![]() |
| |||||||
Log-Analyse und Auswertung: QV 06 und Spyhunter 4 auf meinem Rechner...Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
| | #1 |
| | QV 06 und Spyhunter 4 auf meinem Rechner... Moin zusammen, Ihr könntet meine Rettung sein...in schlafduseliger dämlichkeit lade ich mir gestern Abend einen angeblich sauberen Kartensatz Seekarten runter mit einem Programm namens FT Downloader....und fange mir QV06 ein...im Anschluss in meisterlicher Glanzleistung bin ich noch auf spyhunter 4 reingefallen. Ich habe gerade nach einem Check mit Hitman Pro ( hxxp://blog.botfrei.de/2013/05/was-mache-ich-bei-einer-zeuszbot-infektion/ ) habe ich eine Menge Adware entfernen lassen: Code:
ATTFilter HitmanPro 3.7.6.201
www.hitmanpro.com
Computer name . . . . : BONG-PC
Windows . . . . . . . : 6.1.1.7601.X64/4
User name . . . . . . : bong-PC\bong
UAC . . . . . . . . . : Enabled
License . . . . . . . : Trial (30 days left)
Scan date . . . . . . : 2013-07-04 09:45:40
Scan mode . . . . . . : Normal
Scan duration . . . . : 1m 48s
Disk access mode . . : Direct disk access (SRB)
Cloud . . . . . . . . : Internet
Reboot . . . . . . . : No
Threats . . . . . . . : 20
Traces . . . . . . . : 306
Objects scanned . . . : 1.568.518
Files scanned . . . . : 69.206
Remnants scanned . . : 511.040 files / 988.272 keys
Malware _____________________________________________________________________
C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\WebCakesetup[1].exe
Size . . . . . . . : 1.212.288 bytes
Age . . . . . . . : 0.7 days (2013-07-03 18:03:46)
Entropy . . . . . : 8.0
SHA-256 . . . . . : 02E10E9B754D5C283066180E5D651335A1706841362C6F7721A6C50CFD73B7A2
Product . . . . . : WebCake
Publisher . . . . : WebCake LLC
Description . . . : Installer
Version . . . . . : 2013.6.20.1708
Copyright . . . . : Copyright (c) 2013 WebCake LLC. All rights reserved.
RSA Key Size . . . : 2048
Source URL . . . . : hxxp://dl-cdn.getwebcake.com/install/v8/WebCakesetup.exe
Authenticode . . . : Valid
> Ikarus . . . . . . : AdWare.Yontoo!IK
Fuzzy . . . . . . : 103.0
Forensic Cluster
-174.0s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LMATGQMO\activityfeed[1]
-173.9s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\GIF[1]
-173.6s C:\Users\bong\AppData\Local\Spotify\Storage\26\26969eacefc332456ceb2a2e1201c044db2f3410.file
-172.7s C:\Users\bong\AppData\Local\Spotify\Storage\5c\5cd0b1a1fd4d1d9c17634b213fd4519b205a55d9.file
-161.0s C:\Users\bong\AppData\Local\Spotify\Storage\e1\e1db69d5ec3bdde01039eb9f4646c9c0d028c42b.file
-157.7s C:\Users\bong\AppData\Local\Spotify\Storage\53\5324735d21581ef20de644bbe10e64cf695e5a5a.file
-154.6s C:\$Recycle.Bin\S-1-5-21-1864449660-13589033-3980891257-1000\$R6I6FRL.lnk
-154.6s C:\$Recycle.Bin\S-1-5-21-1864449660-13589033-3980891257-1000\$R8G623C.com\
-154.6s C:\$Recycle.Bin\S-1-5-21-1864449660-13589033-3980891257-1000\$R8G623C.com\FTDownloader.lnk
-154.0s C:\Users\bong\AppData\Local\Spotify\Storage\5f\5fdb52d8bb5696bfddb55d8005918f071430e55f.file
-152.7s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V39NH6BT\FTDownloader[1].exe
-137.5s C:\Users\bong\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9
-137.5s C:\Users\bong\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9
-137.1s C:\ProgramData\Microsoft\Microsoft Antimalware\Scans\History\Results\Resource\{DBBE0AEF-CB59-426E-8467-5CB0AC4841F0}
-136.8s C:\Users\bong\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\1F39B5CFACECFDE48DB25BCA2231FAC6_82E8352AAE480E73671F10D8A0421CE6
-136.8s C:\Users\bong\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\1F39B5CFACECFDE48DB25BCA2231FAC6_82E8352AAE480E73671F10D8A0421CE6
-135.4s C:\Users\bong\AppData\Local\PutLockerDownloader\
-135.4s C:\Users\bong\AppData\Local\PutLockerDownloader\FTDownloader.exe_Url_pbohkzvgtsuxit2rcc3uu50tvv1mqx1b\
-135.4s C:\Users\bong\AppData\Local\PutLockerDownloader\FTDownloader.exe_Url_pbohkzvgtsuxit2rcc3uu50tvv1mqx1b\1.1.1.1\
-135.4s C:\Users\bong\AppData\Local\PutLockerDownloader\FTDownloader.exe_Url_pbohkzvgtsuxit2rcc3uu50tvv1mqx1b\1.1.1.1\user.config
-129.8s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VPF6SSX3\rebrand_style[1].css
-129.6s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LMATGQMO\download[1].js
-129.5s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\jquery-1.8.3.min[1].js
-129.3s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\jquery-ui-1.8.23.custom.min[1].js
-129.0s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V39NH6BT\jquery-ui-1.8.4.custom[1].css
-129.0s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VPF6SSX3\icon_close[1].png
-128.9s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LMATGQMO\premium[1].css
-128.8s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V39NH6BT\jQueryRotate.2.2[1].js
-128.6s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VPF6SSX3\bg_arrow_down[1].png
-128.6s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LMATGQMO\bg_pointer2[1].png
-128.5s C:\Windows\Prefetch\FTDOWNLOADER.EXE-6E692261.pf
-127.9s C:\Users\bong\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\4302E4BD4246B8416A3626782DD3C8B9_E59C93B2413902CF7F9DD030C2CF42A0
-127.9s C:\Users\bong\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\4302E4BD4246B8416A3626782DD3C8B9_E59C93B2413902CF7F9DD030C2CF42A0
-127.8s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\script[1].js
-127.7s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V39NH6BT\bg_header[1].gif
-127.7s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VPF6SSX3\bg_lang_switcher[1].gif
-127.6s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LMATGQMO\icon_downloader_medium[1].png
-127.6s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\share1[1].js
-127.5s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V39NH6BT\bg_btn_round[1].png
-127.5s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VPF6SSX3\img_sigmal_premium[1].jpg
-127.4s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VPF6SSX3\pay[1].htm
-127.4s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LMATGQMO\bg_logo[1].gif
-127.4s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\bg_lang_arrow[1].gif
-127.3s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V39NH6BT\bg_langs[1].gif
-127.3s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LMATGQMO\img_sigmal_free[1].jpg
-127.2s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\inst_forex_724x105[1].png
-127.2s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\bg_btn[1].png
-127.1s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V39NH6BT\bg_btn_double_fon2[1].png
-127.1s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VPF6SSX3\bg_pnl_header[1].png
-127.0s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LMATGQMO\br_num_2[1].gif
-127.0s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V39NH6BT\br_num_3[1].gif
-126.9s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VPF6SSX3\res_mail[1].gif
-126.9s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LMATGQMO\bg_pnl[1].gif
-126.9s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\bg_pnl_round[1].gif
-126.8s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V39NH6BT\br_num_1[1].gif
-126.7s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VPF6SSX3\bg_pnl_round_rb[1].gif
-126.7s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LMATGQMO\bg_pnl_round_lt[1].gif
-126.7s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\img_monline[1].png
-126.6s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V39NH6BT\fstdata_sub[1].js
-126.5s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VPF6SSX3\draw_stat[1].js
-126.5s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LMATGQMO\jquery.cookie[1].js
-126.5s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\jquery.json-2.4.min[1].js
-126.4s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V39NH6BT\img_step_1[1].png
-126.4s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VPF6SSX3\img_step_2[1].png
-126.3s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LMATGQMO\img_step_3[1].png
-126.2s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\index[1].htm
-126.2s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\analytics[1].js
-126.2s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\we_pay_grey_wide[1].png
-126.2s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\blue_rus[1].gif
-126.1s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V39NH6BT\watch[1].js
-126.1s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V39NH6BT\jspimggen[1].png
-126.0s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VPF6SSX3\ui-bg_highlight-soft_100_eeeeee_1x100[1].png
-125.9s C:\Users\bong\AppData\Roaming\Microsoft\Windows\Cookies\VBUTQETJ.txt
-125.9s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LMATGQMO\collect[1].gif
-125.8s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VPF6SSX3\device[1].js
-125.8s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LMATGQMO\jspimggen[1].htm
-125.3s C:\Users\bong\AppData\Roaming\Microsoft\Windows\Cookies\QPG59SRF.txt
-123.7s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V39NH6BT\top_slider[1].js
-123.4s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VPF6SSX3\script[1].js
-123.2s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LMATGQMO\collect[2].gif
-123.2s C:\Users\bong\AppData\Roaming\Microsoft\Windows\Cookies\UP7N4ZRS.txt
-123.2s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V39NH6BT\counter[1].htm
-123.1s C:\Users\bong\AppData\Roaming\Microsoft\Windows\Cookies\5HQ1ALTF.txt
-123.0s C:\Users\bong\AppData\Roaming\Microsoft\Windows\Cookies\9T20NCB1.txt
-122.9s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VPF6SSX3\pay[2].htm
-122.8s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VPF6SSX3\bg_grads[1].png
-122.8s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LMATGQMO\bg_slider[1].png
-122.8s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\icons_paym[1].png
-122.5s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V39NH6BT\index[1].htm
-122.3s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LMATGQMO\main[1].css
-122.1s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\jquery-1.7.2.min[1].js
-122.1s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\msn[1].js
-122.0s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V39NH6BT\schliessen_button[1].png
-121.9s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VPF6SSX3\letitbit[1].jpg
-121.8s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LMATGQMO\logos_provider_0001_telekom[1].png
-121.7s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\logos_provider_0000_vodafone[1].png
-121.6s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V39NH6BT\logos_provider_0003_o2[1].png
-121.6s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V39NH6BT\logos_provider_0002_e-plus[1].png
-121.5s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VPF6SSX3\logos_provider_0004_mobilcom[1].png
-121.4s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LMATGQMO\grauer_verlauf_hintergrund[1].png
-121.4s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LMATGQMO\verlauf_schwarz[1].png
-121.3s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VPF6SSX3\gradient_button_one_line[1].jpg
-121.3s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\fade_grauer_verlauf_hintergrund[1].png
-121.2s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V39NH6BT\verlauf_grau[1].png
-121.2s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VPF6SSX3\button-bestellen_grey[1].png
-121.2s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LMATGQMO\check_richtig[1].png
-103.5s C:\ProgramData\Microsoft\Microsoft Antimalware\Scans\History\Results\Resource\{D8C32CE2-83CA-4766-A6EB-45201D30AB40}
-100.2s C:\Windows\Prefetch\FLTEXTSETUP.EXE-2919EFFC.pf
-98.8s C:\ProgramData\Microsoft\Microsoft Antimalware\Scans\History\Results\Resource\{10791706-FEEA-4150-A371-D87D6587C775}
-90.5s C:\Windows\Prefetch\FTDOWNLOADERIE.EXE-7F56708F.pf
-89.6s C:\Users\bong\AppData\Local\Temp\FTdownloader V4.0Installer_1372867335.log
-88.5s C:\ProgramData\Microsoft\Microsoft Antimalware\Scans\History\Results\Resource\{AC861EDD-3458-46D3-A42C-5575099F2DBA}
-86.7s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\installer[1].gif
-85.5s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V39NH6BT\monetization[1].gif
-81.1s C:\Windows\Prefetch\VSCLHGE.EXE-C23780D8.pf
-79.3s C:\ProgramData\Microsoft\Microsoft Antimalware\Scans\History\Results\Resource\{C64E6143-3368-4986-A0CB-697567C09FDC}
-77.3s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VPF6SSX3\manifest[1].xml
-76.9s C:\ProgramData\Microsoft\Microsoft Antimalware\Scans\History\Results\Resource\{E0F2A988-3273-48C4-93F6-6DF75F92BEBF}
-73.4s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LMATGQMO\app_code[1].js
-71.1s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\bg_code[1].js
-70.9s C:\Windows\Prefetch\FTDOWNLOADER V4.0-CODEDOWNLOA-2E5EAC2B.pf
-70.7s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V39NH6BT\plugins[1].json
-68.7s C:\Windows\Prefetch\PHDSETUP.EXE-E3A8917A.pf
-67.4s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VPF6SSX3\CrossriderAppUtils[1].js
-67.0s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LMATGQMO\CrossriderUtils[1].js
-66.7s C:\Users\bong\AppData\Local\Temp\Plus-HD-2.2Installer_1372867359.log
-66.7s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\jQuery[1].js
-65.4s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\installer[2].gif
-65.3s C:\ProgramData\Microsoft\Microsoft Antimalware\Scans\History\Results\Resource\{4CDE7765-AE2E-48C0-82FC-D119132DF7C1}
-65.2s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V39NH6BT\monetization[2].gif
-64.3s C:\Users\bong\AppData\Roaming\Mozilla\Firefox\Profiles\g1n15s23.default\prefs-1.js
-57.0s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VPF6SSX3\base[1].js
-57.0s C:\Windows\Prefetch\WOCTNQWHTTEBJ.EXE-6DCD8B7B.pf
-53.9s C:\ProgramData\Microsoft\Microsoft Antimalware\Scans\History\Results\Resource\{0E1E7566-6BE2-4B33-A832-3907A2322751}
-53.2s C:\Windows\Prefetch\PLUS-HD-2.2-FIREFOXINSTALLER.-3DEE9434.pf
-51.0s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LMATGQMO\manifest[1].xml
-50.7s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V39NH6BT\app_code[1].js
-50.6s C:\ProgramData\Microsoft\Microsoft Antimalware\Scans\History\Results\Resource\{DF41D4F0-2C91-49ED-B812-C956D00C9025}
-50.4s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VPF6SSX3\bg_code[1].js
-50.2s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LMATGQMO\plugins[1].json
-49.9s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\CrossriderAppUtils[1].js
-49.5s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V39NH6BT\CrossriderUtils[1].js
-49.2s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VPF6SSX3\jQuery[1].js
-48.7s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LMATGQMO\base[1].js
-48.4s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\jquery-1_7_1_min[1].js
-47.8s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V39NH6BT\ie8_fix_1[1].js
-47.5s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VPF6SSX3\ie8_fix_2[1].js
-47.2s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LMATGQMO\initializer[1].js
-46.9s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\debug[1].js
-46.6s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V39NH6BT\resources[1].js
-46.1s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VPF6SSX3\IEAjax[1].js
-45.8s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LMATGQMO\IEBackground[1].js
-45.5s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\IEBrowserEvents[1].js
-45.1s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V39NH6BT\IECallbacks[1].js
-44.8s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VPF6SSX3\IEDatabase[1].js
-44.4s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LMATGQMO\IEExtension[1].js
-44.0s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\IEInfo[1].js
-43.7s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V39NH6BT\IEInternal[1].js
-43.3s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VPF6SSX3\IEMessaging[1].js
-43.0s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LMATGQMO\IEMisc[1].js
-42.6s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\IEOnRequest[1].js
-42.3s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V39NH6BT\IETimers[1].js
-42.3s C:\Windows\Prefetch\PLUS-HD-2.2-CODEDOWNLOADER.EX-77785A59.pf
-42.0s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VPF6SSX3\resources_background[1].js
-41.6s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LMATGQMO\appApiMessage[1].js
-41.3s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\appApiValidation[1].js
-40.9s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V39NH6BT\CrossriderInfo[1].js
-40.2s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VPF6SSX3\monetizationLoader[1].js
-39.7s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LMATGQMO\superfish_m[1].js
-39.4s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\superfish_no_coupons_m[1].js
-39.0s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V39NH6BT\IEPopup[1].js
-38.9s C:\Users\bong\AppData\Roaming\Mozilla\Firefox\Profiles\g1n15s23.default\jetpack\ftd@ftd.com\
-38.9s C:\Users\bong\AppData\Roaming\Mozilla\Firefox\Profiles\g1n15s23.default\jetpack\
-38.9s C:\Users\bong\AppData\Roaming\Mozilla\Firefox\Profiles\g1n15s23.default\jetpack\ftd@ftd.com\simple-storage\
-38.7s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VPF6SSX3\cortica_m[1].js
-38.3s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LMATGQMO\dealply_m[1].js
-36.8s C:\Users\bong\AppData\Roaming\Mozilla\Firefox\Profiles\g1n15s23.default\indexedDB\chrome\
-36.8s C:\Users\bong\AppData\Roaming\Mozilla\Firefox\Profiles\g1n15s23.default\indexedDB\
-35.7s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\intext_5_m[1].js
-35.4s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V39NH6BT\jollywallet_m[1].js
-34.6s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VPF6SSX3\corticas_m[1].js
-34.3s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LMATGQMO\ginyas_wrapper[1].js
-33.9s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\coupish_m[1].js
-33.6s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V39NH6BT\icm_m[1].js
-30.3s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VPF6SSX3\ads_only_5_m[1].js
-30.0s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LMATGQMO\coupons_intext_ads_5_m[1].js
-29.7s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\similar_web_m[1].js
-29.4s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V39NH6BT\luck_m[1].js
-29.2s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VPF6SSX3\intext_adv_m[1].js
-28.8s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LMATGQMO\superfish_no_search_no_coupons_m[1].js
-28.5s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\arcadi2_m[1].js
-28.2s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V39NH6BT\revizer_ws_m[1].js
-27.9s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VPF6SSX3\revizer_p_m[1].js
-27.6s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LMATGQMO\superfish_pricora_m[1].js
-27.3s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\widdit_m[1].js
-25.7s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V39NH6BT\stats[1].gif
-21.5s C:\Windows\Prefetch\PLUS-HD-2.2-HELPER.EXE-25B7440F.pf
-18.3s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LMATGQMO\ie-error[1].gif
-16.7s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VPF6SSX3\stats[1].gif
-16.1s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VPF6SSX3\ie-error[1].gif
-14.7s C:\Windows\Prefetch\FTDOWNLOADER V4.0-HELPER.EXE-A9403661.pf
-14.3s C:\Windows\Prefetch\REGSVR32.EXE-03D3FB87.pf
-12.9s C:\Windows\Prefetch\PLUS-HD-2.2-BG.EXE-C50029B4.pf
-10.5s C:\Windows\Prefetch\PLUS-HD-2.2-ENABLER.EXE-CC69C3A4.pf
-7.1s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VPF6SSX3\installer[1].gif
-6.9s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\apps[1].gif
-6.7s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V39NH6BT\monetization[3].gif
-5.0s C:\Windows\Prefetch\FTDOWNLOADER V4.0-BG.EXE-65341846.pf
-2.5s C:\Windows\Prefetch\FTDOWNLOADER V4.0-ENABLER.EXE-33C19C26.pf
-1.6s C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\
-1.6s C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.exe
-1.6s C:\ProgramData\Tarma Installer\
-1.6s C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setup.dll
-1.6s C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.ico
-1.6s C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Cache\
-1.6s C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setupx.dll
-1.3s C:\ProgramData\Microsoft\Microsoft Antimalware\Scans\History\Results\Resource\{6AA49101-1883-4EAA-B14C-A881D25E364C}
-0.9s C:\ProgramData\Microsoft\Microsoft Antimalware\Scans\History\Results\Resource\{1ACADBCC-BF20-4331-B524-B0D10C5A9F7C}
-0.5s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LMATGQMO\a[1].txt
0.0s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\WebCakesetup[1].exe
0.7s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\installer[3].gif
1.0s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V39NH6BT\apps[1].gif
1.5s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LMATGQMO\monetization[1].gif
7.2s C:\Windows\Prefetch\WBCSETUP.EXE-412175FA.pf
7.7s C:\Windows\Prefetch\WBCSETUP-15D0.EXE-0067C6F0.pf
9.9s C:\Users\bong\AppData\Local\Microsoft\Windows\WebCache\V01.log
13.1s C:\ProgramData\Microsoft\Microsoft Antimalware\Scans\History\Results\Resource\{B4CE0D8D-9B31-4AEC-AF1F-9DA913681F26}
13.5s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V39NH6BT\Meh[1].json
13.6s C:\ProgramData\Microsoft\Microsoft Antimalware\Scans\History\Results\Resource\{F948C430-9E7E-4017-BE16-541E135CEB93}
14.5s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VPF6SSX3\a[1].txt
16.6s C:\Windows\Prefetch\7ZA.EXE-4ABEEABC.pf
16.6s C:\Users\bong\AppData\Roaming\Mozilla\Firefox\Profiles\g1n15s23.default\user.js
16.9s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LMATGQMO\a[1].js
17.3s C:\ProgramData\Microsoft\Microsoft Antimalware\Scans\History\Results\Resource\{934340C1-2B19-4E01-AA1E-2E3F2E5432EB}
17.6s C:\Windows\Prefetch\SC.EXE-F4E1A8F7.pf
18.5s C:\ProgramData\Microsoft\Microsoft Antimalware\Scans\History\Results\Resource\{FCD95BFE-7556-4F86-8E5A-E76B415C7784}
18.5s C:\Users\bong\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_538D903C0A81D46E90DBA469E6311D92
18.5s C:\Users\bong\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_538D903C0A81D46E90DBA469E6311D92
18.7s C:\Windows\Prefetch\CMD.EXE-6D6290C5.pf
18.9s C:\Windows\Prefetch\WC-1628.EXE-A5C48BC4.pf
18.9s C:\Windows\Prefetch\WC.EXE-FB312742.pf
19.0s C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.dat
20.0s C:\ProgramData\Microsoft\Microsoft Antimalware\Scans\History\Results\Resource\{DF9EDD58-E603-4DFA-AEDB-3192C1288E21}
20.7s C:\Users\bong\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F6DEB9C1F3251400F7D6EB743CB14FB4
20.7s C:\Users\bong\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F6DEB9C1F3251400F7D6EB743CB14FB4
27.4s C:\Windows\Prefetch\WEBCAKEDESKTOP.EXE-E96E71BE.pf
28.5s C:\Windows\Prefetch\WEBCAKEDESKTOP.UPDATER.EXE-7443D81B.pf
30.3s C:\Users\bong\AppData\Roaming\eIntaller\B9614D886F7B4f9c9937FCC7773D9637\
30.3s C:\Users\bong\AppData\Roaming\eIntaller\B9614D886F7B4f9c9937FCC7773D9637\Config.ini
30.3s C:\Users\bong\AppData\Roaming\eIntaller\
30.3s C:\Users\bong\AppData\Roaming\eIntaller\B9614D886F7B4f9c9937FCC7773D9637\eXQ.exe
30.3s C:\Users\bong\AppData\Roaming\eIntaller\B9614D886F7B4f9c9937FCC7773D9637\Desk365.exe
30.3s C:\Users\bong\AppData\Roaming\eIntaller\B9614D886F7B4f9c9937FCC7773D9637\eGdpSvc.exe
31.9s C:\ProgramData\Microsoft\Microsoft Antimalware\Scans\History\Results\Resource\{073D2944-2EAD-4A06-A643-BAC8ADBFC607}
40.2s C:\Windows\Prefetch\ELEXINST.EXE-2F947125.pf
48.1s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VPF6SSX3\ping2[1].htm
48.6s C:\Windows\Prefetch\TASKKILL.EXE-0ECD41EC.pf
49.0s C:\ProgramData\Microsoft\Microsoft Antimalware\Scans\History\Results\Resource\{D360BE3B-C019-4462-9CD1-4A2B91EF8DD2}
52.9s C:\ProgramData\Microsoft\Microsoft Antimalware\Scans\History\Results\Resource\{9CD6304E-480A-420C-B91D-F0B89C1CA2EE}
52.9s C:\ProgramData\Microsoft\Microsoft Antimalware\Scans\History\Results\Resource\{9CD6304E-480A-420C-B91D-F0B89C1CA2EE}
52.9s C:\ProgramData\Microsoft\Microsoft Antimalware\Scans\History\Results\Resource\{9CD6304E-480A-420C-B91D-F0B89C1CA2EE}
57.6s C:\Windows\Prefetch\EXQ.EXE-21C50F24.pf
61.0s C:\ProgramData\Microsoft\Microsoft Antimalware\Scans\History\Results\Resource\{6F50467C-66C2-4154-87F3-6B2078A74C4A}
61.6s C:\Windows\Prefetch\DESK365.EXE-027D2917.pf
62.7s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\softupdate[1].htm
62.7s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\softupdate[1].htm
62.7s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\softupdate[1].htm
62.7s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\softupdate[1].htm
65.1s C:\ProgramData\Microsoft\Microsoft Antimalware\Scans\History\Results\Resource\{011E5ED9-87E1-48B9-B4E3-256996CEEBC5}
67.2s C:\Windows\Prefetch\DESKSVC.EXE-AA93EA6E.pf
67.2s C:\Windows\Prefetch\DESKSVC.EXE-AA93EA6E.pf
67.2s C:\Windows\System32\Tasks\Desk 365 RunAsStdUser
67.4s C:\Windows\Prefetch\EINSTALL.EXE-0FE83655.pf
67.4s C:\Windows\Prefetch\EINSTALL.EXE-0FE83655.pf
67.4s C:\Windows\Prefetch\EINSTALL.EXE-0FE83655.pf
67.4s C:\Windows\Prefetch\EINSTALL.EXE-0FE83655.pf
67.4s C:\Windows\Prefetch\EINSTALL.EXE-0FE83655.pf
68.8s C:\ProgramData\Microsoft\Microsoft Antimalware\Scans\History\Results\Resource\{7A8D1136-DCD2-439B-8886-D37A4420F18C}
69.6s C:\ProgramData\eSafe\
70.5s C:\ProgramData\eSafe\log\
70.5s C:\ProgramData\eSafe\log\eGdpSvc.LOG
70.6s C:\Windows\Prefetch\EGDPSVC.EXE-9BF97A22.pf
70.7s C:\ProgramData\Microsoft\Microsoft Antimalware\Scans\History\Results\Resource\{32B8D6E5-5C70-42BE-8A61-9142907420AF}
71.2s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V39NH6BT\1440_900[1].jpg
71.3s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V39NH6BT\1440_900[2].jpg
71.7s C:\Windows\Prefetch\EGDPSVC.EXE-C2B2CC3E.pf
72.2s C:\ProgramData\Microsoft\Microsoft Antimalware\Scans\History\Results\Resource\{77979213-612F-4FE0-AE0A-738774F012FC}
72.9s C:\Users\bong\AppData\Roaming\Dropbox\shellext\l\51d44bab
73.8s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LMATGQMO\1440_900[1].jpg
74.4s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LMATGQMO\89dWlkPVNelhbkRpc2tYU1NEWFUxMDBYMjU2R0JfMTE1MjQxMzeAx1Mzgy86[1].htm
74.8s C:\Users\bong\AppData\Roaming\Microsoft\Windows\Cookies\O008F5XF.txt
74.8s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\en_us[1].htm
74.8s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\en_us[1].htm
74.9s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V39NH6BT\softupdate[1].htm
75.1s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VPF6SSX3\angrybirds[1].ico
75.2s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VPF6SSX3\1440_900[1].jpg
75.4s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VPF6SSX3\1440_900[2].jpg
75.4s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VPF6SSX3\1440_900[2].jpg
76.9s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\AngryBirds[1].db
77.1s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LMATGQMO\1440_900[2].jpg
77.4s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LMATGQMO\bigfarm[1].ico
77.9s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LMATGQMO\1440_900[3].jpg
77.9s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LMATGQMO\1440_900[3].jpg
78.9s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\1440_900[1].jpg
79.0s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\1440_900[2].jpg
79.6s C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6
79.6s C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6
80.0s C:\Windows\Prefetch\UP2519.EXE-97C957C7.pf
80.3s C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_538D903C0A81D46E90DBA469E6311D92
80.3s C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_538D903C0A81D46E90DBA469E6311D92
80.4s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\82WD8J9F\BigFarm[1].db
80.8s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V39NH6BT\empire[1].ico
82.0s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V39NH6BT\1440_900[3].jpg
82.5s C:\Users\bong\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V39NH6BT\Empire[1].db
Potential Unwanted Programs _________________________________________________
C:\ProgramData\Babylon\ (Babylon)
C:\Users\bong\AppData\Local\Babylon\ (Babylon)
C:\Users\bong\AppData\Local\Babylon\Setup\ (Babylon)
C:\Users\bong\AppData\Local\Babylon\Setup\bab149.spreg.zpb (Babylon)
C:\Users\bong\AppData\Local\Babylon\Setup\latest_tb.zpb (Babylon)
C:\Users\bong\AppData\Local\Babylon\Setup\Setup-deltatb.zpb (Babylon)
C:\Users\bong\AppData\Roaming\Babylon\ (Babylon)
C:\Users\bong\AppData\Roaming\Babylon\log_file.txt (Babylon)
HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\ (Delta Search)
HKLM\SOFTWARE\Classes\Prod.cap\ (Claro)
HKLM\SOFTWARE\Classes\Wow6432Node\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\ (Delta Search)
HKLM\SOFTWARE\Wow6432Node\Babylon\ (Babylon)
HKU\S-1-5-21-1864449660-13589033-3980891257-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ (Babylon)
Cookies _____________________________________________________________________
C:\Users\bong\AppData\Roaming\Microsoft\Windows\Cookies\AGVQXHWB.txt
C:\Users\bong\AppData\Roaming\Microsoft\Windows\Cookies\JZAKHFR7.txt
C:\Users\bong\AppData\Roaming\Microsoft\Windows\Cookies\PZH3SPO1.txt
C:\Users\bong\AppData\Roaming\Mozilla\Firefox\Profiles\g1n15s23.default\cookies.sqlite:ad.360yield.com
C:\Users\bong\AppData\Roaming\Mozilla\Firefox\Profiles\g1n15s23.default\cookies.sqlite:ad.yieldmanager.com
C:\Users\bong\AppData\Roaming\Mozilla\Firefox\Profiles\g1n15s23.default\cookies.sqlite:advertising.com
C:\Users\bong\AppData\Roaming\Mozilla\Firefox\Profiles\g1n15s23.default\cookies.sqlite:casalemedia.com
Wer kann mir helfen? --> Ist mir noch zu helfen???!? ![]() Code:
ATTFilter Malwarebytes Anti-Malware (Test) 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.07.04.04 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 10.0.9200.16618 bong :: BONG-PC [Administrator] Schutz: Aktiviert 04.07.2013 10:00:37 mbam-log-2013-07-04 (10-00-37).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 212143 Laufzeit: 2 Minute(n), 18 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 0 (Keine bösartigen Objekte gefunden) (Ende) |
| Themen zu QV 06 und Spyhunter 4 auf meinem Rechner... |
| administrator, adware.yontoo!ik, anschluss, computer, coupons, crypt, entfernen, explorer, forensic, hintergrund, internet explorer, java/exploit.agent.oqx, malware / spyware, malwarebytes, microsoft, pricora, programm, qv06 / spyhunter 4, software, spyhunter, spyhunter entfernen, system, system32, tarma, traces, webcake, webcake entfernen, windows, wrapper |