Nein, installier jetzt bitte nicht irgendwelche Programme.

Mach einen OTL-Fix, beende alle evtl. geöffneten Programme, auch Virenscanner deaktivieren (!), starte OTL und kopiere folgenden Text in die "Custom Scan/Fixes" Box (unten in OTL): (das ":OTL" muss mitkopiert werden!!!)

:OTL
PRC - C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\SearchSettings.exe (Spigot, Inc.)
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
IE - HKCU\..\URLSearchHook:  - No CLSID value found
IE - HKCU\..\URLSearchHook: {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Programme\pdfforge Toolbar\IE\4.7\pdfforgeToolbarIE.dll (Spigot, Inc.)
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=302398&ilc=12"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.startup.homepage: "http://www.google.de"
FF - prefs.js..extensions.enabledItems: wtxpcom@mybrowserbar.com:4.3
FF - prefs.js..keyword.URL: "http://de.search.yahoo.com/search?ei=utf-8&fr=greentree_ff1&type=302398&ilc=12&p="
[2011.11.07 17:35:26 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Dokumente und Einstellungen\Jen\Anwendungsdaten\Mozilla\Firefox\Profiles\c41204gv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2012.01.05 19:38:58 | 000,001,056 | ---- | M] () -- C:\Dokumente und Einstellungen\Jen\Anwendungsdaten\Mozilla\Firefox\Profiles\c41204gv.default\searchplugins\icqplugin.xml
[2011.08.25 20:14:19 | 000,000,000 | ---D | M] (afurladvisor) -- C:\Programme\Mozilla Firefox\extensions\afurladvisor@anchorfree.com
[2010.07.12 17:33:56 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Programme\mozilla firefox\plugins\npwachk.dll
O2 - BHO: (pdfforge Toolbar) - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Programme\pdfforge Toolbar\IE\4.7\pdfforgeToolbarIE.dll (Spigot, Inc.)
O2 - BHO: (Hotspot Shield Class) - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Programme\Hotspot Shield\HssIE\HssIE.dll (AnchorFree Inc.)
O3 - HKLM\..\Toolbar: (pdfforge Toolbar) - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Programme\pdfforge Toolbar\IE\4.7\pdfforgeToolbarIE.dll (Spigot, Inc.)
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [SearchSettings] C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\SearchSettings.exe (Spigot, Inc.)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010.08.30 19:51:52 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{c2fad044-a0be-11e0-9e0e-001377074099}\Shell - "" = AutoRun
O33 - MountPoints2\{c2fad044-a0be-11e0-9e0e-001377074099}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{c2fad044-a0be-11e0-9e0e-001377074099}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{e953605e-982a-11e0-9e04-001377074099}\Shell - "" = AutoRun
O33 - MountPoints2\{e953605e-982a-11e0-9e04-001377074099}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{e953605e-982a-11e0-9e04-001377074099}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{e9536062-982a-11e0-9e04-001377074099}\Shell - "" = AutoRun
O33 - MountPoints2\{e9536062-982a-11e0-9e04-001377074099}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{e9536062-982a-11e0-9e04-001377074099}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\E\Shell - "" = AutoRun
O33 - MountPoints2\E\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\E\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\AutoRun.exe
:Files
C:\Dokumente und Einstellungen\Jen\Lokale Einstellungen\Anwendungsdaten\99422f31
C:\WINDOWS\$NtUninstallKB18828$
C:\Programme\Gemeinsame Dateien\Spigot
C:\Programme\pdfforge Toolbar
:Commands
[emptytemp]
[resethosts]
         

Klick dann oben links auf den Button Fix!
Das Logfile müsste geöffnet werden, wenn Du nach dem Fixen auf ok klickst, poste das bitte. Evtl. wird der Rechner neu gestartet.

Die mit diesem Script gefixten Einträge, Dateien und Ordner werden zur Sicherheit nicht vollständig gelöscht, es wird eine Sicherheitskopie auf der Systempartition im Ordner "_OTL" erstellt.

Hinweis: Das obige Script ist nur für diesen einen User in dieser Situtation erstellt worden. Es ist auf keinen anderen Rechner portierbar und darf nicht anderweitig verwandt werden, da es das System nachhaltig schädigen kann!

Okay. Kann man an den Daten auch ablesen wo und wann ich mir das eingefangen hab???

All processes killed
========== OTL ==========
No active process named SearchSettings.exe was found!
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{B922D405-6D13-4A2B-AE89-08A030DA4402} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B922D405-6D13-4A2B-AE89-08A030DA4402}\ deleted successfully.
C:\Programme\pdfforge Toolbar\IE\4.7\pdfforgeToolbarIE.dll moved successfully.
Prefs.js: "ICQ Search" removed from browser.search.defaultenginename
Prefs.js: "chr-greentree_ff&type=302398&ilc=12" removed from browser.search.param.yahoo-fr
Prefs.js: "Google" removed from browser.search.selectedEngine
Prefs.js: "hxxp://www.google.de" removed from browser.startup.homepage
Prefs.js: wtxpcom@mybrowserbar.com:4.3 removed from extensions.enabledItems
Prefs.js: "hxxp://de.search.yahoo.com/search?ei=utf-8&fr=greentree_ff1&type=302398&ilc=12&p=" removed from keyword.URL
Folder move failed. C:\Dokumente und Einstellungen\Jen\Anwendungsdaten\Mozilla\Firefox\Profiles\c41204gv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine scheduled to be moved on reboot.
Folder move failed. C:\Dokumente und Einstellungen\Jen\Anwendungsdaten\Mozilla\Firefox\Profiles\c41204gv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF scheduled to be moved on reboot.
Folder move failed. C:\Dokumente und Einstellungen\Jen\Anwendungsdaten\Mozilla\Firefox\Profiles\c41204gv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults\preferences scheduled to be moved on reboot.
Folder move failed. C:\Dokumente und Einstellungen\Jen\Anwendungsdaten\Mozilla\Firefox\Profiles\c41204gv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults scheduled to be moved on reboot.
Folder move failed. C:\Dokumente und Einstellungen\Jen\Anwendungsdaten\Mozilla\Firefox\Profiles\c41204gv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\components scheduled to be moved on reboot.
Folder move failed. C:\Dokumente und Einstellungen\Jen\Anwendungsdaten\Mozilla\Firefox\Profiles\c41204gv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin scheduled to be moved on reboot.
Folder move failed. C:\Dokumente und Einstellungen\Jen\Anwendungsdaten\Mozilla\Firefox\Profiles\c41204gv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\tr scheduled to be moved on reboot.
Folder move failed. C:\Dokumente und Einstellungen\Jen\Anwendungsdaten\Mozilla\Firefox\Profiles\c41204gv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\sk scheduled to be moved on reboot.
Folder move failed. C:\Dokumente und Einstellungen\Jen\Anwendungsdaten\Mozilla\Firefox\Profiles\c41204gv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\ru scheduled to be moved on reboot.
Folder move failed. C:\Dokumente und Einstellungen\Jen\Anwendungsdaten\Mozilla\Firefox\Profiles\c41204gv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\it scheduled to be moved on reboot.
Folder move failed. C:\Dokumente und Einstellungen\Jen\Anwendungsdaten\Mozilla\Firefox\Profiles\c41204gv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\he scheduled to be moved on reboot.
Folder move failed. C:\Dokumente und Einstellungen\Jen\Anwendungsdaten\Mozilla\Firefox\Profiles\c41204gv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\fr scheduled to be moved on reboot.
Folder move failed. C:\Dokumente und Einstellungen\Jen\Anwendungsdaten\Mozilla\Firefox\Profiles\c41204gv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\es scheduled to be moved on reboot.
Folder move failed. C:\Dokumente und Einstellungen\Jen\Anwendungsdaten\Mozilla\Firefox\Profiles\c41204gv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\en-US scheduled to be moved on reboot.
Folder move failed. C:\Dokumente und Einstellungen\Jen\Anwendungsdaten\Mozilla\Firefox\Profiles\c41204gv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\de scheduled to be moved on reboot.
Folder move failed. C:\Dokumente und Einstellungen\Jen\Anwendungsdaten\Mozilla\Firefox\Profiles\c41204gv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\cs scheduled to be moved on reboot.
Folder move failed. C:\Dokumente und Einstellungen\Jen\Anwendungsdaten\Mozilla\Firefox\Profiles\c41204gv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\bg scheduled to be moved on reboot.
Folder move failed. C:\Dokumente und Einstellungen\Jen\Anwendungsdaten\Mozilla\Firefox\Profiles\c41204gv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale scheduled to be moved on reboot.
Folder move failed. C:\Dokumente und Einstellungen\Jen\Anwendungsdaten\Mozilla\Firefox\Profiles\c41204gv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img scheduled to be moved on reboot.
Folder move failed. C:\Dokumente und Einstellungen\Jen\Anwendungsdaten\Mozilla\Firefox\Profiles\c41204gv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content scheduled to be moved on reboot.
Folder move failed. C:\Dokumente und Einstellungen\Jen\Anwendungsdaten\Mozilla\Firefox\Profiles\c41204gv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome scheduled to be moved on reboot.
Folder move failed. C:\Dokumente und Einstellungen\Jen\Anwendungsdaten\Mozilla\Firefox\Profiles\c41204gv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07} scheduled to be moved on reboot.
C:\Dokumente und Einstellungen\Jen\Anwendungsdaten\Mozilla\Firefox\Profiles\c41204gv.default\searchplugins\icqplugin.xml moved successfully.
Folder move failed. C:\Programme\Mozilla Firefox\extensions\afurladvisor@anchorfree.com\skin scheduled to be moved on reboot.
Folder move failed. C:\Programme\Mozilla Firefox\extensions\afurladvisor@anchorfree.com\locale\en-US scheduled to be moved on reboot.
Folder move failed. C:\Programme\Mozilla Firefox\extensions\afurladvisor@anchorfree.com\locale scheduled to be moved on reboot.
Folder move failed. C:\Programme\Mozilla Firefox\extensions\afurladvisor@anchorfree.com\defaults\preferences scheduled to be moved on reboot.
Folder move failed. C:\Programme\Mozilla Firefox\extensions\afurladvisor@anchorfree.com\defaults scheduled to be moved on reboot.
Folder move failed. C:\Programme\Mozilla Firefox\extensions\afurladvisor@anchorfree.com\components scheduled to be moved on reboot.
Folder move failed. C:\Programme\Mozilla Firefox\extensions\afurladvisor@anchorfree.com\chrome\content scheduled to be moved on reboot.
Folder move failed. C:\Programme\Mozilla Firefox\extensions\afurladvisor@anchorfree.com\chrome scheduled to be moved on reboot.
Folder move failed. C:\Programme\Mozilla Firefox\extensions\afurladvisor@anchorfree.com scheduled to be moved on reboot.
C:\Programme\Mozilla Firefox\plugins\npwachk.dll moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B922D405-6D13-4A2B-AE89-08A030DA4402}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B922D405-6D13-4A2B-AE89-08A030DA4402}\ not found.
File C:\Programme\pdfforge Toolbar\IE\4.7\pdfforgeToolbarIE.dll not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}\ deleted successfully.
C:\Programme\Hotspot Shield\HssIE\HssIE.dll moved successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{B922D405-6D13-4A2B-AE89-08A030DA4402} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B922D405-6D13-4A2B-AE89-08A030DA4402}\ not found.
File C:\Programme\pdfforge Toolbar\IE\4.7\pdfforgeToolbarIE.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\SearchSettings deleted successfully.
C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\SearchSettings.exe moved successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\AutoRun|DWORD:1 /E : value set successfully!
C:\AUTOEXEC.BAT moved successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c2fad044-a0be-11e0-9e0e-001377074099}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c2fad044-a0be-11e0-9e0e-001377074099}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c2fad044-a0be-11e0-9e0e-001377074099}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c2fad044-a0be-11e0-9e0e-001377074099}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c2fad044-a0be-11e0-9e0e-001377074099}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c2fad044-a0be-11e0-9e0e-001377074099}\ not found.
File F:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{e953605e-982a-11e0-9e04-001377074099}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{e953605e-982a-11e0-9e04-001377074099}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{e953605e-982a-11e0-9e04-001377074099}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{e953605e-982a-11e0-9e04-001377074099}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{e953605e-982a-11e0-9e04-001377074099}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{e953605e-982a-11e0-9e04-001377074099}\ not found.
File E:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{e9536062-982a-11e0-9e04-001377074099}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{e9536062-982a-11e0-9e04-001377074099}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{e9536062-982a-11e0-9e04-001377074099}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{e9536062-982a-11e0-9e04-001377074099}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{e9536062-982a-11e0-9e04-001377074099}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{e9536062-982a-11e0-9e04-001377074099}\ not found.
File F:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\E\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\E\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\E\ not found.
File E:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\F\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\F\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\F\ not found.
File F:\AutoRun.exe not found.
========== FILES ==========
C:\Dokumente und Einstellungen\Jen\Lokale Einstellungen\Anwendungsdaten\99422f31\U folder moved successfully.
C:\Dokumente und Einstellungen\Jen\Lokale Einstellungen\Anwendungsdaten\99422f31 folder moved successfully.
Folder move failed. C:\WINDOWS\$NtUninstallKB18828$ scheduled to be moved on reboot.
C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\components folder moved successfully.
C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom folder moved successfully.
C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\Res folder moved successfully.
C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\Lang folder moved successfully.
C:\Programme\Gemeinsame Dateien\Spigot\Search Settings folder moved successfully.
C:\Programme\Gemeinsame Dateien\Spigot folder moved successfully.
C:\Programme\pdfforge Toolbar\Res\Lang folder moved successfully.
C:\Programme\pdfforge Toolbar\Res folder moved successfully.
C:\Programme\pdfforge Toolbar\IE\4.7 folder moved successfully.
C:\Programme\pdfforge Toolbar\IE folder moved successfully.
C:\Programme\pdfforge Toolbar\FF\chrome\skin folder moved successfully.
C:\Programme\pdfforge Toolbar\FF\chrome\locale\EN-US folder moved successfully.
C:\Programme\pdfforge Toolbar\FF\chrome\locale folder moved successfully.
C:\Programme\pdfforge Toolbar\FF\chrome\content folder moved successfully.
C:\Programme\pdfforge Toolbar\FF\chrome folder moved successfully.
C:\Programme\pdfforge Toolbar\FF folder moved successfully.
C:\Programme\pdfforge Toolbar folder moved successfully.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: All Users
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
 
User: Jen
->Temp folder emptied: 5108236 bytes
->Temporary Internet Files folder emptied: 33166 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 101406841 bytes
->Flash cache emptied: 517 bytes
 
User: LocalService
->Temp folder emptied: 3596 bytes
->Temporary Internet Files folder emptied: 98737378 bytes
->Java cache emptied: 0 bytes
 
User: NetworkService
->Temp folder emptied: 3596 bytes
->Temporary Internet Files folder emptied: 35053092 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 2195157 bytes
%systemroot%\System32 .tmp files removed: 2951 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 3596 bytes
RecycleBin emptied: 0 bytes
 
Total Files Cleaned = 231,00 mb
 
C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
 
OTL by OldTimer - Version 3.2.31.0 log created on 01032012_220927

Files\Folders moved on Reboot...
C:\Dokumente und Einstellungen\Jen\Anwendungsdaten\Mozilla\Firefox\Profiles\c41204gv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine folder moved successfully.
C:\Dokumente und Einstellungen\Jen\Anwendungsdaten\Mozilla\Firefox\Profiles\c41204gv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF folder moved successfully.
C:\Dokumente und Einstellungen\Jen\Anwendungsdaten\Mozilla\Firefox\Profiles\c41204gv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults\preferences folder moved successfully.
C:\Dokumente und Einstellungen\Jen\Anwendungsdaten\Mozilla\Firefox\Profiles\c41204gv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults folder moved successfully.
C:\Dokumente und Einstellungen\Jen\Anwendungsdaten\Mozilla\Firefox\Profiles\c41204gv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\components folder moved successfully.
C:\Dokumente und Einstellungen\Jen\Anwendungsdaten\Mozilla\Firefox\Profiles\c41204gv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin folder moved successfully.
C:\Dokumente und Einstellungen\Jen\Anwendungsdaten\Mozilla\Firefox\Profiles\c41204gv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\tr folder moved successfully.
C:\Dokumente und Einstellungen\Jen\Anwendungsdaten\Mozilla\Firefox\Profiles\c41204gv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\sk folder moved successfully.
C:\Dokumente und Einstellungen\Jen\Anwendungsdaten\Mozilla\Firefox\Profiles\c41204gv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\ru folder moved successfully.
C:\Dokumente und Einstellungen\Jen\Anwendungsdaten\Mozilla\Firefox\Profiles\c41204gv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\it folder moved successfully.
C:\Dokumente und Einstellungen\Jen\Anwendungsdaten\Mozilla\Firefox\Profiles\c41204gv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\he folder moved successfully.
C:\Dokumente und Einstellungen\Jen\Anwendungsdaten\Mozilla\Firefox\Profiles\c41204gv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\fr folder moved successfully.
C:\Dokumente und Einstellungen\Jen\Anwendungsdaten\Mozilla\Firefox\Profiles\c41204gv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\es folder moved successfully.
C:\Dokumente und Einstellungen\Jen\Anwendungsdaten\Mozilla\Firefox\Profiles\c41204gv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\en-US folder moved successfully.
C:\Dokumente und Einstellungen\Jen\Anwendungsdaten\Mozilla\Firefox\Profiles\c41204gv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\de folder moved successfully.
C:\Dokumente und Einstellungen\Jen\Anwendungsdaten\Mozilla\Firefox\Profiles\c41204gv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\cs folder moved successfully.
C:\Dokumente und Einstellungen\Jen\Anwendungsdaten\Mozilla\Firefox\Profiles\c41204gv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\bg folder moved successfully.
C:\Dokumente und Einstellungen\Jen\Anwendungsdaten\Mozilla\Firefox\Profiles\c41204gv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale folder moved successfully.
C:\Dokumente und Einstellungen\Jen\Anwendungsdaten\Mozilla\Firefox\Profiles\c41204gv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img folder moved successfully.
C:\Dokumente und Einstellungen\Jen\Anwendungsdaten\Mozilla\Firefox\Profiles\c41204gv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content folder moved successfully.
C:\Dokumente und Einstellungen\Jen\Anwendungsdaten\Mozilla\Firefox\Profiles\c41204gv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome folder moved successfully.
C:\Dokumente und Einstellungen\Jen\Anwendungsdaten\Mozilla\Firefox\Profiles\c41204gv.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07} folder moved successfully.
C:\Programme\Mozilla Firefox\extensions\afurladvisor@anchorfree.com\skin folder moved successfully.
C:\Programme\Mozilla Firefox\extensions\afurladvisor@anchorfree.com\locale\en-US folder moved successfully.
C:\Programme\Mozilla Firefox\extensions\afurladvisor@anchorfree.com\locale folder moved successfully.
C:\Programme\Mozilla Firefox\extensions\afurladvisor@anchorfree.com\defaults\preferences folder moved successfully.
C:\Programme\Mozilla Firefox\extensions\afurladvisor@anchorfree.com\defaults folder moved successfully.
C:\Programme\Mozilla Firefox\extensions\afurladvisor@anchorfree.com\components folder moved successfully.
C:\Programme\Mozilla Firefox\extensions\afurladvisor@anchorfree.com\chrome\content folder moved successfully.
C:\Programme\Mozilla Firefox\extensions\afurladvisor@anchorfree.com\chrome folder moved successfully.
C:\Programme\Mozilla Firefox\extensions\afurladvisor@anchorfree.com folder moved successfully.
Folder move failed. C:\WINDOWS\$NtUninstallKB18828$ scheduled to be moved on reboot.

Registry entries deleted on Reboot...