![]() |
Das hoffe ich auch. Mach bitte nochmals einen Neustart und schau, ob dieses Ding danach wirklich nicht mehr auftaucht. :) |
Ich glaub ich gebe auf......Spyhunter ist wieder in Programme und Funktionen.Das gibt es doch gar nicht.)-: |
Wieder die gleiche Frage: Ist es denn nur noch dieser Eintrag unter Programme und Funktionen, oder ist auch das Programm noch da? Mach bitte das nochmals, ich möchte sehen, ob sich auch die Files wiederherstellen:
Code: :files
|
Guten Morgen Wie kann ich erkennen,ob es sich nur um den Eintrag oder das Programm handelt? Fenster von Spyhunter sind bislang nicht wieder aufgetaucht. ========== FILES ========== File\Folder C:\Program Files\Enigma Software Group not found. File\Folder C:\Users\mischa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter not found. ========== REGISTRY ========== Registry key HKEY_LOCAL_MACHINE\SOFTWARE\EnigmaSoftwareGroup\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6B6C4C46-1B7E-4A41-9E70-ACFBB22B1D81}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6B6C4C46-1B7E-4A41-9E70-ACFBB22B1D81}\ not found. OTL by OldTimer - Version 3.2.69.0 log created on 02132013_082305 Grüße Michael |
Hey Michael, Zitat:
Mach bitte noch ein letztes mal die Suche wie hier mit SystemLook, damit wir sicher sind. :) |
SystemLook 30.07.11 by jpshortstuff Log created at 09:21 on 13/02/2013 by mischa Administrator - Elevation successful ========== filefind ========== Searching for "*spyhunter*" C:\Windows\System32\Tasks\SpyHunter4Startup --a---- 3332 bytes [10:02 01/09/2012] [08:40 08/02/2013] 7F9C75A4608149F744D31AEF061D6C14 C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe --a---- 7396224 bytes [20:34 14/01/2013] [20:34 14/01/2013] 67F37164CFE532E69FC4330C0A6C200D C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130209_171906.log --a---- 21393 bytes [16:19 09/02/2013] [16:46 09/02/2013] D9F94388B1AA1848B49702A006E10B18 C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130209_174735.log --a---- 21572 bytes [16:47 09/02/2013] [22:25 09/02/2013] 5726EF8227C8F20FEC98218DDE2D9D03 C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130209_232603.log --a---- 21393 bytes [22:26 09/02/2013] [22:48 09/02/2013] 474D7D7471A3A11E9596F3202809FEA1 C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130209_234939.log --a---- 21751 bytes [22:49 09/02/2013] [09:16 10/02/2013] 9C31EB509A9EF6FC0BEEBC7EC1D0A735 C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130210_101655.log --a---- 21259 bytes [09:16 10/02/2013] [09:17 10/02/2013] B1057459B2D91F8BDE107423C3ABF3E8 C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130210_104921.log --a---- 21393 bytes [09:49 10/02/2013] [13:20 10/02/2013] 8A401D91A2CBDFF7432F0CDEF6DB0298 C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130210_142138.log --a---- 21304 bytes [13:21 10/02/2013] [15:18 10/02/2013] E9B453DDD4517037D66678C43E6BF587 C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130210_174026.log --a---- 21393 bytes [16:40 10/02/2013] [17:14 10/02/2013] 7730E3526BD42F676FA582DE22A7861C C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130210_181535.log --a---- 22109 bytes [17:15 10/02/2013] [11:54 11/02/2013] 20AC25295357513750125DEAB241407A C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130211_125515.log --a---- 21572 bytes [11:55 11/02/2013] [17:59 11/02/2013] EF2D1C5BEF2D0C66B0F40477E32D9586 C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130211_190022.log --a---- 21259 bytes [18:00 11/02/2013] [19:04 11/02/2013] BC99BEDFD6D79FD831DAE13EF62F228C C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130211_200505.log --a---- 21393 bytes [19:05 11/02/2013] [20:08 11/02/2013] 6AE6AA7A36B7F08CE6C9CBFA836AA18B C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130211_212529.log --a---- 24539 bytes [20:25 11/02/2013] [04:27 12/02/2013] 44F3B4AB2DD496C54AED8D3B3E9D76CE C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130212_125408.log --a---- 21919 bytes [11:54 12/02/2013] [12:12 12/02/2013] FEA7C03A59CC4B99504232DDB4184824 C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130212_132519.log --a---- 21919 bytes [12:25 12/02/2013] [12:26 12/02/2013] D7959CD606B0FF1D8F37D7436A84ABAD C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130212_143404.log --a---- 21919 bytes [13:34 12/02/2013] [13:45 12/02/2013] 7F922AC3667669295A7F207DE0313DAD C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130212_191747.log --a---- 21919 bytes [18:17 12/02/2013] [19:17 12/02/2013] 12765F88E892B0234383F7FC4BD978F8 C:\_OTL\MovedFiles\02122013_220404\C_Windows\Prefetch\SPYHUNTER-INSTALLER (1).EXE-5D2DBEB0.pf --a---- 26280 bytes [08:38 08/02/2013] [08:39 08/02/2013] 8318946B6316D1C44BC755771839EA22 C:\_OTL\MovedFiles\02122013_220404\C_Windows\Prefetch\SPYHUNTER4.EXE-7BD5E907.pf --a---- 158330 bytes [08:41 08/02/2013] [08:41 08/02/2013] 626DE1AA4BB3F46EBF3374EAE33EE9EE Searching for "*enigma*" No files found. ========== folderfind ========== Searching for "*spyhunter*" C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter d------ [10:02 01/09/2012] Searching for "*enigma*" C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group d------ [10:02 01/09/2012] ========== regfind ========== Searching for "spyhunter" [HKEY_CURRENT_USER\Software\Microsoft\Installer\Products\64C4C6B6E7B114A4E907CABF2BB2D118] "ProductName"="SpyHunter" [HKEY_LOCAL_MACHINE\SOFTWARE\EnigmaSoftwareGroup\SpyHunter] [HKEY_LOCAL_MACHINE\SOFTWARE\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig] [HKEY_LOCAL_MACHINE\SOFTWARE\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig] "InstallLoc"="C:\Program Files\Enigma Software Group\SpyHunter" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RADAR\HeapLeakDetection\DiagnosedApplications\SpyHunter4.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\SpyHunter4_RASAPI32] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\SpyHunter4_RASMANCS] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Program Files\Enigma Software Group\SpyHunter\"="1" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Program Files\Enigma Software Group\SpyHunter\Defs\"="1" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Users\mischa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter\"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\167ED423049710645A22436AA88D0A99] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\1957C0511E2C398429B3643FC3CF903E] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files (x86)\Enigma Software Group\SpyHunter\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\1F94163E4B8E8524AB2D208677C1C639] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\AutoCheckUpdate" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\21B3B2A547DD5C14583129BD7D54AE43] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\270D6EC2A97B99548BA1F764A91027A1] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\2BAC083D35096B44C91BE7BCF2A9BE35] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\325484F6157B534449A295F31E20CC49] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\EsgScanner.inf" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\3A1F744C14FB4E14A93C1628CDE36240] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\MonitorWinCom_remember" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\3B801397615ADA446AA0C0D27F8C35F5] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\ShieldOnBoot" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\4EE16055EDFAB8E46BCE054F706E7050] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Users\mischa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\54F23924A8B2A594D8F3B34555F857DB] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\Defs\def.dat" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\5942B0FB3B0060E4FB3008F9D51CFC26] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\native.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\5A2C306FF7B069949928B69774A9C8A0] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\GuardStatus" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\64717EB28EB8ECA4A9584B6BA7934B83] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\ActiveDesktop_remember" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\79455857BB467F24D81891AAD09F7079] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\ESGScanner.sys" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\799475A3B22A0B94085DE6AF372B869F] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files (x86)\Enigma Software Group\SpyHunter\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\8014B476AFF7674499E83E22C791A5A2] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\8D95E4363DF07F44FB6986E629D65FDB] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\ActHomePageProt" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\96F935B48BE0455459DB1E7E97E04BDF] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\MonitorDNS" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\9BDCF589B9440364E8DB3F9535DDBB9F] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\Defman.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\B0A0F90AD49B5994BB1DAD4DDC089CD6] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files (x86)\Enigma Software Group\SpyHunter\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\B435C9AD1BF350D48BE80D5A79BA2EEE] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\ESGRKCHK.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\B8759E73AEB287C4485B33F51B7DE868] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\MonitorIEImages" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\C2E30ACAB517FB744ACF4672E649BE7F] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\Language" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\CA1A35F40F64E2C419551606C418D4C6] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\AutoUpdateDownload" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\D23A4A6BB4BD7474197B486733BBB37A] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\ShScanner.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\D69C9067CD45885488F1E05319EDD023] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\ExecutionGuard.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\D75FE63EDA1D54A4CA6F51CADD11E656] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\CheckShOsCompatibility" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\D91BE455A0889C4458F258847859EC6F] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\MonitorHosts" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\DD372D2F4DF0D0540B2F37ED85511E4C] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\MonitorSystem" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\F87702C2D0F509E4FB7923DA78F44976] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\license.txt" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\FD27396ADF8235D449146899FD9100FE] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\Common.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Products\64C4C6B6E7B114A4E907CABF2BB2D118\InstallProperties] "InstallLocation"="C:\Program Files\Enigma Software Group\SpyHunter\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Products\64C4C6B6E7B114A4E907CABF2BB2D118\InstallProperties] "DisplayName"="SpyHunter" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6B6C4C46-1B7E-4A41-9E70-ACFBB22B1D81}] "DisplayIcon"="C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe,0" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6B6C4C46-1B7E-4A41-9E70-ACFBB22B1D81}] "InstallLocation"="C:\Program Files\Enigma Software Group\SpyHunter\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6B6C4C46-1B7E-4A41-9E70-ACFBB22B1D81}] "DisplayName"="SpyHunter" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9F03852E-E755-4166-9809-159FCCD92652}] "Path"="\SpyHunter4Startup" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SpyHunter4Startup] [HKEY_USERS\S-1-5-21-1435074266-3387115179-3275037125-1000\Software\Microsoft\Installer\Products\64C4C6B6E7B114A4E907CABF2BB2D118] "ProductName"="SpyHunter" Searching for "enigma" [HKEY_LOCAL_MACHINE\SOFTWARE\EnigmaSoftwareGroup] [HKEY_LOCAL_MACHINE\SOFTWARE\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig] "InstallLoc"="C:\Program Files\Enigma Software Group\SpyHunter" [HKEY_LOCAL_MACHINE\SOFTWARE\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig] "uninstlnk"="hxxp://sh.enigmasoftware.com/sh4/survey/uninstall_survey.php?affid=0&hwx=65cbe0b29dc40c290b8954efca0d975f&id=2&lang=DE&sid=revenuewire" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Program Files\Enigma Software Group\SpyHunter\"="1" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Program Files\Enigma Software Group\"="1" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Program Files\Enigma Software Group\SpyHunter\Defs\"="1" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\167ED423049710645A22436AA88D0A99] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\1957C0511E2C398429B3643FC3CF903E] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files (x86)\Enigma Software Group\SpyHunter\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\1F94163E4B8E8524AB2D208677C1C639] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\AutoCheckUpdate" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\21B3B2A547DD5C14583129BD7D54AE43] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\270D6EC2A97B99548BA1F764A91027A1] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\2BAC083D35096B44C91BE7BCF2A9BE35] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\325484F6157B534449A295F31E20CC49] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\EsgScanner.inf" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\3A1F744C14FB4E14A93C1628CDE36240] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\MonitorWinCom_remember" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\3B801397615ADA446AA0C0D27F8C35F5] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\ShieldOnBoot" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\54F23924A8B2A594D8F3B34555F857DB] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\Defs\def.dat" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\5942B0FB3B0060E4FB3008F9D51CFC26] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\native.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\5A2C306FF7B069949928B69774A9C8A0] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\GuardStatus" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\64717EB28EB8ECA4A9584B6BA7934B83] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\ActiveDesktop_remember" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\79455857BB467F24D81891AAD09F7079] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\ESGScanner.sys" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\799475A3B22A0B94085DE6AF372B869F] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files (x86)\Enigma Software Group\SpyHunter\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\8014B476AFF7674499E83E22C791A5A2] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\8D95E4363DF07F44FB6986E629D65FDB] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\ActHomePageProt" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\96F935B48BE0455459DB1E7E97E04BDF] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\MonitorDNS" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\9BDCF589B9440364E8DB3F9535DDBB9F] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\Defman.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\B0A0F90AD49B5994BB1DAD4DDC089CD6] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files (x86)\Enigma Software Group\SpyHunter\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\B435C9AD1BF350D48BE80D5A79BA2EEE] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\ESGRKCHK.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\B8759E73AEB287C4485B33F51B7DE868] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\MonitorIEImages" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\C2E30ACAB517FB744ACF4672E649BE7F] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\Language" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\CA1A35F40F64E2C419551606C418D4C6] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\AutoUpdateDownload" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\D23A4A6BB4BD7474197B486733BBB37A] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\ShScanner.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\D69C9067CD45885488F1E05319EDD023] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\ExecutionGuard.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\D75FE63EDA1D54A4CA6F51CADD11E656] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\CheckShOsCompatibility" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\D91BE455A0889C4458F258847859EC6F] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\MonitorHosts" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\DD372D2F4DF0D0540B2F37ED85511E4C] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\MonitorSystem" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\F87702C2D0F509E4FB7923DA78F44976] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\license.txt" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\FD27396ADF8235D449146899FD9100FE] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\Common.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Products\64C4C6B6E7B114A4E907CABF2BB2D118\InstallProperties] "Contact"="Enigma Customer Support" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Products\64C4C6B6E7B114A4E907CABF2BB2D118\InstallProperties] "HelpLink"="hxxp://www.enigmasoftware.com/support" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Products\64C4C6B6E7B114A4E907CABF2BB2D118\InstallProperties] "InstallLocation"="C:\Program Files\Enigma Software Group\SpyHunter\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Products\64C4C6B6E7B114A4E907CABF2BB2D118\InstallProperties] "Publisher"="Enigma Software Group USA, LLC" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Products\64C4C6B6E7B114A4E907CABF2BB2D118\InstallProperties] "URLUpdateInfo"="hxxp://www.enigmasoftware.com" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6B6C4C46-1B7E-4A41-9E70-ACFBB22B1D81}] "DisplayIcon"="C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe,0" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6B6C4C46-1B7E-4A41-9E70-ACFBB22B1D81}] "Contact"="Enigma Customer Support" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6B6C4C46-1B7E-4A41-9E70-ACFBB22B1D81}] "HelpLink"="hxxp://www.enigmasoftware.com/support" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6B6C4C46-1B7E-4A41-9E70-ACFBB22B1D81}] "InstallLocation"="C:\Program Files\Enigma Software Group\SpyHunter\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6B6C4C46-1B7E-4A41-9E70-ACFBB22B1D81}] "Publisher"="Enigma Software Group USA, LLC" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6B6C4C46-1B7E-4A41-9E70-ACFBB22B1D81}] "URLUpdateInfo"="hxxp://www.enigmasoftware.com" -= EOF =- |
Also die Files sind gelöscht, das sind nur noch welche in Quarantäne. Versuch mal noch das, um die Regschlüssel zu entfernen: Drücke http://larusso.trojaner-board.de/Images/windows.jpg + R Taste und schreibe "notepad" in das Ausführen Fenster und drücke OK. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument: Code: Windows Registry Editor Version 5.00
Mach danach bitte nochmals den gleichen Suchlauf mit SystemLook. |
SystemLook 30.07.11 by jpshortstuff Log created at 12:54 on 13/02/2013 by mischa Administrator - Elevation successful No Context: Windows Registry Editor Version 5.00 No Context: [-HKEY_LOCAL_MACHINE\SOFTWARE\EnigmaSoftwareGroup] No Context: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] No Context: "C:\Program Files\Enigma Software Group\SpyHunter\"=- No Context: "C:\Program Files\Enigma Software Group\SpyHunter\Defs\"=- No Context: "C:\Users\mischa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter\"=- No Context: [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6B6C4C46-1B7E-4A41-9E70-ACFBB22B1D81}] No Context: -= EOF =- |
Sorry, das war ein Missverständnis. Du sollst nochmals diese Suche mit SystemLook machen: Lade SystemLook (by jpshortstuff) herunter und speichere das Tool auf dem Desktop.
|
sorry.....so hier der Scan In Programme Funktionen habe ich nichts mehr gefunden.Vielleicht bleibt es ja diesmal so. (-: SystemLook 30.07.11 by jpshortstuff Log created at 13:04 on 13/02/2013 by mischa Administrator - Elevation successful ========== filefind ========== Searching for "*spyhunter*" C:\Windows\System32\Tasks\SpyHunter4Startup --a---- 3332 bytes [10:02 01/09/2012] [08:40 08/02/2013] 7F9C75A4608149F744D31AEF061D6C14 C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe --a---- 7396224 bytes [20:34 14/01/2013] [20:34 14/01/2013] 67F37164CFE532E69FC4330C0A6C200D C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130209_171906.log --a---- 21393 bytes [16:19 09/02/2013] [16:46 09/02/2013] D9F94388B1AA1848B49702A006E10B18 C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130209_174735.log --a---- 21572 bytes [16:47 09/02/2013] [22:25 09/02/2013] 5726EF8227C8F20FEC98218DDE2D9D03 C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130209_232603.log --a---- 21393 bytes [22:26 09/02/2013] [22:48 09/02/2013] 474D7D7471A3A11E9596F3202809FEA1 C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130209_234939.log --a---- 21751 bytes [22:49 09/02/2013] [09:16 10/02/2013] 9C31EB509A9EF6FC0BEEBC7EC1D0A735 C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130210_101655.log --a---- 21259 bytes [09:16 10/02/2013] [09:17 10/02/2013] B1057459B2D91F8BDE107423C3ABF3E8 C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130210_104921.log --a---- 21393 bytes [09:49 10/02/2013] [13:20 10/02/2013] 8A401D91A2CBDFF7432F0CDEF6DB0298 C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130210_142138.log --a---- 21304 bytes [13:21 10/02/2013] [15:18 10/02/2013] E9B453DDD4517037D66678C43E6BF587 C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130210_174026.log --a---- 21393 bytes [16:40 10/02/2013] [17:14 10/02/2013] 7730E3526BD42F676FA582DE22A7861C C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130210_181535.log --a---- 22109 bytes [17:15 10/02/2013] [11:54 11/02/2013] 20AC25295357513750125DEAB241407A C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130211_125515.log --a---- 21572 bytes [11:55 11/02/2013] [17:59 11/02/2013] EF2D1C5BEF2D0C66B0F40477E32D9586 C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130211_190022.log --a---- 21259 bytes [18:00 11/02/2013] [19:04 11/02/2013] BC99BEDFD6D79FD831DAE13EF62F228C C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130211_200505.log --a---- 21393 bytes [19:05 11/02/2013] [20:08 11/02/2013] 6AE6AA7A36B7F08CE6C9CBFA836AA18B C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130211_212529.log --a---- 24539 bytes [20:25 11/02/2013] [04:27 12/02/2013] 44F3B4AB2DD496C54AED8D3B3E9D76CE C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130212_125408.log --a---- 21919 bytes [11:54 12/02/2013] [12:12 12/02/2013] FEA7C03A59CC4B99504232DDB4184824 C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130212_132519.log --a---- 21919 bytes [12:25 12/02/2013] [12:26 12/02/2013] D7959CD606B0FF1D8F37D7436A84ABAD C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130212_143404.log --a---- 21919 bytes [13:34 12/02/2013] [13:45 12/02/2013] 7F922AC3667669295A7F207DE0313DAD C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130212_191747.log --a---- 21919 bytes [18:17 12/02/2013] [19:17 12/02/2013] 12765F88E892B0234383F7FC4BD978F8 C:\_OTL\MovedFiles\02122013_220404\C_Windows\Prefetch\SPYHUNTER-INSTALLER (1).EXE-5D2DBEB0.pf --a---- 26280 bytes [08:38 08/02/2013] [08:39 08/02/2013] 8318946B6316D1C44BC755771839EA22 C:\_OTL\MovedFiles\02122013_220404\C_Windows\Prefetch\SPYHUNTER4.EXE-7BD5E907.pf --a---- 158330 bytes [08:41 08/02/2013] [08:41 08/02/2013] 626DE1AA4BB3F46EBF3374EAE33EE9EE Searching for "*enigma*" No files found. ========== folderfind ========== Searching for "*spyhunter*" C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter d------ [10:02 01/09/2012] Searching for "*enigma*" C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group d------ [10:02 01/09/2012] ========== regfind ========== Searching for "spyhunter" [HKEY_CURRENT_USER\Software\Microsoft\Installer\Products\64C4C6B6E7B114A4E907CABF2BB2D118] "ProductName"="SpyHunter" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RADAR\HeapLeakDetection\DiagnosedApplications\SpyHunter4.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\SpyHunter4_RASAPI32] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\SpyHunter4_RASMANCS] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Program Files\Enigma Software Group\SpyHunter\"="1" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Program Files\Enigma Software Group\SpyHunter\Defs\"="1" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Users\mischa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter\"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\167ED423049710645A22436AA88D0A99] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\1957C0511E2C398429B3643FC3CF903E] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files (x86)\Enigma Software Group\SpyHunter\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\1F94163E4B8E8524AB2D208677C1C639] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\AutoCheckUpdate" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\21B3B2A547DD5C14583129BD7D54AE43] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\270D6EC2A97B99548BA1F764A91027A1] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\2BAC083D35096B44C91BE7BCF2A9BE35] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\325484F6157B534449A295F31E20CC49] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\EsgScanner.inf" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\3A1F744C14FB4E14A93C1628CDE36240] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\MonitorWinCom_remember" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\3B801397615ADA446AA0C0D27F8C35F5] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\ShieldOnBoot" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\4EE16055EDFAB8E46BCE054F706E7050] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Users\mischa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\54F23924A8B2A594D8F3B34555F857DB] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\Defs\def.dat" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\5942B0FB3B0060E4FB3008F9D51CFC26] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\native.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\5A2C306FF7B069949928B69774A9C8A0] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\GuardStatus" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\64717EB28EB8ECA4A9584B6BA7934B83] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\ActiveDesktop_remember" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\79455857BB467F24D81891AAD09F7079] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\ESGScanner.sys" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\799475A3B22A0B94085DE6AF372B869F] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files (x86)\Enigma Software Group\SpyHunter\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\8014B476AFF7674499E83E22C791A5A2] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\8D95E4363DF07F44FB6986E629D65FDB] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\ActHomePageProt" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\96F935B48BE0455459DB1E7E97E04BDF] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\MonitorDNS" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\9BDCF589B9440364E8DB3F9535DDBB9F] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\Defman.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\B0A0F90AD49B5994BB1DAD4DDC089CD6] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files (x86)\Enigma Software Group\SpyHunter\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\B435C9AD1BF350D48BE80D5A79BA2EEE] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\ESGRKCHK.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\B8759E73AEB287C4485B33F51B7DE868] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\MonitorIEImages" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\C2E30ACAB517FB744ACF4672E649BE7F] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\Language" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\CA1A35F40F64E2C419551606C418D4C6] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\AutoUpdateDownload" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\D23A4A6BB4BD7474197B486733BBB37A] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\ShScanner.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\D69C9067CD45885488F1E05319EDD023] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\ExecutionGuard.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\D75FE63EDA1D54A4CA6F51CADD11E656] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\CheckShOsCompatibility" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\D91BE455A0889C4458F258847859EC6F] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\MonitorHosts" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\DD372D2F4DF0D0540B2F37ED85511E4C] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\MonitorSystem" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\F87702C2D0F509E4FB7923DA78F44976] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\license.txt" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\FD27396ADF8235D449146899FD9100FE] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\Common.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Products\64C4C6B6E7B114A4E907CABF2BB2D118\InstallProperties] "InstallLocation"="C:\Program Files\Enigma Software Group\SpyHunter\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Products\64C4C6B6E7B114A4E907CABF2BB2D118\InstallProperties] "DisplayName"="SpyHunter" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9F03852E-E755-4166-9809-159FCCD92652}] "Path"="\SpyHunter4Startup" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SpyHunter4Startup] [HKEY_USERS\S-1-5-21-1435074266-3387115179-3275037125-1000\Software\Microsoft\Installer\Products\64C4C6B6E7B114A4E907CABF2BB2D118] "ProductName"="SpyHunter" Searching for "enigma" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Program Files\Enigma Software Group\SpyHunter\"="1" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Program Files\Enigma Software Group\"="1" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Program Files\Enigma Software Group\SpyHunter\Defs\"="1" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\167ED423049710645A22436AA88D0A99] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\1957C0511E2C398429B3643FC3CF903E] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files (x86)\Enigma Software Group\SpyHunter\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\1F94163E4B8E8524AB2D208677C1C639] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\AutoCheckUpdate" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\21B3B2A547DD5C14583129BD7D54AE43] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\270D6EC2A97B99548BA1F764A91027A1] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\2BAC083D35096B44C91BE7BCF2A9BE35] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\325484F6157B534449A295F31E20CC49] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\EsgScanner.inf" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\3A1F744C14FB4E14A93C1628CDE36240] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\MonitorWinCom_remember" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\3B801397615ADA446AA0C0D27F8C35F5] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\ShieldOnBoot" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\54F23924A8B2A594D8F3B34555F857DB] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\Defs\def.dat" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\5942B0FB3B0060E4FB3008F9D51CFC26] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\native.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\5A2C306FF7B069949928B69774A9C8A0] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\GuardStatus" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\64717EB28EB8ECA4A9584B6BA7934B83] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\ActiveDesktop_remember" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\79455857BB467F24D81891AAD09F7079] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\ESGScanner.sys" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\799475A3B22A0B94085DE6AF372B869F] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files (x86)\Enigma Software Group\SpyHunter\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\8014B476AFF7674499E83E22C791A5A2] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\8D95E4363DF07F44FB6986E629D65FDB] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\ActHomePageProt" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\96F935B48BE0455459DB1E7E97E04BDF] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\MonitorDNS" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\9BDCF589B9440364E8DB3F9535DDBB9F] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\Defman.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\B0A0F90AD49B5994BB1DAD4DDC089CD6] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files (x86)\Enigma Software Group\SpyHunter\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\B435C9AD1BF350D48BE80D5A79BA2EEE] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\ESGRKCHK.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\B8759E73AEB287C4485B33F51B7DE868] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\MonitorIEImages" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\C2E30ACAB517FB744ACF4672E649BE7F] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\Language" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\CA1A35F40F64E2C419551606C418D4C6] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\AutoUpdateDownload" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\D23A4A6BB4BD7474197B486733BBB37A] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\ShScanner.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\D69C9067CD45885488F1E05319EDD023] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\ExecutionGuard.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\D75FE63EDA1D54A4CA6F51CADD11E656] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\CheckShOsCompatibility" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\D91BE455A0889C4458F258847859EC6F] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\MonitorHosts" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\DD372D2F4DF0D0540B2F37ED85511E4C] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\MonitorSystem" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\F87702C2D0F509E4FB7923DA78F44976] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\license.txt" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\FD27396ADF8235D449146899FD9100FE] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\Common.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Products\64C4C6B6E7B114A4E907CABF2BB2D118\InstallProperties] "Contact"="Enigma Customer Support" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Products\64C4C6B6E7B114A4E907CABF2BB2D118\InstallProperties] "HelpLink"="hxxp://www.enigmasoftware.com/support" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Products\64C4C6B6E7B114A4E907CABF2BB2D118\InstallProperties] "InstallLocation"="C:\Program Files\Enigma Software Group\SpyHunter\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Products\64C4C6B6E7B114A4E907CABF2BB2D118\InstallProperties] "Publisher"="Enigma Software Group USA, LLC" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Products\64C4C6B6E7B114A4E907CABF2BB2D118\InstallProperties] "URLUpdateInfo"="hxxp://www.enigmasoftware.com" -= EOF =- |
Prima, jetzt sollten wir die wesentlichen Sachen von diesem Mistding alle erwischt haben. :) Im Scan sind nur noch ein paar Überreste zu sehen. Hast du denn jetzt sonst noch Probleme mit dem Rechner oder ist alles in Ordnung? |
Also aus meiner Sicht scheint alles in Ordnung.In Programme Funktionen etc.ist nichts mehr sichtbar und Fenster öffnen sich auch keine. Was meinst du? |
Ja, von meiner Seite ist auch alles erledigt. Der SpyHunter ist abgeschossen und die restliche Malware hatten wir vorher schon beseitigt. Hier nochmals die Anleitung zum Aufräumen. Die Schritte 1 bis 3 musst du nur machen, falls du sie vorher noch nicht gemacht hast, aber den Schritt 4 auf jeden Fall nochmals durchführen: Schritt 1 Starte defogger und drücke den Button Re-enable. Schritt 2 Bitte deaktiviere jetzt temporär das Antiviren-Programm, evtl. vorhandenes Skript-Blocking und Antimalware-Programme. Drücke bitte die http://larusso.trojaner-board.de/Images/windows.jpg + R Taste, kopiere folgenden Text in das Ausführen Fenster Code: Combofix /UninstallDu kannst die eben deaktivierten Programme nun wieder einschalten. Schritt 3 Den ESET Online Scanner kannst du behalten, um ab und zu für eine Zweitmeinung dein System damit zu scannen. Falls du ESET aber deinstallieren möchtest, dann: Drücke bitte die http://larusso.trojaner-board.de/Images/windows.jpg + R Taste, kopiere folgenden Text in das Ausführen Fenster Code: "%ProgramFiles%\Eset\Eset Online Scanner\OnlineScannerUninstaller.exe"Schritt 4 Downloade dir bitte delfix auf deinen Desktop.
>> OK << Wir sind durch, deine Logs sehen für mich im Moment sauber aus. :daumenhoc Ich habe dir nachfolgend ein paar Hinweise und Tipps zusammengestellt, die dazu beitragen sollen, dass du in Zukunft unsere Hilfe nicht mehr brauchen wirst. Bitte gib mir danach noch eine kurze Rückmeldung, wenn auch von deiner Seite keine Probleme oder Fragen mehr offen sind, damit ich dieses Thema als erledigt betrachten kann. Epilog: Tipps, Dos & Don'ts Aktualität von System und SoftwareDas Betriebsystem Windows muss zwingend immer auf dem neusten Stand sein. Stelle sicher, dass die automatischen Updates aktiviert sind:
Auch die installierte Software sollte immer in der aktuellsten Version vorliegen. Speziell gilt das für den Browser, Java, Flash-Player und PDF-Reader, denn bekannte Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim blossen Besuch einer präparierten Website per Drive-by Download Malware zu installieren. Das kann sogar auf normalerweise legitimen Websites geschehen, wenn es einem Angreifer gelungen ist, seinen Code in die Seite einzuschleusen, und ist deshalb relativ unberechenbar.
Sicherheits-SoftwareEine Bemerkung vorneweg: Jede Softwarelösung hat ihre Schwächen. Die gesamte Verantwortung für die Sicherheit auf Software zu übertragen und einen Rundum-Schutz zu erwarten, wäre eine gefährliche Illusion. Bei unbedachtem oder bewusst risikoreichem Verhalten wird auch das beste Programm früher oder später seinen Dienst versagen (z.B. ein Virenscanner, der eine verseuchte Datei nicht erkennt). Trotzdem ist entsprechende Software natürlich wichtig und hilft dir in Kombination mit einem gut gewarteten (up-to-date) System und durchdachtem Verhalten, deinen Rechner sauber zu halten.
Es liegt in der Natur der Sache, dass die am weitesten verbreitete Anwendungs-Software auch am häufigsten von Malware-Autoren attackiert wird. Es kann daher bereits einen kleinen Sicherheitsgewinn darstellen, wenn man alternative Software (z.B. einen alternativen PDF Reader) benutzt. Anstelle des Internet Explorers kann man beispielsweise den Mozilla Firefox einsetzen, für welchen es zwei nützliche Addons zur Empfehlung gibt:
(Un-)Sicheres Verhalten im InternetNebst unbemerkten Drive-by Installationen wird Malware aber auch oft mehr oder weniger aktiv vom Benutzer selbst installiert. Der Besuch zwielichtiger Websites kann bereits Risiken bergen. Und Downloads aus dubiosen Quellen sind immer russisches Roulette. Auch wenn der Virenscanner im Moment darin keine Bedrohung erkennt, muss das nichts bedeuten.
Oft wird auch versucht, den Benutzer mit mehr oder weniger trickreichen Methoden dazu zu bringen, eine für ihn verhängnisvolle Handlung selbst auszuführen (Überbegriff Social Engineering).
Nervige Adware (Werbung) und unnötige Toolbars werden auch meist durch den Benutzer selbst mitinstalliert.
Allgemeine HinweiseAbschliessend noch ein paar grundsätzliche Bemerkungen:
Es bleibt mir nur noch, dir unbeschwertes und sicheres Surfen zu wünschen und dass wir uns hier so bald nicht wiedersehen. ;) |
Hallo Leo Zum Rechner möchte ich folgendes Statement abgeben: Es ist wieder alles in Ordnung.Rechner funktioniert wieder einwandfrei.Besser geht es nicht! Zu dir möchte ich folgendes sagen: Ich weiß zwar nicht genau worin deine Motivation begründet liegt, deine Zeit mit meinen Problemen bzw. die meines Rechners zu verbringen aber ich zolle dir und deiner Motivation absolute Anerkennung und du hast meinen ganzen Respekt! Auch so kann man die Welt ein kleines bisschen besser machen. (-; Vielen,vielen Dank ! Michael |
Danke für die Rückmeldung, Michael. Freut mich, dass wir helfen konnten. :abklatsch: Dieses Thema scheint erledigt und wird aus meinen Abos gelöscht. Ich bekomme somit keine Benachrichtigung mehr über neue Antworten. Solltest du das Thema erneut brauchen, schicke mir bitte eine PM und wir machen hier weiter. Jeder andere bitte diese Anleitung lesen und einen eigenen Thread erstellen. |
| Alle Zeitangaben in WEZ +1. Es ist jetzt 13:10 Uhr. |
Copyright ©2000-2025, Trojaner-Board