Trojaner-Board - Delta Search bei Tab öffnen noch vorhanden

hier der Log
Code:
SystemLook 30.07.11 by jpshortstuff

Log created at 22:05 on 25/03/2013 by User

Administrator - Elevation successful
 

========== filefind ==========
 

Searching for "*bing*"

C:\Program Files\Mass Effect 2\BioGame\CookedPC\BioD_Nor_006CabinGarrus.pcc        --a---- 5291037 bytes        [18:04 13/09/2012]        [22:02 15/12/2009] 311D162037FE3281AFD84E645C94F218

C:\Program Files\Origin Games\Mass Effect 3\BIOGame\CookedPCConsole\krogru_see_webbing_a_D_DEU.afc        --a---- 69179 bytes        [23:07 24/04/2012]        [23:07 24/04/2012] 32C26988AF151E64632AA93A8EFDC672

C:\Program Files\Origin Games\Mass Effect 3\BIOGame\CookedPCConsole\krogru_see_webbing_a_D_Int.afc        --a---- 56355 bytes        [23:07 24/04/2012]        [23:07 24/04/2012] AF604B8F03A2CB10F79444B458ADB38E

C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8123PKCI\BingBarSetup-Partner[1].EXE        --a---- 8597072 bytes        [16:25 27/08/2012]        [16:25 27/08/2012] 5B1A0FBAED3D030ED1A434C9E5ABEB6D
 

========== folderfind ==========
 

Searching for "*bing*"

No folders found.
 

========== regfind ==========
 

Searching for "bing"

[HKEY_CURRENT_USER\Software\Microsoft\BingBar]

[HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\UserExtendedProperties\betzi87@hotmail.de]

"anon"="@fmt|A=3000C25F8A2BEBC27E50BF6FFFFFFFFF&E=d5e&W=1|bing.com;atdmt.com|Tue, 04-Jun-2013 12:54:02 GMT||false"

[HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\UserExtendedProperties\betzi87@hotmail.de]

"nap"="@fmt|V=1.9&E=d04&C=YcW1zV-XLF1zberu8XnMcD-ZiZCkHL82h63EPZl77zVEyD_Cw-fFYg&W=1|bing.com;atdmt.com|Sun, 24-Feb-2013 13:54:02 GMT||false"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]

"SuggestionsURLFallback"="hxxp://api.bing.com/qsml.aspx?query={searchTerms}&maxwidth={ie:maxWidth}&rowheight={ie:rowHeight}&sectionHeight={ie:sectionHeight}&FORM=IE8SSC&market={language}"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]

"FaviconURLFallback"="hxxp://www.bing.com/favicon.ico"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]

"DisplayName"="Bing"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]

"URL"="hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}]

@="Bing"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}]

"URL"="hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]

@="Bing"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]

"URL"="hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Speech\PhoneConverters\Tokens\Chinese]

"PhoneMap"="- 0001 ! 0002 & 0003 , 0004 . 0005 ? 0006 _ 0007 + 0008 * 0009 1 000A 2 000B 3 000C 4 000D 5 000E a 000F ai 0010 an 0011 ang 0012 ao 0013 ba 0014 bai 0015 ban 0016 bang 0017 bao 0018 bei 0019 ben 001A beng 001B bi 001C bian 001D biao 001E bie 001F bin 0020 bing 0021 bo 0022 bu 0023 ca 0024 cai 0025 can 0026 cang 0027 cao 0028 ce 0029 cen 002A ceng 002B cha 002C chai 002D chan 002E chang 002F chao 0030 che 0031 chen 0032 cheng 0033 chi 0034 chong 0035 chou 0036 chu 0037 chuai 0038 chuan 0039 chuang 003A chui 003B chun 003C chuo 003D ci 003E cong 003F cou 0040 cu 0041 cuan 0042 cui 0043 cun 0044 cuo 0045 da 0046 dai 0047 dan 0048 dang 0049 dao 004A de 004B dei 004C den 004D deng 004E di 004F dia 0050 dian 0051 diao 0052 die 0053 ding 0054 diu 0055 dong 0056 dou 0057 du 0058 duan 0059 dui 005A dun 005B duo 005C e 005D ei 005E en 005F er 0060 fa 0061 fan 0062 fang 0063 fei 0064 fen 0065 feng 0066 fo 0067 fou 0068 fu 0069 ga

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\009]

"Help"="3 The System performance object consists of counters that apply to more than one instance of a component processors on the computer. 5 The Memory performance object  consists of counters that describe the behavior of physical and virtual memory on the computer.  Physical memory is the amount of random access memory on the computer.  Virtual memory consists of the space in physical memory and on disk.  Many of the memory counters monitor paging, which is the movement of pages of code and data between disk and physical memory.  Excessive paging, a symptom of a memory shortage, can cause delays which interfere with all system processes. 7 % Processor Time is the percentage of elapsed time that the processor spends to execute a non-Idle thread. It is calculated by measuring the percentage of time that the processor spends executing the idle thread and then subtracting that value from 100%. (Each processor has an idle thread tha

[HKEY_USERS\S-1-5-21-2689474313-1233339154-322860805-1000\Software\Microsoft\BingBar]

[HKEY_USERS\S-1-5-21-2689474313-1233339154-322860805-1000\Software\Microsoft\IdentityCRL\UserExtendedProperties\betzi87@hotmail.de]

"anon"="@fmt|A=3000C25F8A2BEBC27E50BF6FFFFFFFFF&E=d5e&W=1|bing.com;atdmt.com|Tue, 04-Jun-2013 12:54:02 GMT||false"

[HKEY_USERS\S-1-5-21-2689474313-1233339154-322860805-1000\Software\Microsoft\IdentityCRL\UserExtendedProperties\betzi87@hotmail.de]

"nap"="@fmt|V=1.9&E=d04&C=YcW1zV-XLF1zberu8XnMcD-ZiZCkHL82h63EPZl77zVEyD_Cw-fFYg&W=1|bing.com;atdmt.com|Sun, 24-Feb-2013 13:54:02 GMT||false"

[HKEY_USERS\S-1-5-21-2689474313-1233339154-322860805-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]

"SuggestionsURLFallback"="hxxp://api.bing.com/qsml.aspx?query={searchTerms}&maxwidth={ie:maxWidth}&rowheight={ie:rowHeight}&sectionHeight={ie:sectionHeight}&FORM=IE8SSC&market={language}"

[HKEY_USERS\S-1-5-21-2689474313-1233339154-322860805-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]

"FaviconURLFallback"="hxxp://www.bing.com/favicon.ico"

[HKEY_USERS\S-1-5-21-2689474313-1233339154-322860805-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]

"DisplayName"="Bing"

[HKEY_USERS\S-1-5-21-2689474313-1233339154-322860805-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]

"URL"="hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"

[HKEY_USERS\S-1-5-21-2689474313-1233339154-322860805-1000\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}]

@="Bing"

[HKEY_USERS\S-1-5-21-2689474313-1233339154-322860805-1000\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}]

"URL"="hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC"
 

-= EOF =-