| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: E-Mail Spam, Tojaner: tr/dldr.karagany.i.58Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
12.12.2012, 14:22
| #16 | |
| /// Winkelfunktion /// TB-Süch-Tiger™   |  E-Mail Spam, Tojaner: tr/dldr.karagany.i.58 Dann bitte jetzt CF ausführen: ComboFix Ein Leitfaden und Tutorium zur Nutzung von ComboFix
Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat! Solltest du nach der Ausführung von Combofix Probleme beim Starten von Anwendungen haben und Meldungen erhalten wie Zitat:
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
12.12.2012, 18:14
| #17 |
 | E-Mail Spam, Tojaner: tr/dldr.karagany.i.58 Okay, gemacht.
__________________Vielen Dank für die Unterstützung! Hier der Log: Code:
ATTFilter ComboFix 12-12-10.01 - Fabio 12.12.2012 17:59:35.1.8 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.4029.2669 [GMT 1:00]
ausgeführt von:: c:\users\Fabio\Desktop\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\install.exe
c:\programdata\PCDr\6032\AddOnDownloaded\016060e8-e1de-4d82-bd11-b667007b1f12.dll
c:\programdata\PCDr\6032\AddOnDownloaded\111e1115-314f-4404-be4a-ad58e8e2423d.dll
c:\programdata\PCDr\6032\AddOnDownloaded\1d151f53-1500-414d-85b4-ab85d24f0785.dll
c:\programdata\PCDr\6032\AddOnDownloaded\21eb1c2f-b0d8-40e6-96dd-163437759b68.dll
c:\programdata\PCDr\6032\AddOnDownloaded\2390e056-e2db-44ed-91a5-5ca43aefea83.dll
c:\programdata\PCDr\6032\AddOnDownloaded\35445406-e7ed-4a0e-9922-45505e71594b.dll
c:\programdata\PCDr\6032\AddOnDownloaded\358ba71b-117f-40d5-95aa-57de622719b7.dll
c:\programdata\PCDr\6032\AddOnDownloaded\3d656744-60b2-4576-8124-a39729f8b522.dll
c:\programdata\PCDr\6032\AddOnDownloaded\406007ac-5ba8-43e6-97b6-0c6ed58bb6e8.dll
c:\programdata\PCDr\6032\AddOnDownloaded\468d25c7-baa8-4db4-a17f-ceac895a9bc8.dll
c:\programdata\PCDr\6032\AddOnDownloaded\489f121a-4538-4839-9d1d-3c48e590be59.dll
c:\programdata\PCDr\6032\AddOnDownloaded\4cfdf1e7-d0b2-449c-bd2d-084cd975e5d8.dll
c:\programdata\PCDr\6032\AddOnDownloaded\4f1c58d6-ca02-4906-b156-709481baca61.dll
c:\programdata\PCDr\6032\AddOnDownloaded\4f64943e-d62a-4f2e-a3cd-98fb91e30469.dll
c:\programdata\PCDr\6032\AddOnDownloaded\59bb1a7b-2122-4c71-82b0-30bee96f063e.dll
c:\programdata\PCDr\6032\AddOnDownloaded\62089595-46e8-4c4f-9d7b-48be969390bb.dll
c:\programdata\PCDr\6032\AddOnDownloaded\72f0dc20-5af7-4221-9657-442597ce030b.dll
c:\programdata\PCDr\6032\AddOnDownloaded\73a14ca6-4567-413f-a60f-d04159cb72eb.dll
c:\programdata\PCDr\6032\AddOnDownloaded\75c8751b-fcad-4846-80ce-3a2efec60612.dll
c:\programdata\PCDr\6032\AddOnDownloaded\7779c9df-2dc0-4fd5-92bb-c64027285f8b.dll
c:\programdata\PCDr\6032\AddOnDownloaded\788ad19e-7745-402f-a5a5-20d2ab8b5f1b.dll
c:\programdata\PCDr\6032\AddOnDownloaded\9881c561-a45a-4c53-9d45-de93a99e2898.dll
c:\programdata\PCDr\6032\AddOnDownloaded\b72409f9-df97-4592-bbfd-fff1ce0a9559.dll
c:\programdata\PCDr\6032\AddOnDownloaded\bbd4d2b0-9dc6-46d0-a352-dbcd92f63c4d.dll
c:\programdata\PCDr\6032\AddOnDownloaded\cb7af81b-44d9-4f99-b223-18a71e8c85b6.dll
c:\programdata\PCDr\6032\AddOnDownloaded\d220b53c-6a3c-4b5d-8797-965d39e82fff.dll
c:\programdata\PCDr\6032\AddOnDownloaded\d3ef65ec-842a-4640-b428-aca2f4a966e6.dll
c:\programdata\PCDr\6032\AddOnDownloaded\d78fa15b-2d61-4303-adaa-edec9ebbb2b3.dll
c:\programdata\PCDr\6032\AddOnDownloaded\e16f2788-babe-4a60-93d0-d507a5228753.dll
c:\programdata\PCDr\6032\AddOnDownloaded\ff24953d-0c6e-4af9-a727-84ce58c99035.dll
c:\users\Fabio\AppData\Roaming\chrtmp
c:\windows\security\Database\tmp.edb
.
.
((((((((((((((((((((((( Dateien erstellt von 2012-11-12 bis 2012-12-12 ))))))))))))))))))))))))))))))
.
.
2012-12-12 17:07 . 2012-12-12 17:07 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-12-12 08:35 . 2012-11-09 05:45 2048 ----a-w- c:\windows\system32\tzres.dll
2012-12-12 08:35 . 2012-11-09 04:42 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2012-12-12 08:33 . 2012-11-02 05:59 478208 ----a-w- c:\windows\system32\dpnet.dll
2012-12-12 08:33 . 2012-11-02 05:11 376832 ----a-w- c:\windows\SysWow64\dpnet.dll
2012-12-11 11:43 . 2012-12-11 11:46 -------- d-----w- c:\users\Fabio\AppData\Local\libimobiledevice
2012-12-04 16:21 . 2012-12-04 16:21 -------- d-----w- c:\users\Fabio\AppData\Roaming\Simply Super Software
2012-12-04 16:20 . 2012-12-04 16:20 -------- d-----w- c:\program files (x86)\Trojan Remover
2012-12-04 16:20 . 2012-12-04 16:20 -------- d-----w- c:\programdata\Simply Super Software
2012-12-04 16:03 . 2012-12-04 16:03 -------- d-----w- c:\program files (x86)\Application Updater
2012-12-04 16:03 . 2012-12-04 16:03 -------- d-----w- c:\program files (x86)\YTD Toolbar
2012-12-04 16:03 . 2012-12-04 16:03 -------- d-----w- c:\program files (x86)\Common Files\Spigot
2012-12-04 06:44 . 2012-12-04 06:44 -------- d-----w- c:\program files\CCleaner
2012-12-04 02:01 . 2012-12-04 02:01 -------- d-----w- c:\users\Fabio\AppData\Roaming\Malwarebytes
2012-12-04 02:01 . 2012-12-04 02:01 -------- d-----w- c:\programdata\Malwarebytes
2012-12-04 02:01 . 2012-12-04 02:01 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2012-12-04 02:01 . 2012-09-29 18:54 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-12-01 11:52 . 2012-12-01 11:52 -------- d-----w- c:\program files (x86)\Common Files\Skype
2012-11-30 09:59 . 2012-11-30 09:59 -------- d-----w- c:\program files\iPod
2012-11-30 09:59 . 2012-11-30 10:00 -------- d-----w- c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69
2012-11-30 09:59 . 2012-11-30 10:00 -------- d-----w- c:\program files\iTunes
2012-11-30 09:59 . 2012-11-30 10:00 -------- d-----w- c:\program files (x86)\iTunes
2012-11-14 10:10 . 2012-07-26 07:46 2560 ----a-w- c:\windows\system32\drivers\de-DE\wdf01000.sys.mui
2012-11-14 10:10 . 2012-07-26 04:55 785512 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
2012-11-14 10:10 . 2012-07-26 04:55 54376 ----a-w- c:\windows\system32\drivers\WdfLdr.sys
2012-11-14 10:10 . 2012-07-26 02:36 9728 ----a-w- c:\windows\system32\Wdfres.dll
2012-11-14 10:00 . 2012-07-26 02:26 87040 ----a-w- c:\windows\system32\drivers\WUDFPf.sys
2012-11-14 10:00 . 2012-07-26 02:26 198656 ----a-w- c:\windows\system32\drivers\WUDFRd.sys
2012-11-14 10:00 . 2012-07-26 03:08 229888 ----a-w- c:\windows\system32\WUDFHost.exe
2012-11-14 10:00 . 2012-07-26 03:08 84992 ----a-w- c:\windows\system32\WUDFSvc.dll
2012-11-14 10:00 . 2012-07-26 03:08 744448 ----a-w- c:\windows\system32\WUDFx.dll
2012-11-14 10:00 . 2012-07-26 03:08 45056 ----a-w- c:\windows\system32\WUDFCoinstaller.dll
2012-11-14 10:00 . 2012-07-26 03:08 194048 ----a-w- c:\windows\system32\WUDFPlatform.dll
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-12-12 16:06 . 2010-03-25 16:10 67413224 ----a-w- c:\windows\system32\MRT.exe
2012-12-12 11:41 . 2012-06-09 05:39 697272 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-12-12 11:41 . 2011-05-17 15:57 73656 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-10-16 08:38 . 2012-11-29 07:35 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2012-10-16 08:38 . 2012-11-29 07:35 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2012-10-16 07:39 . 2012-11-29 07:35 561664 ----a-w- c:\windows\apppatch\AcLayers.dll
2012-10-04 16:40 . 2012-12-12 08:34 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2012-09-28 09:32 . 2012-09-28 09:32 5989776 ----a-w- c:\windows\system32\usbaaplrc.dll
2012-09-28 09:32 . 2012-09-28 09:32 53760 ----a-w- c:\windows\system32\drivers\usbaapl64.sys
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{f999a48b-1950-4d81-9971-79018f807b4b}"= "c:\program files (x86)\FreeOnlineRadioPlayerRecorder\tbFree.dll" [2010-06-13 2734688]
.
[HKEY_CLASSES_ROOT\clsid\{f999a48b-1950-4d81-9971-79018f807b4b}]
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{F3FEE66E-E034-436a-86E4-9690573BEE8A}]
2012-11-28 15:42 1230216 ----a-w- c:\program files (x86)\YTD Toolbar\IE\6.6\ytdToolbarIE.dll
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{f999a48b-1950-4d81-9971-79018f807b4b}]
2010-06-13 18:10 2734688 ----a-w- c:\program files (x86)\FreeOnlineRadioPlayerRecorder\tbFree.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{f999a48b-1950-4d81-9971-79018f807b4b}"= "c:\program files (x86)\FreeOnlineRadioPlayerRecorder\tbFree.dll" [2010-06-13 2734688]
"{F3FEE66E-E034-436a-86E4-9690573BEE8A}"= "c:\program files (x86)\YTD Toolbar\IE\6.6\ytdToolbarIE.dll" [2012-11-28 1230216]
.
[HKEY_CLASSES_ROOT\clsid\{f999a48b-1950-4d81-9971-79018f807b4b}]
.
[HKEY_CLASSES_ROOT\clsid\{f3fee66e-e034-436a-86e4-9690573bee8a}]
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2010-10-06 23:36 94208 ----a-w- c:\users\Fabio\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2010-10-06 23:36 94208 ----a-w- c:\users\Fabio\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2010-10-06 23:36 94208 ----a-w- c:\users\Fabio\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2010-04-01 357696]
"AVMUSBFernanschluss"="c:\users\Fabio\AppData\Local\Apps\2.0\GW1AE2OX.JWT\ZYD91W7J.5Y1\frit..tion_8488884cfbcefd60_0002.0002_8541bf1f4a1c673d\AVMAutoStart.exe" [2011-03-23 147456]
"Facebook Update"="c:\users\Fabio\AppData\Local\Facebook\Update\FacebookUpdate.exe" [2012-10-31 138096]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-01-04 336384]
"Dell DataSafe Online"="c:\program files (x86)\Dell DataSafe Online\DataSafeOnline.exe" [2010-02-09 1807680]
"PDVDDXSrv"="c:\program files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe" [2009-06-25 140520]
"Dell Webcam Central"="c:\program files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" [2009-06-24 409744]
"Desktop Disc Tool"="c:\program files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe" [2009-12-15 498160]
"Copperhead"="c:\program files (x86)\Razer\Copperhead\razerhid.exe" [2009-11-19 135168]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-11-28 59280]
"BCSSync"="c:\program files (x86)\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520]
"PMBVolumeWatcher"="c:\program files (x86)\Sony\PMB\PMBVolumeWatcher.exe" [2010-11-26 648032]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2012-08-12 348664]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2012-04-18 421888]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2012-11-28 151952]
"TrojanScanner"="c:\program files (x86)\Trojan Remover\Trjscan.exe" [2012-09-14 1247504]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
"c:\program files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.exe"="c:\program files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.exe" [2010-10-10 560128]
"Launcher"="c:\program files (x86)\Dell DataSafe Local Backup\Components\scheduler\Launcher.exe" [2011-01-13 165184]
.
c:\users\Fabio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dell Dock.lnk - c:\program files\Dell\DellDock\DellDock.exe [2009-9-21 1316192]
Dropbox.lnk - c:\users\Fabio\AppData\Roaming\Dropbox\bin\Dropbox.exe [2012-5-24 27112840]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
BTTray.lnk - c:\program files (x86)\Belkin\Bluetooth Software\BTTray.exe [2005-8-24 577597]
.
c:\users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dell Dock First Run.lnk - c:\program files\Dell\DellDock\DellDock.exe [2009-9-21 1316192]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" -atboottime
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe"
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe"
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
.
R0 sptd;sptd; [x]
R2 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-10-21 196176]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-11-09 160944]
R3 copperhd;Razer Copperhead Driver;c:\windows\system32\drivers\copperhd.sys [2009-11-10 14336]
R3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\DRIVERS\netaapl64.sys [2010-04-19 22528]
R3 PCDSRVC{1E208CE0-FB7451FF-06020200}_0;PCDSRVC{1E208CE0-FB7451FF-06020200}_0 - PCDR Kernel Mode Service Helper Driver;c:\program files\dell support center\pcdsrvc_x64.pkms [2012-08-17 25584]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2012-09-28 53760]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe [2011-10-09 1255736]
R4 Application Updater;Application Updater;c:\program files (x86)\Application Updater\ApplicationUpdater.exe [2012-11-28 793600]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [2009-07-09 55280]
S0 stdflt;Disk Filter Driver for Accelerometer;c:\windows\system32\DRIVERS\stdflt.sys [2009-07-23 18792]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [2012-05-02 27760]
S2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_42d83e1760b1e973\AESTSr64.exe [2009-03-02 89600]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2011-01-05 203776]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2012-05-01 86224]
S2 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\SeaPort.EXE [2011-10-13 249648]
S2 DockLoginService;Dock Login Service;c:\program files\Dell\DellDock\DockLogin.exe [2009-06-09 155648]
S2 InstallFilterService;FF Install Filter Service;c:\program files (x86)\STMicroelectronics\Accelerometer\InstallFilterService.exe [2009-06-23 60928]
S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2012-09-29 399432]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-09-29 676936]
S2 NIHardwareService;NIHardwareService;c:\program files\Common Files\Native Instruments\Hardware\NIHardwareService.exe [2009-12-08 5009920]
S2 PMBDeviceInfoProvider;PMBDeviceInfoProvider;c:\program files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe [2010-11-26 398176]
S2 rimspci;rimspci;c:\windows\system32\DRIVERS\rimspe64.sys [2009-07-02 60416]
S2 risdpcie;risdpcie;c:\windows\system32\DRIVERS\risdpe64.sys [2009-07-01 80896]
S2 rixdpcie;rixdpcie;c:\windows\system32\DRIVERS\rixdpe64.sys [2009-07-04 55808]
S2 SftService;SoftThinks Agent Service;c:\program files (x86)\Dell DataSafe Local Backup\sftservice.EXE [2011-01-13 705856]
S2 TeamViewer6;TeamViewer 6;c:\program files (x86)\TeamViewer\Version6\TeamViewer_Service.exe [2011-04-01 2271608]
S2 vpnagent;Cisco AnyConnect VPN Agent;c:\program files (x86)\Cisco\Cisco AnyConnect VPN Client\vpnagent.exe [2011-02-11 603896]
S3 Acceler;Accelerometer Service;c:\windows\system32\DRIVERS\Acceler.sys [2009-07-24 23912]
S3 avmaudio;AVM Audio;c:\windows\system32\DRIVERS\avmaudio.sys [2011-03-23 116096]
S3 CtClsFlt;Creative Camera Class Upper Filter Driver;c:\windows\system32\DRIVERS\CtClsFlt.sys [2009-06-15 172704]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-09-29 25928]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2009-08-20 239616]
.
.
Inhalt des "geplante Tasks" Ordners
.
2012-12-12 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-09 11:41]
.
2012-12-09 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1831652054-585087053-2589245715-1000Core.job
- c:\users\Fabio\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-10-31 17:22]
.
2012-12-12 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1831652054-585087053-2589245715-1000UA.job
- c:\users\Fabio\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-10-31 17:22]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2010-10-06 23:36 97792 ----a-w- c:\users\Fabio\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2010-10-06 23:36 97792 ----a-w- c:\users\Fabio\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2010-10-06 23:36 97792 ----a-w- c:\users\Fabio\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2010-10-06 23:36 97792 ----a-w- c:\users\Fabio\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2009-12-14 487424]
"Broadcom Wireless Manager UI"="c:\program files\Dell\Dell Wireless WLAN Card\WLTRAY.exe" [2009-07-17 4968960]
"FreeFallProtection"="c:\program files (x86)\STMicroelectronics\Accelerometer\FF_Protection.exe" [2009-07-22 2384896]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.de/
mStart Page = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: An OneNote s&enden - c:\progra~2\MICROS~2\Office14\ONBttnIE.dll/105
IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~2\Office14\EXCEL.EXE/3000
IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000
IE: Senden an &Bluetooth - c:\program files (x86)\Belkin\Bluetooth Software\btsendto_ie_ctx.htm
TCP: DhcpNameServer = 202.40.192.254 202.40.192.242
FF - ProfilePath - c:\users\Fabio\AppData\Roaming\Mozilla\Firefox\Profiles\3n2bn0p9.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2737658&SearchSource=3&q={searchTerms}
FF - prefs.js: browser.search.selectedEngine - Yahoo
FF - prefs.js: browser.startup.homepage - hxxp://www.google.de
FF - prefs.js: keyword.URL - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2737658&q=
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
Toolbar-Locked - (no file)
WebBrowser-{F999A48B-1950-4D81-9971-79018F807B4B} - (no file)
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PCDSRVC{1E208CE0-FB7451FF-06020200}_0]
"ImagePath"="\??\c:\program files\dell support center\pcdsrvc_x64.pkms"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10d.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10d.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
@Denied: (A 2) (Everyone)
@="IFlashBroker3"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2012-12-12 18:10:58
ComboFix-quarantined-files.txt 2012-12-12 17:10
.
Vor Suchlauf: 12 Verzeichnis(se), 235.943.514.112 Bytes frei
Nach Suchlauf: 15 Verzeichnis(se), 237.920.710.656 Bytes frei
.
- - End Of File - - 78732FAD8A520A07DB9A21AC98B4D7E7
|
|
13.12.2012, 14:31
| #18 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | E-Mail Spam, Tojaner: tr/dldr.karagany.i.58 adwCleaner - Toolbars und ungewollte Start-/Suchseiten aufspüren
__________________Downloade Dir bitte AdwCleaner auf deinen Desktop. Falls der adwCleaner schon mal in der runtergeladen wurde, bitte die alte adwcleaner.exe löschen und neu runterladen!!
__________________ |
|
13.12.2012, 17:12
| #19 |
| | E-Mail Spam, Tojaner: tr/dldr.karagany.i.58 Hier der Log: Code:
ATTFilter # AdwCleaner v2.100 - Datei am 13/12/2012 um 17:11:39 erstellt
# Aktualisiert am 09/12/2012 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzer : Fabio - FABIO-PC
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\Fabio\Desktop\adwcleaner.exe
# Option [Suche]
**** [Dienste] ****
Gefunden : Application Updater
***** [Dateien / Ordner] *****
Datei Gefunden : C:\Program Files (x86)\Mozilla Firefox\Plugins\npvsharetvplg.dll
Datei Gefunden : C:\Users\Fabio\AppData\Roaming\Mozilla\Firefox\Profiles\3n2bn0p9.default\searchplugins\Conduit.xml
Datei Gefunden : C:\Users\Fabio\AppData\Roaming\Mozilla\Firefox\Profiles\3n2bn0p9.default\searchplugins\Startsear.xml
Ordner Gefunden : C:\Program Files (x86)\Application Updater
Ordner Gefunden : C:\Program Files (x86)\Common Files\spigot
Ordner Gefunden : C:\Program Files (x86)\Conduit
Ordner Gefunden : C:\Program Files (x86)\FreeOnlineRadioPlayerRecorder
Ordner Gefunden : C:\Program Files (x86)\ICQ6Toolbar
Ordner Gefunden : C:\Program Files (x86)\vShare.tv plugin
Ordner Gefunden : C:\ProgramData\ICQ\ICQToolbar
Ordner Gefunden : C:\ProgramData\Tarma Installer
Ordner Gefunden : C:\Users\Fabio\AppData\LocalLow\Conduit
Ordner Gefunden : C:\Users\Fabio\AppData\LocalLow\FreeOnlineRadioPlayerRecorder
Ordner Gefunden : C:\Users\Fabio\AppData\LocalLow\PriceGong
Ordner Gefunden : C:\Users\Fabio\AppData\LocalLow\Search Settings
Ordner Gefunden : C:\Users\Fabio\AppData\Roaming\Mozilla\Firefox\Profiles\3n2bn0p9.default\Conduit
Ordner Gefunden : C:\Users\Fabio\AppData\Roaming\Mozilla\Firefox\Profiles\3n2bn0p9.default\ConduitCommon
Ordner Gefunden : C:\Users\Fabio\AppData\Roaming\Mozilla\Firefox\Profiles\3n2bn0p9.default\CT2737658
Ordner Gefunden : C:\Users\Fabio\AppData\Roaming\Mozilla\Firefox\Profiles\3n2bn0p9.default\extensions\{f999a48b-1950-4d81-9971-79018f807b4b}
Ordner Gefunden : C:\Users\Fabio\AppData\Roaming\Mozilla\Firefox\Profiles\3n2bn0p9.default\extensions\staged
Ordner Gefunden : C:\Users\Fabio\AppData\Roaming\pdfforge
***** [Registrierungsdatenbank] *****
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\Conduit
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\FreeOnlineRadioPlayerRecorder
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\PriceGong
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\Search Settings
Schlüssel Gefunden : HKCU\Software\AppDataLow\Toolbar
Schlüssel Gefunden : HKCU\Software\Ask.com.tmp
Schlüssel Gefunden : HKCU\Software\Conduit
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F97BFF8-488B-4107-BCEE-B161AB4E4183}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F999A48B-1950-4D81-9971-79018F807B4B}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1ADCD801-0FB0-403F-A465-6DE2C7590B1E}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A1B48071-416D-474E-A13B-BE5456E7FC31}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F999A48B-1950-4D81-9971-79018F807B4B}
Schlüssel Gefunden : HKCU\Software\Search Settings
Schlüssel Gefunden : HKCU\Software\StartSearch
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Schlüssel Gefunden : HKLM\Software\Application Updater
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Toolbar.CT2737658
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{79D60450-56C5-4A8C-9321-6D5BC2A81E5A}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{99C22A61-21BA-4F81-85FF-CDC9EB5DB10B}
Schlüssel Gefunden : HKLM\Software\Conduit
Schlüssel Gefunden : HKLM\Software\FreeOnlineRadioPlayerRecorder
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1ADCD801-0FB0-403F-A465-6DE2C7590B1E}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F97BFF8-488B-4107-BCEE-B161AB4E4183}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1B48071-416D-474E-A13B-BE5456E7FC31}
Schlüssel Gefunden : HKLM\Software\Search Settings
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{1ADCD801-0FB0-403F-A465-6DE2C7590B1E}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{8F97BFF8-488B-4107-BCEE-B161AB4E4183}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A1B48071-416D-474E-A13B-BE5456E7FC31}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{F3FEE66E-E034-436A-86E4-9690573BEE8A}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{F999A48B-1950-4D81-9971-79018F807B4B}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F3FEE66E-E034-436A-86E4-9690573BEE8A}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F999A48B-1950-4D81-9971-79018F807B4B}
Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\FreeOnlineRadioPlayerRecorder Toolbar
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{3D782BB2-F2A5-11D3-BF4C-000000000000}
Schlüssel Gefunden : HKU\S-1-5-21-1831652054-585087053-2589245715-1000\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}
Schlüssel Gefunden : HKU\S-1-5-21-1831652054-585087053-2589245715-1000\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{F999A48B-1950-4D81-9971-79018F807B4B}]
Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{F999A48B-1950-4D81-9971-79018F807B4B}]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{855F3B16-6D32-4FE6-8A56-BBB695989046}]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{F999A48B-1950-4D81-9971-79018F807B4B}]
Wert Gefunden : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{F3FEE66E-E034-436A-86E4-9690573BEE8A}]
Wert Gefunden : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{F999A48B-1950-4D81-9971-79018F807B4B}]
***** [Internet Browser] *****
-\\ Internet Explorer v8.0.7601.17514
[HKCU\Software\Microsoft\Internet Explorer\Main - ICQ Search] = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
-\\ Mozilla Firefox v8.0 (de)
Profilname : default
Datei : C:\Users\Fabio\AppData\Roaming\Mozilla\Firefox\Profiles\3n2bn0p9.default\prefs.js
Gefunden : user_pref("CT2737658..clientLogIsEnabled", false);
Gefunden : user_pref("CT2737658..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Gefunden : user_pref("CT2737658..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Gefunden : user_pref("CT2737658.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
Gefunden : user_pref("CT2737658.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Gefunden : user_pref("CT2737658.AppTrackingLastCheckTime", "Tue Nov 29 2011 20:44:35 GMT+0100");
Gefunden : user_pref("CT2737658.BrowserCompStateIsOpen_129531118722676073", true);
Gefunden : user_pref("CT2737658.BrowserCompStateIsOpen_129674830183032820", true);
Gefunden : user_pref("CT2737658.BrowserCompStateIsOpen_129738588316769134", true);
Gefunden : user_pref("CT2737658.BrowserCompStateIsOpen_129738588453335184", true);
Gefunden : user_pref("CT2737658.BrowserCompStateIsOpen_129869133807760680", true);
Gefunden : user_pref("CT2737658.CT2737658", "CT2737658");
Gefunden : user_pref("CT2737658.CurrentServerDate", "12-12-2012");
Gefunden : user_pref("CT2737658.DSChangedManually", true);
Gefunden : user_pref("CT2737658.DialogsAlignMode", "LTR");
Gefunden : user_pref("CT2737658.DialogsGetterLastCheckTime", "Wed Dec 12 2012 09:43:16 GMT+0100");
Gefunden : user_pref("CT2737658.DownloadReferralCookieData", "");
Gefunden : user_pref("CT2737658.FeedLastCount129531111962231774", 400);
Gefunden : user_pref("CT2737658.FeedPollDate128932492092456574", "Wed Nov 30 2011 10:47:13 GMT+0100");
Gefunden : user_pref("CT2737658.FeedPollDate129066712740779554", "Wed Nov 30 2011 10:47:13 GMT+0100");
Gefunden : user_pref("CT2737658.FeedPollDate129182867803381395", "Wed Nov 30 2011 10:47:13 GMT+0100");
Gefunden : user_pref("CT2737658.FeedPollDate129531111962241536", "Wed Nov 30 2011 10:47:12 GMT+0100");
Gefunden : user_pref("CT2737658.FeedPollDate129531111962251297", "Wed Nov 30 2011 10:47:13 GMT+0100");
Gefunden : user_pref("CT2737658.FeedPollDate129531111962251298", "Wed Nov 30 2011 10:47:13 GMT+0100");
Gefunden : user_pref("CT2737658.FeedPollDate129531111962251299", "Wed Nov 30 2011 10:47:13 GMT+0100");
Gefunden : user_pref("CT2737658.FeedPollDate129531111962251300", "Wed Nov 30 2011 10:47:13 GMT+0100");
Gefunden : user_pref("CT2737658.FeedTTL128932492092456574", 40);
Gefunden : user_pref("CT2737658.FeedTTL129066712740779554", 40);
Gefunden : user_pref("CT2737658.FeedTTL129182867803381395", 40);
Gefunden : user_pref("CT2737658.FeedTTL129531111962241536", 40);
Gefunden : user_pref("CT2737658.FeedTTL129531111962251297", 40);
Gefunden : user_pref("CT2737658.FeedTTL129531111962251298", 40);
Gefunden : user_pref("CT2737658.FeedTTL129531111962251299", 40);
Gefunden : user_pref("CT2737658.FeedTTL129531111962251300", 40);
Gefunden : user_pref("CT2737658.FirstServerDate", "29-11-2011");
Gefunden : user_pref("CT2737658.FirstTime", true);
Gefunden : user_pref("CT2737658.FirstTimeFF3", true);
Gefunden : user_pref("CT2737658.FixPageNotFoundErrors", false);
Gefunden : user_pref("CT2737658.GroupingServerCheckInterval", 1440);
Gefunden : user_pref("CT2737658.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Gefunden : user_pref("CT2737658.HPChangedManually", false);
Gefunden : user_pref("CT2737658.HPProtectChoice", true);
Gefunden : user_pref("CT2737658.HPProtectCount", 1);
Gefunden : user_pref("CT2737658.HasUserGlobalKeys", true);
Gefunden : user_pref("CT2737658.HomePageProtectorEnabled", false);
Gefunden : user_pref("CT2737658.HomepageBeforeUnload", "hxxp://search.conduit.com/?ctid=CT2737658&SearchSource=[...]
Gefunden : user_pref("CT2737658.Initialize", true);
Gefunden : user_pref("CT2737658.InitializeCommonPrefs", true);
Gefunden : user_pref("CT2737658.InstallationAndCookieDataSentCount", 3);
Gefunden : user_pref("CT2737658.InstallationType", "Unknown");
Gefunden : user_pref("CT2737658.InstalledDate", "Tue Nov 29 2011 20:44:24 GMT+0100");
Gefunden : user_pref("CT2737658.InvalidateCache", false);
Gefunden : user_pref("CT2737658.IsAlertDBUpdated", true);
Gefunden : user_pref("CT2737658.IsGrouping", false);
Gefunden : user_pref("CT2737658.IsMulticommunity", false);
Gefunden : user_pref("CT2737658.IsOpenThankYouPage", true);
Gefunden : user_pref("CT2737658.IsOpenUninstallPage", true);
Gefunden : user_pref("CT2737658.LanguagePackLastCheckTime", "Wed Dec 12 2012 09:43:18 GMT+0100");
Gefunden : user_pref("CT2737658.LanguagePackReloadIntervalMM", 1440);
Gefunden : user_pref("CT2737658.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Gefunden : user_pref("CT2737658.LastLogin_3.13.0.6", "Sun Aug 26 2012 19:52:28 GMT+0200");
Gefunden : user_pref("CT2737658.LastLogin_3.15.1.0", "Wed Dec 12 2012 09:43:16 GMT+0100");
Gefunden : user_pref("CT2737658.LastLogin_3.3.3.2", "Tue Nov 29 2011 20:44:24 GMT+0100");
Gefunden : user_pref("CT2737658.LastLogin_3.8.0.8", "Mon Dec 05 2011 20:25:29 GMT+0100");
Gefunden : user_pref("CT2737658.LastLogin_3.8.1.0", "Tue Jan 10 2012 19:13:32 GMT+0100");
Gefunden : user_pref("CT2737658.LastLogin_3.9.0.3", "Wed Jun 06 2012 00:13:16 GMT+0800 (Malaiische Halbinsel No[...]
Gefunden : user_pref("CT2737658.LatestVersion", "3.15.1.0");
Gefunden : user_pref("CT2737658.Locale", "en");
Gefunden : user_pref("CT2737658.MCDetectTooltipHeight", "83");
Gefunden : user_pref("CT2737658.MCDetectTooltipShow", false);
Gefunden : user_pref("CT2737658.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Gefunden : user_pref("CT2737658.MCDetectTooltipWidth", "295");
Gefunden : user_pref("CT2737658.MyStuffEnabledAtInstallation", true);
Gefunden : user_pref("CT2737658.RadioIsPodcast", false);
Gefunden : user_pref("CT2737658.RadioLastCheckTime", "Tue Nov 29 2011 20:44:24 GMT+0100");
Gefunden : user_pref("CT2737658.RadioLastUpdateIPServer", "3");
Gefunden : user_pref("CT2737658.RadioLastUpdateServer", "129259829623770000");
Gefunden : user_pref("CT2737658.RadioMediaID", "21145355");
Gefunden : user_pref("CT2737658.RadioMediaType", "Media Player");
Gefunden : user_pref("CT2737658.RadioMenuSelectedID", "EBRadioMenu_CT273765821145355");
Gefunden : user_pref("CT2737658.RadioShrinkedFromSetup", false);
Gefunden : user_pref("CT2737658.RadioStationName", "Classic%20Rock");
Gefunden : user_pref("CT2737658.RadioStationURL", "hxxp://www.gotradio.com/player/launch.asp?id=22&cr=lb");
Gefunden : user_pref("CT2737658.SavedHomepage", "resource:/browserconfig.properties");
Gefunden : user_pref("CT2737658.SearchEngineBeforeUnload", "chrome://browser-region/locale/region.properties");
Gefunden : user_pref("CT2737658.SearchFromAddressBarIsInit", true);
Gefunden : user_pref("CT2737658.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT273[...]
Gefunden : user_pref("CT2737658.SearchInNewTabEnabled", true);
Gefunden : user_pref("CT2737658.SearchInNewTabIntervalMM", 1440);
Gefunden : user_pref("CT2737658.SearchInNewTabLastCheckTime", "Wed Dec 12 2012 09:43:15 GMT+0100");
Gefunden : user_pref("CT2737658.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Gefunden : user_pref("CT2737658.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usa[...]
Gefunden : user_pref("CT2737658.SearchProtectorEnabled", false);
Gefunden : user_pref("CT2737658.SearchProtectorToolbarDisabled", false);
Gefunden : user_pref("CT2737658.ServiceMapLastCheckTime", "Wed Dec 12 2012 09:43:16 GMT+0100");
Gefunden : user_pref("CT2737658.SettingsLastCheckTime", "Wed Dec 12 2012 09:43:14 GMT+0100");
Gefunden : user_pref("CT2737658.SettingsLastUpdate", "1354706882");
Gefunden : user_pref("CT2737658.ThirdPartyComponentsInterval", 504);
Gefunden : user_pref("CT2737658.ThirdPartyComponentsLastCheck", "Wed Dec 12 2012 09:43:14 GMT+0100");
Gefunden : user_pref("CT2737658.ThirdPartyComponentsLastUpdate", "1331805997");
Gefunden : user_pref("CT2737658.ToolbarShrinkedFromSetup", false);
Gefunden : user_pref("CT2737658.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2737658");
Gefunden : user_pref("CT2737658.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]
Gefunden : user_pref("CT2737658.UserID", "UN98037043847235151");
Gefunden : user_pref("CT2737658.ValidationData_Toolbar", 2);
Gefunden : user_pref("CT2737658.alertChannelId", "1129903");
Gefunden : user_pref("CT2737658.approveUntrustedApps", true);
Gefunden : user_pref("CT2737658.backendstorage./9b+7e+x305", "247E27413334363379453A3D2A722C797A7E7A3128333B4D4[...]
Gefunden : user_pref("CT2737658.backendstorage./9b+7e,x305", "247E28412F3F3E3779453A3D2A722C797B787D3128333C474[...]
Gefunden : user_pref("CT2737658.backendstorage./9b+7e-x305", "247E2936303C363679453A3D2A722C797A207B3128333D462[...]
Gefunden : user_pref("CT2737658.backendstorage./9b+7e.:2z527", "247E707571777278333228702A7B797B7B7E30273224262[...]
Gefunden : user_pref("CT2737658.backendstorage./9b+7e.x305", "247E2A4137374434337A463B3E2B732D7A7D7C213229343F5[...]
Gefunden : user_pref("CT2737658.backendstorage./9b+7e/x305", "247E2B413536327844393C29712B787C7B773027323E4C434[...]
Gefunden : user_pref("CT2737658.backendstorage./9b+7e06cg5el8:", "6E6D6D6C737472717275");
Gefunden : user_pref("CT2737658.backendstorage./9b+7e06cg5el;8i:k", "247E2D2F226A74737372797A7877787B242F4B4947[...]
Gefunden : user_pref("CT2737658.backendstorage./9b+7e0x305", "247E2C403A407743383B28702A777C757D2F26313E4129554[...]
Gefunden : user_pref("CT2737658.backendstorage./9b+7e1x305", "247E2D41313D403279453A3D2A722C7A77797E31283341473[...]
Gefunden : user_pref("CT2737658.backendstorage./9b+7e2x305", "247E2E3542313D3D393A7B473C3F2C742E79207D322934435[...]
Gefunden : user_pref("CT2737658.backendstorage./9b+7e31;cj69c=mk:h?db(shk", "247E61393F236B25727876722A212C6E41[...]
Gefunden : user_pref("CT2737658.backendstorage./9b+7e31;cj7@3 jj", "247E61393F236B2576727974742B222D6F4250454E3[...]
Gefunden : user_pref("CT2737658.backendstorage./9b+7e31;cj7fk;kg#8qkef)til", "247E61393F236B25737476742A212C6E4[...]
Gefunden : user_pref("CT2737658.backendstorage./9b+7e31;cjc<=fbj#mm", "247E61393F236B257576737A2A212C6E414F444D[...]
Gefunden : user_pref("CT2737658.backendstorage./9b+7e31;cjhj>b?i=nc?hths+uu", "247E61393F236B25767375727B2B222D[...]
Gefunden : user_pref("CT2737658.backendstorage./9b+7e3x305", "247E2F413F3B36333F47463F7D493E412E76307E222421352[...]
Gefunden : user_pref("CT2737658.backendstorage./9b+7e4x305", "247E302C407642373A276F29777B74762E2530413E4F494A5[...]
Gefunden : user_pref("CT2737658.backendstorage./9b+7e5x305", "247E3136422B7743383B28702A79757A772F2631434B3D495[...]
Gefunden : user_pref("CT2737658.backendstorage./9b+7e6x305", "247E322C3E32323238453E7C483D402D752F7E7B2424342B3[...]
Gefunden : user_pref("CT2737658.backendstorage./9b+7e7x305", "247E333D2C3F3E3F79453A3D2A722C7B7A797A31283347474[...]
Gefunden : user_pref("CT2737658.backendstorage./9b+7e8x305", "247E343D3F3B35373B3F367C47472C742E7E7823322934495[...]
Gefunden : user_pref("CT2737658.backendstorage./9b+7e9x305", "247E35332C3F327844393C29712B7B757979302732484C4F4[...]
Gefunden : user_pref("CT2737658.backendstorage./9b+7e:x305", "247E36333B38327844393C29712B7B76797A3027324948554[...]
Gefunden : user_pref("CT2737658.backendstorage./9b+7e;x305", "247E373F333F3738422F7B473C3F2C742E7E7A7A22332A354[...]
Gefunden : user_pref("CT2737658.backendstorage./9b+7e<x305", "247E38343030442F463644377D493E412E7630217D2426352[...]
Gefunden : user_pref("CT2737658.backendstorage./9b+7e=x305", "247E3933363F41413739357C483D402D752F207E2022342B3[...]
Gefunden : user_pref("CT2737658.backendstorage./9b+7e>x305", "247E3A41363F323238387B473C3F2C742E7E20217C332A355[...]
Gefunden : user_pref("CT2737658.backendstorage./9b+7e?x305", "247E3B2D2F2F334134403A3A7D494C2D752F2023207E342B3[...]
Gefunden : user_pref("CT2737658.backendstorage./9b+7e@x305", "247E3C40422B7743383B28702A7B767E782F26314E52543D2[...]
Gefunden : user_pref("CT2737658.backendstorage./9b+7eax305", "247E3D3D37387743383B28702A7B7A757E2F26314F4F544A5[...]
Gefunden : user_pref("CT2737658.backendstorage./9b+7ebe3g=;d9n9=d", "372C2D326975762E3A3C7B3A39434A494841434B26[...]
Gefunden : user_pref("CT2737658.backendstorage./9b+7ebx305", "247E3E393141303D33454036327E4A3F422F77317B7D23352[...]
Gefunden : user_pref("CT2737658.backendstorage./9b+7ecx305", "247E3F3D303043312E7A463B3E2B732D7B207E31283353515[...]
Gefunden : user_pref("CT2737658.backendstorage./9b+7edx305", "247E4035422A363879453A3D2A722C7D202F26315247543C4[...]
Gefunden : user_pref("CT2737658.backendstorage./9b+7etx305", "247E6E2F2E3B323342357B44392B732D7A7B7B7C322934215[...]
Gefunden : user_pref("CT2737658.backendstorage./9b-0?3g>d", "6A3C3F406F6E74427A6F724747207D4C797B2550237C502A54[...]
Gefunden : user_pref("CT2737658.backendstorage./9b-0?3g@6:5;", "");
Gefunden : user_pref("CT2737658.backendstorage./9b-0?3gfa7ef", "2B2E2C3D");
Gefunden : user_pref("CT2737658.backendstorage./9b-3=3eccja=f>", "247E333D2C452F4135276F292A212C393D44307832332[...]
Gefunden : user_pref("CT2737658.backendstorage./9b/>01=9a6k6<im;krie@pdawm", "6E6A68707374757677");
Gefunden : user_pref("CT2737658.backendstorage./9b3=>@44i48?", "372C2D326975763342363341484775213F3E484F4E4D464[...]
Gefunden : user_pref("CT2737658.backendstorage./9b5ba==9cjag", "676D3F6B6A6D6C437A4371727B73784A7B4E4E5121");
Gefunden : user_pref("CT2737658.backendstorage./9b6b11g4c56b>f;p;anr@p", "6E6D6C6D7074746E777672717B");
Gefunden : user_pref("CT2737658.backendstorage./9b9643g3/9e", "6A");
Gefunden : user_pref("CT2737658.backendstorage./9b;45>:bi9i7ie", "2B2E2C3D");
Gefunden : user_pref("CT2737658.backendstorage./9b<:222h64<", "393F352F3E");
Gefunden : user_pref("CT2737658.backendstorage./9b=+03eh8h8j?:", "4443");
Gefunden : user_pref("CT2737658.backendstorage./9b?+e2a52d8", "372C2D326975762E3A3C7B3A39434A494841434B26514649[...]
Gefunden : user_pref("CT2737658.backendstorage./9b?b0d:8aj62<h", "6D");
Gefunden : user_pref("CT2737658.backendstorage./9ba@0<0bi6a7gn:6@l?", "6E6B");
Gefunden : user_pref("CT2737658.backendstorage.2737658a129531115111807042000000paramsgk0", "7B22757064617465526[...]
Gefunden : user_pref("CT2737658.backendstorage.appbuttondisablenull", "30");
Gefunden : user_pref("CT2737658.backendstorage.autocompletepro_enable", "31");
Gefunden : user_pref("CT2737658.backendstorage.autocompletepro_enable_auto", "31");
Gefunden : user_pref("CT2737658.backendstorage.cb_experience_000", "3438");
Gefunden : user_pref("CT2737658.backendstorage.cb_firstuse0100", "31");
Gefunden : user_pref("CT2737658.backendstorage.cb_user_id_000", "43423831343930363839353732315F46697265666F78")[...]
Gefunden : user_pref("CT2737658.backendstorage.cbcountry_000", "5347");
Gefunden : user_pref("CT2737658.backendstorage.cbcountry_001", "5347");
Gefunden : user_pref("CT2737658.backendstorage.cbfirsttime", "5765642041707220323520323031322030383A30323A33372[...]
Gefunden : user_pref("CT2737658.backendstorage.cbopenmamsettings", "30");
Gefunden : user_pref("CT2737658.backendstorage.facebook_mode", "32");
Gefunden : user_pref("CT2737658.backendstorage.facebook_user_locale", "6465");
Gefunden : user_pref("CT2737658.backendstorage.printitgreenstatus", "74727565");
Gefunden : user_pref("CT2737658.backendstorage.rss_pub_config", "7B2273657474696E6773223A7B2269636F6E223A226874[...]
Gefunden : user_pref("CT2737658.backendstorage.rssapp2737658a129531115111807042000000cat0", "253542253742253232[...]
Gefunden : user_pref("CT2737658.backendstorage.rssapp2737658a129531115111807042000000cat1", "253542253742253232[...]
Gefunden : user_pref("CT2737658.backendstorage.rssapp2737658a129531115111807042000000cat2", "253542253742253232[...]
Gefunden : user_pref("CT2737658.backendstorage.rssapp2737658a129531115111807042000000cat3", "253542253742253232[...]
Gefunden : user_pref("CT2737658.backendstorage.rssapp2737658a129531115111807042000000embeddedversion", "322E352[...]
Gefunden : user_pref("CT2737658.backendstorage.rssapp2737658a129531115111807042000000feedsobj", "25374225323263[...]
Gefunden : user_pref("CT2737658.backendstorage.rssapp2737658a129531115111807042000000lastreporttime", "31333232[...]
Gefunden : user_pref("CT2737658.backendstorage.rssapp2737658a129531115111807042000000newfeeds", "6E657746656564[...]
Gefunden : user_pref("CT2737658.backendstorage.rssapp2737658a129531115111807042000000readitemsarr", "2537422532[...]
Gefunden : user_pref("CT2737658.backendstorage.shoppingapp.gk.exipres", "53756E2053657020333020323031322031383A[...]
Gefunden : user_pref("CT2737658.backendstorage.shoppingapp.gk.geolocation", "686F6E67206B6F6E67");
Gefunden : user_pref("CT2737658.backendstorage.url_history0001", "687474703A2F2F6D7967756C6C792E636F6D2F7468726[...]
Gefunden : user_pref("CT2737658.components.1000082", false);
Gefunden : user_pref("CT2737658.components.129259757953821942", false);
Gefunden : user_pref("CT2737658.components.129259760344446300", false);
Gefunden : user_pref("CT2737658.components.129277241445125446", false);
Gefunden : user_pref("CT2737658.components.129277327239188331", false);
Gefunden : user_pref("CT2737658.components.129470085023044272", false);
Gefunden : user_pref("CT2737658.components.129484502394931893", false);
Gefunden : user_pref("CT2737658.components.129484520900913322", false);
Gefunden : user_pref("CT2737658.components.129531105821547783", false);
Gefunden : user_pref("CT2737658.components.129531111962231774", false);
Gefunden : user_pref("CT2737658.components.129531115111807042", false);
Gefunden : user_pref("CT2737658.components.129531115225849625", false);
Gefunden : user_pref("CT2737658.components.129531118085217279", false);
Gefunden : user_pref("CT2737658.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
Gefunden : user_pref("CT2737658.globalFirstTimeInfoLastCheckTime", "Wed Dec 12 2012 09:43:16 GMT+0100");
Gefunden : user_pref("CT2737658.homepageProtectorEnableByLogin", true);
Gefunden : user_pref("CT2737658.initDone", true);
Gefunden : user_pref("CT2737658.isAppTrackingManagerOn", false);
Gefunden : user_pref("CT2737658.isFirstRadioInstallation", false);
Gefunden : user_pref("CT2737658.myStuffEnabled", true);
Gefunden : user_pref("CT2737658.myStuffPublihserMinWidth", 400);
Gefunden : user_pref("CT2737658.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Gefunden : user_pref("CT2737658.myStuffServiceIntervalMM", 1440);
Gefunden : user_pref("CT2737658.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Gefunden : user_pref("CT2737658.oldAppsList", "129258407936791974,129258407936791975,111,1000082,12953110582154[...]
Gefunden : user_pref("CT2737658.revertSettingsEnabled", true);
Gefunden : user_pref("CT2737658.searchProtectorDialogDelayInSec", 10);
Gefunden : user_pref("CT2737658.searchProtectorEnableByLogin", true);
Gefunden : user_pref("CT2737658.testingCtid", "");
Gefunden : user_pref("CT2737658.toolbarAppMetaDataLastCheckTime", "Wed Dec 12 2012 09:43:16 GMT+0100");
Gefunden : user_pref("CT2737658.toolbarContextMenuLastCheckTime", "Wed Dec 12 2012 09:43:16 GMT+0100");
Gefunden : user_pref("CT2737658.usagesFlag", 2);
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2737658/CT2737658[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1129903/1125592/DE", "\"0\"[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/DE", "\"0\"")[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2737658", [...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.13[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.15[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.8.[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.8.[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.9.[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2737658",[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=3/13/20[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2737658&octid=[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"305[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/1344951.xml", "\"aaed5bc142b626e819c5[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/14293310.xml", "\"f65c841a085438ee24d[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/16887175.xml", "\"388f5403f790343253d[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/17151925.xml", "\"4db3e725c06a5109576[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/20536157.xml", "\"f864e7d94229140c390[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/30261067.xml", "\"3d2790fcb366a33e170[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/428333.xml", "\"1d1207ee1d24f0fa9d528[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/816653.xml", "\"1b85081621de8d5d132b2[...]
Gefunden : user_pref("CommunityToolbar.EngineOwner", "");
Gefunden : user_pref("CommunityToolbar.EngineOwnerGuid", "{f999a48b-1950-4d81-9971-79018f807b4b}");
Gefunden : user_pref("CommunityToolbar.EngineOwnerToolbarId", "freeonlineradioplayerrecorder");
Gefunden : user_pref("CommunityToolbar.IsEngineShown", true);
Gefunden : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
Gefunden : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\Fabio\\AppData\\Roaming\\Mozilla\\F[...]
Gefunden : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.15.1.0");
Gefunden : user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://pgcff.pricegong.com/agreement/agree.html#pg_e[...]
Gefunden : user_pref("CommunityToolbar.OriginalEngineOwner", "CT2737658");
Gefunden : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{f999a48b-1950-4d81-9971-79018f807b4b}");
Gefunden : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "freeonlineradioplayerrecorder");
Gefunden : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.pr[...]
Gefunden : user_pref("CommunityToolbar.ToolbarsList", "CT2737658");
Gefunden : user_pref("CommunityToolbar.ToolbarsList2", "CT2737658");
Gefunden : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Tue Nov 29 2011 20:44:22 GMT+01[...]
Gefunden : user_pref("CommunityToolbar.alert.alertEnabled", true);
Gefunden : user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);
Gefunden : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Tue Nov 29 2011 20:44:30 GMT+0100");
Gefunden : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
Gefunden : user_pref("CommunityToolbar.alert.locale", "en");
Gefunden : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
Gefunden : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Tue Nov 29 2011 20:44:21 GMT+0100");
Gefunden : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1313487611");
Gefunden : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
Gefunden : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
Gefunden : user_pref("CommunityToolbar.alert.showTrayIcon", false);
Gefunden : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
Gefunden : user_pref("CommunityToolbar.alert.userId", "8b475057-b078-4bfc-9854-651ff2cf928f");
Gefunden : user_pref("CommunityToolbar.globalUserId", "f12955c5-848b-4c54-887b-a4e750054947");
Gefunden : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Gefunden : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Gefunden : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2737658");
Gefunden : user_pref("CommunityToolbar.killedEngine", true);
Gefunden : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Wed Dec 12 2012 09:43:1[...]
Gefunden : user_pref("CommunityToolbar.notifications.alertEnabled", true);
Gefunden : user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440);
Gefunden : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Wed Dec 12 2012 09:43:26 GMT+010[...]
Gefunden : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
Gefunden : user_pref("CommunityToolbar.notifications.locale", "en");
Gefunden : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
Gefunden : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Wed Dec 12 2012 09:43:17 GMT+0100");
Gefunden : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
Gefunden : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
Gefunden : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
Gefunden : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
Gefunden : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
Gefunden : user_pref("CommunityToolbar.notifications.userId", "862af0f8-4bc2-4354-9b20-29cc88212391");
Gefunden : user_pref("CommunityToolbar.twitter.user_1344951.LastCheckTime", "Wed Nov 30 2011 10:47:14 GMT+0100"[...]
Gefunden : user_pref("CommunityToolbar.twitter.user_14293310.LastCheckTime", "Wed Nov 30 2011 10:47:14 GMT+0100[...]
Gefunden : user_pref("CommunityToolbar.twitter.user_16887175.LastCheckTime", "Wed Nov 30 2011 10:47:14 GMT+0100[...]
Gefunden : user_pref("CommunityToolbar.twitter.user_17151925.LastCheckTime", "Wed Nov 30 2011 10:47:14 GMT+0100[...]
Gefunden : user_pref("CommunityToolbar.twitter.user_20536157.LastCheckTime", "Wed Nov 30 2011 10:47:14 GMT+0100[...]
Gefunden : user_pref("CommunityToolbar.twitter.user_30261067.LastCheckTime", "Wed Nov 30 2011 10:47:14 GMT+0100[...]
Gefunden : user_pref("CommunityToolbar.twitter.user_428333.LastCheckTime", "Wed Nov 30 2011 10:47:14 GMT+0100")[...]
Gefunden : user_pref("CommunityToolbar.twitter.user_816653.LastCheckTime", "Wed Nov 30 2011 10:47:14 GMT+0100")[...]
Gefunden : user_pref("CommunityToolbar.undefined", "");
Gefunden : user_pref("browser.search.defaultthis.engineName", "FreeOnlineRadioPlayerRecorder Customized Web Sea[...]
Gefunden : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2737658&Sea[...]
Gefunden : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2737658&q=");
-\\ Opera v12.11.1661.0
Datei : C:\Users\Fabio\AppData\Roaming\Opera\Opera\operaprefs.ini
[OK] Die Datei ist sauber.
*************************
AdwCleaner[R1].txt - [36308 octets] - [13/12/2012 17:11:39]
########## EOF - C:\AdwCleaner[R1].txt - [36369 octets] ##########
|
|
13.12.2012, 17:18
| #20 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | E-Mail Spam, Tojaner: tr/dldr.karagany.i.58 Versuch bitte alle im adwCleaner-Log erwähnten Einträge (wie zB Conduit) über die Systemsteuerung zu deinstallieren, danach ein neues Suchlog mit dem adwCleaner machen. Reste und was sich nicht deinstallieren lassen will machen wir mit dem adwCleaner weg.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
| Themen zu E-Mail Spam, Tojaner: tr/dldr.karagany.i.58 |
| accounts, antivir, based, dateien, e-mail, festgestellt, folge, gelöscht, hilfe!, home, inhalt, log, mails, miteinander, neustart, nichts, passwort, programm, seite, sichere, spam, tojaner, trojaner, web |
Linear-Darstellung
