![]() |
|
Plagegeister aller Art und deren Bekämpfung: Neuer Tab in Firefox wird mit "MyStart By IncrediBar" geöffnetWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() |
|
![]() | #1 |
| ![]() Neuer Tab in Firefox wird mit "MyStart By IncrediBar" geöffnet Danke. GoogleChrome liess sich nicht deinstallieren...? Hier die Datei von AdwCleaner: # AdwCleaner v2.003 - Datei am 09/27/2012 um 11:37:23 erstellt # Aktualisiert am 23/09/2012 von Xplode # Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits) # Benutzer : Christa - CHRISTA-PC # Bootmodus : Normal # Ausgeführt unter : C:\Users\Christa\Downloads\Desktop\adwcleaner.exe # Option [Suche] **** [Dienste] **** ***** [Dateien / Ordner] ***** Datei Gefunden : C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml Datei Gefunden : C:\user.js Datei Gefunden : C:\Users\Christa\AppData\Local\funmoods-speeddial.crx Datei Gefunden : C:\Users\Christa\AppData\Roaming\Mozilla\Firefox\Profiles\gmumwbl1.default\searchplugins\search.xml Ordner Gefunden : C:\Program Files (x86)\Babylon Ordner Gefunden : C:\Program Files (x86)\Funmoods Ordner Gefunden : C:\Program Files\Babylon Ordner Gefunden : C:\Users\Christa\AppData\Local\APN Ordner Gefunden : C:\Users\Christa\AppData\LocalLow\Softonic Ordner Gefunden : C:\Users\Christa\AppData\LocalLow\Toolbar4 Ordner Gefunden : C:\Users\Christa\AppData\Roaming\pdfforge ***** [Registrierungsdatenbank] ***** Schlüssel Gefunden : HKCU\Software\Google\Chrome\Extensions\cjpglkicenollcignonpgiafdgfeehoj Schlüssel Gefunden : HKCU\Software\IM Schlüssel Gefunden : HKCU\Software\ImInstaller Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{336D0C35-8A85-403a-B9D2-65C292C39087} Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{336D0C35-8A85-403a-B9D2-65C292C39087} Schlüssel Gefunden : HKCU\Software\SweetIm Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9} Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{96BD48DD-741B-41AE-AC4A-AFF96BA00F7E} Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{960DF771-CFCB-4E53-A5B5-6EF2BBE6E706} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASAPI32 Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASMANCS Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASAPI32 Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASMANCS Schlüssel Gefunden : HKLM\Software\SweetIm Schlüssel Gefunden : HKLM\Software\Web Assistant Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{23C70BCA-6E23-4A65-AD2E-1389062074F1} Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{23D8EEF7-0E13-4000-B9C4-6603C1E912D1} Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{295CACB4-51F5-46FD-914E-C72BAAE1B672} Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2CE5C4B9-6DBE-4528-96FA-C9FF38EF1762} Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{34C1FDF7-02C1-4F23-B393-F48B16E071D1} Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{54291324-7A3D-4F11-B707-3FB6A2C97BD9} Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{59C63F11-D4E5-46E7-9B8A-EE158DCA83A8} Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{5DA22CBD-0029-4A09-B757-CF0FAFC488ED} Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{77A6E7D4-4A83-4A9B-A2A0-EF3B125DC29D} Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C0585B2F-74D7-4734-88DE-6C150C5D4036} Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D8242E89-2F81-484A-AE5B-BA8CAD5B7347} Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{EF0588D6-1621-4A75-B8BE-F4BC34794136} Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{EFDCAF05-D29C-4D4D-9836-8CDCD606A6B2} Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\cjpglkicenollcignonpgiafdgfeehoj Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{0D80F1C5-D17B-4177-AC68-955F3EF9F191} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{23C70BCA-6E23-4A65-AD2E-1389062074F1} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{23D8EEF7-0E13-4000-B9C4-6603C1E912D1} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{295CACB4-51F5-46FD-914E-C72BAAE1B672} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{2CE5C4B9-6DBE-4528-96FA-C9FF38EF1762} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{34C1FDF7-02C1-4F23-B393-F48B16E071D1} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{4897BBA6-48D9-468C-8EFA-846275D7701B} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{54291324-7A3D-4F11-B707-3FB6A2C97BD9} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{59C63F11-D4E5-46E7-9B8A-EE158DCA83A8} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{5DA22CBD-0029-4A09-B757-CF0FAFC488ED} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{77A6E7D4-4A83-4A9B-A2A0-EF3B125DC29D} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{C0585B2F-74D7-4734-88DE-6C150C5D4036} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{D8242E89-2F81-484A-AE5B-BA8CAD5B7347} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{EF0588D6-1621-4A75-B8BE-F4BC34794136} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{EFDCAF05-D29C-4D4D-9836-8CDCD606A6B2} Schlüssel Gefunden : HKLM\SOFTWARE\Google\Chrome\Extensions\bbjciahceamgodcoidkjpchnokgfpphh Schlüssel Gefunden : HKLM\SOFTWARE\Google\Chrome\Extensions\cjpglkicenollcignonpgiafdgfeehoj Schlüssel Gefunden : HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd Schlüssel Gefunden : HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd Schlüssel Gefunden : HKLM\SOFTWARE\Web Assistant Schlüssel Gefunden : HKU\S-1-5-21-1029638788-264762499-280951933-1001\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9} Schlüssel Gefunden : HKU\S-1-5-21-1029638788-264762499-280951933-1001\Software\Microsoft\Internet Explorer\SearchScopes\{96BD48DD-741B-41AE-AC4A-AFF96BA00F7E} Schlüssel Gefunden : HKU\S-1-5-21-1029638788-264762499-280951933-1001\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A} Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}] Wert Gefunden : HKLM\SOFTWARE\Mozilla\Firefox\extensions [{336D0C35-8A85-403a-B9D2-65C292C39087}] ***** [Internet Browser] ***** -\\ Internet Explorer v9.0.8112.16421 [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.bigseekpro.com/dvdshrink2/{1FE67779-130D-4AFF-A11E-03043E2F40F8} [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.bigseekpro.com/dvdshrink2/{1FE67779-130D-4AFF-A11E-03043E2F40F8} -\\ Mozilla Firefox v15.0.1 (de) Profilname : default Datei : C:\Users\Christa\AppData\Roaming\Mozilla\Firefox\Profiles\gmumwbl1.default\prefs.js Gefunden : user_pref("backup.old.browser.search.selectedEngine", "Search the web (Babylon)"); Gefunden : user_pref("backup.old.browser.startup.homepage", "hxxp://search.babylon.com/home?affID=17425&tt=3812[...] Gefunden : user_pref("browser.newtab.url", "hxxp://mystart.incredibar.com/mb178?a=6PQKkiAWrD&loc=FF_NT"); Gefunden : user_pref("browser.search.order.1", "Search the web (Babylon)"); Gefunden : user_pref("extensions.BabylonToolbar.admin", false); Gefunden : user_pref("extensions.BabylonToolbar.aflt", "babclient"); Gefunden : user_pref("extensions.BabylonToolbar.appId", "{BDB69379-802F-4eaf-B541-F8DE92DD98DB}"); Gefunden : user_pref("extensions.BabylonToolbar.dfltLng", "en"); Gefunden : user_pref("extensions.BabylonToolbar.excTlbr", false); Gefunden : user_pref("extensions.BabylonToolbar.id", "c4d8b5c3000000000000844bf529cb11"); Gefunden : user_pref("extensions.BabylonToolbar.instlDay", "15604"); Gefunden : user_pref("extensions.BabylonToolbar.instlRef", "std"); Gefunden : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar"); Gefunden : user_pref("extensions.BabylonToolbar.prtnrId", "babylon"); Gefunden : user_pref("extensions.BabylonToolbar.tlbrId", "base"); Gefunden : user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "hxxp://search.babylon.com/?babsrc=TB_def&mntrId=[...] Gefunden : user_pref("extensions.BabylonToolbar.vrsn", "1.6.9.12"); Gefunden : user_pref("extensions.BabylonToolbar.vrsni", "1.6.9.12"); Gefunden : user_pref("extensions.BabylonToolbar_i.babExt", ""); Gefunden : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=17425&tt=3812_8"); Gefunden : user_pref("extensions.BabylonToolbar_i.newTab", true); Gefunden : user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://search.babylon.com/?affID=17425&tt=3812_8[...] Gefunden : user_pref("extensions.BabylonToolbar_i.smplGrp", "none"); Gefunden : user_pref("extensions.BabylonToolbar_i.srcExt", "def"); Gefunden : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.6.9.1216:40:49"); Gefunden : user_pref("extensions.Softonic.admin", false); Gefunden : user_pref("extensions.Softonic.aflt", "SD"); Gefunden : user_pref("extensions.Softonic.autoRvrt", "false"); Gefunden : user_pref("extensions.Softonic.cntry", "CH"); Gefunden : user_pref("extensions.Softonic.cv", "cv5"); Gefunden : user_pref("extensions.Softonic.dfltLng", ""); Gefunden : user_pref("extensions.Softonic.dfltlng", "en"); Gefunden : user_pref("extensions.Softonic.dfltsrch", "false"); Gefunden : user_pref("extensions.Softonic.envrmnt", "production"); Gefunden : user_pref("extensions.Softonic.excTlbr", false); Gefunden : user_pref("extensions.Softonic.hdrMd5", "9B02784878FF7F13227E287AF5BED304"); Gefunden : user_pref("extensions.Softonic.hmpg", false); Gefunden : user_pref("extensions.Softonic.hrdid", "c4d8b5c3000000000000844bf529cb11"); Gefunden : user_pref("extensions.Softonic.id", "c4d8b5c3000000000000844bf529cb11"); Gefunden : user_pref("extensions.Softonic.instlDay", "15604"); Gefunden : user_pref("extensions.Softonic.instlRef", "MON00005"); Gefunden : user_pref("extensions.Softonic.instlday", "15604"); Gefunden : user_pref("extensions.Softonic.instlref", "MON00005"); Gefunden : user_pref("extensions.Softonic.isdcmntcmplt", "false"); Gefunden : user_pref("extensions.Softonic.keywordurl", ""); Gefunden : user_pref("extensions.Softonic.lastVrsnTs", "1.6.7.415:41:30"); Gefunden : user_pref("extensions.Softonic.mntrvrsn", "1.3.0"); Gefunden : user_pref("extensions.Softonic.newTab", false); Gefunden : user_pref("extensions.Softonic.newtab", "false"); Gefunden : user_pref("extensions.Softonic.newtaburl", ""); Gefunden : user_pref("extensions.Softonic.prdct", "Softonic"); Gefunden : user_pref("extensions.Softonic.propectorlck", 86796638); Gefunden : user_pref("extensions.Softonic.prtnrId", "softonic"); Gefunden : user_pref("extensions.Softonic.prtnrid", "softonic"); Gefunden : user_pref("extensions.Softonic.rvrtMsg", "Click Yes to keep current home page and default search set[...] Gefunden : user_pref("extensions.Softonic.savedVrsnTs", "1"); Gefunden : user_pref("extensions.Softonic.sg", "az"); Gefunden : user_pref("extensions.Softonic.smplGrp", "none"); Gefunden : user_pref("extensions.Softonic.smplgrp", "none"); Gefunden : user_pref("extensions.Softonic.srch", ""); Gefunden : user_pref("extensions.Softonic.srchprvdr", ""); Gefunden : user_pref("extensions.Softonic.tlbrId", "base"); Gefunden : user_pref("extensions.Softonic.tlbrSrchUrl", "hxxp://search.softonic.com/MON00005/tb_v1?SearchSource[...] Gefunden : user_pref("extensions.Softonic.tlbrid", "base"); Gefunden : user_pref("extensions.Softonic.tlbrsrchurl", "hxxp://search.softonic.com/MON00005/tb_v1?SearchSource[...] Gefunden : user_pref("extensions.Softonic.vrsn", "1.6.7.4"); Gefunden : user_pref("extensions.Softonic.vrsnTs", "1.6.7.415:41:30"); Gefunden : user_pref("extensions.Softonic.vrsni", "1.6.7.4"); Gefunden : user_pref("extensions.Softonic.vrsnts", "1.6.7.415:41:30"); Gefunden : user_pref("extensions.Softonic_i.newTab", false); Gefunden : user_pref("extensions.Softonic_i.smplGrp", "none"); Gefunden : user_pref("extensions.Softonic_i.vrsnTs", "1.6.7.415:41:30"); Gefunden : user_pref("extensions.funmoods.aflt", "grupo"); Gefunden : user_pref("extensions.funmoods.autoRvrt", false); Gefunden : user_pref("extensions.funmoods.brwsrsrc", "ietlbr"); Gefunden : user_pref("extensions.funmoods.cntry", "CH"); Gefunden : user_pref("extensions.funmoods.cv", "cv5"); Gefunden : user_pref("extensions.funmoods.dfltLng", ""); Gefunden : user_pref("extensions.funmoods.dfltSrch", true); Gefunden : user_pref("extensions.funmoods.dfltlng", "en"); Gefunden : user_pref("extensions.funmoods.dfltsrch", "false"); Gefunden : user_pref("extensions.funmoods.dnsErr", true); Gefunden : user_pref("extensions.funmoods.envrmnt", "production"); Gefunden : user_pref("extensions.funmoods.excTlbr", false); Gefunden : user_pref("extensions.funmoods.hdrMd5", "7451AF287A5D0EA74229AFC34FA83F6E"); Gefunden : user_pref("extensions.funmoods.hmpg", true); Gefunden : user_pref("extensions.funmoods.hmpgUrl", "hxxp://start.funmoods.com/?f=1&a=grupo&chnl=grupo&cd=2Xzuy[...] Gefunden : user_pref("extensions.funmoods.hrdid", "844BF529CB11B5C3"); Gefunden : user_pref("extensions.funmoods.id", "844BF529CB11B5C3"); Gefunden : user_pref("extensions.funmoods.instlDay", "15604"); Gefunden : user_pref("extensions.funmoods.instlRef", "grupo"); Gefunden : user_pref("extensions.funmoods.instlday", "15604"); Gefunden : user_pref("extensions.funmoods.instlref", "grupo"); Gefunden : user_pref("extensions.funmoods.isdcmntcmplt", true); Gefunden : user_pref("extensions.funmoods.keywordurl", ""); Gefunden : user_pref("extensions.funmoods.lastVrsnTs", "1.5.23.2216:20:27"); Gefunden : user_pref("extensions.funmoods.mntrvrsn", "1.3.0"); Gefunden : user_pref("extensions.funmoods.newTab", true); Gefunden : user_pref("extensions.funmoods.newTabUrl", "hxxp://start.funmoods.com/?f=2&a=grupo&chnl=grupo&cd=2Xz[...] Gefunden : user_pref("extensions.funmoods.newtab", true); Gefunden : user_pref("extensions.funmoods.newtaburl", "hxxp://start.funmoods.com/?f=2&a=grupo&chnl=grupo&cd=2Xz[...] Gefunden : user_pref("extensions.funmoods.prdct", "funmoods"); Gefunden : user_pref("extensions.funmoods.prtnrId", "funmoods"); Gefunden : user_pref("extensions.funmoods.prtnrid", "funmoods"); Gefunden : user_pref("extensions.funmoods.savedVrsnTs", "1"); Gefunden : user_pref("extensions.funmoods.sg", "none"); Gefunden : user_pref("extensions.funmoods.smplGrp", "none"); Gefunden : user_pref("extensions.funmoods.smplgrp", "none"); Gefunden : user_pref("extensions.funmoods.srch", ""); Gefunden : user_pref("extensions.funmoods.srchPrvdr", "Search"); Gefunden : user_pref("extensions.funmoods.srchprvdr", "Search"); Gefunden : user_pref("extensions.funmoods.tlbrId", "base"); Gefunden : user_pref("extensions.funmoods.tlbrSrchUrl", "hxxp://start.funmoods.com/?f=3&a=grupo&chnl=grupo&cd=2[...] Gefunden : user_pref("extensions.funmoods.tlbrid", "base"); Gefunden : user_pref("extensions.funmoods.tlbrsrchurl", "hxxp://start.funmoods.com/?f=3&a=grupo&chnl=grupo&cd=2[...] Gefunden : user_pref("extensions.funmoods.vrsn", "1.5.23.22"); Gefunden : user_pref("extensions.funmoods.vrsnTs", "1.5.23.2216:20:27"); Gefunden : user_pref("extensions.funmoods.vrsni", "1.5.23.22"); Gefunden : user_pref("extensions.funmoods.vrsnts", "1.5.23.2216:20:27"); Gefunden : user_pref("extensions.funmoods_i.newTab", true); Gefunden : user_pref("extensions.funmoods_i.smplGrp", "none"); Gefunden : user_pref("extensions.funmoods_i.vrsnTs", "1.5.23.2216:20:27"); Gefunden : user_pref("extensions.incredibar.actvtyRptTime", "1348239130689"); Gefunden : user_pref("extensions.incredibar.admin", false); Gefunden : user_pref("extensions.incredibar.aflt", "orgnl"); Gefunden : user_pref("extensions.incredibar.afterInstallRpt", "sent"); Gefunden : user_pref("extensions.incredibar.cntry", "CH"); Gefunden : user_pref("extensions.incredibar.dfltLng", "EN"); Gefunden : user_pref("extensions.incredibar.dfltSrch", false); Gefunden : user_pref("extensions.incredibar.dfltlng", "en"); Gefunden : user_pref("extensions.incredibar.dfltsrch", "false"); Gefunden : user_pref("extensions.incredibar.did", "10643"); Gefunden : user_pref("extensions.incredibar.envrmnt", "production"); Gefunden : user_pref("extensions.incredibar.excTlbr", false); Gefunden : user_pref("extensions.incredibar.hdrMd5", "26CC9476A6B5C48FD1D74871BAC81A64"); Gefunden : user_pref("extensions.incredibar.hmpg", false); Gefunden : user_pref("extensions.incredibar.hrdid", "c4d8b5c3000000000000844bf529cb11"); Gefunden : user_pref("extensions.incredibar.id", "c4d8b5c3000000000000844bf529cb11"); Gefunden : user_pref("extensions.incredibar.installerproductid", "26"); Gefunden : user_pref("extensions.incredibar.instlDay", "15604"); Gefunden : user_pref("extensions.incredibar.instlRef", ""); Gefunden : user_pref("extensions.incredibar.instlday", "15604"); Gefunden : user_pref("extensions.incredibar.instlref", ""); Gefunden : user_pref("extensions.incredibar.isDcmntCmplt", false); Gefunden : user_pref("extensions.incredibar.isdcmntcmplt", "false"); Gefunden : user_pref("extensions.incredibar.keywordurl", ""); Gefunden : user_pref("extensions.incredibar.lastVrsnTs", "1.5.11.1416:43:46"); Gefunden : user_pref("extensions.incredibar.mntrvrsn", "1.2.0"); Gefunden : user_pref("extensions.incredibar.newTab", false); Gefunden : user_pref("extensions.incredibar.newtab", "false"); Gefunden : user_pref("extensions.incredibar.newtaburl", ""); Gefunden : user_pref("extensions.incredibar.noFFXTlbr", false); Gefunden : user_pref("extensions.incredibar.ppd", "1"); Gefunden : user_pref("extensions.incredibar.prdct", "incredibar"); Gefunden : user_pref("extensions.incredibar.productid", "26"); Gefunden : user_pref("extensions.incredibar.prtnrId", "Incredibar"); Gefunden : user_pref("extensions.incredibar.prtnrid", "Incredibar"); Gefunden : user_pref("extensions.incredibar.sg", "none"); Gefunden : user_pref("extensions.incredibar.smplGrp", "none"); Gefunden : user_pref("extensions.incredibar.smplgrp", "none"); Gefunden : user_pref("extensions.incredibar.srch", ""); Gefunden : user_pref("extensions.incredibar.srchprvdr", ""); Gefunden : user_pref("extensions.incredibar.tlbrId", "base"); Gefunden : user_pref("extensions.incredibar.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6PQKkiAWrD&loc=IB_T[...] Gefunden : user_pref("extensions.incredibar.tlbrid", "base"); Gefunden : user_pref("extensions.incredibar.tlbrsrchurl", "hxxp://mystart.Incredibar.com/?a=6PQKkiAWrD&loc=IB_T[...] Gefunden : user_pref("extensions.incredibar.upn2", "6PQKkiAWrD"); Gefunden : user_pref("extensions.incredibar.upn2n", "92543620030205849"); Gefunden : user_pref("extensions.incredibar.vrsn", "1.5.11.14"); Gefunden : user_pref("extensions.incredibar.vrsnTs", "1.5.11.1416:43:46"); Gefunden : user_pref("extensions.incredibar.vrsni", "1.5.11.14"); Gefunden : user_pref("extensions.incredibar.vrsnts", "1.5.11.1416:43:46"); Gefunden : user_pref("extensions.incredibar_i.aflt", "orgnl"); Gefunden : user_pref("extensions.incredibar_i.dfltLng", ""); Gefunden : user_pref("extensions.incredibar_i.did", "10643"); Gefunden : user_pref("extensions.incredibar_i.excTlbr", false); Gefunden : user_pref("extensions.incredibar_i.id", "c4d8b5c3000000000000844bf529cb11"); Gefunden : user_pref("extensions.incredibar_i.installerproductid", "26"); Gefunden : user_pref("extensions.incredibar_i.instlDay", "15604"); Gefunden : user_pref("extensions.incredibar_i.instlRef", ""); Gefunden : user_pref("extensions.incredibar_i.ms_url_id", ""); Gefunden : user_pref("extensions.incredibar_i.newTab", false); Gefunden : user_pref("extensions.incredibar_i.ppd", "1"); Gefunden : user_pref("extensions.incredibar_i.prdct", "incredibar"); Gefunden : user_pref("extensions.incredibar_i.productid", "26"); Gefunden : user_pref("extensions.incredibar_i.prtnrId", "Incredibar"); Gefunden : user_pref("extensions.incredibar_i.smplGrp", "none"); Gefunden : user_pref("extensions.incredibar_i.tlbrId", "base"); Gefunden : user_pref("extensions.incredibar_i.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6PQKkiAWrD&loc=IB[...] Gefunden : user_pref("extensions.incredibar_i.upn2", "6PQKkiAWrD"); Gefunden : user_pref("extensions.incredibar_i.upn2n", "92543620030205849"); Gefunden : user_pref("extensions.incredibar_i.vrsn", "1.5.11.14"); Gefunden : user_pref("extensions.incredibar_i.vrsnTs", "1.5.11.1416:43:46"); Gefunden : user_pref("extensions.incredibar_i.vrsni", "1.5.11.14"); Gefunden : user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_WSG_whiteList", "{\"search.babylon.com\[...] -\\ Google Chrome v [Version kann nicht ermittelt werden] Datei : C:\Users\Christa\AppData\Local\Google\Chrome\User Data\Default\Preferences [OK] Die Datei ist sauber. ************************* AdwCleaner[R1].txt - [54470 octets] - [25/09/2012 12:52:19] AdwCleaner[R2].txt - [22085 octets] - [27/09/2012 11:37:23] ########## EOF - C:\AdwCleaner[R2].txt - [22146 octets] ########## |
![]() |
Themen zu Neuer Tab in Firefox wird mit "MyStart By IncrediBar" geöffnet |
.dll, administrator, adware.solimba.lame, anti-malware, appdata, autostart, avira searchfree toolbar, babylon toolbar, babylontoolbar, bingbar, browser, canon, dateien, dvd, explorer, firefox, folge, forum, free, google, helper, homepage, incredibar toolbar, install.exe, malwarebytes, microsoft, mozilla, msiexec.exe, mystart by incredibar, nvidia update, nvpciflt.sys, office 2007, search the web, seite, software, speicher, startseite, sweetim, tab, uninstall.exe, usb 3.0, vdeck.exe |