| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: qvo6 problemWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
02.05.2013, 17:32
| #1 |
 |  qvo6 problem So problem ist ja nun bekannt! ^^ |
|
02.05.2013, 17:34
| #2 | |
| /// TB-Ausbilder   | qvo6 problemZitat:
 |
|
02.05.2013, 17:35
| #3 |
| /// TB-Ausbilder | qvo6 problem Bei mir haben Penicilin-Spritzen geholfen!
__________________
__________________ |
|
02.05.2013, 17:35
| #4 |
| | qvo6 problem Nein! hatte Smeenk per PN angeschrieben und um Hilfe gebeten! ^^ |
|
02.05.2013, 17:36
| #5 |
| /// TB-Ausbilder | qvo6 problem Seit wann ist Smeenk Arzt?!?
__________________  Digitale Freibeuter gegen Malware! Keine Hilfe per PM! |
|
02.05.2013, 17:37
| #6 |
| | qvo6 problem no comment! Eigentlich ist mir auch egal wer mir bei dem qvo6 Sch... hilft! ABER BITTE HILF MIR JEMAND!!! :-/ |
|
02.05.2013, 17:39
| #7 | |
| /// TB-Ausbilder | qvo6 problemZitat:
Du hast ein Problem, schilderst aber nicht, um was es geht. Ferner postest du keine Logdateien wie eigentlich gewünscht. Es hilft für gewöhnlich derjenige Helfer, der zuerst antwortet... aber die anderen können sich jetzt um dich streiten.  Mir ists vergangen. |
|
02.05.2013, 17:40
| #8 |
| /// Malwareteam / Visitor  | qvo6 problem die Jungs machen dir ein Scherz  Wer hilft? |
|
02.05.2013, 17:40
| #9 |
| | qvo6 problem ja sorry! haben das Smeenk auch geschrieben das ich noch nicht so ein Plan habe mit den Logdateien usw.! |
|
02.05.2013, 17:41
| #10 | |
| /// TB-Ausbilder | qvo6 problemZitat:
Streitet euch drum.  |
|
02.05.2013, 17:42
| #11 |
| /// TB-Ausbilder | qvo6 problem Ah der Doktor ist da ... Mr. Smeenk übernehmen Sie 
__________________ Digitale Freibeuter gegen Malware! Keine Hilfe per PM! |
|
02.05.2013, 17:45
| #12 | |
| /// Malwareteam / Visitor | qvo6 problemZitat:
 Systemscan mit ZOEK Bitte lade die zoek.exe von hier: http://hijackthis.nl/smeenk/
|
|
02.05.2013, 18:16
| #13 |
| | qvo6 problemCode:
ATTFilter Zoek.exe Version 4.0.0.2 Updated 23-04-2013
Tool run by Alex on 02.05.2013 at 18:50:55,49.
Microsoft Windows 7 Professional 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
==== Older Logs ======================
C:\zoek-results02.05.2013-1850.log 321 bytes
==== Deleting CLSID Registry Keys ======================
HKEY_USERS\S-1-5-21-3833738761-3407712013-1824015166-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31ad400d-1b06-4e33-a59a-90c2c140cba0} deleted successfully
HKEY_USERS\S-1-5-21-3833738761-3407712013-1824015166-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{31ad400d-1b06-4e33-a59a-90c2c140cba0} deleted successfully
HKEY_USERS\S-1-5-21-3833738761-3407712013-1824015166-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{ae07101b-46d4-4a98-af68-0333ea26e113} deleted successfully
HKEY_USERS\S-1-5-21-3833738761-3407712013-1824015166-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{ae07101b-46d4-4a98-af68-0333ea26e113} deleted successfully
HKEY_USERS\S-1-5-21-3833738761-3407712013-1824015166-1000\Software\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5} deleted successfully
HKEY_USERS\S-1-5-21-3833738761-3407712013-1824015166-1001\Software\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{31ad400d-1b06-4e33-a59a-90c2c140cba0} deleted successfully
HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{31ad400d-1b06-4e33-a59a-90c2c140cba0} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31ad400d-1b06-4e33-a59a-90c2c140cba0} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31ad400d-1b06-4e33-a59a-90c2c140cba0} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{ae07101b-46d4-4a98-af68-0333ea26e113} deleted successfully
HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{ae07101b-46d4-4a98-af68-0333ea26e113} deleted successfully
==== Deleting CLSID Registry Values ======================
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{ae07101b-46d4-4a98-af68-0333ea26e113} deleted successfully
==== Deleting Services ======================
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\eSafeSvc deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\eSafeSvc deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\Application\eSafeSvc deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\eSafeSvc deleted successfully
==== Deleting Files \ Folders ======================
"C:\Windows\tasks\PC Optimizer Pro64 startups.job" deleted
"C:\END" deleted
"C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\movie2kdownloader@movie2kdownloader.com.xpi" deleted
"C:\Users\Alex\AppData\Local\Smartbar\Application\MACTrackBarLib.dll" deleted
"C:\Users\Alex\AppData\Local\Smartbar\Application\Microsoft.Practices.EnterpriseLibrary.ExceptionHandling.dll" deleted
"C:\Users\Alex\AppData\Local\Smartbar\Application\Microsoft.Practices.EnterpriseLibrary.Logging.dll" deleted
"C:\Users\Alex\AppData\Local\Smartbar\Application\QuickShare.exe" deleted
"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.GUI.Controls.dll" deleted
"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.GUI.Docking.dll" deleted
"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.GUI.MainClient.dll" deleted
"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.GUI.Multimedia.Loader.dll" deleted
"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.BusinessEntities.dll" deleted
"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Core.dll" deleted
"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.EventManager.dll" deleted
"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.Base.dll" deleted
"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.ChromeLocalPlugin.dll" deleted
"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.DefaultBrowser.dll" deleted
"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.FireFoxLocalPlugin.dll" deleted
"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.InternetExplorerLocalPlugin.dll" deleted
"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.ShareManagerLocalPlugin.dll" deleted
"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Utilities.dll" deleted
"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Personalization.BusinessEntities.dll" deleted
"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Personalization.BusinessLogic.dll" deleted
"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Personalization.Common.dll" deleted
"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Personalization.Settings.UserSettingsManager.dll" deleted
"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Resources.AutomaticUpdates.dll" deleted
"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Resources.HistoryAndStatsWrapper.dll" deleted
"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Resources.LanguageSettings.dll" deleted
"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Resources.ProcessDownMonitor.dll" deleted
"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Resources.SetBrowsersSettings.dll" deleted
"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Resources.SetBrowsersSettingsAutoUpdater.dll" deleted
"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Resources.SideBySide.dll" deleted
"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Resources.SocialNetsSharer.dll" deleted
"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Resources.Utilities.dll" deleted
"C:\Users\Alex\AppData\Local\Smartbar\Application\de\Smartbar.Resources.LanguageSettings.resources.dll" deleted
"C:\Program Files (x86)\JDownloader" deleted
"C:\Program Files (x86)\Movie2KDownloader.com" deleted
"C:\Program Files (x86)\Common Files\DVDVideoSoft\TB" deleted
"C:\Program Files (x86)\Common Files\337" deleted
"C:\Program Files (x86)\hdvidcodec.com" deleted
"C:\Program Files (x86)\Gophoto.it" deleted
"C:\Users\Alex\AppData\Roaming\DesktopIconForAmazon" deleted
"C:\Users\Alex\AppData\Roaming\GoforFiles" deleted
"C:\Users\Alex\AppData\Roaming\eIntaller" deleted
"C:\Users\Alex\AppData\Roaming\Babylon" deleted
"C:\ProgramData\APN" deleted
"C:\ProgramData\eSafe" deleted
"C:\ProgramData\Tarma Installer" deleted
"C:\ProgramData\Babylon" deleted
"C:\Users\Alex\AppData\Local\Smartbar" deleted
"C:\Users\Alex\AppData\LocalLow\boost_interprocess" deleted
"C:\Users\Alex\AppData\LocalLow\Delta" deleted
"C:\Users\Alex\AppData\LocalLow\Smartbar" deleted
"C:\Windows\SysWow64\AI_RecycleBin" deleted
"C:\Windows\SysWow64\searchplugins" deleted
"C:\Windows\SysWow64\Extensions" deleted
"C:\Users\Alex\AppData\Local\Smartbar\Application" deleted
"C:\Users\Alex\AppData\Local\Smartbar\Application\de" deleted
==== Files Recently Created / Modified ======================
====== C:\Windows ====
====== C:\Users\Alex\AppData\Local\Temp ====
2013-05-02 07:37:13 3B32CAA07D672F8A2E0DF5CB3A873F45 22704 ----a-w- C:\Users\Alex\AppData\Local\Temp\ESGScanner.sys
2013-05-02 07:35:25 2D3F145B357E282F01ED3B1DD0CD21E1 45937744 ----a-w- C:\Users\Alex\AppData\Local\Temp\SHSetup.exe
2013-05-02 07:02:56 B22171908E066EE0445FCE6C8EA30633 42496 ----a-w- C:\Users\Alex\AppData\Local\Temp\amazoninstallernircmdc.exe
2013-05-02 07:02:54 E0B80E6B894F6267A7E6FD88FBA18136 1258752 ----a-w- C:\Users\Alex\AppData\Local\Temp\amazonicon.exe
2013-05-02 07:02:49 2ABCD4B961A059517A46322B2EC3FB6E 105040 ----a-w- C:\Users\Alex\AppData\Local\Temp\qvo6.exe
2013-05-02 07:02:48 2F46A2E37FB05642A0E859545D6B09F7 854848 ----a-w- C:\Users\Alex\AppData\Local\Temp\IminentSetup_1.0Hnjl76.10.exe
====== C:\Windows\SysWOW64 =====
====== C:\Windows\SysWOW64\drivers =====
====== C:\Windows\Sysnative =====
====== C:\Windows\Sysnative\drivers =====
2013-05-02 07:37:13 3B32CAA07D672F8A2E0DF5CB3A873F45 22704 ----a-w- C:\Windows\Sysnative\drivers\EsgScanner.sys
2013-04-24 13:03:20 B98F8C6E31CD07B2E6F71F7F648E38C0 1656680 ----a-w- C:\Windows\Sysnative\drivers\ntfs.sys
2013-04-11 13:16:38 B4F53BCA4C688FF47F04FA90098F896E 194488 ----a-w- C:\Windows\Sysnative\drivers\nvhda64v.sys
2013-04-11 13:16:38 4EE399576F76D38C04745DB739BBC8C7 11048736 ----a-w- C:\Windows\Sysnative\drivers\nvlddmkm.sys
2013-04-10 09:27:44 8F6322049018354F45F05A2FD2D4E5E0 223752 ----a-w- C:\Windows\Sysnative\drivers\fvevol.sys
====== C:\Windows\Tasks ======
====== C:\Windows\Temp ======
======= C:\Program Files =====
2013-05-02 15:52:52 -------- d-----w- C:\Program Files\Microsoft Silverlight
2013-05-02 07:37:05 -------- d-----w- C:\Program Files\Enigma Software Group
======= C:\Program Files (x86) =====
2013-05-02 15:52:52 -------- d-----w- C:\Program Files (x86)\Microsoft Silverlight
2013-05-02 07:53:51 -------- d-----w- C:\Program Files (x86)\a-squared Free
2013-04-20 09:44:00 -------- d-----w- C:\Program Files (x86)\MyVideoConverter Pro
2013-04-08 17:18:29 -------- d-----w- C:\Program Files (x86)\Ubisoft
2013-04-08 17:07:59 -------- d-----w- C:\Program Files (x86)\Mozilla Thunderbird
2013-04-06 21:30:32 -------- d-----w- C:\Program Files (x86)\Common Files\SWF Studio
======= C: =====
2013-05-02 07:37:33 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\autoexec.bat
====== C:\Users\Alex\AppData\Roaming ======
2013-05-02 07:50:57 -------- d-----w- C:\users\Alex\AppData\Roaming\QuickScan
2013-05-02 07:03:33 -------- d-----w- C:\users\Alex\AppData\Roaming\Meine Traffic
2013-05-02 07:02:58 -------- d-----w- C:\users\Alex\AppData\Local\Temp3dcbaea4ece7ad8ad338c57ba886b7ef
2013-05-02 07:02:57 -------- d-----w- C:\users\Alex\AppData\Local\Temp0454623b0fa3a2887e20b510bda83262
2013-04-30 17:50:31 -------- d-----w- C:\users\Alex\AppData\Roaming\Sierra
2013-04-25 17:26:06 -------- d-----w- C:\users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WOT MODEL VIEWER
2013-04-25 17:25:34 -------- d-----w- C:\users\Alex\AppData\Local\Apps
2013-04-25 17:25:33 -------- d-----w- C:\users\Alex\AppData\Local\Deployment
2013-04-20 15:17:56 -------- d-----w- C:\users\Alex\AppData\Locallow\Sun
2013-04-20 12:32:59 -------- d-----w- C:\users\Alex\AppData\Local\Bus Simulator 2012
2013-04-20 11:38:50 -------- d-----w- C:\users\Alex\AppData\Local\European Bus Simulator 2012
2013-04-20 09:38:38 -------- d-----w- C:\users\Alex\AppData\Roaming\Apowersoft
2013-04-14 12:05:43 -------- d-----w- C:\users\Alex\AppData\Roaming\HdO Adventure
2013-04-14 10:27:59 -------- d-----w- C:\users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenIV
2013-04-14 09:35:16 -------- d-----w- C:\users\Alex\AppData\Local\Rockstar Games
2013-04-09 13:45:44 -------- d-----w- C:\users\Alex\AppData\Roaming\casualArts
2013-04-09 13:09:14 -------- d-----w- C:\users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Rondomedia
2013-04-08 17:36:51 -------- d-----w- C:\users\Alex\AppData\Local\Ubisoft Game Launcher
====== C:\Users\Alex ======
2013-05-02 15:54:00 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2013-05-02 07:54:07 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\a-squared Free
2013-05-02 07:02:57 -------- d-----w- C:\Users\Alex\ChromeExtensions
2013-04-30 17:50:06 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sierra
2013-04-20 11:34:43 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\European Bus Simulator 2012
2013-04-14 15:56:15 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games
2013-04-14 11:58:21 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PurpleHills
2013-04-14 09:30:40 -------- d-sh--w- C:\ProgramData\SecuROM
2013-04-09 13:45:44 -------- d-----w- C:\ProgramData\casualArts
2013-04-09 13:18:42 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Deep Silver
2013-04-08 17:04:25 -------- d--h--w- C:\Users\Alex\InstallAnywhere
2013-04-06 21:30:03 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\You don't know Jack 4
2013-04-06 21:02:13 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MCF4 - Madame Fate
====== C: exe-files ==
2013-05-02 14:46:26 22D3D73B2FA74C01D8D1CBA813D574B8 190411 ----a-w- C:\Windows\6B6C4C461B7E4A419E70ACFBB22B1D81.TMP\WiseCustomCalla37.exe
2013-05-02 14:46:18 25D473D7805261C752DA738B13E35816 185271 ----a-w- C:\Windows\6B6C4C461B7E4A419E70ACFBB22B1D81.TMP\WiseCustomCalla31.exe
2013-05-02 09:22:32 7D3F0E5B2FD0A47D80A94F159F88D2D9 1273071 ----a-w- C:\Users\Alex\AppData\Local\Temp\OCS\Downloads\705f49176579a643660bff5ff6ae3956\2626d97999d3735ba8ac24416416ca3e\tc6_install.exe
2013-05-02 09:21:58 3D5F99A49319F502E02ED4C650951F2A 613216 ----a-w- C:\Users\Alex\Downloads\tc6_install.exe.exe
2013-05-02 09:09:37 EA895AC2B699F79FE594EC70DD4C3D5A 753664 ----a-w- C:\Users\Alex\AppData\Local\Temp\OCS\Downloads\0674e23d6502b36621d489f1b4fbd22a\9c01e5d71e442bf564f271e62b1d5357\AmazonIconInstaller.exe
2013-05-02 09:09:37 9F9AC223B0D6F029DCBFC5584116E96F 3575096 ----a-w- C:\Users\Alex\AppData\Local\Temp\OCS\Downloads\0674e23d6502b36621d489f1b4fbd22a\10806ff987a45c60eaa975e4aab3d1a1\pcspeedup.exe
2013-05-02 09:09:37 2B21AB11874AE169906FEE1DBDE6D3D0 883840 ----a-w- C:\Users\Alex\AppData\Local\Temp\OCS\Downloads\0674e23d6502b36621d489f1b4fbd22a\b95706ead854d0c4800fb934759b1f23\Avira-DE-Cleaner.exe
2013-05-02 09:09:08 5B122B28A113E7CB9250E260EB23D173 339968 ----a-w- C:\Users\Alex\AppData\Local\Temp\OCS\ocs_v7a.exe
2013-05-02 09:09:04 7C46F28F319F1E7407492ADC1D25286D 613952 ----a-w- C:\Users\Alex\Downloads\Avira-DE-Cleaner-Downloader.exe
2013-05-02 07:53:55 AE7A5621F2266519DE90F5C441A54569 101000 ----a-w- C:\Program Files (x86)\a-squared Free\a2upd.exe
2013-05-02 07:53:53 160270FB6706B45392B3C20753BEF1A9 1872320 ----a-w- C:\Program Files (x86)\a-squared Free\a2service.exe
2013-05-02 07:53:52 D0D9ADFC8302CDB7A3FB19CC7BCF448D 1170304 ----a-w- C:\Program Files (x86)\a-squared Free\a2free.exe
2013-05-02 07:53:51 F97A7C12E7E093918B77B18CD1923D1F 903312 ----a-w- C:\Program Files (x86)\a-squared Free\a2cmd.exe
2013-05-02 07:53:51 168531B781D98EB33448008535D6F85E 991144 ----a-w- C:\Program Files (x86)\a-squared Free\unins000.exe
2013-05-02 07:52:41 131195C019BA65272F06B4021BB20606 83704128 ----a-w- C:\Users\Alex\Downloads\a2FreeSetup27.exe
2013-05-02 07:35:25 2D3F145B357E282F01ED3B1DD0CD21E1 45937744 ----a-w- C:\Users\Alex\AppData\Local\Temp\SHSetup.exe
2013-05-02 07:03:19 679961DBF90452F472944013C3B2741B 1429584 ----a-w- C:\Users\Alex\AppData\Local\Temp\Desk365\eInstall\eInstall.exe
2013-05-02 07:02:59 22BA8B50AF5F4FE3C4C8AAF5870B7137 331136 ----a-w- C:\Users\Alex\Desktop\26.01.13\mt\Setup.exe
2013-05-02 07:02:56 E0B80E6B894F6267A7E6FD88FBA18136 1258752 ----a-w- C:\Users\Alex\AppData\Local\Temp\dca5cecae03cf228814e2e7bb36ae1c6\amazonicon.exe
2013-05-02 07:02:56 B22171908E066EE0445FCE6C8EA30633 42496 ----a-w- C:\Users\Alex\AppData\Local\Temp\amazoninstallernircmdc.exe
2013-05-02 07:02:55 2F46A2E37FB05642A0E859545D6B09F7 854848 ----a-w- C:\Users\Alex\AppData\Local\Temp\383c717c3b02aa1e5df72219c11cac6d\IminentSetup_1.0Hnjl76.10.exe
2013-05-02 07:02:55 2ABCD4B961A059517A46322B2EC3FB6E 105040 ----a-w- C:\Users\Alex\AppData\Local\Temp\615740aeb16670034e62aed0449c4dfd\qvo6.exe
2013-05-02 07:02:54 E0B80E6B894F6267A7E6FD88FBA18136 1258752 ----a-w- C:\Users\Alex\AppData\Local\Temp\amazonicon.exe
2013-05-02 07:02:49 2ABCD4B961A059517A46322B2EC3FB6E 105040 ----a-w- C:\Users\Alex\AppData\Local\Temp\qvo6.exe
2013-05-02 07:02:48 2F46A2E37FB05642A0E859545D6B09F7 854848 ----a-w- C:\Users\Alex\AppData\Local\Temp\IminentSetup_1.0Hnjl76.10.exe
2013-05-02 07:01:48 558A71E091285DE63CCBB125B883AABE 1162496 ----a-w- C:\Users\Alex\Downloads\Mein-Traffic-Setup.exe
2013-05-01 10:03:43 0D40E080353F33F469C1295719C22DEE 53135360 ----a-r- C:\Users\Alex\Desktop\Neuer Ordner\FM2013 Crack\Manager13.exe
2013-04-30 19:36:43 8BE25E7B99FEF9792325090A050EF429 503079504 ----a-w- C:\Users\Alex\Downloads\Leisure.Suit.Larrys.Greatest.Hits.and.Misses-GoodOldGames\setup_leisure_suit_larry_2.0.0.15.exe
2013-04-25 17:26:06 C811D9A69FC58DE2B01BD132EF8D54EB 765952 ------w- C:\Users\Alex\AppData\Local\Apps\2.0\RXTHCG3V.QLE\DQADKTY2.YT3\mode..tion_4dc50946373bf705_0002.0000_4c92121947e52818\Model_Viewer.exe
=== C: other files ==
2013-05-02 08:56:30 0AC60EFE7A554E9114AD9598FA143EC2 2230623 ----a-w- C:\Users\Alex\Downloads\WOT Mods\3903-shkurka-dlya-vk3601h-anime-skin-wot-manual.zip
2013-05-02 07:37:33 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\autoexec.bat
2013-05-02 07:37:13 3B32CAA07D672F8A2E0DF5CB3A873F45 22704 ----a-w- C:\Windows\System32\drivers\EsgScanner.sys
2013-05-02 07:37:13 3B32CAA07D672F8A2E0DF5CB3A873F45 22704 ----a-w- C:\Users\Alex\AppData\Local\Temp\ESGScanner.sys
2013-05-02 07:02:58 C191C3FA9BA5FBCBE85A4E3B83002A94 23713 ----a-w- C:\Users\Alex\AppData\Local\Temp\scoped_dir_4056_18093\amazon.crx
2013-05-02 07:02:58 60DD7AD17780A514EBB8DC7FE2B30DC2 2591744 ----a-w- C:\Users\Alex\AppData\Local\Temp\OptimizerPro_new.zip
2013-05-02 07:02:57 C191C3FA9BA5FBCBE85A4E3B83002A94 23713 ----a-w- C:\Users\Alex\ChromeExtensions\mkcedibhemacmilmkpndpkoidlnmgngg\amazon.crx
2013-05-02 07:02:57 C191C3FA9BA5FBCBE85A4E3B83002A94 23713 ----a-w- C:\Users\Alex\AppData\Local\Temp\amazon.crx
2013-05-02 07:02:57 7E75DF97F3D99BFAECE7C19043AA9DAC 4299 ----a-w- C:\Users\Alex\AppData\Local\Temp\amazon.xpi
2013-05-02 07:02:46 CC3CD783263F3B582F6DC509F4B3373B 815948 ----a-w- C:\Users\Alex\AppData\Local\Temp\mt.zip
2013-04-30 10:33:21 9A23FA3EA70AC8EF67FE3A0815C968C6 1805805 ----a-w- C:\Users\Alex\Downloads\WOT Mods\1274-anime-shkurka-dlya-is-8-wot-manual.zip
2013-04-30 10:32:27 ED6BB712190BB3EE14DAE597397AA89F 3796321 ----a-w- C:\Users\Alex\Downloads\WOT Mods\1274-anime-shkurka-dlya-is-8-wot.zip
==== Firefox Extensions ======================
ProfilePath: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\extensions
- Amazon-Icon - %ProfilePath%\extensions\amazon-icon@winload.de
==== Firefox Plugins ======================
==== Chrome Look ======================
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
blaofbhgbmeikidhlkmjhbkbfohpgekf - C:\Program Files (x86)\Movie2KDownloader.com\Movie2KDownloader10.crx[]
idhngdhcfkoamngbedgpaokgjbnpdiji - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx[29.11.2012 21:35]
mkcedibhemacmilmkpndpkoidlnmgngg - C:\Users\Alex\ChromeExtensions\mkcedibhemacmilmkpndpkoidlnmgngg\amazon.crx[02.05.2013 09:02]
nneajnkjbffgblleaoojgaacokifdkhm - C:\Program Files (x86)\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx[07.02.2013 07:47]
pfmopbbadnfoelckkcmjjeaaegjpjjbk - C:\Program Files (x86)\Gophoto.it\gophotoit14.crx[]
HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions
amfclgbdpgndipgoegfpkkgobahigbcl - C:\Users\Alex\AppData\Local\Smartbar/Application\1Extension.crx[]
Last updated at time on date - Alex - Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb
RealDownloader - Alex - Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji
DivX Plus Web Player HTML5 \u003Cvideo\u003E - Alex - Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm
Bitdefender QuickScan - Alex - Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie
Where is my water? - Alex - Default\Extensions\plgellfihbddhjgclldmelbgepdlpapc
==== Set IE to Default ======================
Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="hxxp://www.google.de/"
"Search Page"="hxxp://feed.snap.do/?publisher=QuickObrw&dpid=QuickObrw&co=DE&userid=9f8764bd-c76e-4e3f-9646-4be97ea20f6f&searchtype=ds&q={searchTerms}&installDate=03/04/2013"
"Default_Page_URL"="hxxp://www.qvo6.com/?utm_source=b&utm_medium=wld&from=wld&uid=WDCXWD5000AAKS-00UU3A0_WD-WCAYU600309203092&ts=1367478187"
"Search Bar"="hxxp://feed.snap.do/?publisher=QuickObrw&dpid=QuickObrw&co=DE&userid=9f8764bd-c76e-4e3f-9646-4be97ea20f6f&searchtype=ds&q={searchTerms}&installDate=03/04/2013"
"Use Search Asst"="yes"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="hxxp://www.qvo6.com/?utm_source=b&utm_medium=wld&from=wld&uid=WDCXWD5000AAKS-00UU3A0_WD-WCAYU600309203092&ts=1367478187"
"Start Page"="hxxp://www.qvo6.com/?utm_source=b&utm_medium=wld&from=wld&uid=WDCXWD5000AAKS-00UU3A0_WD-WCAYU600309203092&ts=1367478187"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="hxxp://www.qvo6.com/?utm_source=b&utm_medium=wld&from=wld&uid=WDCXWD5000AAKS-00UU3A0_WD-WCAYU600309203092&ts=1367478187"
"Start Page"="hxxp://www.qvo6.com/?utm_source=b&utm_medium=wld&from=wld&uid=WDCXWD5000AAKS-00UU3A0_WD-WCAYU600309203092&ts=1367478187"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchUrl]
"Default"="hxxp://feed.snap.do/?publisher=QuickObrw&dpid=QuickObrw&co=DE&userid=9f8764bd-c76e-4e3f-9646-4be97ea20f6f&searchtype=ds&q={searchTerms}&installDate=03/04/2013"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\SearchUrl]
"Default"="hxxp://feed.snap.do/?publisher=QuickObrw&dpid=QuickObrw&co=DE&userid=9f8764bd-c76e-4e3f-9646-4be97ea20f6f&searchtype=ds&q={searchTerms}&installDate=03/04/2013"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
"Default"="hxxp://feed.snap.do/?publisher=QuickObrw&dpid=QuickObrw&co=DE&userid=9f8764bd-c76e-4e3f-9646-4be97ea20f6f&searchtype=ds&q={searchTerms}&installDate=03/04/2013"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]
"Default_Search_URL"="hxxp://feed.snap.do/?publisher=QuickObrw&dpid=QuickObrw&co=DE&userid=9f8764bd-c76e-4e3f-9646-4be97ea20f6f&searchtype=ds&q={searchTerms}&installDate=03/04/2013"
"SearchAssistant"="hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=wld&from=wld&uid=WDCXWD5000AAKS-00UU3A0_WD-WCAYU600309203092&ts=4587570"
"CustomizeSearch"="hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=wld&from=wld&uid=WDCXWD5000AAKS-00UU3A0_WD-WCAYU600309203092&ts=4587570"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{006ee092-9658-4fd6-bd8e-a21a348e59f5}"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}] not found
New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="hxxp://go.microsoft.com/fwlink/?LinkId=54896"
"Search Bar"="hxxp://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="hxxp://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="hxxp://www.google.de/"
"Use Search Asst"="no"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="hxxp://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="hxxp://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="hxxp://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="hxxp://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="hxxp://search.msn.com/results.asp?q=%s"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="hxxp://search.msn.com/results.asp?q=%s"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="hxxp://search.msn.com/results.asp?q=%s"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]
"Default_Search_URL"="hxxp://go.microsoft.com/fwlink/?LinkId=54896"
"CustomizeSearch"="hxxp://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm"
"SearchAssistant"="hxxp://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"
==== All HKCU SearchScopes ======================
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"
{33BB0A4E-99AF-4226-BDF6-49120163DE86} Unknown Url="Not_Found"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"
==== Deleting CLSID Registry Keys ======================
HKEY_USERS\S-1-5-21-3833738761-3407712013-1824015166-1000\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} deleted successfully
==== Deleting CLSID Registry Values ======================
==== shortcuts on Users Desktops ======================
C:\Users\Alex\Desktop\Spiele\Driver San Francisco - Verknüpfung.lnk -
C:\Users\Alex\Desktop\Spiele\European Bus Simulator Basic 2012.lnk - D:\Spiele\astragon\European Bus Simulator 2012\Bin32\BusSimulator2012.exe
C:\Users\Alex\Desktop\Spiele\LaunchEFLC - Verknüpfung.lnk -
C:\Users\Alex\Desktop\Spiele\LaunchGTAIV - Verknüpfung.lnk -
C:\Users\Alex\Desktop\Spiele\Lost Horizon.lnk - D:\Spiele\Deep Silver\Lost Horizon\AutoStarter.exe
C:\Users\Alex\Desktop\Spiele\Rockstar Games Social Club.lnk - D:\Spiele\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe
C:\Users\Alex\Desktop\Spiele\SIERW5 - Verknüpfung.lnk -
C:\Users\Alex\Desktop\Spiele\You don't know Jack 4.lnk - D:\Spiele\You don't know Jack 4\YDKJ 4.exe
C:\Users\Alex\Desktop\Spiele\Wimmelbild\FBI - Verknüpfung.lnk -
C:\Users\Alex\Desktop\Spiele\Wimmelbild\Frankenstein - Verknüpfung.lnk -
C:\Users\Alex\Desktop\Spiele\Wimmelbild\MCF4 - Madame Fate.lnk - D:\Spiele\MCF4 - Madame Fate\MadameFate.exe
C:\Users\Alex\Desktop\Spiele\Wimmelbild\Mystery Murders - Jack the Ripper 2.lnk - D:\Spiele\Rondomedia\Mystery Murders - Jack the Ripper 2\jackTheRipper2.exe
C:\Users\Alex\Desktop\Spiele\Wimmelbild\Nemo - Verknüpfung.lnk -
C:\Users\Alex\Desktop\Spiele\Wimmelbild\Profiler - Verknüpfung.lnk -
C:\Users\Alex\Desktop\Spiele\Wimmelbild\TimeMachine - Verknüpfung.lnk -
C:\Users\Alex\Desktop\Spiele\Wimmelbild\Vatican - Verknüpfung.lnk -
C:\Users\UpdatusUser\Desktop\MyVideoConverter Pro.lnk - C:\Program Files (x86)\MyVideoConverter Pro\MyVideoConverter_pro.exe
==== shortcuts on All Users Desktop ======================
C:\Users\Public\Desktop\Emsisoft Anti-Malware.lnk - C:\Program Files (x86)\Emsisoft Anti-Malware\a2start.exe
C:\Users\Public\Desktop\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe hxxp://www.qvo6.com/?utm_source=b&utm_medium=wld&from=wld&uid=WDCXWD5000AAKS-00UU3A0_WD-WCAYU600309203092&ts=1367478187
==== shortcuts in Users Start Menu ======================
C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.qvo6.com/?utm_source=b&utm_medium=wld&from=wld&uid=WDCXWD5000AAKS-00UU3A0_WD-WCAYU600309203092&ts=1367478187
C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.qvo6.com/?utm_source=b&utm_medium=wld&from=wld&uid=WDCXWD5000AAKS-00UU3A0_WD-WCAYU600309203092&ts=1367478187
C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenIV\Command line documentation.lnk - C:\Users\Alex\AppData\Local\New Technology Studio\Apps\OpenIV\command line.txt
C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenIV\Go to OpenIV web site.lnk -
C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenIV\Run OpenIV.lnk - C:\Users\Alex\AppData\Local\New Technology Studio\Apps\OpenIV\OpenIV.exe
C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenIV\Uninstall OpenIV.lnk - C:\Users\Alex\AppData\Local\New Technology Studio\Apps\OpenIV\uninstall.exe -uninstall
C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Rondomedia\Mystery Murders - Jack the Ripper 2\Mystery Murders - Jack the Ripper 2 Uninstaller.lnk - D:\Spiele\Rondomedia\Mystery Murders - Jack the Ripper 2\Uninstall.exe
C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Rondomedia\Mystery Murders - Jack the Ripper 2\Mystery Murders - Jack the Ripper 2.lnk - D:\Spiele\Rondomedia\Mystery Murders - Jack the Ripper 2\jackTheRipper2.exe
==== shortcuts in All Users Start Menu ======================
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live ID.lnk - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\SIGNINOPTIONS.EXE
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\a-squared Free\a-squared Free.lnk - C:\Program Files (x86)\a-squared Free\a2free.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\a-squared Free\a-squared Homepage.lnk - C:\Program Files (x86)\a-squared Free\a-squared homepage.url
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\a-squared Free\Deinstallieren.lnk - C:\Program Files (x86)\a-squared Free\unins000.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\a-squared Free\Scan Berichte.lnk - C:\Users\Alex\Documents\a-squared Free\Reports
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\a-squared Free\Scansets.lnk - C:\Users\Alex\Documents\a-squared Free\Scansets
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Deep Silver\Lost Horizon\Lost Horizon deinstallieren.lnk - C:\Program Files (x86)\InstallShield Installation Information\{850FD908-5381-4D6D-BE6E-8E489B366FFF}\setup.exe -runfromtemp -l0x0407
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Deep Silver\Lost Horizon\Lost Horizon Liesmich-Datei anzeigen.lnk - D:\Spiele\Deep Silver\Lost Horizon\Autostarter\LiesMich.txt
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Deep Silver\Lost Horizon\Lost Horizon starten.lnk - D:\Spiele\Deep Silver\Lost Horizon\Autostarter.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Deep Silver\Lost Horizon\Spieleinstellungen anzeigen.lnk - D:\Spiele\Deep Silver\Lost Horizon\ConfigTool.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX Plus\Codec-Einstellungen.lnk - C:\Program Files (x86)\DivX\DivX Control Panel\DivXControlPanelLauncher.exe /start=decoder
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX Plus\DivX Plus Player.lnk - C:\Program Files (x86)\DivX\DivX Plus Player\DivX Plus Player.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX Plus\DivX Technische Unterstützung.lnk -
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX Plus\Nach Updates suchen.lnk - C:\Program Files (x86)\DivX\DivX Control Panel\DivXControlPanelLauncher.exe /start=update
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX Plus\Registrieren.lnk - C:\Program Files (x86)\DivX\DivX Control Panel\DivXControlPanelLauncher.exe /start=registration
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware\Deinstallieren.lnk - C:\Program Files (x86)\Emsisoft Anti-Malware\unins000.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware\Emsisoft Anti-Malware Wächter.lnk -
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware\Emsisoft Anti-Malware.lnk - C:\Program Files (x86)\Emsisoft Anti-Malware\a2start.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware\Emsisoft HiJackFree.lnk - C:\Program Files (x86)\Emsisoft Anti-Malware\a2HiJackFree.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware\Emsisoft Homepage.lnk - C:\Program Files (x86)\Emsisoft Anti-Malware\Emsisoft.url
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware\Hilfe.lnk - C:\Program Files (x86)\Emsisoft Anti-Malware\de-de.chm
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware\Scan Berichte.lnk - C:\Users\Alex\Documents\Anti-Malware\Reports
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware\Scansets.lnk - C:\Users\Alex\Documents\Anti-Malware\Scansets
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\European Bus Simulator 2012\Manual.lnk - D:\Spiele\astragon\European Bus Simulator 2012\Manual_EuropeanBusSimulator2012_UK.pdf
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\European Bus Simulator 2012\Play European Bus Simulator 2012 Basic.lnk - D:\Spiele\astragon\European Bus Simulator 2012\Bin32\BusSimulator2012.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\European Bus Simulator 2012\Play European Bus Simulator 2012 High.lnk - D:\Spiele\astragon\European Bus Simulator 2012\Bin64\BusSimulator2012.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\European Bus Simulator 2012\Read Me v1.3.1 Update.lnk - D:\Spiele\astragon\European Bus Simulator 2012\Readme_v1_3_1.TXT
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\European Bus Simulator 2012\Uninstall European Bus Simulator 2012.lnk - D:\Spiele\astragon\European Bus Simulator 2012\unins000.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Driver San Francisco.lnk -
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Grand Theft Auto Episodes from Liberty City.lnk -
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Grand Theft Auto IV.lnk -
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Lost Horizon.lnk -
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe hxxp://www.qvo6.com/?utm_source=b&utm_medium=wld&from=wld&uid=WDCXWD5000AAKS-00UU3A0_WD-WCAYU600309203092&ts=1367478187
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MCF4 - Madame Fate\MCF4 - Madame Fate.lnk - D:\Spiele\MCF4 - Madame Fate\MadameFate.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight\Microsoft Silverlight.lnk - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\Silverlight.Configuration.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation\3D Vision\3D Vision Photo Viewer.lnk - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvstview.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation\3D Vision\3D Vision preview pack 1.lnk - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvstlink.exe /show
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation\3D Vision\Disable 3D Vision.lnk - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvstlink.exe /disable
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation\3D Vision\Enable 3D Vision.lnk - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvstlink.exe /enable
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PurpleHills\20.000 Meilen unter dem Meer\20.000 Meilen unter dem Meer deinstallieren.lnk - C:\Windows\SysWOW64\msiexec.exe /x {6692A6CC-6EDA-40C3-8F57-1E8ECD5AE2E0}
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PurpleHills\20.000 Meilen unter dem Meer\20.000 Meilen unter dem Meer.lnk - D:\Spiele\Purplehills\20.000 Meilen unter dem Meer\Nemo.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PurpleHills\FBI\Deinstallieren.lnk - C:\Windows\SysWOW64\msiexec.exe /x {41E21FBD-DE0F-46D9-8B6C-534DD13DBBB6}
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PurpleHills\FBI\FBI.lnk - C:\Windows\Installer\{41E21FBD-DE0F-46D9-8B6C-534DD13DBBB6}\FBI.exe_F902CE676106409181B4C13DA8BF9AC7.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PurpleHills\Frankenstein\Frankenstein deinstallieren.lnk - C:\Windows\SysWOW64\msiexec.exe /x {610B773E-3183-43D5-B01D-862EFF276B81}
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PurpleHills\Frankenstein\Frankenstein.lnk - D:\Spiele\Purplehills\Frankenstein\Frankenstein.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PurpleHills\Profiler\Profiler deinstallieren.lnk - C:\Windows\SysWOW64\msiexec.exe /x {164B5A9F-D9BD-4EC3-880E-61A4E6935EEB}
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PurpleHills\Profiler\Profiler.lnk - D:\Spiele\Purplehills\Profiler\Profiler.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PurpleHills\Secrets of Vatican\Secrets of Vatican deintallieren.lnk - C:\Windows\SysWOW64\msiexec.exe /x {66B76A83-4B3A-4218-82A4-862E26B745CA}
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PurpleHills\Secrets of Vatican\Secrets of Vatican.lnk - D:\Spiele\Purplehills\Secrets of Vatican\Vatican.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PurpleHills\Time Machine\Time Machine deinstallieren.lnk - C:\Windows\SysWOW64\msiexec.exe /x {9F9D845C-A5F0-423B-9820-240771C7645D}
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PurpleHills\Time Machine\Time Machine.lnk - D:\Spiele\Purplehills\Time Machine\TimeMachine.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games\Rockstar Games Social Club.lnk - D:\Spiele\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games\Grand Theft Auto IV\Grand Theft Auto IV.lnk - D:\Spiele\Rockstar Games\Grand Theft Auto IV\LaunchGTAIV.exe -safemode
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games\Grand Theft Auto IV\Lizenz widerrufen.lnk - D:\Spiele\Rockstar Games\Grand Theft Auto IV\LaunchGTAIV.exe /revoke
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sierra\Leisure Suit Larry 7\Leisure Suit Larry 7.lnk - D:\Spiele\Sierra\Leisure Suit Larry 7\SIERW5.EXE
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\You don't know Jack 4\You don't know Jack 4 entfernen.lnk - D:\Spiele\You don't know Jack 4\unins000.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\You don't know Jack 4\You don't know Jack 4.lnk - D:\Spiele\You don't know Jack 4\YDKJ 4.exe
==== shortcuts in Quick Launch ======================
C:\Users\Alex\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\a-squared Free.lnk - C:\Program Files (x86)\a-squared Free\a2free.exe
C:\Users\Alex\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Emsisoft Anti-Malware.lnk - C:\Program Files (x86)\Emsisoft Anti-Malware\a2start.exe
C:\Users\Alex\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe hxxp://www.qvo6.com/?utm_source=b&utm_medium=wld&from=wld&uid=WDCXWD5000AAKS-00UU3A0_WD-WCAYU600309203092&ts=1367478187
C:\Users\Alex\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe hxxp://www.qvo6.com/?utm_source=b&utm_medium=wld&from=wld&uid=WDCXWD5000AAKS-00UU3A0_WD-WCAYU600309203092&ts=1367478187
C:\Users\Alex\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Thunderbird.lnk - C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
C:\Users\Alex\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe hxxp://www.qvo6.com/?utm_source=b&utm_medium=wld&from=wld&uid=WDCXWD5000AAKS-00UU3A0_WD-WCAYU600309203092&ts=1367478187
C:\Users\Alex\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Thunderbird.lnk - C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
==== shortcuts After Repair ======================
C:\Users\Public\Desktop\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk - C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk - C:\Program Files\Internet Explorer\iexplore.exe -extoff
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Alex\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Alex\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\Alex\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==== Deleting Registry Keys ======================
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\blaofbhgbmeikidhlkmjhbkbfohpgekf deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\pfmopbbadnfoelckkcmjjeaaegjpjjbk deleted successfully
HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl deleted successfully
==== Empty IE Cache ======================
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Alex\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
==== Empty FireFox Cache ======================
No FireFox Cache found
==== Empty Chrome Cache ======================
C:\users\Alex\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
==== Empty All Flash Cache ======================
Flash Cache Emptied Successfully
==== Empty All Java Cache ======================
No Java Cache Found
After Reboot
==== Empty Temp Folders ======================
C:\Windows\Temp successfully emptied
C:\Users\Alex\AppData\Local\Temp successfully emptied
==== Empty Recycle Bin ======================
C:\$RECYCLE.BIN successfully emptied
|
|
02.05.2013, 18:35
| #14 |
| /// Malwareteam / Visitor | qvo6 problem Prima 
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
|
|
02.05.2013, 18:47
| #15 |
| | qvo6 problem wenn ich nochmal zoek machen soll, kommt diese Meldung: C:\Users\Alex\AppData\Local\Temp\PEVZ.EXE ist keine zulässige Win32-Anwendung Code:
ATTFilter Zoek.exe Version 4.0.0.2 Updated 23-04-2013
Tool run by Alex on 02.05.2013 at 19:44:44,29.
Microsoft Windows 7 Professional 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
==== Possible Rootkit Infection ======================
C:\Windows\system32\services.exe Possible Infected!
==== Deleting Files \ Folders ======================
==== Startup Registry Enabled ======================
[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"
[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"
[HKEY_USERS\S-1-5-21-3833738761-3407712013-1824015166-1000\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe /autoRun"
"Browser Infrastructure Helper"="C:\Users\Alex\AppData\Local\Smartbar\Application\QuickShare.exe startup"
"MsgCenterExe"="C:\Program Files (x86)\Real\RealPlayer\update\RealOneMessageCenter.exe -osboot"
[HKEY_USERS\S-1-5-21-3833738761-3407712013-1824015166-1001\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"
[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"mctadmin"="C:\Windows\System32\mctadmin.exe"
[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"mctadmin"="C:\Windows\System32\mctadmin.exe"
[HKEY_USERS\S-1-5-21-3833738761-3407712013-1824015166-1001\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"mctadmin"="C:\Windows\System32\mctadmin.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DivXMediaServer"="C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe"
"TkBellExe"="C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe -osboot"
"emsisoft anti-malware"="c:\program files (x86)\emsisoft anti-malware\a2guard.exe /d=60"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe /autoRun"
"Browser Infrastructure Helper"="C:\Users\Alex\AppData\Local\Smartbar\Application\QuickShare.exe startup"
"MsgCenterExe"="C:\Program Files (x86)\Real\RealPlayer\update\RealOneMessageCenter.exe -osboot"
==== Startup Registry Enabled x64 ======================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe -s"
"CmPCIaudio"="C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\CMICNFG3.dll,CMICtrlWnd"
"IntelliType Pro"="C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe"
"IntelliPoint"="C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe"
"MSC"="C:\Program Files\Microsoft Security Client\msseces.exe -hide -runkey"
==== Startup Registry Disabled ======================
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run-]
"Adobe ARM"="\"C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe\""
"TkBellExe"="\"C:\\Program Files (x86)\\Real\\RealPlayer\\update\\realsched.exe\" -osboot"
"UVS11 Preload"="C:\\Program Files (x86)\\Ulead Systems\\Ulead VideoStudio 11\\uvPL.exe"
"DivXUpdate"="\"C:\\Program Files (x86)\\DivX\\DivX Update\\DivXUpdate.exe\" /CHECKNOW"
==== Task Scheduler Jobs ======================
Code:
ATTFilter Zoek.exe Version 4.0.0.2 Updated 23-04-2013
Tool run by Alex on 02.05.2013 at 19:49:30,47.
Microsoft Windows 7 Professional 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
==== Possible Rootkit Infection ======================
C:\Windows\system32\services.exe Possible Infected!
==== Deleting Files \ Folders ======================
==== Startup Registry Enabled ======================
[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"
[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"
[HKEY_USERS\S-1-5-21-3833738761-3407712013-1824015166-1000\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe /autoRun"
"Browser Infrastructure Helper"="C:\Users\Alex\AppData\Local\Smartbar\Application\QuickShare.exe startup"
"MsgCenterExe"="C:\Program Files (x86)\Real\RealPlayer\update\RealOneMessageCenter.exe -osboot"
[HKEY_USERS\S-1-5-21-3833738761-3407712013-1824015166-1001\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"
[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"mctadmin"="C:\Windows\System32\mctadmin.exe"
[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"mctadmin"="C:\Windows\System32\mctadmin.exe"
[HKEY_USERS\S-1-5-21-3833738761-3407712013-1824015166-1001\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"mctadmin"="C:\Windows\System32\mctadmin.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DivXMediaServer"="C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe"
"TkBellExe"="C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe -osboot"
"emsisoft anti-malware"="c:\program files (x86)\emsisoft anti-malware\a2guard.exe /d=60"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe /autoRun"
"Browser Infrastructure Helper"="C:\Users\Alex\AppData\Local\Smartbar\Application\QuickShare.exe startup"
"MsgCenterExe"="C:\Program Files (x86)\Real\RealPlayer\update\RealOneMessageCenter.exe -osboot"
==== Startup Registry Enabled x64 ======================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe -s"
"CmPCIaudio"="C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\CMICNFG3.dll,CMICtrlWnd"
"IntelliType Pro"="C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe"
"IntelliPoint"="C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe"
"MSC"="C:\Program Files\Microsoft Security Client\msseces.exe -hide -runkey"
==== Startup Registry Disabled ======================
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run-]
"Adobe ARM"="\"C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe\""
"TkBellExe"="\"C:\\Program Files (x86)\\Real\\RealPlayer\\update\\realsched.exe\" -osboot"
"UVS11 Preload"="C:\\Program Files (x86)\\Ulead Systems\\Ulead VideoStudio 11\\uvPL.exe"
"DivXUpdate"="\"C:\\Program Files (x86)\\DivX\\DivX Update\\DivXUpdate.exe\" /CHECKNOW"
==== Task Scheduler Jobs ======================
==== Chrome Look ======================
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
idhngdhcfkoamngbedgpaokgjbnpdiji - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx[29.11.2012 21:35]
mkcedibhemacmilmkpndpkoidlnmgngg - C:\Users\Alex\ChromeExtensions\mkcedibhemacmilmkpndpkoidlnmgngg\amazon.crx[02.05.2013 09:02]
nneajnkjbffgblleaoojgaacokifdkhm - C:\Program Files (x86)\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx[07.02.2013 07:47]
==== Chrome Fix ======================
C:\Users\Alex\ChromeExtensions\mkcedibhemacmilmkpndpkoidlnmgngg\amazon.crx deleted successfully
==== Deleting CLSID Registry Keys ======================
HKEY_USERS\S-1-5-21-3833738761-3407712013-1824015166-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3049C3E9-B461-4BC5-8870-4C09146192CA} deleted successfully
HKEY_USERS\S-1-5-21-3833738761-3407712013-1824015166-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3049C3E9-B461-4BC5-8870-4C09146192CA} deleted successfully
HKEY_USERS\S-1-5-21-3833738761-3407712013-1824015166-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{326E768D-4182-46FD-9C16-1449A49795F4} deleted successfully
HKEY_USERS\S-1-5-21-3833738761-3407712013-1824015166-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{326E768D-4182-46FD-9C16-1449A49795F4} deleted successfully
HKEY_USERS\S-1-5-21-3833738761-3407712013-1824015166-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9030D464-4C02-4ABF-8ECC-5164760863C6} deleted successfully
HKEY_USERS\S-1-5-21-3833738761-3407712013-1824015166-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9030D464-4C02-4ABF-8ECC-5164760863C6} deleted successfully
HKEY_USERS\S-1-5-21-3833738761-3407712013-1824015166-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{18DF081C-E8AD-4283-A596-FA578C2EBDC3} deleted successfully
HKEY_USERS\S-1-5-21-3833738761-3407712013-1824015166-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{18DF081C-E8AD-4283-A596-FA578C2EBDC3} deleted successfully
HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{3049C3E9-B461-4BC5-8870-4C09146192CA} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{3049C3E9-B461-4BC5-8870-4C09146192CA} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA} deleted successfully
HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{326E768D-4182-46FD-9C16-1449A49795F4} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{9030D464-4C02-4ABF-8ECC-5164760863C6} deleted successfully
HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{9030D464-4C02-4ABF-8ECC-5164760863C6} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6} deleted successfully
HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{18DF081C-E8AD-4283-A596-FA578C2EBDC3} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3} deleted successfully
HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{3049C3E9-B461-4BC5-8870-4C09146192CA} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{3049C3E9-B461-4BC5-8870-4C09146192CA} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA} deleted successfully
==== Deleting CLSID Registry Values ======================
HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\URLSearchHooks\{CFBFAE00-17A6-11D0-99CB-00C04FD64497} deleted successfully
HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\URLSearchHooks\{CFBFAE00-17A6-11D0-99CB-00C04FD64497} deleted successfully
HKEY_USERS\S-1-5-21-3833738761-3407712013-1824015166-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\{CFBFAE00-17A6-11D0-99CB-00C04FD64497} deleted successfully
HKEY_USERS\S-1-5-21-3833738761-3407712013-1824015166-1001\Software\Microsoft\Internet Explorer\URLSearchHooks\{CFBFAE00-17A6-11D0-99CB-00C04FD64497} deleted successfully
==== Deleting Registry Keys ======================
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\mkcedibhemacmilmkpndpkoidlnmgngg deleted successfully
Code:
ATTFilter # AdwCleaner v2.300 - Datei am 02/05/2013 um 19:53:58 erstellt
# Aktualisiert am 28/04/2013 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzer : Alex - PEACHY
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\Alex\Desktop\adwcleaner.exe
# Option [Löschen]
**** [Dienste] ****
***** [Dateien / Ordner] *****
Datei Gelöscht : C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Startfenster.lnk
Ordner Gelöscht : C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\hdvidcodec.com
***** [Registrierungsdatenbank] *****
Daten Gelöscht : HKLM\...\StartMenuInternet\Google Chrome [(Default)] = "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" hxxp://www.qvo6.com/?utm_source=b&utm_medium=wld&from=wld&uid=WDCXWD5000AAKS-00UU3A0_WD-WCAYU600309203092&ts=1367478187
Daten Gelöscht : HKLM\...\StartMenuInternet\IEXPLORE.EXE [(Default)] = C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.qvo6.com/?utm_source=b&utm_medium=wld&from=wld&uid=WDCXWD5000AAKS-00UU3A0_WD-WCAYU600309203092&ts=1367478187
Schlüssel Gelöscht : HKCU\Software\1ClickDownload
Schlüssel Gelöscht : HKCU\Software\DataMngr
Schlüssel Gelöscht : HKCU\Software\Iminent
Schlüssel Gelöscht : HKCU\Software\InstallCore
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\pc optimizer pro
Schlüssel Gelöscht : HKCU\Software\SmartBar
Schlüssel Gelöscht : HKCU\Software\SmartbarBackup
Schlüssel Gelöscht : HKCU\Software\SmartbarLog
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\d0dad1b538ea17
Schlüssel Gelöscht : HKLM\Software\Babylon
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\IESmartBar.BandObjectAttribute
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\IESmartBar.BHO
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\IESmartBar.DockingPanel
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\IESmartBar.IESmartBar
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\IESmartBar.IESmartBarBandObject
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\IESmartBar.SmartbarDisplayState
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\IESmartBar.SmartbarMenuForm
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
Schlüssel Gelöscht : HKLM\Software\DataMngr
Schlüssel Gelöscht : HKLM\Software\Desksvc
Schlüssel Gelöscht : HKLM\Software\eSafeSecControl
Schlüssel Gelöscht : HKLM\Software\Iminent
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\WajamUpdater_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\WajamUpdater_RASMANCS
Schlüssel Gelöscht : HKLM\Software\qvo6Software
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\1ClickDownload
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\eSafeSecControl
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Tarma Installer
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Browser Infrastructure Helper]
***** [Internet Browser] *****
-\\ Internet Explorer v10.0.9200.16537
Ersetzt : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Default_Page_URL] = hxxp://www.qvo6.com/?utm_source=b&utm_medium=wld&from=wld&uid=WDCXWD5000AAKS-00UU3A0_WD-WCAYU600309203092&ts=1367478187 --> hxxp://www.google.com
Ersetzt : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.qvo6.com/?utm_source=b&utm_medium=wld&from=wld&uid=WDCXWD5000AAKS-00UU3A0_WD-WCAYU600309203092&ts=1367478187 --> hxxp://www.google.com
-\\ Google Chrome v26.0.1410.64
Datei : C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Preferences
[OK] Die Datei ist sauber.
*************************
AdwCleaner[S1].txt - [15349 octets] - [02/05/2013 19:53:58]
########## EOF - C:\AdwCleaner[S1].txt - [15410 octets] ##########
|
|
| Themen zu qvo6 problem |
| proble, problem, qvo6 virus google chrome |
