Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Trojaner "LicenseValidator.exe" (https://www.trojaner-board.de/119845-trojaner-licensevalidator-exe.html)

McMax 18.07.2012 22:41

Trojaner "LicenseValidator.exe"
 
Hallo zusammen,

ich hab seit gestern bemerkt, dass ich wohl einen oder mehreren Viren auf meinen PC habe. Bemerkbar hat er sich gemacht, indem ohne Vorwarnung einfach alle Anwendungen geschlossen wurden und das System heruntergefahren wurde. Mir kam es auch vor ein paar Tagen schon merkwürdig vor, dass ich von ebay einen Hinweis erhielt, dass mein ebay-Account gehackt wurde. Wurde aufgefordert, ein neues Passwort zu vergeben.

Ich hab gestern diverse Scans durchgeführt, s. u.a. folgende Logs von Malwarebytes:
Hier das erste Log von gestern:
Code:

Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Datenbank Version: 7622

Windows 6.0.6002 Service Pack 2 (Safe Mode)
Internet Explorer 9.0.8112.16421

17.07.2012 21:09:17
mbam-log-2012-07-17 (21-09-17).txt

Art des Suchlaufs: Quick-Scan
Durchsuchte Objekte: 209579
Laufzeit: 8 Minute(n), 9 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 5
Infizierte Registrierungswerte: 2
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 1

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
HKEY_CLASSES_ROOT\CLSID\{B922D405-6D13-4A2B-AE89-08A030DA4402} (PUP.Dealio.TB) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B922D405-6D13-4A2B-AE89-08A030DA4402} (PUP.Dealio.TB) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{B922D405-6D13-4A2B-AE89-08A030DA4402} (PUP.Dealio.TB) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{B922D405-6D13-4A2B-AE89-08A030DA4402} (PUP.Dealio.TB) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B922D405-6D13-4A2B-AE89-08A030DA4402} (PUP.Dealio.TB) -> Quarantined and deleted successfully.

Infizierte Registrierungswerte:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\{B922D405-6D13-4A2B-AE89-08A030DA4402} (PUP.Dealio.TB) -> Value: {B922D405-6D13-4A2B-AE89-08A030DA4402} -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{B922D405-6D13-4A2B-AE89-08A030DA4402} (PUP.Dealio.TB) -> Value: {B922D405-6D13-4A2B-AE89-08A030DA4402} -> Quarantined and deleted successfully.

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
c:\program files (x86)\pdfforge toolbar\IE\6.0\pdfforgetoolbarie.dll (PUP.Dealio.TB) -> Quarantined and deleted successfully.

Nachdem ich mit Avira Antivir gescannt hab und weitere diverse Entferneungstools (CCLeaner, Malwarebytes, AdAware) drüberlaufen hab lassen, war das Log erst sauber, später fand er wieder was:
Code:

Malwarebytes Anti-Malware (Test) 1.62.0.1300
www.malwarebytes.org

Datenbank Version: v2012.07.17.13

Windows Vista Service Pack 2 x64 NTFS
Internet Explorer 9.0.8112.16421
HP :: HP1-PC [Administrator]

Schutz: Aktiviert

17.07.2012 22:24:41
mbam-log-2012-07-17 (22-24-41).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 265931
Laufzeit: 10 Minute(n), 10 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 1
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|LicenseValidator (Spyware.Zbot.CF) -> Daten: C:\Users\HP\AppData\Roaming\Microsoft Corporation\{B999C678-AB1F-4368-9C24-63F48A595883}\LicenseValidator.exe -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 1
C:\Users\HP\AppData\Roaming\Microsoft Corporation\{B999C678-AB1F-4368-9C24-63F48A595883}\LicenseValidator.exe (Spyware.Zbot.CF) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)

Ich hab heute eine Systemwiederherstellung mit dem ältestmöglichen Datum (14.06.) durchgeführt und danach wieder gescannt. Leider fand er wieder was:
Code:

Malwarebytes Anti-Malware (Test) 1.62.0.1300
www.malwarebytes.org

Datenbank Version: v2012.07.18.09

Windows Vista Service Pack 2 x64 NTFS
Internet Explorer 9.0.8112.16421
HP :: HP1-PC [Administrator]

Schutz: Aktiviert

18.07.2012 22:28:11
mbam-log-2012-07-18 (22-28-11).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 241765
Laufzeit: 6 Minute(n), 46 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 1
C:\Users\HP\AppData\Roaming\Identities\{537BAC6A-27AB-49CD-A1B8-46274109FDE4}\LicenseValidator.exe (Spyware.Zbot.CF) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)

Nach Löschung ist es derzeit wieder sauber, allerdings hab ich irgendwie die Befürchtung, dass sich der Virus wieder archiviert. Es liegt wohl an der Datei/Virus "LicenseValidator.exe" der sich ständig an neuer Stelle aktiviert.

Hab als Anhang noch das aktuelle OTL-Log beigefügt.

Kann mir jemand helfen, wie ich den Virus dauerhaft loswerde, möglichst ohne das System neu aufzusetzen?!

Vielen vielen Dank schon mal vorab.

Gruß

Max

t'john 19.07.2012 15:10

:hallo:


Fixen mit OTL

Lade (falls noch nicht vorhanden) OTL von Oldtimer herunter und speichere es auf Deinem Desktop (nicht woanders hin).

  • Deaktiviere etwaige Virenscanner wie Avira, Kaspersky etc.
  • Starte die OTL.exe.
    Vista- und Windows 7-User starten mit Rechtsklick auf das Programm-Icon und wählen "Als Administrator ausführen".
  • Kopiere folgendes Skript in das Textfeld unterhalb von Benuterdefinierte Scans/Fixes:


Code:

:OTL
PRC - [2011.03.18 09:11:51 | 000,031,744 | ---- | M] () -- C:\Program Files (x86)\Hardcopy\hcdll2_ex_Win32.exe
PRC - [2010.12.09 21:28:24 | 001,226,608 | ---- | M] () -- C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
PRC - [2008.12.17 17:11:40 | 000,365,952 | ---- | M] () -- C:\Program Files (x86)\SMINST\BLService.exe
PRC - [2008.10.24 17:35:44 | 000,128,296 | ---- | M] () -- C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe
MOD - [2009.04.11 08:28:21 | 000,368,640 | ---- | M] () -- C:\Windows\SysWOW64\msjetoledb40.dll
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {B4F381CE-68D8-4179-A60A-797EC0C34865}
IE:64bit: - HKLM\..\SearchScopes\{B4F381CE-68D8-4179-A60A-797EC0C34865}: "URL" = http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1145&query={searchTerms}&invocationType=tb50hpcnnbie7-de-de
IE:64bit: - HKLM\..\SearchScopes\{BFF76C5E-CBC4-495C-B661-5C006E231FBD}: "URL" = http://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=cb-hp06&type=ie2008
IE:64bit: - HKLM\..\SearchScopes\{C1430D07-CC42-4C93-B020-95419C8DE704}: "URL" = http://de.kelkoopartners.net/ctl/do/search?siteSearchQuery={searchTerms}&fromform=true&x=true&y=true&partner=hp&partnerId=96913933
IE - HKLM\..\SearchScopes,DefaultScope = {B4F381CE-68D8-4179-A60A-797EC0C34865}
IE - HKLM\..\SearchScopes\{B4F381CE-68D8-4179-A60A-797EC0C34865}: "URL" = http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1145&query={searchTerms}&invocationType=tb50hpcnnbie7-de-de
IE - HKLM\..\SearchScopes\{BFF76C5E-CBC4-495C-B661-5C006E231FBD}: "URL" = http://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=cb-hp06&type=ie2008
IE - HKLM\..\SearchScopes\{C1430D07-CC42-4C93-B020-95419C8DE704}: "URL" = http://de.kelkoopartners.net/ctl/do/search?siteSearchQuery={searchTerms}&fromform=true&x=true&y=true&partner=hp&partnerId=96913933
IE - HKCU\..\URLSearchHook: - No CLSID value found
IE - HKCU\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
IE - HKCU\..\SearchScopes,DefaultScope = {95B7759C-8C7F-4BF1-B163-73684A933233}
IE - HKCU\..\SearchScopes\{043C5167-00BB-4324-AF7E-62013FAEDACF}: "URL" = http://vshare.toolbarhome.com/search.aspx?q={searchTerms}&srch=dsp
IE - HKCU\..\SearchScopes\{0481D689-A393-4CB0-9F8C-B2DBFB5140DA}: "URL" = http://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=827316&p={searchTerms}
IE - HKCU\..\SearchScopes\{59289BA4-2932-4C96-8C27-F047DE464B50}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=AVR-3&o=APN10395&src=kw&q={searchTerms}&locale=de_DE&apn_ptnrs=^ABT&apn_dtid=^YYYYYY^YY^DE&apn_uid=2a9500aa-dcfd-473a-97d4-6bbf94479fc3&apn_sauid=73AF018A-B193-4302-BF8C-ADC95663DA2E
IE - HKCU\..\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}: "URL" = http://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
IE - HKCU\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://isearch.avg.com/search?cid={C8EBC96A-AC5A-4D79-9F34-86750C33025C}&mid=47f78d70e7b647d087bfd16acd1cbd02-bf34e9831e27ba877eb1e558135b2a1d1c1c30fd&lang=en&ds=qw011&pr=sa&d=2012-06-08 22:54:49&v=11.1.0.7&sap=dsp&q={searchTerms}
IE - HKCU\..\SearchScopes\{DECA3892-BA8F-44b8-A993-A466AD694AE4}: "URL" = http://de.search.yahoo.com/search?p={searchTerms}&fr=chr-flv
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=827316&ilc=12"
FF - prefs.js..browser.startup.homepage: "http://isearch.avg.com?cid=%7Bf674ad91-fb82-45e7-94b5-690fe9957c63%7D&mid=47f78d70e7b647d087bfd16acd1cbd02-bf34e9831e27ba877eb1e558135b2a1d1c1c30fd&ds=qw011&v=11.1.0.7&lang=en&pr=sa&d=2012-06-08%2022%3A54%3A49&sap=hp"
FF - prefs.js..extensions.enabledItems: {35379F86-8CCB-4724-AE33-4278DE266C70}:1.0.5
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: {b749fc7c-e949-447f-926c-3f4eed6accfe}:0.7.0.2
FF - prefs.js..extensions.enabledItems: pdfforge@mybrowserbar.com:4.3
FF - prefs.js..extensions.enabledItems: wtxpcom@mybrowserbar.com:4.3
FF - prefs.js..extensions.enabledItems: {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.9
FF - prefs.js..keyword.URL: "http://websearch.ask.com/redirect?client=ff&src=kw&tb=AVR-3&o=APN10395&locale=de_DE&apn_uid=2a9500aa-dcfd-473a-97d4-6bbf94479fc3&apn_ptnrs=%5EABT&apn_sauid=73AF018A-B193-4302-BF8C-ADC95663DA2E&apn_dtid=%5EYYYYYY%5EYY%5EDE&&q="
FF - prefs.js..network.proxy.type: 0
FF - prefs.js..browser.search.selectedEngine: "Ask.com"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\HP\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\HP\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
File not found (No name found) -- C:\PROGRAM FILES (X86)\COMMON FILES\SPIGOT\WTXPCOM
O2 - BHO: (Avira SearchFree Toolbar plus Web Protection) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKLM\..\Toolbar: (Avira SearchFree Toolbar plus Web Protection) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKCU\..\Toolbar\WebBrowser: (vShare Plugin) - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files (x86)\vShare\vshare_toolbar.dll ()
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (Reg Error: Key error.)
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{8b327813-6d35-11e1-a229-00238bf854f1}\Shell - "" = AutoRun
O33 - MountPoints2\{8b327813-6d35-11e1-a229-00238bf854f1}\Shell\AutoRun\command - "" = G:\Startme.exe

[2012.07.18 20:16:46 | 000,000,000 | ---D | M] (Avira SearchFree Toolbar plus Web Protection) -- C:\Users\HP\AppData\Roaming\mozilla\Firefox\Profiles\pdye6swy.default\extensions\toolbar@ask.com
[2012.07.18 20:16:45 | 000,002,344 | ---- | M] () -- C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\pdye6swy.default\searchplugins\askcom.xml
[2012.07.18 20:16:29 | 000,000,000 | ---D | C] -- C:\Users\HP\AppData\Local\AskToolbar
[2012.07.18 20:17:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
 
[2012.07.17 22:11:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ask.com
[2012.07.04 00:30:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Spigot(6)
[2012.07.04 00:30:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\pdfforge Toolbar(88)
[2012.07.18 22:45:02 | 000,001,108 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-76278657-1345913044-2128216791-1000UA.job
[2012.07.13 03:00:51 | 000,001,056 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-76278657-1345913044-2128216791-1000Core.job

:Files

ipconfig /flushdns /c
:Commands
[purity]
[emptytemp]
[emptyflash]

  • Schließe alle Programme.
  • Klicke auf den Fix Button.
  • Wenn OTL einen Neustart verlangt, bitte zulassen.
  • Kopiere den Inhalt des Logfiles hier in Code-Tags in Deinen Thread.
    Nachträglich kannst Du das Logfile hier einsehen => C:\_OTL\MovedFiles\

Hinweis für Mitleser: Obiges OTL-Script ist ausschließlich für diesen User in dieser Situtation erstellt worden.
Auf keinen Fall auf anderen Rechnern anwenden, das kann andere Systeme nachhaltig schädigen!

McMax 19.07.2012 23:52

Hallo t´john,

vielen Dank für Deine Antwort.

Hier das OTL-Log:

Code:

All processes killed
========== OTL ==========
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B4F381CE-68D8-4179-A60A-797EC0C34865}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B4F381CE-68D8-4179-A60A-797EC0C34865}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{BFF76C5E-CBC4-495C-B661-5C006E231FBD}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BFF76C5E-CBC4-495C-B661-5C006E231FBD}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{C1430D07-CC42-4C93-B020-95419C8DE704}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C1430D07-CC42-4C93-B020-95419C8DE704}\ not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B4F381CE-68D8-4179-A60A-797EC0C34865}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B4F381CE-68D8-4179-A60A-797EC0C34865}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{BFF76C5E-CBC4-495C-B661-5C006E231FBD}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BFF76C5E-CBC4-495C-B661-5C006E231FBD}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{C1430D07-CC42-4C93-B020-95419C8DE704}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C1430D07-CC42-4C93-B020-95419C8DE704}\ not found.
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{00000000-6E41-4FD3-8538-502F5495E5FC} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}\ deleted successfully.
C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll moved successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{043C5167-00BB-4324-AF7E-62013FAEDACF}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{043C5167-00BB-4324-AF7E-62013FAEDACF}\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0481D689-A393-4CB0-9F8C-B2DBFB5140DA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0481D689-A393-4CB0-9F8C-B2DBFB5140DA}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{59289BA4-2932-4C96-8C27-F047DE464B50}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{59289BA4-2932-4C96-8C27-F047DE464B50}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6552C7DD-90A4-4387-B795-F8F96747DE19}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{DECA3892-BA8F-44b8-A993-A466AD694AE4}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DECA3892-BA8F-44b8-A993-A466AD694AE4}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktop deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktopChanges deleted successfully.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: All Users
 
User: Bettina
->Temp folder emptied: 16898819 bytes
->Temporary Internet Files folder emptied: 475105111 bytes
->Java cache emptied: 0 bytes
->Flash cache emptied: 2700 bytes
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: HP
->Temp folder emptied: 7309518 bytes
->Temporary Internet Files folder emptied: 73163454 bytes
->Java cache emptied: 2121216 bytes
->FireFox cache emptied: 45502064 bytes
->Flash cache emptied: 681 bytes
 
User: HP1
->Temp folder emptied: 351512 bytes
->Temporary Internet Files folder emptied: 5717478 bytes
->Flash cache emptied: 456 bytes
 
User: Public
 
User: TEMP
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 162509 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 963370 bytes
 
Total Files Cleaned = 598,00 mb
 
 
OTL by OldTimer - Version 3.2.54.0 log created on 07192012_182219

Files\Folders moved on Reboot...
File\Folder C:\Users\HP\AppData\Local\Temp\~DF14BD.tmp not found!
File\Folder C:\Users\HP\AppData\Local\Temp\~DF14C4.tmp not found!
File\Folder C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\CTPY66AN\-cannons;sz=4x4;adtype=preroll;lang=en;label=emi;login=no;channel=ap_king-cannons;category=1;displayads=yes;cgenre=rock;embedsite=wwwmix1de;tier=1;ord=465837[1].asx not found!
File\Folder C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\CTPY66AN\25193456_25194230_25194276_25194474_25194744_25195318_25196902_25197798_25197806_25197962_25198864_25199038_25199292_25199514_25200172_25200504_25202784_25205120[2] not found!
File\Folder C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\CTPY66AN\;adtype=preroll;cgenre=alternative;login=no;label=warnerbrosrecords;category=1;lang=en;displayads=yes;embedsite=mix1de;channel=ap_wwwmix1de;tier=1;ord=751479[1].asx not found!
File\Folder C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\CTPY66AN\ompressed_dda7aa8e3b172b4d8f4d9948bb91dcfb79658c70_js_css_optimizerdda7aa8e3b172b4d8f4d9948bb91dcfb79658c70_6e477a8a7086fa1be4db61e0ab6e7e33_bundled_cssFiles[1].css not found!
File\Folder C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\CTPY66AN\P_king-cannons;sz=4x4;adtype=preroll;cgenre=rock;login=no;label=emi;category=1;lang=en;displayads=yes;embedsite=mix1de;channel=ap_wwwmix1de;tier=1;ord=691861[1].asx not found!
File\Folder C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\CTPY66AN\use-music;sz=4x4;adtype=preroll;cgenre=;login=no;label=becausemusic;category=1;lang=en;displayads=yes;embedsite=mix1de;channel=ap_wwwmix1de;tier=3;ord=628409[1].asx not found!
File\Folder C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\91E4AK7O\-cannons;sz=4x4;adtype=preroll;lang=en;label=emi;login=no;channel=ap_king-cannons;category=1;displayads=yes;cgenre=rock;embedsite=wwwmix1de;tier=1;ord=404844[1].asx not found!
File\Folder C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\91E4AK7O\-cannons;sz=4x4;adtype=preroll;lang=en;label=emi;login=no;channel=ap_king-cannons;category=1;displayads=yes;cgenre=rock;embedsite=wwwmix1de;tier=2;ord=874496[1].asx not found!
File\Folder C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\91E4AK7O\-cannons;sz=4x4;adtype=preroll;lang=en;label=emi;login=no;channel=ap_king-cannons;category=1;displayads=yes;cgenre=rock;embedsite=wwwmix1de;tier=2;ord=982874[1].asx not found!
File\Folder C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\91E4AK7O\-cannons;sz=4x4;adtype=preroll;lang=en;label=emi;login=no;channel=ap_king-cannons;category=1;displayads=yes;cgenre=rock;embedsite=wwwmix1de;tier=3;ord=351027[1].asx not found!
File\Folder C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\91E4AK7O\-cannons;sz=4x4;adtype=preroll;lang=en;label=emi;login=no;channel=ap_king-cannons;category=1;displayads=yes;cgenre=rock;embedsite=wwwmix1de;tier=3;ord=418980[1].asx not found!
File\Folder C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\91E4AK7O\25163862_25165564_25174942_25178786_25179680_25180626_25181716_25181934_25183194_25193344_25193350_25194354_25195078_25195318_25197798_25197962_25198328_25198864[1] not found!
File\Folder C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\91E4AK7O\P_king-cannons;sz=4x4;adtype=preroll;cgenre=rock;login=no;label=emi;category=1;lang=en;displayads=yes;embedsite=mix1de;channel=ap_wwwmix1de;tier=3;ord=150616[1].asx not found!
File\Folder C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\91E4AK7O\unkdj-delicious;sz=4x4;adtype=preroll;cgenre=pop;login=no;label=emi;category=1;lang=en;displayads=yes;embedsite=mix1de;channel=ap_wwwmix1de;tier=1;ord=844921[1].asx not found!
File\Folder C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\91E4AK7O\unkdj-delicious;sz=4x4;adtype=preroll;cgenre=pop;login=no;label=emi;category=1;lang=en;displayads=yes;embedsite=mix1de;channel=ap_wwwmix1de;tier=2;ord=939452[1].asx not found!
File\Folder C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\91E4AK7O\x4;adtype=preroll;cgenre=rnb;alcohol=no;label=universal;lang=en;category=1;displayads=yes;channel=ap_timbaland;embedsite=wwwmix1de;login=no;tier=1;ord=282037[1].asx not found!
File\Folder C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\91E4AK7O\x4;alcohol=no;cgenre=rnb;label=universal;adtype=preroll;category=1;displayads=yes;channel=ap_timbaland;embedsite=wwwmix1de;lang=en;login=no;tier=1;ord=949775[1].asx not found!
File\Folder C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\91E4AK7O\z=4x4;adtype=preroll;cgenre=rnb;login=no;label=universal;alcohol=no;channel=ap_wwwmix1de;lang=en;displayads=yes;embedsite=mix1de;category=1;tier=2;ord=759889[1].asx not found!
File\Folder C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\91E4AK7O\z=4x4;adtype=preroll;cgenre=rnb;login=no;label=universal;alcohol=no;channel=ap_wwwmix1de;lang=en;displayads=yes;embedsite=mix1de;category=1;tier=3;ord=475524[1].asx not found!
File\Folder C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\8SQNDKZ5\-cannons;sz=4x4;adtype=preroll;lang=en;label=emi;login=no;channel=ap_king-cannons;category=1;displayads=yes;cgenre=rock;embedsite=wwwmix1de;tier=2;ord=587301[1].asx not found!
File\Folder C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\8SQNDKZ5\-cannons;sz=4x4;adtype=preroll;lang=en;label=emi;login=no;channel=ap_king-cannons;category=1;displayads=yes;cgenre=rock;embedsite=wwwmix1de;tier=3;ord=813890[1].asx not found!
File\Folder C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\8SQNDKZ5\25193456_25194230_25194276_25194474_25194744_25195318_25196902_25197798_25197806_25197962_25198864_25199038_25199292_25199514_25200172_25200504_25202784_25205120[1] not found!
File\Folder C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\8SQNDKZ5\25211658_25211958_25212306_25212980_25216336_25216360_25216652_25216846_25217724_25219044_25219404_25219424_25219454_25219494_25219518_25219528_25219540_25219620[1] not found!
File\Folder C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\8SQNDKZ5\;adtype=preroll;cgenre=alternative;login=no;label=warnerbrosrecords;category=1;lang=en;displayads=yes;embedsite=mix1de;channel=ap_wwwmix1de;tier=2;ord=533288[1].asx not found!
File\Folder C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\8SQNDKZ5\P_king-cannons;sz=4x4;adtype=preroll;cgenre=rock;login=no;label=emi;category=1;lang=en;displayads=yes;embedsite=mix1de;channel=ap_wwwmix1de;tier=2;ord=304766[1].asx not found!
File\Folder C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\8SQNDKZ5\use-music;sz=4x4;adtype=preroll;cgenre=;login=no;label=becausemusic;category=1;lang=en;displayads=yes;embedsite=mix1de;channel=ap_wwwmix1de;tier=1;ord=137372[1].asx not found!
File\Folder C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\8SQNDKZ5\x4;adtype=preroll;cgenre=rnb;alcohol=no;label=universal;lang=en;category=1;displayads=yes;channel=ap_timbaland;embedsite=wwwmix1de;login=no;tier=1;ord=967702[1].asx not found!
File\Folder C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\8SQNDKZ5\x4;adtype=preroll;cgenre=rnb;label=universal;login=no;category=1;displayads=yes;channel=ap_timbaland;embedsite=wwwmix1de;lang=en;alcohol=no;tier=1;ord=951076[1].asx not found!
File\Folder C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\8SQNDKZ5\x4;channel=ap_timbaland;label=universal;login=no;alcohol=no;category=1;lang=en;displayads=yes;cgenre=rnb;adtype=preroll;embedsite=wwwmix1de;tier=1;ord=401821[1].asx not found!
File\Folder C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\8SQNDKZ5\z=4x4;adtype=preroll;cgenre=pop;login=no;label=universal;category=1;lang=en;displayads=yes;alcohol=no;embedsite=mix1de;channel=ap_wwwmix1de;tier=2;ord=356817[1].asx not found!
File\Folder C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\1TG7SIOA\-cannons;sz=4x4;adtype=preroll;lang=en;label=emi;login=no;channel=ap_king-cannons;category=1;displayads=yes;cgenre=rock;embedsite=wwwmix1de;tier=1;ord=344590[1].asx not found!
File\Folder C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\1TG7SIOA\-cannons;sz=4x4;adtype=preroll;lang=en;label=emi;login=no;channel=ap_king-cannons;category=1;displayads=yes;cgenre=rock;embedsite=wwwmix1de;tier=1;ord=382844[1].asx not found!
File\Folder C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\1TG7SIOA\-cannons;sz=4x4;adtype=preroll;lang=en;label=emi;login=no;channel=ap_king-cannons;category=1;displayads=yes;cgenre=rock;embedsite=wwwmix1de;tier=1;ord=636269[1].asx not found!
File\Folder C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\1TG7SIOA\-cannons;sz=4x4;adtype=preroll;lang=en;label=emi;login=no;channel=ap_king-cannons;category=1;displayads=yes;cgenre=rock;embedsite=wwwmix1de;tier=1;ord=872733[1].asx not found!
File\Folder C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\1TG7SIOA\-cannons;sz=4x4;adtype=preroll;lang=en;label=emi;login=no;channel=ap_king-cannons;category=1;displayads=yes;cgenre=rock;embedsite=wwwmix1de;tier=2;ord=705262[1].asx not found!
File\Folder C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\1TG7SIOA\-cannons;sz=4x4;adtype=preroll;lang=en;label=emi;login=no;channel=ap_king-cannons;category=1;displayads=yes;cgenre=rock;embedsite=wwwmix1de;tier=2;ord=769155[1].asx not found!
File\Folder C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\1TG7SIOA\-cannons;sz=4x4;adtype=preroll;lang=en;label=emi;login=no;channel=ap_king-cannons;category=1;displayads=yes;cgenre=rock;embedsite=wwwmix1de;tier=2;ord=880451[1].asx not found!
File\Folder C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\1TG7SIOA\-cannons;sz=4x4;adtype=preroll;lang=en;label=emi;login=no;channel=ap_king-cannons;category=1;displayads=yes;cgenre=rock;embedsite=wwwmix1de;tier=3;ord=212161[1].asx not found!
File\Folder C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\1TG7SIOA\25163862_25165564_25174942_25178786_25180626_25181716_25181934_25183194_25195078_25195318_25198864_25206686_25206910_25207144_25208614_25208886_25208934_25209622[1] not found!
File\Folder C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\1TG7SIOA\25198864_25199292_25199514_25200172_25201382_25204156_25204284_25204998_25205018_25205036_25205046_25206686_25206910_25208614_25208886_25208934_25209308_25209622[1] not found!
File\Folder C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\1TG7SIOA\use-music;sz=4x4;adtype=preroll;cgenre=;login=no;label=becausemusic;category=1;lang=en;displayads=yes;embedsite=mix1de;channel=ap_wwwmix1de;tier=2;ord=456430[1].asx not found!
File\Folder C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\1TG7SIOA\x4;adtype=preroll;cgenre=rnb;alcohol=no;label=universal;lang=en;category=1;displayads=yes;channel=ap_timbaland;embedsite=wwwmix1de;login=no;tier=2;ord=677505[1].asx not found!
File\Folder C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\1TG7SIOA\x4;adtype=preroll;cgenre=rnb;label=universal;login=no;category=1;displayads=yes;channel=ap_timbaland;embedsite=wwwmix1de;lang=en;alcohol=no;tier=2;ord=835460[1].asx not found!
File\Folder C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\1TG7SIOA\z=4x4;adtype=preroll;cgenre=pop;login=no;label=universal;alcohol=no;channel=ap_wwwmix1de;lang=en;displayads=yes;embedsite=mix1de;category=1;tier=1;ord=983449[1].asx not found!
File\Folder C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\1TG7SIOA\z=4x4;adtype=preroll;cgenre=pop;login=no;label=universal;category=1;lang=en;displayads=yes;alcohol=no;embedsite=mix1de;channel=ap_wwwmix1de;tier=1;ord=741039[1].asx not found!
File\Folder C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\1TG7SIOA\z=4x4;adtype=preroll;cgenre=pop;login=no;label=universal;category=1;lang=en;displayads=yes;alcohol=no;embedsite=mix1de;channel=ap_wwwmix1de;tier=3;ord=978290[1].asx not found!
File\Folder C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\1TG7SIOA\z=4x4;adtype=preroll;cgenre=rnb;login=no;label=universal;alcohol=no;channel=ap_wwwmix1de;lang=en;displayads=yes;embedsite=mix1de;category=1;tier=1;ord=188450[1].asx not found!
C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\WU3ML2X9\OTL[1].Txt moved successfully.
C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\MSIMGSIZ.DAT moved successfully.

PendingFileRenameOperations files...
File C:\Users\HP\AppData\Local\Temp\~DF14BD.tmp not found!
File C:\Users\HP\AppData\Local\Temp\~DF14C4.tmp not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\CTPY66AN\-cannons;sz=4x4;adtype=preroll;lang=en;label=emi;login=no;channel=ap_king-cannons;category=1;displayads=yes;cgenre=rock;embedsite=wwwmix1de;tier=1;ord=465837[1].asx not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\CTPY66AN\25193456_25194230_25194276_25194474_25194744_25195318_25196902_25197798_25197806_25197962_25198864_25199038_25199292_25199514_25200172_25200504_25202784_25205120[2] not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\CTPY66AN\;adtype=preroll;cgenre=alternative;login=no;label=warnerbrosrecords;category=1;lang=en;displayads=yes;embedsite=mix1de;channel=ap_wwwmix1de;tier=1;ord=751479[1].asx not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\CTPY66AN\ompressed_dda7aa8e3b172b4d8f4d9948bb91dcfb79658c70_js_css_optimizerdda7aa8e3b172b4d8f4d9948bb91dcfb79658c70_6e477a8a7086fa1be4db61e0ab6e7e33_bundled_cssFiles[1].css not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\CTPY66AN\P_king-cannons;sz=4x4;adtype=preroll;cgenre=rock;login=no;label=emi;category=1;lang=en;displayads=yes;embedsite=mix1de;channel=ap_wwwmix1de;tier=1;ord=691861[1].asx not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\CTPY66AN\use-music;sz=4x4;adtype=preroll;cgenre=;login=no;label=becausemusic;category=1;lang=en;displayads=yes;embedsite=mix1de;channel=ap_wwwmix1de;tier=3;ord=628409[1].asx not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\91E4AK7O\-cannons;sz=4x4;adtype=preroll;lang=en;label=emi;login=no;channel=ap_king-cannons;category=1;displayads=yes;cgenre=rock;embedsite=wwwmix1de;tier=1;ord=404844[1].asx not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\91E4AK7O\-cannons;sz=4x4;adtype=preroll;lang=en;label=emi;login=no;channel=ap_king-cannons;category=1;displayads=yes;cgenre=rock;embedsite=wwwmix1de;tier=2;ord=874496[1].asx not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\91E4AK7O\-cannons;sz=4x4;adtype=preroll;lang=en;label=emi;login=no;channel=ap_king-cannons;category=1;displayads=yes;cgenre=rock;embedsite=wwwmix1de;tier=2;ord=982874[1].asx not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\91E4AK7O\-cannons;sz=4x4;adtype=preroll;lang=en;label=emi;login=no;channel=ap_king-cannons;category=1;displayads=yes;cgenre=rock;embedsite=wwwmix1de;tier=3;ord=351027[1].asx not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\91E4AK7O\-cannons;sz=4x4;adtype=preroll;lang=en;label=emi;login=no;channel=ap_king-cannons;category=1;displayads=yes;cgenre=rock;embedsite=wwwmix1de;tier=3;ord=418980[1].asx not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\91E4AK7O\25163862_25165564_25174942_25178786_25179680_25180626_25181716_25181934_25183194_25193344_25193350_25194354_25195078_25195318_25197798_25197962_25198328_25198864[1] not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\91E4AK7O\P_king-cannons;sz=4x4;adtype=preroll;cgenre=rock;login=no;label=emi;category=1;lang=en;displayads=yes;embedsite=mix1de;channel=ap_wwwmix1de;tier=3;ord=150616[1].asx not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\91E4AK7O\unkdj-delicious;sz=4x4;adtype=preroll;cgenre=pop;login=no;label=emi;category=1;lang=en;displayads=yes;embedsite=mix1de;channel=ap_wwwmix1de;tier=1;ord=844921[1].asx not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\91E4AK7O\unkdj-delicious;sz=4x4;adtype=preroll;cgenre=pop;login=no;label=emi;category=1;lang=en;displayads=yes;embedsite=mix1de;channel=ap_wwwmix1de;tier=2;ord=939452[1].asx not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\91E4AK7O\x4;adtype=preroll;cgenre=rnb;alcohol=no;label=universal;lang=en;category=1;displayads=yes;channel=ap_timbaland;embedsite=wwwmix1de;login=no;tier=1;ord=282037[1].asx not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\91E4AK7O\x4;alcohol=no;cgenre=rnb;label=universal;adtype=preroll;category=1;displayads=yes;channel=ap_timbaland;embedsite=wwwmix1de;lang=en;login=no;tier=1;ord=949775[1].asx not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\91E4AK7O\z=4x4;adtype=preroll;cgenre=rnb;login=no;label=universal;alcohol=no;channel=ap_wwwmix1de;lang=en;displayads=yes;embedsite=mix1de;category=1;tier=2;ord=759889[1].asx not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\91E4AK7O\z=4x4;adtype=preroll;cgenre=rnb;login=no;label=universal;alcohol=no;channel=ap_wwwmix1de;lang=en;displayads=yes;embedsite=mix1de;category=1;tier=3;ord=475524[1].asx not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\8SQNDKZ5\-cannons;sz=4x4;adtype=preroll;lang=en;label=emi;login=no;channel=ap_king-cannons;category=1;displayads=yes;cgenre=rock;embedsite=wwwmix1de;tier=2;ord=587301[1].asx not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\8SQNDKZ5\-cannons;sz=4x4;adtype=preroll;lang=en;label=emi;login=no;channel=ap_king-cannons;category=1;displayads=yes;cgenre=rock;embedsite=wwwmix1de;tier=3;ord=813890[1].asx not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\8SQNDKZ5\25193456_25194230_25194276_25194474_25194744_25195318_25196902_25197798_25197806_25197962_25198864_25199038_25199292_25199514_25200172_25200504_25202784_25205120[1] not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\8SQNDKZ5\25211658_25211958_25212306_25212980_25216336_25216360_25216652_25216846_25217724_25219044_25219404_25219424_25219454_25219494_25219518_25219528_25219540_25219620[1] not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\8SQNDKZ5\;adtype=preroll;cgenre=alternative;login=no;label=warnerbrosrecords;category=1;lang=en;displayads=yes;embedsite=mix1de;channel=ap_wwwmix1de;tier=2;ord=533288[1].asx not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\8SQNDKZ5\P_king-cannons;sz=4x4;adtype=preroll;cgenre=rock;login=no;label=emi;category=1;lang=en;displayads=yes;embedsite=mix1de;channel=ap_wwwmix1de;tier=2;ord=304766[1].asx not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\8SQNDKZ5\use-music;sz=4x4;adtype=preroll;cgenre=;login=no;label=becausemusic;category=1;lang=en;displayads=yes;embedsite=mix1de;channel=ap_wwwmix1de;tier=1;ord=137372[1].asx not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\8SQNDKZ5\x4;adtype=preroll;cgenre=rnb;alcohol=no;label=universal;lang=en;category=1;displayads=yes;channel=ap_timbaland;embedsite=wwwmix1de;login=no;tier=1;ord=967702[1].asx not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\8SQNDKZ5\x4;adtype=preroll;cgenre=rnb;label=universal;login=no;category=1;displayads=yes;channel=ap_timbaland;embedsite=wwwmix1de;lang=en;alcohol=no;tier=1;ord=951076[1].asx not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\8SQNDKZ5\x4;channel=ap_timbaland;label=universal;login=no;alcohol=no;category=1;lang=en;displayads=yes;cgenre=rnb;adtype=preroll;embedsite=wwwmix1de;tier=1;ord=401821[1].asx not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\8SQNDKZ5\z=4x4;adtype=preroll;cgenre=pop;login=no;label=universal;category=1;lang=en;displayads=yes;alcohol=no;embedsite=mix1de;channel=ap_wwwmix1de;tier=2;ord=356817[1].asx not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\1TG7SIOA\-cannons;sz=4x4;adtype=preroll;lang=en;label=emi;login=no;channel=ap_king-cannons;category=1;displayads=yes;cgenre=rock;embedsite=wwwmix1de;tier=1;ord=344590[1].asx not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\1TG7SIOA\-cannons;sz=4x4;adtype=preroll;lang=en;label=emi;login=no;channel=ap_king-cannons;category=1;displayads=yes;cgenre=rock;embedsite=wwwmix1de;tier=1;ord=382844[1].asx not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\1TG7SIOA\-cannons;sz=4x4;adtype=preroll;lang=en;label=emi;login=no;channel=ap_king-cannons;category=1;displayads=yes;cgenre=rock;embedsite=wwwmix1de;tier=1;ord=636269[1].asx not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\1TG7SIOA\-cannons;sz=4x4;adtype=preroll;lang=en;label=emi;login=no;channel=ap_king-cannons;category=1;displayads=yes;cgenre=rock;embedsite=wwwmix1de;tier=1;ord=872733[1].asx not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\1TG7SIOA\-cannons;sz=4x4;adtype=preroll;lang=en;label=emi;login=no;channel=ap_king-cannons;category=1;displayads=yes;cgenre=rock;embedsite=wwwmix1de;tier=2;ord=705262[1].asx not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\1TG7SIOA\-cannons;sz=4x4;adtype=preroll;lang=en;label=emi;login=no;channel=ap_king-cannons;category=1;displayads=yes;cgenre=rock;embedsite=wwwmix1de;tier=2;ord=769155[1].asx not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\1TG7SIOA\-cannons;sz=4x4;adtype=preroll;lang=en;label=emi;login=no;channel=ap_king-cannons;category=1;displayads=yes;cgenre=rock;embedsite=wwwmix1de;tier=2;ord=880451[1].asx not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\1TG7SIOA\-cannons;sz=4x4;adtype=preroll;lang=en;label=emi;login=no;channel=ap_king-cannons;category=1;displayads=yes;cgenre=rock;embedsite=wwwmix1de;tier=3;ord=212161[1].asx not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\1TG7SIOA\25163862_25165564_25174942_25178786_25180626_25181716_25181934_25183194_25195078_25195318_25198864_25206686_25206910_25207144_25208614_25208886_25208934_25209622[1] not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\1TG7SIOA\25198864_25199292_25199514_25200172_25201382_25204156_25204284_25204998_25205018_25205036_25205046_25206686_25206910_25208614_25208886_25208934_25209308_25209622[1] not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\1TG7SIOA\use-music;sz=4x4;adtype=preroll;cgenre=;login=no;label=becausemusic;category=1;lang=en;displayads=yes;embedsite=mix1de;channel=ap_wwwmix1de;tier=2;ord=456430[1].asx not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\1TG7SIOA\x4;adtype=preroll;cgenre=rnb;alcohol=no;label=universal;lang=en;category=1;displayads=yes;channel=ap_timbaland;embedsite=wwwmix1de;login=no;tier=2;ord=677505[1].asx not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\1TG7SIOA\x4;adtype=preroll;cgenre=rnb;label=universal;login=no;category=1;displayads=yes;channel=ap_timbaland;embedsite=wwwmix1de;lang=en;alcohol=no;tier=2;ord=835460[1].asx not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\1TG7SIOA\z=4x4;adtype=preroll;cgenre=pop;login=no;label=universal;alcohol=no;channel=ap_wwwmix1de;lang=en;displayads=yes;embedsite=mix1de;category=1;tier=1;ord=983449[1].asx not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\1TG7SIOA\z=4x4;adtype=preroll;cgenre=pop;login=no;label=universal;category=1;lang=en;displayads=yes;alcohol=no;embedsite=mix1de;channel=ap_wwwmix1de;tier=1;ord=741039[1].asx not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\1TG7SIOA\z=4x4;adtype=preroll;cgenre=pop;login=no;label=universal;category=1;lang=en;displayads=yes;alcohol=no;embedsite=mix1de;channel=ap_wwwmix1de;tier=3;ord=978290[1].asx not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(126)\Content.IE5\1TG7SIOA\z=4x4;adtype=preroll;cgenre=rnb;login=no;label=universal;alcohol=no;channel=ap_wwwmix1de;lang=en;displayads=yes;embedsite=mix1de;category=1;tier=1;ord=188450[1].asx not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\WU3ML2X9\OTL[1].Txt not found!
File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\MSIMGSIZ.DAT not found!

Registry entries deleted on Reboot...

Was heißt das nun?

Außerdem hab ich festgestellt, dass sich seit dem Fix Outlook nicht mehr öffnen lässt. Er findet die Datei "Outlook.pst" nicht mehr.
Woran liegt das? Gibt es eine Möglichkeit dies wieder rückgängig zu machen? Hab von meiner Outlook.pst leider keine Sicherung!!! :-(

Vielen Dank schon mal vorab.

Gruß

Max

t'john 20.07.2012 09:54

Alles was OTL gemacht hat ist hier zu finden: C:\_OTL\MovedFiles\

Aber mi PST Dateien von Outlook hat OTL nichts zu tun.

Hast du einen aelteren Systemwiederherstellungspunkt?

McMax 20.07.2012 17:27

Ja, hätte ich schon. Der älteste Zeitpunkt ist vom 14.06.2012.

Aber wird dadurch die PST-Datei wieder hergestellt?

Und was ist mit den Viren? Ist mein System jetzt sauber? Was ist, wenn ich die Systemwiederherstellung mache? Werden die Viren dann nicht wieder aktiv??

Thx

Gruß

Max

t'john 20.07.2012 20:03

Versuche mit Recuva Download - Recuva 1.43.623 die Datei zu finden.

Wenn Du sie gefunden hast, machen wir weiter.

McMax 20.07.2012 21:16

Danke für den Tip. Leider hat er die Datei outlook.pst oder archive.pst nicht gefinden! :-(((

Und nu???

Gibts wohl keine Chance mehr oder?

t'john 20.07.2012 21:39

Du kannst versuchen jetzt einen Wiederherstellungspunkt zu erzeugen und auf einen alten zuruecksetzen.

Die Datei kopieren und wieder zurueckzusetzen.

Aber waere die Datei vor kurzen erst geloescht worden, haette sie Recuva gefunden.

Wie lautet der Pfad zu der PST Datei?

McMax 20.07.2012 22:27

Aber durch die Systemrücksetzungen zu einem früheren Wiederherstellungszeitpunkt wird doch auch die pst-Datei nicht wieder erstellt/gefunden oder??

Die war definitiv vor kurzem noch da, da ich gestern ja noch drin war in Outlook, bevor ich den FIX mit OTL machte.
Komisch ist aber auch, dass ich über die Suche, die Emails von der nicht mehr auffindbaren pst-Datei finde. Also wenn ich z.B. nen Suchbegriff eingeb "Müller" findet er Emails, die z.B. an den Müller schickte.
Name "Alles Gute zum Geburtstag", Änderungsdatum "10.07.2012", Ordner "Gesendete Objekte (Persönliche Ordner)".
Ich kann die Email aber nicht öffnen und ich nicht in Outlook reinziehen. Hier kommt dann der Fehlerhinweis "Die Elemente können nicht kopiert werden. Das System kann die angegebene Datei nicht finden".

Komisch...

Der Pfad, wo sich die .pst-Datei befand lautet:
C:\Users\HP\AppData\Local\Microsoft\Outlook

t'john 21.07.2012 12:59

Hast du einen Virenscanner, der auch Mails ueberwacht?

McMax 21.07.2012 21:00

Hab Antivir. Und der Mail-Schutz ist/war nicht aktiviert...

t'john 21.07.2012 21:11

Kannst noch mit http://www.trojaner-board.de/115496-...erstellen.html schauen ob eine Aeltere Version vom Verzeichnis da ist.

McMax 21.07.2012 22:00

Hey t'john!!!
Du bist der Wahnsinn!!! :applaus::applaus:
Genau das wars... ShadowExplorer fand ältere Versionen meiner "Outlook.pst". Hab sie wiederherstellen könnne!

Echt ein Spitzentip.

Vielen vielen Dank für deine schnelle und sehr kompetente Hilfe! :abklatsch:

:dankeschoen::dankeschoen::dankeschoen::dankeschoen::dankeschoen::dankeschoen::dankeschoen:

Ich hoff, jetzt läuft alles fehler- und virenfrei!!

Gruß

Max

t'john 21.07.2012 22:07

Super! :daumenhoc

Jetzt fangen wir an:

1. Schritt

Bitte einen Vollscan mit Malwarebytes Anti-Malware machen und Log posten.
Denk daran, dass Malwarebytes vor jedem Scan manuell aktualisiert werden muss!

Malwarebytes Anti-Malware
- Anwendbar auf Windows 2000, XP, Vista und 7.
- Installiere das Programm in den vorgegebenen Pfad.
- Aktiviere "Komplett Scan durchführen" => Scan.
- Wähle alle verfügbaren Laufwerke (ausser CD/DVD) aus und starte den Scan.
- Funde bitte löschen lassen oder in Quarantäne.
- Wenn der Scan beendet ist, klicke auf "Zeige Resultate".

danach:


Downloade Dir bitte AdwCleaner auf deinen Desktop.
  • Starte die adwcleaner.exe mit einem Doppelklick.
  • Klicke auf Search.
  • Nach Ende des Suchlaufs öffnet sich eine Textdatei.
  • Poste mir den Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner[R1].txt.

McMax 22.07.2012 04:02

Hallo t'john,

hier das Malwarebyte-Log:
Code:

Malwarebytes Anti-Malware (Test) 1.62.0.1300
www.malwarebytes.org

Datenbank Version: v2012.07.21.12

Windows Vista Service Pack 2 x64 NTFS
Internet Explorer 9.0.8112.16421
HP :: HP1-PC [Administrator]

Schutz: Aktiviert

21.07.2012 23:50:21
mbam-log-2012-07-21 (23-50-21).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 538525
Laufzeit: 3 Stunde(n), 4 Minute(n), 53 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 1
C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U5RC8IE8\VLCMediaPlayerSetup.exe (PUP.BundleInstaller.BI) -> Keine Aktion durchgeführt.

(Ende)

und hier das Log von AdwCleaner:

Code:

# AdwCleaner v1.703 - Logfile created 07/22/2012 at 04:52:53
# Updated 20/07/2012 by Xplode
# Operating system : Windows (TM) Vista Home Premium Service Pack 2 (64 bits)
# User : HP - HP1-PC
# Running from : C:\Users\HP\Desktop\adwcleaner.exe
# Option [Search]


***** [Services] *****

Found : vToolbarUpdater11.2.0
Found : Web Assistant Updater

***** [Files / Folders] *****

Folder Found : C:\Users\HP\AppData\LocalLow\boost_interprocess
Folder Found : C:\Users\HP\AppData\LocalLow\vShare
Folder Found : C:\Users\Bettina\AppData\LocalLow\boost_interprocess
Folder Found : C:\Users\Bettina\AppData\LocalLow\pdfforge
Folder Found : C:\Users\Bettina\AppData\LocalLow\Search Settings
Folder Found : C:\Users\Bettina\AppData\LocalLow\vShare
Folder Found : C:\ProgramData\AVG Secure Search
Folder Found : C:\Program Files\Web Assistant
Folder Found : C:\Program Files (x86)\Ask.com
Folder Found : C:\Program Files (x86)\Incredibar.com
Folder Found : C:\Program Files (x86)\vShare
Folder Found : C:\Program Files (x86)\Common Files\AVG Secure Search
File Found : C:\Users\HP\AppData\Local\Temp\Uninstall.exe
File Found : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eBay.lnk
File Found : C:\Program Files (x86)\Mozilla Firefox\searchplugins\avg-secure-search.xml

***** [Registry] *****

Key Found : HKCU\Software\AVG Secure Search
Key Found : HKCU\Software\IGearSettings
Key Found : HKCU\Software\IM
Key Found : HKCU\Software\ImInstaller
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\vShare
Key Found : HKCU\Software\vShare
Key Found : HKLM\SOFTWARE\AVG Secure Search
Key Found : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Key Found : HKLM\SOFTWARE\Classes\AppID\Extension.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Key Found : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Key Found : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI
Key Found : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1
Key Found : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj
Key Found : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1
Key Found : HKLM\SOFTWARE\Classes\escort.escortIEPane
Key Found : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Key Found : HKLM\SOFTWARE\Classes\esrv.IncredibarESrvc
Key Found : HKLM\SOFTWARE\Classes\esrv.IncredibarESrvc.1
Key Found : HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject
Key Found : HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject.1
Key Found : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd
Key Found : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1
Key Found : HKLM\SOFTWARE\Classes\I
Key Found : HKLM\SOFTWARE\Classes\Incredibar.dskBnd
Key Found : HKLM\SOFTWARE\Classes\Incredibar.dskBnd.1
Key Found : HKLM\SOFTWARE\Classes\Incredibar.IncredibarHlpr
Key Found : HKLM\SOFTWARE\Classes\Incredibar.IncredibarHlpr.1
Key Found : HKLM\SOFTWARE\Classes\IncredibarApp.appCore
Key Found : HKLM\SOFTWARE\Classes\IncredibarApp.appCore.1
Key Found : HKLM\SOFTWARE\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
Key Found : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\viprotocol
Key Found : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\vsharechrome
Key Found : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Key Found : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Key Found : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Key Found : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Key Found : HKLM\SOFTWARE\Classes\vShare.IMedixProtocol
Key Found : HKLM\SOFTWARE\Classes\vShare.IMedixProtocol.1
Key Found : HKLM\SOFTWARE\Classes\vShare.PugiObj
Key Found : HKLM\SOFTWARE\Classes\vShare.PugiObj.1
Key Found : HKLM\SOFTWARE\Classes\vShare.ScriptHelpers
Key Found : HKLM\SOFTWARE\Classes\vShare.ScriptHelpers.1
Key Found : HKLM\SOFTWARE\Description
Key Found : HKLM\SOFTWARE\Incredibar.com
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\incredibar
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\vShare
Key Found : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Key Found : HKLM\SOFTWARE\Orbit\OpenCandy
Value Found : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
[x64] Key Found : HKCU\Software\AVG Secure Search
[x64] Key Found : HKCU\Software\IGearSettings
[x64] Key Found : HKCU\Software\IM
[x64] Key Found : HKCU\Software\ImInstaller
[x64] Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\vShare
[x64] Key Found : HKCU\Software\vShare
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\escort.DLL
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\Extension.DLL
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
[x64] Key Found : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI
[x64] Key Found : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1
[x64] Key Found : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj
[x64] Key Found : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1
[x64] Key Found : HKLM\SOFTWARE\Classes\escort.escortIEPane
[x64] Key Found : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
[x64] Key Found : HKLM\SOFTWARE\Classes\esrv.IncredibarESrvc
[x64] Key Found : HKLM\SOFTWARE\Classes\esrv.IncredibarESrvc.1
[x64] Key Found : HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject
[x64] Key Found : HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject.1
[x64] Key Found : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd
[x64] Key Found : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1
[x64] Key Found : HKLM\SOFTWARE\Classes\I
[x64] Key Found : HKLM\SOFTWARE\Classes\Incredibar.dskBnd
[x64] Key Found : HKLM\SOFTWARE\Classes\Incredibar.dskBnd.1
[x64] Key Found : HKLM\SOFTWARE\Classes\Incredibar.IncredibarHlpr
[x64] Key Found : HKLM\SOFTWARE\Classes\Incredibar.IncredibarHlpr.1
[x64] Key Found : HKLM\SOFTWARE\Classes\IncredibarApp.appCore
[x64] Key Found : HKLM\SOFTWARE\Classes\IncredibarApp.appCore.1
[x64] Key Found : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\viprotocol
[x64] Key Found : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\vsharechrome
[x64] Key Found : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
[x64] Key Found : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
[x64] Key Found : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
[x64] Key Found : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
[x64] Key Found : HKLM\SOFTWARE\Classes\vShare.IMedixProtocol
[x64] Key Found : HKLM\SOFTWARE\Classes\vShare.IMedixProtocol.1
[x64] Key Found : HKLM\SOFTWARE\Classes\vShare.PugiObj
[x64] Key Found : HKLM\SOFTWARE\Classes\vShare.PugiObj.1
[x64] Key Found : HKLM\SOFTWARE\Classes\vShare.ScriptHelpers
[x64] Key Found : HKLM\SOFTWARE\Classes\vShare.ScriptHelpers.1
[x64] Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
[x64] Key Found : HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ApnUpdater
[x64] Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{336D0C35-8A85-403a-B9D2-65C292C39087}_is1
[x64] Key Found : HKLM\SOFTWARE\Web Assistant
[x64] Value Found : HKLM\SOFTWARE\Mozilla\Firefox\extensions [{336D0C35-8A85-403a-B9D2-65C292C39087}]

***** [Registre - GUID] *****

Key Found : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Found : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Key Found : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Found : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Key Found : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Key Found : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Key Found : HKLM\SOFTWARE\Classes\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B}
Key Found : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Key Found : HKLM\SOFTWARE\Classes\AppID\{CFE8AAFD-A0F3-4329-84E9-6B679EC93EC2}
Key Found : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{336D0C35-8A85-403a-B9D2-65C292C39087}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{3B7599DF-3D5D-4EF5-BF51-9C2EDA788E83}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{3F3A4B8A-86FC-43A4-BB00-6D7EBE9D4484}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{761F6A83-F007-49E4-8EAC-CDB6808EF06F}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{C01315C7-B4E2-4864-B43D-5FAFC414D179}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{C1545464-C77C-4130-A572-1C619E2895FE}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{ED0E67AD-926C-4008-87E5-03CF72AA2A7E}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{EF7FEC6D-451B-4452-9D26-7E10C6B5DB6E}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{F9639E4A-801B-4843-AEE3-03D9DA199E77}
Key Found : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Found : HKLM\SOFTWARE\Classes\Interface\{20ED5AF7-D9C4-409E-9EB3-D2A44A77FB6D}
Key Found : HKLM\SOFTWARE\Classes\Interface\{22B0769F-794B-4422-AC84-47B123C8986D}
Key Found : HKLM\SOFTWARE\Classes\Interface\{255E0B2A-D747-4EEF-B7CE-159D73A3656D}
Key Found : HKLM\SOFTWARE\Classes\Interface\{28ED590D-F5ED-4E05-A87F-1D759F1C6169}
Key Found : HKLM\SOFTWARE\Classes\Interface\{45D5B93F-E2ED-4AF2-915E-DCDDBDA8C33C}
Key Found : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Found : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Key Found : HKLM\SOFTWARE\Classes\Interface\{771B99AB-636F-4A11-9039-8DFEB927B061}
Key Found : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Key Found : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Found : HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
Key Found : HKLM\SOFTWARE\Classes\Interface\{A8321AA2-2227-40C7-8525-6C2F4E1B0EBE}
Key Found : HKLM\SOFTWARE\Classes\Interface\{AA41A731-6814-4A70-A6F1-C0A20FBBFBD5}
Key Found : HKLM\SOFTWARE\Classes\Interface\{ABBB8A9E-D8AF-40D1-94BE-5175077465FC}
Key Found : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Key Found : HKLM\SOFTWARE\Classes\Interface\{BF737694-56F6-46FA-9FDC-FA99A5B25FAD}
Key Found : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Found : HKLM\SOFTWARE\Classes\Interface\{CFCD164E-8AC9-478E-9ECC-B616A932016C}
Key Found : HKLM\SOFTWARE\Classes\Interface\{D5961CC0-B442-4567-8030-67E241EF4CC2}
Key Found : HKLM\SOFTWARE\Classes\Interface\{E450067F-1C93-41A7-928E-07E5C2EEC680}
Key Found : HKLM\SOFTWARE\Classes\Interface\{F977D9F2-4BDC-44A6-B508-7C0284C61EED}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{1D5A4199-956E-49BC-B89F-6A35C57C0D13}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{2D5E2D34-BED5-4B9F-9793-A31E26E6806E}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{3E315C81-442B-431C-AEC8-ED189699EC24}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{48C9C8B0-A546-46C1-A81F-47A31E623E9D}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{CFE8AAFD-A0F3-4329-84E9-6B679EC93EC2}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{043C5167-00BB-4324-AF7E-62013FAEDACF}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{74C36554-31F0-49DD-8857-ED6A64DF45BE}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{043C5167-00BB-4324-AF7E-62013FAEDACF}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403a-B9D2-65C292C39087}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3B7599DF-3D5D-4EF5-BF51-9C2EDA788E83}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{336D0C35-8A85-403a-B9D2-65C292C39087}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F9639E4A-801B-4843-AEE3-03D9DA199E77}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{043C5167-00BB-4324-AF7E-62013FAEDACF}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{336D0C35-8A85-403a-B9D2-65C292C39087}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3B7599DF-3D5D-4EF5-BF51-9C2EDA788E83}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9639E4A-801B-4843-AEE3-03D9DA199E77}
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{043C5167-00BB-4324-AF7E-62013FAEDACF}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{F9639E4A-801B-4843-AEE3-03D9DA199E77}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{043C5167-00BB-4324-AF7E-62013FAEDACF}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B}
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\{CFE8AAFD-A0F3-4329-84E9-6B679EC93EC2}
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
[x64] Key Found : HKLM\SOFTWARE\Classes\CLSID\{336D0C35-8A85-403a-B9D2-65C292C39087}
[x64] Key Found : HKLM\SOFTWARE\Classes\CLSID\{3F3A4B8A-86FC-43A4-BB00-6D7EBE9D4484}
[x64] Key Found : HKLM\SOFTWARE\Classes\CLSID\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
[x64] Key Found : HKLM\SOFTWARE\Classes\CLSID\{C01315C7-B4E2-4864-B43D-5FAFC414D179}
[x64] Key Found : HKLM\SOFTWARE\Classes\CLSID\{C1545464-C77C-4130-A572-1C619E2895FE}
[x64] Key Found : HKLM\SOFTWARE\Classes\CLSID\{ED0E67AD-926C-4008-87E5-03CF72AA2A7E}
[x64] Key Found : HKLM\SOFTWARE\Classes\CLSID\{EF7FEC6D-451B-4452-9D26-7E10C6B5DB6E}
[x64] Key Found : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
[x64] Key Found : HKLM\SOFTWARE\Classes\CLSID\{F9639E4A-801B-4843-AEE3-03D9DA199E77}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{20ED5AF7-D9C4-409E-9EB3-D2A44A77FB6D}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{22B0769F-794B-4422-AC84-47B123C8986D}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{255E0B2A-D747-4EEF-B7CE-159D73A3656D}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{28ED590D-F5ED-4E05-A87F-1D759F1C6169}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{45D5B93F-E2ED-4AF2-915E-DCDDBDA8C33C}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{771B99AB-636F-4A11-9039-8DFEB927B061}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{A8321AA2-2227-40C7-8525-6C2F4E1B0EBE}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{AA41A731-6814-4A70-A6F1-C0A20FBBFBD5}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{ABBB8A9E-D8AF-40D1-94BE-5175077465FC}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{BF737694-56F6-46FA-9FDC-FA99A5B25FAD}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{CFCD164E-8AC9-478E-9ECC-B616A932016C}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{D5961CC0-B442-4567-8030-67E241EF4CC2}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{E450067F-1C93-41A7-928E-07E5C2EEC680}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{F977D9F2-4BDC-44A6-B508-7C0284C61EED}
[x64] Key Found : HKLM\SOFTWARE\Classes\TypeLib\{1D5A4199-956E-49BC-B89F-6A35C57C0D13}
[x64] Key Found : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
[x64] Key Found : HKLM\SOFTWARE\Classes\TypeLib\{2D5E2D34-BED5-4B9F-9793-A31E26E6806E}
[x64] Key Found : HKLM\SOFTWARE\Classes\TypeLib\{3E315C81-442B-431C-AEC8-ED189699EC24}
[x64] Key Found : HKLM\SOFTWARE\Classes\TypeLib\{48C9C8B0-A546-46C1-A81F-47A31E623E9D}
[x64] Key Found : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
[x64] Key Found : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
[x64] Key Found : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
[x64] Key Found : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
[x64] Key Found : HKLM\SOFTWARE\Classes\TypeLib\{CFE8AAFD-A0F3-4329-84E9-6B679EC93EC2}
[x64] Key Found : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
[x64] Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A}
[x64] Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403a-B9D2-65C292C39087}
[x64] Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{336D0C35-8A85-403a-B9D2-65C292C39087}
[x64] Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
[x64] Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
[x64] Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F9639E4A-801B-4843-AEE3-03D9DA199E77}
[x64] Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{043C5167-00BB-4324-AF7E-62013FAEDACF}
[x64] Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{336D0C35-8A85-403a-B9D2-65C292C39087}
[x64] Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3B7599DF-3D5D-4EF5-BF51-9C2EDA788E83}
[x64] Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
[x64] Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
[x64] Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
[x64] Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
[x64] Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9639E4A-801B-4843-AEE3-03D9DA199E77}
[x64] Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{043C5167-00BB-4324-AF7E-62013FAEDACF}]
[x64] Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16421

[OK] Registry is clean.

*************************

AdwCleaner[R1].txt - [23195 octets] - [22/07/2012 04:52:53]

########## EOF - C:\AdwCleaner[R1].txt - [23324 octets] ##########

Hab die Registryeinträge noch nicht entfernt mit AdwCleaner. Soll ich das tun? Sind ja ne Menge fehlerhafter Einträge oder?

Gruß

Max


Alle Zeitangaben in WEZ +1. Es ist jetzt 09:09 Uhr.

Copyright ©2000-2024, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129