|
Plagegeister aller Art und deren Bekämpfung: ebenfalls Bundespolizei Trojaner :(Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
09.09.2012, 20:29 | #1 |
| ebenfalls Bundespolizei Trojaner :( Dieser Bundespolizei-Trojaner scheint ja ziemlich verbreitet zu sein, wenn ich mir hier so die Themen durchsehe....meine Freundin hat es jetzt auch erwischt :/ Habe im abgesicherten Modus einen OTL-Scan durchgeführt. Wenn Ihr mir helfen könntet, wäre ich sehr Dankbar! Habe mit Malwarebytes auch schonmal einen Quick-Scan gemacht: Malwarebytes Anti-Malware (Test) 1.62.0.1300 www.malwarebytes.org Datenbank Version: v2012.09.09.06 Windows 7 Service Pack 1 x86 NTFS (Abgesichertenmodus/Netzwerkfähig) Internet Explorer 9.0.8112.16421 Nicole :: NICOLE-PC [Administrator] Schutz: Deaktiviert 09.09.2012 21:48:41 mbam-log-2012-09-09 (21-48-41).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 193334 Laufzeit: 5 Minute(n), 2 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 1 HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|eulboivzmqkffpy (Trojan.Winlock) -> Daten: C:\ProgramData\eulboivz.exe -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 3 C:\ProgramData\eulboivz.exe (Trojan.Winlock) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Nicole\0.6572308646981411.exe (Trojan.Winlock) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Nicole\0.5940938321626973.exe (Exploit.Drop.UR.2) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) Der normale Modus startet jetzt auch wieder, allerdings läuft alles sehr langsam. Geändert von Bizzy-T (09.09.2012 um 21:06 Uhr) |
09.09.2012, 21:36 | #2 |
/// Helfer-Team | ebenfalls Bundespolizei Trojaner :(Die Bereinigung besteht aus mehreren Schritten, die ausgefuehrt werden muessen. Diese Nacheinander abarbeiten und die 4 Logs, die dabei erstellt werden bitte in deine naechste Antwort einfuegen. Sollte der OTL-FIX nicht richig durchgelaufen sein. Fahre nicht fort, sondern mede dies bitte. 1. Schritt Fixen mit OTL Lade (falls noch nicht vorhanden) OTL von Oldtimer herunter und speichere es auf Deinem Desktop (nicht woanders hin).
Code:
ATTFilter :OTL IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1621535031-3829055946-2502955568-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://isearch.avg.com/?cid={938CCE0F-2FD9-4394-9495-DCA08A301655}&mid=ca2e63cfc70747d0baf5d16f1847421f-471287a5ceadd132c7cb7e383ebdac09ce974d3c&lang=de&ds=tt014&pr=sa&d=2012-07-18 19:21:24&v=12.1.0.20&sap=hp IE - HKU\S-1-5-21-1621535031-3829055946-2502955568-1000\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - HKU\S-1-5-21-1621535031-3829055946-2502955568-1000\..\URLSearchHook: {40c3cc16-7269-4b32-9531-17f2950fb06f} - No CLSID value found IE - HKU\S-1-5-21-1621535031-3829055946-2502955568-1000\..\SearchScopes,DefaultScope = {95B7759C-8C7F-4BF1-B163-73684A933233} IE - HKU\S-1-5-21-1621535031-3829055946-2502955568-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKU\S-1-5-21-1621535031-3829055946-2502955568-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searcerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKU\S-1-5-21-1621535031-3829055946-2502955568-1000\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = https://isearch.avg.com/search?cid={938CCE0F-2FD9-4394-9495-DCA08A301655}&mid=ca2e63cfc70747d0baf5d16f1847421f-471287a5ceadd132c7cb7e383ebdac09ce974d3c&lang=de&ds=tt014&pr=sa&d=2012-07-18 19:21:24&v=12.2.5.32&sap=dsp&q={searchTerms} IE - HKU\S-1-5-21-1621535031-3829055946-2502955568-1000\..\SearchScopes\{C55D89BC-F319-4A68-A63C-04930C265113}: "URL" = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 IE - HKU\S-1-5-21-1621535031-3829055946-2502955568-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1621535031-3829055946-2502955568-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local FF - prefs.js..browser.search.defaultenginename: "AVG Secure Search" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.search.suggest.enabled: false FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://www.google.de/" FF - prefs.js..extensions.enabledAddons: {40c3cc16-7269-4b32-9531-17f2950fb06f}:3.15.1.0 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20 FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:4.2.0.5198 FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.6 FF - prefs.js..keyword.URL: "chrome://browser-region/locale/region.properties" FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\avg@toolbar: C:\ProgramData\AVG Secure Search\12.2.5.32\ [2012.08.30 18:28:39 | 000,000,000 | ---D | M] O2 - BHO: (no name) - {551A852F-39A6-44A7-9C13-AFBEC9185A9D} - No CLSID value found. O3 - HKU\S-1-5-21-1621535031-3829055946-2502955568-1000\..\Toolbar\ShellBrowser: (Dell Symbolleiste) - {09B71986-2AC5-482D-B6CB-42EA34F4F85B} - C:\Programme\Dell Toolbar\toolband.dll () O4 - HKU\S-1-5-21-1621535031-3829055946-2502955568-1000..\Run: [] File not found O4 - HKU\S-1-5-21-1621535031-3829055946-2502955568-1000..\Run: [eulboivzmqkffpy] C:\ProgramData\eulboivz.exe () O4 - HKU\S-1-5-21-1621535031-3829055946-2502955568-1000..\Run: [ISUSPM] C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe (Acresso Corporation) O4 - HKU\S-1-5-21-1621535031-3829055946-2502955568-1000..\Run: [yxbixxdvjhi] C:\ProgramData\mrkyqrii.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O7 - HKU\S-1-5-21-1621535031-3829055946-2502955568-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149 O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O32 - AutoRun File - [2010.12.23 08:40:58 | 000,000,079 | -H-- | M] () - E:\autorun.inf -- [ FAT32 ] O33 - MountPoints2\{b868a37c-bfe7-11df-b10a-00265ea3abec}\Shell - "" = AutoRun O33 - MountPoints2\{b868a37c-bfe7-11df-b10a-00265ea3abec}\Shell\AutoRun\command - "" = F:\AUTORUN.EXE [2012.09.09 15:34:28 | 000,000,000 | ---D | C] -- C:\ProgramData\hjrjwdpfmxdwwxt [2012.09.09 15:34:28 | 000,000,051 | ---- | M] () -- C:\ProgramData\gnvofixqaegdhyb [2012.09.09 15:34:14 | 000,053,760 | ---- | M] () -- C:\ProgramData\eulboivz.exe [2012.09.09 15:34:14 | 000,053,760 | ---- | M] () -- C:\Users\Nicole\0.6572308646981411.exe [2012.09.09 15:34:13 | 000,095,744 | ---- | M] () -- C:\Users\Nicole\AppData\Roaming\mrkyqrii.exe [2012.09.09 15:34:13 | 000,095,744 | ---- | M] () -- C:\Users\Nicole\AppData\Local\mrkyqrii.exe [2012.09.09 15:34:13 | 000,095,744 | ---- | M] () -- C:\ProgramData\mrkyqrii.exe [2012.09.09 15:34:13 | 000,095,744 | ---- | M] () -- C:\Users\Nicole\0.5940938321626973.exe [2012.09.05 22:10:19 | 000,001,012 | ---- | M] () -- C:\Users\Nicole\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2010.04.05 11:16:10 | 000,004,140 | ---- | M] () -- C:\Users\Nicole\AppData\Roaming\mozilla\firefox\profiles\lhexzq3j.default\searchplugins\youtube.xml [2012.09.01 15:02:40 | 000,000,000 | ---D | C] -- C:\Users\Nicole\AppData\Local\{907571F7-B5E9-47F6-8199-D0BFFD59FBE3} [2009.11.22 17:44:35 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat :Files C:\ProgramData\*.exe C:\ProgramData\TEMP C:\Users\Nicole\AppData\Roaming\*.exe C:\Users\Nicole\AppData\Local\{*} C:\Users\Nicole\AppData\Local\Temp\*.exe C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache %APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk ipconfig /flushdns /c :Commands [purity] [emptytemp]
Hinweis für Mitleser: Obiges OTL-Script ist ausschließlich für diesen User in dieser Situtation erstellt worden. Auf keinen Fall auf anderen Rechnern anwenden, das kann andere Systeme nachhaltig schädigen! 2. Schritt Bitte einen Vollscan mit Malwarebytes Anti-Malware machen und Log posten.danach: 3. Schritt Downloade Dir bitte AdwCleaner auf deinen Desktop.
4. Schritt
__________________ |
10.09.2012, 14:03 | #3 |
| ebenfalls Bundespolizei Trojaner :( so, hier schonmal das Log vom OTL-Fix:
__________________Code:
ATTFilter All processes killed ========== OTL ========== HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully! Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully! HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully! HKU\S-1-5-21-1621535031-3829055946-2502955568-1000\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully! HKU\S-1-5-21-1621535031-3829055946-2502955568-1000\SOFTWARE\Microsoft\Internet Explorer\Search\\SearchAssistant| /E : value set successfully! Registry value HKEY_USERS\S-1-5-21-1621535031-3829055946-2502955568-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\\{40c3cc16-7269-4b32-9531-17f2950fb06f} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{40c3cc16-7269-4b32-9531-17f2950fb06f}\ not found. HKEY_USERS\S-1-5-21-1621535031-3829055946-2502955568-1000\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully! Registry key HKEY_USERS\S-1-5-21-1621535031-3829055946-2502955568-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found. Registry key HKEY_USERS\S-1-5-21-1621535031-3829055946-2502955568-1000\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\ not found. Registry key HKEY_USERS\S-1-5-21-1621535031-3829055946-2502955568-1000\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}\ deleted successfully. Registry key HKEY_USERS\S-1-5-21-1621535031-3829055946-2502955568-1000\Software\Microsoft\Internet Explorer\SearchScopes\{C55D89BC-F319-4A68-A63C-04930C265113}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C55D89BC-F319-4A68-A63C-04930C265113}\ not found. HKU\S-1-5-21-1621535031-3829055946-2502955568-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully! HKU\S-1-5-21-1621535031-3829055946-2502955568-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyOverride| /E : value set successfully! Prefs.js: "AVG Secure Search" removed from browser.search.defaultenginename Prefs.js: "Google" removed from browser.search.selectedEngine Prefs.js: false removed from browser.search.suggest.enabled Prefs.js: true removed from browser.search.useDBForOrder Prefs.js: "hxxp://www.google.de/" removed from browser.startup.homepage Prefs.js: {40c3cc16-7269-4b32-9531-17f2950fb06f}:3.15.1.0 removed from extensions.enabledAddons Prefs.js: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20 removed from extensions.enabledItems Prefs.js: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:4.2.0.5198 removed from extensions.enabledItems Prefs.js: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.6 removed from extensions.enabledItems Prefs.js: "chrome://browser-region/locale/region.properties" removed from keyword.URL Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@Apple.com/iTunes,version=\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@microsoft.com/GENUINE\ deleted successfully. Registry value HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\avg@toolbar deleted successfully. C:\ProgramData\AVG Secure Search\12.2.5.32\modules\skin folder moved successfully. C:\ProgramData\AVG Secure Search\12.2.5.32\modules\locale\zh-tw folder moved successfully. C:\ProgramData\AVG Secure Search\12.2.5.32\modules\locale\zh-cn folder moved successfully. C:\ProgramData\AVG Secure Search\12.2.5.32\modules\locale\tr folder moved successfully. C:\ProgramData\AVG Secure Search\12.2.5.32\modules\locale\sr folder moved successfully. C:\ProgramData\AVG Secure Search\12.2.5.32\modules\locale\sk folder moved successfully. C:\ProgramData\AVG Secure Search\12.2.5.32\modules\locale\ru folder moved successfully. C:\ProgramData\AVG Secure Search\12.2.5.32\modules\locale\pt-br folder moved successfully. C:\ProgramData\AVG Secure Search\12.2.5.32\modules\locale\pt folder moved successfully. C:\ProgramData\AVG Secure Search\12.2.5.32\modules\locale\pl folder moved successfully. C:\ProgramData\AVG Secure Search\12.2.5.32\modules\locale\nl folder moved successfully. C:\ProgramData\AVG Secure Search\12.2.5.32\modules\locale\ms folder moved successfully. C:\ProgramData\AVG Secure Search\12.2.5.32\modules\locale\ko folder moved successfully. C:\ProgramData\AVG Secure Search\12.2.5.32\modules\locale\ja folder moved successfully. C:\ProgramData\AVG Secure Search\12.2.5.32\modules\locale\it folder moved successfully. C:\ProgramData\AVG Secure Search\12.2.5.32\modules\locale\id folder moved successfully. C:\ProgramData\AVG Secure Search\12.2.5.32\modules\locale\hu folder moved successfully. C:\ProgramData\AVG Secure Search\12.2.5.32\modules\locale\fr folder moved successfully. C:\ProgramData\AVG Secure Search\12.2.5.32\modules\locale\es-es folder moved successfully. C:\ProgramData\AVG Secure Search\12.2.5.32\modules\locale\es folder moved successfully. C:\ProgramData\AVG Secure Search\12.2.5.32\modules\locale\en folder moved successfully. C:\ProgramData\AVG Secure Search\12.2.5.32\modules\locale\de folder moved successfully. C:\ProgramData\AVG Secure Search\12.2.5.32\modules\locale\da folder moved successfully. C:\ProgramData\AVG Secure Search\12.2.5.32\modules\locale\cs folder moved successfully. C:\ProgramData\AVG Secure Search\12.2.5.32\modules\locale folder moved successfully. C:\ProgramData\AVG Secure Search\12.2.5.32\modules folder moved successfully. C:\ProgramData\AVG Secure Search\12.2.5.32\locale\en-US folder moved successfully. C:\ProgramData\AVG Secure Search\12.2.5.32\locale folder moved successfully. C:\ProgramData\AVG Secure Search\12.2.5.32\components folder moved successfully. C:\ProgramData\AVG Secure Search\12.2.5.32\chrome folder moved successfully. C:\ProgramData\AVG Secure Search\12.2.5.32 folder moved successfully. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{551A852F-39A6-44A7-9C13-AFBEC9185A9D}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{551A852F-39A6-44A7-9C13-AFBEC9185A9D}\ deleted successfully. Registry value HKEY_USERS\S-1-5-21-1621535031-3829055946-2502955568-1000\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser\\{09B71986-2AC5-482D-B6CB-42EA34F4F85B} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{09B71986-2AC5-482D-B6CB-42EA34F4F85B}\ deleted successfully. C:\Programme\Dell Toolbar\toolband.dll moved successfully. Registry value HKEY_USERS\S-1-5-21-1621535031-3829055946-2502955568-1000\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully. Registry value HKEY_USERS\S-1-5-21-1621535031-3829055946-2502955568-1000\Software\Microsoft\Windows\CurrentVersion\Run\\eulboivzmqkffpy not found. File C:\ProgramData\eulboivz.exe not found. Registry value HKEY_USERS\S-1-5-21-1621535031-3829055946-2502955568-1000\Software\Microsoft\Windows\CurrentVersion\Run\\ISUSPM deleted successfully. C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe moved successfully. Registry value HKEY_USERS\S-1-5-21-1621535031-3829055946-2502955568-1000\Software\Microsoft\Windows\CurrentVersion\Run\\yxbixxdvjhi deleted successfully. C:\ProgramData\mrkyqrii.exe moved successfully. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\ConsentPromptBehaviorAdmin deleted successfully. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\ConsentPromptBehaviorUser deleted successfully. Registry value HKEY_USERS\S-1-5-21-1621535031-3829055946-2502955568-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun deleted successfully. Starting removal of ActiveX control {8AD9C840-044E-11D1-B3E9-00805F499D93} Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully. Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found. Starting removal of ActiveX control {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}\ deleted successfully. Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}\ not found. Starting removal of ActiveX control {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\AutoRun|DWORD:1 /E : value set successfully! C:\autoexec.bat moved successfully. E:\autorun.inf moved successfully. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b868a37c-bfe7-11df-b10a-00265ea3abec}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b868a37c-bfe7-11df-b10a-00265ea3abec}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b868a37c-bfe7-11df-b10a-00265ea3abec}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b868a37c-bfe7-11df-b10a-00265ea3abec}\ not found. File F:\AUTORUN.EXE not found. C:\ProgramData\hjrjwdpfmxdwwxt folder moved successfully. C:\ProgramData\gnvofixqaegdhyb moved successfully. File C:\ProgramData\eulboivz.exe not found. File C:\Users\Nicole\0.6572308646981411.exe not found. C:\Users\Nicole\AppData\Roaming\mrkyqrii.exe moved successfully. C:\Users\Nicole\AppData\Local\mrkyqrii.exe moved successfully. File C:\ProgramData\mrkyqrii.exe not found. File C:\Users\Nicole\0.5940938321626973.exe not found. C:\Users\Nicole\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk moved successfully. C:\Users\Nicole\AppData\Roaming\mozilla\firefox\profiles\lhexzq3j.default\searchplugins\youtube.xml moved successfully. C:\Users\Nicole\AppData\Local\{907571F7-B5E9-47F6-8199-D0BFFD59FBE3} folder moved successfully. C:\ProgramData\ezsidmv.dat moved successfully. ========== FILES ========== File\Folder C:\ProgramData\*.exe not found. File\Folder C:\ProgramData\TEMP not found. File\Folder C:\Users\Nicole\AppData\Roaming\*.exe not found. C:\Users\Nicole\AppData\Local\{00407849-DD5C-4C86-897C-3303CAEFFAA3} folder moved successfully. C:\Users\Nicole\AppData\Local\{005AB211-1E0B-4364-AB77-958F0160EC9C} folder moved successfully. C:\Users\Nicole\AppData\Local\{00A04829-15AA-4401-A46F-4F05A1CF1DA1} folder moved successfully. C:\Users\Nicole\AppData\Local\{00C2CA2D-BDF9-486D-8648-2514975615ED} folder moved successfully. C:\Users\Nicole\AppData\Local\{00E00E49-24DB-4080-8206-116F5E613139} folder moved successfully. C:\Users\Nicole\AppData\Local\{01502F91-73ED-42A6-B76F-B21BC0820E30} folder moved successfully. C:\Users\Nicole\AppData\Local\{01A0298C-95D1-42EE-8549-5C0D6311F071} folder moved successfully. C:\Users\Nicole\AppData\Local\{01DD4C0E-DDF6-4C51-8C0D-B279FCB70C9B} folder moved successfully. C:\Users\Nicole\AppData\Local\{040D29D2-D9AB-4147-ABF2-57C5DD36FE4C} folder moved successfully. C:\Users\Nicole\AppData\Local\{050532F3-C650-4BA2-8833-32A0ACF5D973} folder moved successfully. C:\Users\Nicole\AppData\Local\{05D3EF0B-1028-456D-B920-E8F145D910C1} folder moved successfully. C:\Users\Nicole\AppData\Local\{06ACD471-9DB4-46BB-BEF6-EE9C8136563D} folder moved successfully. C:\Users\Nicole\AppData\Local\{06DD7FC6-A56E-431D-8C61-F2185F203AE0} folder moved successfully. C:\Users\Nicole\AppData\Local\{080001AE-5E62-465A-9B09-7355C6967306} folder moved successfully. C:\Users\Nicole\AppData\Local\{08A12707-4B33-43CA-9C21-0822650B6525} folder moved successfully. C:\Users\Nicole\AppData\Local\{08AFDD6B-6E62-4404-84E9-F28F70B965F9} folder moved successfully. C:\Users\Nicole\AppData\Local\{0A1A244F-6750-4E12-9926-8F9571EB13DC} folder moved successfully. C:\Users\Nicole\AppData\Local\{0B9AF525-36E1-47C2-B81A-687B401D684D} folder moved successfully. C:\Users\Nicole\AppData\Local\{0BBF9984-0848-42F5-974C-4CD25796CB7B} folder moved successfully. C:\Users\Nicole\AppData\Local\{0CBD2226-72C6-4A7B-98B2-E895208BDE5D} folder moved successfully. C:\Users\Nicole\AppData\Local\{0DFFE792-9DEC-4EDA-9FD5-AD4C5AAA05DB} folder moved successfully. C:\Users\Nicole\AppData\Local\{0E9439B9-1ACA-49A6-838D-87686BB06A24} folder moved successfully. C:\Users\Nicole\AppData\Local\{0ED65556-268E-4CA7-B35E-FB140B40068D} folder moved successfully. C:\Users\Nicole\AppData\Local\{0F40990F-F1C8-4418-933C-F2F7721A64EE} folder moved successfully. C:\Users\Nicole\AppData\Local\{0FC2006D-27BE-4F74-ADF9-5DBD3E7F465A} folder moved successfully. C:\Users\Nicole\AppData\Local\{0FD333C3-777E-4DB4-B8D8-4320837772B0} folder moved successfully. C:\Users\Nicole\AppData\Local\{0FE66EA6-901C-4CD2-8DAD-34D688E3EC9B} folder moved successfully. C:\Users\Nicole\AppData\Local\{109A3DDB-4C01-436F-B9BE-BEBCD2EE6981} folder moved successfully. C:\Users\Nicole\AppData\Local\{113881BC-1A71-482B-846F-3583222F347D} folder moved successfully. C:\Users\Nicole\AppData\Local\{1143CAB9-827E-4C23-8F0C-2121FDC683A9} folder moved successfully. C:\Users\Nicole\AppData\Local\{116B5A8F-11E0-461E-BCB2-A7ED313E6249} folder moved successfully. C:\Users\Nicole\AppData\Local\{119BD369-FA92-4A48-885A-9C2A89040ED1} folder moved successfully. C:\Users\Nicole\AppData\Local\{11A0C112-BA81-45F9-8D1C-0140A097B68D} folder moved successfully. C:\Users\Nicole\AppData\Local\{138F509D-A7AA-48C7-A62B-AC4816194099} folder moved successfully. C:\Users\Nicole\AppData\Local\{13C95983-4BEF-46D9-8F55-CD920539DA55} folder moved successfully. C:\Users\Nicole\AppData\Local\{15C473D6-1A66-48D3-A5C8-2097D16B25B0} folder moved successfully. C:\Users\Nicole\AppData\Local\{1694B3DA-9332-4ADF-9B4C-4970F0D3F5A9} folder moved successfully. C:\Users\Nicole\AppData\Local\{16A25D08-408E-42AC-95BD-AC92246FB6AC} folder moved successfully. C:\Users\Nicole\AppData\Local\{1776E255-E451-4E07-AC99-FCB2B1DE40DE} folder moved successfully. C:\Users\Nicole\AppData\Local\{1888E218-B013-4605-BBBF-77F8495E425C} folder moved successfully. C:\Users\Nicole\AppData\Local\{18916C9B-8606-4CE8-83B6-AC659A9677EC} folder moved successfully. C:\Users\Nicole\AppData\Local\{18BE4A94-E799-4AFE-93D5-A0A65599DE36} folder moved successfully. C:\Users\Nicole\AppData\Local\{193D6075-049D-4B73-810F-99FF7C90E966} folder moved successfully. C:\Users\Nicole\AppData\Local\{19571D15-6CF2-49CE-8DF5-7616A283DA8A} folder moved successfully. C:\Users\Nicole\AppData\Local\{1A105E2B-AB9C-4926-844B-2BE2D73D4067} folder moved successfully. C:\Users\Nicole\AppData\Local\{1A14AEE1-2508-4D8E-9120-6764CE588319} folder moved successfully. C:\Users\Nicole\AppData\Local\{1B4E1B9B-3B7D-4689-B73B-6EB7B88721E9} folder moved successfully. C:\Users\Nicole\AppData\Local\{1C8A1088-3793-4A57-B79F-FA142BD928C8} folder moved successfully. C:\Users\Nicole\AppData\Local\{1CA7BCF7-744E-4690-8675-AD60D7DF6552} folder moved successfully. C:\Users\Nicole\AppData\Local\{1E4EE35C-41B8-468E-8C73-49B1D3EB318B} folder moved successfully. C:\Users\Nicole\AppData\Local\{1ECEEAE9-705B-4407-A077-02B84555B38E} folder moved successfully. C:\Users\Nicole\AppData\Local\{2044EC94-F80B-4CE5-A376-E84EF121F5AA} folder moved successfully. C:\Users\Nicole\AppData\Local\{20A82524-7422-4BDB-A8FD-F4DCFD1CD74A} folder moved successfully. C:\Users\Nicole\AppData\Local\{21F86158-912B-4752-9991-9393DE4B8B27} folder moved successfully. C:\Users\Nicole\AppData\Local\{225222BC-687D-4B1C-9207-A428AFC74A89} folder moved successfully. C:\Users\Nicole\AppData\Local\{235146E5-26CB-418A-BEDF-6EA53A0573F4} folder moved successfully. C:\Users\Nicole\AppData\Local\{235A6838-F8C3-4F12-BA7B-643251F1A3B6} folder moved successfully. C:\Users\Nicole\AppData\Local\{24D24273-B512-4556-B964-E68403A9569C} folder moved successfully. C:\Users\Nicole\AppData\Local\{24F4D3BB-DD10-47BF-BD99-325C6140362E} folder moved successfully. C:\Users\Nicole\AppData\Local\{25A7835F-F149-44EF-BF4F-6DE242AD2AB5} folder moved successfully. C:\Users\Nicole\AppData\Local\{25B01FC9-1C84-4EB3-82FC-2CB162E2714D} folder moved successfully. C:\Users\Nicole\AppData\Local\{263B9019-B34F-4364-B590-6A4CE9C910D4} folder moved successfully. C:\Users\Nicole\AppData\Local\{264725A8-FE40-491C-B6D0-6D634BC6F29B} folder moved successfully. C:\Users\Nicole\AppData\Local\{26E3527B-AD42-4440-9E7A-04A2F825B4E2} folder moved successfully. C:\Users\Nicole\AppData\Local\{28305CBD-2182-4774-A840-B5FAAE31C6C7} folder moved successfully. C:\Users\Nicole\AppData\Local\{289C9BED-0ADD-4C48-A499-7C15ACBADAE3} folder moved successfully. C:\Users\Nicole\AppData\Local\{28E5B433-4D91-432D-B688-C3D6B064FC53} folder moved successfully. C:\Users\Nicole\AppData\Local\{28F072B3-82A1-4828-8BA8-4FCADF406D95} folder moved successfully. C:\Users\Nicole\AppData\Local\{2AB125B5-E384-4663-BB89-1BFBD68B297F} folder moved successfully. C:\Users\Nicole\AppData\Local\{2B18173E-1768-433D-9488-53EC2FB75F3A} folder moved successfully. C:\Users\Nicole\AppData\Local\{2B31A441-C14F-4BB0-BDA0-D7878E7F284E} folder moved successfully. C:\Users\Nicole\AppData\Local\{2B55F75F-07D8-4E31-B4A3-6CF760B08A22} folder moved successfully. C:\Users\Nicole\AppData\Local\{2B8F784E-E202-418B-8863-92C441AFA5BF} folder moved successfully. C:\Users\Nicole\AppData\Local\{2CBFE55D-DD70-4E89-AAB5-9E79AF3A77DB} folder moved successfully. C:\Users\Nicole\AppData\Local\{2CFF9D18-E004-4C7E-92BE-67C40CD42538} folder moved successfully. C:\Users\Nicole\AppData\Local\{2DD593C9-781E-4E14-ADD0-70E6F83F8B9C} folder moved successfully. C:\Users\Nicole\AppData\Local\{2E2C278D-E758-4BF7-B84A-81C55A0FF085} folder moved successfully. C:\Users\Nicole\AppData\Local\{2E8260AA-9585-4615-ADC2-5ECD861CFEBE} folder moved successfully. C:\Users\Nicole\AppData\Local\{2EEF67C1-6F59-4717-9F9E-0010679CB6A9} folder moved successfully. C:\Users\Nicole\AppData\Local\{2F3200A4-92CD-425E-83F8-10413A5398D1} folder moved successfully. C:\Users\Nicole\AppData\Local\{2FA567BC-04A9-4974-A991-4623B35B200B} folder moved successfully. C:\Users\Nicole\AppData\Local\{2FE76307-AF8B-4835-9EC1-A83C821F9D97} folder moved successfully. C:\Users\Nicole\AppData\Local\{30331FA8-139C-47C4-93A6-5A369FA5BD25} folder moved successfully. C:\Users\Nicole\AppData\Local\{30806D37-A159-4F35-AEB9-1224A29C2DC0} folder moved successfully. C:\Users\Nicole\AppData\Local\{312020E1-F865-4DBC-B847-EBD166D4A582} folder moved successfully. C:\Users\Nicole\AppData\Local\{31738FFB-41BF-4B7E-BC5B-1410186DA013} folder moved successfully. C:\Users\Nicole\AppData\Local\{3187E22A-309A-4F29-A7C2-8C6B0BDFCA2A} folder moved successfully. C:\Users\Nicole\AppData\Local\{3443F3D7-D039-4935-B0AD-9BCEEE2D7A0F} folder moved successfully. C:\Users\Nicole\AppData\Local\{34825EC6-0999-40FB-BC00-1162C8DAB3B6} folder moved successfully. C:\Users\Nicole\AppData\Local\{34AB8D2E-22FF-4C99-AAF6-127746E7181A} folder moved successfully. C:\Users\Nicole\AppData\Local\{34F9C691-DAC7-4022-B88C-F2EED849EB3E} folder moved successfully. C:\Users\Nicole\AppData\Local\{3572E50B-9E34-45E3-A095-A786CD83A7B5} folder moved successfully. C:\Users\Nicole\AppData\Local\{357CA1C7-E739-42A4-B15F-B59991984EA1} folder moved successfully. C:\Users\Nicole\AppData\Local\{36B8028D-0BF4-470F-BB1E-2B9B91454312} folder moved successfully. C:\Users\Nicole\AppData\Local\{36C56C69-5496-4598-B8C2-F3E903283DE5} folder moved successfully. C:\Users\Nicole\AppData\Local\{37945D2B-0974-4D45-98A7-EABBE7E8F3C3} folder moved successfully. C:\Users\Nicole\AppData\Local\{37B5F454-6D82-4926-BEFC-87E441DF589B} folder moved successfully. C:\Users\Nicole\AppData\Local\{38508472-045C-454E-A5BE-4AE1E186E48E} folder moved successfully. C:\Users\Nicole\AppData\Local\{385DADC2-F485-446E-95FF-18BA10E39ECC} folder moved successfully. C:\Users\Nicole\AppData\Local\{3B7CA200-042E-43EF-BCFE-E54DAA0ADF12} folder moved successfully. C:\Users\Nicole\AppData\Local\{3C097EB0-2A1A-4710-A377-877EBCDD6017} folder moved successfully. C:\Users\Nicole\AppData\Local\{3C7D3168-38A0-4516-82E5-E6339B718DF9} folder moved successfully. C:\Users\Nicole\AppData\Local\{3EEFE39F-2EB1-420D-BA08-1257B640D3DB} folder moved successfully. C:\Users\Nicole\AppData\Local\{403B7E10-98B1-4072-B1E8-34209DA718A1} folder moved successfully. C:\Users\Nicole\AppData\Local\{41067DE9-1749-402A-8000-C80BF32B73EA} folder moved successfully. C:\Users\Nicole\AppData\Local\{41B6F3CF-9A6C-4616-ABF3-6C6367292F29} folder moved successfully. C:\Users\Nicole\AppData\Local\{4338B889-D6B3-4171-BD08-7B1601948EEC} folder moved successfully. C:\Users\Nicole\AppData\Local\{436EFCA6-134C-4D73-BEA6-0AA56469A6EB} folder moved successfully. C:\Users\Nicole\AppData\Local\{43782BD6-DE7C-4E7A-A06E-E973DDEB7D96} folder moved successfully. C:\Users\Nicole\AppData\Local\{44AFF529-3E7C-4488-8AC0-74738A622CAE} folder moved successfully. C:\Users\Nicole\AppData\Local\{44CCAFF9-4C10-4448-94FF-A1C3DD04EE34} folder moved successfully. C:\Users\Nicole\AppData\Local\{450C74DE-2483-4E32-8439-604D4B3456F7} folder moved successfully. C:\Users\Nicole\AppData\Local\{45CC7F2A-A3B7-4DFC-8D75-79B6E8056B62} folder moved successfully. C:\Users\Nicole\AppData\Local\{472E7C32-7D9F-4222-8F24-EE14E7FC7484} folder moved successfully. C:\Users\Nicole\AppData\Local\{48C4D4F3-BF6F-463B-9ACE-B4903F66E0C1} folder moved successfully. C:\Users\Nicole\AppData\Local\{49112829-A604-4ECC-82E5-71B463A3AA1A} folder moved successfully. C:\Users\Nicole\AppData\Local\{4AEF64B8-61ED-426A-AC48-35ADDBAAAB83} folder moved successfully. C:\Users\Nicole\AppData\Local\{4B744A1D-055C-465F-A028-0B052A1E8286} folder moved successfully. C:\Users\Nicole\AppData\Local\{4BE66B64-3BC6-4E42-A292-CB84682D987E} folder moved successfully. C:\Users\Nicole\AppData\Local\{4BEA284F-B8A2-433C-9C17-B6AB0DD2F5A9} folder moved successfully. C:\Users\Nicole\AppData\Local\{4BFB035B-78A6-4E43-9194-8CE787A3A63A} folder moved successfully. C:\Users\Nicole\AppData\Local\{4CA03B25-E3EA-42F8-A4A4-83EB01A3A5F2} folder moved successfully. C:\Users\Nicole\AppData\Local\{4E3087CC-D0E2-4973-ABB9-ACD36A8245D7} folder moved successfully. C:\Users\Nicole\AppData\Local\{4E3B27B2-467F-43D3-BFFF-334A8E516885} folder moved successfully. C:\Users\Nicole\AppData\Local\{4ED66356-E211-420D-A530-A70DB46A869E} folder moved successfully. C:\Users\Nicole\AppData\Local\{4EF70C48-182A-404F-BF08-E0448C16EF4C} folder moved successfully. C:\Users\Nicole\AppData\Local\{4F8784A8-E778-4493-8403-909AC5FEA400} folder moved successfully. C:\Users\Nicole\AppData\Local\{4FD0C7DF-F874-4543-B340-BECE5A59F0D0} folder moved successfully. C:\Users\Nicole\AppData\Local\{4FE0B00D-BDF0-47EE-8D85-DDA0CBB5B204} folder moved successfully. C:\Users\Nicole\AppData\Local\{4FEBA663-2D00-44A2-8CBE-C62D8E133FD9} folder moved successfully. C:\Users\Nicole\AppData\Local\{50070E5B-8A33-4102-BC5F-E5FCD3EEEE76} folder moved successfully. C:\Users\Nicole\AppData\Local\{505F6688-6E73-4AF6-82F9-62DA6FE37F07} folder moved successfully. C:\Users\Nicole\AppData\Local\{510596E2-7E08-4D2D-BB00-B1B39B679361} folder moved successfully. C:\Users\Nicole\AppData\Local\{51115CAF-FAAA-416C-A355-57C056A49136} folder moved successfully. C:\Users\Nicole\AppData\Local\{515D6202-7C57-4407-A8D1-AA2F7243DD44} folder moved successfully. C:\Users\Nicole\AppData\Local\{5227AC36-A5DE-4353-A9C4-60DA7604B856} folder moved successfully. C:\Users\Nicole\AppData\Local\{53604420-362E-4D9B-978A-E8B533579DE9} folder moved successfully. C:\Users\Nicole\AppData\Local\{556C7FD3-C23D-4A63-8FB3-B12022146DC9} folder moved successfully. C:\Users\Nicole\AppData\Local\{5571242F-229E-4FDF-B1FB-EBA674379275} folder moved successfully. C:\Users\Nicole\AppData\Local\{55D01B75-3402-4D0C-9F33-85F69EA93645} folder moved successfully. C:\Users\Nicole\AppData\Local\{565056C2-FD81-4EDF-808F-7308D7E5C5DB} folder moved successfully. C:\Users\Nicole\AppData\Local\{57D622CC-1B67-47DA-BD01-E1DC05362DDC} folder moved successfully. C:\Users\Nicole\AppData\Local\{57D83C36-2906-4369-901E-13E38CD02582} folder moved successfully. C:\Users\Nicole\AppData\Local\{5865FAB5-7D44-4575-B084-18DBAEE2B598} folder moved successfully. C:\Users\Nicole\AppData\Local\{59629130-7B38-4023-8A6B-0299AE3BF03C} folder moved successfully. C:\Users\Nicole\AppData\Local\{5A36976C-E274-47D8-A06D-450723F30EF2} folder moved successfully. C:\Users\Nicole\AppData\Local\{5A433999-697D-47BE-8953-52E0BB0DB858} folder moved successfully. C:\Users\Nicole\AppData\Local\{5A811B77-A9D4-439D-A61E-49E79695B703} folder moved successfully. C:\Users\Nicole\AppData\Local\{5E944916-5552-4164-A01E-357E1F414834} folder moved successfully. C:\Users\Nicole\AppData\Local\{5EDBF34B-EB74-41B7-8894-EF95718EAC61} folder moved successfully. C:\Users\Nicole\AppData\Local\{5F082B41-76A8-416E-B25E-B9F3BDC17C54} folder moved successfully. C:\Users\Nicole\AppData\Local\{5FAFBEF7-DDF5-4B0A-A63B-CDC3BFB5846E} folder moved successfully. C:\Users\Nicole\AppData\Local\{60ABB113-1E9F-4FE0-8DFE-0D2874F9688C} folder moved successfully. C:\Users\Nicole\AppData\Local\{6225B8D7-40A3-4643-BB41-D44B4744175E} folder moved successfully. C:\Users\Nicole\AppData\Local\{62412AF4-C54A-46D5-AA94-20A41CE1664D} folder moved successfully. C:\Users\Nicole\AppData\Local\{62ADFF24-3751-456F-A670-1473821E3635} folder moved successfully. C:\Users\Nicole\AppData\Local\{62F2E87C-EB71-4D3A-8300-9902387BBB16} folder moved successfully. C:\Users\Nicole\AppData\Local\{6319326F-DAC6-456F-930D-8780842ABC12} folder moved successfully. C:\Users\Nicole\AppData\Local\{6594A172-2EC3-4264-A900-52DEE3B92DC2} folder moved successfully. C:\Users\Nicole\AppData\Local\{6685C9F3-AA06-4D5E-83E0-4A5A3334678A} folder moved successfully. C:\Users\Nicole\AppData\Local\{66DECA1D-0CEB-4B5B-B472-5A7F0BCB3912} folder moved successfully. C:\Users\Nicole\AppData\Local\{66E3D428-78DA-42D3-941B-FB0D2FF27CD1} folder moved successfully. C:\Users\Nicole\AppData\Local\{66FFD31D-3E38-48AF-B042-82D6E14745CA} folder moved successfully. C:\Users\Nicole\AppData\Local\{6A46A052-D995-4205-8449-EDC3D388AB2D} folder moved successfully. C:\Users\Nicole\AppData\Local\{6AF61709-3872-40AC-B408-4EBF90279E18} folder moved successfully. C:\Users\Nicole\AppData\Local\{6E71AED3-D766-493A-8289-AF880990DDE5} folder moved successfully. C:\Users\Nicole\AppData\Local\{6E7AD118-8043-4A53-9540-BF7B24065DA0} folder moved successfully. C:\Users\Nicole\AppData\Local\{6F17F60F-9577-4AC8-A281-EF0F8F14A1E8} folder moved successfully. C:\Users\Nicole\AppData\Local\{6FA1AE60-9EA8-4573-9828-EE3738F8D865} folder moved successfully. C:\Users\Nicole\AppData\Local\{703B21FF-3FEC-43B6-950A-0B8B81DA2941} folder moved successfully. C:\Users\Nicole\AppData\Local\{70628986-7465-4CED-9BB9-7EB2D839F4DB} folder moved successfully. C:\Users\Nicole\AppData\Local\{70DFE0D4-ECB2-49FC-8719-31A9C29C532B} folder moved successfully. C:\Users\Nicole\AppData\Local\{7217C295-3204-4753-BDA1-0E6CF98EE901} folder moved successfully. C:\Users\Nicole\AppData\Local\{7252343F-731B-4000-AD61-5BAADB86CCBD} folder moved successfully. C:\Users\Nicole\AppData\Local\{726C102C-AA6B-42E2-B16E-20C39F0F3C06} folder moved successfully. C:\Users\Nicole\AppData\Local\{73118662-7C1D-4AD8-890D-051DFCA8C3D1} folder moved successfully. C:\Users\Nicole\AppData\Local\{733B539D-C9E6-4B04-AC01-21906FC9834E} folder moved successfully. C:\Users\Nicole\AppData\Local\{74E18BBD-24C8-437E-A60B-5BE64180D377} folder moved successfully. C:\Users\Nicole\AppData\Local\{75775190-D4EB-4B00-AE40-B050C2EFC5FC} folder moved successfully. C:\Users\Nicole\AppData\Local\{757CB68F-2634-401E-8130-7875D369A3DC} folder moved successfully. C:\Users\Nicole\AppData\Local\{77A660FB-52DD-4CC8-B66A-10D186E5B222} folder moved successfully. C:\Users\Nicole\AppData\Local\{785C0876-CD33-4F0A-8A2E-A7E77E43E011} folder moved successfully. C:\Users\Nicole\AppData\Local\{786C678A-F629-4AA9-BD83-ECD8382A4389} folder moved successfully. C:\Users\Nicole\AppData\Local\{7923AE98-9AB4-4485-BC4B-5A4C5E48563E} folder moved successfully. C:\Users\Nicole\AppData\Local\{7AB43BF0-D146-4698-B283-46BE925D55F8} folder moved successfully. C:\Users\Nicole\AppData\Local\{7AF455DD-C227-4471-9F57-9BB6EBABF399} folder moved successfully. C:\Users\Nicole\AppData\Local\{7B3D244B-5229-433B-AC53-56E349FB13DC} folder moved successfully. C:\Users\Nicole\AppData\Local\{7BEEADB1-1EF9-4642-97E8-42B6037D9652} folder moved successfully. C:\Users\Nicole\AppData\Local\{7C69AB1A-C295-439B-91F4-5A80B28C3F7D} folder moved successfully. C:\Users\Nicole\AppData\Local\{7DD4B2DE-2EEA-4DA0-A0B5-2DA7A3C45C09} folder moved successfully. C:\Users\Nicole\AppData\Local\{7E13FAD6-0224-4AF6-818C-89CC5DEBB0CB} folder moved successfully. C:\Users\Nicole\AppData\Local\{7E77E7A3-0835-4C2B-8F0A-524E625CDB10} folder moved successfully. C:\Users\Nicole\AppData\Local\{7ED4D44A-1C70-4268-B204-D103EC2B86FC} folder moved successfully. C:\Users\Nicole\AppData\Local\{7F7C6F95-A109-4846-B1C8-5492D9075ED9} folder moved successfully. C:\Users\Nicole\AppData\Local\{7FAA800F-8D38-4E93-BB76-29931B19AF8F} folder moved successfully. C:\Users\Nicole\AppData\Local\{7FADBCE3-89AA-41FE-9DFD-A3C8AFD24DA9} folder moved successfully. C:\Users\Nicole\AppData\Local\{80693CB1-736F-4F3C-8A2D-30E6BCF09EC5} folder moved successfully. C:\Users\Nicole\AppData\Local\{80BC44BB-953D-4FB4-ABD9-3ADAED26785A} folder moved successfully. C:\Users\Nicole\AppData\Local\{815EFE7E-73D1-4A97-9904-D4CE0E4BA0A6} folder moved successfully. C:\Users\Nicole\AppData\Local\{82066278-AD5F-47D4-8701-D747069B54AA} folder moved successfully. C:\Users\Nicole\AppData\Local\{833C42ED-7138-42EB-B518-8BA9FE4660A7} folder moved successfully. C:\Users\Nicole\AppData\Local\{8341EF4D-10B8-48FC-BC87-E28D24A2BA26} folder moved successfully. C:\Users\Nicole\AppData\Local\{83DEC86A-1464-43CB-885D-2C79FE2F0AAB} folder moved successfully. C:\Users\Nicole\AppData\Local\{85627A40-A7A7-4302-99E9-694785BFABBB} folder moved successfully. C:\Users\Nicole\AppData\Local\{858E464D-1FA6-47B9-B1F2-D8E5874A3906} folder moved successfully. C:\Users\Nicole\AppData\Local\{85AD1FDF-4D9E-4BF1-AE00-2F8A0F0E6AB4} folder moved successfully. C:\Users\Nicole\AppData\Local\{87B4CDDC-C855-4D95-9895-AD29CD92C5FA} folder moved successfully. C:\Users\Nicole\AppData\Local\{8864C72A-4BC4-4952-9AED-D56F3143B70A} folder moved successfully. C:\Users\Nicole\AppData\Local\{8919F1D3-9369-45BE-B738-235077073404} folder moved successfully. C:\Users\Nicole\AppData\Local\{89C598DA-3902-4349-AECB-60BE6B1A905B} folder moved successfully. C:\Users\Nicole\AppData\Local\{89FD111C-1EB0-4803-88BE-52C5896AF72A} folder moved successfully. C:\Users\Nicole\AppData\Local\{8A22FA19-C1BF-4C80-B929-64192BA2186B} folder moved successfully. C:\Users\Nicole\AppData\Local\{8A381AAD-597D-4ECB-9F31-3073A03B8F2F} folder moved successfully. C:\Users\Nicole\AppData\Local\{8A93A76F-C180-41BE-9C50-90C3BD379ECD} folder moved successfully. C:\Users\Nicole\AppData\Local\{8B0BFE54-FD83-4CA2-A2AE-4A60144A52F6} folder moved successfully. C:\Users\Nicole\AppData\Local\{8B3E1422-D03A-4879-A536-58FE15747639} folder moved successfully. C:\Users\Nicole\AppData\Local\{8CADE20C-85F2-446F-BB69-C7A1916FC745} folder moved successfully. C:\Users\Nicole\AppData\Local\{8D2670C7-0E71-4E27-9356-6D16F86732AF} folder moved successfully. C:\Users\Nicole\AppData\Local\{8E246B50-60A3-4B75-BCA7-2341E0B4C658} folder moved successfully. C:\Users\Nicole\AppData\Local\{8F1AECB4-4D27-43D1-A436-749BF1ED1FEE} folder moved successfully. C:\Users\Nicole\AppData\Local\{8F22A60E-8ADA-4AE9-ABF4-E015402F1DEB} folder moved successfully. C:\Users\Nicole\AppData\Local\{90076BD3-CF0D-4189-AD1F-26E5B10F5ECC} folder moved successfully. C:\Users\Nicole\AppData\Local\{9079B1CE-1F25-47D6-9895-A6B3F8CC650A} folder moved successfully. C:\Users\Nicole\AppData\Local\{9194E2EB-EC29-4280-9B53-E5E68A1D3FF6} folder moved successfully. C:\Users\Nicole\AppData\Local\{9216FD11-6D17-4C46-8435-0ED45F4296DD} folder moved successfully. C:\Users\Nicole\AppData\Local\{92981140-06C0-42A5-8C0D-8215C7EFC3CA} folder moved successfully. C:\Users\Nicole\AppData\Local\{938DB1D0-2AE3-401A-89CF-C26FE28DA666} folder moved successfully. C:\Users\Nicole\AppData\Local\{9470ACDF-BE75-4E4C-9B87-70712DCD04A6} folder moved successfully. C:\Users\Nicole\AppData\Local\{953BA070-5D05-46E1-8C5B-0F1E39CE53CB} folder moved successfully. C:\Users\Nicole\AppData\Local\{973E5545-F632-42FD-84A8-970680A7EDFA} folder moved successfully. C:\Users\Nicole\AppData\Local\{97C47B9A-98D0-4132-93E3-2BB7159D7EE6} folder moved successfully. C:\Users\Nicole\AppData\Local\{986CE566-C363-4D32-9D02-1C94006DA3A4} folder moved successfully. C:\Users\Nicole\AppData\Local\{992DD012-E168-4F3E-8F28-637BAE8F2665} folder moved successfully. C:\Users\Nicole\AppData\Local\{99657D9D-0E16-4AB4-9ECC-CC9860C00C92} folder moved successfully. C:\Users\Nicole\AppData\Local\{9A7C3C91-1147-4850-A556-57FC747ECBC3} folder moved successfully. C:\Users\Nicole\AppData\Local\{9C62337B-FA60-4112-8A24-65F5F349948C} folder moved successfully. C:\Users\Nicole\AppData\Local\{9D420253-090F-4C13-8558-C12DF9BBE271} folder moved successfully. C:\Users\Nicole\AppData\Local\{9D7A48BC-BA66-4452-B2CA-63AD3AC6B241} folder moved successfully. C:\Users\Nicole\AppData\Local\{9DEF18AF-0CAC-4021-AFC5-9630F7967EA7} folder moved successfully. C:\Users\Nicole\AppData\Local\{9F4A139B-D923-489A-B4FF-437CF8F55AD9} folder moved successfully. C:\Users\Nicole\AppData\Local\{9F7BFFF3-4058-410A-A056-5EB9DBAFBF33} folder moved successfully. C:\Users\Nicole\AppData\Local\{A0858E88-2826-4EDA-A76E-D43934899D00} folder moved successfully. C:\Users\Nicole\AppData\Local\{A0A714D9-67BD-4AA4-8E08-22FDBD2A058A} folder moved successfully. C:\Users\Nicole\AppData\Local\{A10D2F75-C8D9-44A6-9BEA-F3BBEE065E4A} folder moved successfully. C:\Users\Nicole\AppData\Local\{A14AC172-7AB4-44C3-ACFE-9C9AFB01C5BF} folder moved successfully. C:\Users\Nicole\AppData\Local\{A1D9A5F1-D990-4AE7-9CB1-66DEF80BF593} folder moved successfully. C:\Users\Nicole\AppData\Local\{A26A3A22-9F9E-4C24-A22B-7CE9749961EB} folder moved successfully. C:\Users\Nicole\AppData\Local\{A3118752-D1AD-4F25-895A-DED7B0AF7C96} folder moved successfully. C:\Users\Nicole\AppData\Local\{A3BBE0C3-901B-4B6B-A48D-0A094C5FA44F} folder moved successfully. C:\Users\Nicole\AppData\Local\{A4BEFC05-9D52-40E3-B6C4-38C7D7A2B162} folder moved successfully. C:\Users\Nicole\AppData\Local\{A4DDF89A-1DA3-4150-A46E-5A94D7E20CC4} folder moved successfully. C:\Users\Nicole\AppData\Local\{A50D6729-1088-4570-B073-D8362E059D57} folder moved successfully. C:\Users\Nicole\AppData\Local\{A62D2145-5F80-4B3C-AE94-D2B1794ACFE0} folder moved successfully. C:\Users\Nicole\AppData\Local\{A681871D-50C5-4830-9115-C26EB7DF6AD2} folder moved successfully. C:\Users\Nicole\AppData\Local\{A7009E27-CBB1-4774-9E97-D4BE5D87EF2E} folder moved successfully. C:\Users\Nicole\AppData\Local\{A7AD44C6-A16D-4BFC-8AD3-54D98C6DBCDA} folder moved successfully. C:\Users\Nicole\AppData\Local\{A85E241C-BD15-43CB-8D3C-AD782491899F} folder moved successfully. C:\Users\Nicole\AppData\Local\{A876CAB2-4D1B-4886-A6B6-D4853D468C4A} folder moved successfully. C:\Users\Nicole\AppData\Local\{A884CDD8-3339-4538-A656-34A71120398F} folder moved successfully. C:\Users\Nicole\AppData\Local\{A9FF8A6F-3847-4A88-9F2C-A157C5D37429} folder moved successfully. C:\Users\Nicole\AppData\Local\{AAD7A795-DB5C-4929-AD63-E45F5ADEDF4C} folder moved successfully. C:\Users\Nicole\AppData\Local\{ACCD2FAA-E301-42C1-ADF6-0D8ECEFEFCD4} folder moved successfully. C:\Users\Nicole\AppData\Local\{AE62DC1E-D8E8-4D4E-8375-CAF70FAE267A} folder moved successfully. C:\Users\Nicole\AppData\Local\{B00EC345-595A-4035-9A9E-FBE136BF26EC} folder moved successfully. C:\Users\Nicole\AppData\Local\{B0736C26-2B33-44A8-A75C-07B67AEE1D44} folder moved successfully. C:\Users\Nicole\AppData\Local\{B144ACD9-B764-403F-9612-3E63F8B9E655} folder moved successfully. C:\Users\Nicole\AppData\Local\{B1BA01BB-68AF-4B30-9229-2916669745B5} folder moved successfully. C:\Users\Nicole\AppData\Local\{B3F5CA4F-D8D4-4765-8BA5-7DC06E6079F9} folder moved successfully. C:\Users\Nicole\AppData\Local\{B4A736CE-3279-422C-BE71-F9D62068C9F9} folder moved successfully. C:\Users\Nicole\AppData\Local\{B5695B72-F54B-4B75-94D1-069ED08D5A18} folder moved successfully. C:\Users\Nicole\AppData\Local\{B57FE52A-1781-4C2E-B9B7-F13E4A4A3939} folder moved successfully. C:\Users\Nicole\AppData\Local\{B6644491-3218-4C55-956F-9C5DBEECEEE2} folder moved successfully. C:\Users\Nicole\AppData\Local\{B669BD93-91FF-43C1-A14B-1A4B43E7D7E6} folder moved successfully. C:\Users\Nicole\AppData\Local\{B6A269CB-C594-49F7-9A7B-0B5D0BFF6065} folder moved successfully. C:\Users\Nicole\AppData\Local\{B6EB2BA4-77AE-4C44-8553-3042391B5ADC} folder moved successfully. C:\Users\Nicole\AppData\Local\{B765A88A-B649-4AD4-9748-EF38C2867C7B} folder moved successfully. C:\Users\Nicole\AppData\Local\{B80320E4-531B-4F69-8EBB-FA7B3FD5D904} folder moved successfully. C:\Users\Nicole\AppData\Local\{BA492455-6068-4DD2-BC76-43FAD5E13DB6} folder moved successfully. C:\Users\Nicole\AppData\Local\{BA6CE134-4B54-4D1A-80C0-48738AE910EC} folder moved successfully. C:\Users\Nicole\AppData\Local\{BCF062E8-E25E-4393-8ADB-81AB330D7C95} folder moved successfully. C:\Users\Nicole\AppData\Local\{BCFB6BDC-EA10-4414-88E6-9748663C5168} folder moved successfully. C:\Users\Nicole\AppData\Local\{BE18E0D5-9065-493F-B6A4-5E165595161B} folder moved successfully. C:\Users\Nicole\AppData\Local\{BF12E2E8-3FA7-473B-9B36-0DADFD645AD6} folder moved successfully. C:\Users\Nicole\AppData\Local\{BF8B2D66-F920-4F13-96D1-9C36CF4801E1} folder moved successfully. C:\Users\Nicole\AppData\Local\{C03DA2D9-D285-4419-9C67-B46EF36ED63A} folder moved successfully. C:\Users\Nicole\AppData\Local\{C0769FAD-258D-441D-800B-782815272F93} folder moved successfully. C:\Users\Nicole\AppData\Local\{C0B7F877-1EBF-4132-AB51-570F687C1734} folder moved successfully. C:\Users\Nicole\AppData\Local\{C281F1D9-19FD-4B62-8F5D-E7F9E70B33B3} folder moved successfully. C:\Users\Nicole\AppData\Local\{C3039AA0-DE53-422A-A2B3-B5986681C87B} folder moved successfully. C:\Users\Nicole\AppData\Local\{C434FAAA-6792-4844-B1A9-95A1CA5DA37E} folder moved successfully. C:\Users\Nicole\AppData\Local\{C47EB532-5BDB-488C-9541-F9E0B8D6FE25} folder moved successfully. C:\Users\Nicole\AppData\Local\{C5C5619A-4F8B-434F-927D-175EA8F30577} folder moved successfully. C:\Users\Nicole\AppData\Local\{C638D36F-78A2-4FCF-9E6D-7EEE05EA8E98} folder moved successfully. C:\Users\Nicole\AppData\Local\{C76CE726-938A-4450-ACF9-9A33ECE4B558} folder moved successfully. C:\Users\Nicole\AppData\Local\{C8801238-C813-4EB6-B332-FA7AD28CDBA4} folder moved successfully. C:\Users\Nicole\AppData\Local\{C983D772-EA08-4CE2-B4F2-15D51EBC2761} folder moved successfully. C:\Users\Nicole\AppData\Local\{CAA59CF8-2436-41B8-BB2D-C07CB7E599B5} folder moved successfully. C:\Users\Nicole\AppData\Local\{CC72F3BD-E4BE-4996-95B6-6614F3912DC7} folder moved successfully. C:\Users\Nicole\AppData\Local\{CCC3C541-14CA-4BE0-983E-D2140E31C846} folder moved successfully. C:\Users\Nicole\AppData\Local\{CDBB03A5-A0C9-444E-88B7-6D871053062A} folder moved successfully. C:\Users\Nicole\AppData\Local\{CE94564E-CB26-4FAC-BC8B-4E0D151A3DA4} folder moved successfully. C:\Users\Nicole\AppData\Local\{CE9E2951-BBC3-44C5-BAB9-046198B4A93B} folder moved successfully. C:\Users\Nicole\AppData\Local\{CEEEA60A-E00A-4A58-81A6-F68D57A77C5D} folder moved successfully. C:\Users\Nicole\AppData\Local\{CF1DCFE3-F24B-49B3-BEDE-9369E50A2C30} folder moved successfully. C:\Users\Nicole\AppData\Local\{D04E18EF-F6DC-4068-99B6-D361B416808A} folder moved successfully. C:\Users\Nicole\AppData\Local\{D0ABA96B-A775-4CE5-AE49-57AC0A86E9E8} folder moved successfully. C:\Users\Nicole\AppData\Local\{D0B270A0-81E4-4CA3-9735-6ED9D4167F19} folder moved successfully. C:\Users\Nicole\AppData\Local\{D11C03BD-46CF-44FF-A810-65960EDEA283} folder moved successfully. C:\Users\Nicole\AppData\Local\{D270354C-862F-4ED5-A30A-CE26181A8B32} folder moved successfully. C:\Users\Nicole\AppData\Local\{D28F8F83-6B33-43FD-9613-768FDB17BB66} folder moved successfully. C:\Users\Nicole\AppData\Local\{D2E50838-8A44-4F70-B5B2-B7BA29268278} folder moved successfully. C:\Users\Nicole\AppData\Local\{D2FC5713-540C-44F2-A5A0-392CBA3AA7D8} folder moved successfully. C:\Users\Nicole\AppData\Local\{D38C3A48-DCB3-46FE-B1F2-71F0AFBCD14F} folder moved successfully. C:\Users\Nicole\AppData\Local\{D3ED4F3F-2CB7-4123-BF8E-8F566CAEA542} folder moved successfully. C:\Users\Nicole\AppData\Local\{D4AB41B2-0DBF-4DE6-80BA-F10D69EEB748} folder moved successfully. C:\Users\Nicole\AppData\Local\{D52FB1B9-AE5A-469B-94CD-BB6DA6D65346} folder moved successfully. C:\Users\Nicole\AppData\Local\{D547BA2E-D288-4F3B-A89B-28CAF46653C0} folder moved successfully. C:\Users\Nicole\AppData\Local\{D668DDB8-FD83-4763-8FF8-BF30A3987DD9} folder moved successfully. C:\Users\Nicole\AppData\Local\{D6C3FCC5-264C-4556-89B3-453E99D4A639} folder moved successfully. C:\Users\Nicole\AppData\Local\{D70D2002-3F04-4530-AED2-C7D7FD3644AD} folder moved successfully. C:\Users\Nicole\AppData\Local\{D802C3EA-FAC6-4E47-8FDE-2EABA430BA36} folder moved successfully. C:\Users\Nicole\AppData\Local\{D87A9BB9-5A93-4C0F-9320-F5A0FC356DC6} folder moved successfully. C:\Users\Nicole\AppData\Local\{DA59124D-DCAE-49B8-8AE4-F719BD0A1549} folder moved successfully. C:\Users\Nicole\AppData\Local\{DA95E7DB-8102-443C-BA55-7467F0AD4CD0} folder moved successfully. C:\Users\Nicole\AppData\Local\{DD185A57-F9CF-4CBC-9CEB-0DCEF4ECAD3A} folder moved successfully. C:\Users\Nicole\AppData\Local\{DD1F6DAF-3CD2-4B5E-8D57-88C4E006130E} folder moved successfully. C:\Users\Nicole\AppData\Local\{DDF2E316-5ED9-4544-AC32-22185C16488B} folder moved successfully. C:\Users\Nicole\AppData\Local\{DE6C12EF-DD33-4B9E-96D4-BD663EFC04F1} folder moved successfully. C:\Users\Nicole\AppData\Local\{E0162575-53ED-46FA-B9A1-4B49CF70E890} folder moved successfully. C:\Users\Nicole\AppData\Local\{E0FED9CA-3F70-48C7-BDD8-264D00B36A0A} folder moved successfully. C:\Users\Nicole\AppData\Local\{E10374C3-A77A-482A-9AEF-4C6C33026FCA} folder moved successfully. C:\Users\Nicole\AppData\Local\{E1D135BF-0C73-4A08-A605-4E5ECB1AD73B} folder moved successfully. C:\Users\Nicole\AppData\Local\{E2446E22-A4EA-4179-9361-F23BA10477B2} folder moved successfully. C:\Users\Nicole\AppData\Local\{E2F61813-69FD-419F-867B-10695F30052F} folder moved successfully. C:\Users\Nicole\AppData\Local\{E3C0AE30-79B5-445C-A4C2-21EC320649CB} folder moved successfully. C:\Users\Nicole\AppData\Local\{E3F35A66-72A2-4CC3-A526-F4BF85A9107C} folder moved successfully. C:\Users\Nicole\AppData\Local\{E3FBD645-5533-4E3A-A517-51A09E2B917C} folder moved successfully. C:\Users\Nicole\AppData\Local\{E4AC3F9C-ACF7-4593-868C-36E61023CE6A} folder moved successfully. C:\Users\Nicole\AppData\Local\{E5387ECF-0AD4-4BB3-97A6-16CE03493B5B} folder moved successfully. C:\Users\Nicole\AppData\Local\{E58FEA17-0973-47B0-8145-314F6BCD1A39} folder moved successfully. C:\Users\Nicole\AppData\Local\{E6309FA9-A33C-49AE-8079-3D0D7BAE9C44} folder moved successfully. C:\Users\Nicole\AppData\Local\{E6FA3D0E-EAF4-48D0-84ED-F5C583F679AA} folder moved successfully. C:\Users\Nicole\AppData\Local\{E76FFD8A-799A-4BC6-99F6-BB566A7CC26C} folder moved successfully. C:\Users\Nicole\AppData\Local\{E81F4F66-D77C-4291-BE3E-825EAE6F835E} folder moved successfully. C:\Users\Nicole\AppData\Local\{E8AD837A-B25C-4C7E-9B6C-45D4FDD4F7FA} folder moved successfully. C:\Users\Nicole\AppData\Local\{E8BAACCC-336B-4729-9F9D-50DA243E4EB2} folder moved successfully. C:\Users\Nicole\AppData\Local\{E8DD7620-D9B9-4B59-8F32-566B813AD7D7} folder moved successfully. C:\Users\Nicole\AppData\Local\{E9A14790-6619-4DEB-8E15-E007FD980C8C} folder moved successfully. C:\Users\Nicole\AppData\Local\{EA235620-B4B5-4ADB-A4BE-F335715E29B1} folder moved successfully. C:\Users\Nicole\AppData\Local\{EBF99237-0F8B-4FB6-B279-1B8987C9F127} folder moved successfully. C:\Users\Nicole\AppData\Local\{ECD7DC7E-39D2-40C9-8722-4FD2014F141E} folder moved successfully. C:\Users\Nicole\AppData\Local\{ED75E7D7-2DEF-4E08-AEC9-615BBD96CF47} folder moved successfully. C:\Users\Nicole\AppData\Local\{EDA8E29A-5443-48A8-BF06-4BDD06F14C37} folder moved successfully. C:\Users\Nicole\AppData\Local\{EE2CA9AB-BE04-4EA7-9C06-F805511182D8} folder moved successfully. C:\Users\Nicole\AppData\Local\{EEA918C7-5675-4015-ACBE-6DEA5903983A} folder moved successfully. C:\Users\Nicole\AppData\Local\{EEAE5E79-ACDE-45E6-A4CD-DB56D1DB532F} folder moved successfully. C:\Users\Nicole\AppData\Local\{EEE26F3C-AD91-4BD2-8E9D-5D10B29E2341} folder moved successfully. C:\Users\Nicole\AppData\Local\{EF15B5D5-83BD-40CA-A9F7-9BA8A52FFEA0} folder moved successfully. C:\Users\Nicole\AppData\Local\{F030D4D2-D567-41C5-B982-33031DF4326C} folder moved successfully. C:\Users\Nicole\AppData\Local\{F05D2622-0851-47D5-BA9C-B6E743F0C83F} folder moved successfully. C:\Users\Nicole\AppData\Local\{F0CA557B-3030-4EE2-AAB1-306489D7EC16} folder moved successfully. C:\Users\Nicole\AppData\Local\{F138496A-BBC6-4930-B620-DCC02AD80548} folder moved successfully. C:\Users\Nicole\AppData\Local\{F34340C6-E6EF-4DC4-AF8F-23B3EDC52ACE} folder moved successfully. C:\Users\Nicole\AppData\Local\{F3DB769C-BE10-4F5E-BFF7-52CF647945F0} folder moved successfully. C:\Users\Nicole\AppData\Local\{F4289406-28D7-4844-81C1-05722E62D827} folder moved successfully. C:\Users\Nicole\AppData\Local\{F42FD515-9D15-4B7C-BAAE-F356F37512A8} folder moved successfully. C:\Users\Nicole\AppData\Local\{F5552CF4-D21A-4822-9D9B-96A7FC0BE124} folder moved successfully. C:\Users\Nicole\AppData\Local\{F5ED2C3C-F348-4120-8E7B-72D94F55C474} folder moved successfully. C:\Users\Nicole\AppData\Local\{F6EEA8CA-E3F6-481F-A6E7-952AC94A4D3A} folder moved successfully. C:\Users\Nicole\AppData\Local\{F8421828-29E5-4400-A6C8-AC7AEE3E9E55} folder moved successfully. C:\Users\Nicole\AppData\Local\{F8987CA4-8B56-4137-A879-AE78DAE67E42} folder moved successfully. C:\Users\Nicole\AppData\Local\{F8F9DAD9-2F7C-40A2-961E-49701091CE10} folder moved successfully. C:\Users\Nicole\AppData\Local\{F908F946-27E7-4FBD-997E-8F816255A090} folder moved successfully. C:\Users\Nicole\AppData\Local\{F90AA6A1-668E-441B-8E90-121097F3F97D} folder moved successfully. C:\Users\Nicole\AppData\Local\{F9213F27-3CBE-4C83-8033-32AFAAAD392A} folder moved successfully. C:\Users\Nicole\AppData\Local\{FA026F94-0F02-4EFC-BF70-ACA940EA08AE} folder moved successfully. C:\Users\Nicole\AppData\Local\{FD9E97BA-021D-440A-9E04-549C6221D77D} folder moved successfully. C:\Users\Nicole\AppData\Local\{FDB57224-5685-45BA-BA76-A0313E339916} folder moved successfully. C:\Users\Nicole\AppData\Local\{FDDE3237-EBC6-40AD-A031-BAED954DA6B5} folder moved successfully. C:\Users\Nicole\AppData\Local\{FDE69325-4933-4EAF-85CE-EFC774F16993} folder moved successfully. C:\Users\Nicole\AppData\Local\{FE75E0BF-1AC4-440C-BFDB-D2F8ED912378} folder moved successfully. C:\Users\Nicole\AppData\Local\{FEC012D8-441C-4637-BF62-2746E169B519} folder moved successfully. C:\Users\Nicole\AppData\Local\{FEC48700-49D9-4B7C-A103-B4FB09AE4895} folder moved successfully. C:\Users\Nicole\AppData\Local\{FED6FA3C-0423-486B-9237-B09D18E72412} folder moved successfully. C:\Users\Nicole\AppData\Local\{FEFDA584-20CE-4ECD-B3D6-CCBC1304AD57} folder moved successfully. C:\Users\Nicole\AppData\Local\Temp\SkypeSetup.exe moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\tmp folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\muffin folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\host folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\8 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\63 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\62 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\61 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\60 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\6 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\59 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\58 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\57 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\56 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\55 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\54 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\53 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\51 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\50 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\5 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\49 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\48 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\47 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\46 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\45 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\44 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\43 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\42 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\41 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\40 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\4 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\39 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\38 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\37 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\36 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\35 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\34 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\33 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\32 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\31 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\30 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\3 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\29 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\28 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\27 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\26 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\25 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\24 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\23 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\22 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\21 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\20 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\2 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\19 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\17 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\16 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\15 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\14 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\13 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\12 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\11 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\10 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\0 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0 folder moved successfully. C:\Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache folder moved successfully. File/Folder C:\Users\Nicole\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk not found. < ipconfig /flushdns /c > Windows-IP-Konfiguration Der DNS-Aufl”sungscache wurde geleert. C:\Users\Nicole\Desktop\cmd.bat deleted successfully. C:\Users\Nicole\Desktop\cmd.txt deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Nicole ->Temp folder emptied: 211481145 bytes ->Temporary Internet Files folder emptied: 1110663500 bytes ->FireFox cache emptied: 828982007 bytes ->Apple Safari cache emptied: 0 bytes ->Flash cache emptied: 425341 bytes User: Public %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 159754978 bytes RecycleBin emptied: 27215637 bytes Total Files Cleaned = 2.230,00 mb OTL by OldTimer - Version 3.2.61.3 log created on 09102012_144503 Files\Folders moved on Reboot... PendingFileRenameOperations files... Registry entries deleted on Reboot... Code:
ATTFilter Malwarebytes Anti-Malware (Test) 1.62.0.1300 www.malwarebytes.org Datenbank Version: v2012.09.10.03 Windows 7 Service Pack 1 x86 NTFS (Abgesichertenmodus/Netzwerkfähig) Internet Explorer 9.0.8112.16421 Nicole :: NICOLE-PC [Administrator] Schutz: Deaktiviert 10.09.2012 15:04:49 mbam-log-2012-09-10 (15-04-49).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|) Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 435062 Laufzeit: 1 Stunde(n), 15 Minute(n), 45 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 0 (Keine bösartigen Objekte gefunden) (Ende) Code:
ATTFilter # AdwCleaner v2.001 - Datei am 09/10/2012 um 16:25:12 erstellt # Aktualisiert am 09/09/2012 von Xplode # Betriebssystem : Windows 7 Professional Service Pack 1 (32 bits) # Benutzer : Nicole - NICOLE-PC # Bootmodus : Abgesicherter Modus mit Netzwerkunterstützung # Ausgeführt unter : C:\Users\Nicole\Desktop\adwcleaner.exe # Option [Suche] **** [Dienste] **** ***** [Dateien / Ordner] ***** Datei Gefunden : C:\Program Files\Mozilla Firefox\searchplugins\avg-secure-search.xml Ordner Gefunden : C:\Program Files\AVG Secure Search Ordner Gefunden : C:\Program Files\Common Files\AVG Secure Search Ordner Gefunden : C:\ProgramData\AVG Secure Search Ordner Gefunden : C:\Users\Nicole\AppData\Local\AVG Secure Search Ordner Gefunden : C:\Users\Nicole\AppData\Local\Conduit Ordner Gefunden : C:\Users\Nicole\AppData\LocalLow\AVG Secure Search Ordner Gefunden : C:\Users\Nicole\AppData\LocalLow\Conduit Ordner Gefunden : C:\Users\Nicole\AppData\LocalLow\PriceGong Ordner Gefunden : C:\Users\Nicole\AppData\Roaming\Mozilla\Firefox\Profiles\lhexzq3j.default\Conduit Ordner Gefunden : C:\Users\Nicole\AppData\Roaming\Mozilla\Firefox\Profiles\lhexzq3j.default\ConduitCommon Ordner Gefunden : C:\Users\Nicole\AppData\Roaming\Mozilla\Firefox\Profiles\lhexzq3j.default\CT2319825 Ordner Gefunden : C:\Users\Nicole\AppData\Roaming\Mozilla\Firefox\Profiles\lhexzq3j.default\extensions\{40c3cc16-7269-4b32-9531-17f2950fb06f} ***** [Registrierungsdatenbank] ***** Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\PriceGong Schlüssel Gefunden : HKCU\Software\AVG Secure Search Schlüssel Gefunden : HKCU\Software\IGearSettings Schlüssel Gefunden : HKCU\Software\Iminent Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233} Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233} Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706} Schlüssel Gefunden : HKCU\Software\Softonic Schlüssel Gefunden : HKLM\Software\AVG Secure Search Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Conduit.Engine Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\viprotocol Schlüssel Gefunden : HKLM\SOFTWARE\Classes\S Schlüssel Gefunden : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi Schlüssel Gefunden : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Toolbar.CT2319825 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Toolbar.CT2719325 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE Schlüssel Gefunden : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1 Schlüssel Gefunden : HKLM\Software\Iminent Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08} Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706} Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233} Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC} Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706} Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search Schlüssel Gefunden : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin Schlüssel Gefunden : HKLM\SOFTWARE\Software Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}] Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}] ***** [Internet Browser] ***** -\\ Internet Explorer v9.0.8112.16421 [OK] Die Registrierungsdatenbank ist sauber. -\\ Mozilla Firefox v15.0 (de) Profilname : default Datei : C:\Users\Nicole\AppData\Roaming\Mozilla\Firefox\Profiles\lhexzq3j.default\prefs.js Gefunden : user_pref("CT2319825..clientLogIsEnabled", false); Gefunden : user_pref("CT2319825..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...] Gefunden : user_pref("CT2319825..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...] Gefunden : user_pref("CT2319825.ALLOW_SHOWING_HIDDEN_TOOLBAR", false); Gefunden : user_pref("CT2319825.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx"); Gefunden : user_pref("CT2319825.CTID", "ct2319825"); Gefunden : user_pref("CT2319825.CurrentServerDate", "9-9-2012"); Gefunden : user_pref("CT2319825.DialogsAlignMode", "LTR"); Gefunden : user_pref("CT2319825.DialogsGetterLastCheckTime", "Sat Sep 08 2012 22:01:00 GMT+0200"); Gefunden : user_pref("CT2319825.DownloadReferralCookieData", ""); Gefunden : user_pref("CT2319825.EMailNotifierPollDate", "Mon May 16 2011 16:33:00 GMT+0200"); Gefunden : user_pref("CT2319825.FeedPollDate11908299", "Mon May 16 2011 16:07:26 GMT+0200"); Gefunden : user_pref("CT2319825.FirstServerDate", "16-5-2011"); Gefunden : user_pref("CT2319825.FirstTime", true); Gefunden : user_pref("CT2319825.FirstTimeFF3", true); Gefunden : user_pref("CT2319825.FixPageNotFoundErrors", true); Gefunden : user_pref("CT2319825.GroupingServerCheckInterval", 1440); Gefunden : user_pref("CT2319825.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/"); Gefunden : user_pref("CT2319825.HasUserGlobalKeys", true); Gefunden : user_pref("CT2319825.Initialize", true); Gefunden : user_pref("CT2319825.InitializeCommonPrefs", true); Gefunden : user_pref("CT2319825.InstallationAndCookieDataSentCount", 3); Gefunden : user_pref("CT2319825.InstallationType", "ConduitIntegration"); Gefunden : user_pref("CT2319825.InstalledDate", "Mon May 16 2011 15:07:23 GMT+0200"); Gefunden : user_pref("CT2319825.IsGrouping", false); Gefunden : user_pref("CT2319825.IsMulticommunity", false); Gefunden : user_pref("CT2319825.IsOpenThankYouPage", false); Gefunden : user_pref("CT2319825.IsOpenUninstallPage", true); Gefunden : user_pref("CT2319825.LanguagePackLastCheckTime", "Mon May 16 2011 15:07:24 GMT+0200"); Gefunden : user_pref("CT2319825.LanguagePackReloadIntervalMM", 1440); Gefunden : user_pref("CT2319825.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...] Gefunden : user_pref("CT2319825.LastLogin_3.12.2.3", "Wed Jun 06 2012 18:53:32 GMT+0200"); Gefunden : user_pref("CT2319825.LastLogin_3.13.0.6", "Sun Jul 15 2012 21:27:41 GMT+0200"); Gefunden : user_pref("CT2319825.LastLogin_3.14.1.0", "Thu Aug 30 2012 18:28:33 GMT+0200"); Gefunden : user_pref("CT2319825.LastLogin_3.15.1.0", "Sun Sep 09 2012 21:41:59 GMT+0200"); Gefunden : user_pref("CT2319825.LastLogin_3.3.3.2", "Mon May 16 2011 15:07:24 GMT+0200"); Gefunden : user_pref("CT2319825.LatestVersion", "3.15.1.0"); Gefunden : user_pref("CT2319825.Locale", "de"); Gefunden : user_pref("CT2319825.MCDetectTooltipHeight", "83"); Gefunden : user_pref("CT2319825.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1"); Gefunden : user_pref("CT2319825.MCDetectTooltipWidth", "295"); Gefunden : user_pref("CT2319825.MyStuffEnabledAtInstallation", true); Gefunden : user_pref("CT2319825.RadioIsPodcast", false); Gefunden : user_pref("CT2319825.RadioMediaID", "11949532"); Gefunden : user_pref("CT2319825.RadioMediaType", "Media Player"); Gefunden : user_pref("CT2319825.RadioMenuSelectedID", "EBRadioMenu_CT231982511949532"); Gefunden : user_pref("CT2319825.RadioStationName", "1Live"); Gefunden : user_pref("CT2319825.RadioStationURL", "hxxp://gffstream.ic.llnwd.net/stream/gffstream_stream_wdr_ei[...] Gefunden : user_pref("CT2319825.SearchFromAddressBarIsInit", true); Gefunden : user_pref("CT2319825.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT231[...] Gefunden : user_pref("CT2319825.SearchInNewTabEnabled", true); Gefunden : user_pref("CT2319825.SearchInNewTabIntervalMM", 1440); Gefunden : user_pref("CT2319825.SearchInNewTabLastCheckTime", "Mon May 16 2011 15:07:24 GMT+0200"); Gefunden : user_pref("CT2319825.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...] Gefunden : user_pref("CT2319825.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...] Gefunden : user_pref("CT2319825.ServiceMapLastCheckTime", "Sun Sep 09 2012 21:41:50 GMT+0200"); Gefunden : user_pref("CT2319825.SettingsLastCheckTime", "Mon May 16 2011 15:07:23 GMT+0200"); Gefunden : user_pref("CT2319825.SettingsLastUpdate", "1300873232"); Gefunden : user_pref("CT2319825.ThirdPartyComponentsInterval", 504); Gefunden : user_pref("CT2319825.ThirdPartyComponentsLastCheck", "Mon May 16 2011 15:07:23 GMT+0200"); Gefunden : user_pref("CT2319825.ThirdPartyComponentsLastUpdate", "1255344657"); Gefunden : user_pref("CT2319825.ToolbarShrinkedFromSetup", false); Gefunden : user_pref("CT2319825.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2319825"); Gefunden : user_pref("CT2319825.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...] Gefunden : user_pref("CT2319825.UserID", "UN36849400186144637"); Gefunden : user_pref("CT2319825.WeatherNetwork", ""); Gefunden : user_pref("CT2319825.WeatherPollDate", "Mon May 16 2011 16:07:25 GMT+0200"); Gefunden : user_pref("CT2319825.WeatherUnit", "C"); Gefunden : user_pref("CT2319825.alertChannelId", "715912"); Gefunden : user_pref("CT2319825.backendstorage.id", "39373130353538"); Gefunden : user_pref("CT2319825.ct2319825.DialogsAlignMode", "LTR"); Gefunden : user_pref("CT2319825.ct2319825.InvalidateCache", false); Gefunden : user_pref("CT2319825.ct2319825.LanguagePackLastCheckTime", "Sun Sep 09 2012 10:47:37 GMT+0200"); Gefunden : user_pref("CT2319825.ct2319825.Locale", "de"); Gefunden : user_pref("CT2319825.ct2319825.RadioLastCheckTime", "Mon May 16 2011 15:07:25 GMT+0200"); Gefunden : user_pref("CT2319825.ct2319825.RadioLastUpdateIPServer", "3"); Gefunden : user_pref("CT2319825.ct2319825.RadioLastUpdateServer", "129224641269630000"); Gefunden : user_pref("CT2319825.ct2319825.SearchInNewTabLastCheckTime", "Sun Sep 09 2012 10:47:23 GMT+0200"); Gefunden : user_pref("CT2319825.ct2319825.SettingsLastCheckTime", "Sun Sep 09 2012 21:41:51 GMT+0200"); Gefunden : user_pref("CT2319825.ct2319825.SettingsLastUpdate", "1346943349"); Gefunden : user_pref("CT2319825.ct2319825.ThirdPartyComponentsLastCheck", "Mon May 16 2011 15:07:23 GMT+0200"); Gefunden : user_pref("CT2319825.ct2319825.ThirdPartyComponentsLastUpdate", "1255344657"); Gefunden : user_pref("CT2319825.ct2319825.globalFirstTimeInfoLastCheckTime", "Mon May 16 2011 15:07:26 GMT+0200[...] Gefunden : user_pref("CT2319825.ct2319825.toolbarAppMetaDataLastCheckTime", "Sun Sep 09 2012 10:47:37 GMT+0200"[...] Gefunden : user_pref("CT2319825.ct2319825.toolbarContextMenuLastCheckTime", "Mon May 16 2011 15:07:26 GMT+0200"[...] Gefunden : user_pref("CT2319825.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...] Gefunden : user_pref("CT2319825.globalFirstTimeInfoLastCheckTime", "Mon May 16 2011 15:07:24 GMT+0200"); Gefunden : user_pref("CT2319825.homepageProtectorEnableByLogin", true); Gefunden : user_pref("CT2319825.initDone", true); Gefunden : user_pref("CT2319825.isAppTrackingManagerOn", true); Gefunden : user_pref("CT2319825.myStuffEnabled", true); Gefunden : user_pref("CT2319825.myStuffPublihserMinWidth", 400); Gefunden : user_pref("CT2319825.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...] Gefunden : user_pref("CT2319825.myStuffServiceIntervalMM", 1440); Gefunden : user_pref("CT2319825.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...] Gefunden : user_pref("CT2319825.revertSettingsEnabled", true); Gefunden : user_pref("CT2319825.searchProtectorDialogDelayInSec", 10); Gefunden : user_pref("CT2319825.searchProtectorEnableByLogin", true); Gefunden : user_pref("CT2319825.testingCtid", ""); Gefunden : user_pref("CT2319825.toolbarAppMetaDataLastCheckTime", "Mon May 16 2011 15:07:23 GMT+0200"); Gefunden : user_pref("CT2319825.toolbarContextMenuLastCheckTime", "Mon May 16 2011 15:07:24 GMT+0200"); Gefunden : user_pref("CT2319825.usagesFlag", 2); Gefunden : user_pref("CT2719325.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx"); Gefunden : user_pref("CT2719325.CTID", "CT2719325"); Gefunden : user_pref("CT2719325.CurrentServerDate", "6-8-2010"); Gefunden : user_pref("CT2719325.DialogsAlignMode", "LTR"); Gefunden : user_pref("CT2719325.DownloadReferralCookieData", ""); Gefunden : user_pref("CT2719325.EMailNotifierPollDate", "Fri Aug 06 2010 09:51:53 GMT+0200"); Gefunden : user_pref("CT2719325.FeedLastCount7577869347469948784", 467); Gefunden : user_pref("CT2719325.FeedPollDate129255010923663813", "Fri Aug 06 2010 09:51:53 GMT+0200"); Gefunden : user_pref("CT2719325.FeedPollDate129255010923663819", "Fri Aug 06 2010 09:51:53 GMT+0200"); Gefunden : user_pref("CT2719325.FeedPollDate129255010923663825", "Fri Aug 06 2010 09:51:53 GMT+0200"); Gefunden : user_pref("CT2719325.FeedPollDate129255010923663831", "Fri Aug 06 2010 09:51:53 GMT+0200"); Gefunden : user_pref("CT2719325.FeedPollDate129255010923663837", "Fri Aug 06 2010 09:51:53 GMT+0200"); Gefunden : user_pref("CT2719325.FeedPollDate129255010923820093", "Fri Aug 06 2010 09:51:53 GMT+0200"); Gefunden : user_pref("CT2719325.FeedPollDate129255010923820099", "Fri Aug 06 2010 09:51:53 GMT+0200"); Gefunden : user_pref("CT2719325.FeedPollDate129255010923820105", "Fri Aug 06 2010 09:51:53 GMT+0200"); Gefunden : user_pref("CT2719325.FeedPollDate129255010923820111", "Fri Aug 06 2010 09:51:54 GMT+0200"); Gefunden : user_pref("CT2719325.FeedPollDate129255010923820117", "Fri Aug 06 2010 09:51:54 GMT+0200"); Gefunden : user_pref("CT2719325.FeedPollDate129255010923820123", "Fri Aug 06 2010 09:51:54 GMT+0200"); Gefunden : user_pref("CT2719325.FeedPollDate129255010923820129", "Fri Aug 06 2010 09:51:54 GMT+0200"); Gefunden : user_pref("CT2719325.FeedPollDate129255010923820135", "Fri Aug 06 2010 09:51:54 GMT+0200"); Gefunden : user_pref("CT2719325.FeedPollDate129255010923820141", "Fri Aug 06 2010 09:51:54 GMT+0200"); Gefunden : user_pref("CT2719325.FeedPollDate129255010923820147", "Fri Aug 06 2010 09:51:54 GMT+0200"); Gefunden : user_pref("CT2719325.FeedPollDate129255010923820153", "Fri Aug 06 2010 09:51:54 GMT+0200"); Gefunden : user_pref("CT2719325.FeedPollDate129255010923820159", "Fri Aug 06 2010 09:51:54 GMT+0200"); Gefunden : user_pref("CT2719325.FeedPollDate129255010923820165", "Fri Aug 06 2010 09:51:54 GMT+0200"); Gefunden : user_pref("CT2719325.FeedPollDate129255010923820171", "Fri Aug 06 2010 09:51:55 GMT+0200"); Gefunden : user_pref("CT2719325.FeedPollDate129255010923820177", "Fri Aug 06 2010 09:51:55 GMT+0200"); Gefunden : user_pref("CT2719325.FeedPollDate129255010923820183", "Fri Aug 06 2010 09:51:55 GMT+0200"); Gefunden : user_pref("CT2719325.FeedPollDate129255010923820189", "Fri Aug 06 2010 09:51:55 GMT+0200"); Gefunden : user_pref("CT2719325.FeedPollDate129255010923820195", "Fri Aug 06 2010 09:51:55 GMT+0200"); Gefunden : user_pref("CT2719325.FeedPollDate129255010923820201", "Fri Aug 06 2010 09:51:55 GMT+0200"); Gefunden : user_pref("CT2719325.FeedPollDate129255010923820207", "Fri Aug 06 2010 09:51:55 GMT+0200"); Gefunden : user_pref("CT2719325.FeedPollDate129255010923820213", "Fri Aug 06 2010 09:51:55 GMT+0200"); Gefunden : user_pref("CT2719325.FeedTTL129255010923663825", 5); Gefunden : user_pref("CT2719325.FeedTTL129255010923663831", 5); Gefunden : user_pref("CT2719325.FeedTTL129255010923820111", 2); Gefunden : user_pref("CT2719325.FeedTTL129255010923820141", 5); Gefunden : user_pref("CT2719325.FeedTTL129255010923820153", 30); Gefunden : user_pref("CT2719325.FirstServerDate", "6-8-2010"); Gefunden : user_pref("CT2719325.FirstTime", true); Gefunden : user_pref("CT2719325.FirstTimeFF3", true); Gefunden : user_pref("CT2719325.FirstTimeSettingsDone", true); Gefunden : user_pref("CT2719325.FixPageNotFoundErrors", true); Gefunden : user_pref("CT2719325.GroupingServerCheckInterval", 1440); Gefunden : user_pref("CT2719325.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/"); Gefunden : user_pref("CT2719325.Initialize", true); Gefunden : user_pref("CT2719325.InitializeCommonPrefs", true); Gefunden : user_pref("CT2719325.InstallationAndCookieDataSentCount", 1); Gefunden : user_pref("CT2719325.InstallationType", "UnknownIntegration"); Gefunden : user_pref("CT2719325.InstalledDate", "Fri Aug 06 2010 09:51:52 GMT+0200"); Gefunden : user_pref("CT2719325.InvalidateCache", false); Gefunden : user_pref("CT2719325.IsGrouping", false); Gefunden : user_pref("CT2719325.IsMulticommunity", false); Gefunden : user_pref("CT2719325.IsOpenThankYouPage", false); Gefunden : user_pref("CT2719325.IsOpenUninstallPage", true); Gefunden : user_pref("CT2719325.LanguagePackLastCheckTime", "Fri Aug 06 2010 09:51:55 GMT+0200"); Gefunden : user_pref("CT2719325.LanguagePackReloadIntervalMM", 1440); Gefunden : user_pref("CT2719325.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...] Gefunden : user_pref("CT2719325.LastLogin_2.7.1.3", "Fri Aug 06 2010 09:51:53 GMT+0200"); Gefunden : user_pref("CT2719325.LatestVersion", "2.1.0.18"); Gefunden : user_pref("CT2719325.Locale", "de"); Gefunden : user_pref("CT2719325.LoginCache", 4); Gefunden : user_pref("CT2719325.MCDetectTooltipHeight", "83"); Gefunden : user_pref("CT2719325.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1"); Gefunden : user_pref("CT2719325.MCDetectTooltipWidth", "295"); Gefunden : user_pref("CT2719325.RadioIsPodcast", false); Gefunden : user_pref("CT2719325.RadioLastCheckTime", "Fri Aug 06 2010 09:51:54 GMT+0200"); Gefunden : user_pref("CT2719325.RadioLastUpdateIPServer", "3"); Gefunden : user_pref("CT2719325.RadioLastUpdateServer", "129246150971600000"); Gefunden : user_pref("CT2719325.RadioMediaID", "21056683"); Gefunden : user_pref("CT2719325.RadioMediaType", "Media Player"); Gefunden : user_pref("CT2719325.RadioMenuSelectedID", "EBRadioMenu_CT271932521056683"); Gefunden : user_pref("CT2719325.RadioStationName", "MDR%20Info"); Gefunden : user_pref("CT2719325.RadioStationURL", "hxxp://mdr.streamfarm.net/cms/_vm100/radios/mdr/live/info_cm[...] Gefunden : user_pref("CT2719325.SearchEngine", "Suchen||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TER[...] Gefunden : user_pref("CT2719325.SearchFromAddressBarIsInit", true); Gefunden : user_pref("CT2719325.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT271[...] Gefunden : user_pref("CT2719325.SearchInNewTabEnabled", true); Gefunden : user_pref("CT2719325.SearchInNewTabIntervalMM", 1440); Gefunden : user_pref("CT2719325.SearchInNewTabLastCheckTime", "Fri Aug 06 2010 09:51:54 GMT+0200"); Gefunden : user_pref("CT2719325.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...] Gefunden : user_pref("CT2719325.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...] Gefunden : user_pref("CT2719325.SettingsCheckIntervalMin", 120); Gefunden : user_pref("CT2719325.SettingsLastCheckTime", "Fri Aug 06 2010 09:51:51 GMT+0200"); Gefunden : user_pref("CT2719325.SettingsLastUpdate", "1281027477"); Gefunden : user_pref("CT2719325.ThirdPartyComponentsInterval", 504); Gefunden : user_pref("CT2719325.ThirdPartyComponentsLastCheck", "Fri Aug 06 2010 09:51:51 GMT+0200"); Gefunden : user_pref("CT2719325.ThirdPartyComponentsLastUpdate", "1255348257"); Gefunden : user_pref("CT2719325.TrusteLinkUrl", "hxxp://www.truste.org/pvr.php?page=validate&softwareProgramId=[...] Gefunden : user_pref("CT2719325.Uninstall", true); Gefunden : user_pref("CT2719325.UserID", "UN18873254278814122"); Gefunden : user_pref("CT2719325.WeatherNetwork", ""); Gefunden : user_pref("CT2719325.WeatherPollDate", "Fri Aug 06 2010 09:51:53 GMT+0200"); Gefunden : user_pref("CT2719325.WeatherUnit", "C"); Gefunden : user_pref("CT2719325.alertChannelId", "1111610"); Gefunden : user_pref("CT2719325.clientLogIsEnabled", true); Gefunden : user_pref("CT2719325.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asm[...] Gefunden : user_pref("CT2719325.myStuffEnabled", true); Gefunden : user_pref("CT2719325.myStuffPublihserMinWidth", 400); Gefunden : user_pref("CT2719325.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...] Gefunden : user_pref("CT2719325.myStuffServiceIntervalMM", 1440); Gefunden : user_pref("CT2719325.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...] Gefunden : user_pref("CT2719325.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Reg[...] Gefunden : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/ct2319825/CT2319825[...] Gefunden : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/715912/711772/DE", "\"1-194[...] Gefunden : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/DE", "\"0\"")[...] Gefunden : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2319825", [...] Gefunden : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=ct2319825", [...] Gefunden : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...] Gefunden : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...] Gefunden : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...] Gefunden : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...] Gefunden : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...] Gefunden : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3[...] Gefunden : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12[...] Gefunden : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.13[...] Gefunden : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.14[...] Gefunden : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.15[...] Gefunden : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.[...] Gefunden : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2319825",[...] Gefunden : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "63[...] Gefunden : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2319825/CT2319825[...] Gefunden : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/ct2319825/CT2319825[...] Gefunden : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/equalizer[...] Gefunden : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/minimize.[...] Gefunden : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/play.gif"[...] Gefunden : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/stop.gif"[...] Gefunden : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/vol.gif",[...] Gefunden : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=EB_LOCALE",[...] Gefunden : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=de", "\"aa6[...] Gefunden : user_pref("CommunityToolbar.EngineHiddenByUser", true); Gefunden : user_pref("CommunityToolbar.EngineOwner", ""); Gefunden : user_pref("CommunityToolbar.EngineOwnerGuid", "{40c3cc16-7269-4b32-9531-17f2950fb06f}"); Gefunden : user_pref("CommunityToolbar.EngineOwnerToolbarId", "winload"); Gefunden : user_pref("CommunityToolbar.IsEngineShown", false); Gefunden : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true); Gefunden : user_pref("CommunityToolbar.OriginalEngineOwner", "CT2319825"); Gefunden : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{40c3cc16-7269-4b32-9531-17f2950fb06f}"); Gefunden : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "winload"); Gefunden : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.pr[...] Gefunden : user_pref("CommunityToolbar.ToolbarsList", "CT2719325,CT2319825"); Gefunden : user_pref("CommunityToolbar.ToolbarsList2", "CT2719325,CT2319825"); Gefunden : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Mon May 16 2011 15:07:25 GMT+02[...] Gefunden : user_pref("CommunityToolbar.alert.alertInfoInterval", 60); Gefunden : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Fri Jun 24 2011 18:01:09 GMT+0200"); Gefunden : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com"); Gefunden : user_pref("CommunityToolbar.alert.firstTimeAlertShown", true); Gefunden : user_pref("CommunityToolbar.alert.locale", "en"); Gefunden : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440); Gefunden : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Fri Jun 24 2011 20:11:06 GMT+0200"); Gefunden : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559"); Gefunden : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20); Gefunden : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com"); Gefunden : user_pref("CommunityToolbar.alert.showTrayIcon", false); Gefunden : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300); Gefunden : user_pref("CommunityToolbar.alert.userId", "e0813b54-584c-4c34-8efe-033ac35bbb06"); Gefunden : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Mon May 16 2011 15:07:24 GMT+0200"); Gefunden : user_pref("CommunityToolbar.globalUserId", "4e221137-9ef3-4600-8031-e1f81e752494"); Gefunden : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true); Gefunden : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true); Gefunden : user_pref("CommunityToolbar.killedEngine", true); Gefunden : user_pref("CommunityToolbar.undefined", ""); -\\ Google Chrome v [Version kann nicht ermittelt werden] Datei : C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Preferences [OK] Die Datei ist sauber. ************************* AdwCleaner[R1].txt - [29128 octets] - [10/09/2012 16:25:12] ########## EOF - C:\AdwCleaner[R1].txt - [29189 octets] ########## Code:
ATTFilter # AdwCleaner v2.001 - Datei am 09/10/2012 um 16:26:03 erstellt # Aktualisiert am 09/09/2012 von Xplode # Betriebssystem : Windows 7 Professional Service Pack 1 (32 bits) # Benutzer : Nicole - NICOLE-PC # Bootmodus : Abgesicherter Modus mit Netzwerkunterstützung # Ausgeführt unter : C:\Users\Nicole\Desktop\adwcleaner.exe # Option [Löschen] **** [Dienste] **** ***** [Dateien / Ordner] ***** Datei Gelöscht : C:\Program Files\Mozilla Firefox\searchplugins\avg-secure-search.xml Ordner Gelöscht : C:\Program Files\AVG Secure Search Ordner Gelöscht : C:\Program Files\Common Files\AVG Secure Search Ordner Gelöscht : C:\ProgramData\AVG Secure Search Ordner Gelöscht : C:\Users\Nicole\AppData\Local\AVG Secure Search Ordner Gelöscht : C:\Users\Nicole\AppData\Local\Conduit Ordner Gelöscht : C:\Users\Nicole\AppData\LocalLow\AVG Secure Search Ordner Gelöscht : C:\Users\Nicole\AppData\LocalLow\Conduit Ordner Gelöscht : C:\Users\Nicole\AppData\LocalLow\PriceGong Ordner Gelöscht : C:\Users\Nicole\AppData\Roaming\Mozilla\Firefox\Profiles\lhexzq3j.default\Conduit Ordner Gelöscht : C:\Users\Nicole\AppData\Roaming\Mozilla\Firefox\Profiles\lhexzq3j.default\ConduitCommon Ordner Gelöscht : C:\Users\Nicole\AppData\Roaming\Mozilla\Firefox\Profiles\lhexzq3j.default\CT2319825 Ordner Gelöscht : C:\Users\Nicole\AppData\Roaming\Mozilla\Firefox\Profiles\lhexzq3j.default\extensions\{40c3cc16-7269-4b32-9531-17f2950fb06f} ***** [Registrierungsdatenbank] ***** Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\PriceGong Schlüssel Gelöscht : HKCU\Software\AVG Secure Search Schlüssel Gelöscht : HKCU\Software\IGearSettings Schlüssel Gelöscht : HKCU\Software\Iminent Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706} Schlüssel Gelöscht : HKCU\Software\Softonic Schlüssel Gelöscht : HKLM\Software\AVG Secure Search Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Conduit.Engine Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\viprotocol Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\S Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CT2319825 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CT2719325 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1 Schlüssel Gelöscht : HKLM\Software\Iminent Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search Schlüssel Gelöscht : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin Schlüssel Gelöscht : HKLM\SOFTWARE\Software Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}] ***** [Internet Browser] ***** -\\ Internet Explorer v9.0.8112.16421 Wiederhergestellt : [HKCU\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope] Wiederhergestellt : [HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes - DefaultScope] Wiederhergestellt : [HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope] Wiederhergestellt : [HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope] Wiederhergestellt : [HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope] -\\ Mozilla Firefox v15.0 (de) Profilname : default Datei : C:\Users\Nicole\AppData\Roaming\Mozilla\Firefox\Profiles\lhexzq3j.default\prefs.js Gelöscht : user_pref("CT2319825..clientLogIsEnabled", false); Gelöscht : user_pref("CT2319825..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...] Gelöscht : user_pref("CT2319825..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...] Gelöscht : user_pref("CT2319825.ALLOW_SHOWING_HIDDEN_TOOLBAR", false); Gelöscht : user_pref("CT2319825.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx"); Gelöscht : user_pref("CT2319825.CTID", "ct2319825"); Gelöscht : user_pref("CT2319825.CurrentServerDate", "9-9-2012"); Gelöscht : user_pref("CT2319825.DialogsAlignMode", "LTR"); Gelöscht : user_pref("CT2319825.DialogsGetterLastCheckTime", "Sat Sep 08 2012 22:01:00 GMT+0200"); Gelöscht : user_pref("CT2319825.DownloadReferralCookieData", ""); Gelöscht : user_pref("CT2319825.EMailNotifierPollDate", "Mon May 16 2011 16:33:00 GMT+0200"); Gelöscht : user_pref("CT2319825.FeedPollDate11908299", "Mon May 16 2011 16:07:26 GMT+0200"); Gelöscht : user_pref("CT2319825.FirstServerDate", "16-5-2011"); Gelöscht : user_pref("CT2319825.FirstTime", true); Gelöscht : user_pref("CT2319825.FirstTimeFF3", true); Gelöscht : user_pref("CT2319825.FixPageNotFoundErrors", true); Gelöscht : user_pref("CT2319825.GroupingServerCheckInterval", 1440); Gelöscht : user_pref("CT2319825.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/"); Gelöscht : user_pref("CT2319825.HasUserGlobalKeys", true); Gelöscht : user_pref("CT2319825.Initialize", true); Gelöscht : user_pref("CT2319825.InitializeCommonPrefs", true); Gelöscht : user_pref("CT2319825.InstallationAndCookieDataSentCount", 3); Gelöscht : user_pref("CT2319825.InstallationType", "ConduitIntegration"); Gelöscht : user_pref("CT2319825.InstalledDate", "Mon May 16 2011 15:07:23 GMT+0200"); Gelöscht : user_pref("CT2319825.IsGrouping", false); Gelöscht : user_pref("CT2319825.IsMulticommunity", false); Gelöscht : user_pref("CT2319825.IsOpenThankYouPage", false); Gelöscht : user_pref("CT2319825.IsOpenUninstallPage", true); Gelöscht : user_pref("CT2319825.LanguagePackLastCheckTime", "Mon May 16 2011 15:07:24 GMT+0200"); Gelöscht : user_pref("CT2319825.LanguagePackReloadIntervalMM", 1440); Gelöscht : user_pref("CT2319825.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...] Gelöscht : user_pref("CT2319825.LastLogin_3.12.2.3", "Wed Jun 06 2012 18:53:32 GMT+0200"); Gelöscht : user_pref("CT2319825.LastLogin_3.13.0.6", "Sun Jul 15 2012 21:27:41 GMT+0200"); Gelöscht : user_pref("CT2319825.LastLogin_3.14.1.0", "Thu Aug 30 2012 18:28:33 GMT+0200"); Gelöscht : user_pref("CT2319825.LastLogin_3.15.1.0", "Sun Sep 09 2012 21:41:59 GMT+0200"); Gelöscht : user_pref("CT2319825.LastLogin_3.3.3.2", "Mon May 16 2011 15:07:24 GMT+0200"); Gelöscht : user_pref("CT2319825.LatestVersion", "3.15.1.0"); Gelöscht : user_pref("CT2319825.Locale", "de"); Gelöscht : user_pref("CT2319825.MCDetectTooltipHeight", "83"); Gelöscht : user_pref("CT2319825.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1"); Gelöscht : user_pref("CT2319825.MCDetectTooltipWidth", "295"); Gelöscht : user_pref("CT2319825.MyStuffEnabledAtInstallation", true); Gelöscht : user_pref("CT2319825.RadioIsPodcast", false); Gelöscht : user_pref("CT2319825.RadioMediaID", "11949532"); Gelöscht : user_pref("CT2319825.RadioMediaType", "Media Player"); Gelöscht : user_pref("CT2319825.RadioMenuSelectedID", "EBRadioMenu_CT231982511949532"); Gelöscht : user_pref("CT2319825.RadioStationName", "1Live"); Gelöscht : user_pref("CT2319825.RadioStationURL", "hxxp://gffstream.ic.llnwd.net/stream/gffstream_stream_wdr_ei[...] Gelöscht : user_pref("CT2319825.SearchFromAddressBarIsInit", true); Gelöscht : user_pref("CT2319825.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT231[...] Gelöscht : user_pref("CT2319825.SearchInNewTabEnabled", true); Gelöscht : user_pref("CT2319825.SearchInNewTabIntervalMM", 1440); Gelöscht : user_pref("CT2319825.SearchInNewTabLastCheckTime", "Mon May 16 2011 15:07:24 GMT+0200"); Gelöscht : user_pref("CT2319825.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...] Gelöscht : user_pref("CT2319825.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...] Gelöscht : user_pref("CT2319825.ServiceMapLastCheckTime", "Sun Sep 09 2012 21:41:50 GMT+0200"); Gelöscht : user_pref("CT2319825.SettingsLastCheckTime", "Mon May 16 2011 15:07:23 GMT+0200"); Gelöscht : user_pref("CT2319825.SettingsLastUpdate", "1300873232"); Gelöscht : user_pref("CT2319825.ThirdPartyComponentsInterval", 504); Gelöscht : user_pref("CT2319825.ThirdPartyComponentsLastCheck", "Mon May 16 2011 15:07:23 GMT+0200"); Gelöscht : user_pref("CT2319825.ThirdPartyComponentsLastUpdate", "1255344657"); Gelöscht : user_pref("CT2319825.ToolbarShrinkedFromSetup", false); Gelöscht : user_pref("CT2319825.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2319825"); Gelöscht : user_pref("CT2319825.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...] Gelöscht : user_pref("CT2319825.UserID", "UN36849400186144637"); Gelöscht : user_pref("CT2319825.WeatherNetwork", ""); Gelöscht : user_pref("CT2319825.WeatherPollDate", "Mon May 16 2011 16:07:25 GMT+0200"); Gelöscht : user_pref("CT2319825.WeatherUnit", "C"); Gelöscht : user_pref("CT2319825.alertChannelId", "715912"); Gelöscht : user_pref("CT2319825.backendstorage.id", "39373130353538"); Gelöscht : user_pref("CT2319825.ct2319825.DialogsAlignMode", "LTR"); Gelöscht : user_pref("CT2319825.ct2319825.InvalidateCache", false); Gelöscht : user_pref("CT2319825.ct2319825.LanguagePackLastCheckTime", "Sun Sep 09 2012 10:47:37 GMT+0200"); Gelöscht : user_pref("CT2319825.ct2319825.Locale", "de"); Gelöscht : user_pref("CT2319825.ct2319825.RadioLastCheckTime", "Mon May 16 2011 15:07:25 GMT+0200"); Gelöscht : user_pref("CT2319825.ct2319825.RadioLastUpdateIPServer", "3"); Gelöscht : user_pref("CT2319825.ct2319825.RadioLastUpdateServer", "129224641269630000"); Gelöscht : user_pref("CT2319825.ct2319825.SearchInNewTabLastCheckTime", "Sun Sep 09 2012 10:47:23 GMT+0200"); Gelöscht : user_pref("CT2319825.ct2319825.SettingsLastCheckTime", "Sun Sep 09 2012 21:41:51 GMT+0200"); Gelöscht : user_pref("CT2319825.ct2319825.SettingsLastUpdate", "1346943349"); Gelöscht : user_pref("CT2319825.ct2319825.ThirdPartyComponentsLastCheck", "Mon May 16 2011 15:07:23 GMT+0200"); Gelöscht : user_pref("CT2319825.ct2319825.ThirdPartyComponentsLastUpdate", "1255344657"); Gelöscht : user_pref("CT2319825.ct2319825.globalFirstTimeInfoLastCheckTime", "Mon May 16 2011 15:07:26 GMT+0200[...] Gelöscht : user_pref("CT2319825.ct2319825.toolbarAppMetaDataLastCheckTime", "Sun Sep 09 2012 10:47:37 GMT+0200"[...] Gelöscht : user_pref("CT2319825.ct2319825.toolbarContextMenuLastCheckTime", "Mon May 16 2011 15:07:26 GMT+0200"[...] Gelöscht : user_pref("CT2319825.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...] Gelöscht : user_pref("CT2319825.globalFirstTimeInfoLastCheckTime", "Mon May 16 2011 15:07:24 GMT+0200"); Gelöscht : user_pref("CT2319825.homepageProtectorEnableByLogin", true); Gelöscht : user_pref("CT2319825.initDone", true); Gelöscht : user_pref("CT2319825.isAppTrackingManagerOn", true); Gelöscht : user_pref("CT2319825.myStuffEnabled", true); Gelöscht : user_pref("CT2319825.myStuffPublihserMinWidth", 400); Gelöscht : user_pref("CT2319825.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...] Gelöscht : user_pref("CT2319825.myStuffServiceIntervalMM", 1440); Gelöscht : user_pref("CT2319825.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...] Gelöscht : user_pref("CT2319825.revertSettingsEnabled", true); Gelöscht : user_pref("CT2319825.searchProtectorDialogDelayInSec", 10); Gelöscht : user_pref("CT2319825.searchProtectorEnableByLogin", true); Gelöscht : user_pref("CT2319825.testingCtid", ""); Gelöscht : user_pref("CT2319825.toolbarAppMetaDataLastCheckTime", "Mon May 16 2011 15:07:23 GMT+0200"); Gelöscht : user_pref("CT2319825.toolbarContextMenuLastCheckTime", "Mon May 16 2011 15:07:24 GMT+0200"); Gelöscht : user_pref("CT2319825.usagesFlag", 2); Gelöscht : user_pref("CT2719325.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx"); Gelöscht : user_pref("CT2719325.CTID", "CT2719325"); Gelöscht : user_pref("CT2719325.CurrentServerDate", "6-8-2010"); Gelöscht : user_pref("CT2719325.DialogsAlignMode", "LTR"); Gelöscht : user_pref("CT2719325.DownloadReferralCookieData", ""); Gelöscht : user_pref("CT2719325.EMailNotifierPollDate", "Fri Aug 06 2010 09:51:53 GMT+0200"); Gelöscht : user_pref("CT2719325.FeedLastCount7577869347469948784", 467); Gelöscht : user_pref("CT2719325.FeedPollDate129255010923663813", "Fri Aug 06 2010 09:51:53 GMT+0200"); Gelöscht : user_pref("CT2719325.FeedPollDate129255010923663819", "Fri Aug 06 2010 09:51:53 GMT+0200"); Gelöscht : user_pref("CT2719325.FeedPollDate129255010923663825", "Fri Aug 06 2010 09:51:53 GMT+0200"); Gelöscht : user_pref("CT2719325.FeedPollDate129255010923663831", "Fri Aug 06 2010 09:51:53 GMT+0200"); Gelöscht : user_pref("CT2719325.FeedPollDate129255010923663837", "Fri Aug 06 2010 09:51:53 GMT+0200"); Gelöscht : user_pref("CT2719325.FeedPollDate129255010923820093", "Fri Aug 06 2010 09:51:53 GMT+0200"); Gelöscht : user_pref("CT2719325.FeedPollDate129255010923820099", "Fri Aug 06 2010 09:51:53 GMT+0200"); Gelöscht : user_pref("CT2719325.FeedPollDate129255010923820105", "Fri Aug 06 2010 09:51:53 GMT+0200"); Gelöscht : user_pref("CT2719325.FeedPollDate129255010923820111", "Fri Aug 06 2010 09:51:54 GMT+0200"); Gelöscht : user_pref("CT2719325.FeedPollDate129255010923820117", "Fri Aug 06 2010 09:51:54 GMT+0200"); Gelöscht : user_pref("CT2719325.FeedPollDate129255010923820123", "Fri Aug 06 2010 09:51:54 GMT+0200"); Gelöscht : user_pref("CT2719325.FeedPollDate129255010923820129", "Fri Aug 06 2010 09:51:54 GMT+0200"); Gelöscht : user_pref("CT2719325.FeedPollDate129255010923820135", "Fri Aug 06 2010 09:51:54 GMT+0200"); Gelöscht : user_pref("CT2719325.FeedPollDate129255010923820141", "Fri Aug 06 2010 09:51:54 GMT+0200"); Gelöscht : user_pref("CT2719325.FeedPollDate129255010923820147", "Fri Aug 06 2010 09:51:54 GMT+0200"); Gelöscht : user_pref("CT2719325.FeedPollDate129255010923820153", "Fri Aug 06 2010 09:51:54 GMT+0200"); Gelöscht : user_pref("CT2719325.FeedPollDate129255010923820159", "Fri Aug 06 2010 09:51:54 GMT+0200"); Gelöscht : user_pref("CT2719325.FeedPollDate129255010923820165", "Fri Aug 06 2010 09:51:54 GMT+0200"); Gelöscht : user_pref("CT2719325.FeedPollDate129255010923820171", "Fri Aug 06 2010 09:51:55 GMT+0200"); Gelöscht : user_pref("CT2719325.FeedPollDate129255010923820177", "Fri Aug 06 2010 09:51:55 GMT+0200"); Gelöscht : user_pref("CT2719325.FeedPollDate129255010923820183", "Fri Aug 06 2010 09:51:55 GMT+0200"); Gelöscht : user_pref("CT2719325.FeedPollDate129255010923820189", "Fri Aug 06 2010 09:51:55 GMT+0200"); Gelöscht : user_pref("CT2719325.FeedPollDate129255010923820195", "Fri Aug 06 2010 09:51:55 GMT+0200"); Gelöscht : user_pref("CT2719325.FeedPollDate129255010923820201", "Fri Aug 06 2010 09:51:55 GMT+0200"); Gelöscht : user_pref("CT2719325.FeedPollDate129255010923820207", "Fri Aug 06 2010 09:51:55 GMT+0200"); Gelöscht : user_pref("CT2719325.FeedPollDate129255010923820213", "Fri Aug 06 2010 09:51:55 GMT+0200"); Gelöscht : user_pref("CT2719325.FeedTTL129255010923663825", 5); Gelöscht : user_pref("CT2719325.FeedTTL129255010923663831", 5); Gelöscht : user_pref("CT2719325.FeedTTL129255010923820111", 2); Gelöscht : user_pref("CT2719325.FeedTTL129255010923820141", 5); Gelöscht : user_pref("CT2719325.FeedTTL129255010923820153", 30); Gelöscht : user_pref("CT2719325.FirstServerDate", "6-8-2010"); Gelöscht : user_pref("CT2719325.FirstTime", true); Gelöscht : user_pref("CT2719325.FirstTimeFF3", true); Gelöscht : user_pref("CT2719325.FirstTimeSettingsDone", true); Gelöscht : user_pref("CT2719325.FixPageNotFoundErrors", true); Gelöscht : user_pref("CT2719325.GroupingServerCheckInterval", 1440); Gelöscht : user_pref("CT2719325.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/"); Gelöscht : user_pref("CT2719325.Initialize", true); Gelöscht : user_pref("CT2719325.InitializeCommonPrefs", true); Gelöscht : user_pref("CT2719325.InstallationAndCookieDataSentCount", 1); Gelöscht : user_pref("CT2719325.InstallationType", "UnknownIntegration"); Gelöscht : user_pref("CT2719325.InstalledDate", "Fri Aug 06 2010 09:51:52 GMT+0200"); Gelöscht : user_pref("CT2719325.InvalidateCache", false); Gelöscht : user_pref("CT2719325.IsGrouping", false); Gelöscht : user_pref("CT2719325.IsMulticommunity", false); Gelöscht : user_pref("CT2719325.IsOpenThankYouPage", false); Gelöscht : user_pref("CT2719325.IsOpenUninstallPage", true); Gelöscht : user_pref("CT2719325.LanguagePackLastCheckTime", "Fri Aug 06 2010 09:51:55 GMT+0200"); Gelöscht : user_pref("CT2719325.LanguagePackReloadIntervalMM", 1440); Gelöscht : user_pref("CT2719325.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...] Gelöscht : user_pref("CT2719325.LastLogin_2.7.1.3", "Fri Aug 06 2010 09:51:53 GMT+0200"); Gelöscht : user_pref("CT2719325.LatestVersion", "2.1.0.18"); Gelöscht : user_pref("CT2719325.Locale", "de"); Gelöscht : user_pref("CT2719325.LoginCache", 4); Gelöscht : user_pref("CT2719325.MCDetectTooltipHeight", "83"); Gelöscht : user_pref("CT2719325.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1"); Gelöscht : user_pref("CT2719325.MCDetectTooltipWidth", "295"); Gelöscht : user_pref("CT2719325.RadioIsPodcast", false); Gelöscht : user_pref("CT2719325.RadioLastCheckTime", "Fri Aug 06 2010 09:51:54 GMT+0200"); Gelöscht : user_pref("CT2719325.RadioLastUpdateIPServer", "3"); Gelöscht : user_pref("CT2719325.RadioLastUpdateServer", "129246150971600000"); Gelöscht : user_pref("CT2719325.RadioMediaID", "21056683"); Gelöscht : user_pref("CT2719325.RadioMediaType", "Media Player"); Gelöscht : user_pref("CT2719325.RadioMenuSelectedID", "EBRadioMenu_CT271932521056683"); Gelöscht : user_pref("CT2719325.RadioStationName", "MDR%20Info"); Gelöscht : user_pref("CT2719325.RadioStationURL", "hxxp://mdr.streamfarm.net/cms/_vm100/radios/mdr/live/info_cm[...] Gelöscht : user_pref("CT2719325.SearchEngine", "Suchen||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TER[...] Gelöscht : user_pref("CT2719325.SearchFromAddressBarIsInit", true); Gelöscht : user_pref("CT2719325.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT271[...] Gelöscht : user_pref("CT2719325.SearchInNewTabEnabled", true); Gelöscht : user_pref("CT2719325.SearchInNewTabIntervalMM", 1440); Gelöscht : user_pref("CT2719325.SearchInNewTabLastCheckTime", "Fri Aug 06 2010 09:51:54 GMT+0200"); Gelöscht : user_pref("CT2719325.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...] Gelöscht : user_pref("CT2719325.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...] Gelöscht : user_pref("CT2719325.SettingsCheckIntervalMin", 120); Gelöscht : user_pref("CT2719325.SettingsLastCheckTime", "Fri Aug 06 2010 09:51:51 GMT+0200"); Gelöscht : user_pref("CT2719325.SettingsLastUpdate", "1281027477"); Gelöscht : user_pref("CT2719325.ThirdPartyComponentsInterval", 504); Gelöscht : user_pref("CT2719325.ThirdPartyComponentsLastCheck", "Fri Aug 06 2010 09:51:51 GMT+0200"); Gelöscht : user_pref("CT2719325.ThirdPartyComponentsLastUpdate", "1255348257"); Gelöscht : user_pref("CT2719325.TrusteLinkUrl", "hxxp://www.truste.org/pvr.php?page=validate&softwareProgramId=[...] Gelöscht : user_pref("CT2719325.Uninstall", true); Gelöscht : user_pref("CT2719325.UserID", "UN18873254278814122"); Gelöscht : user_pref("CT2719325.WeatherNetwork", ""); Gelöscht : user_pref("CT2719325.WeatherPollDate", "Fri Aug 06 2010 09:51:53 GMT+0200"); Gelöscht : user_pref("CT2719325.WeatherUnit", "C"); Gelöscht : user_pref("CT2719325.alertChannelId", "1111610"); Gelöscht : user_pref("CT2719325.clientLogIsEnabled", true); Gelöscht : user_pref("CT2719325.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asm[...] Gelöscht : user_pref("CT2719325.myStuffEnabled", true); Gelöscht : user_pref("CT2719325.myStuffPublihserMinWidth", 400); Gelöscht : user_pref("CT2719325.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...] Gelöscht : user_pref("CT2719325.myStuffServiceIntervalMM", 1440); Gelöscht : user_pref("CT2719325.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...] Gelöscht : user_pref("CT2719325.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Reg[...] Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/ct2319825/CT2319825[...] Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/715912/711772/DE", "\"1-194[...] Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/DE", "\"0\"")[...] Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2319825", [...] Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=ct2319825", [...] Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...] Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...] Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...] Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...] Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...] Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3[...] Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12[...] Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.13[...] Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.14[...] Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.15[...] Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.[...] Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2319825",[...] Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "63[...] Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2319825/CT2319825[...] Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/ct2319825/CT2319825[...] Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/equalizer[...] Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/minimize.[...] Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/play.gif"[...] Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/stop.gif"[...] Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/vol.gif",[...] Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=EB_LOCALE",[...] Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=de", "\"aa6[...] Gelöscht : user_pref("CommunityToolbar.EngineHiddenByUser", true); Gelöscht : user_pref("CommunityToolbar.EngineOwner", ""); Gelöscht : user_pref("CommunityToolbar.EngineOwnerGuid", "{40c3cc16-7269-4b32-9531-17f2950fb06f}"); Gelöscht : user_pref("CommunityToolbar.EngineOwnerToolbarId", "winload"); Gelöscht : user_pref("CommunityToolbar.IsEngineShown", false); Gelöscht : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true); Gelöscht : user_pref("CommunityToolbar.OriginalEngineOwner", "CT2319825"); Gelöscht : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{40c3cc16-7269-4b32-9531-17f2950fb06f}"); Gelöscht : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "winload"); Gelöscht : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.pr[...] Gelöscht : user_pref("CommunityToolbar.ToolbarsList", "CT2719325,CT2319825"); Gelöscht : user_pref("CommunityToolbar.ToolbarsList2", "CT2719325,CT2319825"); Gelöscht : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Mon May 16 2011 15:07:25 GMT+02[...] Gelöscht : user_pref("CommunityToolbar.alert.alertInfoInterval", 60); Gelöscht : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Fri Jun 24 2011 18:01:09 GMT+0200"); Gelöscht : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com"); Gelöscht : user_pref("CommunityToolbar.alert.firstTimeAlertShown", true); Gelöscht : user_pref("CommunityToolbar.alert.locale", "en"); Gelöscht : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440); Gelöscht : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Fri Jun 24 2011 20:11:06 GMT+0200"); Gelöscht : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559"); Gelöscht : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20); Gelöscht : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com"); Gelöscht : user_pref("CommunityToolbar.alert.showTrayIcon", false); Gelöscht : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300); Gelöscht : user_pref("CommunityToolbar.alert.userId", "e0813b54-584c-4c34-8efe-033ac35bbb06"); Gelöscht : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Mon May 16 2011 15:07:24 GMT+0200"); Gelöscht : user_pref("CommunityToolbar.globalUserId", "4e221137-9ef3-4600-8031-e1f81e752494"); Gelöscht : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true); Gelöscht : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true); Gelöscht : user_pref("CommunityToolbar.killedEngine", true); Gelöscht : user_pref("CommunityToolbar.undefined", ""); -\\ Google Chrome v [Version kann nicht ermittelt werden] Datei : C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Preferences [OK] Die Datei ist sauber. ************************* AdwCleaner[R1].txt - [29259 octets] - [10/09/2012 16:25:12] AdwCleaner[S1].txt - [29634 octets] - [10/09/2012 16:26:03] ########## EOF - C:\AdwCleaner[S1].txt - [29695 octets] ########## |
11.09.2012, 00:08 | #4 |
/// Helfer-Team | ebenfalls Bundespolizei Trojaner :( Sehr gut! Wie laeuft der Rechner? Malware-Scan mit Emsisoft Anti-Malware Lade die Gratisversion von => Emsisoft Anti-Malware herunter und installiere das Programm. Lade über Jetzt Updaten die aktuellen Signaturen herunter. Wähle den Freeware-Modus aus. Wähle Detail Scan und starte über den Button Scan die Überprüfung des Computers. Am Ende des Scans nichts loeschen lassen!. Mit Klick auf Bericht speichern das Logfile auf dem Desktop speichern und hier in den Thread posten. Anleitung: http://www.trojaner-board.de/103809-...i-malware.html |
15.09.2012, 21:19 | #5 |
| ebenfalls Bundespolizei Trojaner :( ohje emisoft hat nochmal einiges gefunden :/ Code:
ATTFilter Emsisoft Anti-Malware - Version 6.6 Letztes Update: 15.09.2012 19:48:26 Scan Einstellungen: Scan Methode: Detail Scan Objekte: Rootkits, Speicher, Traces, C:\, D:\ Archiv Scan: An ADS Scan: An Scan Beginn: 15.09.2012 19:51:18 C:\_OTL\MovedFiles\09102012_144503\C_Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\47\2dc98e6f-3f51f2bb -> a\b.class gefunden: Exploit.Java.CVE-2012!E2 C:\_OTL\MovedFiles\09102012_144503\C_Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\47\2dc98e6f-3f51f2bb -> a\A.class gefunden: JAVA.Agent!E2 C:\_OTL\MovedFiles\09102012_144503\C_Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\47\2dc98e6f-3f51f2bb -> a\d.class gefunden: Exploit.Java.CVE-2012-0507!E2 C:\_OTL\MovedFiles\09102012_144503\C_Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\29\304af21d-5696cd84 -> z539a\z539a.class gefunden: Exploit.Java.Blacole!E2 C:\_OTL\MovedFiles\09102012_144503\C_Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\29\304af21d-5696cd84 -> z539a\z539d.class gefunden: Exploit.Java.Blacole!E2 C:\_OTL\MovedFiles\09102012_144503\C_Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\29\304af21d-5696cd84 -> z539a\z539b.class gefunden: Exploit.Java.Blacole!E2 C:\_OTL\MovedFiles\09102012_144503\C_Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\29\304af21d-5696cd84 -> z539a\z539c.class gefunden: Exploit.Java.Blacole!E2 C:\_OTL\MovedFiles\09102012_144503\C_ProgramData\hjrjwdpfmxdwwxt\main.html gefunden: Trojan.HTML.Ransom!E2 Gescannt 699616 Gefunden 8 Scan Ende: 15.09.2012 22:17:21 Scan Zeit: 2:26:03 C:\_OTL\MovedFiles\09102012_144503\C_ProgramData\hjrjwdpfmxdwwxt\main.html Quarantäne Trojan.HTML.Ransom!E2 C:\_OTL\MovedFiles\09102012_144503\C_Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\29\304af21d-5696cd84 -> z539a\z539a.class Quarantäne Exploit.Java.Blacole!E2 C:\_OTL\MovedFiles\09102012_144503\C_Users\Nicole\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\47\2dc98e6f-3f51f2bb -> a\d.class Quarantäne Exploit.Java.CVE-2012-0507!E2 Quarantäne 3 |
16.09.2012, 17:19 | #6 |
/// Helfer-Team | ebenfalls Bundespolizei Trojaner :( Gefunden hat er aber nichts neues. Das alles haben wir schon mit OTL erwischt Sehr gut! Deinstalliere: Emsisoft Anti-Malware ESET Online Scanner Vorbereitung
__________________ --> ebenfalls Bundespolizei Trojaner :( |
20.09.2012, 21:26 | #7 |
| ebenfalls Bundespolizei Trojaner :( soo, nach langem scannen hat ESET auch was gefunden: Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # version=7 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6583 # api_version=3.0.2 # EOSSerial=f602285fa20bba46abaa325d9408346f # end=finished # remove_checked=true # archives_checked=true # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2012-09-20 07:57:45 # local_time=2012-09-20 09:57:45 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=1792 16777215 100 0 18602302 18602302 0 0 # compatibility_mode=5893 16776573 100 94 68716 99784147 0 0 # compatibility_mode=8192 67108863 100 0 1573 1573 0 0 # scanned=291087 # found=2 # cleaned=2 # scan_time=18109 D:\NICOLE-PC\Backup Set 2012-05-06 194848\Backup Files 2012-05-06 194848\Backup files 10.zip multiple threats (deleted - quarantined) 00000000000000000000000000000000 C D:\NICOLE-PC\Backup Set 2012-05-06 194848\Backup Files 2012-09-02 190001\Backup files 4.zip Java/Exploit.CVE-2012-0507.DR trojan (deleted - quarantined) 00000000000000000000000000000000 C |
22.09.2012, 18:20 | #8 |
/// Helfer-Team | ebenfalls Bundespolizei Trojaner :( Java aktualisieren Dein Java ist nicht mehr aktuell. Älter Versionen enthalten Sicherheitslücken, die von Malware missbraucht werden können.
Dann so einstellen: http://www.trojaner-board.de/105213-...tellungen.html Danach poste (kopieren und einfuegen) mir, was du hier angezeigt bekommst: PluginCheck Java deaktivieren Aufgrund derezeitigen Sicherheitsluecke: http://www.trojaner-board.de/122961-...ktivieren.html Danach poste mir (kopieren und einfuegen), was du hier angezeigt bekommst: PluginCheck |
28.09.2012, 17:00 | #9 |
| ebenfalls Bundespolizei Trojaner :( so, hab java aktualisiert. plugin-check: Firefox 15.0.1 ist aktuell Flash 11,3,300,262 ist veraltet! Aktualisieren Sie bitte auf die neueste Version! Java (1,7,0,7) ist aktuell. Adobe Reader 10,1,4,38 ist aktuell. werde jetzt auch mal flash aktualisieren. |
28.09.2012, 17:03 | #10 |
/// Helfer-Team | ebenfalls Bundespolizei Trojaner :( Java deaktivieren Aufgrund derezeitigen Sicherheitsluecke: JAVA Plug-In deaktivieren Danach poste mir (kopieren und einfuegen), was du hier angezeigt bekommst: PluginCheck Sehr gut! damit bist Du sauber und entlassen! adwCleaner entfernen
Tool-Bereinigung mit OTL Wir werden nun die CleanUp!-Funktion von OTL nutzen, um die meisten Programme, die wir zur Bereinigung installiert haben, wieder von Deinem System zu löschen.
Zurücksetzen der Sicherheitszonen Lasse die Sicherheitszonen wieder zurücksetzen, da diese manipuliert wurden um den Browser für weitere Angriffe zu öffnen. Gehe dabei so vor: http://www.trojaner-board.de/111805-...ecksetzen.html Systemwiederherstellungen leeren Damit der Rechner nicht mit einer infizierten Systemwiederherstellung erneut infiziert werden kann, muessen wir diese leeren. Dazu schalten wir sie einmal aus und dann wieder ein: Systemwiederherstellung deaktivieren Tutorial fuer Windows XP, Windows Vista, Windows 7 Danach wieder aktivieren. Aufräumen mit CCleaner Lasse mit CCleaner (Download) (Anleitung) Fehler in der
Lektuere zum abarbeiten: http://www.trojaner-board.de/90880-d...tallation.html http://www.trojaner-board.de/105213-...tellungen.html PluginCheck http://www.trojaner-board.de/96344-a...-rechners.html Secunia Online Software Inspector http://www.trojaner-board.de/71715-k...iendungen.html http://www.trojaner-board.de/83238-a...sschalten.html PC wird immer langsamer - was tun? |
Themen zu ebenfalls Bundespolizei Trojaner :( |
abgesicherte, abgesicherten, abgesicherten modus, bundespolizei, bundespolizei trojaner, bundespolizei-trojaner, dankbar, ebenfalls, erwischt, exploit.drop.ur.2, freundin, könntet, otl-scan, sehr langsam, theme, themen, troja, trojan.winlock, trojaner, verbreitet, ziemlich |