PC
# Running from : C:\Users\Toshiba\Desktop\adwcleaner.exe
# Option [Search]


***** [Services] *****


***** [Files / Folders] *****

Folder Found : C:\Users\Toshiba\AppData\Roaming\Mozilla\Firefox\Profiles\y0vwy0b6.default\extensions\staged

***** [Registry] *****


***** [Registre - GUID] *****

Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16421

[OK] Registry is clean.

-\\ Mozilla Firefox v14.0.1 (de)

Profile name : default
File : C:\Users\Toshiba\AppData\Roaming\Mozilla\Firefox\Profiles\y0vwy0b6.default\prefs.js

[OK] File is clean.

-\\ Google Chrome v [Unable to get version]

File : C:\Users\Toshiba\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [1079 octets] - [28/07/2012 01:15:36]

########## EOF - C:\AdwCleaner[R1].txt - [1207 octets] ##########


danke für die hilfe, weiß ich sehr zu schätzen
bye
marlen

Alt 28.07.2012, 12:18   #8
t'john
/// Helfer-Team
 
wie werde ich gvutrojaner endgültig los - Standard

wie werde ich gvutrojaner endgültig los



Sehr gut!


  • Schließe alle offenen Programme und Browser.
  • Starte die adwcleaner.exe mit einem Doppelklick.
  • Klicke auf Delete.
  • Bestätige jeweils mit Ok.
  • Dein Rechner wird neu gestartet. Nach dem Neustart öffnet sich eine Textdatei.
  • Poste mir den Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner[S1].txt.




danach:


Malware-Scan mit Emsisoft Anti-Malware

Lade die Gratisversion von => Emsisoft Anti-Malware herunter und installiere das Programm.
Lade über Jetzt Updaten die aktuellen Signaturen herunter.
Wähle den Freeware-Modus aus.

Wähle Detail Scan und starte über den Button Scan die Überprüfung des Computers.
Am Ende des Scans nichts loeschen lassen!. Mit Klick auf Bericht speichern das Logfile auf dem Desktop speichern und hier in den Thread posten.

Anleitung: http://www.trojaner-board.de/103809-...i-malware.html
__________________
Mfg, t'john
Das TB unterstützen

Alt 29.07.2012, 11:50   #9
marlenmausi
 
wie werde ich gvutrojaner endgültig los - Standard

wie werde ich gvutrojaner endgültig los



hi t´john,

hier die adwcleaner logdatei:

# AdwCleaner v1.703 - Logfile created 07/28/2012 at 06:56:46
# Updated 20/07/2012 by Xplode
# Operating system : Windows 7 Ultimate Service Pack 1 (32 bits)
# User : Toshiba - TOSHIBA-PC
# Running from : C:\Users\Toshiba\Desktop\adwcleaner.exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****

Folder Deleted : C:\Users\Toshiba\AppData\Roaming\Mozilla\Firefox\Profiles\y0vwy0b6.default\extensions\staged

***** [Registry] *****


***** [Registre - GUID] *****

Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16421

[OK] Registry is clean.

-\\ Mozilla Firefox v14.0.1 (de)

Profile name : default
File : C:\Users\Toshiba\AppData\Roaming\Mozilla\Firefox\Profiles\y0vwy0b6.default\prefs.js

[OK] File is clean.

-\\ Google Chrome v [Unable to get version]

File : C:\Users\Toshiba\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [1208 octets] - [28/07/2012 01:15:36]
AdwCleaner[S1].txt - [1143 octets] - [28/07/2012 06:56:46]

########## EOF - C:\AdwCleaner[S1].txt - [1271 octets] ##########




und die logdatei von emsisoft anti-malware:

Emsisoft Anti-Malware - Version 6.6
Letztes Update: 28.07.2012 23:55:01

Scan Einstellungen:

Scan Methode: Detail Scan
Objekte: Rootkits, Speicher, Traces, C:\
Archiv Scan: An
ADS Scan: An

Scan Beginn: 28.07.2012 23:58:54

C:\_OTL\MovedFiles\07272012_004248\C_Users\Toshiba\AppData\Roaming\zSOJS.exe gefunden: Trojan.Win32.Scar!E2
C:\Users\Default\Desktop\Programas Essenciais\winrar.exe gefunden: Riskware.Hacktool.Patch.winrarsetup!E2
C:\Users\Default\Desktop\Activar o Windows\Crack.rar -> Crack\Remove WAT\RemoveWAT.exe gefunden: HackTool.MSIL!E2
C:\Users\Default\Desktop\Activar o Windows\Windows Loader v1.9.5.rar -> Windows Loader v1.9.5\Windows Loader.exe gefunden: not-a-virus.Hacktool.Windows!E2

Gescannt 537241
Gefunden 4

Scan Ende: 29.07.2012 00:24:51
Scan Zeit: 0:25:57

C:\Users\Default\Desktop\Activar o Windows\Windows Loader v1.9.5.rar -> Windows Loader v1.9.5\Windows Loader.exe Quarantäne not-a-virus.Hacktool.Windows!E2
C:\Users\Default\Desktop\Activar o Windows\Crack.rar -> Crack\Remove WAT\RemoveWAT.exe Quarantäne HackTool.MSIL!E2
C:\Users\Default\Desktop\Programas Essenciais\winrar.exe Quarantäne Riskware.Hacktool.Patch.winrarsetup!E2
C:\_OTL\MovedFiles\07272012_004248\C_Users\Toshiba\AppData\Roaming\zSOJS.exe Quarantäne Trojan.Win32.Scar!E2

Quarantäne 4


ist ja echt ein langer weg mit vielen programmen, hätt ich nicht gedacht
und hut ab das du durch die logdateien durchblickst

vielen dank
mfg

Alt 29.07.2012, 12:04   #10
t'john
/// Helfer-Team
 
wie werde ich gvutrojaner endgültig los - Standard

wie werde ich gvutrojaner endgültig los



Deinstalliere:
Emsisoft Anti-Malware


ESET Online Scanner

Vorbereitung

  • Schließe evtl. vorhandene externe Festplatten und/oder sonstigen Wechselmedien (z. B. evtl. vorhandene USB-Sticks) an den Rechner an.
  • Bitte während des Online-Scans Anti-Virus-Programm und Firewall deaktivieren.
  • Vista/Win7-User: Bitte den Browser unbedingt als Administrator starten.
Los geht's

  • Lade und starte Eset Smartinstaller
  • Haken setzen bei YES, I accept the Terms of Use.
  • Klick auf Start.
  • Haken setzen bei Remove found threads und Scan archives.
  • Klick auf Start.
  • Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Finish drücken.
  • Browser schließen.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (manchmal auch C:\Programme\Eset\log.txt) suchen und mit Deinem Editor öffnen.
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset
__________________
Mfg, t'john
Das TB unterstützen

Alt 29.07.2012, 14:37   #11
marlenmausi
 
wie werde ich gvutrojaner endgültig los - Standard

wie werde ich gvutrojaner endgültig los



hi,
hier die logfile vom ESET Online Scanner:

ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=b557cac3eec1e948a26602d2eaa15f21
# end=finished
# remove_checked=true
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2012-07-28 02:02:47
# local_time=2012-07-29 03:02:47 (+1300, Samoa Normalzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1792 16777215 100 0 603104 603104 0 0
# compatibility_mode=5893 16776573 100 94 0 95114252 0 0
# compatibility_mode=8192 67108863 100 0 0 0 0 0
# scanned=97081
# found=0
# cleaned=0
# scan_time=4706


mfg
marlen

Alt 29.07.2012, 19:02   #12
t'john
/// Helfer-Team
 
wie werde ich gvutrojaner endgültig los - Standard

wie werde ich gvutrojaner endgültig los



Java aktualisieren

Deine Javaversion ist veraltet. Da einige Schaedlinge ueber Java-Exploits in das System eindringen, muss Java aktualisiert werden und alte Versionen muessen vom System entfernt werden, da die alten Versionen ein Sicherheitsrisiko darstellen. Lade JavaRa von SingularLabs herunter und entpacke es auf den Desktop. Nimm die Windows Binary. JavaRA ist geeignet fuer Windows Windows 9x, 2k, XP, Vista, 7. Vista und Windows 7-User muessen die Benuterkontensteuerung deaktivieren, Anleitung siehe unten.


  • Schliesse alle Browserfenster.
  • Doppelklicke die JavaRa.exe, um das Programm zu starten.
  • Die Sprache Deutsch auswaehlen und klicke "Select".
  • Klicke auf Weitere Funktionen, mache Haken bei Unnoetige JRE Dateien loeschen und Sun Download Manager loeschen.
  • Klicke auf Start und jeweils auf Ok/Ja und schliesse das Fenster "Additional Tasks" wieder.
  • Klicke auf aeltere Versionen loeschen, um alte Java-Versionen, die auf dem Rechner installiert sind, zu entfernen.
  • Klicke auf Ja wenn es verlangt wird. Wenn JavaRa fertig, erscheint eine Notiz, dass ein Logfile erstellt wurde, klicke OK.
  • Das Logfile wird im Editor geoeffnet, bitte speichern und spaeter hier posten.
  • Rechner neu starten.[/B]

Downloade nun die aktuelle Offline-Version von Java von Oracle und installiere sie. Achte darauf, eventuell angebotene Toolbars nicht mitzuinstallieren, also waehrend der Installation den Haken bei der Toolbar entfernen.

Dann so einstellen: http://www.trojaner-board.de/105213-...tellungen.html


Vista/Windows 7-User: Benutzerkontensteuerung deaktivieren:

Start => msconfig (unten reinschreiben) => ENTER
Es oeffnet sich das Fenster Systemkonfiguration.
Reiter "Tools" => suchen nach:
Benutzerkontensteuerung deaktivieren => starten => ok
Rechner neu starten.

Nach dem Lauf von JavaRa die Benutzerkontensteuerung wieder aktivieren.
__________________
Mfg, t'john
Das TB unterstützen

Alt 19.08.2012, 18:53   #13
t'john
/// Helfer-Team
 
wie werde ich gvutrojaner endgültig los - Standard

wie werde ich gvutrojaner endgültig los



Fehlende Rückmeldung

Gibt es Probleme beim Abarbeiten obiger Anleitung?

Um Kapazitäten für andere Hilfesuchende freizumachen, lösche ich dieses Thema aus meinen Benachrichtigungen.

Solltest Du weitermachen wollen, schreibe mir eine PN oder eröffne ein neues Thema.
http://www.trojaner-board.de/69886-a...-beachten.html


Hinweis: Das Verschwinden der Symptome bedeutet nicht, dass Dein Rechner sauber ist.
__________________
Mfg, t'john
Das TB unterstützen

Antwort

Themen zu wie werde ich gvutrojaner endgültig los
alcatel, anti-malware, cftmon.lnk, ctfmon.lnk, gestartet, go_0molg.pad, gvu trojaner, gvu trojaner 2.07, gvu trojaner entfernen, gvu trojaner mit webcam, gvu-trojaner, gvutrojaner, gvutrojaner/endgültig loswerden, index, malwarebytes, malwarebytes anti-malware, picasa, quarantäne, reveton.c, safer networking, searchscopes, seite, taskhost.exe, trojanern, unterschiedlich, vollständige, webcam gvu trojaner, webcamfenster



Ähnliche Themen: wie werde ich gvutrojaner endgültig los


  1. Webbrowser: Endgültig Schluss mit RC4
    Nachrichten - 04.09.2015 (0)
  2. GVU Trojaner endgültig entfernen
    Log-Analyse und Auswertung - 24.07.2013 (12)
  3. gvu trojaner endgültig entfernt ?
    Plagegeister aller Art und deren Bekämpfung - 16.06.2013 (14)
  4. Trojaner endgültig entfernen
    Plagegeister aller Art und deren Bekämpfung - 23.01.2013 (9)
  5. Bundestrojaner endgültig entfernen?
    Log-Analyse und Auswertung - 19.01.2013 (6)
  6. gvuTrojaner Windows 7
    Log-Analyse und Auswertung - 16.01.2013 (2)
  7. MyStart Endgültig Löschen
    Plagegeister aller Art und deren Bekämpfung - 23.12.2012 (15)
  8. Adware.Trymedia Trojaner! Wie werde ich ihn endgültig los?
    Plagegeister aller Art und deren Bekämpfung - 21.11.2012 (6)
  9. GVU Trojaner 2.04 endgültig entfernen?
    Plagegeister aller Art und deren Bekämpfung - 26.06.2012 (1)
  10. BKA - Virus endgültig entfernen - Wie?
    Log-Analyse und Auswertung - 12.04.2012 (11)
  11. Laptop endgültig kaputt?
    Alles rund um Windows - 08.02.2012 (7)
  12. Trojanisches Pferd endgültig weg?
    Plagegeister aller Art und deren Bekämpfung - 12.06.2010 (7)
  13. TR/Dropper.Gen - Wie werde ich den Trojaner endgültig los?
    Plagegeister aller Art und deren Bekämpfung - 22.11.2009 (5)
  14. Trojaner endgültig entfernt?
    Log-Analyse und Auswertung - 24.03.2009 (2)
  15. MyWebSearch endgültig Weg?
    Plagegeister aller Art und deren Bekämpfung - 24.10.2008 (0)
  16. Virusprotect endgültig erledigen
    Log-Analyse und Auswertung - 08.02.2008 (1)
  17. Wie werde ich meine Viren, Trojaner endgültig los
    Mülltonne - 08.12.2007 (0)

Zum Thema wie werde ich gvutrojaner endgültig los - hallo, ich habe den gvu-trojaner auf meinem pc, habe ihn jetzt 2mal wegbekommen (so das der pc wieder zu nutzen war) jedoch nicht endgültig, habe desshalb Malwarebytes Anti-Malware runtergeladen und - wie werde ich gvutrojaner endgültig los...
Archiv
Du betrachtest: wie werde ich gvutrojaner endgültig los auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.