![]() |
|
Plagegeister aller Art und deren Bekämpfung: mystart.incredibar.com entfernenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() | #5 |
![]() ![]() | ![]() mystart.incredibar.com entfernen Hallo, ich hab jetzt alles gelöscht... hoffe ich Code:
ATTFilter # AdwCleaner v1.701 - Logfile created 07/13/2012 at 17:54:34 # Updated 02/07/2012 by Xplode # Operating system : Windows Vista (TM) Home Premium Service Pack 2 (32 bits) # User : Susi - SUSISPC # Running from : C:\Users\Susi\Downloads\adwcleaner.exe # Option [Delete] ***** [Services] ***** ***** [Files / Folders] ***** Folder Deleted : C:\Users\Susi\AppData\Local\Conduit Folder Deleted : C:\Users\Susi\AppData\Local\Temp\AskSearch Folder Deleted : C:\Users\Susi\AppData\LocalLow\AskToolbar Folder Deleted : C:\Users\Susi\AppData\LocalLow\Conduit Folder Deleted : C:\Users\Susi\AppData\Roaming\Mozilla\Firefox\Profiles\o0s18t4g.default\ConduitCommon Folder Deleted : C:\Users\Susi\AppData\Roaming\Mozilla\Firefox\Profiles\o0s18t4g.default\extensions\ffxtlbr@incredibar.com File Deleted : C:\Users\Susi\AppData\Roaming\Mozilla\Firefox\Profiles\o0s18t4g.default\searchplugins\Askcom.xml File Deleted : C:\Users\Susi\AppData\Roaming\Mozilla\Firefox\Profiles\o0s18t4g.default\searchplugins\Conduit.xml File Deleted : C:\Users\Susi\AppData\Roaming\Mozilla\Firefox\Profiles\o0s18t4g.default\searchplugins\MyStart Search.xml ***** [Registry] ***** [*] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2319825 Key Deleted : HKCU\Software\IM Key Deleted : HKCU\Software\ImInstaller Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine Key Deleted : HKCU\Software\Softonic Key Deleted : HKLM\SOFTWARE\Classes\Conduit.Engine Key Deleted : HKLM\SOFTWARE\Conduit Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd Key Deleted : HKLM\SOFTWARE\Web Assistant Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\extensions [{336D0C35-8A85-403a-B9D2-65C292C39087}] ***** [Registre - GUID] ***** Key Deleted : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170} Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B} Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A} Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170} Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{40C3CC16-7269-4B32-9531-17F2950FB06F}] ***** [Internet Browsers] ***** -\\ Internet Explorer v9.0.8112.16421 Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://mystart.incredibar.com/mb165?a=6R8y8EVMiW&i=26 --> hxxp://www.google.com -\\ Mozilla Firefox v13.0.1 (de) Profile name : default File : C:\Users\Susi\AppData\Roaming\Mozilla\Firefox\Profiles\o0s18t4g.default\prefs.js C:\Users\Susi\AppData\Roaming\Mozilla\Firefox\Profiles\o0s18t4g.default\user.js ... Deleted ! Deleted : user_pref("CT2319825..clientLogIsEnabled", true); Deleted : user_pref("CT2319825..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...] Deleted : user_pref("CT2319825..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...] Deleted : user_pref("CT2319825.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx"); Deleted : user_pref("CT2319825.CTID", "CT2319825"); Deleted : user_pref("CT2319825.CurrentServerDate", "9-10-2011"); Deleted : user_pref("CT2319825.DSInstall", true); Deleted : user_pref("CT2319825.DialogsAlignMode", "LTR"); Deleted : user_pref("CT2319825.DialogsGetterLastCheckTime", "Sun Oct 09 2011 11:34:40 GMT+0200"); Deleted : user_pref("CT2319825.DownloadReferralCookieData", ""); Deleted : user_pref("CT2319825.EMailNotifierPollDate", "Sun Oct 09 2011 11:49:41 GMT+0200"); Deleted : user_pref("CT2319825.FeedPollDate11908299", "Sun Oct 09 2011 11:34:42 GMT+0200"); Deleted : user_pref("CT2319825.FirstServerDate", "9-10-2011"); Deleted : user_pref("CT2319825.FirstTime", true); Deleted : user_pref("CT2319825.FirstTimeFF3", true); Deleted : user_pref("CT2319825.FixPageNotFoundErrors", true); Deleted : user_pref("CT2319825.GroupingServerCheckInterval", 1440); Deleted : user_pref("CT2319825.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/"); Deleted : user_pref("CT2319825.HPInstall", false); Deleted : user_pref("CT2319825.HasUserGlobalKeys", true); Deleted : user_pref("CT2319825.Initialize", true); Deleted : user_pref("CT2319825.InitializeCommonPrefs", true); Deleted : user_pref("CT2319825.InstallationAndCookieDataSentCount", 2); Deleted : user_pref("CT2319825.InstallationType", "ConduitIntegration"); Deleted : user_pref("CT2319825.InstalledDate", "Sun Oct 09 2011 11:34:39 GMT+0200"); Deleted : user_pref("CT2319825.InvalidateCache", false); Deleted : user_pref("CT2319825.IsAlertDBUpdated", true); Deleted : user_pref("CT2319825.IsGrouping", false); Deleted : user_pref("CT2319825.IsInitSetupIni", true); Deleted : user_pref("CT2319825.IsMulticommunity", false); Deleted : user_pref("CT2319825.IsOpenThankYouPage", false); Deleted : user_pref("CT2319825.IsOpenUninstallPage", true); Deleted : user_pref("CT2319825.IsProtectorsInit", true); Deleted : user_pref("CT2319825.LanguagePackLastCheckTime", "Sun Oct 09 2011 11:34:42 GMT+0200"); Deleted : user_pref("CT2319825.LanguagePackReloadIntervalMM", 1440); Deleted : user_pref("CT2319825.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...] Deleted : user_pref("CT2319825.LastLogin_3.7.0.6", "Sun Oct 09 2011 19:41:58 GMT+0200"); Deleted : user_pref("CT2319825.LatestVersion", "3.7.0.6"); Deleted : user_pref("CT2319825.Locale", "de"); Deleted : user_pref("CT2319825.MCDetectTooltipHeight", "83"); Deleted : user_pref("CT2319825.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1"); Deleted : user_pref("CT2319825.MCDetectTooltipWidth", "295"); Deleted : user_pref("CT2319825.MyStuffEnabledAtInstallation", true); Deleted : user_pref("CT2319825.OriginalFirstVersion", "3.7.0.6"); Deleted : user_pref("CT2319825.RadioLastCheckTime", "Sun Oct 09 2011 11:34:42 GMT+0200"); Deleted : user_pref("CT2319825.RadioLastUpdateIPServer", "3"); Deleted : user_pref("CT2319825.RadioLastUpdateServer", "129224641269630000"); Deleted : user_pref("CT2319825.RadioShrinkedFromSetup", false); Deleted : user_pref("CT2319825.SavedHomepage", "hxxp://www.yahoo.de"); Deleted : user_pref("CT2319825.SearchCaption", "Winload Customized Web Search"); Deleted : user_pref("CT2319825.SearchEngineBeforeUnload", "Winload Customized Web Search"); Deleted : user_pref("CT2319825.SearchFromAddressBarIsInit", true); Deleted : user_pref("CT2319825.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT231[...] Deleted : user_pref("CT2319825.SearchInNewTabEnabled", true); Deleted : user_pref("CT2319825.SearchInNewTabIntervalMM", 1440); Deleted : user_pref("CT2319825.SearchInNewTabLastCheckTime", "Sun Oct 09 2011 11:34:42 GMT+0200"); Deleted : user_pref("CT2319825.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...] Deleted : user_pref("CT2319825.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usa[...] Deleted : user_pref("CT2319825.SearchProtectorEnabled", true); Deleted : user_pref("CT2319825.SearchProtectorToolbarDisabled", true); Deleted : user_pref("CT2319825.SendProtectorDataViaLogin", true); Deleted : user_pref("CT2319825.ServiceMapLastCheckTime", "Sun Oct 09 2011 11:34:36 GMT+0200"); Deleted : user_pref("CT2319825.SettingsLastCheckTime", "Sun Oct 09 2011 19:41:52 GMT+0200"); Deleted : user_pref("CT2319825.SettingsLastUpdate", "1313478201"); Deleted : user_pref("CT2319825.TBHomePageUrl", "hxxp://search.conduit.com/?ctid=CT2319825&SearchSource=13"); Deleted : user_pref("CT2319825.ThirdPartyComponentsInterval", 504); Deleted : user_pref("CT2319825.ThirdPartyComponentsLastCheck", "Sun Oct 09 2011 11:34:36 GMT+0200"); Deleted : user_pref("CT2319825.ThirdPartyComponentsLastUpdate", "1255344657"); Deleted : user_pref("CT2319825.ToolbarDisabled", true); Deleted : user_pref("CT2319825.ToolbarShrinkedFromSetup", false); Deleted : user_pref("CT2319825.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2319825"); Deleted : user_pref("CT2319825.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...] Deleted : user_pref("CT2319825.UserID", "UN77399982343598620"); Deleted : user_pref("CT2319825.WeatherNetwork", ""); Deleted : user_pref("CT2319825.WeatherPollDate", "Sun Oct 09 2011 11:34:41 GMT+0200"); Deleted : user_pref("CT2319825.WeatherUnit", "C"); Deleted : user_pref("CT2319825.alertChannelId", "715912"); Deleted : user_pref("CT2319825.backendstorage.id", "3236353332313937"); Deleted : user_pref("CT2319825.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...] Deleted : user_pref("CT2319825.globalFirstTimeInfoLastCheckTime", "Sun Oct 09 2011 11:34:40 GMT+0200"); Deleted : user_pref("CT2319825.homepageProtectorEnableByLogin", true); Deleted : user_pref("CT2319825.initDone", true); Deleted : user_pref("CT2319825.isAppTrackingManagerOn", true); Deleted : user_pref("CT2319825.isFirstRadioInstallation", false); Deleted : user_pref("CT2319825.myStuffEnabled", true); Deleted : user_pref("CT2319825.myStuffPublihserMinWidth", 400); Deleted : user_pref("CT2319825.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...] Deleted : user_pref("CT2319825.myStuffServiceIntervalMM", 1440); Deleted : user_pref("CT2319825.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...] Deleted : user_pref("CT2319825.revertSettingsEnabled", true); Deleted : user_pref("CT2319825.searchProtectorDialogDelayInSec", 10); Deleted : user_pref("CT2319825.searchProtectorEnableByLogin", true); Deleted : user_pref("CT2319825.testingCtid", ""); Deleted : user_pref("CT2319825.toolbarAppMetaDataLastCheckTime", "Sun Oct 09 2011 11:34:40 GMT+0200"); Deleted : user_pref("CT2319825.toolbarContextMenuLastCheckTime", "Sun Oct 09 2011 11:34:42 GMT+0200"); Deleted : user_pref("CommunityToolbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT2319825&Search[...] Deleted : user_pref("CommunityToolbar.ConduitSearchList", "Winload Customized Web Search"); Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/715912/711772/DE", "\"0\"")[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2319825", [...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.7.[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2319825",[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2319825&octid=[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/equalizer[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/minimize.[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/play.gif"[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/stop.gif"[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/vol.gif",[...] Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=de", "\"634[...] Deleted : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\Susi\\AppData\\Roaming\\Mozilla\\Fi[...] Deleted : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.7.0.6"); Deleted : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", ""); Deleted : user_pref("CommunityToolbar.ToolbarsList", "CT2319825"); Deleted : user_pref("CommunityToolbar.ToolbarsList2", "CT2319825"); Deleted : user_pref("CommunityToolbar.ToolbarsList4", "CT2319825"); Deleted : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Sun Oct 09 2011 11:34:42 GMT+0200"); Deleted : user_pref("CommunityToolbar.globalUserId", "349e73dd-cd07-4cca-811c-0f373b0f12f0"); Deleted : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true); Deleted : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true); Deleted : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2319825"); Deleted : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Sun Oct 09 2011 11:34:4[...] Deleted : user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440); Deleted : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Sun Oct 09 2011 19:42:05 GMT+020[...] Deleted : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com"); Deleted : user_pref("CommunityToolbar.notifications.locale", "en"); Deleted : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440); Deleted : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Sun Oct 09 2011 11:34:38 GMT+0200"); Deleted : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611"); Deleted : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20); Deleted : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com"); Deleted : user_pref("CommunityToolbar.notifications.showTrayIcon", false); Deleted : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300); Deleted : user_pref("CommunityToolbar.notifications.userId", "227e771c-92d6-461f-b9f9-3a8af01adb1c"); Deleted : user_pref("CommunityToolbar.originalHomepage", "hxxp://www.yahoo.de"); Deleted : user_pref("CommunityToolbar.originalSearchEngine", "Ask.com"); Deleted : user_pref("browser.newtab.url", "hxxp://mystart.incredibar.com/mb165?a=6R8y8EVMiW&loc=FF_NT"); Deleted : user_pref("browser.search.defaultengine", "Ask.com"); Deleted : user_pref("browser.search.defaultthis.engineName", "Winload Customized Web Search"); Deleted : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2319825&Sea[...] Deleted : user_pref("browser.search.order.1", "Ask.com"); Deleted : user_pref("extensions.enabledAddons", "{ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.6,ffxtlbr@incredib[...] Deleted : user_pref("extensions.incredibar.actvtyRptTime", "1341676582686"); Deleted : user_pref("extensions.incredibar.admin", false); Deleted : user_pref("extensions.incredibar.aflt", "orgnl"); Deleted : user_pref("extensions.incredibar.afterInstallRpt", "sent"); Deleted : user_pref("extensions.incredibar.cntry", "DE"); Deleted : user_pref("extensions.incredibar.dfltLng", "EN"); Deleted : user_pref("extensions.incredibar.dfltSrch", false); Deleted : user_pref("extensions.incredibar.dfltlng", "EN"); Deleted : user_pref("extensions.incredibar.dfltsrch", "false"); Deleted : user_pref("extensions.incredibar.did", "10665"); Deleted : user_pref("extensions.incredibar.envrmnt", "production"); Deleted : user_pref("extensions.incredibar.excTlbr", false); Deleted : user_pref("extensions.incredibar.hdrMd5", "DE023FC252A771F2B7841C10B7F802CA"); Deleted : user_pref("extensions.incredibar.hmpg", false); Deleted : user_pref("extensions.incredibar.hrdid", "0"); Deleted : user_pref("extensions.incredibar.id", "ce8aa8950000000000000026f2ed6140"); Deleted : user_pref("extensions.incredibar.installerproductid", "26"); Deleted : user_pref("extensions.incredibar.instlDay", "15527"); Deleted : user_pref("extensions.incredibar.instlRef", ""); Deleted : user_pref("extensions.incredibar.instlday", "15527"); Deleted : user_pref("extensions.incredibar.instlref", ""); Deleted : user_pref("extensions.incredibar.isDcmntCmplt", false); Deleted : user_pref("extensions.incredibar.isdcmntcmplt", true); Deleted : user_pref("extensions.incredibar.keywordurl", ""); Deleted : user_pref("extensions.incredibar.lastVrsnTs", "1.5.11.147:55:15"); Deleted : user_pref("extensions.incredibar.mntrvrsn", "1.2.0"); Deleted : user_pref("extensions.incredibar.newTab", false); Deleted : user_pref("extensions.incredibar.newtab", "false"); Deleted : user_pref("extensions.incredibar.newtaburl", ""); Deleted : user_pref("extensions.incredibar.noFFXTlbr", false); Deleted : user_pref("extensions.incredibar.ppd", ""); Deleted : user_pref("extensions.incredibar.prdct", "incredibar"); Deleted : user_pref("extensions.incredibar.productid", "26"); Deleted : user_pref("extensions.incredibar.prtnrId", "Incredibar"); Deleted : user_pref("extensions.incredibar.prtnrid", "Incredibar"); Deleted : user_pref("extensions.incredibar.sg", "none"); Deleted : user_pref("extensions.incredibar.smplGrp", "none"); Deleted : user_pref("extensions.incredibar.smplgrp", "none"); Deleted : user_pref("extensions.incredibar.srch", ""); Deleted : user_pref("extensions.incredibar.srchprvdr", ""); Deleted : user_pref("extensions.incredibar.tlbrId", "base"); Deleted : user_pref("extensions.incredibar.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6R8y8EVMiW&loc=IB_T[...] Deleted : user_pref("extensions.incredibar.tlbrid", "base"); Deleted : user_pref("extensions.incredibar.tlbrsrchurl", "hxxp://mystart.Incredibar.com/?a=6R8y8EVMiW&loc=IB_T[...] Deleted : user_pref("extensions.incredibar.upn2", "6R8y8EVMiW"); Deleted : user_pref("extensions.incredibar.upn2n", "92824656932326798"); Deleted : user_pref("extensions.incredibar.vrsn", "1.5.11.14"); Deleted : user_pref("extensions.incredibar.vrsnTs", "1.5.11.147:55:15"); Deleted : user_pref("extensions.incredibar.vrsni", "1.5.11.14"); Deleted : user_pref("extensions.incredibar.vrsnts", "1.5.11.147:55:15"); Deleted : user_pref("extensions.incredibar_i.aflt", "orgnl"); Deleted : user_pref("extensions.incredibar_i.dfltLng", ""); Deleted : user_pref("extensions.incredibar_i.did", "10665"); Deleted : user_pref("extensions.incredibar_i.excTlbr", false); Deleted : user_pref("extensions.incredibar_i.id", "ce8aa8950000000000000026f2ed6140"); Deleted : user_pref("extensions.incredibar_i.installerproductid", "26"); Deleted : user_pref("extensions.incredibar_i.instlDay", "15527"); Deleted : user_pref("extensions.incredibar_i.instlRef", ""); Deleted : user_pref("extensions.incredibar_i.ms_url_id", ""); Deleted : user_pref("extensions.incredibar_i.newTab", false); Deleted : user_pref("extensions.incredibar_i.ppd", ""); Deleted : user_pref("extensions.incredibar_i.prdct", "incredibar"); Deleted : user_pref("extensions.incredibar_i.productid", "26"); Deleted : user_pref("extensions.incredibar_i.prtnrId", "Incredibar"); Deleted : user_pref("extensions.incredibar_i.smplGrp", "none"); Deleted : user_pref("extensions.incredibar_i.tlbrId", "base"); Deleted : user_pref("extensions.incredibar_i.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6R8y8EVMiW&loc=IB[...] Deleted : user_pref("extensions.incredibar_i.upn2", "6R8y8EVMiW"); Deleted : user_pref("extensions.incredibar_i.upn2n", "92824656932326798"); Deleted : user_pref("extensions.incredibar_i.vrsn", "1.5.11.14"); Deleted : user_pref("extensions.incredibar_i.vrsnTs", "1.5.11.147:55:15"); Deleted : user_pref("extensions.incredibar_i.vrsni", "1.5.11.14"); Deleted : user_pref("keyword.URL", "hxxp://mystart.incredibar.com/mb165/?loc=IB_DS&a=6R8y8EVMiW&&i=26&search="[...] Deleted : user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_WSG_whiteList", "{\"search.babylon.com\[...] Profile name : default File : C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\wblifemk.default\prefs.js [OK] File is clean. -\\ Google Chrome v [Unable to get version] File : C:\Users\Susi\AppData\Local\Google\Chrome\User Data\Default\Preferences [OK] File is clean. ************************* AdwCleaner[R1].txt - [20396 octets] - [13/07/2012 08:32:56] AdwCleaner[R2].txt - [20457 octets] - [13/07/2012 08:33:27] AdwCleaner[S1].txt - [21015 octets] - [13/07/2012 17:54:34] ########## EOF - C:\AdwCleaner[S1].txt - [21144 octets] ########## Mit freundlichen Grüßen Chris |
Themen zu mystart.incredibar.com entfernen |
administrator, anleitung, anti-malware, appdata, autostart, browser, clean, code, dateien, entfernen, eset, explorer, free, gelöscht, heuristiks/extra, heuristiks/shuriken, hotspot, hotspot shield, malwarebytes, online, quarantäne, scan, speicher, temp, test, this, variant, vista, win32/hotspotshield, win32/installcore.a, öffnen |