Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
GVU-Trojaner mit Webcam - Bitte um Unterstützung

GVU-Trojaner mit Webcam - Bitte um Unterstützung


Plagegeister aller Art und deren Bekämpfung: GVU-Trojaner mit Webcam - Bitte um Unterstützung

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 30.07.2012, 09:23   #1
t'john
/// Helfer-Team
 
GVU-Trojaner mit Webcam - Bitte um Unterstützung - Standard

GVU-Trojaner mit Webcam - Bitte um Unterstützung




Fixen mit OTL

Lade (falls noch nicht vorhanden) OTL von Oldtimer herunter und speichere es auf Deinem Desktop (nicht woanders hin).

  • Deaktiviere etwaige Virenscanner wie Avira, Kaspersky etc.
  • Starte die OTL.exe.
    Vista- und Windows 7-User starten mit Rechtsklick auf das Programm-Icon und wählen "Als Administrator ausführen".
  • Kopiere folgendes Skript in das Textfeld unterhalb von Benuterdefinierte Scans/Fixes:


Code:
ATTFilter
:OTL
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd) 
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt) 
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp) 
DRV - File not found [Kernel | Auto | Stopped] -- C:\Windows\system32\Drivers\DgiVecp.sys -- (DgiVecp) 
IE - HKLM\..\URLSearchHook: - No CLSID value found 
IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - No CLSID value found 
IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990} 
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 
IE - HKLM\..\SearchScopes\{D9A80BB3-B0E4-4B4D-93DF-67B60F57DAC5}: "URL" = http://de.kelkoopartners.net/ctl/do/search?siteSearchQuery={searchTerms}&fromform=true&x=true&y=true&partner=hp&partnerId=96913933 
IE - HKLM\..\SearchScopes\{DE9FEAA3-5CD2-4DC3-A08D-D2562FDD252F}: "URL" = http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1145&query={searchTerms}&invocationType=tb50hpcnnbie7-de-de 
IE - HKCU\..\URLSearchHook: - No CLSID value found 
IE - HKCU\..\URLSearchHook: {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - No CLSID value found 
IE - HKCU\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll (SweetIM Technologies Ltd.) 
IE - HKCU\..\SearchScopes,DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} 
IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&AF=109958&tt=290312_bexdll&babsrc=SP_ss&mntrId=07773c98000000000000001e101fabdd 
IE - HKCU\..\SearchScopes\{31CF9EBE-5755-4a1d-AC25-2834D952D9B4}: "URL" = http://search.pdfcreator-toolbar.org/search?p=Q&ts=ne&w={searchTerms}&csrc=search-field 
IE - HKCU\..\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}: "URL" = http://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd 
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7GZEZ_de 
IE - HKCU\..\SearchScopes\{D9A80BB3-B0E4-4B4D-93DF-67B60F57DAC5}: "URL" = http://de.kelkoopartners.net/ctl/do/search?siteSearchQuery={searchTerms}&fromform=true&x=true&y=true&partner=hp&partnerId=96913933 
IE - HKCU\..\SearchScopes\{DE9FEAA3-5CD2-4DC3-A08D-D2562FDD252F}: "URL" = http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1145&query={searchTerms}&invocationType=tb50hpcnnbie7-de-de 
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local 
FF - prefs.js..browser.search.defaultenginename: "ICQ Search" 
FF - prefs.js..browser.search.defaultthis.engineName: "softonic-de3 Customized Web Search" 
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2431245&SearchSource=3&q={searchTerms}" 
FF - prefs.js..browser.search.order.1: "Search the web (Babylon)" 
FF - prefs.js..browser.search.selectedEngine: "ICQ Search" 
FF - prefs.js..browser.search.useDBForOrder: true 
FF - prefs.js..browser.startup.homepage: "www.facebook.de" 
FF - prefs.js..extension.gacela.network.proxy.autoconfig_url: "" 
FF - prefs.js..extension.gacela.network.proxy.type: 5 
FF - prefs.js..extensions.enabledItems: {EEE6C361-6118-11DC-9C72-001320C79847}:1.0.0.10 
FF - prefs.js..extensions.enabledItems: {800b5000-a755-47e1-992b-48a1c1357f07}:2.0.0.8 
FF - prefs.js..extensions.enabledItems: {ABDE892B-13A8-4d1b-88E6-365A6E755758}:1.1.3 
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20 
FF - prefs.js..extensions.enabledItems: {7b13ec3e-999a-4b70-b9cb-2617b8323822}:3.3.3.2 
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21 
FF - prefs.js..extensions.enabledItems: {afe43e80-0abc-4df2-81a0-3fe44b74abe8}:1.300.367 
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22 
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23 
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24 
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.2.5.2 
FF - prefs.js..extensions.enabledItems: {cc05a3e3-64c3-4af2-bfc1-af0d66b69065}:3.2.5.2 
FF - prefs.js..keyword.URL: "http://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.5.3&q=" 
FF - prefs.js..sweetim.toolbar.previous.keyword.URL: "chrome://browser-region/locale/region.properties" 
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found 
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) 
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012.07.25 21:25:46 | 000,000,000 | ---D | M] 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012.07.25 21:25:46 | 000,000,000 | ---D | M] 
[2012.07.15 21:54:43 | 000,000,000 | ---D | M] (Zynga Community Toolbar) -- C:\Users\Manu\AppData\Roaming\mozilla\Firefox\Profiles\rqculffx.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822} 
[2012.07.28 09:38:49 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Users\Manu\AppData\Roaming\mozilla\Firefox\Profiles\rqculffx.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07} 
[2CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.69\npGoogleUpdate3.dll 
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - No CLSID value found. 
O2 - BHO: (SweetIM Toolbar Helper) - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) 
O3 - HKLM\..\Toolbar: (no name) - - No CLSID value found. 
O3 - HKLM\..\Toolbar: (SweetIM Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) 
O3 - HKCU\..\Toolbar\WebBrowser: (SweetIM Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) 
O4 - HKLM..\Run: [NeroCheck] C:\Windows\System32\NeroCheck.exe (Ahead Software Gmbh) 
O4 - HKLM..\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe (SweetIM Technologies Ltd.) 
O4 - HKCU..\Run: [Power2GoExpress] NA File not found 
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html File not found 
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) 
O32 - HKLM CDRom: AutoRun - 1 
O32 - AutoRun File - [2006.09.18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] 
O32 - AutoRun File - [2009.09.11 20:53:06 | 000,000,119 | R--- | M] () - F:\autorun.inf -- [ CDFS ] 
O33 - MountPoints2\{067da89a-d3ab-11de-bd29-001e68e03a60}\Shell - "" = AutoRun 
O33 - MountPoints2\{067da89a-d3ab-11de-bd29-001e68e03a60}\Shell\AutoRun\command - "" = F:\setup_vmc_lite.exe -- [2009.07.23 16:55:39 | 000,266,240 | R--- | M] (Vodafone) 
O33 - MountPoints2\{43899bbc-3a11-11e1-8fc8-001e68e03a60}\Shell - "" = AutoRun 
O33 - MountPoints2\{43899bbc-3a11-11e1-8fc8-001e68e03a60}\Shell\AutoRun\command - "" = F:\setup_vmc_lite.exe -- [2009.07.23 16:55:39 | 000,266,240 | R--- | M] (Vodafone) 
O33 - MountPoints2\{49633f3c-02cf-11e1-b173-001e68e03a60}\Shell - "" = AutoRun 
O33 - MountPoints2\{49633f3c-02cf-11e1-b173-001e68e03a60}\Shell\AutoRun\command - "" = F:\setup_vmc_lite.exe -- [2009.07.23 16:55:39 | 000,266,240 | R--- | M] (Vodafone) 
O33 - MountPoints2\{52582322-e77b-11e0-856b-001e101f1ed9}\Shell - "" = AutoRun 
O33 - MountPoints2\{52582322-e77b-11e0-856b-001e101f1ed9}\Shell\AutoRun\command - "" = F:\setup_vmc_lite.exe -- [2009.07.23 16:55:39 | 000,266,240 | R--- | M] (Vodafone) 
O33 - MountPoints2\{f5d55636-062c-11e1-9f0d-001e101fe70e}\Shell - "" = AutoRun 
O33 - MountPoints2\{f5d55636-062c-11e1-9f0d-001e101fe70e}\Shell\AutoRun\command - "" = F:\setup_vmc_lite.exe -- [2009.07.23 16:55:39 | 000,266,240 | R--- | M] (Vodafone) 
O33 - MountPoints2\F\Shell - "" = AutoRun 
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\setup_vmc_lite.exe -- [2009.07.23 16:55:39 | 000,266,240 | R--- | M] (Vodafone) 
 
[2012.07.25 18:59:04 | 004,503,728 | ---- | M] () -- C:\ProgramData\z7_0ytr.pad 

[2010.12.08 15:47:52 | 000,000,927 | ---- | M] () -- C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\conduit.xml 
[2012.07.24 20:06:38 | 000,000,950 | ---- | M] () -- C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-1.xml 
[2011.03.02 21:31:10 | 000,000,950 | ---- | M] () -- C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-10.xml 
[2011.03.04 23:14:00 | 000,000,950 | ---- | M] () -- C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-11.xml 
[2011.03.26 10:13:36 | 000,000,950 | ---- | M] () -- C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-12.xml 
[2011.04.07 19:10:21 | 000,000,950 | ---- | M] () -- C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-13.xml 
[2011.04.29 22:25:33 | 000,000,950 | ---- | M] () -- C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-14.xml 
[2011.06.21 20:59:15 | 000,000,950 | ---- | M] () -- C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-15.xml 
[2011.07.02 15:52:06 | 000,000,950 | ---- | M] () -- C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-16.xml 
[2011.09.30 16:59:53 | 000,000,950 | ---- | M] () -- C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-17.xml 
[2011.11.08 18:22:41 | 000,000,950 | ---- | M] () -- C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-18.xml 
[2011.11.29 20:16:57 | 000,000,950 | ---- | M] () -- C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-19.xml 
[2010.06.27 11:51:38 | 000,000,950 | ---- | M] () -- C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-2.xml 
[2011.12.23 10:21:33 | 000,000,950 | ---- | M] () -- C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-20.xml 
[2012.01.07 00:53:02 | 000,000,950 | ---- | M] () -- C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-21.xml 
[2012.02.26 21:30:03 | 000,000,950 | ---- | M] () -- C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-22.xml 
[2012.03.29 21:32:03 | 000,000,950 | ---- | M] () -- C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-23.xml 
[2012.05.13 21:39:30 | 000,000,950 | ---- | M] () -- C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-24.xml 
[2012.07.01 20:20:07 | 000,000,950 | ---- | M] () -- C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-25.xml 
[2010.07.24 10:42:00 | 000,000,950 | ---- | M] () -- C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-3.xml 
[2010.07.25 14:04:24 | 000,000,950 | ---- | M] () -- C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-4.xml 
[2010.09.11 16:34:33 | 000,000,950 | ---- | M] () -- C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-5.xml 
[2010.09.17 20:13:09 | 000,000,950 | ---- | M] () -- C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-6.xml 
[2010.10.20 21:48:38 | 000,000,950 | ---- | M] () -- C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-7.xml 
[2010.10.29 18:18:21 | 000,000,950 | ---- | M] () -- C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-8.xml 
[2010.12.10 22:36:29 | 000,000,950 | ---- | M] () -- C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-9.xml 
[2012.07.24 14:48:30 | 000,000,168 | ---- | M] () -- C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin.gif 
[2012.07.24 14:48:30 | 000,000,618 | ---- | M] () -- C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin.src 
[2011.03.30 16:14:34 | 000,001,042 | ---- | M] () -- C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin.xml 
[2012.03.08 19:20:07 | 000,001,734 | ---- | M] () -- C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\search-the-web.xml 
[2009.11.25 22:07:27 | 000,003,915 | ---- | M] () -- C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\sweetim.xml 
 
[2012.07.28 09:36:06 | 000,001,098 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job 
[2012.07.28 09:32:43 | 000,001,094 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job 

[2012.07.22 08:59:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job 
:Files

ipconfig /flushdns /c
:Commands
[purity]
[emptytemp]
[emptyflash]
  • Schließe alle Programme.
  • Klicke auf den Fix Button.
  • Wenn OTL einen Neustart verlangt, bitte zulassen.
  • Kopiere den Inhalt des Logfiles hier in Code-Tags in Deinen Thread.
    Nachträglich kannst Du das Logfile hier einsehen => C:\_OTL\MovedFiles\

Hinweis für Mitleser: Obiges OTL-Script ist ausschließlich für diesen User in dieser Situtation erstellt worden.
Auf keinen Fall auf anderen Rechnern anwenden, das kann andere Systeme nachhaltig schädigen!
__________________
Mfg, t'john
Das TB unterstützen

Alt 30.07.2012, 16:35   #2
manu_84
 
GVU-Trojaner mit Webcam - Bitte um Unterstützung - Standard

GVU-Trojaner mit Webcam - Bitte um Unterstützung


Hallo t'john,

Danke für deine Hilfe!!! hier das Ergebnis:


Code:
ATTFilter
All processes killed
========== OTL ==========
Error: No service named NwlnkFwd was found to stop!
Service\Driver key NwlnkFwd not found.
File system32\DRIVERS\nwlnkfwd.sys not found.
Error: No service named NwlnkFlt was found to stop!
Service\Driver key NwlnkFlt not found.
File system32\DRIVERS\nwlnkflt.sys not found.
Error: No service named IpInIp was found to stop!
Service\Driver key IpInIp not found.
File system32\DRIVERS\ipinip.sys not found.
Error: No service named DgiVecp was found to stop!
Service\Driver key DgiVecp not found.
File C:\Windows\system32\Drivers\DgiVecp.sys not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D9A80BB3-B0E4-4B4D-93DF-67B60F57DAC5}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D9A80BB3-B0E4-4B4D-93DF-67B60F57DAC5}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{DE9FEAA3-5CD2-4DC3-A08D-D2562FDD252F}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DE9FEAA3-5CD2-4DC3-A08D-D2562FDD252F}\ not found.
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\ not found.
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{cc05a3e3-64c3-4af2-bfc1-af0d66b69065} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{cc05a3e3-64c3-4af2-bfc1-af0d66b69065}\ not found.
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{EEE6C35D-6118-11DC-9C72-001320C79847} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}\ not found.
File C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll not found.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{31CF9EBE-5755-4a1d-AC25-2834D952D9B4}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{31CF9EBE-5755-4a1d-AC25-2834D952D9B4}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6552C7DD-90A4-4387-B795-F8F96747DE19}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D9A80BB3-B0E4-4B4D-93DF-67B60F57DAC5}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D9A80BB3-B0E4-4B4D-93DF-67B60F57DAC5}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{DE9FEAA3-5CD2-4DC3-A08D-D2562FDD252F}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DE9FEAA3-5CD2-4DC3-A08D-D2562FDD252F}\ not found.
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyOverride| /E : value set successfully!
Prefs.js: "ICQ Search" removed from browser.search.defaultenginename
Prefs.js: "softonic-de3 Customized Web Search" removed from browser.search.defaultthis.engineName
Prefs.js: "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2431245&SearchSource=3&q={searchTerms}" removed from browser.search.defaulturl
Prefs.js: "Search the web (Babylon)" removed from browser.search.order.1
Prefs.js: "ICQ Search" removed from browser.search.selectedEngine
Prefs.js: true removed from browser.search.useDBForOrder
Prefs.js: "www.facebook.de" removed from browser.startup.homepage
Prefs.js: "" removed from extension.gacela.network.proxy.autoconfig_url
Prefs.js: 5 removed from extension.gacela.network.proxy.type
Prefs.js: {EEE6C361-6118-11DC-9C72-001320C79847}:1.0.0.10 removed from extensions.enabledItems
Prefs.js: {800b5000-a755-47e1-992b-48a1c1357f07}:2.0.0.8 removed from extensions.enabledItems
Prefs.js: {ABDE892B-13A8-4d1b-88E6-365A6E755758}:1.1.3 removed from extensions.enabledItems
Prefs.js: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20 removed from extensions.enabledItems
Prefs.js: {7b13ec3e-999a-4b70-b9cb-2617b8323822}:3.3.3.2 removed from extensions.enabledItems
Prefs.js: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21 removed from extensions.enabledItems
Prefs.js: {afe43e80-0abc-4df2-81a0-3fe44b74abe8}:1.300.367 removed from extensions.enabledItems
Prefs.js: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22 removed from extensions.enabledItems
Prefs.js: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23 removed from extensions.enabledItems
Prefs.js: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24 removed from extensions.enabledItems
Prefs.js: engine@conduit.com:3.2.5.2 removed from extensions.enabledItems
Prefs.js: {cc05a3e3-64c3-4af2-bfc1-af0d66b69065}:3.2.5.2 removed from extensions.enabledItems
Prefs.js: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.5.3&q=" removed from keyword.URL
Prefs.js: "chrome://browser-region/locale/region.properties" removed from sweetim.toolbar.previous.keyword.URL
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@Apple.com/iTunes,version=\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@tools.google.com/Google Update;version=3\ not found.
File C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll not found.
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@tools.google.com/Google Update;version=9\ not found.
File C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll not found.
File HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext not found.
File HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext not found.
Folder C:\Users\Manu\AppData\Roaming\mozilla\Firefox\Profiles\rqculffx.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}\ not found.
Folder C:\Users\Manu\AppData\Roaming\mozilla\Firefox\Profiles\rqculffx.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\ not found.
File HR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.69\npGoogleUpdate3.dll not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7E853D72-626A-48EC-A868-BA8D5E23E045}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847}\ not found.
File C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{EEE6C35B-6118-11DC-9C72-001320C79847} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}\ not found.
File C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EEE6C35B-6118-11DC-9C72-001320C79847} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}\ not found.
File C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\NeroCheck not found.
File C:\Windows\System32\NeroCheck.exe not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\SweetIM not found.
File C:\Program Files\SweetIM\Messenger\SweetIM.exe not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Power2GoExpress not found.
Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\Google Sidewiki...\ not found.
Starting removal of ActiveX control {E2883E8F-472F-4FB0-9522-AC9BF37916A7}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\AutoRun|DWORD:1 /E : value set successfully!
File C:\autoexec.bat not found.
File move failed. F:\autorun.inf scheduled to be moved on reboot.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{067da89a-d3ab-11de-bd29-001e68e03a60}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{067da89a-d3ab-11de-bd29-001e68e03a60}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{067da89a-d3ab-11de-bd29-001e68e03a60}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{067da89a-d3ab-11de-bd29-001e68e03a60}\ not found.
File move failed. F:\setup_vmc_lite.exe scheduled to be moved on reboot.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{43899bbc-3a11-11e1-8fc8-001e68e03a60}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{43899bbc-3a11-11e1-8fc8-001e68e03a60}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{43899bbc-3a11-11e1-8fc8-001e68e03a60}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{43899bbc-3a11-11e1-8fc8-001e68e03a60}\ not found.
File move failed. F:\setup_vmc_lite.exe scheduled to be moved on reboot.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{49633f3c-02cf-11e1-b173-001e68e03a60}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{49633f3c-02cf-11e1-b173-001e68e03a60}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{49633f3c-02cf-11e1-b173-001e68e03a60}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{49633f3c-02cf-11e1-b173-001e68e03a60}\ not found.
File move failed. F:\setup_vmc_lite.exe scheduled to be moved on reboot.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{52582322-e77b-11e0-856b-001e101f1ed9}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{52582322-e77b-11e0-856b-001e101f1ed9}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{52582322-e77b-11e0-856b-001e101f1ed9}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{52582322-e77b-11e0-856b-001e101f1ed9}\ not found.
File move failed. F:\setup_vmc_lite.exe scheduled to be moved on reboot.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{f5d55636-062c-11e1-9f0d-001e101fe70e}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f5d55636-062c-11e1-9f0d-001e101fe70e}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{f5d55636-062c-11e1-9f0d-001e101fe70e}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f5d55636-062c-11e1-9f0d-001e101fe70e}\ not found.
File move failed. F:\setup_vmc_lite.exe scheduled to be moved on reboot.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\F\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\F\ not found.
File move failed. F:\setup_vmc_lite.exe scheduled to be moved on reboot.
File C:\ProgramData\z7_0ytr.pad not found.
File C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\conduit.xml not found.
File C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-1.xml not found.
File C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-10.xml not found.
File C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-11.xml not found.
File C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-12.xml not found.
File C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-13.xml not found.
File C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-14.xml not found.
File C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-15.xml not found.
File C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-16.xml not found.
File C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-17.xml not found.
File C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-18.xml not found.
File C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-19.xml not found.
File C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-2.xml not found.
File C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-20.xml not found.
File C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-21.xml not found.
File C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-22.xml not found.
File C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-23.xml not found.
File C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-24.xml not found.
File C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-25.xml not found.
File C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-3.xml not found.
File C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-4.xml not found.
File C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-5.xml not found.
File C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-6.xml not found.
File C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-7.xml not found.
File C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-8.xml not found.
File C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin-9.xml not found.
File C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin.gif not found.
File C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin.src not found.
File C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\icqplugin.xml not found.
File C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\search-the-web.xml not found.
File C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\rqculffx.default\searchplugins\sweetim.xml not found.
File C:\Windows\tasks\GoogleUpdateTaskMachineUA.job not found.
File C:\Windows\tasks\GoogleUpdateTaskMachineCore.job not found.
File C:\Windows\tasks\Adobe Flash Player Updater.job not found.
========== FILES ==========
< ipconfig /flushdns /c >
Windows-IP-Konfiguration
Der DNS-Aufl”sungscache wurde geleert.
C:\Users\Manu\Desktop\cmd.bat deleted successfully.
C:\Users\Manu\Desktop\cmd.txt deleted successfully.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: All Users
 
User: Default
->Temp folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
 
User: Manu
->Temp folder emptied: 2150326614 bytes
->Java cache emptied: 6785756 bytes
->FireFox cache emptied: 386984055 bytes
->Google Chrome cache emptied: 42165760 bytes
->Apple Safari cache emptied: 6930432 bytes
->Flash cache emptied: 57255 bytes
 
User: Public
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 75551318 bytes
RecycleBin emptied: 145172046 bytes
 
Total Files Cleaned = 2.684,00 mb
 
 
[EMPTYFLASH]
 
User: All Users
 
User: Default
->Flash cache emptied: 0 bytes
 
User: Default User
->Flash cache emptied: 0 bytes
 
User: Manu
->Flash cache emptied: 0 bytes
 
User: Public
 
Total Flash Files Cleaned = 0,00 mb
 
 
OTL by OldTimer - Version 3.2.54.1 log created on 07302012_171414

Files\Folders moved on Reboot...
File move failed. F:\autorun.inf scheduled to be moved on reboot.
File move failed. F:\setup_vmc_lite.exe scheduled to be moved on reboot.
C:\Users\Manu\AppData\Local\Temp\ehmsas.txt moved successfully.

PendingFileRenameOperations files...
[2009.09.11 20:53:06 | 000,000,119 | R--- | M] () F:\autorun.inf : MD5=809488AD947EB6B9699FEB6CC04AFAD5
[2009.07.23 16:55:39 | 000,266,240 | R--- | M] (Vodafone) F:\setup_vmc_lite.exe : MD5=D95DCDD55595C3B316B02D1835D9FC25
File C:\Users\Manu\AppData\Local\Temp\ehmsas.txt not found!

Registry entries deleted on Reboot...
__________________
Antwort

Themen zu GVU-Trojaner mit Webcam - Bitte um Unterstützung
anleitung, cftmon.lnk, eingefangen, fehlermeldung, gefangen, gmer, go_0molg.pad, gvu trojaner, gvu trojaner 2.07, gvu trojaner entfernen, gvu trojaner mit webcam, gvu-trojaner mit webcam, hallo zusammen, jpg, panik, reveton.c, systemwiederherstellung, unterstützung, webcam, webcam gvu trojaner, webcamfenster, woche, zusammen


« UKASH - Word Dateien mit keinem Programm zu entschlüsseln | gvu trojaner win7 »


Ähnliche Themen: GVU-Trojaner mit Webcam - Bitte um Unterstützung


  1. BKA Trojaner auf Win 7 64bit - bitte um Unterstützung
    Plagegeister aller Art und deren Bekämpfung - 20.04.2014 (5)
  2. Weißer Bildschirm, bitte um Profi Unterstützung.
    Log-Analyse und Auswertung - 13.05.2013 (11)
  3. Trojaner-Schnäppchen mit Windows-8-Unterstützung
    Nachrichten - 31.10.2012 (0)
  4. GVU-Trojaner mit Webcam: Bitte um Hilfe!
    Plagegeister aller Art und deren Bekämpfung - 13.08.2012 (13)
  5. GVU Trojaner mit Webcam bitte um Hilfe
    Log-Analyse und Auswertung - 02.08.2012 (2)
  6. SMART HDD Trojaner .... benötige Unterstützung ...
    Plagegeister aller Art und deren Bekämpfung - 16.06.2012 (33)
  7. verdacht auf virenbefall bitte um unterstützung
    Log-Analyse und Auswertung - 06.06.2012 (5)
  8. Bitte um ein wenig Unterstützung!Danke im Vorraus.
    Mülltonne - 15.02.2008 (1)
  9. BAT/Fake.Privdanger Bitte um eure Unterstützung
    Plagegeister aller Art und deren Bekämpfung - 14.01.2008 (11)
  10. Bitte um Unterstützung / CoolWWWSearch
    Log-Analyse und Auswertung - 13.01.2008 (55)
  11. Bitte um Auswertung und Unterstützung
    Log-Analyse und Auswertung - 01.02.2007 (7)
  12. Bitte um Unterstützung -
    Log-Analyse und Auswertung - 03.01.2006 (3)
  13. Bitte um Unterstützung bei Systemreinigung
    Log-Analyse und Auswertung - 30.09.2005 (3)
  14. bitte um unterstützung - auswertung
    Log-Analyse und Auswertung - 08.08.2005 (7)
  15. bitte um unterstützung TR/Dldr.small.alr.1
    Log-Analyse und Auswertung - 02.08.2005 (2)
  16. Bitte um Unterstützung !!!
    Log-Analyse und Auswertung - 22.04.2005 (6)
  17. Bitte um Unterstützung
    Log-Analyse und Auswertung - 22.04.2005 (1)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema GVU-Trojaner mit Webcam - Bitte um Unterstützung - Fixen mit OTL Lade (falls noch nicht vorhanden) OTL von Oldtimer herunter und speichere es auf Deinem Desktop ( nicht woanders hin ). Deaktiviere etwaige Virenscanner wie Avira, Kaspersky etc. - GVU-Trojaner mit Webcam - Bitte um Unterstützung...
Archiv
Du betrachtest: GVU-Trojaner mit Webcam - Bitte um Unterstützung auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27