Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Avira meldet PUA/Inst"allCore.Gen4" beim Herunterladen von Firefox (https://www.trojaner-board.de/181912-avira-meldet-pua-inst-allcore-gen4-beim-herunterladen-firefox.html)

milka89 25.09.2016 12:37

Danke für die rasche Antwort.

Malwarebytes sind weg.

Hier der Log für Chromium:

Code:

SystemLook 30.07.11 by jpshortstuff
Log created at 13:32 on 25/09/2016 by milka
Administrator - Elevation successful

========== filefind ==========

Searching for "*chromium*"
C:\Users\milka\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Chromium.lnk        --a---- 2338 bytes        [13:30 20/09/2016]        [13:30 20/09/2016] E042B4575FF23ABD082C86F558BEC553
C:\Users\milka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chromium.lnk        --a---- 2344 bytes        [13:30 20/09/2016]        [13:30 20/09/2016] F304B0B4BC14E0E69460859CB2E85354

========== folderfind ==========

Searching for "*chromium*"
C:\Users\milka\AppData\Local\chromium        d------        [13:30 20/09/2016]

========== regfind ==========

Searching for "chromium"
[HKEY_CURRENT_USER\SOFTWARE\Chromium]
[HKEY_CURRENT_USER\SOFTWARE\Chromium]
"UninstallString"="C:\Users\milka\AppData\Local\Chromium\Application\51.0.2683.0\Installer\setup.exe"
[HKEY_CURRENT_USER\SOFTWARE\Chromium]
"name"="Chromium"
[HKEY_CURRENT_USER\SOFTWARE\Chromium]
"InstallerSuccessLaunchCmdLine"=""C:\Users\milka\AppData\Local\Chromium\Application\chrome.exe""
[HKEY_CURRENT_USER\SOFTWARE\Chromium\Commands\on-os-upgrade]
"CommandLine"=""C:\Users\milka\AppData\Local\Chromium\Application\51.0.2683.0\Installer\setup.exe" --on-os-upgrade --verbose-logging"
[HKEY_CURRENT_USER\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA]
[HKEY_CURRENT_USER\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA]
@="Chromium"
[HKEY_CURRENT_USER\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\Capabilities]
"ApplicationDescription"="Chromium ist ein Webbrowser, der Webseiten und Apps in Sekundenschnelle lädt und dabei äußerst stabil und nutzerfreundlich ist. Dank des integrierten Malware- und Phishing-Schutzes können Sie bedenkenlos im Internet surfen."
[HKEY_CURRENT_USER\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\Capabilities]
"ApplicationIcon"="C:\Users\milka\AppData\Local\Chromium\Application\chrome.exe,0"
[HKEY_CURRENT_USER\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\Capabilities]
"ApplicationName"="Chromium"
[HKEY_CURRENT_USER\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\Capabilities\FileAssociations]
".htm"="ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"
[HKEY_CURRENT_USER\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\Capabilities\FileAssociations]
".html"="ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"
[HKEY_CURRENT_USER\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\Capabilities\FileAssociations]
".shtml"="ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"
[HKEY_CURRENT_USER\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\Capabilities\FileAssociations]
".xht"="ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"
[HKEY_CURRENT_USER\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\Capabilities\FileAssociations]
".xhtml"="ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"
[HKEY_CURRENT_USER\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\Capabilities\FileAssociations]
".webp"="ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"
[HKEY_CURRENT_USER\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\Capabilities\Startmenu]
"StartMenuInternet"="Chromium.3GAOUNJZYGLPVW667KWT3NMLSA"
[HKEY_CURRENT_USER\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\Capabilities\URLAssociations]
"ftp"="ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"
[HKEY_CURRENT_USER\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\Capabilities\URLAssociations]
"http"="ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"
[HKEY_CURRENT_USER\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\Capabilities\URLAssociations]
"https"="ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"
[HKEY_CURRENT_USER\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\Capabilities\URLAssociations]
"irc"="ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"
[HKEY_CURRENT_USER\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\Capabilities\URLAssociations]
"mailto"="ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"
[HKEY_CURRENT_USER\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\Capabilities\URLAssociations]
"mms"="ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"
[HKEY_CURRENT_USER\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\Capabilities\URLAssociations]
"news"="ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"
[HKEY_CURRENT_USER\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\Capabilities\URLAssociations]
"nntp"="ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"
[HKEY_CURRENT_USER\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\Capabilities\URLAssociations]
"sms"="ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"
[HKEY_CURRENT_USER\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\Capabilities\URLAssociations]
"smsto"="ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"
[HKEY_CURRENT_USER\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\Capabilities\URLAssociations]
"tel"="ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"
[HKEY_CURRENT_USER\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\Capabilities\URLAssociations]
"urn"="ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"
[HKEY_CURRENT_USER\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\Capabilities\URLAssociations]
"webcal"="ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"
[HKEY_CURRENT_USER\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\DefaultIcon]
@="C:\Users\milka\AppData\Local\Chromium\Application\chrome.exe,0"
[HKEY_CURRENT_USER\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\InstallInfo]
"ReinstallCommand"=""C:\Users\milka\AppData\Local\Chromium\Application\chrome.exe" --make-default-browser"
[HKEY_CURRENT_USER\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\InstallInfo]
"HideIconsCommand"=""C:\Users\milka\AppData\Local\Chromium\Application\chrome.exe" --hide-icons"
[HKEY_CURRENT_USER\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\InstallInfo]
"ShowIconsCommand"=""C:\Users\milka\AppData\Local\Chromium\Application\chrome.exe" --show-icons"
[HKEY_CURRENT_USER\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\shell\open\command]
@=""C:\Users\milka\AppData\Local\Chromium\Application\chrome.exe""
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\chrome.exe]
@="C:\Users\milka\AppData\Local\Chromium\Application\chrome.exe"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\chrome.exe]
"Path"="C:\Users\milka\AppData\Local\Chromium\Application"
[HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications]
"Chromium.3GAOUNJZYGLPVW667KWT3NMLSA"="Software\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\Capabilities"
[HKEY_CURRENT_USER\SOFTWARE\Classes\.htm\OpenWithProgids]
"ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"=""
[HKEY_CURRENT_USER\SOFTWARE\Classes\.html\OpenWithProgids]
"ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"=""
[HKEY_CURRENT_USER\SOFTWARE\Classes\.shtml\OpenWithProgids]
"ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"=""
[HKEY_CURRENT_USER\SOFTWARE\Classes\.webp\OpenWithProgids]
"ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"=""
[HKEY_CURRENT_USER\SOFTWARE\Classes\.xht\OpenWithProgids]
"ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"=""
[HKEY_CURRENT_USER\SOFTWARE\Classes\.xhtml\OpenWithProgids]
"ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"=""
[HKEY_CURRENT_USER\SOFTWARE\Classes\ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA]
[HKEY_CURRENT_USER\SOFTWARE\Classes\ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA]
@="Chromium HTML Document"
[HKEY_CURRENT_USER\SOFTWARE\Classes\ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA]
"AppUserModelId"="Chromium.3GAOUNJZYGLPVW667KWT3NMLSA"
[HKEY_CURRENT_USER\SOFTWARE\Classes\ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA\Application]
"AppUserModelId"="Chromium.3GAOUNJZYGLPVW667KWT3NMLSA"
[HKEY_CURRENT_USER\SOFTWARE\Classes\ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA\Application]
"ApplicationIcon"="C:\Users\milka\AppData\Local\Chromium\Application\chrome.exe,0"
[HKEY_CURRENT_USER\SOFTWARE\Classes\ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA\Application]
"ApplicationName"="Chromium"
[HKEY_CURRENT_USER\SOFTWARE\Classes\ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA\Application]
"ApplicationCompany"="Chromium"
[HKEY_CURRENT_USER\SOFTWARE\Classes\ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA\DefaultIcon]
@="C:\Users\milka\AppData\Local\Chromium\Application\chrome.exe,0"
[HKEY_CURRENT_USER\SOFTWARE\Classes\ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA\shell\open\command]
@=""C:\Users\milka\AppData\Local\Chromium\Application\chrome.exe" -- "%1""
[HKEY_CURRENT_USER\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Users\milka\AppData\Local\chromium\Application\chrome.exe.FriendlyAppName"="Chromium"
[HKEY_CURRENT_USER\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Users\milka\AppData\Local\chromium\Application\chrome.exe.ApplicationCompany"="The Chromium Authors"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{646D2141-CF16-4E22-88C2-64E44F16F6D5}"="v2.25|Action=Allow|Active=TRUE|Dir=In|Protocol=17|LPort=5353|App=C:\Users\milka\AppData\Local\Chromium\Application\chrome.exe|Name=Chromium (mDNS-In)|Desc=Eingangsregel für die Zulassung von mDNS-Verkehr in Chromium|EmbedCtxt=Chromium|"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{646D2141-CF16-4E22-88C2-64E44F16F6D5}"="v2.25|Action=Allow|Active=TRUE|Dir=In|Protocol=17|LPort=5353|App=C:\Users\milka\AppData\Local\Chromium\Application\chrome.exe|Name=Chromium (mDNS-In)|Desc=Eingangsregel für die Zulassung von mDNS-Verkehr in Chromium|EmbedCtxt=Chromium|"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Chromium]
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Chromium]
"UninstallString"="C:\Users\milka\AppData\Local\Chromium\Application\51.0.2683.0\Installer\setup.exe"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Chromium]
"name"="Chromium"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Chromium]
"InstallerSuccessLaunchCmdLine"=""C:\Users\milka\AppData\Local\Chromium\Application\chrome.exe""
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Chromium\Commands\on-os-upgrade]
"CommandLine"=""C:\Users\milka\AppData\Local\Chromium\Application\51.0.2683.0\Installer\setup.exe" --on-os-upgrade --verbose-logging"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA]
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA]
@="Chromium"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\Capabilities]
"ApplicationDescription"="Chromium ist ein Webbrowser, der Webseiten und Apps in Sekundenschnelle lädt und dabei äußerst stabil und nutzerfreundlich ist. Dank des integrierten Malware- und Phishing-Schutzes können Sie bedenkenlos im Internet surfen."
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\Capabilities]
"ApplicationIcon"="C:\Users\milka\AppData\Local\Chromium\Application\chrome.exe,0"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\Capabilities]
"ApplicationName"="Chromium"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\Capabilities\FileAssociations]
".htm"="ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\Capabilities\FileAssociations]
".html"="ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\Capabilities\FileAssociations]
".shtml"="ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\Capabilities\FileAssociations]
".xht"="ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\Capabilities\FileAssociations]
".xhtml"="ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\Capabilities\FileAssociations]
".webp"="ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\Capabilities\Startmenu]
"StartMenuInternet"="Chromium.3GAOUNJZYGLPVW667KWT3NMLSA"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\Capabilities\URLAssociations]
"ftp"="ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\Capabilities\URLAssociations]
"http"="ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\Capabilities\URLAssociations]
"https"="ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\Capabilities\URLAssociations]
"irc"="ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\Capabilities\URLAssociations]
"mailto"="ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\Capabilities\URLAssociations]
"mms"="ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\Capabilities\URLAssociations]
"news"="ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\Capabilities\URLAssociations]
"nntp"="ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\Capabilities\URLAssociations]
"sms"="ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\Capabilities\URLAssociations]
"smsto"="ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\Capabilities\URLAssociations]
"tel"="ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\Capabilities\URLAssociations]
"urn"="ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\Capabilities\URLAssociations]
"webcal"="ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\DefaultIcon]
@="C:\Users\milka\AppData\Local\Chromium\Application\chrome.exe,0"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\InstallInfo]
"ReinstallCommand"=""C:\Users\milka\AppData\Local\Chromium\Application\chrome.exe" --make-default-browser"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\InstallInfo]
"HideIconsCommand"=""C:\Users\milka\AppData\Local\Chromium\Application\chrome.exe" --hide-icons"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\InstallInfo]
"ShowIconsCommand"=""C:\Users\milka\AppData\Local\Chromium\Application\chrome.exe" --show-icons"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\shell\open\command]
@=""C:\Users\milka\AppData\Local\Chromium\Application\chrome.exe""
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\chrome.exe]
@="C:\Users\milka\AppData\Local\Chromium\Application\chrome.exe"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\chrome.exe]
"Path"="C:\Users\milka\AppData\Local\Chromium\Application"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\RegisteredApplications]
"Chromium.3GAOUNJZYGLPVW667KWT3NMLSA"="Software\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA\Capabilities"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Classes\.htm\OpenWithProgids]
"ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"=""
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Classes\.html\OpenWithProgids]
"ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"=""
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Classes\.shtml\OpenWithProgids]
"ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"=""
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Classes\.webp\OpenWithProgids]
"ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"=""
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Classes\.xht\OpenWithProgids]
"ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"=""
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Classes\.xhtml\OpenWithProgids]
"ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"=""
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Classes\ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA]
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Classes\ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA]
@="Chromium HTML Document"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Classes\ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA]
"AppUserModelId"="Chromium.3GAOUNJZYGLPVW667KWT3NMLSA"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Classes\ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA\Application]
"AppUserModelId"="Chromium.3GAOUNJZYGLPVW667KWT3NMLSA"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Classes\ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA\Application]
"ApplicationIcon"="C:\Users\milka\AppData\Local\Chromium\Application\chrome.exe,0"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Classes\ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA\Application]
"ApplicationName"="Chromium"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Classes\ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA\Application]
"ApplicationCompany"="Chromium"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Classes\ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA\DefaultIcon]
@="C:\Users\milka\AppData\Local\Chromium\Application\chrome.exe,0"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Classes\ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA\shell\open\command]
@=""C:\Users\milka\AppData\Local\Chromium\Application\chrome.exe" -- "%1""
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Users\milka\AppData\Local\chromium\Application\chrome.exe.FriendlyAppName"="Chromium"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Users\milka\AppData\Local\chromium\Application\chrome.exe.ApplicationCompany"="The Chromium Authors"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001_Classes\.htm\OpenWithProgids]
"ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"=""
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001_Classes\.html\OpenWithProgids]
"ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"=""
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001_Classes\.shtml\OpenWithProgids]
"ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"=""
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001_Classes\.webp\OpenWithProgids]
"ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"=""
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001_Classes\.xht\OpenWithProgids]
"ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"=""
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001_Classes\.xhtml\OpenWithProgids]
"ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA"=""
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001_Classes\ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA]
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001_Classes\ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA]
@="Chromium HTML Document"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001_Classes\ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA]
"AppUserModelId"="Chromium.3GAOUNJZYGLPVW667KWT3NMLSA"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001_Classes\ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA\Application]
"AppUserModelId"="Chromium.3GAOUNJZYGLPVW667KWT3NMLSA"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001_Classes\ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA\Application]
"ApplicationIcon"="C:\Users\milka\AppData\Local\Chromium\Application\chrome.exe,0"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001_Classes\ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA\Application]
"ApplicationName"="Chromium"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001_Classes\ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA\Application]
"ApplicationCompany"="Chromium"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001_Classes\ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA\DefaultIcon]
@="C:\Users\milka\AppData\Local\Chromium\Application\chrome.exe,0"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001_Classes\ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA\shell\open\command]
@=""C:\Users\milka\AppData\Local\Chromium\Application\chrome.exe" -- "%1""
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Users\milka\AppData\Local\chromium\Application\chrome.exe.FriendlyAppName"="Chromium"
[HKEY_USERS\S-1-5-21-1231653582-135276213-3349442365-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Users\milka\AppData\Local\chromium\Application\chrome.exe.ApplicationCompany"="The Chromium Authors"

-= EOF =-


M-K-D-B 26.09.2016 15:24

Servus,



nach dem folgenden FRST-Fix sollte Chromium auch weg sein... bitte kurz Rückmeldung geben. :)





Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument


Code:

start
CloseProcesses:
C:\Users\milka\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Chromium.lnk
C:\Users\milka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chromium.lnk
C:\Users\milka\AppData\Local\chromium
DeleteKey: HKEY_CURRENT_USER\SOFTWARE\Chromium
DeleteKey: HKEY_CURRENT_USER\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA
DeleteKey: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\chrome.exe
Unlock: HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications
CMD: reg delete "HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications" /v Chromium.3GAOUNJZYGLPVW667KWT3NMLSA /f
DeleteKey: HKEY_CURRENT_USER\SOFTWARE\Classes\ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA
FirewallRules: [{646D2141-CF16-4E22-88C2-64E44F16F6D5}] => (Allow) C:\Users\milka\AppData\Local\Chromium\Application\chrome.exe
Unlock: HKEY_CURRENT_USER\SOFTWARE\Classes\.htm\OpenWithProgids
CMD: reg delete "HKEY_CURRENT_USER\SOFTWARE\Classes\.htm\OpenWithProgids" /v ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA /f
Unlock: HKEY_CURRENT_USER\SOFTWARE\Classes\.html\OpenWithProgids
CMD: reg delete "HKEY_CURRENT_USER\SOFTWARE\Classes\.html\OpenWithProgids" /v ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA /f
Unlock: HKEY_CURRENT_USER\SOFTWARE\Classes\.shtml\OpenWithProgids
CMD: reg delete "HKEY_CURRENT_USER\SOFTWARE\Classes\.shtml\OpenWithProgids" /v ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA /f
Unlock: HKEY_CURRENT_USER\SOFTWARE\Classes\.webp\OpenWithProgids
CMD: reg delete "HKEY_CURRENT_USER\SOFTWARE\Classes\.webp\OpenWithProgids" /v ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA /f
Unlock: HKEY_CURRENT_USER\SOFTWARE\Classes\.xht\OpenWithProgids
CMD: reg delete "HKEY_CURRENT_USER\SOFTWARE\Classes\.xht\OpenWithProgids" /v ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA /f
Unlock: HKEY_CURRENT_USER\SOFTWARE\Classes\xhtml\OpenWithProgids
CMD: reg delete "HKEY_CURRENT_USER\SOFTWARE\Classes\xhtml\OpenWithProgids" /v ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA /f
EmptyTemp:
end


Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.


milka89 26.09.2016 16:35

Hallo,

hier der Log
Code:

Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version: 25-09-2016
durchgeführt von milka (26-09-2016 17:27:33) Run:1
Gestartet von C:\Users\milka\Desktop
Geladene Profile: milka (Verfügbare Profile: milka)
Start-Modus: Normal
==============================================

fixlist Inhalt:
*****************
start
CloseProcesses:
C:\Users\milka\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Chromium.lnk
C:\Users\milka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chromium.lnk
C:\Users\milka\AppData\Local\chromium
DeleteKey: HKEY_CURRENT_USER\SOFTWARE\Chromium
DeleteKey: HKEY_CURRENT_USER\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA
DeleteKey: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\chrome.exe
Unlock: HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications
CMD: reg delete "HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications" /v Chromium.3GAOUNJZYGLPVW667KWT3NMLSA /f
DeleteKey: HKEY_CURRENT_USER\SOFTWARE\Classes\ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA
FirewallRules: [{646D2141-CF16-4E22-88C2-64E44F16F6D5}] => (Allow) C:\Users\milka\AppData\Local\Chromium\Application\chrome.exe
Unlock: HKEY_CURRENT_USER\SOFTWARE\Classes\.htm\OpenWithProgids
CMD: reg delete "HKEY_CURRENT_USER\SOFTWARE\Classes\.htm\OpenWithProgids" /v ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA /f
Unlock: HKEY_CURRENT_USER\SOFTWARE\Classes\.html\OpenWithProgids
CMD: reg delete "HKEY_CURRENT_USER\SOFTWARE\Classes\.html\OpenWithProgids" /v ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA /f
Unlock: HKEY_CURRENT_USER\SOFTWARE\Classes\.shtml\OpenWithProgids
CMD: reg delete "HKEY_CURRENT_USER\SOFTWARE\Classes\.shtml\OpenWithProgids" /v ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA /f
Unlock: HKEY_CURRENT_USER\SOFTWARE\Classes\.webp\OpenWithProgids
CMD: reg delete "HKEY_CURRENT_USER\SOFTWARE\Classes\.webp\OpenWithProgids" /v ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA /f
Unlock: HKEY_CURRENT_USER\SOFTWARE\Classes\.xht\OpenWithProgids
CMD: reg delete "HKEY_CURRENT_USER\SOFTWARE\Classes\.xht\OpenWithProgids" /v ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA /f
Unlock: HKEY_CURRENT_USER\SOFTWARE\Classes\xhtml\OpenWithProgids
CMD: reg delete "HKEY_CURRENT_USER\SOFTWARE\Classes\xhtml\OpenWithProgids" /v ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA /f
EmptyTemp:
end
*****************

Prozess erfolgreich geschlossen.
C:\Users\milka\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Chromium.lnk => erfolgreich verschoben
C:\Users\milka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chromium.lnk => erfolgreich verschoben
C:\Users\milka\AppData\Local\chromium => erfolgreich verschoben
HKEY_CURRENT_USER\SOFTWARE\Chromium => konnte nicht entfernt werden im ersten Versuch (ErrorCode: C0000121), siehe nächste Zeile.
HKEY_CURRENT_USER\SOFTWARE\Chromium => Schlüssel erfolgreich entfernt
HKEY_CURRENT_USER\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA => konnte nicht entfernt werden im ersten Versuch (ErrorCode: C0000121), siehe nächste Zeile.
HKEY_CURRENT_USER\SOFTWARE\Clients\StartMenuInternet\Chromium.3GAOUNJZYGLPVW667KWT3NMLSA => Schlüssel erfolgreich entfernt
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\chrome.exe => Schlüssel erfolgreich entfernt
"HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications" => Schlüssel wurde entsperrt

========= reg delete "HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications" /v Chromium.3GAOUNJZYGLPVW667KWT3NMLSA /f =========

Der Vorgang wurde erfolgreich beendet.


========= Ende von CMD: =========

HKEY_CURRENT_USER\SOFTWARE\Classes\ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA => konnte nicht entfernt werden im ersten Versuch (ErrorCode: C0000121), siehe nächste Zeile.
HKEY_CURRENT_USER\SOFTWARE\Classes\ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA => Schlüssel erfolgreich entfernt
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{646D2141-CF16-4E22-88C2-64E44F16F6D5} => Wert erfolgreich entfernt
"HKEY_CURRENT_USER\SOFTWARE\Classes\.htm\OpenWithProgids" => Schlüssel wurde entsperrt

========= reg delete "HKEY_CURRENT_USER\SOFTWARE\Classes\.htm\OpenWithProgids" /v ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA /f =========

Der Vorgang wurde erfolgreich beendet.


========= Ende von CMD: =========

"HKEY_CURRENT_USER\SOFTWARE\Classes\.html\OpenWithProgids" => Schlüssel wurde entsperrt

========= reg delete "HKEY_CURRENT_USER\SOFTWARE\Classes\.html\OpenWithProgids" /v ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA /f =========

Der Vorgang wurde erfolgreich beendet.


========= Ende von CMD: =========

"HKEY_CURRENT_USER\SOFTWARE\Classes\.shtml\OpenWithProgids" => Schlüssel wurde entsperrt

========= reg delete "HKEY_CURRENT_USER\SOFTWARE\Classes\.shtml\OpenWithProgids" /v ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA /f =========

Der Vorgang wurde erfolgreich beendet.


========= Ende von CMD: =========

"HKEY_CURRENT_USER\SOFTWARE\Classes\.webp\OpenWithProgids" => Schlüssel wurde entsperrt

========= reg delete "HKEY_CURRENT_USER\SOFTWARE\Classes\.webp\OpenWithProgids" /v ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA /f =========

Der Vorgang wurde erfolgreich beendet.


========= Ende von CMD: =========

"HKEY_CURRENT_USER\SOFTWARE\Classes\.xht\OpenWithProgids" => Schlüssel wurde entsperrt

========= reg delete "HKEY_CURRENT_USER\SOFTWARE\Classes\.xht\OpenWithProgids" /v ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA /f =========

Der Vorgang wurde erfolgreich beendet.


========= Ende von CMD: =========

"HKEY_CURRENT_USER\SOFTWARE\Classes\xhtml\OpenWithProgids" => Schlüssel konnte nicht entsperrt werden

========= reg delete "HKEY_CURRENT_USER\SOFTWARE\Classes\xhtml\OpenWithProgids" /v ChromiumHTM.3GAOUNJZYGLPVW667KWT3NMLSA /f =========

FEHLER: Der angegebene Registrierungsschlssel bzw. Wert wurde nicht gefunden.

========= Ende von CMD: =========


=========== EmptyTemp: ==========

BITS transfer queue => 32768 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 14921136 B
Java, Flash, Steam htmlcache => 0 B
Windows/system/drivers => 2787662 B
Edge => 2171669 B
Chrome => 0 B
Firefox => 37381921 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 128 B
LocalService => 10450 B
NetworkService => 2826 B
milka => 52222756 B

RecycleBin => 0 B
EmptyTemp: => 104.5 MB temporäre Dateien entfernt.

================================


Das System musste neu gestartet werden.

==== Ende von Fixlog 17:27:41 ====

Chromium ist weg.
Wie kann ich denn jetzt noch mbam-clean, SystemLook und FRST wieder entfernen?

Vielen Dank!

M-K-D-B 27.09.2016 15:28

Servus,



MBAM-Clean per Hand löschen.

Für das andere am Besten DelFix downloaden und ausführen:

Alle Logs gepostet? Dann lade Dir bitte http://filepony.de/icon/tiny/delfix.pngDelFix herunter.
  • Schließe alle offenen Programme.
  • Starte die delfix.exe mit einem Doppelklick.
  • Setze vor jede Funktion ein Häkchen.
  • Klicke auf Start.
Hinweis:
DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
Starte Deinen Rechner anschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen.

milka89 27.09.2016 17:40

Jetzt ist alles weg :daumenhoc

Ich danke dir :)

M-K-D-B 28.09.2016 14:29

Ich bin froh, dass wir helfen konnten :abklatsch:

In diesem Forum kannst du eine kurze Rückmeldung zur Bereinigung abgeben, sofern du das möchtest:
Lob, Kritik und Wünsche
Klicke dazu auf den Button "NEUES THEMA" und poste ein kleines Feedback. Vielen Dank! :)

Dieses Thema scheint erledigt und wird aus meinen Abos gelöscht. Solltest Du das Thema erneut brauchen, schicke mir bitte eine PM.

Jeder andere bitte hier klicken und einen eigenen Thread erstellen.


Alle Zeitangaben in WEZ +1. Es ist jetzt 17:21 Uhr.

Copyright ©2000-2024, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130