Trojaner-Board - Vista startet/bootet sehr langsam durch "Virus" PUP.Optional

Hi, danke für die weitere Info...
welche der zoek.exe soll ich nehmen..
Download zoek.exe version 4.0.0.4(rar)
Download zoek.exe version 4.0.0.4(zip)
Code:
Zoek.exe Version 4.0.0.5 Updated 13-October-2013

Tool run by michael on 16.10.2013 at 10:19:45,30.

Microsoft® Windows Vista™ Home Premium  6.0.6002 Service Pack 2 x86

Running in: Normal Mode Internet Access Detected

Launched: C:\Users\michael\AppData\Local\Temp\7zO86BE.tmp\zoek.exe [Script inserted] 
 

==== System Restore Info ======================
 

16.10.2013 10:21:34 Zoek.exe System Restore Point Created Succesfully.
 

==== Creating Sample__1028.zip ======================

 

Copied file C:\Users\michael\AppData\Roaming\$I8WWMSL.exe to sample\$I8WWMSL.exe

Copied file C:\Users\michael\AppData\Roaming\$IGFO8I8.exe to sample\$IGFO8I8.exe

Copied file C:\Users\michael\AppData\Roaming\$IPEU76T.exe to sample\$IPEU76T.exe

Copied file C:\Users\michael\AppData\Roaming\$IPFTX71.exe to sample\$IPFTX71.exe

sample\$I8WWMSL.exe renamed to CC5D0FF741B4A081A678A3B9D4854843

sample\$IGFO8I8.exe renamed to 09D9697C64F54E8F175476B10869A9F9

sample\$IPEU76T.exe renamed to 47DDBBF70A59093DD810C3FF81442B72

sample\$IPFTX71.exe renamed to 094FAEEED68511D4CB425E49246A636B
 

C:\Users\Public\Desktop\sample__1028.zip created successfully
 

==== Deleting CLSID Registry Keys ======================
 

HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes\{2381E4B7-5C04-459E-9D46-2F9AC1608B66} deleted successfully

HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes\{2381E4B7-5C04-459E-9D46-2F9AC1608B66} deleted successfully

HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Microsoft\Internet Explorer\SearchScopes\{2381E4B7-5C04-459E-9D46-2F9AC1608B66} deleted successfully

HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes\{2381E4B7-5C04-459E-9D46-2F9AC1608B66} deleted successfully

HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Microsoft\Internet Explorer\SearchScopes\{C4BA0842-10B6-411A-92C5-FBF487DEE8AA} deleted successfully

HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Microsoft\Internet Explorer\SearchScopes\{DECA3892-BA8F-44b8-A993-A466AD694AE4} deleted successfully

HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8dcb7100-df86-4384-8842-8fa844297b3f} deleted successfully

HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8dcb7100-df86-4384-8842-8fa844297b3f} deleted successfully

HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{25BC7718-0BFA-40EA-B381-4B2D9732D686} deleted successfully

HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{25BC7718-0BFA-40EA-B381-4B2D9732D686} deleted successfully

HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} deleted successfully

HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} deleted successfully

HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{d2ce3e00-f94a-4740-988e-03dc2f38c34f} deleted successfully

HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{d2ce3e00-f94a-4740-988e-03dc2f38c34f} deleted successfully

HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C9EE92B7-EDD5-4AD9-8029-2EC6818E653A} deleted successfully

HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C9EE92B7-EDD5-4AD9-8029-2EC6818E653A} deleted successfully

HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D7E97865-918F-41E4-9CD0-25AB1C574CE8} deleted successfully

HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} deleted successfully

HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D3D233D5-9F6D-436C-B6C7-E63F77503B30} deleted successfully

HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{fe063412-bea4-4d76-8ed3-183be6220d17} deleted successfully

HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{fe063412-bea4-4d76-8ed3-183be6220d17} deleted successfully

HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{204DF522-9A96-4A72-ABB0-60F7A216D6D2} deleted successfully

HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{204DF522-9A96-4A72-ABB0-60F7A216D6D2} deleted successfully

HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5C255C8A-E604-49b4-9D64-90988571CECB} deleted successfully

HKEY_CLASSES_ROOT\CLSID\{8dcb7100-df86-4384-8842-8fa844297b3f} deleted successfully

HKEY_CLASSES_ROOT\CLSID\{25BC7718-0BFA-40EA-B381-4B2D9732D686} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{25BC7718-0BFA-40EA-B381-4B2D9732D686} deleted successfully

HKEY_CLASSES_ROOT\CLSID\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} deleted successfully

HKEY_CLASSES_ROOT\CLSID\{81017EA9-9AA8-4A6A-9734-7AF40E7D593F} deleted successfully

HKEY_CLASSES_ROOT\CLSID\{d2ce3e00-f94a-4740-988e-03dc2f38c34f} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB} deleted successfully
 

==== Deleting CLSID Registry Values ======================
 

HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\{81017EA9-9AA8-4A6A-9734-7AF40E7D593F} deleted successfully

HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{21FA44EF-376D-4D53-9B0F-8A89D3229068} deleted successfully

HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Mozilla\Firefox\Extensions\lyrix@lyrixeeker.co deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{8dcb7100-df86-4384-8842-8fa844297b3f} deleted successfully

HKEY_LOCAL_MACHINE\software\Wow6432Node\mozilla\Firefox\extensions\{336D0C35-8A85-403a-B9D2-65C292C39087} deleted successfully
 

==== Deleting Services ======================
 
 

==== FireFox Fix ======================
 

Deleted from C:\Users\michael\AppData\Roaming\Mozilla\Firefox\Profiles\1wge02ki.default-1341749340073\prefs.js:

user_pref("browser.startup.homepage", "https://www.facebook.com/");

user_pref("browser.search.order.1", "");

user_pref("browser.search.useDBForOrder", "false");
 

Added to C:\Users\michael\AppData\Roaming\Mozilla\Firefox\Profiles\1wge02ki.default-1341749340073\prefs.js:
 

Deleted from C:\Users\michael\AppData\Roaming\Mozilla\Firefox\Profiles\ezy83d9t.default\prefs.js:

user_pref("browser.search.useDBForOrder", true);
 

Added to C:\Users\michael\AppData\Roaming\Mozilla\Firefox\Profiles\ezy83d9t.default\prefs.js:
 

ProfilePath: C:\Users\michael\AppData\Roaming\Mozilla\Firefox\Profiles\1wge02ki.default-1341749340073
 

---- Lines CT2939532 removed from prefs.js ----
 
 

---- Lines CT2939532 modified from prefs.js ----
 
 

---- Lines CT2939532 removed from user.js ----
 
 

---- Lines C:\Users\michael\AppData\Roaming\Mozilla\Firefox\Profiles\1wge02ki.default-1341749340073\CT2939532 removed from prefs.js ----
 
 

---- Lines C:\Users\michael\AppData\Roaming\Mozilla\Firefox\Profiles\1wge02ki.default-1341749340073\CT2939532 modified from prefs.js ----
 
 

---- Lines C:\Users\michael\AppData\Roaming\Mozilla\Firefox\Profiles\1wge02ki.default-1341749340073\CT2939532 removed from user.js ----
 
 

---- Lines CT2269050 removed from prefs.js ----
 
 

---- Lines CT2269050 modified from prefs.js ----
 
 

---- Lines CT2269050 removed from user.js ----
 
 

---- Lines inbox.com removed from prefs.js ----
 
 

---- Lines inbox.com modified from prefs.js ----
 
 

---- Lines inbox.com removed from user.js ----
 
 

---- Lines ask.com removed from prefs.js ----
 
 

---- Lines ask.com modified from prefs.js ----
 
 

---- Lines ask.com removed from user.js ----
 
 

---- FireFox user.js and prefs.js backups ---- 
 

user__1031_.backup

prefs__1031_.backup
 

ProfilePath: C:\Users\michael\AppData\Roaming\Mozilla\Firefox\Profiles\ezy83d9t.default
 

---- Lines CT2939532 removed from prefs.js ----
 
 

---- Lines CT2939532 modified from prefs.js ----
 
 

---- Lines CT2939532 removed from user.js ----
 
 

---- Lines C:\Users\michael\AppData\Roaming\Mozilla\Firefox\Profiles\1wge02ki.default-1341749340073\CT2939532 removed from prefs.js ----
 
 

---- Lines C:\Users\michael\AppData\Roaming\Mozilla\Firefox\Profiles\1wge02ki.default-1341749340073\CT2939532 modified from prefs.js ----
 
 

---- Lines C:\Users\michael\AppData\Roaming\Mozilla\Firefox\Profiles\1wge02ki.default-1341749340073\CT2939532 removed from user.js ----
 
 

---- Lines CT2269050 removed from prefs.js ----
 
 

---- Lines CT2269050 modified from prefs.js ----
 
 

---- Lines CT2269050 removed from user.js ----
 
 

---- Lines inbox.com removed from prefs.js ----
 
 

---- Lines inbox.com modified from prefs.js ----
 
 

---- Lines inbox.com removed from user.js ----
 
 

---- Lines ask.com removed from prefs.js ----
 
 

---- Lines ask.com modified from prefs.js ----
 
 

---- Lines ask.com removed from user.js ----
 
 

---- FireFox user.js and prefs.js backups ---- 
 

user__1031_.backup

prefs__1031_.backup
 

==== Deleting Files \ Folders ======================
 

C:\Program Files\BonanzaDeals deleted

C:\Program Files\BonanzaDealsLive deleted

C:\Program Files\SopCast deleted

C:\Program Files\Common Files\DVDVideoSoft\bin deleted

C:\Program Files\iMesh Applications deleted

C:\Program Files\MyPC Backup deleted

C:\found.000 deleted

C:\found.001 deleted

C:\found.002 deleted

C:\found.003 deleted

C:\found.004 deleted

C:\found.005 deleted

C:\found.006 deleted

C:\found.007 deleted

C:\found.008 deleted

C:\found.009 deleted

C:\found.010 deleted

C:\found.011 deleted

C:\found.012 deleted

C:\found.013 deleted

C:\found.014 deleted

C:\found.015 deleted

C:\found.016 deleted

C:\found.017 deleted

C:\found.018 deleted

C:\found.019 deleted

C:\found.020 deleted

C:\found.021 deleted

C:\found.022 deleted

C:\found.023 deleted

C:\found.024 deleted

C:\found.025 deleted

C:\found.026 deleted

C:\Users\michael\AppData\Roaming\DigitalSite deleted

C:\Users\michael\AppData\Roaming\Systweak deleted

C:\ProgramData\BonanzaDealsLive deleted

C:\Users\michael\AppData\Local\BonanzaDealsLive deleted

C:\Users\michael\AppData\Local\avgchrome deleted

C:\Users\michael\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847} deleted

C:\Users\michael\Downloads\sweetimsetup.exe deleted

C:\Users\michael\Downloads\SopCast.zip deleted

C:\Users\michael\Downloads\tb_oldieradio.exe deleted

C:\Users\michael\Downloads\FreeYouTubeToMP3Converter(1).exe deleted

C:\Users\michael\Downloads\FreeYouTubeToMP3Converter.exe deleted

C:\Users\michael\Downloads\FreeYouTubeToMP3Converter3.12.0.128.exe deleted

C:\Users\michael\Downloads\SoftonicDownloader_fuer_temp-file-cleaner.exe deleted

C:\Windows\tasks\DigitalSite.job deleted

C:\Windows\system32\tasks\DigitalSite deleted

C:\Windows\system32\roboot.exe deleted

C:\Windows\System32\searchplugins deleted

C:\Windows\System32\Extensions deleted

C:\Users\michael\AppData\Roaming\Mozilla\Firefox\Profiles\1wge02ki.default-1341749340073\foxydeal.sqlite deleted

C:\Users\michael\AppData\Roaming\Mozilla\Firefox\Profiles\1wge02ki.default-1341749340073\jetpack deleted

C:\Users\michael\AppData\Roaming\Mozilla\Firefox\Profiles\1wge02ki.default-1341749340073\CT2939532 deleted

C:\Users\michael\AppData\Roaming\Mozilla\Firefox\Profiles\ezy83d9t.default\ICQToolbarData deleted

C:\Users\michael\AppData\Roaming\Mozilla\Firefox\Profiles\ezy83d9t.default\CT2269050 deleted

C:\Windows\Installer\{C3E85EE9-5892-4142-B537-BCEB3DAC4C3D} deleted

C:\Users\michael\AppData\Roaming\$I8WWMSL.exe deleted

C:\Users\michael\AppData\Roaming\$IGFO8I8.exe deleted

C:\Users\michael\AppData\Roaming\$IPEU76T.exe deleted

C:\Users\michael\AppData\Roaming\$IPFTX71.exe deleted

"C:\Users\michael\AppData\Roaming\FRITZ" not found 
 

==== Firefox Extensions Registry ======================
 

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]

"{ABDE892B-13A8-4d1b-88E6-365A6E755758}"="C:\Program Files\Real\RealPlayer\browserrecord" [29.06.2009 01:17]
 

==== Firefox Extensions ======================
 

ProfilePath: C:\Users\michael\AppData\Roaming\Mozilla\Firefox\Profiles\1wge02ki.default-1341749340073

- Whilokii - %ProfilePath%\extensions\firefox@whilokii.net

- ProxTube - Gesperrte YouTube Videos entsperren - %ProfilePath%\extensions\ich@maltegoetz.de

- OLDIE RADIO - %ProfilePath%\extensions\toolbar-tbplatform@alexa.com

- FDislike - %ProfilePath%\extensions\fbdislike@doweb.fr.xpi

- Google Search by Image - %ProfilePath%\extensions\google@hitachi.com.xpi

- WEB.DE MailCheck - %ProfilePath%\extensions\toolbar@web.de.xpi
 

ProfilePath: C:\Users\michael\AppData\Roaming\Mozilla\Firefox\Profiles\ezy83d9t.default

- Logitech - %ProfilePath%\extensions\DeviceDetection@logitech.com

- Facebook Emoticon amp; Smiley - %ProfilePath%\extensions\emoticon@luzky.com

- F1 by Mozilla Labs - %ProfilePath%\extensions\ffshare@mozilla.org

- FoxyProxy Basic - %ProfilePath%\extensions\foxyproxy@eric.h.jung

- El gusto de la suerte > - %ProfilePath%\extensions\inquiry@sharelovestory.com

- Garmin Communicator - %ProfilePath%\extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}

- MyKey Interface - %ProfilePath%\extensions\{FACC66B7-E49F-49ed-997E-66A221FD956D}

- FastestFox - %ProfilePath%\extensions\smarterwiki@wikiatic.com.xpi

- GMX Toolbar - %ProfilePath%\extensions\toolbar@gmx.net.xpi

- FootieFox - %ProfilePath%\extensions\{9fb7d178-155a-4318-9173-1a8eaaea7fe4}.xpi
 

AppDir: C:\Program Files\Mozilla Firefox

- Undetermined - %AppDir%\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}

- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
 

==== Firefox Plugins ======================
 

Profilepath: C:\Users\michael\AppData\Roaming\Mozilla\Firefox\Profiles\1wge02ki.default-1341749340073

CFAF7B67C78D09D79688AEDCA3D090E2        - C:\Users\michael\AppData\Local\Google\Update\1.3.21.165\npGoogleUpdate3.dll -        Google Update

4BF70B35B943BD73BD6E13EB7C1BA4B3        - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll -        Shockwave Flash

CA0E1DFBE480CF0BE13A0883BEB378B6        - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll -        Java(TM) Platform SE 7 U40

AF661355EBAB898EB92D5454AEF93CE0        - C:\Windows\system32\npdeployJava1.dll -        Java Deployment Toolkit 7.0.400.43

04ABD13AB3893DE73AFD48DE075AB8E6        - C:\Users\michael\AppData\Roaming\Mozilla\plugins\npo1d.dll -        Google Talk Plugin Video Renderer

BA6B92B8D1493C958C6CCE0A8DEC57CD        - C:\Users\michael\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll -        Google Talk Plugin

BE501CBC29B2025A263D80D399F1797A        - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.1.0.30109.0.dll -        Silverlight Plug-In

BE501CBC29B2025A263D80D399F1797A        - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll -        Silverlight Plug-In

04ACC61B47857E779CD92D1D88770BF1        - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll -        Adobe Acrobat

77B09C2C6F407531447DA75E3ACD1C5B        - C:\Program Files\Adobe\Reader 10.0\Reader\browser\nppdf32.dll -        Adobe Acrobat

101700E93EB905992B518256CB441829        - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll -        Google Update

7550FC1ADE982582D5920BEA6430E3D4        - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll -        Google Earth Plugin

C548328E9DE5EB73350EF292D7140662        - C:\Program Files\Picasa2\npPicasa3.dll -        Picasa

4AEB0F6D18BDDCAA7DACC3B53C8312A2        - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll -        NVIDIA 3D Vision

AA526C8318F7656169A978611B9223CD        - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll -        NVIDIA 3D VISION

0B31B0F8FA99CFD009C8FBEA9E20C9DE        - C:\Users\michael\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll -        Facebook Video Calling Plugin

DAD55CEF682EAE6FA7B4C9487563A496        - C:\Windows\system32\Adobe\Director\np32dsw_1166636.dll -        Shockwave for Director / Shockwave for Director

4676A8E1EE37E71486717ECD1E61C17B        - C:\Windows\system32\Adobe\Director\np32dsw.dll -        Shockwave for Director / Shockwave for Director

F61068B91A84772966B64A85F066076F        - C:\Program Files\QuickTime\Plugins\npqtplugin7.dll -        QuickTime Plug-in 7.7.1

DA68715DF284F052083294F6A4C78A09        - C:\Program Files\QuickTime\Plugins\npqtplugin6.dll -        QuickTime Plug-in 7.7.1

821124774020771EE8AC172800A057D1        - C:\Program Files\QuickTime\Plugins\npqtplugin5.dll -        QuickTime Plug-in 7.7.1

9B7A2478DCCB2E7C531C71E282941DCC        - C:\Program Files\QuickTime\Plugins\npqtplugin4.dll -        QuickTime Plug-in 7.7.1

4959AA050C0F7EC3CCC42B223DE9BAD8        - C:\Program Files\QuickTime\Plugins\npqtplugin3.dll -        QuickTime Plug-in 7.7.1

A4BBE6E60A682689461E54CB85BD1884        - C:\Program Files\QuickTime\Plugins\npqtplugin2.dll -        QuickTime Plug-in 7.7.1

6421E0DA7580251A6C79673A5A92F488        - C:\Program Files\QuickTime\Plugins\npqtplugin.dll -        QuickTime Plug-in 7.7.1

2EA4B85EF64CA48B792FEF23AEEF7DC1        - C:\Users\michael\AppData\Roaming\Mozilla\plugins\NpFv530.dll -        Flatcast Viewer Plugin 5.3.0.784

C50B22C8D91A76069A993A2B5197A296        - C:\Program Files\Veetle\plugins\npVeetle.dll -        Veetle TV Core

866B027053F3A40BC36126D265C78E96        - C:\Program Files\Veetle\Player\npvlc.dll -        Veetle TV Player

886A8779BD2CD069D492ADC334DD885C        - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll -        iTunes Application Detector

24E990B1E6D55428001843CF7217DD81        - C:\Program Files\Microsoft\Office Live\npOLW.dll -        Microsoft Office Live Plug-in for Firefox / Microsoft Office Live Plug-in for Firefox

30740221C0AE535DA3FA7228C1C5A826        - C:\Program Files\Veetle\VLCBroadcast\npvbp.dll -        Veetle Broadcaster Plugin

3509063A268A4197CF8E713BD22B0978        - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll -        Windows Live® Photo Gallery

9E448F221E741DD0ACCB381190D01B3E        - C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll -        RealJukebox NS Plugin

5DB82B8C515C875AE58E1B8B5997416B        - C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll -        RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit)

2CDA67C1309CA966D8EFEE4EE0D6CA92        - C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll -        RealPlayer Version Plugin

625D0A824F513CE1CABB8861E97F2142        - C:\Program Files\Picasa2\npPicasa2.dll -        Picasa

AB87EEFFD18F2BAAFC274E7075EA6C67        - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll -        Windows Presentation Foundation / Windows Presentation Foundation

B27CCB1168B1960AEC6E9D3E0E0F0D2A        - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrlui.dll -        Microsoft® Silverlight

9C9CBF2993A5FF37607F562028B510F6        - C:\Users\michael\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll -        Google Talk Plugin Video Accelerator

DFCAB29E8FD38F95650CC1E203E8D318        - C:\Windows\system32\npmproxy.dll -        Microsoft® Windows® Operating System
 

Profilepath: C:\Users\michael\AppData\Roaming\Mozilla\Firefox\Profiles\ezy83d9t.default

9C9CBF2993A5FF37607F562028B510F6        - C:\Users\michael\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll -        Google Talk Plugin Video Accelerator

BA6B92B8D1493C958C6CCE0A8DEC57CD        - C:\Users\michael\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll -        Google Talk Plugin

77B09C2C6F407531447DA75E3ACD1C5B        - C:\PROGRAM FILES\MOZILLA FIREFOX\plugins\nppdf32.dll -        Adobe Acrobat

AA526C8318F7656169A978611B9223CD        - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll -        NVIDIA 3D VISION

4AEB0F6D18BDDCAA7DACC3B53C8312A2        - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll -        NVIDIA 3D Vision

4676A8E1EE37E71486717ECD1E61C17B        - C:\Windows\system32\Adobe\Director\np32dsw.dll -        Shockwave for Director / Shockwave for Director

F61068B91A84772966B64A85F066076F        - C:\PROGRAM FILES\MOZILLA FIREFOX\plugins\npqtplugin7.dll -        QuickTime Plug-in 7.7.1

DA68715DF284F052083294F6A4C78A09        - C:\PROGRAM FILES\MOZILLA FIREFOX\plugins\npqtplugin6.dll -        QuickTime Plug-in 7.7.1

821124774020771EE8AC172800A057D1        - C:\PROGRAM FILES\MOZILLA FIREFOX\plugins\npqtplugin5.dll -        QuickTime Plug-in 7.7.1

9B7A2478DCCB2E7C531C71E282941DCC        - C:\PROGRAM FILES\MOZILLA FIREFOX\plugins\npqtplugin4.dll -        QuickTime Plug-in 7.7.1

4959AA050C0F7EC3CCC42B223DE9BAD8        - C:\PROGRAM FILES\MOZILLA FIREFOX\plugins\npqtplugin3.dll -        QuickTime Plug-in 7.7.1

A4BBE6E60A682689461E54CB85BD1884        - C:\PROGRAM FILES\MOZILLA FIREFOX\plugins\npqtplugin2.dll -        QuickTime Plug-in 7.7.1

6421E0DA7580251A6C79673A5A92F488        - C:\PROGRAM FILES\MOZILLA FIREFOX\plugins\npqtplugin.dll -        QuickTime Plug-in 7.7.1

7550FC1ADE982582D5920BEA6430E3D4        - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll -        Google Earth Plugin

2EA4B85EF64CA48B792FEF23AEEF7DC1        - C:\Users\michael\AppData\Roaming\Mozilla\plugins\NpFv530.dll -        Flatcast Viewer Plugin 5.3.0.784

C50B22C8D91A76069A993A2B5197A296        - C:\Program Files\Veetle\plugins\npVeetle.dll -        Veetle TV Core

866B027053F3A40BC36126D265C78E96        - C:\Program Files\Veetle\Player\npvlc.dll -        Veetle TV Player

886A8779BD2CD069D492ADC334DD885C        - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll -        iTunes Application Detector

24E990B1E6D55428001843CF7217DD81        - C:\Program Files\Microsoft\Office Live\npOLW.dll -        Microsoft Office Live Plug-in for Firefox / Microsoft Office Live Plug-in for Firefox

30740221C0AE535DA3FA7228C1C5A826        - C:\Program Files\Veetle\VLCBroadcast\npvbp.dll -        Veetle Broadcaster Plugin

D6304CF11816513EA8B9FA76FFAA65D4        - C:\PROGRAM FILES\MOZILLA FIREFOX\plugins\np_gp.dll -        getPlusPlus for Adobe 16249

E93467C5327C2760FCAB2B4670847496        - C:\PROGRAM FILES\MOZILLA FIREFOX\plugins\npDivxPlayerPlugin.dll -        DivX Player Netscape Plugin

3509063A268A4197CF8E713BD22B0978        - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll -        Windows Live® Photo Gallery

9E448F221E741DD0ACCB381190D01B3E        - C:\PROGRAM FILES\MOZILLA FIREFOX\plugins\nprjplug.dll -        RealJukebox NS Plugin

5DB82B8C515C875AE58E1B8B5997416B        - C:\PROGRAM FILES\MOZILLA FIREFOX\plugins\nppl3260.dll -        RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit)

2CDA67C1309CA966D8EFEE4EE0D6CA92        - C:\PROGRAM FILES\MOZILLA FIREFOX\plugins\nprpjplug.dll -        RealPlayer Version Plugin

625D0A824F513CE1CABB8861E97F2142        - C:\Program Files\Picasa2\npPicasa2.dll -        Picasa

AB87EEFFD18F2BAAFC274E7075EA6C67        - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll -        Windows Presentation Foundation / Windows Presentation Foundation

99F97C9FE748C37528C338A423577FCB        - C:\PROGRAM FILES\MOZILLA FIREFOX\plugins\np-mswmp.dll -        Microsoft® Windows Media Player Firefox Plugin

92AB52FC695C1D459E3BE9AFD6CE218D        - C:\PROGRAM FILES\MOZILLA FIREFOX\plugins\NPOFFICE.DLL -        Microsoft Office 2003

F61068B91A84772966B64A85F066076F        - C:\Program Files\QuickTime\Plugins\npqtplugin7.dll -        QuickTime Plug-in 7.7.1

DA68715DF284F052083294F6A4C78A09        - C:\Program Files\QuickTime\Plugins\npqtplugin6.dll -        QuickTime Plug-in 7.7.1

821124774020771EE8AC172800A057D1        - C:\Program Files\QuickTime\Plugins\npqtplugin5.dll -        QuickTime Plug-in 7.7.1

9B7A2478DCCB2E7C531C71E282941DCC        - C:\Program Files\QuickTime\Plugins\npqtplugin4.dll -        QuickTime Plug-in 7.7.1

4959AA050C0F7EC3CCC42B223DE9BAD8        - C:\Program Files\QuickTime\Plugins\npqtplugin3.dll -        QuickTime Plug-in 7.7.1

A4BBE6E60A682689461E54CB85BD1884        - C:\Program Files\QuickTime\Plugins\npqtplugin2.dll -        QuickTime Plug-in 7.7.1

6421E0DA7580251A6C79673A5A92F488        - C:\Program Files\QuickTime\Plugins\npqtplugin.dll -        QuickTime Plug-in 7.7.1

77B09C2C6F407531447DA75E3ACD1C5B        - C:\Program Files\Adobe\Reader 10.0\Reader\browser\nppdf32.dll -        Adobe Acrobat

04ACC61B47857E779CD92D1D88770BF1        - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll -        Adobe Acrobat

2CDA67C1309CA966D8EFEE4EE0D6CA92        - C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll -        RealPlayer Version Plugin

9E448F221E741DD0ACCB381190D01B3E        - C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll -        RealJukebox NS Plugin

5DB82B8C515C875AE58E1B8B5997416B        - C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll -        RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit)

C548328E9DE5EB73350EF292D7140662        - C:\Program Files\Picasa2\npPicasa3.dll -        Picasa

2EA4B85EF64CA48B792FEF23AEEF7DC1        - C:\PROGRAM FILES\MOZILLA FIREFOX\plugins\NpFv530.dll -        Flatcast Viewer Plugin 5.3.0.784

2EA4B85EF64CA48B792FEF23AEEF7DC1        - C:\Program Files\Mozilla Firefox\plugins\NpFv530.dll -        Flatcast Viewer Plugin 5.3.0.784
 
 

==== Deleting Files \ Folders ======================
 

"C:\Users\michael\AppData\Roaming\Mozilla\Firefox\Profiles\1wge02ki.default-1341749340073\extensions\firefox@whilokii.net" deleted
 

==== Chrome Look ======================
 

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions

aipfmkinhleccnodemkoofnnofpbbpac - C:\Users\michael\AppData\Roaming\BabSolution\CR\searchgol.crx[]

lifbcibllhkdhoafpjfnlhfpfgnpldfl - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx[17.01.2012 11:45]
 

HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions

nikpibnbobmbdbheedjfogjlikpgpnhp - C:\Program Files\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx[]
 

Search-Gol Toolbar - michael - Default\Extensions\aipfmkinhleccnodemkoofnnofpbbpac

Whilokii - michael - Default\Extensions\iaimhpklononapfjngelgdokckfjekfc
 

==== Chrome Fix ======================
 

C:\Users\michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\aipfmkinhleccnodemkoofnnofpbbpac deleted successfully

C:\Users\michael\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_aipfmkinhleccnodemkoofnnofpbbpac_0.localstorage deleted successfully
 

==== Set IE to Default ======================
 

Old Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="hxxp://www.google.com"

"ICQ Search"="hxxp://www.google.com"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]

"Start Page"="hxxp://www.google.com"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]

@="hxxp://de.rd.yahoo.com/customize/ie/defaults/su/msgr9/*hxxp://de.search.yahoo.com"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]

"DefaultScope"="{2381E4B7-5C04-459E-9D46-2F9AC1608B66}"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2381E4B7-5C04-459E-9D46-2F9AC1608B66}] not found
 

New Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"ICQ Search"="hxxp://go.microsoft.com/fwlink/?LinkId=54896"

"Start Page"="hxxp://www.google.com"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]

"Start Page"="hxxp://go.microsoft.com/fwlink/?LinkId=69157"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]

"(Default)"="hxxp://search.msn.com/results.asp?q=%s"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]

"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"
 

==== All HKCU SearchScopes ======================
 

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes

{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing  Url="hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"

{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} Unknown  Url="Not_Found"

{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google  Url="hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"

{AC6A50A8-7D96-4781-88DC-68A21738A9C8} Google  Url="hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MEDB_de"

{BD08A45A-E42D-4C2B-921F-C8D6B79FFA34} WEB.DE Suche Url="hxxp://go.web.de/tb/ie_searchplugin/?su={searchTerms}"

{C2D15886-0569-47E6-9395-2A10479677E4} GMX search Url="hxxp://search.gmx.com/web?q={searchTerms}&origin=tb_splugin_ie"

{D9B1F081-7C43-4A4D-953F-897A6641B273} GMX Suche Url="hxxp://go.gmx.net/tb/ie_searchplugin/?su={searchTerms}"

{F1012029-4B3D-48CC-8B68-EAA0357BF503} 1und1 Suche Url="hxxp://go.1und1.de/tb/ie_searchplugin/?su={searchTerms}"
 

==== Reset Google Chrome ======================
 

C:\Users\michael\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully

C:\Users\michael\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
 

==== Deleting CLSID Registry Keys ======================
 

HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} deleted successfully
 

==== Deleting CLSID Registry Values ======================
 
 

==== shortcuts on Users Desktops ======================
 

C:\Users\michael\Desktop\Calculator.lnk - C:\Windows\system32\calc.exe 

C:\Users\michael\Desktop\Free Audio Converter.lnk - C:\Program Files\DVDVideoSoft\Free Audio Converter\FreeAudioConverter.exe 

C:\Users\michael\Desktop\Free YouTube to MP3 Converter.lnk - C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\FreeYouTubeToMP3Converter.exe 

C:\Users\michael\Desktop\Internet Explorer.lnk - C:\Program Files\Internet Explorer\IEXPLORE.EXE 

C:\Users\michael\Desktop\Opera.lnk - C:\Program Files\Opera\opera.exe 

C:\Users\michael\Desktop\teXXas.lnk - C:\Program Files\teXXas\teXXas.exe 

C:\Users\UpdatusUser\Desktop\Trillian - Computerbild Edition.lnk - C:\Program Files\Trillian\trillian.exe 
 

==== shortcuts on All Users Desktop ======================
 

C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk - C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe 

C:\Users\Public\Desktop\Mozilla Firefox.lnk - C:\Program Files\Mozilla Firefox\firefox.exe 

C:\Users\Public\Desktop\OpenOffice 4.0.0.lnk - C:\Program Files\OpenOffice 4\program\soffice.exe 

C:\Users\Public\Desktop\Samsung Kies (Lite).lnk - C:\Program Files\Samsung\Kies\KiesAgent.exe /lite

C:\Users\Public\Desktop\Yahoo Messenger.lnk -  
 

==== shortcuts in All Users Start Menu ======================
 

C:\ProgramData\Microsoft\Windows\Start Menu\Soluto.lnk - C:\Program Files\Soluto\Soluto.exe /show

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk - C:\Program Files\Microsoft Security Client\msseces.exe 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk - C:\Program Files\Google\Chrome\Application\chrome.exe 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\About Java.lnk - C:\Program Files\Java\jre7\bin\javacpl.exe -tab about

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Check For Updates.lnk - C:\Program Files\Java\jre7\bin\javacpl.exe -tab update

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Configure Java.lnk - C:\Program Files\Java\jre7\bin\javacpl.exe 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Get Help.lnk -  

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Visit Java.com.lnk -  

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware\Malwarebytes Anti-Malware entfernen.lnk - C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware\Malwarebytes Anti-Malware Help.lnk - C:\Program Files\Malwarebytes' Anti-Malware\mbam.chm 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware\Malwarebytes Anti-Malware.lnk - C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware\Tools\Malwarebytes Anti-Malware Chameleon.lnk - C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\chameleon.chm 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office Word 2003.lnk - C:\Windows\Installer\{90110407-6000-11D3-8CFE-0150048383C9}\wordicon.exe 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight\Microsoft Silverlight.lnk - C:\Program Files\Microsoft Silverlight\5.1.20913.0\Silverlight.Configuration.exe 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype\Skype.lnk - C:\Program Files\Skype\Phone\Skype.exe 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Soluto\Soluto.lnk - C:\Program Files\Soluto\Soluto.exe /show

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Soluto\Uninstall.lnk - C:\Program Files\Soluto\SolutoUninstall.exe /StartMenu
 

==== shortcuts in Quick Launch ======================
 

C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk - C:\Program Files\Google\Chrome\Application\chrome.exe 

C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -  

C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -  

C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk - C:\Program Files\Google\Chrome\Application\chrome.exe 

C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -  

C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -  

C:\Users\michael\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\BearShare.lnk - C:\Program Files\BearShare Applications\BearShare\BearShare.exe 

C:\Users\michael\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Corel MediaOne.lnk - C:\Program Files\Corel\Corel MediaOne\Corel MediaOne.exe 

C:\Users\michael\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk - C:\Program Files\Google\Chrome\Application\chrome.exe 

C:\Users\michael\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Earth.lnk - C:\Program Files\Google\Google Earth\googleearth.exe 

C:\Users\michael\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\ImgBurn.lnk - C:\Program Files\ImgBurn\ImgBurn.exe 

C:\Users\michael\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files\Internet Explorer\IEXPLORE.EXE 

C:\Users\michael\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\LG PC Suite IV.lnk - C:\Program Files\LG Electronics\LG PC Suite IV\LGUX.exe 

C:\Users\michael\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk - C:\Program Files\Mozilla Firefox\firefox.exe 

C:\Users\michael\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Nero StartSmart Essentials.lnk - C:\Program Files\Nero\Nero8\Nero StartSmart\NeroStartSmart.exe -ScParameter=65  

C:\Users\michael\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Opera.lnk - C:\Program Files\Opera\opera.exe 

C:\Users\michael\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Samsung Kies (Lite).lnk - C:\Program Files\Samsung\Kies\KiesAgent.exe /lite

C:\Users\michael\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Samsung Kies.lnk - C:\Program Files\Samsung\Kies\KiesAgent.exe 

C:\Users\michael\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Samsung Story Album Viewer.lnk - C:\Program Files\Samsung\Story Album Viewer\HTML5Viewer.exe 

C:\Users\michael\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -  

C:\Users\michael\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Skype.lnk -  

C:\Users\michael\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\WEB.DE.lnk - C:\Program Files\Internet Explorer\iexplore.exe hxxp://go.web.de/tb/ie_desktop_portal

C:\Users\michael\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -  

C:\Users\michael\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Windows Live Messenger .lnk - C:\Program Files\Windows Live\Messenger\msnmsgr.exe 

C:\Users\michael\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk - C:\Program Files\Windows Media Player\wmplayer.exe /prefetch:1

C:\Users\michael\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Yahoo Messenger.lnk -  

C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk - C:\Program Files\Google\Chrome\Application\chrome.exe 

C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -  

C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -  

C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Yahoo Messenger.lnk -  
 

==== shortcuts After Repair ======================
 

C:\Users\michael\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\WEB.DE.lnk - C:\Program Files\Internet Explorer\iexplore.exe 
 

==== Deleting Registry Keys ======================
 

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\aipfmkinhleccnodemkoofnnofpbbpac deleted successfully

HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp deleted successfully
 

==== Empty IE Cache ======================
 

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\michael\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
 

==== Empty FireFox Cache ======================
 

C:\Users\michael\AppData\Local\Mozilla\Firefox\Profiles\1wge02ki.default-1341749340073\Cache emptied successfully
 

==== Empty Chrome Cache ======================
 

C:\Users\michael\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
 

==== Empty All Flash Cache ======================
 

Flash Cache Emptied Successfully
 

==== Empty All Java Cache ======================
 

Java Cache cleared successfully
 

==== After Reboot ======================
 

==== Empty Temp Folders ======================
 

C:\Windows\Temp successfully emptied

C:\Users\michael\AppData\Local\Temp successfully emptied
 

==== Empty Recycle Bin ======================
 

C:\$RECYCLE.BIN successfully emptied
 

==== Deleting Files / Folders ======================
 

"C:\Users\michael\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" deleted
 

==== EOF on 16.10.2013 at 10:38:51,32 ======================