![]() |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Laptop mit Windows 8 64 bit - RegClean Pro entfernenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() |
| |
| | #1 |
| /// Winkelfunktion /// TB-Süch-Tiger™ ![]() ![]() ![]() ![]() ![]() ![]() | Laptop mit Windows 8 64 bit - RegClean Pro entfernenFixen mit OTL
Code:
ATTFilter :Files
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Toolbar4\{977AE9CC-AF83-45E8-9E03-E2798216E2D5}\IMinent_Toolbar.crc
C:\Users\Manz\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_search.iminent.com_0.localstorage
C:\Users\Manz\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_search.iminent.com_0.localstorage-journal
C:\Users\Manz\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\EQ3307AN\search.iminent[1].xml
C:\Users\Manz\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.delta-search.com_0.localstorage
C:\Users\Manz\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.delta-search.com_0.localstorage-journal
C:\Users\Manz\AppData\Roaming\Omiga Plus
C:\Users\Public\Desktop\RegClean Pro.lnk
C:\Windows\Prefetch\REGCLEANPRO.EXE-F0AFF227.pf
C:\Windows\System32\Tasks\RegClean Pro
C:\Windows\System32\Tasks\RegClean Pro_UPDATES
C:\Windows\Tasks\RegClean Pro_UPDATES.job
ipconfig /flushdns /c
:Commands
[purity]
[emptytemp]
[resethosts]
__________________ Logfiles bitte immer in CODE-Tags posten |
| | #2 |
![]() ![]() | Laptop mit Windows 8 64 bit - RegClean Pro entfernen OTL-Log
__________________Code:
ATTFilter All processes killed
========== FILES ==========
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Toolbar4\{977AE9CC-AF83-45E8-9E03-E2798216E2D5}\IMinent_Toolbar.crc moved successfully.
C:\Users\Manz\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_search.iminent.com_0.localstorage moved successfully.
C:\Users\Manz\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_search.iminent.com_0.localstorage-journal moved successfully.
C:\Users\Manz\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\EQ3307AN\search.iminent[1].xml moved successfully.
C:\Users\Manz\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.delta-search.com_0.localstorage moved successfully.
C:\Users\Manz\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.delta-search.com_0.localstorage-journal moved successfully.
C:\Users\Manz\AppData\Roaming\Omiga Plus\wp folder moved successfully.
C:\Users\Manz\AppData\Roaming\Omiga Plus\sysicons folder moved successfully.
C:\Users\Manz\AppData\Roaming\Omiga Plus\icons folder moved successfully.
C:\Users\Manz\AppData\Roaming\Omiga Plus\app\ico folder moved successfully.
C:\Users\Manz\AppData\Roaming\Omiga Plus\app\config\42 folder moved successfully.
C:\Users\Manz\AppData\Roaming\Omiga Plus\app\config\41 folder moved successfully.
C:\Users\Manz\AppData\Roaming\Omiga Plus\app\config\4 folder moved successfully.
C:\Users\Manz\AppData\Roaming\Omiga Plus\app\config\39 folder moved successfully.
C:\Users\Manz\AppData\Roaming\Omiga Plus\app\config\36 folder moved successfully.
C:\Users\Manz\AppData\Roaming\Omiga Plus\app\config\35 folder moved successfully.
C:\Users\Manz\AppData\Roaming\Omiga Plus\app\config\3 folder moved successfully.
C:\Users\Manz\AppData\Roaming\Omiga Plus\app\config\1 folder moved successfully.
C:\Users\Manz\AppData\Roaming\Omiga Plus\app\config folder moved successfully.
C:\Users\Manz\AppData\Roaming\Omiga Plus\app folder moved successfully.
C:\Users\Manz\AppData\Roaming\Omiga Plus folder moved successfully.
File\Folder C:\Users\Public\Desktop\RegClean Pro.lnk not found.
C:\Windows\Prefetch\REGCLEANPRO.EXE-F0AFF227.pf moved successfully.
File\Folder C:\Windows\System32\Tasks\RegClean Pro not found.
File\Folder C:\Windows\System32\Tasks\RegClean Pro_UPDATES not found.
C:\Windows\Tasks\RegClean Pro_UPDATES.job moved successfully.
< ipconfig /flushdns /c >
Windows-IP-Konfiguration
Der DNS-Aufl”sungscache wurde geleert.
C:\Users\Manz\Desktop\cmd.bat deleted successfully.
C:\Users\Manz\Desktop\cmd.txt deleted successfully.
========== COMMANDS ==========
[EMPTYTEMP]
User: All Users
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
User: Manz
->Temp folder emptied: 694694956 bytes
->Temporary Internet Files folder emptied: 171868806 bytes
->FireFox cache emptied: 22144198 bytes
->Google Chrome cache emptied: 359386083 bytes
->Flash cache emptied: 13770 bytes
User: Public
User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 3457592 bytes
%systemroot%\System32 (64bit) .tmp files removed: 7193352 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 174030111 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 128 bytes
RecycleBin emptied: 0 bytes
Total Files Cleaned = 1.366,00 mb
File move failed. C:\Windows\System32\drivers\etc\Hosts scheduled to be moved on reboot.
Error: Unble to create default HOSTS file!
OTL by OldTimer - Version 3.2.69.0 log created on 06182013_204448
Files\Folders moved on Reboot...
C:\Users\Manz\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully.
File move failed. C:\Windows\temp\lm\Manz\aipflib.log scheduled to be moved on reboot.
File move failed. C:\Windows\temp\lm\Manz\LMutilps32.log scheduled to be moved on reboot.
File move failed. C:\Windows\temp\lm\dsiwmis.log scheduled to be moved on reboot.
File move failed. C:\Windows\System32\drivers\etc\Hosts scheduled to be moved on reboot.
PendingFileRenameOperations files...
Registry entries deleted on Reboot...
Ich habe sie nach dem der OTL fertig war mit dem Editor geöffnet (Habe nichts daran geändert.). Meiner Ansicht nach ist sie unauffällig. Hänge sie zur Sicherheit noch hier mit an. HOSTS-Datei Code:
ATTFilter # Copyright (c) 1993-2009 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host
# localhost name resolution is handled within DNS itself.
# 127.0.0.1 localhost
# ::1 localhost
|
![]() |
| Themen zu Laptop mit Windows 8 64 bit - RegClean Pro entfernen |
| 64 bit, adware.domaiq, adware/domaiq.bn, adware/domaiq.gk, adware/installbrain.ak, adware/pricepeep.k, bereits, defogger, entferne, entfernen, programfilesdir/exes.zip, programfilesdir/launcher.exe, programfilesdir/pricepeep.dll, regclean, regclean pro, regclean pro entfernen, threads, windows, windows 8, windows 8 64, windows 8 64 bit |